KR20090066059A - Software integrity verification apparatus of mobile terminal and method thereof - Google Patents

Abstract

A software integrity verifying apparatus and a method thereof of a mobile terminal using a subscriber identity module card storing data for verifying the integrity are provided to perform integrity verification of the software installed on the mobile terminal. An MTM(Mobile Trusted Module)(400) for a mobile verifies integrity. An MVA(Measurement and Verification Agent)(300) generates integrity metric information about a plurality of software stored in the mobile terminal. The verification controller provides a comparison result to the security confidence module for the mobile by comparing integrity metric information and received first data about the first software.

Description

Apparatus and method for verifying software integrity of mobile terminal {SOFTWARE INTEGRITY VERIFICATION APPARATUS OF MOBILE TERMINAL AND METHOD THEREOF}

The present invention relates to an apparatus and method for verifying software integrity of a mobile terminal. In particular, the present invention relates to an apparatus and method for performing integrity verification for software in a mobile terminal using a Universal Subscriber Identity Module (USIM) card in which data for verifying integrity is stored.

The present invention is derived from the research conducted as part of the IT growth engine technology development project of the Ministry of Information and Communication and the Ministry of Information and Telecommunication Research and Development. [Task Management Number: 2006-S-041-02, Title: Security and Reliability of Next Generation Mobile Terminals] Developing Common Security Core Modules for Services]

TPM (Trusted Platform Module), which is a hardware module that proves that the platform being used is in a safe state, is currently installed in various personal computers (PCs) or terminals, mainly notebooks. This area has gradually expanded to standards for mobile terminals such as cell phones.

For Mobile Trusted Modules (MTMs), Mobile TPMs used in mobile phones, RIM (Reference Integrity Metrics) (hereinafter referred to as "RIM") and TIM (Target Integrity Metrics (hereinafter referred to as "TIM") Use hash values for images to verify software integrity.

The RIM generates and stores the value in advance in order to acknowledge the result of the measurement before software or hardware in the terminal is loaded or initialized in execution. The TIM stores an object every time the power is turned on. Integrity metric of a target object or a component measured by a measurement agent. This comparison of the measured TIM value with the stored RIM value proves that the software has not changed.

The mobile terminal receives a RIM value from a Certificate Authority (CA) in the form of a certificate such as a RIM Cert (hereinafter, referred to as a "Cert"), and verifies it by signing the RIM certificate. Therefore, this RIM data should be verifiable if necessary by the certification authority that issued the certificate.

In the related art, since the MTM or the portable terminal having limited resources store and use RIM data for verifying the integrity of the software, it is not possible to perform only integrity verification for a limited number of software.

In addition, since the RIM data is always stored in the terminal so that the software can be executed at any time, there is a problem that the security is quite vulnerable. In addition, there is a problem that the update of the RIM data in the terminal is difficult.

An object of the present invention is to provide an apparatus and method for verifying software integrity of a mobile terminal for performing integrity verification on software of a mobile terminal using a USIM card storing data for verifying integrity.

According to an aspect of the present invention for solving the above technical problem, the software integrity verification apparatus of a mobile terminal connected to a smart card for storing data to perform data transmission and reception,

A mobile security trust module for verifying integrity; And generating integrity metric information for a plurality of software stored in the mobile terminal, and when requesting integrity verification for a first software of the plurality of software, first data for verifying the first software integrity. And a verification control unit for receiving from the smart card and comparing the received first data with the integrity metric information for the first software and providing it to the mobile security trust module.

Here, the verification control unit,

And providing the first data to the mobile security trust module when the first metric and the integrity metric information on the first software match.

According to an aspect of the present invention, a software integrity verification method of a mobile terminal connected to a smart card storing data to perform data transmission / reception,

Requesting the smart card for the first software matched Reference Integrity Metrics (RIM) data for integrity verification of a first one of a plurality of software; Receiving an integrity verification request for the device that controls the integrity verification in the mobile terminal from the USIM card to perform integrity verification; When the integrity verification of the device controlling the integrity verification is successful, establishing a channel with the smart card; Generating integrity metric information of the first software; Providing the generated smart metric information to the smart card to perform verification of the integrity metric information of the first software on the smart card; And receiving the RIM data from the smart card.

Here, the software integrity verification method,

Comparing the received RIM data with integrity metric information for the first software previously stored; And when the RIM data and the integrity metric information match, performing integrity verification on the RIM data.

According to the present invention, it is possible to expect the effect of performing the integrity verification of the software installed in the mobile terminal simply with a USIM card.

In addition, since the RIM-related data may be stored in the USIM card and provided to the mobile terminal, the RIM data update of the mobile terminal may be more efficiently performed.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is said to "include" a certain component, it means that it can further include other components, without excluding other components unless specifically stated otherwise. In addition, the terms “… unit”, “… unit”, “module”, etc. described in the specification mean a unit that processes at least one function or operation, which may be implemented by hardware or software or a combination of hardware and software. have.

