KR20030085270A - Method and system for authenticating a software - Google Patents

Abstract

PURPOSE: A method and a system for certifying a software are provided to protect CONSTITUTION: A security level information setting part(152) sets the security level information matched with each software uploaded to a download server. An error code generator(154) generates an error code capable of judging the error occurrence for the software data on a mobile terminal. A download file generator(156) generates the download file by attaching a header, the error code, and the security level information to the software database. A certification part(158) performs the certification for the mobile terminal when the mobile terminal connects to the download server. A billing part performs a billing function for the software data requesting the download.

Description

METHOD AND SYSTEM FOR AUTHENTICATING A SOFTWARE

The present invention relates to a method and system for authenticating a software, and more particularly, a method for executing software only on an authenticated mobile terminal by performing a predetermined authentication process when the software downloaded from a server is executed on a mobile terminal. It's about the system.

In the related art, a problem occurs that the software completed by putting effort and time into use is freely downloaded from an unauthorized mobile terminal, or the downloaded software is copied through the mobile terminal. In addition, the unauthorized copying often causes legal disputes of copyright infringement.

In particular, as the mobile terminal is popularized, various wireless Internet contents have been developed. However, technical measures for protecting the copyright of such mobile terminal software are insignificant.

In addition, the mobile terminal has a lot of differences in performance and capacity compared to a general computer. That is, the mobile terminal software has a limited data size in consideration of the limited memory and the performance of the central processing unit.

Thus, there is a need for an authentication method for mobile terminal software suitable for the characteristics of the software for mobile terminal, but there is no authentication method suitable for such mobile terminal software.

In addition, the mobile terminal software is developed by uploading it to a server and downloading it from the mobile terminal.

However, there is a possibility that the software being developed in this process may be copied and flowed to a competitor. Therefore, there is a need for an authentication method for software for mobile terminals that can prevent copying of software for mobile terminals under development.

The present invention has been made to solve the problems of the prior art, by providing an authentication method and system suitable for software for a wireless mobile terminal, a method and system that can prevent unauthorized copying and execution of the software for the wireless mobile terminal. In providing.

In addition, an object of the present invention is to provide a method and system that can substantially protect the copyright of the developer or developer who developed the software for the wireless mobile terminal by preventing unauthorized copying of the software for the wireless mobile terminal.

Another object of the present invention is to provide a method and system for authenticating software for a mobile terminal suitable for the characteristics of the mobile terminal.

Another object of the present invention is to provide a method and a system which can prevent copying of software for a mobile terminal under development.

Figure 1a is a diagram showing the overall configuration of a software authentication system according to an embodiment of the present invention.

Figure 1b is a block diagram showing the functionality of the download server according to an embodiment of the present invention.

Figure 1c is a block diagram showing the function of a mobile terminal according to an embodiment of the present invention.

2 is a flowchart illustrating a procedure for downloading software data in a mobile terminal according to an embodiment of the present invention.

3A illustrates the data structure of a download file in accordance with one preferred embodiment of the present invention.

3B is a table showing security level information in accordance with one preferred embodiment of the present invention.

4 is a flowchart illustrating a process of generating a download file in a download server according to an exemplary embodiment of the present invention.

5 is a flowchart illustrating a process of storing a program according to an exemplary embodiment of the present invention.

6 is a diagram illustrating a software execution process in a mobile terminal according to an embodiment of the present invention.

7A is a flow chart illustrating a software authentication method in accordance with one preferred embodiment of the present invention.

7B is a flow chart illustrating a software data copy protection method in accordance with one preferred embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

100: download server

110: mobile terminal for developers

120: user mobile terminal

130: mobile terminal

140: local computer

152: security level information setting unit

154 error code generation unit (download server)

156: download file generation unit

158: certification unit

170: error code generation unit (mobile terminal)

172: security level information and error code comparison unit

174: authentication key generation unit

176: authentication key comparison unit

According to the present invention for achieving the above objects, there is provided a method capable of authenticating software for a mobile terminal and a system corresponding to the method. In addition, a recording medium may be provided that contains a program capable of performing the method.

According to another embodiment of the present invention, a method for authenticating software in a mobile terminal, the method comprising: receiving an execution command for an software installed in the mobile terminal from an input unit, generating a first error code for the software, Extracting the mobile terminal identifier, generating a first authentication key by combining the mobile terminal identifier and the first error code, comparing the first authentication key with a second authentication key previously stored in the mobile terminal And if the first authentication key matches the second authentication key, executing the software as a result of the comparison with the second authentication key.

In addition, the second authentication key is the mobile terminal receiving a download file from the download server coupled to the mobile terminal, wherein the download file includes software data, a second error code-in the mobile terminal Generating a third error code with respect to the software data, comparing the second error code with the third error code at the mobile terminal, and as a result of comparison, the second error code and the third error code match Storing the software data in the mobile terminal, extracting the mobile terminal identifier from the mobile terminal, and generating a second authentication key by combining the mobile terminal identifier and the second error code in the mobile terminal. It may be stored in the mobile terminal by.

The mobile terminal identifier may use a device serial number, and the first error code, the second error code, and the third error code may use a frame check string generated by a cyclic redundancy check scheme.

Further, if the software is development software, the first error code, the second error code and the third error code may use a frame check string 32. If the software is commercial software, the first error code, The second error code and the third error code may use frame check sequence 16.

