KR102286512B1 - Method to Provide Application Security Service Based on Cloud Computing - Google Patents

Abstract

The present invention relates to a cloud-based app security service method, and more particularly, in order to verify the integrity of an application or operating system installed in a user terminal, communication with the application is performed based on the integrity verification element set by the administrator in the cloud server. It relates to a cloud-based app security service method that allows integrity to be verified in a cloud manner through a service server.

Description

{Method to Provide Application Security Service Based on Cloud Computing}

The present invention relates to a cloud-based app security service method, and more particularly, in order to verify the integrity of an application or operating system installed in a user terminal, communication with the application is performed based on the integrity verification element set by the administrator in the cloud server. It relates to a cloud-based app security service method that allows integrity to be verified in a cloud manner through a service server.

According to a survey conducted by Pew Research, an American market research institute, the current penetration rate of mobile phones in Korea has reached 100%, and among them, the proportion of smartphone users reaches 95%. As such, smartphones play a very close media role in the lives of modern people.

On the other hand, smartphones are playing the role of infrastructure for implementing technologies such as cloud services, big data, artificial intelligence, block chain and fintech, and are positioned as an important medium for implementing services throughout the industry. In the phone, not only extensive personal information about the user, but also the goods owned by the user and information for accessing it are concentrated.

As such, since the services implemented in the smartphone include a lot of sensitive information and personal information, the security of the mobile application that manages the information is designated and managed as a mandatory security compliance (compliance, proactive monitoring activity for security). There are security policies enacted by the government, such as the “Smart Work Information Protection Guidelines”, and they must be complied with. However, despite these efforts, the number of attacks and hacking on mobile applications is increasing every year, and in particular, the number of security incidents caused by phishing emails and malicious codes is increasing.

On the other hand, the existing security solution method for applications is to apply security solutions for each company that provides services to users. Or, it is necessary to update and manage the verification server by a security solution company. On the other hand, in the case of security issues in mobile applications, security threats spread rapidly through each user's smartphone, and security issues spread rapidly.

Therefore, as described above, there is a cloud-based application security solution that can be centrally managed as a method to maximize the efficiency of security responses for each company as well as the security efficiency of mobile applications in which the same type of service is distributed to multiple companies. it is necessary.

The present invention relates to a cloud-based app security service method, and more particularly, in order to verify the integrity of an application or operating system installed in a user terminal, communication with the application is performed based on the integrity verification element set by the administrator in the cloud server. It relates to a cloud-based app security service method that allows integrity to be verified in a cloud manner through a service server.

In order to solve the above problems, an embodiment of the present invention provides a cloud-based app security service method, comprising the steps of: receiving, in a portal server, an administrator's app security settings for a target application; In the integrity verification server, setting an app security policy based on the app security settings; receiving, in the integrity verification server, an event generation request from a user terminal, and transmitting an app security policy to the user terminal; receiving, in the integrity verification server, a security check result according to the app security policy of a security module built in the user terminal, and transmitting an authentication token to the user terminal according to the security check result; and, in the service server, receiving the authentication token from the user terminal, and transmitting execution permission information for the target application to the user terminal according to the verification result of the authentication token; Containing, Cloud-based App Provides a security service method.

In an embodiment of the present invention, the step of receiving the app security setting further comprises, in the portal server, providing an interface for the app security setting displayed on the display of the manager terminal, interface, one or more app integrity elements corresponding to elements for verifying the integrity of the target application, which can be selected by the administrator, and one or more OS integrity elements corresponding to elements for verifying the integrity of the operating system built into the user terminal It can contain elements.

In one embodiment of the present invention, the interface for the app security setting, when there is a defect in the integrity of the target application or the integrity of the operating system built into the user terminal, the administrator's selection input for the app security setting Accordingly, it may further include an app stop element for stopping the execution of the target application, and a reporting element for allowing the execution of the target application, but transmitting information about the defect to the user terminal.

In an embodiment of the present invention, the cloud-based app security service method further comprises the step of providing defect decision information, wherein the providing step of defect decision information includes, in the integrity verification server, the app of the security module built into the user terminal. A security check result according to a security policy may be received, and when there is a defect in the integrity of the target application or the operating system built into the user terminal according to the security check result, defect determination information may be derived and transmitted to the user terminal.

In an embodiment of the present invention, the cloud-based app security service method further comprises the step of providing execution interruption information, wherein the providing of the execution interruption information includes, in the service server, receiving the defect decision information from the user terminal and , according to the verification result of the defect determination information, it is possible to transmit execution stop information for the target application to the user terminal.

In an embodiment of the present invention, the step of providing the execution interruption information includes, in the service server, determining whether or not to include one or more essential defect determination information corresponding to each essential security element with respect to the defect determination information, and the essential defect determination information When included, the execution interruption information may be generated.

