WO2022055162A1

WO2022055162A1 - Electronic device and control method thereof

Info

Publication number: WO2022055162A1
Application number: PCT/KR2021/011506
Authority: WO
Inventors: 이성규; 이남권; 정동화; 박현철; 제의진
Original assignee: 삼성전자주식회사
Priority date: 2020-09-11
Filing date: 2021-08-27
Publication date: 2022-03-17
Also published as: KR20220034483A

Abstract

An electronic device and a control method thereof are disclosed. An electronic device of the present disclosure may comprise: an operating system; a memory including a plurality of virtualization spaces which share a resource of a kernel on the operating system and each of which is assigned a unique public key; and a processor for verifying a signature value included in a file executed in at least one virtualization space among the plurality of virtualization spaces, wherein when the kernel detects the execution of a first file in a first virtualization space to which a first public key is assigned among the plurality of virtualization spaces, the processor decodes a signature value included in the executed first file by using the first public key, and compares the decoded signature value with a hash value corresponding to the first file to verify the signature value of the first file.

Description

Electronic device and control method thereof

The present disclosure relates to an electronic device and a method for controlling the same, and more particularly, to an electronic device for verifying a signature value of a file using a virtualization environment, and a method for controlling the same.

CROSS REFERENCE TO RELATED APPLICATIONS

This application claims priority based on Korean Patent Application No. 10-2020-0116907 filed on September 11, 2020, and all contents of the application are incorporated herein by reference in their entirety.

With the development of information and communication technologies, users are able to exchange data more freely. In addition, as electronic commerce or financial transaction services provided to users using advanced information and communication technologies have been expanded, the importance of data security has emerged.

Conventionally, a technology for preventing data tampering by performing a digital signature on data exchanged between individuals or companies has been developed. However, in the case of the existing technology, there are disadvantages in that the system is less flexible in that there is a constraint to force a digital signature on data, and it is difficult to manage a public key or a private key.

In addition, in the case of the existing technology, there is a limitation that an additional resource is required for an operation generated in the digital signature verification process through a hash comparison with the capacity of a file generated by a digital signature.

The present disclosure has been made in response to the above-mentioned necessity, and an object of the present disclosure is to provide an electronic device for verifying a signature value of a file by allocating a separate public key or security level for each virtualization space and a control method thereof.

In one embodiment of the present disclosure for achieving the above object, an electronic device shares a resource of an operating system and a kernel on the operating system and includes a plurality of virtualization spaces to which unique public keys are allocated, respectively, and a plurality of virtualizations. A processor for verifying a signature value included in a file executed in at least one virtual space among the spaces, wherein the processor executes the first file in a first virtual space to which a first public key is allocated among a plurality of virtual spaces. is detected, the signature value included in the executed first file is decrypted using the first public key, and the signature value of the first file is verified by comparing the decrypted signature value with the hash value corresponding to the first file. can

When the kernel detects that the second file is executed in a space other than the plurality of virtualized spaces, the processor decrypts the signature value included in the second file using the second public key allocated on the operating system, and the second public key The signature value of the second file may be verified by comparing the signature value decrypted using the key with a hash value corresponding to the second file, and the second public key and the first public key may be different from each other.

When the decrypted signature value and the hash value corresponding to the first file do not match or the signature value is not included in the first file, the processor may stop the execution of the first file.

The electronic device may further include a communication unit including a circuit, the processor receives the third file from the external server through the communication unit, and the kernel performs the third file on a third virtual space corresponding to the external server among the plurality of virtual spaces. When it detects that this is being executed, the signature value included in the third file is decrypted using the third public key included in the third virtual space, and the decrypted signature value is compared with the hash value corresponding to the third file. 3 You can verify the signature value of the file.

A security level is allocated to each of the plurality of virtualization spaces, and when the kernel detects that the fourth file is executed in the fourth virtualization space to which the first security level is allocated among the plurality of virtualization spaces, the security level allocated to the file and By comparing the first security level, it is possible to determine whether to stop the execution of the fourth file.

If the security level assigned to the fourth file is less than the first security level or the fourth file is not assigned a security level, the processor determines to stop execution of the fourth file, and the security level assigned to the fourth file is If the first security level or higher, it may be determined to execute the fourth file.

When the kernel detects the execution of the fifth file in a space other than the plurality of virtualized spaces, the processor compares the security level of the fifth file with the second security level allocated on the operating system to stop the execution of the fifth file may be determined, and the second security level may be different from the first security level.