The download file may further include a header including information on the first error code, and the download file may further include first security level information.

The method may further include extracting the first security level information from the download file, receiving an installation information file (INF) from the download server, wherein the installation information file includes second security level information. And comparing the first security level information and the second security level information, and if the first security level information and the second security level information do not match, the software is not stored in the mobile terminal. It is preferable not to.

According to another embodiment of the present invention, a method for authenticating software in a download server coupled via a network with a mobile terminal, the method comprising: receiving a download request signal from the mobile terminal, wherein the download request signal is Identifying a mobile terminal using the mobile terminal identifier, wherein the mobile terminal comprises a user mobile terminal and a developer mobile terminal, wherein the software is downloaded to the mobile terminal. Determining whether the software is allowed, extracting software data corresponding to the download request signal, wherein the software includes commercial software and development software, and outputs an error code for the software data. Calculating corresponding to the mobile terminal, generating a download file including the software data and the error code, and transmitting the download file to the mobile terminal, wherein the error code and the The execution of the software can be controlled using an authentication key generated by combining mobile terminal identifiers.

The method may further include extracting security level information corresponding to the software, generating a download file further including the security level information, generating an installation information file including the security level information, and transmitting the installation information file to the mobile device. Including the step of transmitting to the terminal, the mobile terminal may determine the error of the installation information file by comparing the security level information included in the installation information file and the installation information file included in the download file.

Here, the security level information is preferably set in advance corresponding to the range in which the resources of the mobile terminal can be used corresponding to the software.

Hereinafter, terms used in the present invention will be defined as follows.

The 'mobile terminal' includes not only a mobile phone, a personal communication service (PCS) and a personal digital assistant (PDA) that can store and execute software data in its own memory, but also all future mobile terminals.

According to a preferred embodiment of the present invention, such a mobile terminal is classified into a "user mobile terminal" and a "mobile terminal for developers."

The download server generates a download file including software data, an error correction code, a header, etc. at the request of the mobile terminal and transmits the downloaded file to the mobile terminal.

'Software' is divided into 'development software' and 'commercial software', and the development software can be downloaded only from a developer mobile terminal, thereby maintaining security during the development process.

The 'authentication key' is generated by combining an error code and a mobile terminal identifier, and can be prevented from being executed even if the software is copied unauthorizedly using the authentication key.

The 'mobile terminal identifier' is a unique identifier assigned to each mobile terminal, and may identify the mobile terminal using the mobile terminal identifier. As such a mobile terminal identifier, a device serial number can be used.

An electronic serial number (ESN) is a number assigned to each mobile terminal separately from the manufacturing serial number assigned to the mobile terminal.

The manufacturing company registers the device serial number (ESN) with the corresponding mobile communication company in the country where the mobile terminal is used. Thereafter, when the mobile terminal is registered with the mobile communication company or the device is changed, registration or device change is performed using an already registered device serial number (ESN).

Therefore, since the device serial number (ESN, Electronic Serial Number) is unique to each mobile terminal and is difficult to copy arbitrarily, it is preferable to use an device serial number (ESN) as the mobile terminal identifier.

The installation information file (INF, Information) is a file containing system information. When the program is installed or executed, hardware installation information included in the installation information file (INF, Information) is provided, particularly information for copying a driver file suitable for hardware.

Hereinafter, preferred embodiments of the software authentication method and apparatus according to the present invention will be described in detail with reference to the accompanying drawings.

In addition, in describing the present invention together with the accompanying drawings, the components of the present invention will be described using the same reference numerals regardless of the reference numerals.

1A is a diagram showing the overall configuration of a software authentication system according to an embodiment of the present invention.

Referring to FIG. 1A, the software authentication system according to the present invention includes a download server 100 and a mobile terminal 130, and may further include a local computer 140.

The download server 100 may provide the mobile terminal 130 with commercial software data that is being developed or completed, through a network, or through a local computer 140 coupled to the download server 100.

The mobile terminal 130 is a terminal 130 having a unique identifier assigned to the mobile terminal 130.

The mobile terminal 130 having the unique identifier may include all mobile terminals 130 such as a mobile phone, a personal communications service (PCS), a personal digital assistant (PDA), and the like.

The mobile terminal 130 is divided into a developer mobile terminal 130 and a user mobile terminal 130.

The developer mobile terminal 130 is a mobile terminal 130 used by people who develop software, and downloads the software from the download server 100 to test the software under development.

In addition, the user mobile terminal 130 is a mobile terminal of a general user who downloads and uses commercial software, and may be provided to the user mobile terminal 130 for a fee or free of charge.

According to the present invention, a method of connecting the mobile terminal 130 to the download server 100 may be divided into a network connection method for connecting through a network and a serial connection method for connecting through a cable.

The network access method refers to the transmission of the software divided into packet data using an existing mobile communication network or a communication network to be developed in the future.

On the other hand, the serial connection method is a method of accessing the download server 100 using a developer mobile terminal 110 mainly, and is a connection method mainly used when a developer develops the software data.

When the download server 100 is connected using the serial connection method, the download server 100 may be connected to the download server 100 using the local computer 140.

Since the network access method requires more download time than the serial access method, it is preferable that the developer mobile terminal 110 access the download server 100 using the serial access method for development efficiency.

