KR20230119569A - Electronic device providing security function and method of operation therof - Google Patents

Abstract

A first electronic device according to an embodiment disclosed herein includes a wireless communication circuit for communication with a second electronic device, a processor operatively connected to the wireless communication circuit, and a memory operatively connected to the processor. and the memory, when executed, when the processor receives a user input requesting activation of a security function through the first electronic device or the second electronic device, the second electronic device via the wireless communication circuit. When a certificate chain request including a challenge value is received from an electronic device, and there is a user request for an operation requesting security for the second electronic device, the security function determines the second electronic device. It is a function that causes a device to perform a verification process of the certificate chain, and forms the certificate chain including the challenge value and a unique identifier (unique ID) of the first electronic device to obtain the second electronic device through the wireless communication circuit. It may store instructions to be transmitted to the electronic device.

Description

Electronic device providing security function and operation method thereof

Embodiments disclosed in this document relate to an electronic device providing a security function and an operating method thereof.

A wearable device (or accessory device) (eg, a smart watch or a Bluetooth earphone) may be connected to and used with a host electronic device (eg, a smart phone). When a wearable device is lost, it may become available for unauthorized use after another person acquires it and initializes the device.

In the case of a wearable device supporting network communication, a function of initializing the device and preventing connection with other host devices may be supported by using a method of authenticating an account by accessing a network. For example, after registering a wearable device to an online account, requesting account authentication (e.g., log-in) from the user when resetting the device later or disconnecting from the host device, changing the settings of the registered device item in the account, and then resetting the device Alternatively, disconnection from the host device may be performed. In addition, in order to connect to a new host device after device initialization, the connection operation with the new host device can be started only after authentication of an online account registered before initialization.

Or, in the case of a wearable device that supports UICC (universal integrated circuit card) (e.g. USIM (universal subscriber identity module) card, eSIM (embedded SIM)), unauthorized use by using wearable device information including UICC Blocking function can be supported. For example, in the case of a wearable device supporting UICC, when the wearable device is first booted after device initialization, a locking application program may be automatically executed to perform locking of the wearable device.

In the case of a wearable device that does not support network communication or UICC, it may be impossible to provide a function of initializing the device and preventing connection with other host devices because there is no means for authenticating the user.

According to various embodiments of the present disclosure, even if the wearable device does not support network communication or UICC, or the wearable device does not have its own account managed by the wearable device manufacturer, a method for verifying a certificate chain between a host device and a wearable device is utilized to provide a wearable device. An electronic device providing a security function of the device and an operating method thereof are provided.

A first electronic device according to an embodiment disclosed herein includes a wireless communication circuit for communication with a second electronic device, a processor operatively connected to the wireless communication circuit, and a memory operatively connected to the processor. and the memory, when executed, when the processor receives a user input requesting activation of a security function through the first electronic device or the second electronic device, the second electronic device via the wireless communication circuit. When a certificate chain request including a challenge value is received from an electronic device, and there is a user request for an operation requesting security for the second electronic device, the security function determines the second electronic device. It is a function that causes a device to perform a verification process of the certificate chain, and forms the certificate chain including the challenge value and a unique identifier (unique ID) of the first electronic device to obtain the second electronic device through the wireless communication circuit. It may store instructions to be transmitted to the electronic device.

A second electronic device according to an embodiment disclosed in this document includes a wireless communication circuit for communication with a first electronic device, a processor operatively connected to the wireless communication circuit, and a memory operatively connected to the processor. and, when the memory is executed, when the processor receives a user input requesting activation of a security function through the first electronic device or the second electronic device, the memory provides a challenge value to the first electronic device. (challenge value) is transmitted, the validity of the certificate chain received from the first electronic device is verified, and as the validity of the certificate chain is verified, the certificate chain and the A unique identifier of the first electronic device included in the certificate chain may be stored in a second secure memory of the memory, and instructions for activating the security function may be stored.

According to various embodiments of the present disclosure, even in the case of a wearable device that does not support network communication or UICC or does not have its own account managed by the manufacturer of the wearable device, a method for verifying a certificate chain between a host device and a wearable device can be used. An electronic device providing a security function of a wearable device and an operating method thereof may be provided.

In addition to this, various effects identified directly or indirectly through this document may be provided.

1 is a block diagram of an electronic device in a network environment, according to various embodiments.
2 is a block diagram illustrating configurations of electronic devices according to an exemplary embodiment.
3 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment.
4 is a diagram illustrating a certificate chain of an electronic device according to an embodiment.
5 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment.
6 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment.
7 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment.
8 is a flowchart illustrating an operation of a first electronic device according to an embodiment.
9 is a flowchart illustrating an operation of a second electronic device according to an embodiment.
In connection with the description of the drawings, the same or similar reference numerals may be used for the same or similar elements.

Hereinafter, various embodiments of the present invention will be described with reference to the accompanying drawings. However, it should be understood that this is not intended to limit the present invention to the specific embodiments, and includes various modifications, equivalents, and/or alternatives of the embodiments of the present invention.

1 is a block diagram of an electronic device 101 within a network environment 100, according to various embodiments. Referring to FIG. 1 , in a network environment 100, an electronic device 101 communicates with an electronic device 102 through a first network 198 (eg, a short-range wireless communication network) or through a second network 199. It is possible to communicate with the electronic device 104 or the server 108 through (eg, a long-distance wireless communication network). According to one embodiment, the electronic device 101 may communicate with the electronic device 104 through the server 108 . According to an embodiment, the electronic device 101 includes a processor 120, a memory 130, an input module 150, an audio output module 155, a display module 160, an audio module 170, a sensor module ( 176), interface 177, connection terminal 178, haptic module 179, camera module 180, power management module 188, battery 189, communication module 190, subscriber identification module 196 , or the antenna module 197 may be included. In some embodiments, in the electronic device 101, at least one of these components (eg, the connection terminal 178) may be omitted or one or more other components may be added. In some embodiments, some of these components (eg, sensor module 176, camera module 180, or antenna module 197) are integrated into a single component (eg, display module 160). It can be.

The processor 120, for example, executes software (eg, the program 140) to cause at least one other component (eg, hardware or software component) of the electronic device 101 connected to the processor 120. It can control and perform various data processing or calculations. According to one embodiment, as at least part of data processing or operation, the processor 120 transfers instructions or data received from other components (e.g., sensor module 176 or communication module 190) to volatile memory 132. , processing commands or data stored in the volatile memory 132 , and storing resultant data in the non-volatile memory 134 . According to one embodiment, the processor 120 may include a main processor 121 (eg, a central processing unit or an application processor) or a secondary processor 123 (eg, a graphic processing unit, a neural network processing unit ( NPU: neural processing unit (NPU), image signal processor, sensor hub processor, or communication processor). For example, when the electronic device 101 includes the main processor 121 and the auxiliary processor 123, the auxiliary processor 123 may use less power than the main processor 121 or be set to be specialized for a designated function. can The secondary processor 123 may be implemented separately from or as part of the main processor 121 .

The secondary processor 123 may, for example, take the place of the main processor 121 while the main processor 121 is in an inactive (eg, sleep) state, or the main processor 121 is active (eg, running an application). ) state, together with the main processor 121, at least one of the components of the electronic device 101 (eg, the display module 160, the sensor module 176, or the communication module 190) It is possible to control at least some of the related functions or states. According to one embodiment, the auxiliary processor 123 (eg, image signal processor or communication processor) may be implemented as part of other functionally related components (eg, camera module 180 or communication module 190). there is. According to an embodiment, the auxiliary processor 123 (eg, a neural network processing device) may include a hardware structure specialized for processing an artificial intelligence model. AI models can be created through machine learning. Such learning may be performed, for example, in the electronic device 101 itself where artificial intelligence is performed, or may be performed through a separate server (eg, the server 108). The learning algorithm may include, for example, supervised learning, unsupervised learning, semi-supervised learning or reinforcement learning, but in the above example Not limited. The artificial intelligence model may include a plurality of artificial neural network layers. Artificial neural networks include deep neural networks (DNNs), convolutional neural networks (CNNs), recurrent neural networks (RNNs), restricted boltzmann machines (RBMs), deep belief networks (DBNs), bidirectional recurrent deep neural networks (BRDNNs), It may be one of deep Q-networks or a combination of two or more of the foregoing, but is not limited to the foregoing examples. The artificial intelligence model may include, in addition or alternatively, software structures in addition to hardware structures.

