KR20140063347A - Device and method for providing security channel interface - Google Patents

Abstract

A device for providing a confidential channel interface, according to the present invention, comprises a sensor unit including two or more sensors to sense motions of a user; and a control unit determining whether an activation condition for the confidential channel interface is satisfied based on two or more sensing values that have been sensed by the sensors, and activating or deactivating the confidential channel interface according to whether the activation condition is satisfied or not, wherein the control unit provides the user with a confidential channel when the confidential channel interface is activated.

Description

TECHNICAL FIELD [0001] The present invention relates to a device and a method for providing a covert channel interface,

The present invention relates to an apparatus and method for providing a covert channel interface, and more particularly, to an apparatus and method for providing a covert channel for inputting a password to a portable terminal apparatus and the like.

Recently, as the spread of smart devices such as smart phones, tablet computers, and computers has expanded, and mobile banking and internet banking have become security-related tasks, it is increasingly necessary for individuals to check and input passwords in public places . However, there is a high possibility that personal information such as a password is easily exposed on the front side of a smart device without physical screening and leaked by a person or a camera. Thus, although many techniques for security and security for password entry have been proposed, there are still few suggestions for satisfying security and convenience in password verification.

Thus, there is a need to develop a physical covert channel for the user to securely confirm or enter the password.

FIG. 1 is a diagram illustrating a configuration of a general channel and a covert channel in a conventional technique.

The secret channel of the existing smart device according to the prior art exists as a separate entity from the general channel. If the normal channel is normally activated and the user calls the secret channel, the secret channel is activated on the screen of the smart device and the password is displayed.

For example, in the case of a physical one-time password (OTP) device, only the user outputs a password that should be visually checked, but the password is always exposed on the screen. Also, even when password and confidential information are confirmed on the smart device screen, the screen is displayed on the whole screen. Thus, passwords displayed using the independent secret channel are likely to be leaked by an attacker (other than a user, a camera, etc.) around the user due to exposure from time to time or a wide exposure range on the screen.

Therefore, in order to cope with this, it is necessary to provide a covert channel interface that provides a covert channel that is not exposed to the user external media while allowing the user to naturally perform physical actions in the covert channel activation method.

On the other hand, Korean Patent Laid-Open Publication No. 2008-0073121 (entitled "FIELD AUTOMATIC DEVICE AND DISPLAY METHOD FOR PREVENTING PASSWORD LEAKAGE OF THE SAME") discloses a method of detecting a password A password input device and method for activating an input menu window and setting a size, position, transparency, and the like of a password input window desired by a user in an active state are proposed.

Some embodiments of the present invention provide an apparatus and method for providing a covert channel interface that realizes a natural physical behavior of a user using two or more sensors and activates a covert channel that can be identified only by the user, .

According to a first aspect of the present invention, there is provided an apparatus for providing a covert channel interface, including: a sensor unit including at least two sensors for sensing an operation of a user; And a control unit for determining whether the secret channel interface satisfies an activation condition based on the sensed value and activating or deactivating the secret channel interface according to whether the activation condition is satisfied, And provides a covert channel to the user at a time when the covert channel is provided.

According to a second aspect of the present invention, there is provided a secret channel interface providing method using an apparatus for providing a secret channel interface, the method comprising: Determining whether or not the activation condition of the secret channel interface satisfies an activation condition based on at least two sensed values sensed by the sensors, Activating or deactivating the interface, and providing the covert channel to the user upon activation of the covert channel interface.

According to any one of the above-mentioned objects, a secret channel is activated by detecting a physical action of a user, and a degree of confidentiality is controlled according to a degree of a physical action of a user, so that security can be maintained heuristically. In other words, it is possible to activate a secret channel which is not exposed to others in the process of confirming or inputting passwords and personal security information that only the user needs to know such as a one-time password (OTP).

