KR20090042126A - Method for restricting an execution of application and appratus therefor - Google Patents

Abstract

An apparatus for restricting the execution of an application and a method thereof are provided to restrict one or more executions of one or more first applications selectively by determining the modulation of one or more firs applications. A method for restricting the execution of an application comprises: a step(310) reading out first authentication data for determining the modulation of one or more first applications; a step(320) determining the modulation of one or more first applications by using the read-out first authentication data; and a step(330) selectively restricting one or more executions of one or more first applications.

Description

Method for restricting an execution of application and appratus therefor}

The present invention relates to a method and an apparatus for limiting the execution of an application used to reproduce content.

AACS (Advanced Access Content System) is used as a technology for protecting content stored in a next-generation optical disc (Blu-ray Disc) and HD DVD (High Definition DVD). As such, to protect the content, AACS issues a content certificate with the AACS's signature.

1 is a diagram illustrating an embodiment of a conventional content certificate.

Referring to FIG. 1, the content certificate 100 includes an Applicant ID 110, which is an ID of a content provider, and a content sequence number 120, which is a sequence number of content. Such information may be used to determine whether to play content. Is used. For example, the content included in the content discard list of the Applicant ID 110 or the content sequence number 120 may be determined to be discarded content and reproduction of the content may be prohibited.

In BD technology, additional services may be further provided using Java applications when playing content. In this case, an electronic signature may be used to authenticate that the Java application is a true application. At this time, in order to increase the reliability of the electronic signature, a certificate for authenticating the electronic signature may be issued by a certification authority. Further, in order to further increase the reliability of such a certificate, a plurality of certificate authorities having a hierarchical structure may issue a plurality of certificates in such a manner that a higher certificate authority issues a certificate for authenticating a certificate of a lower certificate authority.

In FIG. 1, Hash_value_of_BDJ_Root_cert 130 represents a hash value for a certificate of a top-level certification authority in a hierarchy corresponding to an electronic signature for authenticating that a Java application is a true application.

Meanwhile, the content certificate 100 may include a content hash table digest 140 which is values obtained by dividing content into a plurality of sections and calculating a hash value for each divided section.

Signature Data 150 of FIG. 1 is an electronic signature value for all information included in the content certificate 100. Thus, whether or not the content certificate 100 has been tampered with is based on generating an electronic signature for all the information contained in the content certificate 100, and whether the generated electronic signature has the same value as Signature Data 150. Can be judged. The conventional content certificate can determine whether the content has been tampered with using the above-described information. However, the conventional content certificate does not include information for determining whether the Java applications have been tampered with, and thus there is a possibility that a third party may tamper with the Java application. In particular, some Java applications have a function of providing information about a content player and individual information of an information recording medium on which content is stored to the outside, in which case such information is leaked to the outside due to a third party's modulation. There was a problem that occurred.

Therefore, in order to prevent this, a method of revoking a content certificate for a Java application that has been tampered with has been proposed, but such a method may revoke the content certificate even when a Java application that does not perform an important function is tampered with. There was a problem that can not play.

SUMMARY OF THE INVENTION An object of the present invention is to provide an application execution limiting method and apparatus for selectively limiting execution of an application so that content can be reproduced even when the application is modulated.

According to an aspect of the present invention, there is provided a method of limiting execution of an application used for reproducing content stored in an information recording medium, the method comprising: reading first authentication data for determining whether at least one first application is tampered with; Determining whether the at least one first application is modulated using the read first authentication data; And selectively limiting execution of at least one of the at least one first application based on the determination.

Preferably, the first authentication data is authentication data for the at least one first application or authentication data for a directory in which the at least one first application is stored in the information recording medium.

Advantageously, said first authentication data is stored in at least one of a hash value, an electronic signature, and a message authentication code (MAC) for said at least one first application or in a directory in which said at least one first application is stored. At least one of a hash value, an electronic signature, and a message authentication code.

