KR20190050159A - Method and apparatus for providing security status of communication block - Google Patents

Abstract

Disclosed are a method for providing a security state of a communication section and an apparatus thereof. According to an embodiment of the present invention, the method for providing a security state of a communication section comprises the steps of: confirming a security state of a communication section accessed by a user terminal; and providing the confirmed security state of the communication section to the user terminal, wherein the step of confirming the security state includes the steps of: confirming a password setting state of a Wi-Fi accessed by the user terminal; checking an ARP spooing attack sign when a password of the Wi-Fi is not set; and determining a security state of the communication section accessed by the user terminal depending on the password setting state of the Wi-Fi and a presence of the ARP spooing attack sign.

Description

TECHNICAL FIELD [0001] The present invention relates to a method and apparatus for providing a communication section security state,

Embodiments of the present invention are directed to techniques for providing a user with a secure state of a current communication section to secure financials within an application.

An instant messenger, a general communication tool, is software that can transmit and receive messages and data in real time. The user can register a contact on the messenger and send and receive messages in real time to the other party in the contact list.

Such a messenger function is becoming popular in the mobile environment of a mobile communication terminal as well as a PC. For example, Korean Patent Laid-Open No. 10-2002-0074304 discloses a mobile messenger service system and method of a mobile terminal using a wireless communication network that can provide a messenger service between mobile messengers installed in a mobile terminal.

In the recent messenger, there is a chat function that performs a chat with a user through text, voice, etc., as well as a data transmission function of exchanging various data such as still image, video, and music with the other party, Offering a variety of functions such as providing gifts for products. As such, a variety of payment methods such as payment by subscription carrier, credit card payment, etc. are being used to present the service products (messenger, coffee, donuts, gift certificates, etc.) provided by messenger.

In this way, security is maintained in order to secure finance such as remittance or settlement in the application. In the current security method, the user is confirmed by receiving the identification information (ID) and password of the user, A unique token is assigned to the user, and communication is performed by confirming the user with this value. Here, all data can be encrypted after being encrypted with an asymmetric key (256-bit) encryption algorithm.

However, since the asymmetric key encryption algorithm transmits the public key to the requesting client without a check if the client requests the public key, a security problem may occur in the communication section.

For example, as the penetration rate of WIFI (internal network) devices gradually increases, it often happens that a WIFI password is automatically connected to a device for which no WIFI password is set. This is sometimes caused by an attacker installing the device, To the attacker.

Accordingly, there is a need for a method or apparatus that can provide a secure state of the current communication section within an application related to finance.

Embodiments of the present invention provide a method and apparatus for providing a security state of a current communication section to a user in order to secure finance in an application.

A method for providing a communication section security state according to an exemplary embodiment of the present invention includes: checking a security state of a communication section connected to a user terminal; And providing the identified security state of the communication section to the user terminal.

Wherein the step of verifying the security state comprises the steps of: confirming a password setting state of the WIFI accessed by the user terminal; Checking an ARP spoofing attack sign if the WIFI password is not set; And determining a security state of the communication section accessed by the user terminal according to the password setting state of the WIFI and the presence or absence of the ARP spoofing attack trail.

Wherein the step of determining the security state of the communication section determines that the security state of the communication section is in a safe state when the password of the WIFI is set and if the password of the WIFI is not set and there is no sign of the ARP spoofing attack The security state of the communication section is determined as an unsafe state, and if the WIFI password is not set and the ARP spoofing attack trail exists, the security state of the communication section can be determined as a transaction incapable state.

The providing of the security state of the communication section to the user terminal may include providing a display state corresponding to the determined security state of the communication section on the screen of the user terminal by providing the security state of the determined communication section to the user terminal can do.

Further, the method of providing a communication section security state according to an exemplary embodiment of the present invention may further include automatically blocking the financial transaction when the security transaction is performed in the user terminal in a state in which the security state of the communication section is not transactionable can do.

The step of verifying the security state may determine that the security state of the communication section is in a transaction incapable state when a password of the WIFI accessed by the user terminal is set and there is an ARP spoofing attack sign.

The apparatus for providing security state of a communication section according to an embodiment of the present invention includes a confirmation unit for confirming a security state of a communication section accessed by a user terminal; And a providing unit for providing the identified security state of the communication section to the user terminal.

