KR101688863B1 - Hacking defense apparatus and method - Google Patents

Abstract

A hacking defense apparatus and method thereof are disclosed. The hacking defensive device comprises: a reader; And a jammer which starts operation when a proximity of the electronic tag is detected by the reader, and generates a jamming signal of a designated frequency band, wherein, when the jammer starts to operate, The necessary information can be obtained.

Description

[0001] Hacking defense apparatus and method [0002]

The present invention relates to a hacking defense apparatus and a method thereof that are capable of originally blocking an attack by an intermediate attacker occurring in connection with a user terminal and performing settlement or authentication.

With the proliferation of smart devices supporting Near Field Communication (NFC) services, NFC-based services have begun to attract attention, and the development of applications and services closely related to their lives is rapidly increasing. Currently, overseas mobile payment services such as Google's Google Wallet service are spreading, and it is expected to change from using existing credit card to using smart device. However, if the security is not taken into consideration, the vulnerability of the related service and security threats should be identified and solved.

In the case of Google Wallet service, it was reported that it was vulnerable to relay attack, so it was important to prepare a defense against relay attack. When a relay attack is applied to an NFC system, it is difficult for an attacker to defend against a relay attack because an attacker only has to transmit a request and a response between a normal user device and a payment device even if there is any authentication security protocol in the system. Also, in case of current relay attack, it can not be defended by encryption at the application layer alone.

1 is a relay attack model applicable to an actual NFC service. If the attackers Ma and Mb have only a separate communication channel between the attacker and the attacker, the message can only be successful between the user and the payment reader.

Conventionally, a multi-element authentication method using a Distance Bounding Protocol, a password, a sound information, and a position coordinate has been proposed to detect such a relay attack.

However, the boundary-distance protocol can be difficult to implement on smart devices with limited distance and resource constraints, multi-factor authentication inconveniences in terms of implementation cost and compatibility issues, and the need for additional authentication behavior by the user .

The present invention provides a hacking defense apparatus and a method thereof, which can fundamentally block an intermediary attack that occurs in connection with a user terminal and perform settlement or authentication.

Accordingly, it is an object of the present invention to provide a hacking defense apparatus and method for enhancing user reliability of a payment or authentication system based on short-range wireless communication.

According to an aspect of the present invention, there is provided a hacking defense apparatus capable of originally blocking an intermediate attack that occurs in connection with a user terminal and performing settlement or authentication.

A hacking defensive apparatus according to an embodiment of the present invention includes a reader; And a jammer which starts operation when a proximity of the electronic tag is detected by the reader, and generates a jamming signal of a designated frequency band, wherein, when the jammer starts to operate, The necessary information can be obtained.

Here, the jammer may generate a radio interference signal in a frequency band different from an operating frequency band in which the reader and the electronic tag operate.

The information processing apparatus may further include a communication unit for transmitting the acquired information to the server and receiving a payment or authentication completion message from the server, wherein the jammer can be terminated when the completion message is received.

Here, the reader may be an NFC (Near Field Communication) reader.

According to another aspect of the present invention, there is provided a hacking defensive apparatus comprising: a reader; An interface physically coupled to an external jammer; And a processor for outputting a control signal to start operation of the external jammer in a frequency band different from an operation frequency of the reader when the proximity approach of the electronic tag is detected by the reader, So that information necessary for settlement or authentication can be obtained from the electronic tag.

Here, the processor can control to output, in the form of audiovisual information, a guidance message to inform that secure settlement or authentication through interference of the jamming can be performed when the jammer is started.

According to another aspect of the present invention, there is provided a hacking defense method capable of originally blocking an intermediate attack that occurs in connection with a user terminal and performing a payment or authentication.

According to an embodiment of the present invention, there is provided a method of preventing hacking due to an intermediate attack in a hacking defense apparatus having a reader, the method comprising: detecting proximity of an electronic tag through the reader; Generating a radio interference signal in a designated frequency band when the proximity of the electronic tag is sensed; And acquiring information necessary for settlement or authentication from the electronic tag through the reader when the radio interference signal is generated.

Here, if the reader is operated according to the NFC protocol, the designated frequency band may be a 2.4 GHz band.