Preferably, the electronic signature is an electronic signature generated using a secret key of a certification authority or a provider of the content.

Preferably, the execution restriction method of the application according to the present invention comprises the steps of: receiving at least one second application different from the at least one first application; And receiving second authentication data for both the at least one first application and the at least one second application, wherein determining the at least one first application using the second authentication data. Determining whether or not the first application and the at least one second application are modulated, and selectively limiting the execution are based on the determination, at least one of the at least one first application and the at least one second application. It is characterized by selectively limiting the execution of.

Preferably, the execution restriction method of the application according to the present invention comprises the steps of: receiving at least one third application for replacing the at least one first application; And receiving third authentication data for the at least one third application, wherein the determining comprises: determining whether the at least one third application is modulated using the third authentication data, The selectively limiting of the execution may include selectively limiting execution of at least one of the at least one third application based on the determination.

Preferably, the method for limiting execution of an application according to the present invention further includes the step of receiving a revocation list which is information on whether the at least one first application is retired, and the determining is based on the revocation list. Determining whether at least one first application has been revoked, and selectively limiting the execution further selectively restricting execution of at least one of the first applications further based on the determination. It is done.

Preferably, the revocation list is characterized by including identifiers of the retired applications.

Preferably, the step of selectively limiting the execution may limit execution of at least one application determined to be modulated or discarded among the at least one first application as a result of the determination.

In addition, the execution limiting device of the application used to reproduce the content stored in the information recording medium according to the present invention for achieving the above object is a read for reading the first authentication data for determining whether at least one first application is tampered with part; A determination unit to determine whether the at least one first application is modulated using the read first authentication data; And an execution controller configured to selectively limit execution of at least one of the at least one first application based on the determination.

Preferably, the execution limiting device of the application according to the present invention receives at least one second application different from the at least one first application, and both the at least one first application and the at least one second application. The receiver may further include a receiving unit configured to receive second authentication data, wherein the determination unit determines whether the at least one first application and the at least one second application are modulated using the second authentication data, and executes the execution. The controller selectively limits the execution of at least one of the at least one first application and the at least one second application based on the determination.

In order to achieve the above object, the present invention includes the steps of: reading first authentication data for determining whether at least one first application is tampered with; Determining whether the at least one first application is modulated using the read first authentication data; And selectively limiting execution of at least one of the at least one first application based on the determination, wherein the program for executing the execution restriction method of the application used to reproduce the content stored in the information recording medium is A recorded computer readable recording medium is provided.

The present invention has the effect of restricting the execution of the modulated application when the application is modulated, and playing the content using the remaining applications except the modulated application.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

2 is a diagram illustrating an embodiment of an apparatus for limiting execution of an application according to the present invention.

Referring to FIG. 2, the apparatus for limiting execution of an application according to the present invention includes a reader 210, a determiner 220, and an execution controller 230.

The reading unit 210 reads authentication data for determining whether at least one application is modulated.

In this case, the application is a program used to reproduce the content. One application may be used to reproduce one content, or a plurality of applications may be used. For example, the application may be a user interface for playing content or a program for providing an additional service when playing content. In this case, the application may be a program coded using Java, but is not limited thereto and may be a program coded in various programming languages.

Here, the authentication data is data for determining whether the application is tampered with, and may include a hash value, an electronic signature, a message authentication code (MAC), etc. for the application. In this case, the electronic signature may be an electronic signature generated using a secret key of a certification authority or a provider of the content.

On the other hand, the authentication data of such an application may be included in the content certificate for determining whether the content is tampered with, in this case, the reader 210 reads the authentication data from the content certificate. In this case, when the authentication data of the application is a digital signature generated with the private key of the content provider, authentication may be performed only if the user has a public key corresponding to the private key of the content provider. However, since the user may not have all the public keys corresponding to the private keys of all the content providers, the digital signature is generated by using the public key of the content providers using the private key of the certification authority, and then the electronic signature is recalled. A method of storing in the content certificate may be used. In this case, if the user has the public key of the certification authority, the digital signature can be used to obtain the public keys of the content providers.