The memory 130 may store various data used by at least one component (eg, the processor 120 or the sensor module 176) of the electronic device 101 . The data may include, for example, input data or output data for software (eg, program 140) and commands related thereto. The memory 130 may include volatile memory 132 or non-volatile memory 134 .

The program 140 may be stored as software in the memory 130 and may include, for example, an operating system 142 , middleware 144 , or an application 146 .

The input module 150 may receive a command or data to be used by a component (eg, the processor 120) of the electronic device 101 from the outside of the electronic device 101 (eg, a user). The input module 150 may include, for example, a microphone, a mouse, a keyboard, a key (eg, a button), or a digital pen (eg, a stylus pen).

The sound output module 155 may output sound signals to the outside of the electronic device 101 . The sound output module 155 may include, for example, a speaker or a receiver. The speaker can be used for general purposes such as multimedia playback or recording playback. A receiver may be used to receive an incoming call. According to one embodiment, the receiver may be implemented separately from the speaker or as part of it.

The display module 160 may visually provide information to the outside of the electronic device 101 (eg, a user). The display module 160 may include, for example, a display, a hologram device, or a projector and a control circuit for controlling the device. According to one embodiment, the display module 160 may include a touch sensor set to detect a touch or a pressure sensor set to measure the intensity of force generated by the touch.

The audio module 170 may convert sound into an electrical signal or vice versa. According to one embodiment, the audio module 170 acquires sound through the input module 150, the sound output module 155, or an external electronic device connected directly or wirelessly to the electronic device 101 (eg: Sound may be output through the electronic device 102 (eg, a speaker or a headphone).

The sensor module 176 detects an operating state (eg, power or temperature) of the electronic device 101 or an external environmental state (eg, a user state), and generates an electrical signal or data value corresponding to the detected state. can do. According to one embodiment, the sensor module 176 may include, for example, a gesture sensor, a gyro sensor, an air pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an IR (infrared) sensor, a bio sensor, It may include a temperature sensor, humidity sensor, or light sensor.

The interface 177 may support one or more designated protocols that may be used to directly or wirelessly connect the electronic device 101 to an external electronic device (eg, the electronic device 102). According to one embodiment, the interface 177 may include, for example, a high definition multimedia interface (HDMI), a universal serial bus (USB) interface, an SD card interface, or an audio interface.

The connection terminal 178 may include a connector through which the electronic device 101 may be physically connected to an external electronic device (eg, the electronic device 102). According to one embodiment, the connection terminal 178 may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (eg, a headphone connector).

The haptic module 179 may convert electrical signals into mechanical stimuli (eg, vibration or motion) or electrical stimuli that a user may perceive through tactile or kinesthetic senses. According to one embodiment, the haptic module 179 may include, for example, a motor, a piezoelectric element, or an electrical stimulation device.

The camera module 180 may capture still images and moving images. According to one embodiment, the camera module 180 may include one or more lenses, image sensors, image signal processors, or flashes.

The power management module 188 may manage power supplied to the electronic device 101 . According to one embodiment, the power management module 188 may be implemented as at least part of a power management integrated circuit (PMIC), for example.

The battery 189 may supply power to at least one component of the electronic device 101 . According to one embodiment, the battery 189 may include, for example, a non-rechargeable primary cell, a rechargeable secondary cell, or a fuel cell.

The communication module 190 is a direct (eg, wired) communication channel or a wireless communication channel between the electronic device 101 and an external electronic device (eg, the electronic device 102, the electronic device 104, or the server 108). Establishment and communication through the established communication channel may be supported. The communication module 190 may include one or more communication processors that operate independently of the processor 120 (eg, an application processor) and support direct (eg, wired) communication or wireless communication. According to one embodiment, the communication module 190 is a wireless communication module 192 (eg, a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module 194 (eg, : a local area network (LAN) communication module or a power line communication module). Among these communication modules, a corresponding communication module is a first network 198 (eg, a short-range communication network such as Bluetooth, wireless fidelity (WiFi) direct, or infrared data association (IrDA)) or a second network 199 (eg, legacy It may communicate with the external electronic device 104 through a cellular network, a 5G network, a next-generation communication network, the Internet, or a telecommunications network such as a computer network (eg, a LAN or a WAN). These various types of communication modules may be integrated as one component (eg, a single chip) or implemented as a plurality of separate components (eg, multiple chips). The wireless communication module 192 uses subscriber information (eg, International Mobile Subscriber Identifier (IMSI)) stored in the subscriber identification module 196 within a communication network such as the first network 198 or the second network 199. The electronic device 101 may be identified or authenticated.

The wireless communication module 192 may support a 5G network after a 4G network and a next-generation communication technology, for example, NR access technology (new radio access technology). NR access technologies include high-speed transmission of high-capacity data (enhanced mobile broadband (eMBB)), minimization of terminal power and access of multiple terminals (massive machine type communications (mMTC)), or high reliability and low latency (ultra-reliable and low latency (URLLC)). -latency communications)) can be supported. The wireless communication module 192 may support a high frequency band (eg, mmWave band) to achieve a high data rate, for example. The wireless communication module 192 uses various technologies for securing performance in a high frequency band, such as beamforming, massive multiple-input and multiple-output (MIMO), and full-dimensional multiplexing. Technologies such as input/output (FD-MIMO: full dimensional MIMO), array antenna, analog beam-forming, or large scale antenna may be supported. The wireless communication module 192 may support various requirements defined for the electronic device 101, an external electronic device (eg, the electronic device 104), or a network system (eg, the second network 199). According to one embodiment, the wireless communication module 192 is a peak data rate for eMBB realization (eg, 20 Gbps or more), a loss coverage for mMTC realization (eg, 164 dB or less), or a U-plane latency for URLLC realization (eg, Example: downlink (DL) and uplink (UL) each of 0.5 ms or less, or round trip 1 ms or less) may be supported.

The antenna module 197 may transmit or receive signals or power to the outside (eg, an external electronic device). According to one embodiment, the antenna module 197 may include an antenna including a radiator formed of a conductor or a conductive pattern formed on a substrate (eg, PCB). According to one embodiment, the antenna module 197 may include a plurality of antennas (eg, an array antenna). In this case, at least one antenna suitable for a communication method used in a communication network such as the first network 198 or the second network 199 is selected from the plurality of antennas by the communication module 190, for example. can be chosen A signal or power may be transmitted or received between the communication module 190 and an external electronic device through the selected at least one antenna. According to some embodiments, other components (eg, a radio frequency integrated circuit (RFIC)) may be additionally formed as a part of the antenna module 197 in addition to the radiator.

According to various embodiments, the antenna module 197 may form a mmWave antenna module. According to one embodiment, the mmWave antenna module includes a printed circuit board, an RFIC disposed on or adjacent to a first surface (eg, a lower surface) of the printed circuit board and capable of supporting a designated high frequency band (eg, mmWave band); and a plurality of antennas (eg, array antennas) disposed on or adjacent to a second surface (eg, a top surface or a side surface) of the printed circuit board and capable of transmitting or receiving signals of the designated high frequency band. can do.

At least some of the components are connected to each other through a communication method between peripheral devices (eg, a bus, general purpose input and output (GPIO), serial peripheral interface (SPI), or mobile industry processor interface (MIPI)) and signal ( e.g. commands or data) can be exchanged with each other.

