KR102256330B1 - Method of data transfer in electronic device - Google Patents

Abstract

In a data transmission method of an electronic device including a secure module including a processor and a secure element, an application processor, and a sensor, the processor switches the operation mode to the bypass mode, and the application processor and the secure element perform mutual authentication. And, if mutual authentication is successful, the application processor and the secure element generate a session key, the processor switches the operation mode to the normal mode, the secure module encrypts the sensing data provided from the sensor using the session key, The processor transmits the encrypted sensing data to the application processor, and the application processor obtains the sensing data by decrypting the encrypted sensing data using the session key.

Description

Data transmission method of electronic device {METHOD OF DATA TRANSFER IN ELECTRONIC DEVICE}

The present invention relates to an electronic device, and more particularly, to a data transmission method of the electronic device.

Recently, as various functions are discovered in electronic systems such as mobile devices, the frequency of processing security data such as personal information and cryptographic keys in electronic systems is increasing.

However, there is a problem in that the security data is leaked when an external attack occurs in the process of transmitting and receiving security data between components of an electronic system.

Therefore, there is a need for a method for safely transmitting and receiving secure data between components of an electronic system.

An object of the present invention for solving the above problems is to provide a data transmission method of an electronic device capable of safely transmitting and receiving security data.

Another object of the present invention is to provide an electronic device implementing the data transmission method.

In order to achieve an object of the present invention described above, in a data transmission method of an electronic device including a secure module, an application processor, and a sensor including a processor and a secure element according to an embodiment of the present invention, the When the processor switches the operation mode to the bypass mode, the application processor and the secure element perform mutual authentication, and the mutual authentication is successful, the application processor and the secure element generate a session key, and the processor The operation mode is switched to a normal mode, the secure module encrypts sensing data provided from the sensor using the session key, the processor transmits the encrypted sensing data to the application processor, and the application processor Decrypts the encrypted sensing data using the session key to obtain the sensing data.

In an embodiment, the processor and the secure element included in the secure module may be formed in one package.

The processor may be connected to the application processor through an external terminal of the package, and the secure element may be connected to the processor through an internal bus formed inside the package.

The processor performs communication with the application processor in the normal mode, bypasses a signal received from the application processor in the bypass mode and provides it to the secure element, and bypasses the signal received from the secure element. It can be provided to the application processor.

In one embodiment, the switching of the operation mode to the bypass mode by the processor comprises: transmitting, by the application processor, a bypass request signal to the processor, and the processor responding to the bypass request signal. And changing the operation mode from the normal mode to the bypass mode to form a bypass channel connecting the application processor and the secure element.

In one embodiment, the switching of the operation mode to the bypass mode by the processor comprises: transmitting, by the application processor, a bypass request signal and a unique number of the application processor to the processor, the processor Determining whether the unique number of the application processor exists in the unique number table in response to the bypass request signal, and when the unique number of the application processor exists in the unique number table, the processor selects the operation mode. And forming a bypass channel connecting the application processor and the secure element by switching from the normal mode to the bypass mode.

In one embodiment, the secure element stores a first private key, a public key of a Certificate Authority (CA), and a first certificate issued by the certification authority, and the application processor stores a second private key, the The public key of the certification body and the second certificate issued by the certification body can be stored.

The step of performing mutual authentication between the application processor and the secure element may include: transmitting, by the application processor, a certificate request signal to the secure element, the secure element receiving the first certificate in response to the certificate request signal. Transmitting to a processor, verifying the first certificate by the application processor using the public key of the certification authority, and when the application processor succeeds in verifying the first certificate, included in the first certificate Obtaining the first public key of the secure element, the application processor transmitting a verification request signal and the second certificate to the secure element, the secure element in response to the verification request signal to disclose to the certification authority Verifying the second certificate using a key, and when the secure element succeeds in verifying the second certificate, obtaining a second public key of the application processor included in the second certificate can do.

The generating of the session key by the application processor and the secure element includes: the secure element generating a random value and transmitting the random value to the application processor, the application processor: a one-time private key and a one-time public key Generating a pair, encrypting the random value and the one-time public key using the second private key, and transmitting the encrypted random value and the encrypted one-time public key to the secure element, the secure element Decrypts the encrypted random value using the second public key, and when the decrypted random value matches the random value, decrypts the encrypted one-time public key using the second public key Obtaining a one-time public key, the secure element calculating a secret value based on the first private key and the one-time public key, generating the session key and a first authentication value based on the secret value, and the Transmitting a first authentication value to the application processor, and the application processor calculating the secret value based on the first public key and the one-time private key, and generating a second authentication value based on the secret value And, when the second authentication value and the first authentication value match, generating the session key based on the secret value.

In one embodiment, the step of encrypting the sensing data provided from the sensor by the secure module using the session key comprises: receiving the sensing data from the sensor by the processor, the secure element by the processor Transmitting a session key request signal to the secure element, transmitting the session key to the processor in response to the session key request signal, and encrypting the sensing data by the processor using the session key It may include.

In one embodiment, the step of encrypting the sensing data provided from the sensor by the secure module using the session key comprises: receiving the sensing data from the sensor by the processor, the secure element by the processor Transmitting an encryption request signal and the sensing data to the secure element, encrypting the sensing data using the session key in response to the encryption request signal by the secure element, and the secure element transmitting the encrypted sensing data to the It may include transmitting to the processor.

In an embodiment, the sensor may be included in the secure module.

In one embodiment, the application processor includes a trusted execution environment (TEE) and a rich operating system execution environment (REE), and the application processor is configured through the trusted execution environment. Communication with the secure module may be performed.

