KR20060125077A - System for detecting an altered application downloaded from download server - Google Patents

Abstract

A system for determining alteration of a downloaded application program is provided to determine forgery/alteration of the application program downloaded from a download server. The download server(110) registers the application programs including a certification key and downloads the application program according to an external request. A terminal(120) downloads/stores the application program by connecting to the download server according to a customer request and executes the application program in case of need. A service providing server(100) includes a database for storing/managing the certification key recorded to the application program and provides a service. The terminal is connected to the service providing server by executing the application program, transmits the certification key recorded in the application program to the service providing server. The service providing server permits connection of the terminal in case that the received certification key is matched with the certification key stored in the database.

Description

SYSTEM FOR DETECTING AN ALTERED APPLICATION DOWNLOADED FROM DOWNLOAD SERVER}

1 is a block diagram showing an overall modulation determination system of an application program according to a preferred embodiment of the present invention.

2 is a flowchart sequentially illustrating an operation of a modulation determination system of an application program according to an exemplary embodiment of the present invention.

3 is a block diagram illustrating a modulation determination system of an application program according to another embodiment of the present invention as a whole.

4 is a block diagram schematically illustrating a configuration of an authentication key management server of a modulation determination system of an application program according to another embodiment of the present invention.

FIG. 5 is a flowchart sequentially illustrating an operation of a modulation determination system of an application program shown in FIG. 3.

<Explanation of symbols for the main parts of the drawings>

100, 300: service providing server

110, 310: Download Server

120, 320: terminal

302: authentication key management server

304: authentication key generation unit

306: authentication key register

308: Database

309: authentication key transmission unit

The present invention relates to a system and method for determining whether a downloaded application is forged or tampered. More particularly, the present invention relates to a system and method for determining whether an application registered in a download server is original and has been tampered with. It is about.

Recently, with the development of the Internet and the rapid development of wired and wireless communication technologies, it is possible to perform banking or securities transactions using the Internet or a personal mobile terminal. In order to provide such a service, there must be a service providing server managed and operated by a bank or a securities company, and a customer can receive the corresponding service by installing and executing the corresponding application in his terminal.

In order to install the application program on the terminal, the application server registered in the download server is downloaded and stored in the terminal.

However, since the download server is generally managed and operated by the mobile communication company, the service operator requests the mobile communication company to register a specific application program with the download server. That is, the download server and the service providing server are managed and operated by different operators and do not interwork with each other.

Due to this situation, there is a problem that an application program registered in the download server may cause intentional forgery, tampering, or tampering by an operator. In addition, when such a forgery or altered application is registered in the download server, it is very difficult for the service operator to confirm it. In addition, when the modulated application is downloaded and executed to the terminal of the customer, a problem occurs that a normal service by the service providing server cannot be provided.

An object of the present invention for solving the above problems is to provide a system for determining the modulation of the application that can determine whether the application downloaded from the download server is forged or tampered.

A feature of the present invention for achieving the above-described technical problem relates to a system for determining whether or not forgery or forgery of an application program downloaded from a download server,

 A download server that registers specific applications in which an authentication key is recorded and transmits the applications according to an external request;

A terminal for accessing the download server according to a request from a customer, downloading and storing the application, and executing the application if necessary;

And a database for storing and managing an authentication key recorded in the application program, and a service providing server for providing a corresponding service to a terminal requesting service provision by executing the application program.

The terminal executes the application program to access the service providing server, and the executed application program transmits an authentication key recorded in the program to the service providing server, and the service providing server transmits the authentication key transmitted from the terminal. And the authentication key stored in the service providing server are compared with each other to allow connection of the terminal only.

Modulation determination system of the application program according to another aspect of the present invention,

A download server for registering specific applications and transmitting the applications in response to external requests;

A terminal for accessing the download server according to a request from a customer, downloading and storing the application, and transmitting an authentication key to the outside when the application is executed;

An authentication key management server for generating an authentication key from information about the application, and storing and managing the generated authentication key and identification information for the application;

And a service providing server that receives an authentication key for an application program from the terminal, compares the received authentication key with the authentication key stored in the authentication key management server, and permits access of the terminal only when they match each other.

The application program includes an authentication key generation module for generating an authentication key therein according to a preset method, and transmits the authentication key generated by the authentication key generation module to the service providing server when executed in the terminal.