According to an embodiment, commands or data may be transmitted or received between the electronic device 101 and the external electronic device 104 through the server 108 connected to the second network 199 . Each of the external electronic devices 102 or 104 may be the same as or different from the electronic device 101 . According to an embodiment, all or part of operations executed in the electronic device 101 may be executed in one or more external electronic devices among the external electronic devices 102 , 104 , or 108 . For example, when the electronic device 101 needs to perform a certain function or service automatically or in response to a request from a user or another device, the electronic device 101 instead of executing the function or service by itself. Alternatively or additionally, one or more external electronic devices may be requested to perform the function or at least part of the service. One or more external electronic devices receiving the request may execute at least a part of the requested function or service or an additional function or service related to the request, and deliver the execution result to the electronic device 101 . The electronic device 101 may provide the result as at least part of a response to the request as it is or additionally processed. To this end, for example, cloud computing, distributed computing, mobile edge computing (MEC), or client-server computing technology may be used. The electronic device 101 may provide an ultra-low latency service using, for example, distributed computing or mobile edge computing. In another embodiment, the external electronic device 104 may include an internet of things (IoT) device. Server 108 may be an intelligent server using machine learning and/or neural networks. According to one embodiment, the external electronic device 104 or server 108 may be included in the second network 199 . The electronic device 101 may be applied to intelligent services (eg, smart home, smart city, smart car, or health care) based on 5G communication technology and IoT-related technology.

Electronic devices according to various embodiments disclosed in this document may be devices of various types. The electronic device may include, for example, a portable communication device (eg, a smart phone), a computer device, a portable multimedia device, a portable medical device, a camera, a wearable device, or a home appliance. An electronic device according to an embodiment of the present document is not limited to the aforementioned devices.

Various embodiments of this document and terms used therein are not intended to limit the technical features described in this document to specific embodiments, but should be understood to include various modifications, equivalents, or substitutes of the embodiments. In connection with the description of the drawings, like reference numbers may be used for like or related elements. The singular form of a noun corresponding to an item may include one item or a plurality of items, unless the relevant context clearly dictates otherwise. In this document, "A or B", "at least one of A and B", "at least one of A or B", "A, B or C", "at least one of A, B and C", and "A Each of the phrases such as "at least one of , B, or C" may include any one of the items listed together in that phrase, or all possible combinations thereof. Terms such as "first", "second", or "first" or "secondary" may simply be used to distinguish a given component from other corresponding components, and may be used to refer to a given component in another aspect (eg, importance or order) is not limited. A (e.g., first) component is said to be "coupled" or "connected" to another (e.g., second) component, with or without the terms "functionally" or "communicatively." When mentioned, it means that the certain component may be connected to the other component directly (eg by wire), wirelessly, or through a third component.

The term "module" used in various embodiments of this document may include a unit implemented in hardware, software, or firmware, and is interchangeable with terms such as, for example, logic, logical blocks, parts, or circuits. can be used as A module may be an integrally constructed component or a minimal unit of components or a portion thereof that performs one or more functions. For example, according to one embodiment, the module may be implemented in the form of an application-specific integrated circuit (ASIC).

Various embodiments of this document provide one or more instructions stored in a storage medium (eg, internal memory 136 or external memory 138) readable by a machine (eg, electronic device 101). It may be implemented as software (eg, the program 140) including them. For example, a processor (eg, the processor 120 ) of a device (eg, the electronic device 101 ) may call at least one command among one or more instructions stored from a storage medium and execute it. This enables the device to be operated to perform at least one function according to the at least one command invoked. The one or more instructions may include code generated by a compiler or code executable by an interpreter. The device-readable storage medium may be provided in the form of a non-transitory storage medium. Here, 'non-temporary' only means that the storage medium is a tangible device and does not contain a signal (e.g. electromagnetic wave), and this term refers to the case where data is stored semi-permanently in the storage medium. It does not discriminate when it is temporarily stored.

According to one embodiment, the method according to various embodiments disclosed in this document may be included and provided in a computer program product. Computer program products may be traded between sellers and buyers as commodities. A computer program product is distributed in the form of a device-readable storage medium (e.g. compact disc read only memory (CD-ROM)), or through an application store (e.g. Play Store™) or on two user devices (e.g. It can be distributed (eg downloaded or uploaded) online, directly between smart phones. In the case of online distribution, at least part of the computer program product may be temporarily stored or temporarily created in a device-readable storage medium such as a manufacturer's server, an application store server, or a relay server's memory.

According to various embodiments, each component (eg, module or program) of the above-described components may include a single object or a plurality of entities, and some of the plurality of entities may be separately disposed in other components. there is. According to various embodiments, one or more components or operations among the aforementioned corresponding components may be omitted, or one or more other components or operations may be added. Alternatively or additionally, a plurality of components (eg modules or programs) may be integrated into a single component. In this case, the integrated component may perform one or more functions of each of the plurality of components identically or similarly to those performed by a corresponding component of the plurality of components prior to the integration. . According to various embodiments, the actions performed by a module, program, or other component are executed sequentially, in parallel, iteratively, or heuristically, or one or more of the actions are executed in a different order, or omitted. or one or more other actions may be added.

Hereinafter, an electronic device and an operation of the electronic device according to an exemplary embodiment will be described with reference to FIGS. 2, 3, and 4 .

2 is a block diagram illustrating configurations of electronic devices according to an exemplary embodiment. 3 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment. 4 is a diagram illustrating a certificate chain of an electronic device according to an embodiment. Hereinafter, the operation of the electronic device may be performed by a processor (eg, the first processor 215 and the second processor 225) of each electronic device.

Referring to FIG. 2 , according to an embodiment, a first electronic device 210 (eg, the electronic device 101 of FIG. 1 ) includes a first Bluetooth module 211, a wearable device management module 212, and a certificate generation module. 213 , a first secure memory 214 and a first processor 215 . The first processor 215 may be connected to the first Bluetooth module 211 , the wearable device management module 212 , the certificate generation module 213 and the first secure memory 214 . Each of the first Bluetooth module 211, the wearable device management module 212, and the certificate generation module 213 may include a hardware module and/or a software module, and may be controlled or executed by the connected first processor 215. there is.

According to an embodiment, the first electronic device 210 is a host electronic device and may be any one of a portable communication device (eg, a smart phone), a computer device, a portable multimedia device, a portable medical device, a camera, and a home appliance. . The first electronic device 210 according to an embodiment of the present document is not limited to the aforementioned devices.

According to an embodiment, the second electronic device 220 includes a second Bluetooth module 221, a certificate issue request module 222, a certificate verification module 223, a second secure memory 224, and a second processor 225. can include The second processor 225 may be connected to the second Bluetooth module 221 , the certificate issue request module 222 , the certificate verification module 223 and the second secure memory 224 . Each of the second Bluetooth module 221, the certificate issue request module 222, and the certificate verification module 223 may include a hardware module and/or a software module, and may be controlled or executed by the connected second processor 225. there is.

According to an embodiment, the second electronic device 220 may be a wearable device, and may be any one of a smart watch, a Bluetooth earphone, and a head mounted display. The second electronic device 220 according to an embodiment of the present document is not limited to the aforementioned devices, and may be an accessory electronic device of the first electronic device 210 even if it is not worn by the user.

According to an embodiment, the first Bluetooth module 211 establishes a Bluetooth communication channel between the first electronic device 210 and an external electronic device (eg, the second electronic device 220), and communicates through the established communication channel. can support implementation. The first Bluetooth module 211 may include, but is not limited to, one or more communication processors that operate independently of the first processor 215 and support wireless communication. According to an embodiment, the first Bluetooth module 211 may perform Bluetooth communication by pairing with the second electronic device 220 through a Bluetooth network.

