KR101990959B1 - Black box system for guaranteeing data integrity and method dof cotnrolling the same - Google Patents

Abstract

The present invention relates to a black box system and a control method for ensuring data integrity, and more particularly, to an authentication service apparatus for issuing an encryption key and decrypting black box data encrypted with the encryption key. And a Trusted Platform Module (TPM), stores an encryption key issued by the authentication service device in a security area controlled by the TMP, encrypts black box data input from the outside using the encryption key And a black box terminal device for storing the encrypted black box data in the secure area and transmitting the encrypted black box data to the authentication service device in response to a user request. Accordingly, when implementing the black box system, the encryption key issued by the authentication service institution such as the insurer is stored in the secure area of the terminal implemented by the TPM, the black box data is encrypted using the encryption key, The black box data can not be confirmed except for the authentication service organization that issued the encryption key, thereby ensuring data integrity.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a black box system and a control method thereof,

The present invention relates to a black box system and a control method thereof for ensuring data integrity, and more particularly, to a black box system and a control method thereof that are implemented by a Trusted Platform Module (TPM) The encryption key issued by the certification authority such as an insurer is stored in the secure area, the black box data is encrypted using the encryption key, and the black box data is stored in the secure area. Thus, The present invention relates to a black box system and a control method thereof.

The black box system has been used in aircrafts, ships and so on. In recent years, however, vehicles such as automobiles have been equipped with a black box system, and their use and range are increasing. The black box is known by many names, such as a trip recorder, an accident recorder, and a video accident recorder. However, their purpose is substantially the same in that they store various information of the vehicle (such as driving information, accident information, video and audio information) to assist in the analysis of the accident cause through the stored information when an accident occurs.

There are also systems that have different names, but operate for similar purposes, with these black box systems. For example, monitoring systems such as CCTV. CCTV also collects and stores the surrounding information, but when the event or event occurs, it is used to view the information in it and resolve the case.

On the other hand, there has been a case in which a black box function is implemented as an application of a smart terminal as the realization of a real-time high-quality movie can be realized due to the dramatic performance improvement of a smart terminal. However, automotive black box and smart phone applications have limitations in that they do not guarantee data integrity and confidentiality, but only collect and store information. Integrity refers to the nature of ensuring that data is maintained at the point in time at which it was stored, and that it has not been falsified, altered, or deleted since the time the data was stored.

Therefore, the application of vehicle black box or smart phone can be used as a reference in case of a car accident, but it is not used as legal proof because there is no means to certify that the photographed image is not manipulated.

Korean Patent Publication No. 10-2010-0064958; Accident record system, vehicle using it and its method

SUMMARY OF THE INVENTION The present invention has been conceived to solve the above-mentioned problems, and it is an object of the present invention to provide an encryption key management system, which stores an encryption key issued by a certification authority such as an insurance company, in a security area (Secure World) of a terminal implemented by a TPM (Trusted Platform Module) And black box data is encrypted using the encryption key and stored in the security area so that the black box data can not be verified except for the certification authority that issued the encryption key, thereby ensuring data integrity, and a control method thereof There is a technical problem.

According to an aspect of the present invention, there is provided an authentication service apparatus for issuing an encryption key and decrypting black box data encrypted with the encryption key; And a Trusted Platform Module (TPM), stores an encryption key issued by the authentication service device in a security area controlled by the TMP, encrypts black box data input from the outside using the encryption key And a black box terminal device for storing the encrypted black box data in the secure area and transmitting the encrypted black box data to the authentication service device according to a user's request.

Here, the black box terminal device may store the black box data in the secure area, generate signature data ensuring integrity using the encryption key, and store the black box data together with the black box data in the secure area.

According to another aspect of the present invention, there is provided a black box terminal device including a Trusted Platform Module (TPM) and having a security area controlled by the TMP and a non-security area controlled by the general module A TPM client for receiving a black box image in the non-security area and delivering the black box image to the non-security area; A TPM interface for receiving the black box image from the TPM client in the secure area; An encryption key storage unit of the security area in which an encryption key issued by the authentication service device is stored; And an encryption processing unit for encrypting the black box image input through the TPM interface using the encryption key.

Here, the data storage module may further include a data storage module for storing the encrypted black box image in the secure area.

The encryption processing unit may store the black box data in a data storage module of the secure area, generate signature data ensuring integrity using the encryption key, and store the signature data together with the data storage module.