According to an exemplary embodiment of the present invention, authentication of the software data may be performed using an electronic serial number (ESN) as an identifier for identifying the mobile terminal 130.

The software authentication method is performed by using an authentication key generated by combining the software attached error code and the device serial number (ESN) when the downloaded software is stored in the mobile terminal 130.

The authentication key generation method will be described in detail with reference to FIG. 5.

The authentication key according to the present invention is a software authentication method suitable for the mobile terminal 130 in consideration of the operating environment of the mobile terminal 130, that is, the limited memory, the capacity of the control device, etc., since the method of generating the authentication key is simple.

Authentication through a complex encryption scheme in a general computer imposes a lot of load on the mobile terminal 130, which takes a long time at the time of authentication and is not suitable for software authentication for mobile terminals.

Therefore, the authentication method using the authentication key generated using only the error code and the device serial number (ESN, Electronic Serial Number) is an authentication method suitable for the operating environment of the mobile terminal 130.

In addition, the authentication method can significantly reduce the authentication time, and can provide an effective copy protection effect by using a unique device serial number (ESN) for each mobile terminal 130.

1B is a block diagram illustrating the functions of a download server according to an exemplary embodiment of the present invention.

For convenience of explanation of the software authentication method according to the present invention, a general server function among the functions of the download server 100 will be omitted and described.

Referring to FIG. 1B, the download server 100 includes a security level information setting unit 152, an error code generation unit 154, and a download file generation unit 156, and includes an authentication unit 158 and a charging unit 160. ) May be further included.

The security level information setting unit 152 performs a function of setting security level information corresponding to the software for each software uploaded to the download server 100.

When the software is running on the mobile terminal 130, resources of the mobile terminal 130 available to the mobile terminal 130 are determined according to the security level information.

A detailed description of the security level information will be given below with reference to FIG. 3B.

The error code generation unit 154 generates an error code for the software data included in the download file, whereby the mobile terminal 130 that receives the software data may determine whether an error with respect to the software data occurs. Performs the function of generating it.

The download file generator 156 generates a download file by attaching a header, an error code, and security level information to the software data.

The authentication unit 158 authenticates the mobile terminal 130 when the mobile terminal 130 accesses the download server 100. In general, the authentication may be performed using the ID and password of the mobile terminal user, and may be identified using a mobile terminal identifier, that is, an electronic serial number (ESN).

The charging unit 160 performs a charging function on the software data requesting the download from the download server 100.

Commercially available software data can be distributed for a fee. In this case, the charging function can be performed according to each software.

The billing may be charged in various ways such as a fee for using a mobile terminal or a credit card for a user.

Figure 1c is a block diagram showing the function of a mobile terminal according to an embodiment of the present invention.

For convenience of description of the software authentication method according to the present invention, a general function of the mobile terminal will be omitted and described.

Referring to FIG. 1C, the mobile terminal 130 includes an error code generator 170, a security level information and error code comparator 172, an authentication key generator 174, and an authentication key comparator 176. .

The error code generator 170 performs a function of generating an error code, and the generating method is the same as the method of generating the error code in the download server 100.

That is, by generating an error code for the software data, the mobile terminal 130 that receives the software data performs a function of generating an error code that can determine whether an error occurs.

The security level information and error code comparison unit 172 compares the security level information and the error code to determine whether an error occurs in the security level information and software data included in the download file.

That is, the software data may be determined by comparing the error code generated by the error code generator 170 with the error code extracted by the download server 100.

In addition, whether or not an error with respect to the security level information is generated by comparing the security level information included in the download file with the security level information included in the download file and separately received installation information file (INF, Information). You can determine whether an error has occurred.

The authentication key generation unit 174 generates an authentication key when storing the software data received from the download file in the mobile terminal 130.

The authentication key may be generated by combining an error code and an electronic serial number (ESN) of the mobile terminal 130.

The authentication key comparison unit 176 may control the execution of the software data by using the authentication key generated by the authentication key generation unit 174.

That is, the execution of the software can be controlled by comparing the authentication key stored in the mobile terminal 130 with the authentication key generated every time the software data is executed.

2 is a flowchart illustrating a procedure for downloading software data in a mobile terminal according to an embodiment of the present invention.

At present, various mobile terminal softwares have been developed or commercialized due to the popularity of mobile terminals.

Therefore, the mobile terminal software can be protected from unauthorized copying by the software authentication method and system according to the present invention.

That is, according to the present invention, the software data for the mobile terminal is provided only to the mobile terminal 130 authenticated by the server. In addition, even if the software of the authenticated mobile terminal 130 is copied by another mobile terminal 130, it can be prevented from being executed in the other mobile terminal 130 by the authentication key.

Hereinafter, the downloading process of the software in the download server according to the present invention will be described with reference to FIG. 2.

In step 200, the mobile terminal 130 accesses the download server 100 through a network.

As described above with reference to FIG. 1A, a method of accessing the download server 100 by the mobile terminal 130 may be classified into a network connection method for connecting through a network and a serial connection method for connecting through a cable.

Hereinafter, in FIG. 2, the network connection method will be described. The download method using the serial connection method will be described with reference to FIG. 7B.

In operation 205, the download server 100 performs authentication of the mobile terminal 130 connected to the download server 100.