The confirmation unit checks the password setting state of the WIFI accessed by the user terminal. If the password of the WIFI is not set, it confirms the ARP spoofing attack trail. If the password setting state of the WIFI and the ARP spoofing attack trail The security state of the communication section accessed by the user terminal can be determined.

Wherein if the password of the WIFI is set and the password of the WIFI is not set and there is no sign of the ARP spoofing attack, then the verification unit determines that the security state of the communication section is insecure . If the password of the WIFI is not set and the ARP spoofing attack sign is present, the security state of the communication section can be determined as a transaction-unavailable state.

The providing unit may provide the display means corresponding to the determined security state of the communication section on the screen of the user terminal by providing the determined security state of the communication section to the user terminal.

Further, the communication section security state providing apparatus according to an embodiment of the present invention further includes a blocking unit for automatically blocking the financial transaction when the security state of the communication section is in a transaction-incapable state and the financial transaction is performed in the user terminal can do.

If the password of the WIFI accessed by the user terminal is set and there is an ARP spoofing attack sign, the confirmation unit can determine that the security state of the communication section is in a transaction incapable state.

According to embodiments of the present invention, it is possible to prevent an abnormal financial transaction in an application by providing a security state of a current communication section to a user, thereby performing a secure financial transaction.

FIG. 1 is a flowchart illustrating a method of providing a security zone security state according to an exemplary embodiment of the present invention. Referring to FIG.
2 shows an example of an ARP table of an attacking user.
FIG. 3 shows an example of an attacker's ARP spoofing attack attempt.
FIG. 4 is a diagram illustrating an example in which a MAC address of a user is changed to an attacker's MAC address according to an ARP spoofing attack attempt of the attacker.
FIG. 5 illustrates an example of providing a current communication section security state.
FIG. 6 illustrates a configuration of a communication section security state providing apparatus according to an embodiment of the present invention.

Hereinafter, embodiments according to the present invention will be described in detail with reference to the accompanying drawings. However, the present invention is not limited to or limited by the embodiments. In addition, the same reference numerals shown in the drawings denote the same members.

The attack scenario by the attacker may be MIMA attack using ARP spooing. In the case of MIMA attack using ARP spooing, the attacker can change the ARP table of the user connected to the WIFI, that is, the user terminal, To the attacker's MAC address, all communications will be communicated through the attacker's equipment.

The MIMA attack using this ARP spooing causes the attacker's computer to be determined as a gateway, not the normal gateway, and all data will be sent to the attacker's computer.

When a user requests a server's public key, the attacker sends his or her public key. The attacker encrypts the public key with the received public key and sends it back to the attacker. The attacker decrypts the data with his private key, , The attacker decrypts the data received by the attacker, requests the public key of the original server again, encrypts the data, and transmits the data to the server. If there is data to be transmitted to the user, the data is transmitted to the attacker again.

Accordingly, the attacker decrypts the received data in the above-described manner, encrypts it, and transmits the decrypted data to the user. Thus, the user determines that normal communication has been performed, thereby causing abnormal financial transactions.

Embodiments of the present invention provide a security status of a communication section being used by a user to a user so that abnormal financial transactions can be prevented when a user performs a financial transaction such as remittance, To be able to do so.

Here, the present invention determines whether the user terminal is connected via WIFI or not and determines whether the password is set to WIFI. If the user terminal is connected to a public WIFI not set with a password, If ARP spoofing is detected by checking the trail of ARP spoofing from the attacker, the user is informed that the communication state security state should not perform the financial transaction, thereby inducing the user to disconnect the WIFI connection, The transaction can be prevented from being performed.

Further, in the present invention, when a trail of ARP spoofing is found when a money transfer transaction through a financial transaction is detected, even if a user performs a money transfer, the user can be forced not to transfer money in the application, You may.

In the present embodiments, 'user' may mean a user terminal owned by a user using an application such as a messenger service. For example, a user may substantially refer to a personal computer (PC), a laptop computer, a smart phone, a tablet, a wearable computer, and the like.

The method and apparatus according to the present invention will now be described with reference to FIGS. 1 to 6. FIG.