According to another aspect of the present invention for solving the above-mentioned problems, there is provided a method of authenticating an authentication service, the method comprising: (A) issuing an encryption key to a black box terminal device mounted with a TPM (Trusted Platform Module) (B) storing the encryption key in a secure area controlled by the TMP in the black box terminal device; (C) encrypting black box data input to the black box terminal device using the encryption key and storing the encrypted black box data in the secure area; And (D) decrypting the encrypted black box data using the decryption key in the authentication service apparatus.

According to another aspect of the present invention for solving the above-mentioned problems, there is provided a method of encrypting a certificate, comprising: (A) receiving an encryption key from an authentication service device; (B) storing the encryption key in a secure area controlled by a Trusted Platform Module (TPM); (C) encrypting black box data input from outside with the encryption key; And (D) storing the encrypted black box data in a data storage module of the secure area.

The step (C) may include storing the black box data in a data storage module of the secure area; Generating signature data ensuring integrity with the encryption key; And storing the black box data and the signature data together in the data storage module.

According to another aspect of the present invention, there is provided a method for providing an encryption key, the method comprising: receiving an encryption key from an authentication service device; Storing the encryption key in a secure area controlled by a Trusted Platform Module (TPM); Encrypting black box data input from outside with the encryption key; And storing the encrypted black box data in a data storage module of the secure area, wherein the control method of the black box terminal device is recorded with a program and readable by an electronic device.

The black box system and its control method for ensuring data integrity according to the present invention can be applied to a security area (Secure World) of a terminal implemented by a Trusted Platform Module (TPM) The black box data is stored in the security area by storing the encryption key issued by the certification authority such as the insurance company and the black box data is encrypted using the encryption key so that the black box data can not be confirmed except the certification authority that issued the encryption key, Can be guaranteed.

In addition, the black box system and the control method thereof for ensuring the data integrity of the present invention make it possible to use the black box data as proof of responsible material for the accident by making it impossible to identify the black box data other than the certification authority.

1 is a control block diagram of a terminal device on which a black box system for ensuring data integrity according to an embodiment of the present invention is installed;
FIG. 2 is a control block diagram of a black box system that assures data integrity according to an embodiment of the present invention; FIG.
FIG. 3 is a control flowchart of a black box system for assuring data integrity according to an embodiment of the present invention. FIG.
4 is a control flowchart of a black box system that assures data integrity according to another embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description with reference to the accompanying drawings, the same or corresponding components will be denoted by the same reference numerals, and redundant description thereof will be omitted.

FIG. 1 is a control block diagram of a black box terminal equipped with a black box system for ensuring data integrity according to an embodiment of the present invention. Referring to FIG.

As shown in FIG. 1, a black box terminal device in which a black box system is mounted includes a TPM (Trusted Platform Module) 20 in a hardware platform 10.

The TPM 20 is a SoC (System on Chip) for providing secure key management and platform integrity standardized by TCG (Trusted Computing Group). The Trusted Platform defined by the TCG means that the Platform is operating as intended and that the platform is integrity-protected, and that it can be used safely. To provide such a Trusted Platform, a TPM is required.

The main functions of the TPM defined in the TCG are summarized as the ability to measure and record the integrity of the platform, to prove it externally, to securely store critical data such as keys, and to provide a common library of cryptographic applications .

The terminal to which the TPM is applied is divided into a secure area 140 and a non-security area 100, which are physically located. Therefore, even if the user is not given the right to the data stored in the non-security area, the user can not access the data.

In the non-security area 100, a general-purpose OS 110 that is generally used is executed, and a general-purpose application 130 that is generally used is executed on the general-purpose OS 110. [ The general-purpose OS 110 has a standard interface so that general users can produce various functions that are operated on the general-purpose OS 110 as the general-purpose application 130. In addition, a TPM client 120 may be installed to communicate the input of the non-secure area 100 to the secure area 140.

In the secure area 140, a separate secure OS (Secure OS) 150 that is not open is executed. Since the interface of the secure OS 150 is kept in a confidential state, a security application produced by an authorized provider can be executed. Here, the black box application 200 for realizing the present invention is executed based on the secure OS 150 of the secure area 140. [ The secure area 140 may be provided with a TPM interface 160 for receiving input from the TPM client 120. A secure data storage module (Secure Storage), a secure file system (Secure File System) .

2 is a control block diagram of a black box system that assures data integrity according to an embodiment of the present invention.

2, the black box system includes a TPM client 120 for inputting and receiving black box data from various devices operating in the non-security area 100, black box data from the TPM client 120 in a secure area 140, a black box application 200 for collecting and storing input black box data, and a data storage module 240 for storing black box data.

