KR102063576B1 - Method and apparatus for providing concealed software execution environment based on virtualization - Google Patents

Abstract

The present invention relates to a method and apparatus for providing a hidden software execution environment that supports a secure element, and comprises a domain that is closed and executed without being exposed to the outside using a virtualization-based domain separation technology. By executing security information such as key information provided in the inside of the hidden domain only, it is possible to protect important security information provided by the security element from being exposed to illegal access when used in actual application.

Description

METHOD AND APPARATUS FOR PROVIDING CONCEALED SOFTWARE EXECUTION ENVIRONMENT BASED ON VIRTUALIZATION}

The present invention relates to security in a mobile terminal environment, and in particular, to provide concealed software execution environment supporting a secure element, and is exposed to the outside using a virtualization-based domain separation technology. By constructing a domain that is closed and executed in a closed manner, and by executing security information such as key information provided by the secure element only within the hidden domain, when the sensitive security information provided by the secure element is used in an actual application. A method and apparatus for providing a virtualization-based concealed software execution environment that can be protected from illegal access.

In general, conventional mobile terminal protection technologies are classified into a method using dedicated hardware and a method using software such as malware detection. In particular, the hardware-based method manages important security information, such as cryptographic algorithms and key information, inside a secure element (Secure Elment), which is a separate, closed physical device. have. In addition, when the data inside the security element is used in the terminal, it is exposed to threats caused by malware and hacking, and illegal information leakage is possible.

In addition, security information such as an encryption key provided by the secure element is secured inside the secure element, but when used in the application of the terminal has a problem that is exposed to the application processor and memory as it is. In particular, according to the recent mobile terminal structure composed of an open operating environment, it is exposed to threats of malicious code and hacking, and as a result, the sensitive information provided by the security element may also be leaked.

To this end, in order to protect important information in the existing mobile terminal, a separate secure element is used. However, even if the information is protected by a secure element, when the application of the terminal uses the information, the information resides in the application processor of the terminal and the memory of the terminal.

Therefore, there is an urgent need for a method for providing security and safety of essential data required for a mobile office or financial service.

Korean Patent Laid-Open No. 10-2004-0062874 Publication Date July 09, 2004 discloses a recording medium, a recording method and apparatus, and a technology relating to a reproduction method.

Therefore, in order to solve the problem in the current terminal environment which directly accesses the security element in the open operating environment, a separate execution environment is concealed even when used as an execution environment of the terminal for important security information protected inside the security element. By providing a, it is intended to provide a method in which security information and operations are secured.

In addition, based on the security provided by the security element, it is intended to provide a method and apparatus that can implement the main security operations and services as a high performance application processor.

In addition, the present invention provides a hidden software execution environment supporting a secure element, using a virtualization-based domain separation technology to configure a domain that is running closed without being exposed to the outside, provided by the secure element A method for providing a virtualization-based concealed software execution environment that executes security information such as key information only within a hidden domain, so that sensitive security information provided by a security element can be protected from illegal access when used in a real application. To provide a device.

The present invention described above is an apparatus for providing a virtualization-based hidden benefit software execution environment, and when a security service request is received from an open operating environment that processes a general service in a mobile terminal, the security service request is stored in the security information of the mobile terminal. Storing the security information necessary for the execution of the security service and a hidden operating environment unit for processing the security element unit and providing the result to the open operating unit, and receiving the security service request from the hidden operating unit. And the security element unit for executing the security service using the security information and providing the result to the hidden operating environment unit.

The hidden operating environment unit may establish a session with the secure element unit to transmit the security service request, receive a result according to the execution of the security service from the security unit, and provide the open operating environment unit to the open operating environment unit. do.

In addition, the hidden operating environment unit, if the security service does not need the security information directly, it is characterized in that it does not work with the security element unit, and provides a result by processing the security service.

In addition, the hidden operating environment unit, characterized in that the domain is separated on the basis of the open operating environment and the virtualization.

The hidden operating environment unit may further include a security service request management unit that receives the security service request from the open operating environment unit, a security service execution unit that executes the security service, and a security stored in the security unit. A session manager configured to establish a session with the security unit, a secure element manager searching for the secure element unit for setting up the session, and a command transfer for transmitting the security service request to the session-configured secure element unit when information is required It is characterized by including a wealth.