Equation 1 illustrates an embodiment of authentication data for a plurality of applications when an application A, an application B, and an application C exist.

[Equation 1]

H (app A) | H (app B) | H (app C)

H (app A | app B | app C)

 When H denotes a hash operation, the first equation in Equation 1 is an example of the case where the authentication data is configured by combining the hash value of the application A, the hash value of the application B, and the hash value of the application C. The formula is an example of the case where the authentication data is composed of a hash value of the data of the application A, application B and application C combined.

In Equation 1, the first equation is configured to know which of Application A, Application B, and Application C has been modulated, while the second equation is whether Application A, Application B, or Application C has a modulated application. It can be known, but it is configured so that it is not known which application has been modulated.

However, as described above, the authentication data is not limited to the hash value for the application as shown in Equation 1, and includes all kinds of data for determining whether the application is tampered with, such as an electronic signature and a message authentication code.

Meanwhile, contents and applications may be stored in an information recording medium. In this case, when a plurality of applications are used to reproduce the content, the plurality of applications may be stored together in a predetermined directory of the recording medium. When the applications are stored in one directory as described above, the authentication data may include a hash value, an electronic signature, a message authentication code, and the like for the directory itself. By generating the authentication data for the directory itself in this way, it is possible to determine whether the modulated data is present among all the applications stored in the directory.

The determination unit 220 determines whether at least one application is modulated using the authentication data read by the reading unit 210.

For example, if the authentication data is composed of a hash value of one application, the determination unit 220 calculates a hash value of the application, and whether or not the calculated hash value has a same value as the authentication data, whether or not modulation You can judge. In this case, the determination unit 220 determines that the application is not modulated when the two values match, and determines that the application is modulated when the two values do not match.

The execution controller 230 selectively limits the execution of at least one application based on the determination of the determination unit 220.

For example, in the case where the application A, the application B, and the application C exist, if the determination result of the determination unit 220 determines that the application A is modulated, the execution control unit 230 does not allow the application A to be executed. In some implementations, even when only Application A is modulated, execution of Application B and Application C may be limited together.

As described above, when the application is tampered with, the present invention can restrict the execution of the tampered application without discarding the content certificate itself as in the prior art. Unlike the prior art, which has not been possible, there is an advantage that the content can be played with limited execution of the modulated application. However, even in this case, if it is determined that all applications have been tampered with, the content may not be played.

3 is a diagram illustrating an embodiment of a method of limiting execution of an application according to the present invention.

In operation 310, authentication data for determining whether at least one application is modulated is read.

In operation 320, it is determined whether at least one application is modulated using the read authentication data.

In step 330, based on the determination, the execution of at least one application is selectively limited.

Up to now, the method of selectively limiting the execution of the application according to whether or not the application stored in the information recording medium has been described. However, in recent years, the BD technology and the like provide a function of downloading and using an application, and only limiting the execution of the application stored in the information recording medium may reduce the effectiveness of the present invention. Therefore, the following describes a method of limiting the execution of an application according to the present invention when downloading and using the application. In addition, hereinafter, an application stored in the information recording medium will be referred to as a first application in order to distinguish between the application stored in the information recording medium and the newly downloaded application.

4 is a diagram illustrating a second embodiment of a method of limiting execution of an application according to the present invention.

In step 410, at least one second application different from the first applications is received.

Here, the second application refers to an application that provides new functions different from those provided by the first applications, which are applications previously stored in the information recording medium.

Preferably, the execution restriction device of the application according to the present invention may further include a receiver (not shown) for receiving the second application.

In operation 420, second authentication data of both the first applications and the at least one second application is received.

