KR102176118B1 - Method for integrity mutual verification in a resource rich environment - Google Patents

Abstract

An integrity verification method according to an embodiment includes the steps of creating a block chain by connecting hash blocks generated from respective electronic devices; Verifying the integrity of the code by comparing the hash block generated for the code with the block chain related to the electronic device; And performing mutual verification on the hash block associated with the electronic device from devices other than the electronic device as the integrity of the code is verified.

Description

Integrity Mutual Verification Method in an Environment with Sufficient Resources {METHOD FOR INTEGRITY MUTUAL VERIFICATION IN A RESOURCE RICH ENVIRONMENT}

The following description relates to a technique for verifying integrity, and to a method and apparatus for mutual verification of integrity in an environment with sufficient resources.

In general, a blockchain is a non-forgery distributed storage created and managed by a peer-to-peer (P2P) network. Blockchain refers to a collection of data blocks created by transactions (a unit operation that cannot be split between two parties) connected one after another in the form of a chain. Different from the previous block Since the block is successively encrypted and the data agreed by more than half of the users is recognized as real data, once recorded data cannot be forged or altered. A typical application example of a blockchain is bitcoin, a decentralized electronic money that records the transaction process of cryptocurrency. The block chain can store confirmed transaction details that occur between users for a certain period of time. And, many users each have a copy of the blockchain, and transaction details can be made public. In this way, only transaction details agreed by more than half of the users are recognized as real data, and can be stored in blocks to be permanently stored.

For example, Korean Patent Laid-Open No. 10-2018-0089682 relates to a technology for verifying the integrity of data based on a blockchain, grouping data in which at least one data is stored, chaining elements of the grouped data, and chaining It discloses a configuration for storing data in a blockchain.

In order to detect forgery/modification of core codes that detect abnormal behaviors including state machines, it is possible to provide a self-checking method to prevent the detection of abnormal behaviors from being neutralized by verifying the integrity of the executed code.

For this, a self-checking method using blockchain can be provided. Specifically, it is possible to provide a method in which an electronic device verifies the integrity of a code through a block chain, and mutual verification is performed from other devices included in the same group as the electronic device.

The integrity verification method performed by the integrity verification device includes: creating a block chain by connecting hash blocks generated from respective electronic devices; Verifying the integrity of the code by comparing the hash block generated for the code with the block chain related to the electronic device; And performing mutual verification on the hash block associated with the electronic device from devices other than the electronic device as the integrity of the code is verified.

In the step of creating a block chain by connecting the hash blocks generated from the respective electronic devices, at least one or more groups are generated by grouping a plurality of devices, and each included in each of the generated at least one or more groups Generating a hash block by hashing their own code, and receiving a hash block generated by hashing codes for the other devices from other devices included in each of the generated at least one or more groups It may include.

The step of creating a block chain by connecting the hash blocks generated from each of the electronic devices includes the own hash block and the received other devices between electronic devices included in each of the generated at least one or more groups. It may include the step of storing the hash block, which hashed the code for, by connecting it to a blockchain.

The step of verifying the integrity of the code through the comparison of the generated block chain with the hash block generated for the code includes generating a hash block for the code being executed or loaded for execution in the electronic device, and the It may include comparing the hash block generated in the electronic device with the hash block in the block chain owned by the electronic device.

The step of performing mutual verification on the hash block associated with the electronic device from devices other than the electronic device as the integrity of the code is verified may include: a hash block generated by the electronic device for mutual verification to the electronic device Integrity is transmitted to other devices included in the same group as and the hash block corresponding to the electronic device in each block chain for the other devices from the other devices and the hash block transmitted from the electronic device are compared. It may include a step in which verification is performed.

The integrity verification apparatus includes: a block chain generation unit that generates a block chain by connecting hash blocks generated from respective electronic devices; An integrity verification unit verifying the integrity of the code by comparing the hash block generated for the code with the block chain related to the electronic device; And a mutual verification unit that performs mutual verification on a hash block related to the electronic device from devices other than the electronic device as the integrity of the code is verified.

The blockchain generation unit generates at least one group by grouping a plurality of devices, and generates a hash block in which each device included in each of the generated at least one group hashed its own code, and the A hash block generated by hashing codes for the other devices may be received from other devices included in each of the at least one generated group.

The blockchain generation unit may connect and store the own hash block between electronic devices included in each of the generated at least one or more groups and a hash block obtained by hashing codes for the other devices through a block chain. have.

The integrity verification unit may generate a hash block for a code that is being executed in the electronic device or loaded for execution, and can compare a hash block generated in the electronic device with a hash block in a block chain owned by the electronic device. have.