In an embodiment of the present invention, the cloud-based app security service method further includes a service history management step, wherein the service history management step includes information about the target application and the target application from the portal server to the manager terminal. transmitting the details of the app security policy corresponding to the application; and transmitting, from the portal server, one or more security check results corresponding to the target application to the manager terminal according to the manager's selection input for the target application.

According to an embodiment of the present invention, since the portal server verifies the integrity of the target application or the built-in operating system of the user terminal in the cloud method according to the app security settings input from the administrator in the portal server, a service server that communicates with each target application In , it is possible to exert the effect of managing the integrity verification and security of multiple target applications or multiple operating systems using only the portal server without the administrator setting the app security directly.

According to an embodiment of the present invention, since security-related processes are performed in the portal server and the integrity verification server in a cloud manner, the security-related processes performed in the service server are significantly reduced, and thus the load of the service server is reduced. can be effective.

According to an embodiment of the present invention, the administrator can select only the desired elements for the plurality of app integrity elements and the plurality of OS integrity elements included in the interface for app security setting, and depending on the selected elements, the integrity of the target application or Since the integrity of the operating system can be verified, it is possible to exert the effect of setting detailed items in verifying the integrity.

According to an embodiment of the present invention, the administrator can select the desired item for the app stop element and the reporting element included in the interface for app security settings, and if there is a defect in integrity according to the selected item, the app is stopped, Since it is possible to provide information on the occurrence of a defect to the user terminal without stopping the app, it is possible to exert the effect of setting the operation of the target application when a defect occurs.

According to an embodiment of the present invention, the integrity verification server derives defect decision information of the operating system built into the target application or user terminal according to the security check result, and the derived defect decision information is transmitted to the service server through the user terminal, and the service server Since it judges whether the execution of the target application is stopped according to the defect determination information, it is possible to exert the effect of double-checking the security in the integrity verification server and the service server.

According to an embodiment of the present invention, since the portal server comprehensively provides the security check result for a plurality of applications to the administrator in a cloud manner, the administrator can efficiently grasp information on each application. .

1 schematically shows the overall system form of a cloud-based app security service method according to an embodiment of the present invention.
2 schematically shows the overall process of a cloud-based app security service method according to an embodiment of the present invention.
3 schematically shows an interface for app security settings according to an embodiment of the present invention.
4 schematically illustrates a process of stopping execution of a target application when a defect in integrity occurs according to an embodiment of the present invention.
5 schematically illustrates a process of providing information about a defect to a user terminal when a defect occurs in integrity according to an embodiment of the present invention.
6 schematically illustrates a service detail management step and a detailed process of the corresponding step according to an embodiment of the present invention.
7 schematically illustrates a security management interface displayed on an administrator terminal in a service detail management step according to an embodiment of the present invention.

Hereinafter, various embodiments and/or aspects are disclosed with reference to the drawings. In the following description, for purposes of explanation, numerous specific details are set forth to provide a thorough understanding of one or more aspects. However, it will also be recognized by one of ordinary skill in the art that such aspect(s) may be practiced without these specific details. The following description and accompanying drawings set forth in detail certain illustrative aspects of one or more aspects. These aspects are illustrative, however, and some of the various methods in principles of various aspects may be employed, and the descriptions set forth are intended to include all such aspects and their equivalents.

Further, various aspects and features will be presented by a system that may include a number of devices, components and/or modules, and the like. It is also noted that various systems may include additional devices, components, and/or modules, etc. and/or may not include all of the devices, components, modules, etc. discussed with respect to the drawings. must be understood and recognized.

As used herein, “embodiment”, “example”, “aspect”, “exemplary”, etc. may not be construed as an advantage or advantage in any aspect or design described above over other aspects or designs. . The terms '~part', 'component', 'module', 'system', 'interface', etc. used below generally mean a computer-related entity, for example, hardware, hardware A combination of and software may mean software.

Also, the terms "comprises" and/or "comprising" mean that the feature and/or element is present, but excludes the presence or addition of one or more other features, elements and/or groups thereof. should be understood as not

Also, terms including an ordinal number, such as first, second, etc., may be used to describe various elements, but the elements are not limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, a first component may be referred to as a second component, and similarly, a second component may also be referred to as a first component. and/or includes a combination of a plurality of related listed items or any of a plurality of related listed items.

In addition, in the embodiments of the present invention, unless otherwise defined, all terms used herein, including technical or scientific terms, are generally understood by those of ordinary skill in the art to which the present invention belongs. have the same meaning as Terms such as those defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related art, and unless explicitly defined in an embodiment of the present invention, an ideal or excessively formal meaning is not interpreted as

1 schematically shows the overall system form of a cloud-based app security service method according to an embodiment of the present invention.

The user terminal 100 shown in FIG. 1 uses a target application for the service server 500 to communicate with the service server 500 and the integrity verification server 200, and the administrator terminal 400 is a portal server. In order to communicate with the 300 , a web browser may be used or an application for a separate portal server 300 may be used.