When the kernel detects the execution of the sixth file in the sixth virtual space to which the first security level is allocated and the third public key is allocated among the plurality of virtualization spaces, the processor decrypts the signature value of the file using the third public key and whether to stop the execution of the sixth file based on the decrypted signature value and the security level assigned to the sixth file.

The electronic device may further include a communication unit, and the processor changes the public key allocated to the first virtual space according to a user command, and transmits the private key corresponding to the changed public key to an external server corresponding to the first virtual space You can control the communication unit to do so.

On the other hand, as an embodiment of the present disclosure for achieving the above object, an electronic device including an operating system and a memory including a plurality of virtualization spaces that share resources of a kernel on the operating system and have unique public keys allocated to each. When the kernel detects the execution of the first file in the first virtual space to which the first public key is allocated among a plurality of virtual spaces, the signature value included in the first file executed using the first public key is and verifying the signature value of the first file by comparing the decrypted signature value with a hash value corresponding to the first file.

The control method includes the steps of, when the kernel detects that the second file is executed in a space other than the plurality of virtualized spaces, decrypting the signature value included in the second file using the second public key allocated on the operating system; The method may further include verifying the signature value of the second file by comparing the decrypted signature value using the public key with a hash value corresponding to the second file, wherein the second public key and the first public key are mutually may be different.

The verifying may further include stopping execution of the first file when the decrypted signature value and the hash value corresponding to the first file do not match or the signature value is not included in the first file. .

The control method includes receiving a third file from an external server, and when the kernel detects that the third file is executed in a third virtual space corresponding to the external server among a plurality of virtual spaces, the third file included in the third virtual space The method may further include decrypting the signature value included in the third file using a public key and verifying the signature value of the third file by comparing the decrypted signature value with a hash value corresponding to the third file. there is.

A security level is assigned to each of the plurality of virtualization spaces, and the control method is when the kernel detects that the fourth file is executed in the fourth virtualized space to which the first security level is allocated among the plurality of virtualization spaces, the security level assigned to the file The method may further include determining whether to stop the execution of the fourth file by comparing the first security level with the first security level.

In the determining step, when the security level assigned to the fourth file is less than the first security level or the fourth file is not assigned a security level, it is determined to stop the execution of the fourth file, and assigned to the fourth file The method may further include determining that the fourth file is executed when the security level is higher than or equal to the first security level.

In the determining step, when the kernel detects the execution of the fifth file in a space other than the plurality of virtualized spaces, the execution of the fifth file is performed by comparing the security level of the fifth file with the second security level allocated to the operating system. determining whether to suspend, wherein the second security level may be different from the first security level.

In the determining step, when the kernel detects the execution of the sixth file in the sixth virtual space to which the first security level is allocated and the third public key is allocated among the plurality of virtualization spaces, the signature value of the file is set to the third public key. The method may further include the step of decrypting using the decryption method and determining whether to stop the execution of the sixth file based on the decrypted signature value and the security level assigned to the sixth file.

The control method may further include changing the public key allocated to the first virtual space according to a user command, and transmitting the private key corresponding to the changed public key to an external server corresponding to the first virtual space. .

As described above, according to various embodiments of the present disclosure, the electronic device can efficiently respond to system maintenance and security problems by verifying the description of the file using the virtualized space, and can make a closed system due to signature check flexible system can be improved.

1 is a view for explaining a process in which an electronic device performs signature verification using a virtual space, according to an embodiment of the present disclosure;

2 is a view for explaining a process of an electronic device verifying a signature using a virtual space, according to an embodiment of the present disclosure;

3A is a block diagram schematically illustrating a configuration of an electronic device according to an embodiment of the present disclosure;

3B is a block diagram illustrating in detail the configuration of an electronic device according to an embodiment of the present disclosure;

4 is a sequence diagram illustrating an operation between an electronic device and an external server according to an embodiment of the present disclosure;

5 is a flowchart illustrating a method of controlling an electronic device according to an embodiment of the present disclosure.

Since the present embodiments can apply various transformations and can have various embodiments, specific embodiments are illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the scope of the specific embodiments, and should be understood to include various modifications, equivalents, and/or alternatives of the embodiments of the present disclosure. In connection with the description of the drawings, like reference numerals may be used for like components.

In addition, the following examples may be modified in various other forms, and the scope of the technical spirit of the present disclosure is not limited to the following examples. Rather, these embodiments are provided to more fully and complete the present disclosure, and to fully convey the technical spirit of the present disclosure to those skilled in the art.

The terms used in the present disclosure are used only to describe specific embodiments, and are not intended to limit the scope of rights. The singular expression includes the plural expression unless the context clearly dictates otherwise.