In order to achieve the object of the present invention described above, in the data transmission method of an electronic device including a secure module and an application processor including a processor and a secure element according to an embodiment of the present invention, the processor When the operation mode is switched to the bypass mode, the application processor and the secure element perform mutual authentication, and the mutual authentication is successful, the application processor and the secure element generate a session key, and the processor performs the operation. The mode is switched to a normal mode, the secure module encrypts the security data stored in the secure element using the session key, the processor transmits the encrypted security data to the application processor, and the application processor sends the The encrypted security data is decrypted using a session key to obtain the security data.

In one embodiment, the step of encrypting the secure data stored in the secure element by the secure module using the session key comprises: transmitting, by the processor, a data request signal to the secure element, the secure element Transmitting the session key and the security data to the processor in response to a data request signal, and encrypting the security data by the processor using the session key.

In one embodiment, the step of encrypting the secure data stored in the secure element by the secure module using the session key comprises: transmitting, by the processor, a data request signal to the secure element, the secure element Encrypting the security data using the session key in response to a data request signal, and transmitting the encrypted security data to the processor by the secure element.

In order to achieve the object of the present invention described above, an electronic device according to an embodiment of the present invention includes a secure module and an application processor. The secure module includes a first private key, a public key of a certificate authority (CA), a secure element for storing a first certificate issued by the certificate authority, and a processor. The application processor stores a second private key, a public key of the certification authority, and a second certificate issued by the certification authority. While the processor is operating in the bypass mode, the application processor and the secure element perform mutual authentication using the first certificate, the second certificate, and the public key of the authentication authority, and the mutual authentication is successful. In this case, the application processor and the secure element generate a session key using the first private key and the second private key. After the processor switches to the normal mode, the secure module encrypts security data using the session key, the processor transmits the encrypted security data to the application processor, and the application processor transmits the session key. The encrypted security data is decrypted to obtain the security data.

In one embodiment, the processor and the secure element included in the secure module are formed as one package, the processor is connected to the application processor through an external terminal of the package, and the secure element is inside the package. It may be connected to the processor through an internal bus formed in the.

The processor performs communication with the application processor in the normal mode, bypasses a signal received from the application processor in the bypass mode and provides it to the secure element, and bypasses the signal received from the secure element. It can be provided to the application processor.

In an embodiment, the electronic device may further include a sensor that generates the security data and provides it to the processor.

In the data transmission method of an electronic device according to embodiments of the present invention, important data can be safely transmitted and received between an application processor and a secure module including a secure element (SE) while reducing communication overhead. have.

1 is a block diagram illustrating an electronic device according to an embodiment of the present invention.
2 is a flowchart illustrating a data transmission method of an electronic device according to an embodiment of the present invention.
FIG. 3 is a flowchart illustrating an example of a step in which the processor of FIG. 2 converts an operation mode to a bypass mode.
FIG. 4 is a flowchart illustrating another example of a step in which the processor of FIG. 2 switches the operation mode to the bypass mode.
5A and 5B are flowcharts illustrating an example of a step of performing mutual authentication between the application processor and the secure element of FIG. 2.
6A and 6B are flowcharts illustrating an example of a step in which the application processor and the secure element of FIG. 2 generate a session key.
FIG. 7 is a flowchart illustrating an example of a step in which the secure module of FIG. 2 encrypts sensing data provided from a sensor using a session key.
FIG. 8 is a flowchart illustrating another example of a step in which the secure module of FIG. 2 encrypts sensing data provided from a sensor using a session key.
9 is a block diagram illustrating an example of the electronic device illustrated in FIG. 1.
10 is a block diagram illustrating an electronic device according to an embodiment of the present invention.
11 is a flowchart illustrating a data transmission method of an electronic device according to an embodiment of the present invention.
12 is a flowchart illustrating an example of a step of encrypting security data stored in a secure element by the secure module of FIG. 11 using a session key.
13 is a flowchart illustrating another example of a step of encrypting security data stored in a secure element by the secure module of FIG. 11 using a session key.
14 is a block diagram illustrating an electronic device according to an embodiment of the present invention.
15 is a block diagram illustrating an electronic system according to an embodiment of the present invention.
16 is a diagram illustrating an example in which the electronic system of FIG. 15 is implemented as a smart phone.

With respect to the embodiments of the present invention disclosed in the text, specific structural or functional descriptions have been exemplified for the purpose of describing the embodiments of the present invention only, and the embodiments of the present invention may be implemented in various forms. It should not be construed as being limited to the embodiments described in.

Since the present invention can be modified in various ways and has various forms, specific embodiments will be illustrated in the drawings and described in detail in the text. However, this is not intended to limit the present invention to a specific form disclosed, it should be understood to include all changes, equivalents, or substitutes included in the spirit and scope of the present invention.

Terms such as first and second may be used to describe various elements, but the elements should not be limited by the terms. The terms may be used for the purpose of distinguishing one component from another component. For example, without departing from the scope of the present invention, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element.

When a component is referred to as being "connected" or "connected" to another component, it is understood that it may be directly connected or connected to the other component, but other components may exist in the middle. It should be. On the other hand, when a component is referred to as being "directly connected" or "directly connected" to another component, it should be understood that there is no other component in the middle. Other expressions describing the relationship between components, such as "between" and "directly between" or "adjacent to" and "directly adjacent to" should be interpreted as well.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In the present application, terms such as "comprise" or "have" are intended to designate the existence of a set feature, number, step, action, component, part, or combination thereof, but one or more other features or numbers. It is to be understood that the possibility of addition or presence of, steps, actions, components, parts, or combinations thereof is not preliminarily excluded.

Unless otherwise defined, all terms used herein including technical or scientific terms have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs. Terms as defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning of the related technology, and should not be interpreted as an ideal or excessively formal meaning unless explicitly defined in the present application. .

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings. The same reference numerals are used for the same elements in the drawings, and duplicate descriptions for the same elements are omitted.

1 is a block diagram illustrating an electronic device according to an embodiment of the present invention.

Referring to FIG. 1, the electronic device 10 includes a secure module 100, an application processor 200, and a sensor 300.