The mutual verification unit transmits the hash block generated by the electronic device for mutual verification to other devices included in the same group as the electronic device, and transmits the hash block generated by the electronic device to the other devices in each block chain for the other devices. Integrity verification may be performed by comparing a hash block corresponding to the electronic device with a hash block transmitted from the electronic device.

By utilizing the blockchain, the integrity of the code related to the verification target can be mutually authenticated by members in the group to detect the manipulation of the code.

1 is a block diagram illustrating a configuration of an integrity verification apparatus according to an embodiment.
2 is a flowchart illustrating an integrity verification method in an integrity verification apparatus according to an embodiment.
3 is a method of applying self-checking logic using a block chain according to an embodiment.
FIG. 4 is a diagram for explaining an operation of verifying integrity in a method of applying a self-check logic using a block chain according to an embodiment.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings.

In the embodiment, normal and abnormal behaviors are specified as rules, and new and variant malicious codes are detected by tracking behaviors that violate the specified rules. In other words, the subject that detects abnormal behavior is a state machine to which specified rules are applied, and detects malicious codes by tracking abnormal conditions. Accordingly, the code of the state machine that checks the state is the core code that detects abnormal behavior, and the execution code that operates sensors and actuators for operating other electronic devices is also the core code, and the corresponding code is forged/modified. In this case, there is a possibility that the proposed rule specification-based malicious behavior detection method will be neutralized. Accordingly, in the embodiment, the operation of the self-checking logic to prevent the detection of abnormal behaviors from being neutralized is performed by verifying the integrity of the code executed to detect forgery/modification of the core code that detects abnormal behavior including the state machine. I will explain.

1 is a block diagram illustrating a configuration of an integrity verification apparatus according to an embodiment, and FIG. 2 is a flowchart illustrating an integrity verification method in an integrity verification apparatus according to an embodiment.

The processor of the integrity verification apparatus 100 may include a block chain generation unit 110, an integrity verification unit 120, and a mutual verification execution unit 130. The components of the process of the integrity verification apparatus 100 may be expressions of different functions performed by the processor according to a control command provided by a program code stored in the integrity verification apparatus. The processor and components of the processor may control the integrity verification device to perform steps 210 to 230 included in the integrity verification method of FIG. 2. In this case, the processor and the components of the processor may be implemented to execute an instruction according to the code of the operating system included in the memory and the code of at least one program.

The processor may load the program code stored in the program file for the integrity verification method into the memory. For example, when a program is executed in the integrity verification device, the processor may control the integrity verification device to load the program code from the program file into the memory under the control of the operating system. At this time, each of the processor and the block chain generation unit 110, the integrity verification unit 120, and the mutual verification execution unit 130 included in the processor execute a command of a corresponding part of the program code loaded into the memory, and follow the steps. It may be different functional expressions of a processor for executing (210 to 230).

In step 210, the block chain generation unit 110 may generate a block chain by connecting hash blocks generated from respective electronic devices. The block chain generator 110 may create at least one group by grouping a plurality of devices. The block chain generator 110 may generate a hash block in which devices included in each of the at least one group generated have their own code hashed. Blockchain generation unit 110 generates a hash block that hashed codes for other devices from other devices included in each of the at least one or more generated groups, and receives hash blocks for the generated other devices. I can. The blockchain generation unit 110 may store a hash block of its own between electronic devices included in each of the generated at least one group and a hash block obtained by hashing codes for other devices transmitted through a block chain. .

In step 220, the integrity verification unit 120 may verify the integrity of the code by comparing the hash block generated for the code with the block chain related to the electronic device. The integrity verification unit 120 may generate a hash block for a code that is being executed for integrity verification in the electronic device or is loaded for execution. The integrity verification unit 120 may compare a hash block generated in an electronic device with a hash block in a block chain owned by the electronic device.

In step 230, as the integrity of the code is verified, the mutual verification performing unit 130 may perform mutual verification on the hash block related to the electronic device from devices other than the electronic device. The mutual verification performing unit 130 may transmit the hash block generated by the electronic device to other devices included in the same group as the electronic device for mutual verification. The mutual verification performing unit 130 may perform integrity verification by comparing a hash block corresponding to an electronic device in each block chain for other devices from other devices with a hash block transmitted from the electronic device. The mutual verification performing unit 130 may perform integrity verification on other devices existing in the group other than the device that has transmitted the hash group.

3 is a method of applying self-checking logic using a block chain according to an embodiment.