An apparatus and method for verifying integrity of software of a mobile terminal according to an embodiment of the present invention will now be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating an apparatus for verifying software integrity of a mobile terminal according to an exemplary embodiment of the present invention.

As shown in FIG. 1, the apparatus for verifying software integrity of a mobile terminal according to an exemplary embodiment of the present invention includes a verification control unit 300 (MVA; Measurement and Verification Agent) and a mobile security trust module 400 (MTM). Module) and the protocol conversion unit 200.

The verification control unit 300 communicates with the mobile security trust module 400 and controls the integrity verification of the certificates of the software stored in the mobile terminal through interworking with the mobile security trust module 400. At this time, the verification control unit 300 manages the software stored in the mobile terminal, and controls the integrity verification for the software when receiving the integrity verification request for the specific software selected by the user.

In addition, the verification control unit 300 communicates with a Universal Subscriber Identity Module (USIM) card (hereinafter, also referred to as a "smart card"), and includes RIM (Reference Integrity Metrics) data corresponding to software that requires verification. Is read from the USIM card 100. In addition, the verification control unit 300 generates a Target Integrity Metric (TIM) value for software that needs verification, hereinafter referred to as "TIM" or "target integrity metric information", and generates a RIM Cert (Certification; Hereinafter, the RIM data is transmitted to the mobile security trust module 400 when the two values match with each other by comparing the generated TIM value with the " RIM certificate. &Quot; At this time, if the two values do not match, the software determines that the changed software and stops execution.

Here, the RIM data includes a RIM certificate and a RIM Auth (RIM_Authorization; hereinafter also referred to as "RIM Earth"). RIM Earth contains a public key and a signed value for verifying a RIM certificate.

The mobile security trust module 400 performs an integrity verification function on the software received from the verification control unit 300 or RIM data of the USIM card 100, and the software requested by the verification control unit 300 by the USIM card 100. It provides a verification result for.

In addition, the mobile security trust module 400 performs an integrity verification on the verification control unit 300 in response to the verification request of the verification control unit 300 of the USIM card 100.

The protocol converter 200 relays data transmission and reception between the verification controller 300, the mobile security trust module 400, and the USIM card 100. Specifically, the command transmitted from the verification control unit 300 and the mobile security trust module 400 to the USIM card 100 is changed to an APDU (Application Protocol Data Unit) command, and the verification control unit 300 and the mobile security trust. The command to the module 400 converts into the MVA command format or the MTM command format and serves to communicate with each other.

Such a mobile terminal according to an embodiment of the present invention has an advantage of performing integrity verification of software installed in the mobile terminal simply by using a USIM card. In addition, since the RIM-related data can be stored in the USIM card and provided to the mobile terminal, the RIM data update of the mobile terminal can be performed more efficiently.

Next, the USIM card 100 according to an embodiment of the present invention will be described in detail with reference to FIG. 2.

Figure 2 is a block diagram showing in detail the USIM card according to an embodiment of the present invention.

As shown in FIG. 2, another USIM card 100 according to an embodiment of the present invention includes a RIM management applet 110 and a storage unit 120.

The USIM card 100 is used for authentication of the third generation mobile terminal, and provides a function of receiving a service of various purposes by installing a financial and communication applet.

In addition, the USIM card 100 stores the RIM data for verifying the software of the mobile terminal in the storage unit 120, and the RIM management applet 110 managing the stored RIM data is installed in the USIM card 100. . In this case, the USIM card 100 can communicate with both the verification control unit 300 and the mobile security trust module 400.

The RIM data stored in the storage unit 120 of the USIM card 100 may include a plurality of software (S / W) identifiers 112, a plurality of RIM certificates 114, and a plurality of software. RIM earth 116 is included, and each RIM certificate and earth that matches one S / W is included.

RIM management applet 110 (Applet) is a function to form a secure channel between the USIM card 100 and the mobile terminal (validation control unit 300 and the mobile security trust module 400), at the request of the verification control unit 300 Accordingly, a plurality of RIM authentication information is verified to perform a verified RIM verification function that is not changed in the middle. In addition, the RIM management applet 110 may receive the RIM certificate through various paths such as the Internet or offline through OTA (Over The Air) and store the RIM certificate in the storage 120.

In addition, the RIM management applet 110 receives a TIM value and information of the corresponding software from the verification control unit 300 and performs a function of comparing the RIM value of the RIM certificate retrieved based on the TIM value and the software information. .

Meanwhile, although the USIM card is used in the embodiment of the present invention, various types of smart cards capable of storing data in addition to the USIM card may be used.

3 is a data flow diagram illustrating a software integrity verification method of a mobile terminal according to an embodiment of the present invention.

As shown in FIG. 3, in the software integrity verification method of the mobile terminal according to an embodiment of the present invention, the USIM card 100 is inserted into the mobile terminal.

In this case, it is assumed that the USIM card 100 pre-stores the RIM data.

In this case, all of the communication between the USIM card 100 and the mobile terminal is communicated through the protocol conversion unit 200.