In the present disclosure, expressions such as “have,” “may have,” “include,” or “may include” indicate the presence of a corresponding characteristic (eg, a numerical value, function, operation, or component such as a part). and does not exclude the presence of additional features.

In this disclosure, expressions such as "A or B," "at least one of A and/and B," or "one or more of A or/and B" may include all possible combinations of the items listed together. . For example, "A or B," "at least one of A and B," or "at least one of A or B" means (1) includes at least one A, (2) includes at least one B; Or (3) it may refer to all cases including both at least one A and at least one B.

An electronic device according to various embodiments of the present disclosure may be, for example, a smartphone, a tablet PC, a mobile phone, a video phone, an e-book reader, a desktop PC, a laptop PC, a netbook computer, a server, a medical device, a camera, or It may include at least one of wearable devices. In some embodiments, the electronic device is, for example, a television, digital video disk (DVD) player, audio, refrigerator, air conditioner, vacuum cleaner, oven, microwave oven, washing machine, air purifier, set top box, home automation control. It may include at least one of a panel, a security control panel, a media box (eg, Samsung HomeSyncTM, Apple TVTM, or Google TVTM), and a game console (eg, XboxTM, PlayStationTM).

As used in the present disclosure, expressions such as “first,” “second,” “first,” or “second,” may modify various elements, regardless of order and/or importance, and refer to one element. It is used only to distinguish it from other components, and does not limit the components.

A component (eg, a first component) is "coupled with/to (operatively or communicatively)" to another component (eg, a second component); When referring to "connected to", it will be understood that the certain element may be directly connected to the other element or may be connected through another element (eg, a third element). On the other hand, when it is said that a component (eg, a first component) is "directly connected" or "directly connected" to another component (eg, a second component), the component and the It may be understood that other components (eg, a third component) do not exist between other components.

The expression “configured to (or configured to)” as used in this disclosure, depending on the context, for example, “suitable for,” “having the capacity to” ," "designed to," "adapted to," "made to," or "capable of." The term “configured (or configured to)” may not necessarily mean only “specifically designed to” in hardware.

Instead, in some circumstances, the expression “a device configured to” may mean that the device is “capable of” with other devices or parts. For example, the phrase "a processor configured (or configured to perform) A, B, and C" refers to a dedicated processor (eg, an embedded processor) for performing the corresponding operations, or by executing one or more software programs stored in a memory device. , may mean a generic-purpose processor (eg, a CPU or an application processor) capable of performing corresponding operations.

In an embodiment, a 'module' or 'unit' performs at least one function or operation, and may be implemented as hardware or software, or a combination of hardware and software. In addition, a plurality of 'modules' or a plurality of 'units' are integrated into at least one module and implemented with at least one processor (not shown) except for 'modules' or 'units' that need to be implemented with specific hardware. can be

Hereinafter, with reference to the accompanying drawings, an embodiment of the present disclosure will be described in detail so that those of ordinary skill in the art to which the present disclosure pertains can easily implement it.

FIG. 1 is a diagram for explaining a process in which an electronic device 100 verifies a signature value of a file using a virtualization space, according to an embodiment of the present disclosure.

The electronic device 100 may include an operating system (OS) 10 that controls hardware on the electronic device 100 and provides a base environment for executing application software. The operating system 10 may serve as an interface between hardware of the electronic device and application software.

The operating system 10 may include a process constituting the operating system and a kernel that allocates resources to programs executed under the control of the operating system. The kernel may allocate resources of the electronic device by connecting and managing interactions between physical components included in the electronic device 100 and individual middleware of the operating system 10 . In addition, the kernel may detect that each application or file is executed.

The plurality of virtualization spaces 20 - 1 and 20 - 2 refer to virtualization spaces in which resources of a kernel of the operating system 10 are shared and a separate application can be executed. For example, the virtualized space may be implemented as a container.

The operating system 10 virtualization technology using a container divides the inside of the operating system into a kernel space that manages physical resources and a user space that executes user processes, that is, applications (APPs, applications), and divides the user space into several parts, each It refers to a technology for allocating and sharing hardware resources used in user processes of

That is, the virtualization technology using a container is an OS virtualization method that does not use a guest OS, and consumes little host resources and takes very little time to start up, so it may be suitable for application virtualization. In addition, virtualization technology using containers enables independent configuration and distribution of system infrastructure (existing physical servers (bare metal), virtual machines (virtual machines), etc.) by virtualizing at the OS level.