The secure module 100 includes a processor 110 and a secure element (SE) 120.

The secure element 120 includes a first certificate CT1 corresponding to the secure element 120 issued by a certificate authority (CA), a public key CA_PB of the certificate authority, and a first of the secure element 120. Save the private key (PR1). The first public key PB1 corresponding to the first private key PR1 is included in the first certificate CT1.

In one embodiment, the secure element 120 may include a function capable of defending against attacks from outside, for example, a lab attack. A function of preventing external attacks included in the secure element 120 may be implemented in various forms. Accordingly, the first certificate CT1, the public key CA_PB of the certification authority, and the first private key PR1 may be safely stored in the secure element 120.

The processor 110 is connected to the secure element 120 through an internal bus INT_BUS.

The secure module 100 including the processor 110 and the secure element 120 is formed in one package. For example, the processor 110 and the secure element 120 may include a system in package (SiP), a through silicon via (TSV), a multi-chip package (MCP), Package-on-package (Package on Package; PoP) may be formed as a single package.

The processor 110 is directly connected to the application processor 200 through an external bus EXT_BUS connected to an external terminal of the package corresponding to the secure module 100.

The application processor 200 includes a public key CA_PB of the certification authority, a second certificate CT2 corresponding to the application processor 200 issued by the certification authority, and a second private key PR2 of the application processor 200 Save it. The second public key PB2 corresponding to the second private key PR2 is included in the second certificate CT2.

As described above, the secure module 100 including the processor 110 and the secure element 120 is formed in one package, and the internal bus INT_BUS connecting the processor 110 and the secure element 120 is Since it is formed inside the package, the internal bus INT_BUS is not exposed to the outside of the package. Therefore, when performing data communication between the processor 110 and the secure element 120, there is no need to form a secure channel between the processor 110 and the secure element 120, so the electronic device 10 The communication overhead of can be effectively reduced.

In one embodiment, the processor 110 may operate in a normal mode or a bypass mode.

In the bypass mode, the processor 110 may form a bypass channel BP_CH connecting the application processor 200 and the secure element 120. Accordingly, in the bypass mode, the processor 110 bypasses the signal received from the application processor 200 through the bypass channel BP_CH and provides the bypass channel to the secure element 120, and the signal received from the secure element 120 May be provided to the application processor 200 by bypassing through the bypass channel BP_CH.

In the normal mode, the processor 110 may deactivate the bypass channel BP_CH and perform direct communication with the application processor 200.

The sensor 300 generates sensing data SSD and provides it to the processor 110.

In one embodiment, the sensor 300 may be a biosensor that detects biometric information. For example, the sensor 300 may sense a fingerprint, an iris pattern, a vein pattern, a heart rate, a blood sugar, and the like, and generate sensing data SSD corresponding to the sensed information and provide it to the processor 110. However, in this specification, the sensor 300 is not limited to a biosensor, and the sensor 300 may be any sensor such as an illumination sensor, an acoustic sensor, an acceleration sensor, or the like.

Although the sensor 300 has been described as being external to the secure module 100 with reference to FIG. 1, the sensor 300 may be included in the secure module 100 according to embodiments. In this case, the processor 110, the secure element 120, and the sensor 300 may be formed in one package.

As described later, the secure module 100 encrypts the sensing data (SSD) provided from the sensor 300 and transmits it to the application processor 200, and the application processor 200 encrypts the data provided from the secure module 100. By decoding the sensed data to obtain the sensed data (SSD), the electronic device 10 may improve the security level of data transmission.

2 is a flowchart illustrating a data transmission method of an electronic device according to an embodiment of the present invention.

The data transmission method shown in FIG. 2 may be performed through the electronic device 10 of FIG. 1.

In FIG. 2, a method of safely transmitting sensing data (SSD) generated from the sensor 300 by the secure module 200 to the application processor 200 is illustrated.

Hereinafter, a data transmission method of the electronic device 10 will be described with reference to FIGS. 1 and 2.

Referring to FIG. 2, in the data transmission method of the electronic device 10 according to the present invention, the processor 110 switches the operation mode from the normal mode to the bypass mode (step S100). In an embodiment, the processor 110 may switch the operation mode from the normal mode to the bypass mode in response to a request of the application processor 200.

FIG. 3 is a flowchart illustrating an example of a step S100 of converting an operation mode to a bypass mode by the processor of FIG. 2.

Referring to FIG. 3, the application processor 200 may transmit a bypass request signal to the processor 110 (step S110).

The processor 110 connects the application processor 200 and the secure element 120 by switching the operation mode from the normal mode to the bypass mode in response to the bypass request signal received from the application processor 200. A bypass channel BP_CH may be formed (step S120). Therefore, the processor 110 bypasses the signal received from the application processor 200 through the bypass channel BP_CH to provide the bypass channel to the secure element 120, and provides the signal received from the secure element 120 to the bypass channel ( BP_CH) may be bypassed and provided to the application processor 200.

FIG. 4 is a flowchart illustrating another example of a step S100 of converting an operation mode to a bypass mode by the processor of FIG. 2.

Referring to FIG. 4, the application processor 200 may transmit a bypass request signal and a unique number of the application processor to the processor 110 (step S130).

The processor 110 may pre-store a unique number table that stores a unique number of a device that is allowed to communicate. The processor 110 may determine whether a unique number of the application processor 200 exists in the unique number table in response to the bypass request signal received from the application processor 200 (step S140).

When the unique number of the application processor 200 exists in the unique number table (step S140; YES), the processor 110 switches the operation mode from the normal mode to the bypass mode, A bypass channel BP_CH connecting the secure element 120 may be formed (step S150). Therefore, the processor 110 bypasses the signal received from the application processor 200 through the bypass channel BP_CH to provide the bypass channel to the secure element 120, and provides the signal received from the secure element 120 to the bypass channel ( BP_CH) may be bypassed and provided to the application processor 200.