FIG. 1 is a flowchart illustrating a method of providing a security zone security state according to an exemplary embodiment of the present invention. Referring to FIG.

Referring to FIG. 1, a method according to an exemplary embodiment of the present invention is a method in which when a user terminal is connected through a WIFI in an application or a user terminal capable of financially trading, for example, a WIFI connected to the WIFI It is determined whether the WIFI is not set with the password (S110, S120).

As a result of the checking in step S120, if the WIFI accessed by the user terminal is a WIFI set with a password, the security status of the communication section may be set to a safe state or a safe state A display state is provided (S140).

For example, step S140 may provide a green display means for indicating that the communication section is in a safe state on a part of the screen on which the application is displayed.

Further, in the method according to the present invention, even if the WIFI accessed by the user terminal is the WIFI with the password set as a result of the check in step S120, the attacker can check the trail of ARP spoofing for the WIFI, It is possible to provide a green display means for indicating that the communication section is in the safety state in a part of the screen on which the application is displayed. In the case where the WIFI detects a trace of ARP spoofing while the WIFI is set with the password, And may provide a display status corresponding to a non-transaction status or a non-transaction status.

On the other hand, if it is determined in step S120 that the WIFI accessed by the user terminal is a WIFI whose password is not set, the attacker verifies the trail of ARP spoofing on the WIFI (S130, S150).

If it is determined in step S150 that a trail of ARP spoofing is detected or found, the security state of the communication section is provided with a display state corresponding to a non-financial transaction impossible state or a non-financial transaction impossible state. If no trace of ARP spoofing is found, And provides a display state corresponding to the unstable state or the unstable state of the security state of the interval (S160, S170).

The ARP spoofing attack will be described with reference to FIG. 2 to FIG. 4 as follows.

FIG. 2 illustrates an example of an ARP table of an attacking user, FIG. 3 illustrates an example of an ARP spoofing attack attempt by an attacker, FIG. 4 illustrates an example of an attacker's ARP spoofing attack, Is changed to the MAC address of the attacker.

As shown in FIG. 2, the attacker's IP address is 192.168.0.82, and the gateway used by the user is 192.168.0.1. In this state, the attacker attempts to attack the user's gateway through the APR spoofing attack attempt If the attacker's MAC address is changed (310, 320), the MAC address of the user is changed to the MAC address of the attacker (410) as shown in FIG. 4, thereby enabling the MIMA attack.

That is, since it is possible for an attacker to attempt APO Spooing attack on a WIFI for which a password is not set, the present invention discovers an APR spooing attack sign when accessing a WIFI not set with a password, Of the security status of the financial transaction can not be provided through the WIFI.

Further, the present invention can force a financial transaction, such as a money transfer, from being carried out in a corresponding application even if a financial transaction such as a money transfer is performed by a user when a trail of ARP spoofing is found when transferring money through a financial transaction is performed. And may provide a guidance message to the user.

5 illustrates an example of providing a current security state of a communication section. In the security state 510 shown in FIG. 5, when a security state of a communication section in which a password is set in the WIFI is provided to a user .

Of course, in the case where the security state of the communication section is not set with the WIFI password and no trace of ARP spoofing is found, the security state of the communication section can be displayed in a color display corresponding to the unstable state, for example, yellow , If the security state of the communication section is found without the WIFI password being set and the trail of ARP spoofing is found, the security state of the communication section corresponds to the non-transaction state such as data transaction or financial transaction. For example, It can be displayed in red.

The method according to the present invention can be applied to applications related to data or financial transactions in a user terminal.

For example, the present invention can be applied to an application providing a banking function such as remittance, inquiry, transfer, etc. in cooperation with a bank server for users registered as friends in an instant messaging service (i.e., messenger service). Specifically, a common account corresponding to a chat room, in particular, a group chat room is opened, and the personal account information registered by each of the users registered in the joint account, the group chat room, and the group chat room is associated with each other, The present invention can be applied to an application that provides a banking function such as remittance.

Here, the 'group chat room' is a group chat room formed by gathering people who share a specific purpose. It is also called a so-called chat room. For example, a chat room formed by members of the same team in a workplace, a kindergarten teacher, A chat room formed by a group of students of the university C of the B university, and a chat room formed by a group of users belonging to the green mother of the D elementary school.