On the other hand, the service server 500, the integrity verification server 200 and the portal server 300 each perform communication with a corresponding terminal and server, and use one or more processors and one or more memories to perform respective steps for each server. Computer devices that include In addition, the service server 500 serves to provide a service implemented in the target application corresponding to the target application. In FIG. 1, although one service server 500 is shown for ease of explanation, the user terminal 100 ) may include a plurality of service servers 500 corresponding to the number of installed applications, and the plurality of service servers 500 communicate with the integrity verification server 200 and the user terminal 100 in which the corresponding target application is installed. can be done

The integrity verification server 200 may receive security setting information input by the administrator from the portal server 300 and perform a security-related operation for the corresponding application based on the setting information. As described above, the integrity verification server 200 may communicate with a plurality of service servers 500 and a plurality of target applications corresponding to the plurality of service servers 500 installed in the user terminal 100 .

The portal server 300 provides an interface for inputting security-related setting information for a target application to the manager terminal 400 and serves to provide a security result for the target application. That is, the portal server 300 manages and visualizes information between the integrity verification server 200 and the manager terminal 400 and provides it to the manager terminal 400, and provides the information input from the manager terminal 400 to the integrity verification server. (200) performs the role of processing and transmission.

Meanwhile, although the integrity verification server 200 and the portal server 300 are shown separately in FIG. 1 , they may be physically included in the same server, and may be functionally or software separated and implemented in the same server. Also, as described above, through the portal server 300, the integrity verification server 200 can set security policies for a plurality of target applications and perform operations to manage security, so that a plurality of targets in a single server in a cloud manner You can manage the security of your application.

The manager terminal 400 corresponds to a terminal used by the subject who creates or manages the target application, and the manager terminal 400 inputs the settings related to the security of the target application through the interface provided by the portal server 300, A security result of the corresponding target application may be received from the portal server 300 .

Therefore, according to an embodiment of the present invention, since the integrity of the target application or the built-in operating system of the user terminal 100 is verified in the cloud method according to the app security settings input from the administrator in the portal server 300, each target In the service server 500 that communicates with the application, the administrator does not directly set the app security, and only the portal server 300 is used to verify the integrity and security of a plurality of target applications or a plurality of operating systems. can perform

In addition, according to an embodiment of the present invention, since security-related processes are performed in the portal server 300 and the integrity verification server 200 in a cloud manner, the security-related processes performed in the service server 500 are significantly reduced. It can have the effect of reducing the load on the service server 500 .

Hereinafter, the steps implemented in each server and each terminal in order to implement the cloud-based app security service method will be described in detail.

2 schematically shows the overall process of a cloud-based app security service method according to an embodiment of the present invention.

As shown in Figure 2, as a cloud-based app security service method, the portal server 300, comprising the steps of receiving an administrator's app security settings for the target application; In the integrity verification server 200, setting an app security policy based on the app security settings; In the integrity verification server 200, receiving an event generation request from the user terminal 100, and transmitting the app security policy to the user terminal 100; In the integrity verification server 200, receive a security check result according to the app security policy of the security module built in the user terminal 100, and receive an authentication token to the user terminal 100 according to the security check result transmitting; and in the service server 500, receiving the authentication token from the user terminal 100, and transmitting execution permission information for the target application to the user terminal 100 according to the verification result of the authentication token. step; may include.

Specifically, the portal server 300 performs the step (S100) of providing an interface for the app security setting of the target application managed by the manager to the manager terminal 400 . In the interface for the app security setting, an administrator can select whether to verify the integrity of the target application or the operating system built into the user terminal 100 in which the target application is installed, and the details of the selected target application integrity verification or operating system integrity verification A plurality of elements may be included to select items.

Through the interface for app security settings displayed on the manager terminal 400, the manager terminal 400 performs the step (S101) of the manager receiving the selection input information for each element, and again the manager terminal 400 performs a step (S102) of transmitting information on the app security setting to the portal server 300 based on the received one or more selection input information. Next, the portal server 300 performs a step (S103) of transmitting the received information on the app security settings to the integrity verification server 200 .

On the other hand, the integrity verification server 200 may perform the step (S104) of setting the app security policy based on the app security settings received from the portal server 300. The app security policy corresponds to specific information for verifying the integrity of the target application or the operating system built into the user terminal 100 by the security module included in the target application to be described below.

More specifically, the security module may perform processes for verifying integrity, and the app security policy corresponds to an element for setting processes for the security module to verify integrity.