FIG. 1 is a diagram illustrating a configuration of a general channel and a covert channel in a conventional technique.
2 is a diagram illustrating a configuration of a general channel and a covert channel according to an embodiment of the present invention.
3 is a block diagram illustrating a structure of a physical secret channel interface providing apparatus using two or more sensors according to an embodiment of the present invention.
4 is a secret channel interface device including a first sensor and a second sensor according to an embodiment of the present invention.
FIG. 5 is an example for explaining a secret channel interface activation process by first sensor and second sensor recognition according to an embodiment of the present invention.
FIG. 6 is a diagram illustrating a user view and an attacker view of a covert channel according to an exemplary embodiment of the present invention. Referring to FIG.
7 is an example for explaining a secret channel interface activation process including a first sensor and a second sensor according to another embodiment of the present invention.
8 is a diagram illustrating a secret channel interface and a password input interface according to another embodiment of the present invention.
9 is an example of a combination of a secret channel interface and a password input interface according to another embodiment of the present invention.
10 is a flowchart illustrating a method for providing a covert channel interface through an apparatus for providing a covert channel interface according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. It should be understood, however, that the present invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In the drawings, the same reference numbers are used throughout the specification to refer to the same or like parts.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "comprising ", it means that it can include other elements as well, without departing from the other elements unless specifically stated otherwise.

Before explaining the embodiment of the present invention, the configurations of the covert channel and the general channel will be described.

2 is a diagram illustrating a configuration of a general channel and a covert channel according to an embodiment of the present invention.

As shown in FIG. 2, a form in which a covert channel is included in a part of a general channel is different from the conventional technique in FIG. The normally covert channel is in the inactive state and is exposed to a specific area coupled to the common channel when the covert channel interface is activated. The general channel is a public channel that is placed on the front side of the device, so that the screen of the device is easily exposed to an attacker and has a weak security. On the other hand, it has advantages of intuitiveness, convenience and convenience, There is a high advantage.

As shown in FIG. 2, the secret channel of the secret channel interface providing apparatus according to the present invention includes a configuration in which a secret channel is exposed in a specific region coupled to a general channel, and a physical action of a user, The secret channel can be safely activated.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

3 is a block diagram illustrating a structure of a physical secret channel interface providing apparatus using two or more sensors according to an embodiment of the present invention.

At this time, in an embodiment of the present invention, it is assumed that the secret channel interface providing apparatus 200 is a portable communication device (for example, a smart phone).

For example, FIG. 3 illustrates configurations for providing a covert channel interface using two or more sensors according to an embodiment of the present invention. However, other processing units (not shown) may be further included depending on the type of the apparatus.

In addition, the apparatus 200 for providing a covert channel interface according to an embodiment of the present invention may be various types of apparatuses other than the portable communication apparatuses, and may further include different processing units depending on the type and purpose of each apparatus have. For example, when the secret channel interface providing apparatus 200 is an ATM device used in a bank, a communication module connected to the banking computer, a computer processing unit performing banking computing for each account, And a user interface module for inputting information or outputting a bank processing result.

3, the apparatus 200 for providing a covert channel interface according to the present invention includes a guide providing unit 210, a display unit 220, a sensor unit 230, and a control unit 240.

The secret channel interface providing apparatus 200 provides a guide in the guide providing unit 210 to receive the sensed value sensed by the user's operation. That is, the guide providing unit 210 provides a guide for guiding and guiding the sensor recognition method so that the user can input a sensing value matching the condition. The configured guide is output to the display unit 220 through the control unit 240.

At this time, the guide may vary depending on the configuration of the sensor, and an example of providing the guide will be described later with reference to FIG.

The sensor unit 230 receives the sensed value recognized by the user's operation. The first sensor 231, the second sensor 232, and the nth sensor are configured to detect the type of the device using a touch sensor, a direction sensor, a proximity sensor, a gravity sensor, or the like. And can be selected by a person skilled in the art depending on the application.

An example of configuring the sensor unit 230 including the first sensor 231 and the second sensor 232 in the secret channel interface providing apparatus 200 will be described later with reference to FIG. 5 and FIG.

The secret channel interface providing apparatus 200 outputs the guide provided by the guide providing unit 210 and displays the guide on the display unit 220. When the guide output from the display unit 220 is an intuitive guide for recognizing the touch sensor by touching the display unit 220, the user can touch the display unit 220 to input a sensing value.

 Also, the display unit 220 displays a secret channel interface when the secret channel interface is activated. At this time, one or more of a password, a password input interface, an identifier such as a number, a character, a color, and a shape (temporary secret information for assisting a password) may be output to the display unit 220 according to the configuration of the secret channel interface.