According to an embodiment, the wearable device management module 212 may receive a request for a specific function from the second electronic device 220 and transmit the request to a module suitable for the requested function. According to an embodiment, the wearable device management module 212 may include a wearable device management application that receives a certificate chain generation request from the wearable device, and the wearable device management application receives a certificate chain (certificate) from the second electronic device 220 . chain) may be received, and a challenge value received together with the request may be transmitted to the certificate generation module 213.

According to an embodiment, the certificate generating module 213 may include an interface unit receiving a request from the application and an operation unit generating a certificate and certificate chain. The operation unit may be executed in the first secure memory 214 to ensure security of the certificate chain formed by forming a certificate chain, and the interface unit may serve as a passage connecting the application and the operation unit.

According to an embodiment, the first secure memory 214 may be a Trusted Execution Environment (TEE) or a hardware storage space providing a security level equal to or higher than that of a Trusted Execution Environment. According to an embodiment, the first secure memory 214 includes a unique authentication key unique to the first electronic device 210 (hereinafter used as the same meaning as the second authentication key in various embodiments of the present specification) and A unique authentication key certificate, which is a pair certificate of a unique authentication key (hereinafter, used as the same meaning as a second certificate in various embodiments of the present specification) may be stored. The second authentication key and the second certificate may be stored in the first secure memory 214 and protected from the outside.

According to an embodiment, the second authentication key and the second certificate may be stored in the first secure memory 214 when the first electronic device 210 is manufactured. According to an embodiment, the second certificate is a root key (hereinafter, first authentication in various embodiments of the present specification) in a separate hardware security module when the first electronic device 210 is manufactured. It may be signed with a key) and stored in the first secure memory 214 . According to an embodiment, a root certificate that is a pair certificate of the first authentication key (hereinafter, used as the same meaning as the first certificate in various embodiments of the present specification) is also stored in the first secure memory 214. can

According to an embodiment, the unique authentication key (second authentication key) is unique to the manufacturer of the first electronic device 210 and stored in the first electronic device 210 when the first electronic device 210 is manufactured. may be different for all electronic devices of the first electronic device 210, and may be the same within the first electronic device 210 after manufacturing the first electronic device 210 except when the first processor 215 of the first electronic device 210 is changed. can be maintained.

According to an embodiment, the second Bluetooth module 221 may support establishment of a Bluetooth communication channel between the second electronic device 220 and the first electronic device 210, and communication through the established communication channel. 2 A description of the Bluetooth module 221 may be at least partially the same as that of the first Bluetooth module 211 .

According to an embodiment, the certificate issuance request module 222 may perform a request for activation/deactivation of a security function, a request for connection/disconnection with a host electronic device, or a request for initialization of a host electronic device connected to a host electronic device through Bluetooth communication. A device (eg, the first electronic device 210) may be requested to issue a certificate chain. The certificate issue request module 222 may transmit a certificate chain issue request message and a challenge value together to the first electronic device 210 . According to an embodiment, the challenge value may be an unpredictable and randomly generated one-time value so as not to overlap.

According to an embodiment, the certificate verification module 223 may verify the validity of the certificate chain received from the first electronic device 210 . The validation process of the certificate chain will be described later.

According to an embodiment, a certificate chain whose validity has been verified may be stored in the second secure memory 224, and the second secure memory 224 may be a non-volatile memory. According to an embodiment, a description of the second secure memory 224 may be at least partially the same as that of the first secure memory 214 .

Hereinafter, an electronic device and an operation of the electronic device according to an embodiment of the present disclosure will be described in more detail with reference to FIGS. 3 and 4 . It is assumed that the current security function of the second electronic device 220 is deactivated. According to an embodiment, the security function includes software initialization of the second electronic device 220, disconnection of the second electronic device 220 from the host device (eg, the first electronic device 210), and/or the second electronic device 220. When there is a request to deactivate the security function of the electronic device 220, the second electronic device 220 verifies whether the user requesting the request is the rightful owner of the second electronic device 220 through the host device. ) may be prevented from unauthorized use and may be a function of maintaining security of the second electronic device 220 in situations such as theft.

Referring to FIG. 3 , in operation 301, the second electronic device 220 may receive an input requesting activation of a security function from the user. The second electronic device 220 (eg, the second processor 225 of the second electronic device 220 of FIG. 2 ) detects a request for activating the security function through a user's input for activating the menu of the security function. can be identified.

According to an embodiment, in operation 302, the second electronic device 220 may request a certificate chain from the connected first electronic device 210. The second electronic device 220 may transmit a certificate chain request (eg, a request message) and a challenge value to the first electronic device 210 together.

According to an embodiment, in operation 303, the first electronic device 210 (eg, the first processor 215 of the first electronic device 210 of FIG. 2 ) receives a certificate chain request from the second electronic device 220. Upon receipt, you can create a certificate chain.

Hereinafter, referring to FIG. 4 , an operation of generating a certificate chain of the first electronic device 210 according to an embodiment will be described. 4 is an example of details of a first certificate 410, a second certificate 420, a third certificate 430, and a first certificate 410 included in a certificate chain (411) and a second certificate (420). An example 421 of the detailed content of and an example 431 of the detailed content of the third certificate 430 are shown.

Referring to FIG. 4 , a certificate chain may include three certificates 410 , 420 , and 430 . According to the embodiment of FIG. 4 , the second certificate 420 is stored in the secure memory (eg, the first secure memory 214 of FIG. 2 ) of the first electronic device 210 when the first electronic device 210 is created. It can be a certificate. Depending on the embodiment, the second certificate 420 may be a unique authentication key certificate that is a pair certificate of the unique authentication key (second authentication key) of the first electronic device 210 . According to an embodiment, the second certificate is signed with a root key (first authentication key) in a separate hardware security module (HSM) when the first electronic device 210 is manufactured and stored in the first electronic device 210. There may be.

According to an embodiment, the first certificate 410 may be a root certificate that is a pair certificate of a root key that signed the second certificate 420, and when the first electronic device 210 is generated, the first electronic device 210 may be a certificate stored in a secure memory (eg, the first secure memory 214 of FIG. 2 ).

According to an embodiment, upon receiving a certificate chain request from the second electronic device 210, the first electronic device 210 generates an application key (hereinafter, the same as the third authentication key in various embodiments of the present specification). meaning) and an application certificate, which is a pair certificate of an application key (hereinafter, used in the same meaning as a third certificate in various embodiments of the present specification).

According to an embodiment, the first electronic device 210 may include the challenge value 433 received from the second electronic device 220 in the third certificate 430, and the second certificate 420 The third certificate 430 may be signed with the authentication key.

According to an embodiment, when the first electronic device 210 generates the third certificate 430, a unique ID 432 of the first electronic device 210 is included in the third certificate 430. may be Also, at this time, the first electronic device 210 may additionally go through a step of checking whether the value of the unique identifier 432 of the first electronic device 210 is valid, and the value of the unique identifier 432 is valid. The value 434 for checking whether or not the authentication is valid may be included in the third certificate 430 .

According to an embodiment, the first electronic device 210 may complete the creation of the certificate chain by signing the third certificate 430 . At this time, the generated certificate chain may include the public key of the first certificate 410 and the public key of the second certificate 420 .

Referring back to FIG. 3 , in operation 304 , the first electronic device 210 may transmit the generated certificate chain to the second electronic device 220 .

In operation 305, the second electronic device 220 may verify the validity of the received certificate chain. According to an embodiment, the second electronic device 220 may verify the validity of the certificate chain by checking whether the signature of the corresponding certificate is valid with the public key of the issuer indicated in the certificate of the received certificate chain. there is.

According to an embodiment, the second electronic device 220 verifies whether the signature of the second certificate 420 is valid with the public key of the first certificate 410 as an issuer indicated in the second certificate 420 of the received certificate chain ( verification) can be done. According to an embodiment, the second electronic device 220 verifies whether the signature of the third certificate 430 is valid with the public key of the second certificate 420 as an issuer indicated in the third certificate 430 of the received certificate chain. can

According to an embodiment, as the validation of the third certificate 430 is completed, the challenge value 433 included in the third certificate 430 is determined by the second electronic device 220. 1 It can be checked whether the challenge value is the same as the one transmitted to the electronic device 210 .