The method may further include stopping the generation of the radio wave interference signal when the settlement or authentication is completed using the acquired information.

Here, the method may further include outputting a guide message to the user in the form of audiovisual information to inform the user that secure payment or authentication can be performed through interference with the radio wave interference signal.

The hacking protection apparatus and method according to an embodiment of the present invention are advantageous in that it is possible to prevent an intermediary attack that occurs in the course of performing settlement or authentication in cooperation with a user terminal.

Accordingly, the present invention has an advantage that the reliability of a user for a payment or authentication system based on short-range wireless communication can be enhanced.

1 is a diagram illustrating a relay attack in a conventional billing system;
BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a system and method for preventing hacking,
3 is a block diagram schematically illustrating an internal configuration of a hacking defense apparatus using radio wave interference according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention is capable of various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. It is to be understood, however, that the invention is not to be limited to the specific embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In the following description of the present invention, detailed description of known related arts will be omitted when it is determined that the gist of the present invention may be unnecessarily obscured. In addition, numerals (e.g., first, second, etc.) used in the description of the present invention are merely an identifier for distinguishing one component from another.

Also, in this specification, when an element is referred to as being "connected" or "connected" with another element, the element may be directly connected or directly connected to the other element, It should be understood that, unless an opposite description is present, it may be connected or connected via another element in the middle.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 2 is a view schematically showing a configuration of a system for defending hacking by using radio wave interference during payment or authentication according to an embodiment of the present invention. Referring to FIG.

Referring to FIG. 2, a system according to an embodiment of the present invention includes a user terminal 210 and a hacking defense apparatus 220.

The user terminal 210 includes an electronic tag and is a device for requesting settlement or authentication using information necessary for settlement or authentication recorded in the electronic tag.

Here, the information necessary for payment or authentication may be payment information or authentication information.

Further, the electronic tag may be an NFC chip or an NFC-based tag.

2, it is assumed that the hacking defense apparatus 220 and the user terminal 210 interlock with each other to perform payment or authentication. However, in addition to the user terminal 210, information (for example, payment information, It is natural that the present invention can be equally applied to an electronic tag storing authentication information.

For example, the type of the user terminal 210 may be a portable terminal incorporating an NFC chip such as a mobile communication terminal, a tablet, or the like.

The hacking defense apparatus 220 has a reader 310 and functions to scan an electronic tag through the reader 310 and acquire information necessary for settlement or authentication from the electronic tag.

In addition, the hacking defense apparatus 220 can generate a radio wave interference signal in a designated frequency band before acquiring information necessary for settlement or authentication from the electronic tag (i.e., when proximity of the electronic tag is detected). Thereby, there is an advantage that a relay attack between the electronic tag and the reader 310 can be originally blocked. This will be described in more detail with reference to FIG. 3 below.

FIG. 3 is a block diagram schematically illustrating an internal configuration of a hacking defense apparatus using radio wave interference according to an embodiment of the present invention. Referring to FIG. 3, a hacking defense apparatus 220 according to an exemplary embodiment of the present invention includes a reader 310, a jammer 315, a communication unit 320, a memory 325, and a processor 330 can do. Here, the communication unit 320, the memory 325, and the processor 330 may be modularly included in the reader 310.

The reader 310 is a means for acquiring information necessary for settlement or authentication from the corresponding electronic tag as the user terminal 210 having the electronic tag approaches.

Before the reader 310 obtains information necessary for settlement or authentication from the user terminal 210 in accordance with the proximity of the user terminal 210 having the electronic tag, And outputs the detected proximity to the processor 330.

More specifically, the reader 310 can send out a wireless carrier to detect the presence of a nearby electronic tag within a specified distance. When the electronic tag is detected, the reader 310 generates an event (or a trigger) for the electronic tag and outputs it to the processor 330.

Accordingly, the processor 330 can control the jammer 315 to start driving.

The jammer 315 functions to generate a radio wave interference signal of a predetermined frequency band. Here, the radio wave interference signal generated by the jammer 315 may be a frequency band different from the operation frequency band of the reader 310. [

For example, when the reader 310 operates on an NFC basis, the jammer 315 may generate a radio interference signal in the 2.4 GHz band.