As shown in FIG. 1 , the first virtualization space 20-1 and the second virtualization space 20-2 share the resources of the kernel on the operating system 10, but are for executing separate applications and each application. It may include a library (library), middleware (middleware), and the like. Meanwhile, although FIG. 1 shows that the operating system 10 is virtualized with two virtualization spaces, this is only an example and may be virtualized into a variety of virtualization spaces.

In addition, a public key or a secure level used for decrypting a signature value may be allocated to each of the virtualization spaces 20 - 1 and 20 - 2 . A public key is a key used for file encryption in a public key encryption method (or an asymmetric key encryption method), and has an inverse relationship with a private key in a function used in encryption. An embodiment related to the security level will be described in detail with reference to FIG. 2 .

For example, a public key A may be allocated on the operating system 10, and public keys B and C different from the public key A may be allocated on the first virtual space 20-1 and the second virtual space, respectively. there is.

When the kernel detects execution of the first file in the first virtual space 20-1, the electronic device 100 writes the first file to the first file using the first public key allocated to the first virtual space 20-1. The included signature value may be decrypted, and the signature value of the first file may be verified by comparing the decrypted signature value with a hash value corresponding to the first file. The hash value corresponding to the first file means a hash value extracted from the first file.

For example, it is assumed that the first file 30-1 includes a signature value obtained by encrypting the hash value with the private key A. In this case, the signature value may be included at the end of the first file 30 - 1 , but this is only an example and may be included in the front part or the middle part.

When the kernel detects that the first file 30-1 is executed in the first virtual space 20-1, the electronic device 100 discloses the signature value included in the first file 30-1 to B. After decryption with the key, the signature value of the first file 30-1 may be verified by comparing the decrypted signature value with a hash value corresponding to the first file 30-1.

Since the first file 30-1 contains the signature value obtained by encrypting the hash value with the private key A, when the signature value is decrypted using the public key B, the hash value corresponding to the first file 30-1 This is not output. Accordingly, the electronic device 100 may identify that an incorrect signature value is included in the first file 30 - 1 and block execution of the first file 30 - 1 .

As another example, it is assumed that the hash value includes a signature value obtained by encryption with the private key B in the first file 30 - 2 . When the kernel detects that the first file 30-2 is executed in the first virtual space 20-1, the electronic device 100 sets the signature value included in the first file 30-2 as B. After decryption with the public key, the signature value of the first file 30 - 2 may be verified by comparing the decrypted signature value with a hash value corresponding to the first file 30 - 2 .

Since the first file 30-2 includes a signature value obtained by encrypting the hash value with the private key B, when decrypted using the public key B, a hash value corresponding to the first file 30-2 is output. . Accordingly, the electronic device 100 identifies that the first file 30-2 includes a signature value encrypted with the private key corresponding to the public key allocated to the first virtual space 20-1, and the first Execution of file 30-1 may be maintained.

As another example, when the kernel detects that a file is being executed in the second virtual space 20 - 2 , the electronic device 100 performs execution using the C public key allocated to the second virtual space 20 - 2 . You can verify the signature value of the detected file.

It is assumed that the second file 40-1 does not include a signature value. When the signature value is not included in the second file 40-1, the signature value cannot be decrypted using the C public key. The electronic device 100 may block execution of the second file 40 - 1 that does not include a signature value.

As another example, it is assumed that a signature value obtained by encrypting a hash value with a C private key is included in the second file 40-2. When the kernel detects that the second file 40-2 is executed in the second virtual space 20-2, the electronic device 100 discloses the signature value included in the second file 40-2 to C. After decryption with the key, the signature value of the second file 40-2 may be verified by comparing the decrypted signature value with a hash value corresponding to the second file 40-2.

At this time, since the second file 40-2 includes the signature value obtained by encrypting the hash value with the C private key, decrypting the signature value using the C public key corresponds to the second file 40-2. The resulting hash value is output. Accordingly, the electronic device 100 identifies that the second file 40-2 includes a signature value encrypted with the private key corresponding to the public key allocated to the second virtual space 20-2, and the second Execution of file 40-2 may be maintained.

As another example, when the kernel detects that a file is executed in a space other than the plurality of virtualized spaces 20 - 1 and 20 - 2 , the electronic device 100 uses the second public key allocated to the operating system 10 . can be used to decrypt the signature value included in the second file. The electronic device 100 may verify the signature value of the second file by comparing the decrypted signature value using the second public key with the hash value corresponding to the second file. In this case, the hash value corresponding to the second file means a hash value extracted from the second file.