On the other hand, the user terminal 100 performs a step (S105) of transmitting, to the integrity verification server 200, request information on whether an event occurring in the target application is performed according to a user's input. Events occurring in the target application mean various execution processes occurring in the target application, such as driving the target application, log-in procedure, service fee payment, etc., in the step S105, whether all events occurring in the target application are performed. may be transmitted to the integrity verification server 200, but preferably, request information on whether to perform the event only for a preset important event, such as when the target application is initially driven or when payment is made through the target application may be transmitted to the integrity verification server 200 . Alternatively, request information on whether to perform an event occurring according to a preset time may be transmitted to the integrity verification server 200 .

On the other hand, when the integrity verification server 200 receives the request information on whether to perform the event from the user terminal 100, transmitting the app security policy set for the corresponding target application to the corresponding user terminal 100 (S106) ) is performed. Subsequently, the user terminal 100 may perform a step (S107) of deriving a security check result based on the received app security policy.

More specifically, the step of deriving the security check result (S107) may be derived from the target application included in the user terminal 100, and preferably, the security check result may be derived by the security module included in the target application. there is. In addition, the security module may be included in the corresponding target application in the form of a library or in the form of a library in the operating system built into the user terminal 100 .

Next, the user terminal 100 performs a step (S108) of transmitting the security check result derived through the security check result derivation step (S107) to the integrity verification server 200 (S108), and the integrity verification server 200 receives A step (S109) of generating an authentication token based on one security check result may be performed.

More specifically, the authentication token may be included in a token used in a system that performs mutual authentication based on a token in a communication system in general, and the authentication token is based on the security check result received from the integrity verification server 200 . When it is determined that the integrity is verified, it may be generated by the integrity verification server 200 . As such, the token-based authentication process can communicate without continuous mutual connection compared to the session-based authentication process, so the resources of each server can be used efficiently, and each server can be configured separately. It corresponds to an authentication method that can be appropriately implemented in the system.

Subsequently, the integrity verification server 200 may perform a step (S110) of transmitting the generated authentication token to the corresponding user terminal 100, and the integrity verification server 200 includes a security check history including the security check result. can be generated and transmitted to the portal server 300 (S111). More specifically, the security check details include the security check result, the time the security check result is derived or received from the integrity verification server 200, the identification number of the user terminal 100 that performed the security check result, the target application or any element of the operating system It may include information on whether the integrity of the data has been verified and detailed elements that have verified the integrity. In addition, the step (S111) of transmitting the security check details to the portal server 300 is performed whenever a security check result is received from the integrity verification server 200, or may be performed according to a preset period, or the portal server When the security check details are requested in 300 , the corresponding security check details may be generated and transmitted. Thereafter, the portal server 300 performs a step (S112) of storing the security check details received from the integrity verification server 200, and the security check details are stored in the memory included in the portal server 300 or externally. It may be stored in a separate DB (not shown).

Meanwhile, the user terminal 100 transmits the authentication token received from the integrity verification server 200 to the service server 500 ( S113 ). More specifically, in addition to the authentication token in step S113, request information on whether to perform the event, which includes information on what event has occurred, and the security check result may be transmitted to the service server 500 . Also, the security check result transmitted from the user terminal 100 may be transmitted from the integrity verification server 200 to the service server 500 according to an embodiment.

Subsequently, the service server 500 receiving the authentication token from the user terminal 100 may perform a step (S114) of deriving execution permission information for the event. More specifically, in order to derive the execution permission information, the service server 500 may derive execution permission information by determining that security has been achieved when receiving the authentication token, and preferably, the security check result received together with the authentication token. Based on the additional determination as to whether the service server 500 may execute the event, when it is determined that the event may be performed in the user terminal 100, execution permission information may be derived.

Therefore, in the step of generating an authentication token based on the security check result in the integrity verification server 200, the integrity of the app or operating system is primarily verified, and the service server 500 is secondarily based on the authentication token. Alternatively, since the integrity of the operating system is verified, security can be improved through dual security management.

Next, the service server 500 transmits the derived execution permission information to the user terminal 100 ( S115 ). Finally, the user terminal 100 executes the event transmitted in the step S105 of transmitting the request information on whether to perform the event to the integrity verification server 200 based on the received execution permission information in the target application. step (S116) may be performed.

3 schematically shows an interface for app security settings according to an embodiment of the present invention.

As shown in FIGS. 2 and 3 , the step of receiving the app security setting includes, in the portal server 300 , providing an interface for the app security setting displayed on the display of the manager terminal 400 . Further comprising, the interface for the app security setting, one or more app integrity elements (E1, E5) corresponding to elements that verify the integrity of the target application, which can be selected from the administrator, and the user terminal (100) It may include one or more OS integrity elements (E2, E6) corresponding to elements that verify the integrity of the operating system built into the .

Specifically, (A) of FIG. 3 corresponds to an interface for app security settings of a target application running in the Android operating system, and (B) of FIG. 3 is iOS, which is a mobile operating system provided by Apple. It corresponds to the interface for the app security setting of the target application running in the operating system. As shown in (A) and (B) of Figure 3, each of the app security settings by reflecting the unique properties of each operating system and differences that occur when the target application performing the same function is run in different operating systems An interface may be provided.