An example in which a guide is provided on the display unit 220 in the secret channel interface providing apparatus 200 and a sensing value is input by touching the display unit 220 will be described later with reference to FIG. An example of displaying the secret channel interface activated by the secret channel interface providing apparatus 200 on the display unit 220 with a password is shown in FIG. 5, and an example of displaying the shape identifier will be described later with reference to FIG. 7 . An example of displaying the password input interface using the color identifier in the secret channel interface activated in the secret channel interface providing apparatus 200 on the display unit 220 is shown in FIG. 8, and an example of displaying the password input interface combined with the password Will be described later with reference to Fig.

The control unit 240 determines whether to activate the secret channel interface based on the sensing value received from the sensor unit 230. That is, if the sensing value input from the first sensor 231 and the sensing value input from the second sensor 232 meet predetermined conditions, the control unit 240 can activate the secret channel interface. On the other hand, if the sensing value does not satisfy the set condition, the controller 240 may disable the secret channel interface.

In addition, the controller 240 determines whether the sensing value input after the secret channel activation is maintained. After the secret channel interface is activated, if the sensed value of at least one of the first sensor 231, the second sensor 232, and the nth sensor can not be maintained, the secret channel interface may be deactivated.

4 is a secret channel interface device including a first sensor and a second sensor according to an embodiment of the present invention.

The secret channel interface providing apparatus 200 includes a first sensor 231 and a second sensor 232 and a guide 310 provided by the guide providing unit 210 is displayed on the display unit 220. The operation of the user generated according to the guide 310 can be recognized through the first sensor 231 and the second sensor 232. [

For example, as shown in FIG. 4, the guide 310 may be located at the top of the covert channel interface providing apparatus 200 in the form of a circle. Here, the guide 310 is a circular guide 310 having a predetermined size, and serves to guide the user to touch the circular blade 310 along the circular guide 310 to the display unit 220. The guide 310 is formed in a circular shape to guide a user's operation through a first sensor 231 for sensing whether or not a touch is made, and a second sensor 232 for sensing proximity of the user. May be displayed at the top of the channel interface providing apparatus 200.

FIG. 5 is an example for explaining a secret channel interface activation process by first sensor and second sensor recognition according to an embodiment of the present invention.

5A, a circular guide 310 according to an embodiment of the present invention can be output to the display unit 220, and the user can confirm the guide 310 of the display unit 220 You can prepare for future input. At this time, the secret channel interface providing apparatus 200 includes a first sensor 231 for recognizing a touch on the circular guide 310 and a second sensor 232 for recognizing proximity to the upper end of the circular guide 310 . 5 (b), when the user's hand blade touches the guide 310 on the display unit 220 along the guide 310, the first sensor 231 and the second sensor 232 ) Recognizes the operation of the user. 5 (c), if the generated sensing value matches the touch recognition condition according to the first sensor 231 and the proximity condition according to the second sensor 232, the secret channel interface 320 ) Is activated and displayed on the display unit 220. The user can safely identify the covert channel through the activated covert channel interface 320 and deactivate the covert channel interface 320 by disabling at least one sensor recognition of the first sensor 231 and the second sensor 232 State. In addition, the user can safely input the password through the password input interface after deactivating the secret channel. At this time, if the entered password matches the secret channel's password, the security can be released.

On the other hand, the secret channel shown in (c) of FIG. 5 is an example showing a one-time password (OTP). One-time passwords (OTPs) are user authentication schemes that use randomly generated, one-time passwords rather than fixed passwords.

FIG. 6 is a diagram illustrating a user view and an attacker view of a covert channel according to an exemplary embodiment of the present invention. Referring to FIG.

As shown in FIG. 6 (a), the user's hand forms a screen while the secret channel interface 320 is activated, and only the user can confirm the secret channel in the user-centered view. At this time, the physical range and the degree of maintenance of the covert channel can be adjusted according to the body structure of the user and the type of operation. For example, if the user wishes to enhance confidentiality, he / she can recognize the sensor with his / her hand held narrowly, thus securing a field of view that can be confirmed only by the user. However, if the secret channel interface 320 is activated in a state where the physical confidentiality is weakened, the physical secretion due to the user's hand can not be precisely formed, so that the degree of physical confidentiality can be lowered. Thus, heuristic usability can be provided by appropriately adjusting the confidentiality according to the structure of the user's physique and the body image. On the other hand, as shown in FIG. 6 (b), the confidential channel interface 320 is obscured by the user's hand in the view of the attacker (the user, the user, the camera, etc.).