For example, as shown in FIG. 1 , the A public key may be assigned to the operating system 10 . When the kernel detects that a file (50-2) that does not contain a signature value or a file (50-3) containing a signature value obtained by encrypting the hash with the private key B is executed in a space other than the virtualized space, the electronic The device 100 may identify that the signature of each of the files 50 - 2 and 50 - 3 is not intact through the verification process. Accordingly, the electronic device 100 may stop the execution of each of the files 50 - 2 and 50 - 3 .

On the other hand, when the kernel detects that the file 50-1 including the signature value obtained by encrypting the hash value with the private key A in a space other than the plurality of virtualization spaces 20-1 and 20-2 is executed, the electronic The device 100 may decrypt the signature value of the file 50 - 1 with the public key A to perform verification on the signature value. Since the signature value decrypted using the public key A matches the hash value of the file 50 - 1 , the electronic device 100 may maintain the execution of the file 50 - 1 .

Since a different public key is allocated to each virtual space 20-1, 20-2 or a space other than the virtual space, even if a specific private key is leaked, only the public key corresponding to the leaked private key can be changed to respond. In addition, since the verification process for the signature value of the file is performed only in the virtual space to which a specific public key is allocated, resources required for the verification process on the electronic device 100 can be reduced.

In addition, since a public key may not be allocated on a specific virtual space, signing of the entire file may not be forced. Therefore, according to the embodiment according to the present disclosure, it is possible to flexibly improve a closed system that occurs due to the integrity verification of the signature.

FIG. 2 is a diagram for explaining a process in which the electronic device 100 performs signature verification using a virtual space to which a security level is assigned, according to an embodiment of the present disclosure.

A security level may be assigned to each of the plurality of virtualization spaces 20 - 1 and 20 - 2 sharing kernel resources on the operating system 10 . The security level quantifies or categorizes the degree of trust in a specific file based on at least one of the importance of the file, the area in which the file is executed, or the degree of impact to be generated according to the execution of the file. The higher the security level of a file, the more trustworthy it is.

For example, as shown in FIG. 2 , security level 7 is allocated to the operating system 10 , and security level 5 and security level 5 and Security level 3 may be assigned. Since the operating system 10 has a greater effect on the entire process of the electronic device 100 than the other virtualized spaces 20-1 and 20-2, it is higher than the security level assigned to the other virtualized spaces 20-1 and 20-2. A higher security level may be assigned.

Meanwhile, although it is illustrated that the security level is assigned to the signature value of each file in FIG. 2 , this is only an example. The security level may be assigned to the front part or the back part of the file, and may be assigned to a location separate from the signature value.

When the kernel detects that the file is executed on the first virtual space 20-1 to which the security level 5 is allocated, the electronic device 100 performs the security level assigned to the file and the first virtual space 20-1 on the first virtual space 20-1. By comparing the security level assigned to

For example, when the kernel detects that the file 60 - 1 to which the security level 3 is allocated is executed in the first virtual space 20 - 1 , the electronic device 100 is configured in the first virtual space 20 - 1 It is possible to determine whether to stop the execution of the file by comparing the security level assigned to the file 60 - 1 with the allocation level of the file 60 - 1 . Since the security level (security level 3) of the file 60-1 is lower than the security level (security level 5) allocated to the first virtual space 20-1, the electronic device 100 transmits the file 60-1 can stop running.

As another example, when the kernel detects that the file 60 - 2 to which the sixth security level is assigned is executed in the first virtual space 20 - 1 , the electronic device 100 is configured in the first virtual space 20 - 1 ) may be compared with the assigned level of the file 60 - 2 to determine whether to stop the execution of the file. Since the security level (security level 6) of the file 60-2 is higher than the security level (security level 5) allocated to the first virtual space 20-1, the electronic device 100 transmits the file 60-2. can keep running.

As another embodiment, when the kernel detects that the file is executed in the second virtual space 20 - 2 to which the third security level is allocated, the electronic device 100 sets the security level allocated to the file and the second virtualization space. By comparing the security level allocated on the space 20-2, it is possible to determine whether to stop the execution of the file.

For example, when the kernel detects that the file 70-1 to which the security level is not assigned is executed in the second virtual space 20-2, the electronic device 100 sets the security level to the file 70-1. It can identify this unassigned and abort the execution of file 70-1.