The authentication method in the download server 100 may generally be performed using an ID and password of the mobile terminal user.

After authentication, the download server 100 searches for the desired software, and in step 210, the mobile terminal 130 transmits a download request signal for the desired software to the download server 100.

In step 215, the download server 100 receiving the download request signal extracts software data for the software and generates a download file including the software data.

The download file may include a header, software data, security level information, and an error code.

After the download server 100 generates the download file, the download file is transmitted to the mobile terminal 130 in step 225.

In operation 230, the mobile terminal 130 stores the downloaded data in the software data.

The storing process may be divided into an error checking process, a software data storing process, and an authentication key generating process.

The error checking process is a process of checking whether an error regarding software data and a security level occurs in the received download file.

The software data storing process is a process in which the software data is stored in the mobile terminal 130 when no error occurs in the different error checking process.

The authentication key generation process is a process of generating an authentication key by combining the error code and the device serial number (ESN, Electronic Serial Number) in the mobile terminal 130.

The storage process of step 230 will be described in detail with reference to FIG. 5.

In operation 235, the mobile terminal 130 may execute software corresponding to the software data using the software data stored in the mobile terminal.

At the time of execution, the execution of the software can be controlled using the authentication key generated in step 230.

The execution process of step 230 will be described in detail with reference to FIG. 6.

3A illustrates a data structure of a download file according to an exemplary embodiment of the present invention.

When the download server 100 receives the download request signal from the mobile terminal 130, the download server 100 generates a download file including software data corresponding to the download request signal and transmits the downloaded file to the mobile terminal 130.

Referring to FIG. 3A, the download file includes a header 300, software data 320, security level information 340, and an error code 360.

In accordance with the present invention, the header 300 contains information about an error code.

The mobile terminal 130 may extract information about the error code included in the header and generate the error code in the same manner. Thereafter, by checking whether the error codes are identical, it may be determined whether an error with respect to the software data occurs.

Software data 300 is a data file corresponding to the software requested by the mobile terminal 130, it is preferably included in the download file in the form of a compressed file.

When included in the compressed file format, the download server 100 should generate an error code for the compressed file format.

Security level information 340 includes information about resources that the software can access within the mobile terminal at run time.

The available resources of the mobile terminal 130 may be determined according to the security level information 340, and the security level information 340 may be set for each software data.

The security level information 340 will be described in detail with reference to FIG. 3B.

The error code 360 is used when the software data 320 determines whether an error has occurred in the transmission process.

According to the present invention, an error code 360 is attached to a download file to be transmitted by the download server 100 to detect whether an error occurs.

In addition, the mobile terminal 130 receiving the download file may determine whether an error with respect to the software data 320 occurs using the error code 360.

Hereinafter, a method of determining whether an error occurs using the error code 360 will be described below.

The error code 360 generating method includes a parity check and a cyclic redundancy check.

Parity check is the addition of parity bits to the end of a block of data, which is one of the simplest error detection techniques, but has the disadvantage of not being able to detect an error evenly.

Therefore, according to the present invention, it is preferable that the error detection method uses a cyclic redundancy check method.

The error code 360 uses a frame check sequence (FCS) when performing a cyclic redundancy check (CRC).

The method of determining whether an error occurs in the mobile terminal 130 according to the present invention is as follows.

That is, the mobile terminal 130 generates a frame check sequence (FCS, Frame Check Sequence) for the software data as in the download server 100, and generates an error code included in the download file and the mobile terminal 130. By comparing the identity of one frame check sequence (FCS, Frame Check Sequence), it is possible to determine whether an error occurs.

When using the cyclic redundancy test method according to the present invention, sialic 32 (CRC32) and sialic 16 (CRC16) may be used according to the type of mobile terminal 130.

According to an embodiment of the present invention, commercial software data used by general users may use CRC16 to increase the authentication speed when checking whether an error occurs or when authenticating a software. CRC32 can be used to increase the verification effect of the system.

According to another embodiment of the present invention, since commercial software data is generally transmitted wirelessly through a mobile communication network, since error occurrence is more likely than that of a wired line, an error code using the CRC32 method may be used. On the other hand, since the development software data is transmitted by wire through a cable according to the present invention, the possibility of error is lower than that of wireless. Therefore, an error code based on the CRC16 method can be used.

According to the present invention, it is preferable that not only the above-described error detection but also error correction can be performed.

As a technique for correcting an error, it is preferable to use an Automatic Repeat ReQuest (ARQ) method. The automatic retransmission method (ARQ) is a method of correcting an error by requesting a sender to retransmit a block of data after an error is detected.

In addition to the Automatic Repeat ReQuest (ARQ), there is a Forward Error Corretion (FEC) scheme. Forward Error Corretion (FEC) is an error control technique that simultaneously detects and corrects errors, and does not require reverse channels and enables continuous data flow compared to Automatic Repeat ReQuest (ARQ).

However, the forward error correction (FEC) has a disadvantage in that a large overhead for simultaneously detecting and correcting an error is not suitable for the mobile terminal 130. Therefore, the error correction method according to the present invention preferably uses an automatic retransmission method (ARQ).

In addition, in the data structure of the download file according to an embodiment of the present invention, the header may be configured by 1 byte, the security level information by 1 byte, and the error code by 4 bytes.