For example, if the first applications are Application A and Application B, and the received second application is Application C, authentication data for all of Application A, Application B, and Application C are received. Meanwhile, although the second authentication data may be received separately from the second application as in the present embodiment, the second application and the second authentication data may be received together.

In operation 430, it is determined whether the first applications and the at least one second application are modulated using the second authentication data.

In step 440, based on the determination, the execution of at least one of the first applications and the at least one second application is selectively restricted.

For example, when it is determined that the first applications are the application A and the application B, the received second application is the application C, and the application C is modulated, the execution of the application C may be restricted. However, as described above, depending on the implementation, even if only application C is modulated, execution of all applications may be restricted.

5 is a diagram illustrating a third embodiment of a method of limiting execution of an application according to the present invention.

In step 510, third applications for replacing the first applications are received.

Here, the third applications may be applications that replace the functions of the first applications, for example, perform the same functions as the first applications, but may have higher versions. In this case, the existing first application can no longer be used to play the content, and only newly received third applications can be used to play the content.

In operation 520, third authentication data for third applications may be received.

In this case, the third authentication data does not include the authentication data for the first application, and consists only of the authentication data for determining whether the third application is tampered with. Meanwhile, although the third authentication data may be received separately from the third application as in the present embodiment, the third application and the third authentication data may be received together.

In operation 530, it is determined whether the third applications are modulated using the third authentication data.

In step 540, based on the determination, selectively limit the execution of at least one of the third applications.

In some implementations, it may be known whether the application has been modulated. In this case, such modulated applications may be included in the revocation list as retired applications. Hereinafter, a method of restricting the execution of an application using such a revocation list will be described.

6 is a diagram illustrating a third embodiment of a method of limiting execution of an application according to the present invention.

In step 610, a discard list that is information about whether to discard the application is received.

In this case, the revocation list may be configured with identifiers of retired applications, but is not limited thereto.

In step 620, the authentication data and revocation list are read.

In operation 630, it is determined whether there is a modulated application among the first applications based on the authentication data.

In this case, if there is a modulated application, the process proceeds to step 650 and the execution of the modulated application is restricted, and if there is no modulated application, the process proceeds to step 640.

In operation 640, it is determined whether a discarded application exists among the first applications.

In this case, if there is a discarded application, the process proceeds to step 650, and the execution of the modulated application is restricted. Here, whether the discarded application exists is determined according to whether the identifier of the first application exists in the discard list.

In operation 650, the execution of at least one application determined to be modulated by the determination result of operation 630 or the determination result of operation 640 is restricted.

In step 660, if there is no application determined to be modulated as a result of the determination in step 630 or discarded as a result of the determination in step 640, the execution of all the first applications is allowed.

On the other hand, the execution restriction method of the application according to the present invention can be applied to an information recording medium including authentication data for determining whether the application is tampered with. However, according to the embodiment, in order to determine whether the application stored in the information recording medium that does not contain the authentication data has been tampered with, the authentication data for the application is separately received, and the information recording medium is received according to the received authentication data. It may be determined whether the stored application is modulated.

Meanwhile, the above-described embodiments of the present invention can be written as a program that can be executed in a computer, and can be implemented in a general-purpose digital computer that operates the program using a computer-readable recording medium.

The computer-readable recording medium may be a magnetic storage medium (for example, a ROM, a floppy disk, a hard disk, etc.), an optical reading medium (for example, a CD-ROM, a DVD, etc.) and a carrier wave (for example, the Internet). Storage medium).

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

1 is a diagram illustrating an embodiment of a conventional content certificate.

2 is a diagram illustrating an embodiment of an apparatus for limiting execution of an application according to the present invention.

3 is a diagram illustrating an embodiment of a method of limiting execution of an application according to the present invention.

4 is a diagram illustrating a second embodiment of a method of limiting execution of an application according to the present invention.

5 is a diagram illustrating a third embodiment of a method of limiting execution of an application according to the present invention.

6 is a diagram illustrating a third embodiment of a method of limiting execution of an application according to the present invention.