As another example, when the kernel detects that the file 70 - 2 is being executed on the second virtual space 20 - 2 to which the security level 3 is allocated, the electronic device 100 allocates the file 70 - 2 It is possible to determine whether to stop the execution of the file by comparing the security level 3, which is the security level, and the security level allocated to the second virtual space 20 - 2 . Since the security level allocated to the file 70-2 and the security level allocated to the second virtual space 20-2 are the same as security level 3, the electronic device 100 prevents the execution of the file 70-2. can keep

Meanwhile, when the kernel detects that a file is executed in a space other than the plurality of virtualized spaces 20 - 1 and 20 - 2 , the electronic device 100 sets the security level allocated to the operating system 10 and the file allocated to the operating system 10 . You can compare the security levels to decide whether to keep the file running.

For example, when it is detected that the file 80 - 1 to which a security level (eg, security level 5) of a value smaller than the security level allocated to the operating system is being executed, the electronic device 100 displays the file ( 80-1) can be stopped. As another example, when it is detected that the files 80 - 2 and 80 - 3 to which the security level equal to or greater than the security level allocated to the operating system are being executed, the electronic device 100 displays the file 80 - 2 , 80-3) can be maintained.

3A is a block diagram schematically illustrating a configuration of an electronic device 100 according to an embodiment of the present disclosure. As shown in FIG. 3A , the electronic device 100 may include a memory 110 and a processor 120 . However, the configuration illustrated in FIG. 3A is an exemplary diagram for implementing embodiments of the present disclosure, and appropriate hardware and software configurations at a level obvious to those skilled in the art may be additionally included in the electronic device 100 .

The memory 110 may store instructions and programs related to at least one other component of the electronic device 100 . An instruction means one action statement for the processor 120 in a programming language. And, the program includes not only an application program for providing a specific service, but also an operating system for driving the application program.

In an embodiment, the memory 110 may be implemented as a non-volatile memory, a volatile memory, a flash-memory, a hard disk drive (HDD), or a solid state drive (SSD). The memory 110 is accessed by the processor 120 , and reading/writing/modification/deletion/update of data by the processor 120 may be performed.

In the present disclosure, the term "memory" refers to a memory 110, a ROM (not shown) in the processor 120, a RAM (not shown), or a memory card (not shown) mounted in the electronic device 100 (eg, micro SD). card, memory stick).

The memory 110 may include a plurality of virtualization spaces that share resources of the kernel on the operating system and include separate applications and libraries and middleware for executing applications. The virtualized space may be implemented as a container. At least one of a public key or a virtualization space may be allocated to each of the plurality of virtualization spaces.

The processor 120 may be electrically connected to the memory 110 to control overall operations and functions of the electronic device 100 . The processor 120 may verify a signature value included in a file executed in at least one virtualization space among a plurality of virtualization spaces.

For example, when the kernel detects the execution of the first file in the first virtual space to which the first public key is allocated among the plurality of virtual spaces, the processor 120 stores the first file executed using the first public key. The included signature value can be decrypted. The processor 120 may verify the signature value of the first file by comparing the decrypted signature value with a hash value corresponding to the first file.

Meanwhile, the processor 120 may extract a hash value of the first file to obtain a hash value corresponding to the first file. The time point at which the hash value corresponding to the first file is acquired may be when execution of the first file is detected, but is not limited thereto. The processor 120 may acquire a hash value corresponding to the first file while decrypting the signature value included in the first file regardless of an order or a time point.

For example, when the decrypted signature value and the hash value corresponding to the first file do not match or the signature value is not included in the first file, the processor 120 may stop the execution of the first file. That is, when the integrity of the signature value of the first file is not verified, the electronic device 100 may stop the execution of the first file.

As another example, when the decrypted signature value and the hash value corresponding to the first file match, the processor 120 may identify the integrity of the first file and maintain the execution of the first file.

Meanwhile, when the kernel detects that the second file is executed in a space other than the plurality of virtualized spaces, the processor 120 decrypts the signature value included in the second file by using the second public key allocated to the operating system. and a signature value decrypted using the second public key and a hash value corresponding to the second file may be compared to verify the signature value of the second file.

That is, when the file is executed in a specific virtualized space, the processor 120 decrypts the signature value of the file using the public key allocated to the specific virtualized space, and when the file is executed in a space other than the specific virtualized space, the processor 120 ) can decrypt the signature value of the file using the public key assigned to the operating system. In this case, the public key allocated to the operating system and the virtualization space may be different.

Meanwhile, when the kernel detects that the fourth file is executed in the fourth virtual space to which the first security level is allocated among the plurality of virtual spaces, the processor 120 sets the security level allocated to the fourth file and the first security level. By comparing, it is possible to determine whether to stop the execution of the fourth file. That is, the processor 120 may determine whether to stop the execution of the file by comparing the security level allocated to the virtualization space and the security level on the file whose execution is detected.