3B is a table showing security level information according to an embodiment of the present invention.

The security level information 340 is designated for each software, and the software can use the resources of the mobile terminal 130 within the range allowed by the security level information 340. The security level information 340 as described above. By using the, when the software is executed in the mobile terminal 130, security and stability can be maintained.

According to the present invention, the level of security may be divided into application programming interface (API) security, directory security, library security, and the like, and may be further subdivided according to the importance of system access.

An application programming interface (API) is an interface for an application program to use functions of other programs such as a computer operating system (OS) or a database management system (DBMS).

By setting an access right to an operating system, a file or a library of the mobile terminal 130, the mobile terminal 130 is down due to the security of personal information in the mobile terminal 130 or the software data at the time of execution. Can prevent the problem.

Hereinafter, a function according to the security level information 340 will be described with reference to FIG. 3B, but the present invention is not limited to the division of the security level information 340 illustrated in FIG. 3B.

'Step 0' 342 is a step that can access the resources of the most mobile terminal 130, and is associated with the user's information such as device serial number (ESN, Electronic Serial Number), channel assignment, or 130 and security level information 340 related to the stability of the wireless network.

'Step 1' 344 is security level information 340 that can access information such as Mobile Identification Number (MIN), the current state of the mobile terminal, and the like.

The mobile identification number (MIN) refers to a 34-bit number digitally representing a 10-digit telephone number assigned to a mobile terminal, and generally refers to a telephone number of the terminal.

The second step 346 is security level information 340 capable of making a call, sending an SMS, and the like. 'Step 3' 348 is security level information 340 for accessing wireless network resources such as TCP / IP, UDP, HTTP, etc., and 'Step 4' 350 is security level information for controlling a file. 340.

'Step 5' 352 is security level information 340 for controlling serial communication, and Step 6 354 or less is general security level information 340, which is a security level that is accessible to all developers. Information 340.

4 is a flowchart illustrating a process of generating a download file in a download server according to an exemplary embodiment of the present invention.

The database coupled to the download server 100 stores software data under development or commercial software data.

Software developers generate source code for the software data, compile it, and upload it to the download server 100.

The software data uploaded to the download server 100 includes development software data uploaded for testing during development and commercial software data that is completed for development.

When the mobile terminal 130 transmits a download request signal to the download server 100, the download server 100 generates a download file including the software requested by the mobile terminal 130 and transmits the downloaded file to the mobile terminal 130. do.

Hereinafter, a download file generation procedure in the download server 100 according to the present invention will be described with reference to FIG. 4.

In operation 400, the download server 100 receives a download request signal from the mobile terminal 130. The download server 100 receiving the download request signal extracts software data corresponding to the download request signal.

The extracted software data may or may not exist in the form of a compressed file. If the software data does not exist in the form of a compressed file, the download server 100 may compress the software data, and insert the software data in the form of a compressed file into a download file.

When inserting in the form of a compressed file in this manner, it is natural that an error code must also be generated by the software data in the form of a compressed file.

In operation 410, the download server 100 determines the type of software requested by the mobile terminal 130.

According to the present invention, software is divided into development software and commercial software.

The development software can be downloaded only from the developer mobile terminal, thereby maintaining security during the development process.

In consideration of the possibility of error occurrence and the efficiency of development described above, it is preferable to generate an error code corresponding to the type of software.

That is, when using the Cyclic Redundancy Check (CRC) according to the present invention, the error code is generated by the CRC32 polynomial or the SIC16 polynomial according to the software type. Can be.

Hereinafter, the error code generated by the CRC32 polynomial will be referred to as a frame check sequence 32 (FCS 32).

In addition, an error code generated by the CRC16 polynomial is referred to as a frame check sequence 16 (FCS 16).

That is, commercial software can determine whether an error occurs using the frame check sequence 16 (FCS 16), and the development software data uses the frame check sequence 32 (FCS 32). It is possible to determine whether an error occurs.

Of course, in contrast to the above, the development software may determine whether an error occurs using the frame check sequence 16 (FCS 16), and the commercial software data may use the frame check sequence 32 (FCS 32, Frame Check Sequence 32). ) Can be used to determine whether an error has occurred.

In an embodiment of the present invention, in order to increase the authentication speed, the case of commercial software will be described based on the use of a frame check sequence 16 (FCS 16).

As a result of the determination in step 410, if the software is development software, a frame check sequence 32 (FCS 32) is generated in step 415.

A method of generating the frame check sequence 32 (FCS 32) is as follows.

When the size of the commercial software data is assumed to be n bits, it is increased by 16 bits and divided by a predetermined key value of k bits, so that the remainder of the r bits remains.

The remaining r bits are the frame check sequence 32 (FCS 32).

As described above, k is 32 bits and can be set to 0x04c11db7 in advance.

In operation 420, an error code generates a header and a security level including information that the frame check sequence 32 (FCS 32) is used.

As a result of the determination in step 410, when the software data is commercial software data, a frame check sequence 16 (FCS 16) is generated in step 425.

In order to speed up the authentication of commercial software data, it is preferable to use frame check sequence 16 (FCS 16) rather than frame check sequence 32 (FCS 32).

When the size of the commercial software data is assumed to be n bits, it is increased by 16 bits and divided by a predetermined key value of k bits, so that the remainder of the r bits remains.