As shown in (A) and (B) of FIG. 3 , a target whose integrity is verified includes a target application that performs an event and an operating system in which the target application is driven. Elements for verifying the integrity of the target application include a 'app signature verification' element, in the case of an Android operating system, a 'native library verification' element, and in the case of an iOS operating system, a 'resource verification' element. , each element corresponds to each of the App Integrity Elements (E1, E5) in the interface for the App Security Settings, and each of the App Integrity Elements (E1, E5) is the selection input of the target application by the administrator. It may be selected as a factor for verifying integrity.

In addition, as an element for verifying the integrity of the operating system built into the user terminal 100, in the case of the Android operating system, 'root manager app detection' element, 'root cloaking app detection' element, 'dangerous app detection' element, 'BusyBox file' It includes a 'detection' element, a 'Su file detection' element, a 'Magisk file detection' element, a 'dangerous prop detection' element and a 'Su command test' element, and each element is the Android operating system in the interface for the app security settings. Corresponding to each of the OS integrity elements E2 for , each of the OS integrity elements E2 may be selected as an element for verifying the integrity of the Android operating system by an administrator's selection input.

On the other hand, as shown in FIG. 3B, as an element for verifying the integrity of the operating system built into the user terminal 100, in the case of the iOS operating system, a 'jailbreak file detection' element, a 'symbol link prevention' element, ' It includes a Dyld Image detection element, a 'Fork System Call detection' element, a 'Root Sticky detection' element, a 'Private Write detection' element, and a 'Cydia Scheme detection' element, and each element is an interface for the above app security settings. corresponds to each of the OS integrity elements E6 for the iOS operating system, and each OS integrity element E6 may be selected as an element for verifying the integrity of the iOS operating system by an administrator's selection input.

Therefore, the interface for the app security setting is optimized for each operating system, including each app integrity element (E1, E5) and each OS integrity element (E2, E6) according to the unique properties of the operating system in which the target application is installed. Integrity verification can be performed, and detailed integrity verification elements can be selected according to the administrator's selection in performing integrity verification, so that only the elements that the administrator wants to verify can have the effect of selectively performing integrity verification.

On the other hand, the interface for the app security setting, when there is a defect in the integrity of the target application or the integrity of the operating system built into the user terminal 100, according to the selection input for the app security setting of the administrator, the target App stop element (E3, E7) to stop the execution of the application, and a reporting element (E4, E8) to permit the execution of the target application, but to transmit the information on the defect to the user terminal (100) further includes can do.

Specifically, as shown in (A) and (B) of Figure 3, the interface for each of the app security setting includes a category for the execution setting that can receive a selection input from the administrator for the execution setting, The category for the execution setting may include an app stop element (E3, E7) and a reporting element (E4, E8).

More specifically, when a defect occurs in the integrity of the target application installed in the user terminal 100 or the built-in operating system in the interface for the app security setting, the administrator stops the execution of the event in the target application or the operation of the target application itself It is possible to select the app stop elements (E3, E7) to stop. In addition, even if a defect occurs in the integrity of the target application or the built-in operating system, the degree of the defect is not large, and the reporting element (E4, E8) to execute the event and transmit the information about the defect to the user terminal 100 can be selected.

Therefore, when a defect occurs in the integrity of the target application or the operating system in which the target application is installed, the administrator stops the execution of the target application or permits the execution of the target application but provides information about the flaw. Since it is possible to select and set one of the app stop elements (E3, E7) and the reporting elements (E4, E8) included in the , it is possible to exert the effect of setting the response process in the case of a defect in detail.

4 schematically illustrates a process of stopping execution of a target application when a defect in integrity occurs according to an embodiment of the present invention.

Step (S117) of transmitting the security check result from the user terminal 100 shown in FIG. 4 to the integrity verification server 200 is the interface for the app security setting in the portal server 300 described above in FIG. 400) is the same as the step (S108) of transmitting the security check result from the user terminal 100 to the integrity verification server 200 performed step by step from the step (S100). Accordingly, FIG. 4 schematically shows steps after the step S117 of transmitting the security check result from the user terminal 100 to the integrity verification server 200 .

On the other hand, the cloud-based app security service method, further comprising the step of providing the defect decision information, the defect decision information providing step, in the integrity verification server 200, the app of the security module built into the user terminal (100) Receive the security check result according to the security policy, and if there is a defect in the integrity of the target application or the operating system built into the user terminal 100 according to the security check result, a defect decision information is derived to the user terminal 100 can send

Specifically, the integrity verification server 200 that has received the security check result from the user terminal 100 derives flaw determination information of the target application or the operating system built into the user terminal 100 based on the security check result (S118) ) is performed. If there is a defect for each element selected by the administrator in the interface for the app security setting, the defect determination information corresponds to information about one or more defects corresponding to the element.