The open operating environment unit may include an application program unit for managing an application executed in the mobile terminal, and a security service request unit for transmitting the security service request to the hidden operating environment unit.

The secure element unit may include a command processor that receives the security service request requested from the hidden operating environment unit, and a security element execution unit that performs the security service using security information according to the security service request. It features.

In addition, the present invention provides a method for providing a virtualization-based hidden software execution environment, the method comprising: receiving a security service request from the open operating environment unit in the hidden operating environment unit domain separated from the open operating environment unit of the mobile terminal, the security service request And interworking with a security unit that stores security information of the mobile terminal, and providing a result of executing the security service to the open operation unit.

The processing may include: transmitting the security service request to the secure element unit in the hidden operating environment unit, executing the security service using the security information in the secure element unit, and the security. Receiving an execution result of the security service from an element unit.

In the processing step, when the security service does not directly require the security information, the security management unit may execute the security service to calculate an execution result of the security service.

In addition, the hidden operating environment unit, characterized in that the domain is separated on the basis of the open operating environment and the virtualization.

The present invention provides a separate execution environment concealed even when used as an execution environment of a terminal for important security information protected inside the security element in order to solve the problems presented in the current terminal environment that directly accesses the security element in an open operating environment. By providing the advantage that security information and operations are secured.

In addition, the present invention has the advantage that can provide a variety of security functions without a performance limitation through the virtualization-based hidden operating environment with limitations due to the limited computing environment of the security element.

In addition, the present invention can be used to protect the internal data and increase the safety of the terminal in the field of broadcasting and vehicle terminal platform as well as the mobile terminal, in particular software attack in the security field for the software execution and data protection in the mobile terminal environment There is an advantage that can block and protect the terminal platform environment from illegal attacks.

1 is a mobile terminal hardware configuration diagram according to an embodiment of the present invention;
2 shows a general model to which the security element of the invention is applied;
3 is a diagram showing a model to which the hidden software execution environment of the present invention is applied;
4 illustrates the main components of the hidden software execution environment of the present invention;
Fig. 5 is a diagram showing a sequence in which the hidden software execution environment of the present invention is executed.

Hereinafter, with reference to the accompanying drawings will be described in detail the operating principle of the present invention. In the following description of the present invention, when it is determined that a detailed description of a known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, and may be changed according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the specification.

1 illustrates a configuration of a mobile terminal to which an embodiment of the present invention is applied.

As shown in FIG. 1, the hidden software execution environment supporting the secure element proposed by the present invention includes an application processor 200, a memory 300, and a secure element unit 400. Can be.

The technologies of the secure element 400 include a Universal IC Card (UICC) and a secure micro SD card. In an embodiment of the present invention, a specific technology for the secure element 400 is not limited and all It may include a method.

2 illustrates a software configuration of a general mobile terminal.

As shown in FIG. 2, the software operating on the application processor 200 constitutes an open operating environment 500, and information requiring high security, such as a subscriber authentication module, is separated by separate hardware. Operates at 400.

Looking at the structure of the movement of data in this configuration, the application running in the open operating environment 500 has a structure to request or receive data directly from the security element 400. Therefore, the open operating environment 500 having a high possibility of exposure from security threats directly uses the data protected by the security element 400, thereby allowing illegal data leakage. In this case, the data protected by the secure element unit 400 may include all information protected from illegal external access as security information such as an encryption key or an algorithm. In particular, such security information may include user authentication information and private key information used in a public key based algorithm.

3 illustrates a configuration of a mobile terminal according to an embodiment of the present invention.

Referring to FIG. 3 above, the hypervisor 700 is separated on the physical application processor 200 into two independent execution regions of the open operating environment 500 and the hidden operating environment 600. , The secure element 400 is configured to exchange information only in the hidden operating environment 600.

Therefore, the open operating environment 500 in which the terminal application is executed may be provided with a security function provided by the secure element unit 400 only through an interface provided by the hidden operating environment 600.

4 is a diagram illustrating internal components of an open operating environment 500, a hidden operating environment 600, and a security element 400 that constitute a virtualization-based hidden software execution environment providing apparatus according to an exemplary embodiment of the present invention. It is.

Hereinafter, referring to FIG. 4, internal components of the open operating environment 500, the hidden operating environment 600, and the security element 400 will be described in detail.