The remaining r bits are the frame check sequence 16 (FCS 16).

The k bits are 16 bits and can be preset to 0x8005.

Hereinafter, the processes of steps 425 and 430 are similar to steps 415 and 420 and will be omitted.

In step 435, a download file including the generated header, software data, security level information, and an error code is generated. Then, the download file generated in step 440 is transmitted to the mobile terminal 130.

5 is a flowchart illustrating a process of storing a program according to an exemplary embodiment of the present invention.

According to the present invention, when the mobile terminal 130 stores the software according to the present invention in the mobile terminal 130, the mobile terminal 130 may generate an authentication key corresponding to the software.

Thereafter, execution of the software is controlled using the authentication key.

According to the present invention, when the software stored in the mobile terminal is copied to another mobile terminal, execution of the software is not allowed by the authentication key.

That is, since the error code and the device serial number (ESN, Electronic Serial Number) for the software data are encrypted, the terminal may not execute the software in a terminal other than the mobile terminal having the device serial number (ESN, Electronic Serial Number). Can't.

Hereinafter, a program storing process including an authentication key generation process will be described with reference to FIG. 5.

In step 500, the mobile terminal 130 extracts a header from the download file.

As described above, the download file includes a header, software data, and a frame check sequence (FCS), and may further include security level information.

The header contains information about the error code. That is, whether the error code for the software data, that is, the frame check sequence (FCS) or the frame check sequence (FCS) or the frame check sequence (FCS) 32 is checked. Contains information about

In step 505, the mobile terminal 130 determines the type of frame check sequence (FCS) using the error code information included in the header.

In operation 510, the mobile terminal 130 extracts a frame check sequence (FCS) and security level information from the download file.

Thereafter, in step 515, the mobile terminal 130 compares the security level information extracted from the download file with the security level extracted from the installation information file (INF, Information) to determine whether an error with respect to the security level information occurs.

According to the present invention, when receiving a download file from the download server 100, it is preferable to also receive the installation information file (INF, Information) corresponding to the download file.

The installation information file INF may include not only the installation information required when the software data included in the download file is installed in the mobile terminal 130, but also security level information.

That is, after receiving the installation information file (INF, Information), the mobile terminal 130 extracts security level information included in the installation information file (INF, Information), and extracts security from the security level information and the download file. Compare with level information.

As a result of the comparison, if the security level information included in the installation information file INF and the security level information extracted from the download file are not the same, the storing operation is stopped.

As a result of the comparison, if the security level information included in the installation information file (INF, Information) and the security level information extracted from the download file are the same, the mobile terminal 130 checks the frame check sequence (FCS, Frame) for the software data in step 520. Check Sequence).

According to the present invention, if the error code is a frame check sequence (FCS, Frame Check Sequence) 16 according to the error code information extracted from the header information, the frame check sequence (FCS, Frame Check) is performed by CRC16. Sequence) 16 is calculated.

When the error code is a frame check sequence (FCS) 32, a frame check sequence (FCS) 32 is calculated by the CRC32 method.

In operation 525, the mobile terminal 130 compares the error code extracted from the download file, that is, the frame check sequence (FCS) with the frame check sequence (FCS) calculated in operation 520.

As a result of the comparison, if the frame check sequence (FCS, Frame Check Sequence) calculated in step 520 and the frame check sequence (FCS, Frame Check Sequence) extracted from the download file are not the same, the storing operation is stopped.

As a result of the comparison, if the frame check sequence (FCS, Frame Check Sequence) calculated in step 520 and the frame check sequence (FCS, Frame Check Sequence) extracted from the download file are the same, the flow advances to step 520.

In operation 530, the mobile terminal 130 may store the software data extracted from the download in the mobile terminal 130.

According to the present invention, the software data may be included in a download file in the form of a compressed file. The software data in the form of the compressed file is stored in the mobile terminal 130 in the form of a compressed file, thereby efficiently using the memory in the mobile terminal 130.

That is, the software exists in the form of a compressed file, and is executed in the mobile terminal 130 by using the installation information file (INF, Information) when the mobile terminal 130 is executed, and is compressed again when the program ends. It is preferably present in the form of a file.

That is, it is preferable to use the installation information file (INF, Information) at the time of execution of the program, without being divided into separate storage steps and execution steps as in a general computer and a program.

In operation 535, the mobile terminal 130 generates an authentication key by combining the error code and the device serial number (ESN) stored in a memory in the mobile terminal 130.

Naturally, the combination may be performed in various ways, and according to one embodiment of the present invention, may be performed by an exclusive OR.

The exclusive OR (XOR, exclusive or) is one of the Boolean operators. The result of the operation is true only when one of the two operations is true and the other is false.

In operation 540, the result of the exclusive OR, that is, the authentication key, is stored in a memory in the mobile terminal 130.

According to the present invention, the authentication key stored in the memory can be performed by the program manager.

In general, the program manager operates on a platform mounted on the mobile terminal 130 and manages an application program. Currently, the program manager operates on almost all mobile terminals 130.

The software data is stored in the mobile terminal 130 via the steps 500 to 540 described above.

6 is a view showing a software execution process in a mobile terminal according to an embodiment of the present invention.