Next, the integrity verification server 200 transmits the derived defect decision information to the user terminal 100 ( S119 ), and the integrity verification server 200 generates a defect decision information including the defect decision information. to transmit to the portal server 300 (S120) can be performed. More specifically, the defect decision information may include one or more defect decision information, a time at which the defect decision information was derived, an identification number of the user terminal 100 from which the defect decision information was derived, and the like. In addition, the step (S120) of transmitting the defect decision information to the portal server 300 is performed every time the integrity verification server 200 derives the defect decision information, or may be performed according to a preset period, or the portal server ( 300), when the defect decision information is requested, the corresponding defect decision information may be generated and transmitted. Thereafter, the portal server 300 performs a step (S121) of storing the defect determination information received from the integrity verification server 200, and the defect determination information is stored in the memory included in the portal server 300 or externally. It may be stored in a separate DB (not shown).

On the other hand, the user terminal 100 performs the step (S122) of transmitting the fault determination information received from the integrity verification server 200 to the service server (500). More specifically, in addition to the defect determination information in the step (S122), the request information on whether to perform the event, which includes information about what event has occurred, the security check result, and the app security policy are included to the service server 500 . can do. Also, the security check result transmitted from the user terminal 100 may be transmitted from the integrity verification server 200 to the service server 500 according to an embodiment.

Subsequently, the cloud-based app security service method further includes a step of providing execution interruption information, wherein the step of providing the execution interruption information is, in the service server 500, receiving the defect decision information from the user terminal 100 and , transmits execution stop information for the target application to the user terminal 100 according to the verification result of the defect determination information.

Specifically, the service server 500 receiving the defect decision information from the user terminal 100 is the app stop element (E3, E7) or reporting element (E4, E4, Based on the selection information for E8), the execution interruption information is derived. For example, when fault determination information exists and the administrator selects the app stop elements E3 and E7, the service server 500 may derive execution stop information.

More specifically, in the step of providing the execution interruption information (S123), the service server 500 determines whether or not to include one or more essential defect determination information corresponding to each essential security element with respect to the defect determination information, and When the defect decision information is included, the execution stop information may be generated.

Preferably, the service server 500 determines whether or not one or more essential defect decision information is included in the defect decision information in deriving the execution interruption information, and if it is included, the administrator's app stop element (E3, Based on the selection input for E7), execution interruption information may be generated. The essential defect decision information corresponds to information that can have a fatal impact on security when a defect occurs in the integrity of the element, and when the essential defect decision information is included in the defect decision information, the service server 500 derives execution interruption information, , when there is a defect in a plurality of essential defect determination information, even if the administrator selects the reporting elements E4 and E8 and requests execution of the target application, execution interruption information may be derived.

On the other hand, the service server 500 performs the step (S124) of transmitting the derived execution stop information to the user terminal 100, and the user terminal 100 is based on the received execution stop information of the event. A step (S125) of stopping the execution or stopping the driving of the corresponding target application may be performed. Preferably, when the user terminal 100 stops the execution of the event or stops the operation of the target application, the user terminal 100 displays a display through a separate interface (not shown) so that the user can recognize that a defect has occurred and has been stopped. can do.

Additionally, the administrator may perform the step S126 of requesting the defect determination information to the portal server 300 through the manager terminal 400, and the portal server 300 receiving the request for the defect determination information details the corresponding request. A step (S127) of calling the fault determination information corresponding to the stored memory unit or a separate DB and transmitting the fault determination information to the corresponding manager terminal 400 may be performed.

5 schematically illustrates a process of providing information about a defect to a user terminal when a defect occurs in integrity according to an embodiment of the present invention.

5 is performed sequentially from the step (S128) of transmitting the security check result from the user terminal 100 to the integrity verification server 200 from the user terminal 100 shown in FIG. Until step S133, the security check result is transmitted from the user terminal 100 in FIG. 4 (S117), and thereafter is sequentially performed to transmit fault determination information from the user terminal 100 to the service server 500 (S122). ) is the same as up to Therefore, hereinafter, the steps after the step (S133) of transmitting the fault determination information from the user terminal 100 to the service server 500 will be described.

As shown in FIG. 5 , the service server 500 receiving the defect decision information from the user terminal 100 performs a step of deriving the defect reporting information based on the defect decision information ( S134 ). Specifically, the reporting information on the defect is as described above in FIG. 3, with respect to the interface for the app security setting displayed on the manager terminal 400, the manager selects the reporting element (E4, E8), the target application or When a defect occurs in the operating system built into the user terminal 100 , the service server 500 corresponds to information that causes information about the defect to be displayed on the user terminal 100 .

On the other hand, even if the administrator has selected the app stop element (E3, E7) included in the interface for the app security setting, the service server 500 based on the received defect determination information If it is determined that the defect level is not large, preferably When the required defect determination information is not included in the defect determination information, the service server 500 may derive the defect reporting information by itself and transmit it to the service terminal.