First, the open operating environment 500 transmits the application 510 and the security functions and services requested by the application 510 to the hidden operating environment 600, and receives a result of the security service requesting unit 520. It may include.

Next, the hidden operating environment unit 600 is a security service request management unit 610 that processes security functions and service requests from the open operating environment unit 500, and the security service execution unit 620 that actually performs the requested security service. It may include. In addition, the hidden operating environment unit 600 is a security element management unit 640 to search for and manage the security element unit 400 to support the secure element unit 400 and session establishment when the requested security service uses a security element. ), A session manager 630 for managing a logical channel with the secure element unit 400, and a command transfer unit 650 for directly delivering a command to the secure element unit 400.

Next, the secure element unit 400 is a command processing unit 420 for receiving a request for a secure element internal function from the hidden operating environment unit 600 and a secure element execution unit 410 for executing an internal function of the actual secure element. And the like.

5 illustrates a signal processing flow of a method for providing a virtualized based hidden software execution environment supporting a secure element according to an embodiment of the present invention. Hereinafter, embodiments of the present invention will be described in detail with reference to FIGS. 3, 4, and 5.

First, the application program 510 of the open operating environment unit 500 of the mobile terminal starts a security function and service request through an interface with the security service request unit 520 (S50). Then, the security service request unit 520 sends the corresponding security service request to the security service request management unit 610 of the hidden operating environment unit 600 through an interface between the open cloud environment unit 500 and the hidden operating environment unit 600. Transfer (S52).

As described above, when a security service request is transmitted from the open operating environment 500 to the hidden operating environment 600, such a security service request is received through the security service request management unit 610 of the hidden operating environment 600. (S54).

In this case, the security service request received by the security service request manager 610 is provided to the security service execution unit 620 through an internal interface.

Then, the security service execution unit 620 receives the security service request provided to the security service request management unit 610, and checks whether the corresponding security service is a security service using the security information protected by the security element unit 400. (S56).

At this time, if the corresponding security service is a security service that does not use the security information protected in the security element unit 400 (S58), the security service execution unit 620 does not work with the security element unit 400 security service After executing (S60), and transmits the result to the open operating environment 500 (S62).

However, when the corresponding security service is a security service using the security information protected by the security element unit 400 (S58), the security service execution unit 620 executes the security service through an interface with the session manager 630. To determine whether the session with the secure element unit 400 to exist in advance to establish a session (S64).

At this time, if the session with the secure element unit 400 for executing the security service does not exist in advance, the session manager 630 establishes a session for executing the secure element unit 400 and the security service. . In this case, in order to establish a session with the secure element unit 400, it is necessary to find the secure element unit 400 provided in the mobile terminal. The secure element manager 640 may request a session from the session manager 630 in the mobile terminal. The security element unit 400 may be detected to provide the information to the session manager 630.

As described above, when the session between the hidden operating environment 600 and the protection element 400 is established, the command transmission unit 650 using the interface between the hidden operating environment 600 and the secure element 400 The security service unit 400 transmits a security service request (S66).

Then, the security service request transmitted from the command transfer unit 650 is received by the command processing unit 420 of the secure element unit 400 (S68), and the command processing unit 420 may execute the secure element execution unit 410 through an internal interface. Forward the corresponding security service request.

Subsequently, the secure element execution unit 410 executes the corresponding security service using the security information protected by the secure element unit 400 according to the security service request transmitted to the command processor 420 (S70).

At this time, when the execution of the security service in the security element execution unit 410 is finished, the result value of the security service is transmitted to the hidden operating environment unit 600 through the opposite path where the security service request was performed (S72), again hidden operation The environment unit 600 is delivered to the application program 510 of the first open operating environment unit 500 that requested the security service (S74).

As described above, in the present invention, in providing a hidden software execution environment that supports a secure element, a virtually-based domain separation technology is used to configure a domain that is closed and executed without being exposed to the outside. By executing security information such as key information provided in the element only inside the hidden domain, it is possible to protect the important security information provided by the secure element from being exposed from illegal access when used in actual application.

Meanwhile, in the above description of the present invention, specific embodiments have been described, but various modifications may be made without departing from the scope of the present invention. Therefore, the scope of the invention should be determined by the claims rather than by the described embodiments.