7 is an example for explaining a secret channel interface activation process including a first sensor and a second sensor according to another embodiment of the present invention.

7A, according to another embodiment of the present invention, an apparatus 200 for providing a covert channel interface includes a first sensor 231 for recognizing a touch and a second sensor 232 for sensing a direction, . ≪ / RTI > As the second sensor 232 for sensing the direction, a direction sensor, an acceleration sensor, a gyro sensor, a gravity sensor, or the like may be used. When the user tilts the secret-channel-interface providing apparatus 200 in a state where the user recognizes the first sensor 231, the secret-channel interface 320 is output to the display unit 220 as shown in FIG. 7B. At this time, if the condition according to the touch recognition condition of the first sensor 231 and the degree of tilt by the second sensor 232 coincide with each other, as shown in FIG. 7 (b), the secret channel interface 320 is activated And is displayed on the display unit 220. The user can safely identify the covert channel through the activated covert channel interface 320 and deactivate the covert channel interface 320 by disabling at least one sensor recognition of the first sensor 231 and the second sensor 232 State. In addition, the user can safely input the password through the password input interface after deactivating the secret channel. At this time, if the entered password matches the secret channel's password, the security can be released. 7 (c), the attacker can see only the side and back side of the secret channel interface providing apparatus 200 by tilting the secret channel interface providing apparatus 200, I can not. At this time, the degree of physical confidentiality can be adjusted according to the tilt of the secret-channel-interface providing apparatus 200. The user can adjust the degree of confidentiality physically by tilting the secret channel interface providing apparatus 200 so that the back side of the secret channel interface providing apparatus 200 is more visible in consideration of the view of the attacker.

On the other hand, the secret channel shown in (b) of Fig. A secret channel can represent temporary secret information that assists the password through identifiers such as numbers, letters, and colors, as well as the shape.

8 is a diagram illustrating a secret channel interface and a password input interface according to another embodiment of the present invention.

As shown in FIG. 8 (a), a secret channel and a general channel are separately formed at an upper end and a lower end of the display unit 220, respectively. A guide 310 appears on the top channel and a password input interface 330 appears on the bottom channel. When the secret channel interface activation condition is satisfied according to the guide 310, the secret channel interface 320 is activated and the secret channel interface 320 and the password input interface 330 ) On the display unit 220, thereby simultaneously performing the password check and inputting. At this time, the activated secret channel interface 320 may be displayed in any color. As shown in FIG. 8 (c), a secret channel is configured in an arbitrary color, and the corresponding color is temporarily displayed on the password input interface 330, so that the secret information can be informed to the user. For example, when the color designated by the secret channel is red, any one of the numbers of the password input interface 330 is displayed in red, and the user inputs the password by inputting the button marked with red. At this time, if the password provided to the user through the activated secret channel interface 320 matches the password inputted by the user through the password input interface 330, the security state can be released.

If the sensing value of at least one of the first sensor 231 and the second sensor 232 recognized after the secret channel interface 320 is activated is not maintained, the secret channel interface 320 may be returned to the inactive state have.

9 is an example of a combination of a secret channel interface and a password input interface according to another embodiment of the present invention.

9 (a), an interface 321 in which a secret channel interface and a password input interface are combined is displayed in an inactive state on the entire display unit 220. 9 (b), when the secret channel interface providing apparatus 200 is tilted together with the touch operation and the secret channel interface activation condition is satisfied, an interface of a type in which a secret channel interface and a password input interface are combined 321 are activated and appear on the display unit 220. After confirming the number of the secret channel interface, the user can return to the inactive state and enter the password through the password input interface of the general channel.

10 is a flowchart illustrating a method for providing a covert channel interface through an apparatus for providing a covert channel interface according to an embodiment of the present invention.

In step S110, a sensor recognition guide for guiding the user to recognize the sensor is provided. In other words, the user can provide a statement or picture so that the user can perform a specific action that recognizes the sensor.

In step S120, the sensed sensing value is sensed. That is, in step S110, the sensing value input by the user is detected according to the guide.

In step S130, it is determined whether the sensing value sensed in the step satisfies a predetermined secret channel interface activation condition.

If it is determined in step S140 that at least two sensed values satisfy the secret channel interface activation condition, the secure channel interface is activated.

