KR102388797B1 - Hardware control apparatus using a hardware security chip - Google Patents

Abstract

A hardware control device using a hardware security chip is provided.

Description

Hardware control device using hardware security chip {HARDWARE CONTROL APPARATUS USING A HARDWARE SECURITY CHIP}

It relates to a hardware control device, and more specifically, to a hardware control device including a security control unit based on a hardware security chip.

Since the control method of hardware (eg, controller, etc.) using software is written in software, productivity is high, and it is easy and convenient to update later functions and performance if necessary. However, from a security point of view, there may be a problem that the control of the hardware can be executed as intended by the attacker by taking control of the software by external access. In particular, in the case of hardware devices using various wired/wireless communication networks, there are more threat factors and methods for accessing and controlling the corresponding hardware.

On the other hand, no matter how well the external authentication module is independently written and managed, it is realistically possible for an attacker to freely control the hardware with just one software bug.

In one embodiment, a hardware control device including a main control unit for performing communication and primary authentication, and a security dedicated control unit for directly processing communication to control hardware or hardware after processing authentication for performing an actual command in the dedicated security control unit is provided

1 is a flowchart of an application service of a hardware control apparatus according to an embodiment.
2 is a diagram illustrating a relationship between hardware and peripheral devices of a hardware control apparatus according to an embodiment.
3 is a block diagram of a hardware device according to an embodiment.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. However, the scope of rights is not limited or limited by these embodiments. Like reference numerals in each figure indicate like elements.

The terms used in the description below have been selected as generally universal in the related technical field, but there may be other terms depending on the development and/or change of technology, customs, preferences of technicians, and the like. Therefore, the terms used in the description below should not be understood as limiting the technical idea, but should be understood as exemplary terms for describing the embodiments.

In addition, in specific cases, there are also terms arbitrarily selected by the applicant, and in this case, the meaning will be described in detail in the corresponding description. Therefore, the terms used in the description below should be understood based on the meaning of the term and the content throughout the specification, rather than the simple name of the term.

The control method of H/W (eg, controller, etc.) using S/W is written in S/W, so productivity is high and, if necessary, it is possible to quickly and conveniently update functions and performance later. However, when accessing from a security point of view, there may be a problem that the control of S/W can be seized by external access and the control of H/W can be executed as intended by the attacker. In particular, in the case of access and control of H/W using various wired/wireless communication networks, more threat factors and methods exist. No matter how well the external authentication module is independently written and managed, it is realistically possible for an attacker to freely control all H/W with just one bug.

As in the existing system, even if a hardware security module is installed for security enhancement and authentication is performed through the security module, if the H/W control connection line is connected to the main control unit (communication I/O module), the device stolen by an attacker can ignore the authentication result and execute its own command on the H/W control connection line.

Accordingly, in the embodiments of the present invention, after the main control unit processes communication and primary authentication, and the dedicated security control unit (H/W security chip) processes authentication for executing actual commands, the security-only control unit is H/W Alternatively, the problem of the S/W method is solved by directly processing the communication to control the H/W.

The main control unit is exposed to various attack methods because the structure of the S/W is complex and has to handle many tasks. can resist

The command transmitted from the security control unit to H/W includes the verification code transmitted from the server, first authenticates the verification code, and then transmits the corresponding command to the control signal through the H/W control connection line. or transmit a command protocol.

The security control unit may additionally perform multiple pre-defined processes by one command.

Even if the security control unit is composed of H/W logic or S/W, it hides S/W inside the chip so that S/W cannot be modified from the outside, or writes security, manufacturer S/W authentication is performed so that only the user can write.

The authentication code used in the security control unit may be used without restrictions such as PKI algorithm, Hash, symmetric key algorithm, and dedicated algorithm.

In the system implementing the embodiments of the present invention, an attacker can seize control by attacking the main control unit, but the main control unit does not have a control line that can be transmitted to the H/W connected to the H/W Attack is impossible because it cannot control the server and cannot create and deliver a message sent from the server to the security control unit.

The maximum attack possible by an attacker who attacks the main control unit is only a DOS (Denial of Service) attack that prevents the server's message from being sent to the security control unit.

In other words, it is an attack that does not give any commands by attacking the main control unit no matter what command the server gives. Compared to an attack in which the attacker can give commands freely with H/W, it is a trivial attack that cuts the communication line in wired communication or It is no different from an attack that jams radio waves.

Another predictable attack method is to connect the H/W control connection line connected to the security control unit to the main control unit or other control devices to attack. It is a dangerous attack method that has to be risked, and defense against this method is only possible with a physical method.

If this attack method is used, it is possible to remotely control the HW control device using an external communication network for the HW control device in which the communication network does not operate, so it is reasonable not to classify it as a security attack method.

Another attack method is to attack the server and give a command to the security control unit through the main control unit.

The device described above may be implemented as a hardware component, a software component, and/or a combination of the hardware component and the software component. For example, devices and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA), It may be implemented using one or more general purpose or special purpose computers, such as a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. A processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that can include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

Software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or apparatus, to be interpreted by or to provide instructions or data to the processing device. , or may be permanently or temporarily embody in a transmitted signal wave. The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and available to those skilled in the art of computer software. Examples of the computer readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical recording media such as CD ROM and DVD, and floppy disks. Magneto-optical media, and hardware devices specially configured to store and carry out program instructions, such as ROM, RAM, flash memory, and the like are included. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

As described above, although the embodiments have been described with reference to the limited embodiments and drawings, various modifications and variations are possible from the above description by those skilled in the art. For example, the described techniques are performed in an order different from the described method, and/or the described components of the system, structure, apparatus, circuit, etc. are combined or combined in a different form than the described method, or other components Or substituted or substituted by equivalents may achieve an appropriate result.

Claims (7)

a main control unit for receiving data including an authentication code from an external device; and
The authentication code included in the data transmitted from the main control unit is authenticated, and when authentication of the authentication code is successful, a command corresponding to the authentication code is transmitted to the target hardware through a control connection line, When authentication fails, the security control unit rejects the transmission of a command corresponding to the authentication code to the target hardware.
including,
The target hardware is
performing an operation according to the command transmitted from the security control unit through the control connection line;
The main control unit is not connected to a control connection line for transmitting a command to the target hardware, so that even if the control right of the main control unit is seized by an external software attack, it is impossible to control the target hardware by the software attack,
hardware control unit.
According to claim 1,
The target hardware is
Operates only by a command received through the control connection line connected to the security control unit,
hardware control unit.
delete delete delete According to claim 1,
The external device is a server receiving a control request from the user device,
The user device is
Transmits a first command, which is any one of a plurality of commands, to the server for controlling the target hardware,
the server is
determining whether the first command received from the user device is a pre-registered command, and if the first command is a pre-registered command, transmitting a second command corresponding to the first command to the main control unit,
hardware control unit.
A hardware control method performed by a hardware control device, comprising:
receiving data including an authentication code from an external device through a main controller of the hardware control device;
authenticating the authentication code included in the received data through the security control unit of the hardware control device; and
Through the security control unit, if authentication of the authentication code is successful, a command corresponding to the authentication code is transmitted to the target hardware through a control connection line, and if the authentication for the authentication code fails, the authentication code corresponds to the target hardware refusing to send the command
including,
The target hardware is
performing an operation according to the command transmitted from the security control unit through the control connection line;
The main control unit is not connected to a control connection line for transmitting a command to the target hardware, so that even if the control right of the main control unit is seized by an external software attack, it is impossible to control the target hardware by the software attack,
Hardware control method.

Images