First, when the verification controller 300 receives an integrity verification request for a specific software of a mobile terminal from a user, the verification control unit 300 includes an identifier of the corresponding S / W on the USIM card 100 to verify the integrity measurement value for the software. Request a RIM value (S100).

To this end, the USIM card 100 forms a secure channel through mutual authentication promised in advance with the mobile security trust module 400 (S102). Thereafter, the USIM card 100 requests integrity verification of the verification control unit 300 to the mobile security trust module 400 (S104).

The mobile security trust module 400 performs integrity verification of the verification control unit 300 for the request of the USIM card 100 (S106). Then, the mobile security trust module 400 transmits the verification result to the USIM card 100 (S107).

The USIM card 100 forms a secure channel with the verification controller 300 when it is verified that the corresponding software is a secure module that has not been changed through the verification result received from the mobile security trust module 400 (S108). At this time, if it is not verified that the mobile security trust module 400 is a secure module, the integrity verification methods are stopped.

The verification controller 300 generates a TIM value for the corresponding software (S109), and transmits the generated TIM value to the USIM card 100 together with information for determining the corresponding software (S110).

The USIM card 100 receives the corresponding software information and the corresponding TIM value from the verification controller 300 and finds the RIM certificate and the RIM earth of the corresponding software stored in the USIM card 100 based on the received software information. Then, the transmitted TIM value is compared with the RIM value in the found RIM certificate (S111). If this value is different, the failed result is sent to the verification controller, and the verification controller 300 stops the software from running and stops all work. If the value is the same, the RIM certificate and the RIM earth are transmitted to the verification controller 300 (S112).

The verification control unit 300 compares the TIM value for the corresponding software once again through the received RIM certificate (S114).

By comparison of the step S114, if the two values are the same, the RIM certificate and the RIM earth are sent to the mobile security trust module 400 to request verification of the RIM certificate (S116).

By comparison of the step S114, if the two values are not the same, it is determined that the corresponding software is changed software and controls not to execute the software.

 On the other hand, when the USIM card 100 is inserted, when the user is requested to verify the integrity of the specific software in the mobile terminal, the mobile terminal repeatedly performs the step S116 in the step S100.

The embodiments of the present invention described above are not only implemented through the apparatus and the method, but may also be implemented through a program for realizing a function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded. Implementation may be easily implemented by those skilled in the art from the description of the above-described embodiments.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

1 is a block diagram illustrating an apparatus for verifying software integrity of a mobile terminal according to an exemplary embodiment of the present invention.

Figure 2 is a block diagram showing in detail the USIM card according to an embodiment of the present invention.

3 is a data flow diagram illustrating a software integrity verification method of a mobile terminal according to an embodiment of the present invention.

Claims (9)

An apparatus for verifying software integrity of a mobile terminal connected to a smart card storing data and performing data transmission / reception, A mobile security trust module for verifying integrity; And Integrity metric information for a plurality of software stored in the mobile terminal is generated, and when the integrity verification for the first one of the plurality of software is requested, the first data for verifying the first software integrity is read. A verification control unit which receives from a smart card and compares the integrity metric information for the first software with the received first data and provides it to the mobile security trust module Apparatus for verifying software integrity of a mobile terminal comprising a. The method of claim 1, The verification control unit, And providing the first data to the mobile security trust module when the first metric and the integrity metric information on the first software match. The method of claim 2, The mobile security trust module, When the integrity verification for the verification controller is requested from the smart card, And performing verification of the integrity of the verification control unit and transmitting the verification result to the smart card when the verification of the integrity is successful. The method according to any one of claims 1 to 3, And a protocol converter configured to establish a connection between the mobile security trust module and the verification controller and the smart card, and to control data transmission and reception according to each preset format. The method according to any one of claims 1 to 3, And the first data includes a reference integrity index (RIM) certificate of the first software stored in the smart card and a public key for verifying the RIM certificate. A software integrity verification method of a mobile terminal connected to a smart card storing data and performing data transmission / reception, Requesting the smart card for the first software matched Reference Integrity Metrics (RIM) data for integrity verification of a first one of a plurality of software; Receiving an integrity verification request for the device that controls the integrity verification in the mobile terminal from the USIM card to perform integrity verification; When the integrity verification of the device controlling the integrity verification is successful, establishing a channel with the smart card; Generating integrity metric information of the first software; Providing the generated smart metric information to the smart card to perform verification of the integrity metric information of the first software on the smart card; And Receiving the RIM data from the smart card Software integrity verification method comprising a. The method of claim 6, Comparing the received RIM data with integrity metric information for the first software previously stored; And Performing integrity verification on the RIM data when the RIM data and the integrity metric information match. Software integrity verification method further comprising. The method of claim 7, wherein Controlling the execution of the first software to be stopped if the RIM data and the integrity metric information do not match. Software integrity verification method further comprising. The method according to any one of claims 6 to 8, Performing integrity verification on the device controlling the verification may include: Establishing a channel for integrity verification of the device controlling the verification; Receiving from the smart card an integrity verification of the device controlling the verification; And Performing integrity verification of the device controlling the verification Software integrity verification method comprising a.

Images