On the other hand, if the unique number of the application processor 200 does not exist in the unique number table (step S140; No), the processor 110 maintains the operation mode in the normal mode and communicates with the application processor 200 Can be terminated.

Referring back to FIG. 2, the application processor 200 and the secure element 120 perform mutual authentication (step S200). In one embodiment, the application processor 200 and the secure element 120 may perform mutual authentication using a first certificate (CT1), a second certificate (CT2), and a public key (CA_PB) of the certification authority. have.

5A and 5B are flowcharts illustrating an example of a step S200 of performing mutual authentication between the application processor and the secure element of FIG. 2.

5A and 5B, the application processor 200 may transmit a certificate request signal to the secure element 120 (step S210).

The secure element 120 may transmit the first certificate CT1 stored in the secure element 120 to the application processor 200 in response to the certificate request signal received from the application processor 200 (step S220). .

The application processor 200 verifies the first certificate CT1 received from the secure element 120 using the public key CA_PB of the certification authority stored in the application processor 200 (step S230), and the It can be determined whether the verification has been successful (step S240).

When the first certificate CT1 stored in the secure element 120 and the second certificate CT2 stored in the application processor 200 are issued by different certification authorities, the verification may fail. If the verification fails (step S240; No), the application processor 200 may determine that the mutual authentication has failed and terminate communication with the secure element 120.

On the other hand, when the first certificate CT1 stored in the secure element 120 and the second certificate CT2 stored in the application processor 200 are issued by the same certification authority, the verification may be successful. If the verification is successful (step S240; YES), the application processor 200 may obtain the first public key PB1 of the secure element 120 included in the first certificate CT1 (step S250).

Thereafter, the application processor 200 may transmit a verification request signal and a second certificate CT2 stored in the application processor 200 to the secure element 120 (step S260).

The secure element 120 is received from the application processor 200 using the public key CA_PB of the certification authority stored inside the secure element 120 in response to the verification request signal received from the application processor 200. The second certificate CT2 may be verified (step S270), and it may be determined whether the verification was successful (step S280).

When the first certificate CT1 stored in the secure element 120 and the second certificate CT2 stored in the application processor 200 are issued by different certification authorities, the verification may fail. If the verification fails (step S280; No), the secure element 120 may determine that the mutual authentication has failed and terminate communication with the application processor 200.

On the other hand, when the first certificate CT1 stored in the secure element 120 and the second certificate CT2 stored in the application processor 200 are issued by the same certification authority, the verification may be successful. If the verification is successful (step S280; YES), the secure element 120 may obtain a second public key PB2 of the application processor 200 included in the second certificate CT2 (step S290). In this case, the mutual authentication may be determined to be successful.

When the mutual authentication is successful through the operation as described above with reference to FIGS. 5A and 5B, the secure element 120 and the application processor 200 may each obtain the other's public key.

Referring back to FIG. 2, when the mutual authentication fails (step S300; No), communication between the application processor 200 and the secure element 120 is terminated.

On the other hand, when the mutual authentication is successful (step S300; Yes), the application processor 200 and the secure element 120 generate a session key (step S400). As will be described later, the session key may be used to encrypt and decrypt sensing data (SSD) generated from the sensor 300. In an embodiment, the application processor 200 and the secure element 120 may generate the session key using the first private key PR1 and the second private key PR2.

6A and 6B are flowcharts illustrating an example of a step S400 of generating a session key by the application processor and the secure element of FIG. 2.

6A and 6B, the secure element 120 may generate a random value and transmit the random value to the application processor 200 (step S410).

When receiving the random value from the secure element 120, the application processor 200 generates a one-time private key and a one-time public key pair, and a second private key stored in the application processor 200 ( The random value and the one-time public key may be encrypted using PR2), and the encrypted random value and the encrypted one-time public key may be transmitted to the secure element 120 (step S420).

The secure element 120 may decrypt the encrypted random value using the second public key PB2 of the application processor 200 obtained in the process of performing the mutual authentication (step S200) (step S430). .

Thereafter, the secure element 120 may determine whether the decoded random value and the random value initially generated by the secure element 120 coincide with each other (step S440).

When the decrypted random value and the random value initially generated by the secure element 120 do not match each other (step S440; No), the secure element 120 may terminate communication with the application processor 200. (Step S495).

On the other hand, when the decrypted random value and the random value initially generated by the secure element 120 coincide with each other (step S440; YES), the secure element 120 performs the mutual authentication process (step S200). ), the encrypted one-time public key may be decrypted using the second public key PB2 of the application processor 200 obtained in step S450 (step S450).

Thereafter, the secure element 120 calculates a secret value based on the one-time public key and the first private key PR1 stored in the secure element 120, and based on the secret value, the session A key and a first authentication value may be generated, and the first authentication value may be transmitted to the application processor 200 (step S460).

In an embodiment, a first algorithm for calculating the secret value based on the one-time public key and a first private key PR1, and a first algorithm for generating the session key and the first authentication value based on the secret value 2 The algorithm may be predefined between the secure element 120 and the application processor 200.

When receiving the first authentication value from the secure element 120, the application processor 200 first discloses the one-time private key and the secure element 120 obtained in the process of performing the mutual authentication (step S200). The secret value may be calculated based on the key PB1, and a second authentication value may be generated based on the secret value (step S470).

In one embodiment, the application processor 200 uses the first algorithm and the second algorithm predefined between the secure element 120 and the application processor 200, respectively, to determine the secret value and the second authentication value. Each can be calculated.

Thereafter, the application processor 200 may determine whether the second authentication value and the first authentication value received from the secure element 120 match (step S480).

When the second authentication value and the first authentication value received from the secure element 120 do not match (step S480; No), the application processor 200 may terminate communication with the secure element 120 ( Step S495).

On the other hand, when the second authentication value and the first authentication value received from the secure element 120 match (step S480; YES), the application processor 200 generates the session key based on the secret value. Yes (step S490).