It is assumed that the jammer 315 generates the radio wave interference signal in the frequency band of 2.4 GHz by limiting the case where the reader 310 operates on the NFC basis in the embodiment of the present invention, It is needless to say that the frequency band of the jamming signal generated by the jammer 315 can also be different.

The jammer 315 is started under the control of the processor 330 and can terminate the operation under the control of the processor 330. [

For example, when the proximity of the user terminal 210 having the electronic tag is detected by the reader 310, the jammer 315 starts operation under the control of the processor 330 and outputs a radio interference signal of the designated frequency band . Then, the reader 310 can obtain information (for example, payment information, authentication information) necessary for payment or authentication from the user terminal 210 having the electronic tag and output the acquired information to the processor 330.

The processor 330 transmits the acquired information (for example, payment information and authentication information) through the communication unit 320 to a server (not shown), and when a response is received from the server, the jammer 315 operates Can be controlled.

In this way, intermediary attacks such as relay attacks are fundamentally blocked between the reader 310 and the user terminal 210 (more specifically, the electronic tag) so that the payment or authentication requested by the user terminal 210 can be safely performed There is an advantage.

The communication unit 320 transmits a payment or authentication request message including the information (for example, payment information and authentication information) acquired by the reader 310 to the server and receives a corresponding response message from the server do.

The memory 325 stores various algorithms, applications, various information, and the like necessary to defend against a meson attack such as a relay attack based on a radio wave interference.

Processor 330 may be coupled to internal components (e.g., reader 310, jammer 315, communication unit 320, memory 325, etc.) of hacking defense device 220 in accordance with an embodiment of the present invention. As shown in FIG.

The processor 330 controls the jammer 315 to start operation when the proximity of the user terminal 210 having the electronic tag is detected by the reader 310. When the payment or authentication is completed, To terminate the operation.

In addition, when the jammer 315 starts driving and starts generating the radio interference signal, the processor 330 can control to display it in the form of audiovisual information. Thereby, it is possible to inform the user that the settlement or authentication function can be performed safely through radio interference, thereby increasing the trust of the user.

3, the hacking defense apparatus 220 according to an exemplary embodiment of the present invention mainly includes a jammer 315. However, according to another embodiment of the present invention, the jammer 315 is connected to an external device .

4 is a flowchart illustrating a hacking protection method according to an embodiment of the present invention. It is assumed that the user terminal 210 having the NFC chip is placed close to the NFC payment reader in order to facilitate understanding and explanation. At this time, it is assumed that the NFC payment reader is a device that includes the hacking defense apparatus 220 as one configuration.

In step 410, the hacking defense apparatus 220 determines whether the user terminal having the electronic tag or the electronic tag is detected proximity.

More specifically, the hacking defense apparatus 220 searches for a radio field (RF field) around the reader 310 through the provided reader 310 and transmits a radio field if the radio field is not present, and receives a response therefrom And may sense proximity of the user terminal 210 including the electronic tag (i.e., the NFC chip).

If the proximity approach of the user terminal 210 having the electronic tag is detected, in step 315, the hacking defense apparatus 220 generates a radio interference signal in the designated frequency band. For example, the hacking defibrillator 220 operates the jammer 315 and the jammer 315 generates a jamming signal of a frequency band not used by the hacking defibrillator 220.

For example, when the reader 310 provided in the hacking defense apparatus 220 operates based on NFC, the jammer 315 can generate a radio wave interference signal in the 2.4 GHz band.

In step 420, the hacking defense apparatus 220 obtains information necessary for payment or authentication from the electronic tag based on the user terminal 210 having the electronic tag and the NFC standard protocol, and then requests payment or authentication from the server .

Depending on the implementation method, the hacking defense device 220 may include a configuration for validity check for payment or authentication. In this case, the hacking defense apparatus 220 does not transmit the information obtained through the electronic tag provided in the user terminal 210 to the server for settlement or authentication, You can also check the validity.