According to an embodiment, the second electronic device 220 includes a unique identifier 432 of the first electronic device in the third certificate 430 and stores a trusted device in the memory of the second electronic device 220 ( Example: If the identifier of a device with a connection history, etc.) is stored, it is possible to check whether the certificate chain transmitted from a trusted device is confirmed by checking the unique identifier 432 included in the third certificate 430.

According to an embodiment, as the validity of the certificate chain is verified, in operation 306, the second electronic device 220 stores the certificate chain in a secure memory (eg, the second secure memory 224 of FIG. 2) and stores the certificate chain in the second electronic device 220. The security function of (220) can be activated. According to an embodiment, when the second electronic device 220 receives a subsequent security function deactivation request and/or device initialization request from a user, the second electronic device 220 may store a certificate chain whose validity is verified for use in a verification process in a secure memory. .

Also, according to an embodiment, the second electronic device 220 converts the unique identifier 432 of the first electronic device 210 included in the third certificate 430 into a trustworthy device. can be registered in If the unique identifier 432 of the first electronic device 210 is already registered as a trusted device in the second electronic device 220, the device identifier registration operation may be omitted.

Hereinafter, with reference to FIG. 5 , operations of electronic devices when a security function activation and a request input are received in the first electronic device 210 according to an embodiment of the present disclosure will be described. It is assumed that the current security function of the second electronic device 220 is deactivated. A description of the same configuration as the above-described embodiment may be omitted.

5 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment.

Referring to FIG. 5 , in operation 501, the first electronic device 210 (eg, the first processor 215 of the first electronic device 210 of FIG. 2 ) blocks the security function of the second electronic device 220 from the user. may receive an input requesting activation. According to an embodiment, the first electronic device 210 may identify that there is a request to activate the security function through a user's input for activating the menu of the security function.

In operation 502, the first electronic device 210 may transmit that there is a security function activation request to the connected second electronic device 220, which is the target of the security function activation request. For example, the first electronic device 210 may transmit a security function activation request message to the second electronic device 220 .

In operation 503, the second electronic device 220 (eg, the second processor 225 of the second electronic device 220 of FIG. 2) may receive a user's confirmation of the security function activation request. According to an embodiment, the second electronic device 220 may display a request for activating the security function of the second electronic device 220 on the display device of the second electronic device 200, and the user's confirmation (approval) for this may be displayed. ) can receive input.

In operation 504, the second electronic device 220 may request a certificate chain from the connected first electronic device 210. The second electronic device 220 may transmit the certificate chain request and challenge value together to the first electronic device 210 .

In operation 505, the first electronic device 210 may generate a certificate chain according to receiving a certificate chain request from the second electronic device 220. According to an embodiment, an operation of forming a certificate chain by the first electronic device 210 may be the same as that described above with reference to FIGS. 3 and 4 . According to an embodiment, the first electronic device 210 generates an application certificate (third certificate) and an application key (third authentication key), and converts the application certificate to a unique authentication key (second authentication key) stored in a secure memory. By signing, a certificate chain including a root certificate (first certificate), a unique authentication key certificate (second certificate), and an application certificate (third certificate) can be formed. According to an embodiment, the application certificate (third certificate) may include a challenge value received from the second electronic device 220 and a unique identifier of the first electronic device 210 .

In operation 505, the first electronic device 210 may deliver the generated certificate chain to the second electronic device 220.

In operation 507, the second electronic device 220 may verify the validity of the received certificate chain.

According to an embodiment, the verification of the validity of the certificate chain by the second electronic device 220 may be the same as that described with reference to FIGS. 3 and 4 . According to an embodiment, the second electronic device 220 may verify the validity of the second certificate with the public key included in the first certificate, and verify the validity of the third certificate with the public key included in the second certificate. After completing validation of the certificate, the second electronic device 220 may check the challenge value included in the third certificate and the unique identifier of the second electronic device 210 .

According to an embodiment, upon completion of validation of the certificate chain, in operation 506, the second electronic device 220 stores the certificate chain in a secure memory (eg, the second secure memory 224 of FIG. 2) and stores the certificate chain in the second electronic device 220. A security feature of the device 220 may be activated. According to an embodiment, when the second electronic device 220 receives a subsequent security function deactivation request and/or device initialization request from a user, the second electronic device 220 may store a certificate chain whose validity is verified for use in a verification process in a secure memory. .

Also, according to an embodiment, the second electronic device 220 may register the unique identifier of the first electronic device 210 included in the third certificate 430 with the second electronic device 220 as a trusted device. can If the unique identifier of the first electronic device 210 is already registered as a trusted device in the second electronic device 220, the operation of registering the device identifier may be omitted.

Hereinafter, with reference to FIG. 6 , operations of electronic devices when a security function inactivation and a request input are received while the security function of the second electronic device 220 is activated according to an embodiment of the present disclosure will be described. . A description of the same configuration as the above-described embodiment may be omitted.

6 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment.

Referring to FIG. 6 , in operation 601, the second electronic device 220 (eg, the second processor 225 of the second electronic device 220 of FIG. 2 ) blocks the security function of the second electronic device 220 from the user. may receive an input requesting to disable Although FIG. 6 shows that the second electronic device 220 receives a request for deactivating the security function of the second electronic device 220, the first electronic device 220, as in FIG. A request for deactivating the security function of the device 220 may be received and transmitted to the second electronic device 220 .

In operation 602, the second electronic device 220 may request a certificate chain from the connected first electronic device 210. The second electronic device 220 may transmit the certificate chain request and challenge value together to the first electronic device 210 .

In operation 603, the first electronic device 210 (eg, the first processor 215 of the first electronic device 210 of FIG. 2 ) receives the certificate chain request from the second electronic device 220, and thus the certificate chain. can create According to an embodiment, an operation of forming a certificate chain by the first electronic device 210 may be the same as that described above with reference to FIGS. 3 and 4 . According to an embodiment, the first electronic device 210 generates an application certificate (third certificate) and an application key (third authentication key), and converts the application certificate to a unique authentication key (second authentication key) stored in a secure memory. By signing, a certificate chain including a root certificate (first certificate), a unique authentication key certificate (second certificate), and an application certificate (third certificate) can be formed. According to an embodiment, the application certificate (third certificate) may include a challenge value received from the second electronic device 220 and a unique identifier of the first electronic device 210 .

In operation 604, the first electronic device 210 may deliver the generated certificate chain to the second electronic device 220.

In operation 605, the second electronic device 220 may verify the validity of the received certificate chain. According to an embodiment, the verification of the validity of the certificate chain by the second electronic device 220 may be the same as that described with reference to FIGS. 3 and 4 . According to an embodiment, the second electronic device 220 may verify the validity of the second certificate with the public key included in the first certificate, and verify the validity of the third certificate with the public key included in the second certificate.

According to an embodiment, after the second electronic device 220 completes validation of the certificate, the challenge value included in the third certificate is the challenge value transmitted from the second electronic device 220 to the first electronic device 210 can be judged to be the same as

Also, according to an embodiment, the second electronic device 220 may use a unique identifier of the first electronic device 210 included in the third certificate in a secure memory of the second electronic device 220 (eg, the second electronic device 220 in FIG. 2 ). It may be determined whether the identifier is the same as the identifier stored in the secure memory 224 . According to an embodiment, an identifier of at least one electronic device as a trusted device may be stored in the secure memory of the second electronic device 220 .