For example, when the security level assigned to the fourth file is less than the first security level or the security level is not assigned to the fourth file, the processor 120 may determine to stop the execution of the fourth file. As another example, when the security level assigned to the fourth file is equal to or higher than the first security level, the processor 120 may determine to maintain the execution of the fourth file.

When the kernel detects the execution of the fifth file in a space other than the plurality of virtualized spaces, the processor 120 compares the security level of the fifth file with the second security level allocated on the operating system to execute the fifth file. You can decide whether to stop or not. The second security level allocated on the operating system may be different from the security level allocated on another virtualization space. For example, the security level allocated on the operating system may be higher than the security level allocated on another virtualization space, but is not limited thereto, and may be equal to or less than the security level.

Meanwhile, both a security level and a public key may be allocated on each operating system and virtualization space. When it is detected that the file is executed in a specific virtualized space or a space other than the virtualized space, the processor 120 determines whether the file is executed based on the security level and signature value of the executed file and the security level and public key allocated on the executed space. You can decide whether to stop execution or not.

For example, if the kernel detects the execution of the sixth file in the sixth virtual space to which the first security level is allocated and the third public key is allocated among the plurality of virtualization spaces, the processor 120 generates the signature value of the file. 3 It can be decrypted using the public key. In addition, the processor 120 may determine whether to stop the execution of the sixth file based on the decrypted signature value and the security level assigned to the sixth file.

For example, the processor 120 compares the hash value corresponding to the sixth file with the decrypted signature value, and compares the first security level with the security level assigned to the sixth file to determine whether to stop the execution of the sixth file. can decide whether When the hash value corresponding to the sixth file and the decrypted signature value are different or the security level assigned to the sixth file is smaller than the first security level, the processor 120 may stop the execution of the sixth file.

The processor 120 may receive the third file from the external server through the communication unit 130 . The description of the communication unit 130 will be described in a later part. The third file may be a file set to be executed in one of a plurality of virtualization spaces.

When the kernel detects that the third file received in the third virtual space corresponding to the external server among the plurality of virtual spaces is executed, the processor 120 uses the third public key included in the third virtual space to perform a third The signature value included in the file can be decrypted. Then, the processor 120 may verify the signature value of the third file by comparing the decrypted signature value with the hash value corresponding to the third file. When the decrypted signature value and the hash value corresponding to the third file match, the processor 120 may maintain the execution of the third file. When the decrypted signature value and the hash value corresponding to the third file do not match or the third file does not include the signature value, the processor 120 may maintain the execution of the third file.

The processor 120 may change the public key allocated to the plurality of virtualization spaces according to a user command. For example, when the private key corresponding to the public key allocated to the first virtual space is leaked, the processor 120 may receive a user command to change the public key allocated to the first virtual space.

The processor 120 controls the communication unit 130 to change the public key allocated to the first virtual space based on a user command, and to transmit the private key corresponding to the changed public key to an external server corresponding to the first virtual space. can do. The external server corresponding to the first virtual space means a server that creates, signs, and transmits a file that can be executed in the first virtual space to the electronic device 100 .

In another embodiment, the processor 120 may change the security level allocated to the plurality of virtualization spaces according to a user command. For example, the processor 120 may receive a user command to increase the security level allocated to the first virtual space in order to increase the reliability of the file executed on the first virtual space. The processor 120 may increase the security level allocated to the first virtual space based on the input user command.

Meanwhile, the processor 120 includes a central processing unit (CPU), a micro controller unit (MCU), a micro processing unit (MPU), a controller, and an application processor (AP) for processing a digital signal. )), a communication processor (CP), and one or more of an ARM processor, or may be defined by a corresponding term. In addition, the processor 120 may be implemented as a system on chip (SoC), large scale integration (LSI), or a field programmable gate array (FPGA) having a built-in processing algorithm. The processor 120 may perform various functions by executing computer executable instructions stored in the memory 110 .

3B is a block diagram illustrating in detail the configuration of the electronic device 100 according to an embodiment of the present disclosure. As shown in FIG. 3B , the electronic device 100 may include a memory 110 , a processor 120 , a communication unit 130 , a display 140 , a speaker 150 , and an input unit 160 . Since the memory 110 and the processor 120 have been described in detail with reference to FIG. 3A , redundant descriptions will be omitted.

The communication unit 130 may be implemented as a separate hardware device including a circuit. The communication unit 130 may communicate with an external device (eg, another type of electronic device or an external server). In this case, the communication connection of the communication unit 130 with the external device may include communication through a third device (eg, a repeater, a hub, an access point, a server, or a gateway, etc.).