In an embodiment, the application processor 200 may generate the session key using the second algorithm predefined between the secure element 120 and the application processor 200.

Accordingly, the session key generated by the secure element 120 may be the same as the session key generated by the application processor 200.

Each of the secure element 120 and the application processor 200 may internally store the session key.

Referring back to FIG. 2, after the application processor 200 and the secure element 120 generate the session key, the processor 110 switches the operation mode from the bypass mode to the normal mode (step S500). ). In an embodiment, the processor 110 may switch the operation mode from the bypass mode to the normal mode in response to a request of the application processor 200.

Thereafter, the secure module 100 receives the sensing data SSD from the sensor 300 and encrypts the sensing data SSD using the session key stored in the secure element 120 (step S600).

In one embodiment, the processor 110 may include a hardware encryption engine. In this case, the processor 110 may encrypt the sensing data SSD using the hardware encryption engine.

In another embodiment, the processor 110 may not include a hardware encryption engine. In this case, the secure element 120 may encrypt the sensing data SSD.

FIG. 7 is a flowchart illustrating an example of a step S600 of encrypting sensing data provided from a sensor by the secure module of FIG. 2 using a session key.

7 illustrates the operation of the electronic device 10 when the processor 110 includes the hardware encryption engine.

Referring to FIG. 7, the processor 110 may receive sensing data SSD from the sensor 300 (step S610). When the sensor 300 is a biosensor that detects body information, the sensing data SSD may include biometric information such as a fingerprint, an iris pattern, a vein pattern, heart rate, blood sugar, and the like.

The processor 110 may transmit a session key request signal to the secure element 120 (step S620).

The secure element 120 may transmit the session key stored in the secure element 120 to the processor 110 in response to the session key request signal received from the processor 110 (step S630).

As described above with reference to FIG. 1, the secure module 100 including the processor 110 and the secure element 120 is formed as a single package, and an interior connecting the processor 110 and the secure element 120 Since the bus INT_BUS is formed inside the package, the internal bus INT_BUS is not exposed to the outside of the package. Accordingly, the secure element 120 can safely transmit the session key to the processor 110 without forming a secure channel between the processor 110 and the secure element 120. Accordingly, communication overhead of the electronic device 10 can be effectively reduced.

The processor 110 may encrypt the sensing data SSD using the session key received from the secure element 120 (step S640).

FIG. 8 is a flowchart illustrating another example of a step in which the secure module of FIG. 2 encrypts sensing data provided from a sensor using a session key.

8 illustrates the operation of the electronic device 10 when the processor 110 does not include the hardware encryption engine.

Referring to FIG. 8, the processor 110 may receive sensing data SSD from the sensor 300 (step S650). When the sensor 300 is a biosensor that detects body information, the sensing data SSD may include biometric information such as a fingerprint, an iris pattern, a vein pattern, heart rate, blood sugar, and the like.

The processor 110 may transmit an encryption request signal and sensing data (SSD) to the secure element 120 (step S660).

The secure element 120 may encrypt the sensing data SSD using the session key stored inside the secure element 120 in response to the encryption request signal received from the processor 110 (step S670).

Thereafter, the secure element 120 may transmit the encrypted sensing data to the processor 110 (step S680).

Referring back to FIG. 2, the processor 110 transmits the encrypted sensing data to the application processor 200 (step S700).

As described above with reference to FIG. 1, the processor 110 is connected to the application processor 200 through an external bus EXT_BUS connected to an external terminal of the package corresponding to the secure module 100. ) May transmit the encrypted sensing data to the application processor 200 through an external bus EXT_BUS. Since the sensing data (SSD) is transmitted from the processor 110 to the application processor 200 in a state encrypted with the session key, the sensing data (SSD) is leaked even when the external bus (EXT_BUS) is probed through the scope. Can be effectively prevented.

The application processor 200 decrypts the encrypted sensing data received from the processor 110 using the session key stored in the application processor 200 to obtain sensing data SSD (step S800).

As described above with reference to FIGS. 1 to 8, in the electronic device 10 according to embodiments of the present invention, the secure module 100 including the processor 110 and the secure element 120 is one package Is formed by In addition, while the processor 110 is operating in the bypass mode, the application processor 200 and the secure element 120 have a first certificate (CT1) stored in the secure element 120 and the application processor 200 When mutual authentication is performed using the second certificate (CT2) stored inside and the public key (CA_PB) of the certification authority commonly stored in the application processor 200 and the secure element 120, and the mutual authentication is successful , The application processor 200 and the secure element 120 use a first private key PR1 stored in the secure element 120 and a second private key PR2 stored in the application processor 200. Create a session key. Thereafter, the secure module 100 encrypts the sensing data (SSD) using the session key and transmits it to the application processor 200, and the application processor 200 decrypts the encrypted sensing data using the session key. Thus, sensing data (SSD) is obtained. Accordingly, the security level of data transmission in the electronic device 10 may be improved.

In one embodiment, the application processor 200 may be implemented as another secure module having the same configuration as the secure module 100. In this case, through the operation described above with reference to FIGS. 1 to 8, secure modules included in the electronic device 10 may safely perform data communication with each other.

Data communication in the case where the application processor 200 and the secure module 100 are included in the same electronic device 10 has been described with reference to FIGS. 1 to 8, but the present invention is not limited thereto, and data according to the present invention The transmission method may be applied even when the application processor 200 and the secure module 100 are included in different electronic devices, respectively.

9 is a block diagram illustrating an example of the electronic device illustrated in FIG. 1.

Referring to FIG. 9, the electronic device 10a may include a secure module 100, an application processor 200a, and a sensor 300.

The secure module 100 and the sensor 300 included in the electronic device 10a of FIG. 9 may be the same as the secure module 100 and the sensor 300 included in the electronic device 10 of FIG. 1. Since the configuration and operation of the secure module 100 and the sensor 300 included in the electronic device 10 of FIG. 1 have been described above with reference to FIGS. 1 to 8, duplicate descriptions will be omitted.