According to an embodiment, the identifier stored in the secure memory of the second electronic device 220 may be stored in an operation of activating a security function of the second electronic device 220 . According to an embodiment, in an operation of activating the security function of the second electronic device 220, the second electronic device 220 uses an identifier included in a certificate chain received from the first electronic device 210 and verified for validity. may have been stored in secure memory. According to an embodiment, the second electronic device 220 includes an electronic device identifier included in the certificate chain received in the process of disabling the security function and an electronic device identifier included in the certificate chain received in the process of activating the security function. By determining whether is the same, it can be confirmed that the second electronic device 220 for which the current security function is to be deactivated is connected to the same electronic device as the first electronic device 210 that was connected when the security function was activated.

According to an embodiment, the second electronic device 220 checks the validity of the certificate chain, the identity of the challenge value, and the identity of the electronic device identifier, so that the second electronic device 220 currently intends to deactivate the security function. It can be confirmed that the user is the same user as the user of the second electronic device 220 at the time of activating the security function (substantially the same user as well as a user having legitimate authority even if not substantially the same).

Conversely, for example, when the second electronic device 220 belongs to a user without legitimate authority due to theft or loss while the security function of the second electronic device 220 is activated, the user without proper authority When attempting to deactivate the security function of the second electronic device 220, a certificate chain is received from another electronic device (not the first electronic device 210), and the second electronic device 220 enters the certificate chain. It may be determined that the included electronic device identifier is different from the electronic device identifier stored in the second electronic device 220 . Accordingly, the second electronic device 220 may determine that the received certificate chain is not valid and may determine that the user of the second electronic device 220 is a user without legitimate authority.

When the certificate chain received from the first electronic device 210 is verified to be valid in operation 605, the second electronic device 220 deactivates the security function and stores it in the secure memory of the second electronic device 220 in operation 606. You can delete an existing certificate chain. According to an embodiment, the owner of the second electronic device 220 voluntarily deactivates a security function of the second electronic device 220 before transferring the ownership of the second electronic device 220, so that the second electronic device 220 ) can be initialized, and a new rightful owner can set the security function of the second electronic device 220 in relation to his or her own electronic device.

In FIG. 6 according to an embodiment, the case where the security function inactivation and the request input are received while the security function of the second electronic device 220 is activated has been described, but the security function of the second electronic device 220 Even when a request input for disconnecting the second electronic device 220 from the first electronic device 210 is received in an activated state, the same process as in FIG. 6 may be operated. For example, when a request input for disconnecting the second electronic device 220 from the first electronic device 210 is received, the second electronic device 220 requests the first electronic device 210 for a certificate chain. The first electronic device 210 generates a certificate chain and transmits it to the second electronic device 220, and the second electronic device 220 verifies the validity of the certificate chain and only when the validity is verified 1 A connection with the electronic device 210 may be released.

In addition, according to an embodiment, in FIG. 6 , the case where the security function inactivation and the request input are received while the security function of the second electronic device 220 is activated has been described, but the security function of the second electronic device 220 has been described. Even when a request input for connecting the second electronic device 220 to the host device is received in the activated state, the same process as in FIG. 6 may be operated. For example, when a request input for connecting the second electronic device 220 to the host device is received, the second electronic device 220 requests a certificate chain from the host device, and the host device generates the certificate chain and 2 The second electronic device 220 verifies the validity of the certificate chain, and then compares the device identifier stored in the second electronic device 220 with the device identifier of the certificate chain to obtain the stored device identifier. If it is different from , connection with the host device may be disallowed. Alternatively, if the host device is a device that does not provide a certificate chain function, the second electronic device 220 does not receive a response to the certificate chain request, and thus may also disallow connection with the host device.

Hereinafter, with reference to FIG. 7 , operations of electronic devices when a device initialization request input is received in a state in which the security function of the second electronic device 220 is activated according to an embodiment of the present disclosure will be described. A description of the same configuration as the above-described embodiment may be omitted.

7 is a flowchart illustrating operations of electronic devices according to an exemplary embodiment.

Referring to FIG. 7 , in operation 701, the second electronic device 220 (eg, the second processor 225 of the second electronic device 220 of FIG. 2 ) initializes the device of the second electronic device 220 from the user. can receive input requesting According to an embodiment, device initialization may mean deleting all information stored in the device after shipment from the factory to initialize the software to the factory shipment state, and may also be referred to as factory reset, hard reset, or master reset.

In operation 702, the second electronic device 220 may request a certificate chain from the connected first electronic device 210. The second electronic device 220 may transmit the certificate chain request and challenge value together to the first electronic device 210 .

In operation 703, the first electronic device 210 (eg, the first processor 215 of the first electronic device 210 of FIG. 2 ) receives the certificate chain request from the second electronic device 220, and 2 A user interface (UI) for receiving a device initialization consent input of the electronic device 220 may be displayed on the display device of the first electronic device 210 .

In operation 704, the first electronic device 210 may generate a certificate chain upon receiving an input agreeing to device initialization of the second electronic device 220 through the UI. According to an embodiment, an operation of forming a certificate chain by the first electronic device 210 may be the same as that described above with reference to FIGS. 3 and 4 . According to an embodiment, the first electronic device 210 generates an application certificate (third certificate) and an application key (third authentication key), and converts the application certificate to a unique authentication key (second authentication key) stored in a secure memory. By signing, a certificate chain including a root certificate (first certificate), a unique authentication key certificate (second certificate), and an application certificate (third certificate) can be formed. According to an embodiment, the application certificate (third certificate) may include a challenge value received from the second electronic device 220 and a unique identifier of the first electronic device 210 .

In operation 705 , the first electronic device 210 may deliver the generated certificate chain to the second electronic device 220 .

In operation 706, the second electronic device 220 may verify the validity of the received certificate chain. According to an embodiment, the verification of the validity of the certificate chain by the second electronic device 220 may be the same as that described with reference to FIGS. 3 and 4 . According to an embodiment, the second electronic device 220 may verify the validity of the second certificate with the public key included in the first certificate, and verify the validity of the third certificate with the public key included in the second certificate.

According to an embodiment, after the second electronic device 220 completes validation of the certificate, the challenge value included in the third certificate is the challenge value transmitted from the second electronic device 220 to the first electronic device 210 can be judged to be the same as

Also, according to an embodiment, the second electronic device 220 may use a unique identifier of the first electronic device 210 included in the third certificate in a secure memory of the second electronic device 220 (eg, the second electronic device 220 in FIG. 2 ). It may be determined whether the identifier is the same as the identifier stored in the secure memory 224 . According to an embodiment, an identifier of at least one electronic device as a trusted device may be stored in the secure memory of the second electronic device 220 .

According to an embodiment, the identifier stored in the secure memory of the second electronic device 220 may be stored in an operation of activating a security function of the second electronic device 220 . According to an embodiment, in an operation of activating the security function of the second electronic device 220, the second electronic device 220 uses an identifier included in a certificate chain received from the first electronic device 210 and verified for validity. may have been stored in secure memory. According to an embodiment, the identifier of the electronic device included in the certificate chain received in the process of device initialization of the second electronic device 220 and the identifier of the electronic device included in the certificate chain received in the process of activating the security function. By determining whether is the same, it can be confirmed that the second electronic device 220 for which device initialization is currently being performed is connected to the same electronic device as the first electronic device 210 that was connected when the security function was activated.

According to an embodiment, the second electronic device 220 checks the validity of the certificate chain, the identity of the challenge value, and the identity of the electronic device identifier, and thus the second electronic device 220 currently wants to perform device initialization of the second electronic device 220. It can be confirmed that the user of the electronic device 220 is the same user as the user of the second electronic device 220 at the time of activating the security function (substantially the same user as well as a user having legitimate authority even if not substantially the same).

Conversely, for example, when the security function of the second electronic device 220 is activated and the second electronic device 220 belongs to a user without legitimate authority, such as theft or loss, the user without proper authority When the device initialization of the second electronic device 220 is attempted, a certificate chain is received from another electronic device (not the first electronic device 210), and the second electronic device 220 receives a certificate chain included in the certificate chain. It may be determined that the electronic device identifier is different from the electronic device identifier stored in the second electronic device 220 . Accordingly, the second electronic device 220 may determine that the received certificate chain is not valid, determine that the current user of the second electronic device 220 is a user without proper authority, and may not perform device initialization.