In this case, it is preferable that the authentication key management server and the authentication key generation module of the application program generate an authentication key using at least one of a size and a creation date of the application program.

According to the present invention, when the download server and the service providing server do not interwork, the service providing server can check whether the application program registered in the download server is forged or forged.

Hereinafter, a configuration and operation of a modulation determination system of an application program according to an exemplary embodiment of the present invention will be described in detail with reference to the accompanying drawings. According to a preferred embodiment of the present invention, a system for determining modulation of an application includes an operator having a download server in which application programs to be downloaded are registered and a service providing server that actually provides a corresponding service to a user's terminal by executing the application program. It is applied when managed by or not interworked with each other. In this case, the present invention allows the service providing server to check whether the application programs registered in the download server are the latest version, the original, or the above.

Hereinafter, a modulation determination system of an application program according to a preferred embodiment of the present invention will be described with reference to FIGS. 1 to 2. 1 is a block diagram showing the modulation determination system as a whole.

Referring to FIG. 1, a modulation determination system according to a preferred embodiment of the present invention includes a service providing server 100, a download server 110, and a user terminal 120.

The download server 110 registers application programs to download and downloads specific application programs according to an external request. The application program has an authentication key recorded therein, and when installed and executed in the terminal, transmits the authentication key to the service providing server.

After the user accesses the download server using the terminal 120 to download the application program, the user executes the application program to access the service providing server. At this time, the application program transmits the authentication key recorded therein to the service providing server.

The service providing server 100 includes a database for storing and managing authentication keys recorded in the application program. When the service providing server 100 receives the authentication key from the application program, the service providing server 100 compares the transmitted authentication key with the authentication key stored in the database, and modulates the application program stored in the user terminal according to the comparison result. Will be judged.

If the two authentication keys match each other, the service providing server normally provides a service. However, if the two authentication keys do not match each other, the service providing server 100 transmits a message indicating that the "not a normal application program" to the terminal and terminates the access of the terminal.

On the other hand, the service providing server 100 according to the present invention may be provided with a database inside, it may be operated by having a separate database server outside.

Hereinafter, the operation of the above-described modulation determination system of the application program will be described in detail with reference to FIG. 2.

First, the application program in which the authentication key is recorded by the operator is registered in the download server (step 200). The application registered in the download server by the request from the user is downloaded to the corresponding terminal and stored in the terminal (step 210).

Next, as the application program stored in the terminal is executed, the service providing server is accessed. The application program transmits the user identification information (ID) and password input from the user during the login process and information on the authentication key recorded in the application program to the service providing server (step 220).

Meanwhile, the service providing server 100 stores and manages an authentication key recorded in an application program registered in the download server in an internal database (step 230).

The service providing server receiving the login request from the terminal performs an authentication process for the user using the user identification information and the password transmitted from the terminal (step 240). If the received user identification information and password match the registered information, the user is authenticated. Otherwise, the user is not allowed access.

Next, when authenticating with respect to the user, the service providing server compares the authentication key received from the terminal with the authentication key stored in the service providing server (step 250). If the two authentication keys do not match, the terminal is notified that there is a problem with the downloaded application program, and the connection is terminated. If the two authentication keys match, the service providing server can provide the corresponding service to the terminal.

Hereinafter, a modulation determination system of an application program according to another embodiment of the present invention will be described in detail with reference to FIGS. 3 to 5. 3 is a block diagram showing the overall modulation determination system of the application program according to the present embodiment.

 Referring to FIG. 3, the modulation determination system of an application program according to the present embodiment includes a service providing server 300, an authentication key management server 302, a download server 310, and a user terminal 320. Since the configuration and operation of the download server 310 and the user terminal 320 are the same as those of the above-described preferred embodiment, redundant description thereof will be omitted. The application program according to the present embodiment includes an authentication key generation module therein, and generates an authentication key using the size, creation date, etc. of the application program by the authentication key generation module when the application program is executed. The generated authentication key is transmitted to the service providing server 300.

As shown in FIG. 4, the authentication key management server 302 is a server that stores and manages information about an application program to be registered in the download server. The authentication key generation unit 304 and the authentication key registration unit 306 are provided. , A database 308, and an authentication key transmission unit 309.