As above, the service server 500 runs the app by determining the degree of defect by itself even if the administrator selects the app stop element (E3, E7), but derives reporting information on the defect information, so the integrity verification server 200 And it is possible to exert the effect of improving the security by managing double security in the service server 500 .

Then, the service server 500 performs a step (S135) of transmitting the derived reporting information on the defect to the user terminal 100. Specifically, the user terminal 100 receiving the reporting information on the flaw may display the reporting information on the flaw on the display included in the user terminal 100 . More specifically, the display displays information on whether a defect has occurred in any of the target application or the operating system, information on which defect has occurred, and information about executing an event of the target application even though the defect has occurred. Through the terminal 100, the corresponding information can be recognized.

6 schematically illustrates a service detail management step and a detailed process of the corresponding step according to an embodiment of the present invention.

As shown in FIG. 6 , the cloud-based app security service method further includes a service history management step, wherein the service history management step is from the portal server 300 to the manager terminal 400 to the target application transmitting information on and details of an app security policy corresponding to the target application; and transmitting, from the portal server 300 , one or more security check results corresponding to the target application to the manager terminal 400 according to the manager's selection input for the target application.

Specifically, the portal server 300 serves to provide information on the service details performed by the integrity verification server 200 for one or more target applications requested by the manager terminal 400 to the manager terminal 400. carry out Since such a configuration provides information about requested matters from the portal server 300 to the manager terminal 400 based on the cloud, a separate server is built for verification of each existing target application, and in each server Compared to the method of providing service details, it is possible to more conveniently receive service details for one or more target applications managed by the corresponding administrator.

More specifically, a step (S136) of requesting service details for one or more target applications managed by the manager to the portal server 300 through the manager terminal 400 is performed. In order to request service details for one or more target applications to the portal server 300, the manager terminal 400 provides a list of one or more target applications managed by the corresponding manager through a separate interface, and the manager By selecting a target application to be received from the list, service details can be requested from the portal server 300, or a unique value of the target application that the administrator wants to receive through the manager terminal 400, for example, of the target application. You can also request service details of the target application by entering the name or ID of the target application.

Next, the portal server 300 performs a step (S137) of transmitting the app security policy for the target application derived based on the information on the target application and the app security settings input by the administrator with respect to the received request (S137) do. Additionally, in the corresponding step (S137), the date and time of registering the target application in the portal server 300 and the integrity verification server 200 by entering the information on the target application and the corresponding app security policy as well as the app security settings of the target application. , the type of the operating system in which the corresponding target application is driven, the version of the corresponding target application, etc. may be transmitted to the manager terminal 400 .

On the other hand, through the manager terminal 400 receiving the information on the target application and the app security policy details of the target application, the administrator can check the service details for the specific target application performed by the integrity verification server 200. A target application is selected, and the manager terminal 400 transmits a selection input for a specific target application to the portal server 300 based on the manager's selection input (S138).

Finally, the portal server 300 displays the service details performed for the specific target application based on the received selection input for the specific target application, more specifically, the security check result for the specific target application to the manager terminal Step (S139) of transmitting to (400) is performed. Through the step (S139), the administrator can check the security check result for the specific target application displayed on the manager terminal 400, and check the security check result performed in the plurality of user terminals 100 using the specific target application can

According to an embodiment of the present invention, the portal server 300 comprehensively provides the security check result for a plurality of applications to the administrator in a cloud manner, so that the administrator can efficiently grasp information about each application. can perform

7 schematically illustrates a security management interface displayed on an administrator terminal in a service detail management step according to an embodiment of the present invention.

As shown in FIGS. 6 and 7 , the portal server 300 transmits information on one or more target applications and the app security policy details of the corresponding target applications to the manager terminal 400 through the step (S137) of the manager The terminal 400 may display a security management interface.

Specifically, the security management interface is, the administrator manages through the integrity verification server 200 and the portal server 300 information on all target applications or one or more target applications selected by the administrator from all target applications. provided to the manager.

On the other hand, the elements displayed on the security management interface are the registration date of registering each target application in the integrity verification server 200 or the portal server 300, the platform corresponding to the type of operating system in which each target application is driven, each of the target application name, the ID of each target application, the version of each target application, and each app security policy derived based on the app security settings input by the administrator for each target application. Preferably, the registration date is based on the time when the application security settings input by the administrator for each target application are transmitted to the integrity verification server 200 or each application security setting in the integrity verification server 200. The time at which each app security policy for the target application is derived may correspond.

In addition, although not shown in FIG. 7, when an administrator selects a specific target application for each target application displayed on the security management interface, it is a visual element that can distinguish the selected specific target application, such as a checkbox or shading. It can include various visual elements.