When the certificate chain received from the first electronic device 210 is verified to be valid in operation 706 , the second electronic device 220 may proceed with device initialization of the second electronic device 220 in operation 707 .

According to an embodiment, the owner of the second electronic device 220 may perform device initialization of the second electronic device 220 according to the process of FIG. 7 before transferring ownership of the second electronic device 220 voluntarily. .

Conversely, when an unauthorized owner of the second electronic device 220 initializes the device, and the connection with the first electronic device 210 registered in the second electronic device 220 is disconnected, the certificate chain may be obtained. Since there is no certificate verification procedure, it is possible to prevent the initialization function from being normally executed, and even in an abnormal case in which a certificate is transmitted from a device other than the registered first electronic device 210, the second electronic device 220 receives the certificate. Since it is possible to determine that the certificate is not valid through a verification process, the device initialization command may not be performed when it is determined that the certificate is not valid.

Hereinafter, an operation of the first electronic device (eg, the first electronic device 210 of FIG. 2 ) according to an embodiment of the present disclosure will be described with reference to FIG. 8 . A description of the same configuration as the above-described embodiment may be omitted.

8 is a flowchart illustrating an operation of a first electronic device according to an embodiment. The operation of FIG. 8 may be performed by a first processor (eg, the first processor 215 of FIG. 2 ) of the first electronic device.

Referring to FIG. 8 , the first electronic device or the second electronic device (eg, the second electronic device 220 of FIG. 2 ) may receive an input requesting activation of the security function from the user, and may activate the security function. Upon identifying the input requesting, the second processor of the second electronic device (eg, the second processor 225 of FIG. 2 ) may transmit a certificate chain request to the first processor of the first electronic device.

According to an embodiment, in operation 801, the first processor of the first electronic device may receive a certificate chain request from the second electronic device. The first processor of the first electronic device may receive a certificate chain request (eg, a request message) and a challenge value together.

According to an embodiment, in operation 803, the first processor of the first electronic device may generate a certificate chain upon receiving a certificate chain request from the second electronic device. A method of forming the indexer chain by the first electronic device may be the same as that previously described with reference to FIG. 4 , and a description thereof will be omitted.

In operation 805, the first processor of the first electronic device may transmit the generated certificate chain to the second electronic device.

Hereinafter, an operation of the second electronic device (eg, the second electronic device 220 of FIG. 2 ) according to an embodiment of the present disclosure will be described with reference to FIG. 9 . A description of the same configuration as the above-described embodiment may be omitted.

9 is a flowchart illustrating an operation of a second electronic device according to an embodiment. The operation of FIG. 9 may be performed by a second processor (eg, the second processor 225 of FIG. 2 ) of the second electronic device.

Referring to FIG. 9 , in operation 901, the second processor of the second electronic device may receive a user input requesting activation of a security function. The second processor of the second electronic device may directly receive a user input requesting activation of the security function through the second electronic device or may receive it through the first electronic device.

According to an embodiment, in operation 903, the second processor of the second electronic device may transmit a certificate chain request to the first processor of the first electronic device according to identifying an input requesting activation of a security function. The second processor of the second electronic device may transmit a certificate chain request (eg, a request message) and a challenge value together.

According to an embodiment, in operation 905, the second processor of the second electronic device may determine whether a certificate chain has been received. The second processor of the second electronic device may terminate the process upon determining that the certificate chain is not received. Upon determining that the certificate chain has been received, the second processor of the second electronic device may move to operation 907 .

According to an embodiment, in operation 907, the second processor of the second electronic device may verify validity of the received certificate chain. According to an embodiment, a method for the second processor of the second electronic device to verify the validity of the certificate chain may be the same as that described above with reference to FIG. 3 , and a description thereof will be omitted.

According to an embodiment, when the second processor of the second electronic device determines that the certificate chain is valid, in operation 909, the second processor of the second electronic device trusts the certificate chain and the unique identifier of the first electronic device. The device may store the information in a secure memory (eg, the second secure memory 224 of FIG. 2 ) and activate the security function of the second electronic device.

According to an embodiment, when the second processor of the second electronic device determines that the certificate chain is invalid, in operation 911, the second processor of the second electronic device discards the certificate chain and deactivates the security function of the second electronic device. state can be maintained.

A wearable device according to an embodiment of the present disclosure stores a certificate chain and a unique identifier of a host device while activating a security function, device initialization of the wearable device, disconnection from the host device, and/or security function of the wearable device. When there is a request for deactivation, a verification step in terms of whether the user requesting the request is the rightful owner of the second electronic device 220 and whether the security function is connected to the same host device as the host device that went through the verification process at the time of activation. , it is possible to prevent unauthorized use of the wearable device and maintain security of the wearable device in situations such as theft.

When a certificate chain request is received from a wearable device according to a user's request for activation/deactivation of a security function, device connection/device disconnection, and device initialization, the host device according to an embodiment of the present disclosure performs manufacturing of the host device. A security function may be provided to the wearable device by generating a certificate chain using a unique authentication key and a unique authentication key certificate stored in the host device from time to time and providing the certificate chain to the wearable device.

A wearable device and a host device according to an embodiment of the present disclosure, even if the wearable device is a device that does not support a network communication function and a UICC or a device that does not support an account authentication method, establishes a certificate chain only through communication between the wearable device and the host device. When an operation requiring a high security level is requested by going through a verification process, a security function for determining whether the requested operation is valid may be provided. As a result, even if the wearable device is lost, it is possible to prevent others from intentionally initializing the device, and there is an effect of preventing disconnection of the connection state and unauthorized use of connection with other host devices.

A first electronic device according to an embodiment disclosed herein includes a wireless communication circuit for communication with a second electronic device, a processor operatively connected to the wireless communication circuit, and a memory operatively connected to the processor. and the memory, when executed, when the processor receives a user input requesting activation of a security function through the first electronic device or the second electronic device, the second electronic device via the wireless communication circuit. When a certificate chain request including a challenge value is received from an electronic device, and there is a user request for an operation requesting security for the second electronic device, the security function determines the second electronic device. It is a function that causes a device to perform a verification process of the certificate chain, and forms the certificate chain including the challenge value and a unique identifier (unique ID) of the first electronic device to obtain the second electronic device through the wireless communication circuit. It may store instructions to be transmitted to the electronic device.

According to an embodiment disclosed in this document, the memory includes a first secure memory, and the first secure memory includes a second authentication key that is a unique authentication key of the first electronic device and the first secure memory. A second certificate that is a pair certificate of two authentication keys may be stored.

According to an embodiment disclosed in this document, the second certificate may be signed with a first authentication key that is a root key during the manufacturing process of the first electronic device and stored in the first secure memory.

According to an embodiment disclosed in this document, the memory, upon execution, upon receiving the certificate chain request, forms a third authentication key and a third certificate that is a pair certificate of the third authentication key, It may store instructions for including the challenge value and the unique identifier of the first electronic device in a third certificate and signing the third certificate with the second authentication key to form the certificate chain.

According to an embodiment disclosed in this document, the operation of requesting security may include at least one of activating the security function, deactivating the security function, connecting to a host device, disconnecting from a host device, and initializing software. can include

According to an embodiment disclosed in this document, the certificate chain includes a first certificate that is a pair certificate of the first authentication key, a first public key of the first certificate, the second certificate, and the first certificate. It may include a second public key of 2 certificates, and the third certificate.

According to an embodiment disclosed in this document, in the verification process of the certificate chain, the validity of the second certificate is verified with the first public key, and the validity of the third certificate is verified with the second public key. A verification process may be included.