The TPM client 120 includes various devices for detecting various information such as voice, video, and the like. For example, the TPM client 120 includes a video photographing apparatus 101 for photographing an image, a sound detection apparatus 102 for detecting voice, a signal tone, etc., an acceleration sensor 103 for detecting a speed change, An angular velocity sensing device 104 for sensing angular velocity and an impact sensing device 105 for sensing a collision.

The black box application 200 includes an encryption key storage unit 220 and an encryption processing unit 230. Accordingly, the black box application 200 can store and manage the encryption key in the storage device of the secure area, encrypt the black box image using the encryption key, and store it in the storage device of the secure area.

In the encryption key storage unit 220, an encryption key issued by an authentication service device such as an insurance company, a financial institution, or a government agency is stored. The encryption key may be set to a secret key scheme or a public key scheme.

The encryption processing unit 230 encrypts the inputted black box data using the encryption key, and stores the encrypted data in the data storage module 240.

The TPM interface 160 transfers the encryption key input from the TPM client 120 to the black box application 200. Accordingly, the black box application 200 stores the encryption key in the encryption key storage unit 220 provided in the security area 140.

The encryption key may be issued from the authentication service device when the black box application 200 is installed, and the encryption key stored in the security area 140 may be kept confidential to the user. The encryption key may include a secret key or a public key that can be recognized by the authentication service device and the black box terminal equipped with the TPM.

The TPM interface 160 transfers the black box data input from the TPM client 120 to the black box application 200.

The black box application 200 encrypts the black box data using the encryption key through the encryption processing unit 230 and stores the encrypted black box data in the data storage module 240 provided in the security area 140.

Here, in the encrypted recording of the black box image, the entire recorded image is encrypted and stored, or the black box image is stored, and then the signature data for ensuring integrity is stored in the stored black box image together with the black box image . Here, if the encrypted black box image is stored in the security area 140, it is possible to prevent leakage of the black box image and provide a stronger security function.

According to this configuration, the stored black box data can be decrypted after verifying the integrity of the corresponding black box data using the decryption key held by the certification authority. When the signature data generated by the encryption key is stored without encrypting the black box data, the integrity of the black box data stored together can be verified by checking the signature data with the decryption key.

As described above, according to the present invention, the integrity of the black box data is guaranteed by issuing an encryption key from a certification authority such as an insurance company, a financial corporation, or a government agency, and data can be decrypted only through a decryption key held by the certification authority, It increases the reliability of the data recorded in the box and makes it possible to use it to cover accidental material.

FIG. 3 is a control flowchart of a black box system for ensuring data integrity according to an embodiment of the present invention. In order to implement a black box function, a corresponding application is installed and then a black box application 200 transmits black box data And a process of processing it.

The user installs the black box application 200 in the secure area 140 of the black box terminal providing the TPM function (S110). Here, the black box terminal device in which the black box application 200 is installed may include a smart phone, a black box terminal, or the like that can be used as a black box.

Thereafter, an encryption key is issued from the authentication service device and stored in the secure area 140 (S120). Here, the authentication service apparatus may be applied to a public authority such as an insurance company, a financial institution, or a government agency. The encryption key can be a secret key or a public key. If the public key is used, the security effect can be improved as compared with the secret key.

When the black box function of the black box application 200 is executed, the encryption processing unit 230 encrypts the black box data using the encryption key stored in the encryption key storage unit 220 (S130).

The encrypted black box data is stored in the data storage module 240 of the secure area 140 (S140).

Here, the encryption processing unit 230 encrypts the black box data using the encryption key and stores the black box data in the data storage module 240, or stores the black box data in the data storage module 240, The signature data for ensuring integrity with the encryption key can be generated and stored together with the black box data.

FIG. 4 is a control flowchart of a black box system for ensuring data integrity according to another embodiment of the present invention, illustrating a control process between a user of a black box system and an authentication service apparatus for authenticating the integrity of black box data.

The black box application 200 is installed in the secure area 140 of the black box terminal device (S210). Here, the black box terminal device supports the TPM function, and the black box terminal device in which the black box application 200 is installed may include a smart phone, a black box terminal, or the like that can be used as a black box.

Thereafter, the authentication service apparatus is requested to issue an encryption key (S220). The issuing request of the encryption key may be requested at the time of installing the black box application 200, or may be requested after the installation of the application is completed.

The authentication service device issues an encryption key to the corresponding black box terminal device (S230), and stores the issued encryption key and user information (S240). Here, the authentication service device may be a server such as an insurance company, a financial institution, or a government agency capable of providing an authentication service. The encryption key can be a secret key or a public key. If the public key is used, the security effect can be improved as compared with the secret key.

The black box terminal device stores the encryption key issued by the authentication service device in the security area 140 (S235).