According to the present invention, even if the software data is copied without permission, the execution of the software data can be controlled using the authentication key generated in the storage step of FIG.

Hereinafter, a method of controlling execution of software using an authentication key will be described with reference to FIG. 6.

In operation 600, the mobile terminal 130 receives an execution command of software data through an input unit coupled to the mobile terminal 130.

In operation 605, the mobile terminal 130 calculates an error code for the software data, that is, a frame check sequence (FCS).

According to the present invention, the software data is stored in the memory of the mobile terminal 130 in the form of a compressed file.

In operation 610, the mobile terminal 130 extracts a device serial number (ESN) from a memory coupled to the mobile terminal 130.

In operation 615, the mobile terminal 130 generates an authentication key by combining the error code and the device serial number (ESN) stored in the memory of the mobile terminal 130.

Naturally, the combination may be performed in various ways, and according to one embodiment of the present invention, may be performed by an exclusive OR. That is, it is preferable to generate the authentication key using the same combination as in step 535 of FIG.

In operation 620, the mobile terminal 130 compares the authentication key generated in operation 615 with the authentication key stored in the mobile terminal 130, that is, the authentication key stored in the memory of the mobile terminal in operation 540 of FIG. 5.

As a result of the comparison, if the authentication key generated in step 615 and the authentication key previously stored in the mobile terminal 130, that is, the authentication key stored in step 540 of FIG. 5 are not the same, execution of the software is prohibited.

As a result of comparison, if the authentication key generated in step 615 and the authentication key stored in the mobile terminal 130 in advance, that is, the authentication key stored in step 540 of FIG. Can be implemented.

When the software is executed, it can be executed using the installation information file (INF, Information).

7A and 7B are flowcharts illustrating a software authentication method according to an exemplary embodiment of the present invention.

Mobile software data being developed or completed by the developers is provided from the download server 100 to the mobile terminal 130.

The software data uploaded to the download server 100 as described above is transmitted to the mobile terminal 130 through the network, or transmitted in a serial manner.

6 illustrates a method for preventing unauthorized copying of software data transmitted to an authenticated mobile terminal 130, while FIGS. 7A to 7C illustrate a method for preventing unauthorized copying in the download server 100. FIG. The figure shown.

According to the present invention, the case where the user uses the program in an unauthenticated manner is as follows.

That is, when the development software data is downloaded from the user mobile terminal 120 through the network connection method (see FIG. 7A) and when the software data is downloaded from the user mobile terminal 120 using the serial connection method ( 7B).

7A is a flowchart illustrating a software authentication method according to an exemplary embodiment of the present invention.

According to the present invention, the software under development is also uploaded and downloaded to the download server 100 and undergoes a test process for the software.

In this case, by preventing unauthorized copying of the software data under development to the mobile terminal 120 for general users, it is possible to prevent information about the software data under development from leaking to the outside.

Hereinafter, a software authentication method according to an embodiment of the present invention will be described with reference to FIG. 7A.

In operation 700, the download server 100 receives a download request signal from the mobile terminal 130 connected to the download server 100.

In operation 705, the download server 100 determines whether the mobile terminal 130 is a developer mobile terminal 110.

An embodiment of the determination method of the developer mobile terminal 110 according to the present invention is as follows.

When accessing the download server 100 via an ID and password through an authentication process, information about a developer may be stored in the download server in advance so that only the developer can download the development software. Can be.

That is, it can be determined using the ID and password of the developer as an identifier.

In another embodiment of the method for determining the developer mobile terminal 110 according to the present invention, an electronic device serial number (ESN) of the developer mobile terminal 110 may be used as an identifier.

In this case, even if the developer changes, the same developer mobile terminal 110 may download the software without updating the database of the download server 100.

As a result of the determination in step 710, when the download server 100 is not the developer mobile terminal 110, the download server 100 may transmit a message for terminating the access or rejecting the download request.

As a result of the determination in step 710, in the case of the developer mobile terminal 110, the download server 100 extracts the corresponding software data in step 710 and generates a download file including the extracted software data in step 715. In operation 720, the download server 100 transmits the generated download file to the mobile terminal 130.

Since the processes of steps 710 to 720 have been described above with reference to steps 415 to 440 of FIG. 4, it will be omitted.

7B is a flowchart illustrating a software data copy protection method according to an exemplary embodiment of the present invention.

According to the present invention, it is more efficient for the developer mobile terminal 110 to download through serial communication from the download server 100 through the local computer 140 than to receive the download file using the mobile communication network.

Since frequent software data downloads occur in the software data development process, the serial communication method having a low probability of error occurrence and excellent reception speed can be used to increase efficiency in the development process.

Therefore, the download file reception using the serial communication is limited to the developer mobile terminal 110, thereby increasing the effectiveness of security for the software data being developed during the development process.

Hereinafter, the downloading process through serial communication will be described with reference to FIG. 7B.

Currently, the mobile terminal 130 and the local computer 140 are connected via a cable, and the local computer 140 will be described on the assumption that the connection is to the download server 100.

In operation 750, the local computer 140 extracts an electronic serial number (ESN) from the mobile terminal 130.

In operation 750, the local computer 140 determines whether the mobile terminal 130 is the developer mobile terminal 110 using the device serial number (ESN).

Here, the device serial number (ESN, Electronic Serial Number) of the developer mobile terminal 110 is stored in advance in the storage device in the local computer 140.