410: secure element execution unit 420: command processing unit
510: application 520: security service request unit
610: security service request management unit 620: security service execution unit
630: session management unit 640: security element management unit
650 command delivery unit

Claims (11)

When a security service request is received from an open operating environment unit processing a general service in a mobile terminal, the security service request is processed in connection with a security element unit storing security information of the mobile terminal and the result is operated in the open operation. Hidden operating environment provided by the Ministry of Environment,
Storing security information necessary for execution of the security service, and when receiving the security service request from the hidden operating environment unit, executing the security service using the security information and providing the result to the hidden operating environment unit. The security element
Including,
The hidden operating environment department
Checks whether the security service request is a security service using security information protected by the security element unit;
Only when the security service uses the security information, determines whether a session with a security element unit for executing the security service exists,
If the session does not exist, establish a session for executing the security service with the secure element,
Set to interwork with the secure element based on the session,
The hidden operating environment section,
A security service request management unit for receiving the security service request from the open operating environment unit;
A security service execution unit for executing the security service;
A session manager configured to establish a session with the secure element unit when the secure service needs security information stored in the secure element unit;
A secure element manager for searching for the secure element for setting up the session;
A command transfer unit for transmitting the security service request to the session-configured secure element unit
Including,
The secure element management unit
And only when the session establishment request is received from the session management unit, detects the security element unit and provides a result of detecting the security element unit to the session management unit.
The method of claim 1,
The hidden operating environment section,
Set up a session with the secure element unit to transmit the security service request, and receive the result of the execution of the security service from the secure element unit and provide the open operating environment to the virtualization-based hidden software execution Environmental provision device.
The method of claim 1,
The hidden operating environment section,
And providing the result by processing the security service without interworking with the security element unit when the security service does not need the security information directly.
The method of claim 1,
The hidden operating environment section,
Apparatus for providing a virtualization-based hidden software execution environment, characterized in that the domain is separated on the basis of the open operating environment and the virtualization.
delete The method of claim 1,
The open operating environment,
An application unit for managing an application executed in the mobile terminal;
Security service request unit for transmitting the security service request to the hidden operating environment unit
Apparatus for providing a virtualization-based hidden software execution environment comprising a.
The method of claim 1,
The secure element unit,
A command processing unit for receiving the security service request requested from the hidden operating environment unit;
Security element execution unit for performing the security service using the security information in response to the security service request
Apparatus for providing a virtualization-based hidden software execution environment comprising a.
Receiving a security service request from the open operating environment unit in a hidden operating environment unit separated from a domain of the open operating environment of the mobile terminal;
Processing the security service request in association with a secure element unit storing security information of the mobile terminal;
Providing an execution result of the security service to the open operating environment;
Including,
The receiving step
Examines whether the security service request is a security service using security information protected by the security element unit,
Only when the security service uses the security information, determine whether a session with a security element unit for executing the security service exists,
If the session does not exist, establish a session for executing the security service with the secure element,
Set to interwork with the secure element based on the session,
The receiving step
Receiving, by the security service request management unit, the security service request from the open operating environment unit;
Executing, by the security service execution unit, the security service;
Establishing, by the session manager, a session with the secure element unit when the secure service needs security information stored in the secure element unit;
The secure element manager searching for the secure element unit to establish the session;
Transmitting, by the command transfer unit, the security service request to the session establishment secure element unit;
Including,
Searching for the secure element unit
Only when the secure element manager receives the session establishment request from the session manager, the secure element unit detects the secure element unit and provides a result of detecting the secure element unit to the session management unit. How to Provide.
The method of claim 8,
The processing step,
Transmitting, by the hidden operating environment unit, the security service request to the secure element unit;
Executing the security service using the security information in the security element unit;
Receiving a result of executing the security service from the secure element unit;
Method for providing a virtualization-based concealed software execution environment comprising a.
The method of claim 8,
The processing step,
When the security service does not need the security information directly, the hidden operating environment by executing the security service, providing a virtualization-based hidden software execution environment, characterized in that for calculating the execution result of the security service. Way.
The method of claim 8,
The hidden operating environment section,
Method for providing a virtualization-based hidden software execution environment, characterized in that the domain is separated by the open operating environment and the virtualization based.

Images