Thereafter, the black box application 200 collects and stores the black box data (S250). The black box application 200 may encrypt the collected black box data using an encryption key and store the encrypted black box data in the data storage module 240 of the secure area 140. In addition, after storing the black box data in the data storage module 240, the signature data for ensuring integrity with the encryption key for the stored black box data can be generated and stored together with the black box data.

Thereafter, when it is necessary to check the black box data, the black box terminal apparatus requests the authentication service apparatus side to confirm the black box data (S260).

The authentication service device decrypts the black box data using the decryption key for the encryption key issued to the user (S270).

As described above, when black box data needs to be checked due to an accident or the like, the certification authority retrieves the encrypted black box data. The certification authority can verify the integrity of the corresponding black box data using the decryption key held therein, decrypt the black box data, analyze the black box data, and use the decrypted key to determine the responsibility of the accident.

Here, if the black box data is stored without being encrypted, and the signature data is generated with the encryption key and stored together with the black box data, the authentication service apparatus decrypts the signature data using the decryption key to thereby verify the integrity of the stored black box data Can be verified.

As described above, the black box system and its control method for ensuring the data integrity of the present invention can be applied to a security area (Secure World) of a terminal implemented by a TPM when a black box system is implemented, Key is stored and the black box data is encrypted using the encryption key and stored in the security area so that the black box data can not be verified except for the certification authority that issued the encryption key to ensure the integrity of the data.

In addition, for the black box data stored in the black box terminal device, black box data other than the certification authority issuing the encryption key can not be confirmed, so that the certification authority can guarantee the integrity of the black box data, .

According to another aspect of the present invention, there is provided a method of authenticating an authentication service, comprising: receiving an encryption key from an authentication service device; Storing the encryption key in a secure area controlled by a Trusted Platform Module (TPM); Encrypting black box data input from outside with the encryption key; And storing the encrypted black box data in a data storage module of the secure area, the control method of the black box terminal device can be recorded in a program and recorded in a recordable medium readable by an electronic device.

The control method of such a black box terminal device can be formed by a program, and the codes and code segments constituting the program can be easily deduced by a programmer in the field. Further, the program relating to the control method of the black box terminal device may be stored in an information storage medium (Readable Media) readable by the electronic device, and read and executed by the electronic device.

Thus, those skilled in the art will appreciate that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. It is therefore to be understood that the embodiments described above are to be considered in all respects only as illustrative and not restrictive. The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

The present invention stores an encryption key issued by a certification institution such as an insurance company, a financial institution, or a national institution in a security domain (Secure World) of a terminal implemented by a Trusted Platform Module (TPM) The black box data is encrypted and stored in the security area so that the black box data can not be verified except for the certification authority issuing the encryption key to ensure the integrity of the data and the control method thereof .

100: non-security area 110: general-purpose OS
120: TPM client 130: Universal Application
140: security zone 150: security OS
160: TPM interface 200: black box application
220: encryption key storage unit 230: encryption processing unit
240: Data storage module

Claims (9)

delete delete A black box terminal device having a Trusted Platform Module (TPM) mounted thereon, a security area controlled by the TPM and running a secure OS, and a non-security area controlled by the general purpose module,
A TPM client for receiving black box data in the non-security area and transferring the black box data to the secure area;
A TPM interface for receiving the black box data from the TPM client in the secure area;
An encryption key storage unit of the security area in which an encryption key issued by the authentication service device is stored; And
And an encryption processing unit for encrypting the black box data input through the TPM interface using the encryption key,
Wherein the non-security area receives or manages the black box data regardless of the TPM,
Wherein the TPM operates only when data input is requested to the secure area. delete ◈ Claim 5 is abandoned due to the registration fee. The method of claim 3,
The encryption processing unit,
Storing the black box data in a data storage module of the secure area, generating signature data ensuring integrity using the encryption key, and storing the signature data together with the data storage module. delete (A) receiving an encryption key from an authentication service device;
(B) storing the encryption key in a secure area controlled by a Trusted Platform Module (TPM) and in which a secure OS is executed;
(C) encrypting black box data input from outside with the encryption key; And
(D) storing the encrypted black box data in a data storage module of the secure area,
The black box data is distinguished from the security area and is controlled by a general purpose module. The black box data is first input to a non-security area where a general-purpose OS is executed,
Wherein the TPM operates only when data input is requested to the secure area. ◈ Claim 8 is abandoned due to the registration fee. 8. The method of claim 7,
The step (C)
Storing the black box data in a data storage module of the secure area;
Generating signature data ensuring integrity with the encryption key; And
And storing the black box data and the signature data together in the data storage module. delete

Images