As a result of the determination in step 755, if it is not the developer mobile terminal 110, the local computer 140 may display a message for rejecting the download request on the display device of the local computer 140.

As a result of the determination of step 755, in the case of the developer mobile terminal 110, the local computer 140 transmits a download request signal to the download server 100 in step 760.

In operation 765, the download server 100 extracts the corresponding software data, and in operation 770, the download server 100 generates a download file including the extracted software data. Thereafter, the download file generated in step 785 is transmitted to the local computer 140.

Since the processes of steps 765 to 770 have been described above with reference to steps 415 to 440 of FIG. 4, a description thereof will be omitted.

In operation 790, the local computer 140 transmits the received download file to the mobile terminal 130.

Through the above-described steps, by transmitting the development software data only to the developer mobile terminal 110, unauthorized copying can be prevented.

The present invention has the effect of preventing unauthorized copying and execution of the software for the wireless mobile terminal by authenticating the software for the wireless mobile terminal.

In addition, the present invention also prevents unauthorized copying of the software for the wireless mobile terminal, thereby effectively protecting the copyright of the developer or developer who developed the software for the wireless mobile terminal.

In addition, another object of the present invention is to effect the authentication of the software for the mobile terminal suitable for the characteristics of the mobile terminal.

In addition, another object of the present invention is to prevent the copy of the software for the mobile terminal under development.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and variations can be made.

Claims (20)

In the method of authenticating software in a mobile terminal, (a) receiving an execution command for software installed in the mobile terminal from an input unit; (a) generating a first error code for the software; (b) extracting the mobile terminal identifier; (c) generating a first authentication key by combining the mobile terminal identifier and the first error code; (d) executing the software if the first authentication key corresponds to a second authentication key previously stored in the mobile terminal; Software authentication method comprising a. The method of claim 1, In the step (d), the second authentication key Receiving a download file from a download server coupled to the mobile terminal, wherein the download file includes software data, a second error code; Generating a third error code for the software data at the mobile terminal; If the second error code corresponds to the third error code, storing the software data on the mobile terminal; Extracting the mobile terminal identifier from the mobile terminal; And Generating the second authentication key by combining the mobile terminal identifier and the second error code in the mobile terminal; Software authentication method, characterized in that stored in the mobile terminal. The method according to claim 1 or 2, And wherein said mobile terminal identifier is a device serial number. The method according to claim 1 or 2, The first error code, the second error code and the third error code And a frame check string generated by the cyclic redundancy check method. The method of claim 4, wherein If the software is development software, And the first error code, the second error code and the third error code are frame check string 32. The method of claim 4, wherein If the software is commercial software, And the first error code, the second error code, and the third error code are frame check strings. The method of claim 2, The download file further comprises a header including information on the first error code. The method of claim 2, The download file further comprises first security level information. The method of claim 7, wherein Extracting the first security level information from the download file; Receiving an installation information file (INF) from the download server, wherein the installation information file includes second security level information; And Comparing the first security level information with the second security level information; Including, And as a result of the comparison, if the first security level information and the second security level information do not match, the software is not stored in the mobile terminal. In the method of authenticating software in a download server coupled via a mobile terminal and a network, (a) receiving a download request signal from the mobile terminal, wherein the download request signal includes the mobile terminal identifier; (b) identifying the mobile terminal using the mobile terminal identifier, wherein the mobile terminal comprises a user mobile terminal and a developer mobile terminal; (c) determining whether the software is software that is allowed to be downloaded to the mobile terminal; (d) extracting software data corresponding to the download request signal, wherein the software includes commercial software and development software; (e) calculating an error code for the software data corresponding to the mobile terminal; (f) generating a download file including the software data and the error code; And (g) transmitting the download file to the mobile terminal; Including, And executing the software using the authentication key generated by combining the error code and the mobile terminal identifier in the mobile terminal. The method of claim 10, The mobile terminal identifier is Software authentication method, characterized in that the device serial number. The method of claim 10, The error code above A software check method comprising a frame check sequence by a cyclic redundancy check method. The method of claim 10, The determination method in the step (c) If the software is development software, the software authentication method, characterized in that the download is allowed only to the developer mobile terminal. The method of claim 10, In step (e) If the software is commercial software, The error code is a frame check sequence 16. The software authentication method. The method of claim 10, In step (e) If the software is development software, The error code is a frame check sequence 32, characterized in that the software authentication method. The method of claim 10, Step (e) is Extracting security level information corresponding to the software; Generating a download file further including the security level information; Generating an installation information file including the security level information; And Transmitting the installation information file to the mobile terminal; Including, And comparing the security level information included in the installation information file with the installation information file included in the download file in the mobile terminal to determine an error of the installation information file. The method of claim 16, The security level information is Software authentication method, characterized in that the preset in accordance with the range that can use the resources of the mobile terminal corresponding to the software. The method of claim 10, In the step (e), And a header including information on the error code is further included in the download file. A recording medium in which a program of instructions executable by a digital processing apparatus is tangibly embodied and readable by the digital processing apparatus for performing the software authentication method according to any one of claims 1 to 9. A memory in which a program is stored; And A processor coupled to the memory to execute the program, The processor executes the software authentication method according to any one of claims 10 to 18, by the program.