The method using the blockchain is when an electronic device (e.g., UAV) satisfies the performance for complex computation, secures sufficient storage space to store a lot of information, and when multiple electronic devices are operated, each entity This can be applied when cross-verification is possible because communication is possible, and when the integrity of the code is periodically/aperiodically verified in a situation in which an electronic device is operating rather than a situation in which power is applied. Hereinafter, a UAV (unmanned aerial vehicle) as an electronic device will be described as an example.

In order to prove that the code has not been forged or altered by an attacker while the UAV is running, a block chain to verify the integrity of the running code is created and stored in a secure storage. Upon receiving a request to verify the integrity of the code, the code currently running can be verified by comparing it with information stored in the blockchain.

If an attacker attacks a specific UAV and modulates it with a code that maintains a normal state, it is possible to detect that the code has been altered because the block information of the other UAV and the block information of the modulated code are different. The verification procedure for this will be described.

Blockchain is different from the existing method of sharing certain information only with the parties, even if one information is manipulated by all the participating entities, not the parties, the reliability of information based on the common information of other participating entities. Verification is possible. Due to this characteristic, it is possible to more effectively verify the integrity by sharing the code requiring integrity verification by participating entities and mutually verifying the code during verification. In particular, even if only the code of the attack target is manipulated, it is possible to verify integrity because the information of other participating entities has not been manipulated.In order to manipulate the code, the code of at least 51% of the participating entities must be manipulated. Since integrity verification can be disabled, a very safe method can be provided from a defensive aspect. For this reason, the blockchain can be used as a method to verify the integrity of state machine codes and UAV operating codes that must be protected in a situation where multiple UAVs are operated.

As shown in FIG. 3, UAVs may constitute a group 300. In a state in which such a group is formed, each of the UAVs 301, 302, and 303 may generate and have a hash block of codes for other UAVs including itself.

For example, UAV A 301 may generate a hash block for its code (the code of UAV A 301). UAV A 301 may store a hash block for the code of UAV A 301. UAV A 301 may deliver a hash block for the code of UAV A 301 to other UAV B 302, UAB C 303 in the group in which UAV A 301 is included. UAV B 302 and UAB C 303 may receive the hash block of UAV A 301 transmitted from UAV A 301. UAV B 302 and UAV C 303 may store a hash block for the code of UAV A 301.

In addition, the UAV B 302 can also generate a hash block for the code of the UAV B 302. UAV B 302 may store a hash block for the code of UAV B 302. UAV B 302 may pass a hash block for the code of UAV B 302 to UAV A 301 and UAV C 303. UAV A 301 and UAV C 303 may receive a hash code for UAV B 302. At this time, UAV A (301) and UAV C (303) connect the hash block for the code of UAV B (302) to the hash block for the existing UAV A (301) code in a chain form to create a blockchain. I can.

Likewise, UAV C 303 may also generate a hash block for the code of UAV C 303. UAV C 303 may deliver a hash block for the code of UAV C 302 to UAV A 301 and UAV B 303. UAV A 301 and UAV B 302 may receive the hash block of UAV C 303 delivered from UAV C 303. At this time, UAV A (301) and UAV B (302) may connect the hash block of UAV C (303) to a previously created block chain. In other words, UAV A (301) and UAV B (302) are in the block chain that connects the hash block for the code of UAV A (301) and the hash block of the code of UAV B (302). You can create a blockchain with more hash blocks connected.

This process can be applied equally to all entities in a group, and a blockchain can be created by connecting hash blocks of entities in the group. Also, the same process may be applied to other groups other than the above group.

In this way, if all UAVs 301, 302, 303 in the same group create a hash block for each code and connect it to the blockchain, all UAVs 301, 302, 303 are hash blocks for the other's code. Will be in possession. All UAVs 301, 302, 303 can verify the integrity of their own code or the code of other UAVs through a hash block connected through a blockchain.

For example, in order to verify the integrity of a code running in or loaded for execution in UAV A 301, UAV A 301 may generate a hash block of the code. UAV A (301) can verify the integrity by comparing the hash block of the generated code with its own blockchain owned by UAV A (301), that is, a hash block connected to the blockchain of UAV A (301). have. For example, the UAV A 301 may determine whether the hash block is a matched hash block by matching the hash block in which the code for verifying the integrity is hashed and the hash block existing in the blockchain of the UAV A 301.

In addition, for mutual verification, the UAV A 301 may transmit a hash block of the code for verifying the integrity generated by the UAV A 301 to the UAV B 302 and UAV C 303 existing in the same group. . UAV B 302 and UAV C 303 may receive a hash block from UAV A 301. UAV B (302) and UAV C (303) correspond to UAV A (301) in the blockchain owned by UAV B (302) and UAV C (303) respectively. Integrity can be verified against a hash block.