The application processor 200a may be implemented as an application processor having a trusted execution environment (TEE) and a rich operating system execution environment (REE). For example, the trusted execution environment (TEE) may be implemented using the ARM's TrustZone.

In the rich OS execution environment (REE), a normal application (NORMAL APP) 211 is driven on a general operating system (RICH OS) 212 such as Android, and in a trusted execution environment (TEE), security operation A predetermined security application (TRUSTED APP) 221 that communicates with the secure module 100 on the SECURE OS 222 may be driven.

In addition, the application processor 200a may include a secure storage device 223 included in a trusted execution environment (TEE). For example, the secure storage device 223 includes an electrically erasable programmable read-only memory (EEPROM), a flash memory, a phase change random access memory (PRAM), a resistance random access memory (RRAM), and a nano floating memory (NFGM). Gate Memory), PoRAM (Polymer Random Access Memory), MRAM (Magnetic Random Access Memory), FRAM (Ferroelectric Random Access Memory), or similar memory.

The public key CA_PB of the certification authority, the second certificate CT2 corresponding to the application processor 200a issued by the certification authority, and the second private key PR2 of the application processor 200a are secure storage device 223 ) Can be stored.

Since the secure storage device 223 operates in the trusted execution environment (TEE), the secure storage device 223 can be accessed only through the security application 221 operating in the trusted execution environment (TEE). That is, the general application 211 operating in the rich OS execution environment REE may be blocked from accessing the secure storage device 223.

The security application 221 uses the public key (CA_PB) of the certification authority, the second certificate (CT2), and the second private key (PR2) stored in the secure storage device 223, as described above with reference to FIGS. By performing the above operation, the sensing data SSD can be safely obtained from the secure module 100.

As described above with reference to FIG. 9, since the application processor 200a communicates with the secure module 100 through a trusted execution environment (TEE) to obtain sensing data (SSD), the electronic device 10a The security level of data transmission can be further improved.

10 is a block diagram illustrating an electronic device according to an embodiment of the present invention.

Referring to FIG. 10, the electronic device 20 includes a secure module 100 and an application processor 200.

The secure module 100 and the application processor 200 included in the electronic device 20 of FIG. 10 are the electronic device 10 of FIG. 1 except that the secure element 120 further stores the security data SED. It may be the same as the secure module 100 and the application processor 200 included in ). Since the configuration and operation of the secure module 100 and the application processor 200 included in the electronic device 10 of FIG. 1 have been described above with reference to FIGS. 1 to 9, duplicate descriptions will be omitted.

11 is a flowchart illustrating a data transmission method of an electronic device according to an embodiment of the present invention.

The data transmission method shown in FIG. 11 may be performed through the electronic device 20 of FIG. 10.

In FIG. 11, a method of securely transmitting the security data SED stored in the secure element 120 by the secure module 200 to the application processor 200 is illustrated.

Hereinafter, a data transmission method of the electronic device 20 will be described with reference to FIGS. 10 and 11.

Referring to FIG. 11, in the data transmission method of the electronic device 20 according to the present invention, the processor 110 switches the operation mode from the normal mode to the bypass mode (step S100).

The application processor 200 and the secure element 120 perform mutual authentication (step S200).

If the mutual authentication fails (step S300; No), communication between the application processor 200 and the secure element 120 is terminated.

On the other hand, when the mutual authentication is successful (step S300; Yes), the application processor 200 and the secure element 120 generate a session key (step S400).

After the application processor 200 and the secure element 120 generate the session key, the processor 110 switches the operation mode from the bypass mode to the normal mode (step S500).

The first to fifth steps (S100, S200, S300, S400, S500) shown in FIG. 11 are the same as the first to fifth steps (S100, S200, S300, S400, S500) shown in FIG. It can be done in a way. Since detailed operations of the first to fifth steps S100, S200, S300, S400, and S500 shown in FIG. 2 have been described in detail with reference to FIGS. 1 to 8, duplicate descriptions are omitted herein.

Thereafter, the secure module 100 encrypts the security data SED stored in the secure element 120 by using the session key stored in the secure element 120 (step S601).

In one embodiment, the processor 110 may include a hardware encryption engine. In this case, the processor 110 may encrypt the security data SED stored in the secure element 120 using the hardware encryption engine.

In another embodiment, the processor 110 may not include a hardware encryption engine. In this case, the secure element 120 may encrypt the security data SED.

12 is a flowchart illustrating an example of a step S601 of encrypting security data stored in a secure element by the secure module of FIG. 11 using a session key.

12 illustrates the operation of the electronic device 20 when the processor 110 includes the hardware encryption engine.

Referring to FIG. 12, the processor 110 may transmit a data request signal to the secure element 120 (step S611).

The secure element 120 may transmit the session key and security data (SED) stored in the secure element 120 to the processor 110 in response to the data request signal received from the processor 110 (step S621 ).

As described above with reference to FIG. 1, the secure module 100 including the processor 110 and the secure element 120 is formed as a single package, and an interior connecting the processor 110 and the secure element 120 Since the bus INT_BUS is formed inside the package, the internal bus INT_BUS is not exposed to the outside of the package. Accordingly, the secure element 120 may securely transmit the session key and security data SED to the processor 110 without forming a secure channel between the processor 110 and the secure element 120. Accordingly, communication overhead of the electronic device 20 can be effectively reduced.

The processor 110 may encrypt the security data SED using the session key received from the secure element 120 (step S631).

13 is a flowchart illustrating another example of a step of encrypting security data stored in a secure element by the secure module of FIG. 11 using a session key.

13 illustrates the operation of the electronic device 20 when the processor 110 does not include the hardware encryption engine.

Referring to FIG. 13, the processor 110 may transmit a data request signal to the secure element 120 (step S641).