Claims (20)

In the execution restriction method of the application used to reproduce the content stored in the information recording medium, Reading first authentication data for determining whether at least one first application has been modulated; Determining whether the at least one first application is modulated using the read first authentication data; And Selectively limiting execution of at least one of the at least one first application based on the determination. The method of claim 1, The first authentication data is And authentication data for the at least one first application or authentication data for a directory in which the at least one first application is stored in the information recording medium. The method of claim 1, The first authentication data is A hash value, a digital signature, and a message authentication code for at least one of a hash value, an electronic signature, and a message authentication code (MAC) for the at least one first application or a directory in which the at least one first application is stored. Execution restriction method of the application comprising at least one of. The method of claim 3, The electronic signature is And a digital signature generated using a certification authority or a secret key of the provider of the content. The method of claim 1, Receiving at least one second application different from the at least one first application; And Receiving second authentication data for both the at least one first application and the at least one second application, The determining may include determining whether the at least one first application and the at least one second application are modulated using the second authentication data, And selectively limiting execution of the at least one of the at least one first application and the at least one second application based on the determination. The method of claim 1, Receiving at least one third application for replacing the at least one first application; And Receiving third authentication data for the at least one third application; The determining may include determining whether the at least one third application is modulated by using the third authentication data, Selectively limiting the execution may selectively limit the execution of at least one of the at least one third application based on the determination. The method of claim 1, Receiving a revocation list which is information on whether the at least one first application is retired; The determining may further include determining whether the at least one first application has been revoked based on the revocation list. Selectively limiting the execution may selectively limit the execution of at least one of the first applications based on the determination. The method of claim 7, wherein The revocation list is And the identifiers of the obsolete applications. The method of claim 7, wherein Selectively limiting the execution And limiting execution of at least one application determined to be modulated or discarded among the at least one first application as a result of the determination. An apparatus for limiting execution of an application used to reproduce content stored in an information recording medium, A reading unit that reads first authentication data for determining whether at least one first application is modulated; A determination unit to determine whether the at least one first application is modulated using the read first authentication data; And And an execution controller configured to selectively limit execution of at least one of the at least one first application based on the determination. The method of claim 10, The first authentication data is And authentication data for the at least one first application or authentication data for a directory in which the at least one first application is stored in the information recording medium. The method of claim 10, The first authentication data is A hash value, a digital signature, and a message authentication code for at least one of a hash value, an electronic signature, and a message authentication code (MAC) for the at least one first application or a directory in which the at least one first application is stored. Device for limiting the execution of an application, characterized in that it comprises at least one of. The method of claim 12, The electronic signature is And an electronic signature generated using a certification authority or a secret key of the provider of the content. The method of claim 10, And a receiving unit configured to receive at least one second application different from the at least one first application, and to receive second authentication data for both the at least one first application and the at least one second application. The determination unit determines whether the at least one first application and the at least one second application are modulated using the second authentication data, And the execution control unit selectively restricts execution of at least one of the at least one first application and the at least one second application based on the determination. The method of claim 14, The receiving unit receives at least one third application for replacing the at least one first application, receives third authentication data for the at least one third application, The determination unit determines whether the at least one third application is modulated by using the third authentication data, And the execution control unit selectively limits the execution of at least one of the at least one third application based on the determination. The method of claim 10, Further comprising a receiving unit for receiving a revocation list that is information on whether to discard the at least one first application, The determination unit determines whether the at least one first application is discarded based on the discard list, And the execution control unit selectively limits the execution of at least one of the at least one first application based on the determination. The method of claim 16, The revocation list is And the identifiers of the obsolete applications. The method of claim 16, The execution control unit And limiting execution of at least one application determined to be modulated or discarded among the at least one first application as a result of the determination. contents; At least one application used for playing the content; And And authentication data for determining whether the at least one application has been tampered with. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 1 to 9.

Images