Therefore, even if an attacker takes control of UAV A (301) and manipulates the code that is executed and generates and manipulates the hash block stored in UAV A (301) by creating a hash block corresponding to the manipulated code, UAV B (302) and UAV C It is detected that the code of UAV A (301) has been tampered because 303 cannot prove its integrity through mutual verification because it holds a hash block of the code that is executed on the pure UAV A (301) that has not been manipulated through each blockchain. It is possible to do.

When an attacker attempts to attack a specific UAV and modulates some of the code related to the state machine to indicate that it is always in the correct state, a method for verifying the integrity in the self-check logic using the proposed blockchain is shown in FIG. I will explain.

FIG. 4 is a diagram for explaining an operation of verifying integrity in a method of applying self-check logic using a block chain according to an embodiment.

In FIG. 4, an attacker attempts to infiltrate one of the UAVs 301, 302, and 303 performing a mission as a group 300 to prevent it from performing the mission, and for this purpose, periodically stop the operation of the motor. It is assumed that an attack is attempted to make it impossible to operate by inserting and manipulating code.

Step 1. As an example, the attacker 400 can insert a code that periodically stops the motor every second by operating a timer in the code of the UAV B 302 that controls the motor. In addition, it is possible to manipulate a code that always maintains a normal state of the motor so as not to detect an abnormal behavior attempted by the attacker 400.

Step 2. UAVs (301, 302, 303) in the group can verify the integrity based on their own blockchain at a specific period or when the leader of the group 300 requests the member to verify the integrity. . In this case, the leader of the group may be randomly selected, for example, one of each UAV included in the group, and the leader of the group may be changed periodically or aperiodically. In addition, other UAVs other than the group leader become members.

UAV A 301 may generate a hash block corresponding to the code of UAV A 301 and transmit it to UAV B 302 and UAV C 303. UAV B 302 and UAV C 303 may receive a hash block transferred from UAV A 301. UAV B (302) and UAV C (303) are the hash blocks corresponding to UAV A (301) in the blockchain owned by UAV B (302) and UAV C (303) and the hash received from UAV A (301). Integrity can be verified by comparing blocks. If UAV B (302) and UAV C (303) are UAV A (301), UAV B (302) and UAV C (303) have a hash block and UAV corresponding to UAV A (301) in the blockchain owned respectively. As the hash block received from A 301 is determined to match, the attack has not been attempted, and since there is no code manipulation, it is determined to be innocent.

Step 3. UAV C 303 can generate a hash block corresponding to the code of UAV C 303 and transfer it to UAV A 301 and UAV B 302. UAV A 301 and UAV B 302 may receive a hash block transferred from UAV C 303. UAV A (301) and UAV B (302) are a hash block corresponding to UAV C (303) in the blockchain owned by UAV A (301) and UAV B (302) and a hash received from UAV C (303). Integrity can be verified by comparing blocks. UAV A (301) and UAV B (302) are a hash block corresponding to UAV C (303) in the blockchain owned by UAV A (301) and UAV B (302) and a hash received from UAV C (303). Upon determining that the blocks match, UAV C determines that the attack has not been attempted and is innocent because there is no code manipulation.

Step 4. UAV B 302 can generate a hash block corresponding to the code of UAV B 302 and transfer it to UAV A 301 and UAV C 303. UAV A 301 and UAV C 303 may receive a hash block transferred from UAV B 302. UAV A (301) and UAV C (303) are a hash block corresponding to UAV B (302) in the blockchain owned by UAV A (301) and UAV C (303) and a hash received from UAV B (302). Integrity can be verified by comparing blocks. At this time, UAV A (301) and UAV C (303) are transmitted from the hash block corresponding to UAV B (302) and UAV B (302) in the blockchain owned by UAV A (301) and UAV C (303) respectively. It can be determined that the received hash blocks do not match. The UAV B 302 has been manipulated by the attacker 400 to periodically stop the motor and the code that always maintains the state of the motor, so the result of the generated hash block is different from the normal hash block. In other words, for example, if the hash block of the pure code is H2, the hash block of the manipulated code is HX. Accordingly, UAV A (301) and UAV C (303) that received HX from UAV B (302) are UAV B (302) existing in the blockchain owned by UAV A (301) and UAV C (303). As a result of comparing the hash block of H2, it is recognized that the code of the UAV B 302 does not satisfy the integrity by detecting that the two blocks are different.

The method using the blockchain according to an embodiment can detect the manipulation of the code by mutually authenticating the integrity of the code for the verification target by members in the group, and through this self-check to verify the integrity of the essential code to be protected. Logic can be realized.