A second electronic device according to an embodiment disclosed in this document includes a wireless communication circuit for communication with a first electronic device, a processor operatively connected to the wireless communication circuit, and a memory operatively connected to the processor. and, when the memory is executed, when the processor receives a user input requesting activation of a security function through the first electronic device or the second electronic device, the memory provides a challenge value to the first electronic device. (challenge value) is transmitted, the validity of the certificate chain received from the first electronic device is verified, and as the validity of the certificate chain is verified, the certificate chain and the A unique identifier of the first electronic device included in the certificate chain may be stored in a second secure memory of the memory, and instructions for activating the security function may be stored.

According to an embodiment disclosed in this document, the certificate chain includes a second certificate signed with a first authentication key that is a root key in the manufacturing process of the first electronic device, and a pair certificate of the first authentication key. and a third certificate signed with a second authentication key that is a pair authentication key of the second certificate and a unique authentication key of the first electronic device.

According to an embodiment disclosed in this document, the certificate chain may include a first public key of the first certificate and a second public key of the second certificate.

According to an embodiment disclosed in this document, the memory, upon execution, verifies the validity of the second certificate with the first public key, and verifies the validity of the certificate chain with the second public key, in order to verify the validity of the certificate chain. Instructions for verifying the validity of the third certificate may be stored.

According to an embodiment disclosed in this document, the third certificate may include the challenge value and the unique identifier of the first electronic device.

According to an embodiment disclosed in this document, the memory stores the challenge value included in the third certificate and the challenge value included in the certificate chain request in order to verify the validity of the certificate chain upon execution. It is possible to store instructions for determining whether these are the same.

According to an embodiment disclosed in this document, the memory, upon execution, transmits a certificate chain request to a host device when there is a user request for an operation requiring security while the security function is activated. Instructions can be stored.

According to an embodiment disclosed in this document, in order to verify the validity of the certificate chain received from the host device during execution, the memory uses a public key included in a certificate chain received from the host device. It can store instructions to verify the validity of the certificate included in the certificate chain received from .

According to an embodiment disclosed in this document, the memory stores a challenge value included in a certificate chain received from the host device and the host device in order to verify the validity of the certificate chain received from the host device when executed. It may store instructions for determining whether the challenge values included in the certificate chain request to the device are the same.

According to an embodiment disclosed in this document, the memory stores an electronic device identifier included in a certificate chain received from the host device and the electronic device identifier included in the certificate chain received from the host device in order to verify the validity of the certificate chain received from the host device during execution. Instructions for determining whether the unique identifiers of the first electronic device stored in the second secure memory are the same may be stored.

According to an embodiment disclosed in this document, when the memory determines that the identifier of the electronic device and the unique identifier of the first electronic device are identical, the certificate chain received from the host device is It is possible to store instructions that are determined to be valid.

According to an embodiment disclosed in this document, the memory may store instructions that, when executed, perform an operation requiring the security when it is determined that the certificate chain received from the host device is valid.

According to an embodiment disclosed in this document, the operation of requesting security may include activation of the security function, deactivation of the security function, connection to the host device, disconnection from the host device, and the second It may include at least one of software initialization of the electronic device.

Claims (20)

In the first electronic device,
a wireless communication circuit for communicating with the second electronic device;
a processor operatively connected with the wireless communications circuitry; and
a memory operatively coupled with the processor;
The memory, when executed, causes the processor to:
A certificate chain including a challenge value from the second electronic device through the wireless communication circuit when a user input requesting activation of a security function is received through the first electronic device or the second electronic device (certificate chain) request, and the security function is a function of allowing the second electronic device to perform a verification process of the certificate chain when there is a user request for an operation requesting security for the second electronic device. ,
A first electronic device that stores instructions for forming the certificate chain including the challenge value and a unique identifier (unique ID) of the first electronic device and transmitting the certificate chain to the second electronic device through the wireless communication circuit. . The method of claim 1,
The memory includes a first secure memory, and the first secure memory includes a second authentication key that is a unique authentication key of the first electronic device and a pair certificate of the second authentication key. 2 A first electronic device in which a certificate is stored. The method of claim 2,
The second certificate is signed with a first authentication key that is a root key during the manufacturing process of the first electronic device and stored in the first secure memory. The method according to claim 3, wherein the memory, at the time of execution,
Upon receiving the certificate chain request, forming a third authentication key and a third certificate that is a pair certificate of the third authentication key;
Include the challenge value and the unique identifier of the first electronic device in the third certificate;
and storing instructions for forming the certificate chain by signing the third certificate with the second authentication key. The method of claim 4,
The operation for requesting security includes at least one of activating the security function, deactivating the security function, connecting to a host device, disconnecting from a host device, and initializing software. The method of claim 4,
The certificate chain includes a first certificate that is a pair certificate of the first authentication key, a first public key of the first certificate, the second certificate, a second public key of the second certificate, and the second certificate. 3 A first electronic device including certificates. The method of claim 6,
The verification process of the certificate chain includes verifying validity of the second certificate with the first public key and verifying validity of the third certificate with the second public key. . In the second electronic device,
a wireless communication circuit for communicating with the first electronic device;
a processor operatively connected with the wireless communications circuitry; and
a memory operatively coupled with the processor;
The memory, when executed, causes the processor to:
Upon receiving a user input requesting activation of a security function through the first electronic device or the second electronic device, requesting a certificate chain including a challenge value from the first electronic device transmit,
verifying the validity of the certificate chain received from the first electronic device;
As the validity of the certificate chain is verified, instructions for storing the certificate chain and the unique identifier of the first electronic device included in the certificate chain in a second secure memory of the memory and activating the security function To store, the second electronic device. The method of claim 8,
The certificate chain is
A second certificate signed with a first authentication key that is a root key in the manufacturing process of the first electronic device, a first certificate that is a pair certificate of the first authentication key, and a pair authentication key of the second certificate A second electronic device comprising a third certificate signed with a second authentication key that is a unique authentication key of the first electronic device. The method of claim 9,
The certificate chain includes a first public key of the first certificate and a second public key of the second certificate. The method according to claim 10, wherein the memory, at the time of execution,
The second electronic device stores instructions for verifying validity of the second certificate with the first public key and verifying validity of the third certificate with the second public key, in order to verify validity of the certificate chain. The method of claim 9,
The third certificate includes the challenge value and the unique identifier of the first electronic device. The method according to claim 12, wherein the memory, at the time of execution,
and storing instructions for determining whether the challenge value included in the third certificate and the challenge value included in the certificate chain request are the same in order to verify validity of the certificate chain. The method according to claim 1, wherein the memory, at the time of execution,
A second electronic device configured to store instructions for transmitting a certificate chain request to a host device when there is a user request for an operation requiring security while the security function is activated. The method according to claim 14, wherein the memory, at the time of execution,
In order to verify the validity of the certificate chain received from the host device, storing instructions for verifying the validity of the certificate included in the certificate chain received from the host device with a public key included in the certificate chain received from the host device , the second electronic device. The method of claim 15, wherein the memory, at the time of execution,
Instructions for determining whether a challenge value included in the certificate chain received from the host device and a challenge value included in the certificate chain request to the host device are the same in order to verify the validity of the certificate chain received from the host device A second electronic device that stores them. The method according to claim 16, wherein the memory, at the time of execution,
To verify the validity of the certificate chain received from the host device, whether the electronic device identifier included in the certificate chain received from the host device is the same as the unique identifier of the first electronic device stored in the second secure memory. A second electronic device that stores instructions for making a decision. The method of claim 17, wherein the memory, at the time of execution,
and storing instructions for determining that the certificate chain received from the host device is valid when it is determined that the identifier of the electronic device and the unique identifier of the first electronic device are identical. The method of claim 18, wherein the memory, at the time of execution,
A second electronic device that stores instructions for performing an operation requiring the security when it is determined that the certificate chain received from the host device is valid. The method of claim 14,
The operation of requesting security includes at least one of activating the security function, deactivating the security function, connecting to the host device, disconnecting from the host device, and initializing software of the second electronic device. , the second electronic device.

Images