The secure element 120 may encrypt the security data SED using the session key stored in the secure element 120 in response to the data request signal received from the processor 110 (step S651).

Thereafter, the secure element 120 may transmit the encrypted security data to the processor 110 (step S661).

Referring back to FIG. 11, the processor 110 transmits the encrypted security data to the application processor 200 (step S701).

As described above with reference to FIG. 1, the processor 110 is connected to the application processor 200 through an external bus EXT_BUS connected to an external terminal of the package corresponding to the secure module 100. ) May transmit the encrypted security data to the application processor 200 through an external bus EXT_BUS. Since the security data (SED) is transmitted from the processor 110 to the application processor 200 in a state encrypted with the session key, the security data (SED) is leaked even when the external bus (EXT_BUS) is probed through the scope. Can be effectively prevented.

The application processor 200 obtains security data SED by decrypting the encrypted security data received from the processor 110 using the session key stored in the application processor 200 (step S801).

As described above with reference to FIGS. 10 to 13, the electronic device 20 according to embodiments of the present invention may safely transmit the security data SED stored in the secure element 120 to the application processor 200. Accordingly, the security level of data transmission in the electronic device 20 may be improved.

14 is a block diagram illustrating an electronic device according to an embodiment of the present invention.

Referring to FIG. 14, the electronic device 30 includes a secure module 100, an application processor 200, and a sensor 300.

The electronic device 30 of FIG. 14 may be the same as the electronic device 10 of FIG. 1 except that the secure element 120 further stores the security data SED. That is, the electronic device 30 of FIG. 14 may correspond to a combination of the electronic device 10 of FIG. 1 and the electronic device 20 of FIG. 10.

Accordingly, the electronic device 30 safely transmits the sensing data (SSD) generated from the sensor 300 by the secure module 200 described above with reference to FIGS. 1 to 9 to the application processor 200 and FIGS. 10 to 13 The secure module 200 described above may perform all methods of safely transmitting the security data SED stored in the secure element 120 to the application processor 200.

Since the configuration and operation of the electronic device 10 of FIG. 1 and the electronic device 20 of FIG. 10 have been described in detail with reference to FIGS. 1 to 13, a detailed description of the electronic device 30 of FIG. 14 will be omitted.

15 is a block diagram illustrating an electronic system according to an embodiment of the present invention.

Referring to FIG. 15, the electronic system 900 includes a secure module 910, an application processor 920, a storage device 930, a memory device 940, an input/output device 950, and It includes a power supply 960 and a sensor 970. Further, although not shown in FIG. 15, the electronic system 900 may further include ports capable of communicating with a video card, a sound card, a memory card, a USB device, or the like, or with other electronic devices. .

The application processor 920 controls the overall operation of the electronic system 900. The application processor 920 may execute applications that provide an Internet browser, a game, or a video. Depending on the embodiment, the application processor 920 may include one processor core (Single Core) or a plurality of processor cores (Multi-Core). For example, the application processor 920 may include a multi-core such as a dual-core, a quad-core, and a hexa-core. In addition, according to an embodiment, the application processor 920 may further include a cache memory located inside or outside.

The secure module 910 includes a processor 911 and a secure element 912. The secure module 910 including the processor 911 and the secure element 912 is formed in one package, and an internal bus (INT_BUS) connecting the processor 911 and the secure element 912 is inside the package. Can be formed. The secure element 912 may include a function capable of defending against attacks from outside, for example, a lab attack. Therefore, the secure element 912 can safely store security data. The processor 911 may be connected to the application processor 920.

The sensor 970 may be a biosensor that detects biometric information. For example, the sensor 970 detects a fingerprint, an iris pattern, a vein pattern, heart rate, blood sugar, etc., generates sensing data corresponding to the detected information, and provides it to the processor 911 included in the secure module 910 can do. However, the sensor 970 is not limited to a biosensor, and the sensor 970 may be any sensor such as an illumination sensor, an acoustic sensor, an acceleration sensor, or the like.

The secure module 910, the application processor 920, and the sensor 970 included in the electronic system 900 of FIG. 15 are each of the secure module 100 and the application processor 200 included in the electronic device 30 of FIG. 14. ) And the sensor 300. Since the configuration and operation of the secure module 100, the application processor 200, and the sensor 300 included in the electronic device 30 of FIG. 14 have been described in detail with reference to FIGS. 1 to 14, the secure module 910, Detailed descriptions of the application processor 920 and the sensor 970 will be omitted.

The storage device 930 may store a boot image for booting the electronic system 900. For example, the storage device 930 may include a nonvolatile memory device such as a flash memory device and a solid state drive (SSD).

The memory device 940 may store data necessary for the operation of the electronic system 900. For example, the memory device 940 may include a volatile memory device such as a dynamic random access memory (DRAM) or a static random access memory (SRAM).

The input/output device 950 may include an input means such as a touch pad, a keypad, and an input button, and an output means such as a display and a speaker. The power supply 960 may supply an operating voltage required for the operation of the electronic system 900.

According to an embodiment, the electronic system 900 includes a mobile phone, a smart phone, a personal digital assistant (PDA), a portable multimedia player (PMP), and a digital camera. Camera), a music player, a portable game console, a navigation system, a laptop computer, and the like.

16 is a diagram illustrating an example in which the electronic system of FIG. 15 is implemented as a smart phone.

15 and 16, the secure element 912 included in the smartphone 900a may pre-store security data corresponding to the user's biometric information.

For example, if the sensor (SR) 970 included in the smartphone 900a is a fingerprint sensor that detects a user's fingerprint, the security data stored in the secure element 912 may correspond to the user's fingerprint information. I can.