However, in the case of a general settlement or authentication system, the settlement information or the authentication information obtained through the reader 310 is processed in a separate server. Therefore, in the embodiment of the present invention, the payment information or the authentication information is transmitted to the server I will explain it mainly.

In step 425, the hacking defendant device 220 stops generating the radio wave interference signal when a completion response to the payment or authentication request is received from the server.

That is, the hacking defense apparatus 220 can terminate the operation of the jammer 315 when a completion response to the settlement or authentication request is received from the server.

For example, the hacking defense apparatus 220 terminates the operation of the jammer 315 when a predetermined time has elapsed (for example, 10 seconds elapsed) after requesting the settlement or authentication to stop the generation of the jamming signal It is possible.

For example, the hacking defenses 220 can be propagated (e.g., within 1 meter of the NFC) by a distance between the reader 310 and the terminal 210, depending on the location of the installation or implementation It is also possible to control the disturbance distance.

As described above, before obtaining necessary information through the electronic tag through the reader 310 provided in the hacking defense apparatus 220, a frequency commonly used in short-range wireless communication (for example, Bluetooth, Wifi, etc.) It is advantageous in that a relay attack or the like can be fundamentally blocked by acquiring necessary information from the electronic tag after transmitting the radio wave interference signal of the band.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the following claims And changes may be made without departing from the spirit and scope of the invention.

210:
220: Hacking defensive device

Claims (10)

Reader; And
And a jammer which starts operation when the proximity of the electronic tag is detected by the reader and generates a jamming signal of a frequency band that does not overlap with the operation frequency band in which the reader and the electronic tag operate,
The reader acquires information necessary for settlement or authentication from the electronic tag while the jammer is started and the radio wave interference signal is generated,
Wherein the reader detects proximity of the electronic tag according to whether or not the electronic tag receives a response signal transmitted to the reader as a response to a wireless carrier transmitted from the reader.
The method according to claim 1,
The frequency band of the radio wave interference signal may be,
Wherein the RFID tag is a frequency band used for an intermediate attack against communication between the reader and the electronic tag.
The method according to claim 1,
Further comprising a communication unit for transmitting the obtained information to a server and receiving a payment or authentication completion message from the server,
And when the completion message is received, the jammer ends the operation.
The method according to claim 1,
Wherein the reader is an NFC (Near Field Communication) reader.
Reader;
An interface physically coupled to an external jammer; And
And a processor for outputting a control signal for controlling operation of the jammer to generate a jamming signal of a frequency band that does not overlap with the operation frequency of the reader when the proximity approach of the electronic tag is detected by the reader,
The reader acquires information necessary for settlement or authentication from the electronic tag while the jammer is started and the radio wave interference signal is generated,
Wherein the reader senses the proximity of the electronic tag according to whether the electronic tag receives a response signal transmitted to the reader as a response to the wireless carrier transmitted from the reader.
6. The method of claim 5,
Wherein the processor controls to output, when the jammer starts operating, a guidance message guiding that secure settlement or authentication through interference is possible in the form of audiovisual information.
A method for preventing hacking due to an intermediate attack in a hacking defense apparatus having a reader,
Detecting proximity of the electronic tag through the reader;
Generating a radio interference signal of a frequency band that does not overlap with an operating frequency band in which the reader and the electronic tag operate when the proximity of the electronic tag is sensed; And
And obtaining information necessary for settlement or authentication from the electronic tag through the reader while the radio wave interference signal is generated when the radio interference signal is generated,
Wherein the step of sensing proximity of the electronic tag comprises sensing a proximity of the electronic tag according to whether the electronic tag receives a response signal transmitted to the reader as a response to the wireless carrier transmitted from the reader, Way.
8. The method of claim 7,
Wherein when the reader is operated according to a NFC (Near Field Communication) protocol, the frequency band of the radio wave interference signal is 2.4 GHz band.
8. The method of claim 7,
And stopping the generation of the radio wave interfering signal when the settlement or authentication is completed using the obtained information.
8. The method of claim 7,
Further comprising the step of outputting, in the form of audiovisual information, a guidance message informing that secure settlement or authentication via interference of the radio wave is generated when the radio wave interfering signal is generated.

Images