According to an embodiment of the present invention, since the portal server verifies the integrity of the target application or the built-in operating system of the user terminal in the cloud method according to the app security settings input from the administrator in the portal server, a service server that communicates with each target application In , it is possible to exert the effect of managing the integrity verification and security of multiple target applications or multiple operating systems by using only the portal server without the administrator setting the app security directly.

According to an embodiment of the present invention, since security-related processes are performed in the portal server and the integrity verification server in a cloud manner, the security-related processes performed in the service server are significantly reduced, and thus the load of the service server is reduced. can be effective.

According to an embodiment of the present invention, the administrator can select only the desired elements for the plurality of app integrity elements and the plurality of OS integrity elements included in the interface for app security setting, and depending on the selected elements, the integrity of the target application or Since the integrity of the operating system can be verified, it is possible to exert the effect of setting detailed items in verifying the integrity.

According to an embodiment of the present invention, the administrator can select the desired item for the app stop element and the reporting element included in the interface for app security settings, and if there is a defect in integrity according to the selected item, the app is stopped, Since it is possible to provide information on the occurrence of a defect to the user terminal without stopping the app, it is possible to exert the effect of setting the operation of the target application when a defect occurs.

According to an embodiment of the present invention, the integrity verification server derives defect decision information of the operating system built into the target application or user terminal according to the security check result, and the derived defect decision information is transmitted to the service server through the user terminal, and the service server Since it determines whether the execution of the target application is stopped according to the defect determination information, it is possible to exert the effect of double-checking the security in the integrity verification server and the service server.

According to an embodiment of the present invention, since the portal server comprehensively provides the security check result for a plurality of applications to the administrator in a cloud manner, the administrator can efficiently grasp information on each application. .

As described above, although the embodiments have been described with reference to the limited embodiments and drawings, various modifications and variations are possible for those skilled in the art from the above description. For example, the described techniques are performed in a different order than the described method, and/or the described components of the system, structure, apparatus, circuit, etc. are combined or combined in a different form than the described method, or other components Or substituted or substituted by equivalents may achieve an appropriate result.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (7)

A cloud-based app security service method comprising:
In the portal server, receiving the administrator's app security settings for the target application;
In the integrity verification server, setting an app security policy based on the app security settings;
receiving, in the integrity verification server, an event generation request from a user terminal, and transmitting an app security policy to the user terminal;
receiving, in the integrity verification server, a security check result according to the app security policy of a security module built in the user terminal, and transmitting an authentication token to the user terminal according to the security check result; and
In the service server, receiving the authentication token from the user terminal, and transmitting execution permission information for the target application to the user terminal according to the verification result of the authentication token;
The cloud-based app security service method,
In the integrity verification server, receiving a security check result according to the app security policy of the security module built into the user terminal, and according to the security check result, there is a defect in the integrity of the target application or the operating system built in the user terminal If there is, a defect decision information providing step of deriving the defect decision information and transmitting it to the user terminal; and
receiving the defect decision information from the user terminal in the service server, and determining whether or not the defect decision information includes one or more essential defect decision information corresponding to each essential security element; And when the essential defect determination information is not included, deriving reporting information on the defect based on the defect determination information and transmitting it to the user terminal; providing a defect reporting information comprising;
In the user terminal receiving the reporting information about the defect, the execution of the target application is permitted,
The step of receiving the app security settings is,
In the portal server, further comprising the step of providing an interface for the app security settings displayed on the display of the manager terminal,
The interface for the app security setting is,
one or more app integrity elements corresponding to elements that verify the integrity of the target application, which can be selected from the administrator;
one or more OS integrity elements corresponding to elements for verifying the integrity of the operating system embedded in the user terminal;
an app stop element for stopping execution of the target application according to a selection input for the app security setting of the administrator when there is a defect in the integrity of the target application or the integrity of the operating system built into the user terminal; and
A reporting element that permits execution of the target application, but transmits information on the defect to the user terminal; further comprising, a cloud-based app security service method.
delete delete delete The method according to claim 1,
The cloud-based app security service method further comprises the step of providing execution interruption information,
The step of providing the execution interruption information comprises:
A cloud-based app security service method for receiving, in the service server, the defect decision information from the user terminal, and transmitting execution stop information for the target application to the user terminal according to the verification result of the defect decision information.
6. The method of claim 5,
The step of providing the execution interruption information comprises:
Cloud-based, in the service server, determining whether or not one or more essential fault determination information corresponding to each essential security element is included in the fault determination information, and generating the execution stop information when the essential fault determination information is included App security service method.
The method according to claim 1,
The cloud-based app security service method further comprises a service history management step,
The service details management step is,
transmitting, from the portal server, information on the target application and details of the app security policy corresponding to the target application to the manager terminal; and
In the portal server, transmitting one or more security check results corresponding to the target application to the manager terminal according to the manager's selection input for the target application; Containing, cloud-based app security service method.

Images