When determining whether the current user is an allowed user using the current user's fingerprint, the secure module 910, the application processor 920, and the sensor 970 operate as described above with reference to FIGS. The sensing data corresponding to the current user's fingerprint information generated from the sensor 970 may be safely transmitted to the application processor 920 through the secure module 910. In addition, the secure module 910 and the application processor 920 may safely transmit the security data stored in the secure element 912 to the application processor 920 by performing the operation described above with reference to FIGS. 10 to 13. . The application processor 920 may effectively determine whether the current user is an allowed user based on whether the sensing data transmitted from the secure module 910 and the security data match each other.

The user authentication operation through fingerprint information described with reference to FIG. 15 is only one application example of the data transmission method of the electronic device according to the present invention, and the data transmission method of the electronic device according to the present invention can be applied in various ways .

As described above, the present invention has been described with reference to preferred embodiments of the present invention, but those of ordinary skill in the relevant technical field may vary the present invention within the scope not departing from the spirit and scope of the present invention described in the following claims. You will understand that it can be modified and changed.

10, 20, 30: electronic device 100: secure module
110: processor 120: secure element
200: application processor 300: sensor
900: electronic system

Claims (10)

In a data transmission method of an electronic device including a secure module including a processor and a secure element, an application processor, and a sensor,
Converting, by the processor, an operation mode to a bypass mode;
Performing mutual authentication between the application processor and the secure element;
Generating a session key by the application processor and the secure element when the mutual authentication is successful;
Converting, by the processor, the operating mode to a normal mode;
Encrypting, by the secure module, sensing data provided from the sensor using the session key;
Transmitting, by the processor, the encrypted sensing data to the application processor; And
The application processor decrypting the encrypted sensing data using the session key to obtain the sensing data,
The step of the processor switching the operation mode to the bypass mode,
Transmitting, by the application processor, a bypass request signal to the processor; And
Data of an electronic device comprising the step of forming, by the processor, a bypass channel connecting the application processor and the secure element by switching the operation mode from the normal mode to the bypass mode in response to the bypass request signal Transmission method. The method of claim 1, wherein the processor and the secure element included in the secure module are formed as one package, the processor is connected to the application processor through an external terminal of the package, and the secure element is inside the package. Data transmission method of an electronic device connected to the processor through an internal bus formed in the. The method of claim 2, wherein the processor performs communication with the application processor in the normal mode, bypasses a signal received from the application processor in the bypass mode and provides it to the secure element, and receives from the secure element. A data transmission method of an electronic device that bypasses the generated signal and provides it to the application processor. The method of claim 1, wherein the secure element stores a first private key, a public key of a Certificate Authority (CA), and a first certificate issued by the certificate authority, and the application processor stores a second private key, the A data transmission method of an electronic device storing a public key of a certification authority and a second certificate issued by the certification authority. The method of claim 4, wherein performing mutual authentication between the application processor and the secure element comprises:
Transmitting, by the application processor, a certificate request signal to the secure element;
Transmitting, by the secure element, the first certificate to the application processor in response to the certificate request signal;
Verifying, by the application processor, the first certificate using the public key of the certification authority;
When the application processor succeeds in verifying the first certificate, obtaining a first public key of the secure element included in the first certificate;
Transmitting, by the application processor, a verification request signal and the second certificate to the secure element;
Verifying, by the secure element, the second certificate using the public key of the certification authority in response to the verification request signal; And
And when the secure element successfully verifies the second certificate, obtaining a second public key of the application processor included in the second certificate. The method of claim 5, wherein generating the session key by the application processor and the secure element comprises:
Generating a random value by the secure element and transmitting the random value to the application processor;
The application processor generates a one-time private key and one-time public key pair, encrypts the random value and the one-time public key, respectively, using the second private key, and stores the encrypted random value and the encrypted one-time public key. Transmitting to the secure element;
When the secure element decrypts the encrypted random value using the second public key, and the decrypted random value and the random value match, the encrypted one-time public key using the second public key Decrypting to obtain the one-time public key;
The secure element calculates a secret value based on the first private key and the one-time public key, generates the session key and a first authentication value based on the secret value, and calculates the first authentication value to the application processor Transferring to; And
The application processor calculates the secret value based on the first public key and the one-time private key, generates a second authentication value based on the secret value, and the second authentication value and the first authentication value are And if they match, generating the session key based on the secret value. The method of claim 1, wherein the secure module encrypts the sensing data provided from the sensor using the session key,
Receiving, by the processor, the sensing data from the sensor;
Transmitting, by the processor, a session key request signal to the secure element;
Transmitting, by the secure element, the session key to the processor in response to the session key request signal; And
And encrypting, by the processor, the sensing data using the session key. The method of claim 1, wherein the secure module encrypts the sensing data provided from the sensor using the session key,
Receiving, by the processor, the sensing data from the sensor;
Transmitting, by the processor, an encryption request signal and the sensing data to the secure element;
Encrypting, by the secure element, the sensing data using the session key in response to the encryption request signal; And
And transmitting, by the secure element, the encrypted sensing data to the processor. The method of claim 1, wherein the application processor includes a trusted execution environment (TEE) and a rich operating system execution environment (REE), and the application processor is Data transmission method of an electronic device performing communication with the secure module. In a data transmission method of an electronic device including a secure module including a processor and a secure element and an application processor,
Converting, by the processor, an operation mode to a bypass mode;
Performing mutual authentication between the application processor and the secure element;
Generating a session key by the application processor and the secure element when the mutual authentication is successful;
Converting, by the processor, the operating mode to a normal mode;
Encrypting, by the secure module, security data stored in the secure element using the session key;
Transmitting, by the processor, the encrypted security data to the application processor; And
The application processor decrypting the encrypted security data using the session key to obtain the security data,
The step of the processor switching the operation mode to the bypass mode,
Transmitting, by the application processor, a bypass request signal to the processor; And
Data of an electronic device comprising the step of forming, by the processor, a bypass channel connecting the application processor and the secure element by switching the operation mode from the normal mode to the bypass mode in response to the bypass request signal Transmission method.

Images