In addition, the present invention can be applied to a messenger service capable of financial transactions, for example, a chat room in KakaoTalk, a Naver band provided in a bulletin board form, and the like, and is applicable to all kinds of applications It is possible.

For example, if the display information of the gift function is selected through the menu provided in the group chat room, the user who participated in the chat room or the other users registered in the messenger can receive the information such as the key, coffee, meal, flower, And accommodation service may be provided. In such a case, when a financial transaction for presenting a product is performed, the security state of the communication section is provided through the method according to the present invention, Transactions can be carried out safely.

In addition, the present invention can be applied to a messenger service in the form of a bulletin board in addition to a chat room type messenger service. That is, the present invention can be applied to a social network service (SNS) that shares information among users in a form of a bulletin board, in addition to a messenger service for sharing information between users in a chat room form such as a kakao chat, a line and the like. For example, the present invention can also be applied to a case where a group or an individual composed of users for a specific meeting is engaged in a financial transaction in a social network service such as a Twitter, a Naver band, a Facebook, a Cacao Story, or an Instagram.

As described above, in the method of the present invention, when a transaction is attempted in an application using a WIFI in which a password is not set, which may be an attack attempt such as ARP spoofing of an attacker, It is possible to guarantee the safety of the user's financial transaction by displaying it in the application in use. Of course, the method according to the present invention is not limited to the WIFI for which the password is not set, and may provide the security state of the communication section as a transaction impossible state if there is an attack attempt such as ARP spoof even when the password is WIFI.

Also, in the method according to the present invention, the checking of the security state of the communication section may include checking the password setting state of the WIFI accessed by the user terminal, checking the ARP spoofing attack sign if the WIFI password is not set, The security state of the communication section accessed by the user terminal can be determined according to the password setting state of the WIFI and the presence or absence of the ARP spoofing attack sign.

Herein, the process of determining the security state of the communication section determines that the security state of the communication section is in the safe state when the password of the WIFI is set, and when the password of the WIFI is not set and there is no sign of the ARP spoofing attack The security state of the communication section is determined to be in an unsafe state, and if the WIFI password is not set and the ARP spoofing attack trail exists, the security state of the communication section can be determined as a transaction incapable state.

FIG. 6 illustrates a configuration of a communication interval security status providing apparatus according to an exemplary embodiment of the present invention, and illustrates a configuration of an apparatus for performing the methods of FIGS. 1 to 5.

Referring to FIG. 6, an apparatus 600 for providing a communication section security state according to an embodiment of the present invention includes an identifying unit 610, a providing unit 620, and a blocking unit 630.

When the user terminal is connected to the user terminal through the WIFI, the confirmation unit 610 determines whether the connected WIFI is a WIFI whose password is set or a WIFI whose password is not set Check.

Further, if the WIFI accessed by the user terminal is a WIFI in which a password is not set, the verifying unit 610 confirms that the attacker has been subjected to ARP spoofing with respect to the WIFI.

Specifically, the confirmation unit 610 confirms the password setting state of the WIFI accessed by the user terminal, checks the ARP spoofing attack sign if the password of the WIFI is not set, determines the password setting state of the WIFI, The security state of the communication section accessed by the user terminal can be determined according to the presence or absence of the spoofing attack.

Here, if the password of the WIFI is set, the verifying unit 610 determines that the security state of the communication period is a safe state. If the password of the WIFI is not set and there is no sign of the ARP spoofing attack, And determines that the security state of the communication section is in a transaction incapable state when the password of the WIFI is not set and there is a sign of the ARP spoofing attack.

The providing unit 620 is a means for providing a security state of a communication section. When a WIFI accessed by a user terminal is a WIFI set with a password, an application for performing a financial transaction at the user terminal or the user terminal, And provides a display state corresponding to a secure state or a safe state.

If the trail of the ARP spoofing is confirmed or found, the providing unit 620 provides a display state corresponding to the non-financial transaction impossible state or the non-financial transaction impossible state of the security state of the communication period, and a trace of ARP spoofing is not found It provides a display state corresponding to an unstable or unstable state of the security state of the communication section.