The authentication key generation unit 304 generates an authentication key based on a program size, a creation date, etc. of an application program in the form of an executable file made of binary data. At this time, the authentication key may use a hash key.

The authentication key registration unit 306 receives a registration date for the application, application identification information (ID), version (version), and information about the authentication key, and stores the input information in the database 308 And manage. In addition, the authentication key registration unit 306 may selectively input the creation date for the program, the information on the carrier of the application, platform information, business fields, etc., and the input information is input to the database 308. Store and manage.

When the authentication key transmission unit 309 receives the authentication key request signal together with the identification information for the application from the service providing server 300, the authentication key transmission unit 309 retrieves the authentication key information for the application from the database 308, The retrieved authentication key information is transmitted to the service providing server.

When the service providing server 300 receives an authentication key from the application program of the user terminal as illustrated in FIG. 5 (step 540), the service providing server 300 includes identification information of the application program to the authentication key management server. The authentication key request signal is transmitted (step 550). The service providing server 300 receives an authentication key for the application program from the authentication key management server (step 560), and compares the authentication key transmitted from the user terminal with the authentication key transmitted from the authentication key management server. Then, based on the comparison result, it is determined whether the application program stored in the user terminal is tampered with.

If the two authentication keys match each other, the service providing server normally provides a service. However, if the two authentication keys do not match each other, the service providing server 300 transmits a message indicating that the "not a normal application program" to the terminal and terminates the access of the terminal.

According to the present invention, it is possible to check whether the application programs downloaded from the download server are originals, and whether they are forged or forged.

Although the present invention has been described above with reference to preferred embodiments thereof, this is merely an example and is not intended to limit the present invention, and those skilled in the art do not depart from the essential characteristics of the present invention. It will be appreciated that various modifications and applications which are not illustrated above in the scope are possible. In particular, in the embodiment of the present invention, the authentication key generation method, data items stored and managed in the authentication key management server, and the like may be modified in various ways to improve the performance of the modulation determination system according to the present invention. . And differences relating to such modifications and applications should be construed as being included in the scope of the invention defined in the appended claims.

According to the present invention, even if the download server and the service providing server are not interworked or managed by different operators, the service providing server can check whether the application program registered in the download server is the original or forged or forged.

In addition, when it is confirmed that the application program registered in the download server is forged or forged according to the present invention, the service providing server does not provide the service, thereby preventing abnormal abuse.

Claims (5)

A download server that registers specific application programs in which an authentication key is recorded, and transmits the application programs according to an external request; A terminal for accessing the download server to download and store the application program according to a request from a customer, and executing the application program if necessary; A service providing server having a database for storing and managing an authentication key recorded in the application, and providing a corresponding service to a terminal requesting to provide a service by executing the application. And the terminal executes the application program to access the service providing server, and the executed application program transmits an authentication key recorded in the program to the service providing server, and the service providing server is provided from the terminal. And a terminal for accessing the terminal only when the transmitted authentication key and the authentication key stored in the service providing server are matched with each other. The application program of claim 1, wherein after the authentication key is authenticated by the service providing server, the application program transmits user identification information (ID) and a password to the service providing server to perform a login process. Modulation judgment system of the program.  A download server that registers specific applications and transmits the applications according to an external request; A terminal for accessing the download server to download and store the application in response to a request from a customer, and transmitting an authentication key to the outside when the application is executed; An authentication key management server for generating an authentication key from information on the application, and storing and managing the generated authentication key and identification information for the application; A service providing server that receives an authentication key for an application program from the terminal, compares the received authentication key with the authentication key stored in the authentication key management server, and permits access of the terminal only when they match each other. The application program includes an authentication key generation module for generating an authentication key according to a preset method, and when executed in the terminal, generates an authentication key and transmits the authentication key to the service providing server. Modulation judgment system.  The system of claim 3, wherein the authentication key management server generates the authentication key using at least one of a size and a creation date of the application. Authentication key generation unit for generating an authentication key for a specific application; An authentication key registration unit configured to store and manage an authentication key generated by the authentication key generation module and identification information of a corresponding application in a database; And An authentication key transmission unit for receiving identification information and an authentication key request signal for an application program from an external source and transmitting an authentication key for the corresponding application program; Authentication key management server having a.

Images