The apparatus described above may be implemented as a hardware component, a software component, and/or a combination of a hardware component and a software component. For example, the devices and components described in the embodiments are, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA). , A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions, such as one or more general purpose computers or special purpose computers. The processing device may execute an operating system (OS) and one or more software applications executed on the operating system. In addition, the processing device may access, store, manipulate, process, and generate data in response to the execution of software. For the convenience of understanding, although it is sometimes described that one processing device is used, one of ordinary skill in the art, the processing device is a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that it may include. For example, the processing device may include a plurality of processors or one processor and one controller. In addition, other processing configurations are possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of these, configuring the processing unit to behave as desired or processed independently or collectively. You can command the device. Software and/or data may be interpreted by a processing device or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. Can be embodyed in The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

As described above, although the embodiments have been described by the limited embodiments and drawings, various modifications and variations are possible from the above description by those of ordinary skill in the art. For example, the described techniques are performed in a different order from the described method, and/or components such as a system, structure, device, circuit, etc. described are combined or combined in a form different from the described method, or other components Alternatively, even if substituted or substituted by an equivalent, an appropriate result can be achieved.

Therefore, other implementations, other embodiments, and claims and equivalents fall within the scope of the claims to be described later.

Claims (10)

In the integrity verification method performed by the integrity verification device,
Creating a block chain by connecting hash blocks generated from respective electronic devices;
Verifying the integrity of the code by comparing the hash block generated for the code and a block chain related to the electronic device; And
The step of performing mutual verification on the hash block related to the electronic device from devices other than the electronic device as the integrity of the code is verified
Including,
The step of creating a block chain by connecting the hash blocks generated from each of the electronic devices,
By grouping a plurality of devices, at least one or more groups are created, each device included in each of the at least one or more groups generates a hash block in which their code is hashed, and the generated at least one group A hash block generated by hashing codes for the other devices from other devices included in each of is received, and a hash block of its own between electronic devices included in each of the generated at least one or more groups, and the The step of storing the hash block that hashed the codes for other devices delivered by connecting it to a blockchain.
Including,
The step of verifying the integrity of the code through comparison of a hash block generated for the code and a block chain related to an electronic device,
Generating a hash block for a code running in the electronic device or loaded for execution, and comparing the hash block generated in the electronic device with the hash block in the blockchain owned by the electronic device
Including,
As the integrity of the code is verified, the step of performing mutual verification on the hash block related to the electronic device from devices other than the electronic device,
For mutual verification, the hash block generated by the electronic device is transmitted to other devices included in the same group as the electronic device, and corresponding to the electronic device in each block chain from the other devices to other devices Integrity verification is performed by comparing the hash block to be performed and the hash block transmitted from the electronic device.
Including,
The integrity verification method,
A device randomly selected from each of the devices included in the group becomes the leader of the group, other devices other than the leader of the group become members, and the leader of the group requests members to verify integrity , Integrity is verified based on the block chain of the requested members from the requested members
Integrity verification method comprising a. delete delete delete delete In the integrity verification device,
A block chain generator for generating a block chain by connecting hash blocks generated from respective electronic devices;
An integrity verification unit for verifying the integrity of the code by comparing the hash block generated for the code and the block chain related to the electronic device; And
A mutual verification unit that performs mutual verification on the hash block related to the electronic device from devices other than the electronic device as the integrity of the code is verified
Including,
The blockchain generation unit,
By grouping a plurality of devices, at least one or more groups are created, each device included in each of the at least one or more groups generates a hash block in which their code is hashed, and the generated at least one group A hash block generated by hashing codes for the other devices from other devices included in each of is received, and a hash block of its own between electronic devices included in each of the generated at least one or more groups, and the Including storing a hash block that hashed codes for other devices received by connecting it with a blockchain,
The integrity verification unit,
Generating a hash block for a code running on the electronic device or loaded for execution, and comparing the hash block generated in the electronic device with the hash block in the blockchain owned by the electronic device,
The mutual verification unit,
For mutual verification, the hash block generated by the electronic device is transmitted to other devices included in the same group as the electronic device, and corresponding to the electronic device in each block chain from the other devices to other devices Including that the hash block and the hash block transmitted from the electronic device are compared to perform integrity verification,
The integrity verification device,
A device randomly selected from each of the devices included in the group becomes the leader of the group, other devices other than the leader of the group become members, and the leader of the group requests members to verify integrity , Integrity is verified based on the block chains of the requested members from the requested members.
Integrity verification device.
delete delete delete delete

Images