If the trail of ARP spoofing is found or found by the confirming unit, the blocking unit forces the application not to perform a financial transaction such as a transfer transfer even if the user performs a financial transaction such as a transfer transfer, and provides a guidance message to the user do.

Here, the car part may be determined by user setting in the application, or may be forcibly applied in the corresponding device.

It should be apparent to those skilled in the art that the apparatus according to the present invention may include all the contents described in the method of Figs. 1 to 5, although the description thereof is omitted in the apparatus of Fig.

The apparatus described above may be implemented as a hardware component, a software component, and / or a combination of hardware components and software components. For example, the apparatus and components described in the embodiments may be implemented within a computer system, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA) , A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For ease of understanding, the processing apparatus may be described as being used singly, but those skilled in the art will recognize that the processing apparatus may have a plurality of processing elements and / As shown in FIG. For example, the processing unit may comprise a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of the foregoing, and may be configured to configure the processing device to operate as desired or to process it collectively or collectively Device can be commanded. The software and / or data may be in the form of any type of machine, component, physical device, virtual equipment, computer storage media, or device , Or may be embodyed temporarily. The software may be distributed over a networked computer system and stored or executed in a distributed manner. The software and data may be stored on one or more computer readable recording media.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (12)

Checking a security state of a communication section accessed by the user terminal; And
Providing the security state of the identified communication section to the user terminal
The method comprising the steps of:
The method according to claim 1,
The step of verifying the security status
Confirming a password setting state of the WIFI accessed by the user terminal;
Checking an ARP spoofing attack sign if the WIFI password is not set; And
Determining a security state of the communication section accessed by the user terminal according to the password setting state of the WIFI and the presence or absence of the ARP spoofing attack sign
The method comprising the steps of:
3. The method of claim 2,
The step of determining the security state of the communication section
If the password of the WIFI is set, the security state of the communication section is determined to be a safe state,
Determines that the security state of the communication section is an unsafe state when the password of the WIFI is not set and there is no sign of the ARP spoofing attack,
If the password of the WIFI is not set and there is a sign of the ARP spoofing attack, the security state of the communication section is determined to be in a transaction incapable state.
3. The method of claim 2,
The step of providing the security state of the communication section to the user terminal
And providing a display unit corresponding to the determined security state of the communication section on the screen of the user terminal by providing the determined security state of the communication section to the user terminal.
The method of claim 3,
And automatically blocking the financial transaction if the financial transaction is performed in the user terminal in a state in which the security state of the communication section is in a transaction-
Further comprising the steps of: receiving a request for a secure communication state;
The method according to claim 1,
The step of verifying the security status
If a password of a WIFI accessed by the user terminal is set and there is an ARP spoofing attack sign, the security state of the communication section is determined to be in a transaction incapable state.
A confirmation unit for confirming a security state of a communication section accessed by the user terminal; And
And providing the security state of the identified communication section to the user terminal
And a communication section for providing the communication section with the security status.
8. The method of claim 7,
The confirmation unit
Confirms the password setting state of the WIFI accessed by the user terminal,
If the password of the WIFI is not set, the ARP spoofing attack sign is checked,
Wherein the security state determining unit determines the security state of the communication section accessed by the user terminal according to the password setting state of the WIFI and the presence or absence of the ARP spoofing attack sign.
9. The method of claim 8,
The confirmation unit
If the password of the WIFI is set, the security state of the communication section is determined to be a safe state,
Determines that the security state of the communication section is an unsafe state when the password of the WIFI is not set and there is no sign of the ARP spoofing attack,
Wherein if the WIFI password is not set and there is a sign of the ARP spoofing attack, the security state of the communication section is determined to be unreachable.
9. The method of claim 8,
The providing unit
And provides the display unit corresponding to the determined security state of the communication section on the screen of the user terminal by providing the determined security state of the communication section to the user terminal.
10. The method of claim 9,
And a blocking unit for automatically blocking the financial transaction performed when the user terminal performs the financial transaction in a state that the security state of the communication period is in a transaction-
Further comprising: a communication unit for transmitting the security state information to the communication section.
8. The method of claim 7,
The confirmation unit
Wherein the security state of the communication section is determined to be unreachable if a password of a WIFI accessed by the user terminal is set and there is an ARP spoofing attack sign.

Images