On the other hand, if it is determined in step S150 that the at least two sensed values do not satisfy the secret channel interface activation condition, the secret channel interface remains in the disabled state S150 and remains in the sensor recognition guide providing step S110 do.

One embodiment of the present invention may also be embodied in the form of a recording medium including instructions executable by a computer, such as program modules, being executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

It will be understood by those of ordinary skill in the art that the foregoing description of the embodiments is for the purpose of illustration and that those skilled in the art will readily understand that various changes may be made without departing from the spirit and scope of the invention. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included within the scope of the present invention.

200: a secret channel interface providing device
210: guide-provided study
220:
230:
231: First sensor
232: second sensor
240:
310: Guide
320: secret channel interface
330: Password input interface
321: Interface with secret channel interface and password input interface

Claims (16)

An apparatus for providing a covert channel interface,
A sensor unit including at least two sensors for sensing the operation of the user,
A controller for determining whether the activation condition of the secret channel interface satisfies an activation condition based on at least two sensed values sensed by the sensors and activating or deactivating the secret channel interface according to whether the activation condition is satisfied,
Wherein the control unit provides the secret channel to the user upon activation of the secret channel interface. The method according to claim 1,
A guide providing unit for providing a guide for guiding the operation of the user,
And a display unit displaying the guide provided by the guide providing unit and the secret channel interface. The method according to claim 1,
Wherein the secret channel interface is controlled in accordance with an operation of the user. 3. The method of claim 2,
A first sensor for detecting whether or not a user's input means touches the display unit,
And a second sensor for detecting whether the user's input means is within a predetermined distance from the area where the guide is provided,
Wherein the control unit activates the secret channel interface when the user touches the display unit and the input means of the user approaches the area provided by the guide providing unit within a predetermined distance. 5. The method of claim 4,
Wherein the guide providing unit displays a circular guide having a predetermined size to guide the user to touch the circular blade along the circular guide to the display unit. 3. The method of claim 2,
A first sensor for detecting whether or not a user's input means touches the display unit,
And a second sensor for sensing a direction in which the user rotates the covert channel interface device,
Wherein the control unit activates the secret channel interface when the user rotates the secret channel interface device in a predetermined direction while the user is touching the display unit. The method according to claim 1,
Wherein the secret channel is a one-time password (OTP). The method according to claim 1,
The control unit provides a password input interface,
And releases the security state set by the password input interface when the password provided to the user through the secret channel matches the password input by the user through the password input interface. The method according to claim 1,
Wherein the control unit returns the secret channel to the inactive state if at least one sensed value of the sensed sensing values is not maintained after the secret channel is activated. A method for providing a covert channel interface through a covert channel interface providing apparatus,
Receiving a sensing value of an operation of the user generated in accordance with provision of a guide for inducing a user's operation from at least two sensors installed in the covert channel interface device;
Determining whether the activation condition of the secret channel interface satisfies an activation condition based on at least two sensed values sensed through the sensors;
Activating or deactivating the secret channel interface according to whether the activation condition is satisfied; And
And providing a covert channel to the user upon activation of the covert channel interface. 11. The method of claim 10,
And displaying the guide and the secret channel interface on a display unit. 11. The method of claim 10,
Wherein the secret channel interface is controlled in accordance with an operation of the user. 12. The method of claim 11,
The step of determining whether the activation condition satisfies,
A sensing value received from a first sensor that senses whether the user's input means touches the display unit and a second sensor that senses whether the user's input means is within a predetermined distance from the area where the guide is provided As a result of judging based on the sensed value,
Wherein when the user touches the display unit and the input means of the user approaches the area provided by the guide providing unit within a predetermined distance, it is determined that the activation condition of the secret channel interface is satisfied. 14. The method of claim 13,
Wherein the step of providing the guide displays a circular guide of a predetermined size to guide the user to touch the circular blade along the circular guide to the display unit. 12. The method of claim 11,
The step of determining whether the activation condition satisfies,
Based on a sensing value received from a first sensor for sensing whether the user's input means touches the display unit and a sensing value received from a second sensor for sensing a direction in which the user rotates the confidential channel interface device ,
And when the user rotates the secret channel interface device in a predetermined direction while the user touches the display unit, the control unit determines that the activation condition of the secret channel interface is satisfied. A computer-readable recording medium recording a program for performing the method according to any one of claims 10 to 15 on a computer.

Images