The communication unit 130 may include various communication modules to communicate with an external device. For example, the communication unit 140 may include a wireless communication module, for example, LTE, LTE Advance (LTE-A), 5G ( ^5th Generation), CDMA (code division multiple access), WCDMA (wideband CDMA) ), a universal mobile telecommunications system (UMTS), wireless broadband (WiBro), and a cellular communication module using at least one of Global System for Mobile Communications (GSM).

As another example, the wireless communication module may include, for example, at least one of wireless fidelity (WiFi), Bluetooth, Bluetooth low energy (BLE), Zigbee, and radio frequency (RF).

The communication unit 130 may receive a file from an external server. In this case, the external server may be a server that encrypts a hash value of a file based on a private key corresponding to a public key allocated to one of the virtual spaces of the electronic device 100 . An embodiment related thereto will be described in detail with reference to FIG. 4 . In addition, the communication unit 130 may transmit the private key corresponding to the public key changed by the user command to the external server.

The display 140 may display various information under the control of the processor 120 . In particular, when at least one of a signature value or a security level included in an executed file does not correspond to a public key or a security level allocated on the virtual space in which the file is executed, the display 140 displays a message indicating that the execution of the file is stopped Alternatively, an indicator indicating this may be displayed.

The display 150 may be implemented as a touch screen together with a touch panel or as a flexible display.

The speaker 150 is configured to output not only various audio data on which various processing tasks such as decoding, amplification, and noise filtering have been performed by the audio processing unit, but also various notification sounds or voice messages.

In particular, the speaker 150 may output, under the control of the processor 120 , a notification sound or a voice message indicating that execution of the file is stopped based on a security level or a signature value included in the file being executed. Meanwhile, a configuration for outputting audio may be implemented as a speaker, but this is only an exemplary embodiment and may be implemented as an output terminal capable of outputting audio data.

The input unit 160 may receive a user input for controlling the electronic device 100 . In particular, the input unit 170 may include a touch panel for receiving a user touch input using a user's hand or a stylus pen, a button for receiving a user manipulation, and the like. In addition, the input unit 160 may be implemented as another input device (eg, a keyboard, a mouse, a motion input unit, etc.).

The input unit 160 may receive a public key allocated to one of a plurality of virtualization spaces or a user command for changing a security level. The processor 120 may change a public key or a security level allocated to one of a plurality of virtualization spaces based on a user command input to the input unit 160 .

4 is a flowchart illustrating an operation between the electronic device 100 and the external server 200 according to an embodiment of the present disclosure.

The external server 200 may create a file and perform a digital signature operation on the file (S410). The file generated by the external server 200 may be a file to be executed in a specific virtualization space of the electronic device 100 . The external server 200 may add a signature value obtained by encrypting the hash value of the generated file with a private key to a portion of the file.

The external server 200 may transmit the generated file including the signature value to the electronic device 100 (S420). The electronic device 100 may detect execution of a file in a virtual space corresponding to the external server 200 among a plurality of virtual spaces ( S430 ). For example, at least one of a plurality of virtualization spaces on the electronic device 100 may be set to execute a file generated by the external server 200 . That is, the external server 200 may obtain a signature value by encrypting a hash value of a file generated with a private key corresponding to a public key allocated on at least one set virtual space.

When execution of the file is detected in the virtual space corresponding to the external server 200 , the electronic device 100 decrypts the signature value included in the file using the public key allocated to the virtual space corresponding to the external server 200 . It can be done (S440). The electronic device 100 may verify the signature value of the file by comparing the decrypted signature value with a hash value corresponding to the file received from the external server 200 (S450). The hash value corresponding to the file received from the external server 200 means a hash value extracted from the file.

The electronic device 100 may determine whether to stop the execution of the file according to the verification result of the signature value (S460). When the decrypted signature value and the hash value corresponding to the file are the same, the electronic device 100 may identify the integrity of the signature value and maintain the execution of the file. When the decrypted signature value is different from the hash value corresponding to the file, the electronic device 100 may stop the execution of the file.

Meanwhile, the electronic device 100 may change the public key allocated to the virtual space corresponding to the external server 200 according to a user command (S470). For example, when the private key corresponding to the public key allocated to the virtualization space is leaked, the electronic device 100 may receive a user command to change the public key. The electronic device 100 may transmit the private key corresponding to the changed public key to the external server 200 (S480).

The external server 200 may generate a file to be transmitted to the electronic device 100 and perform a digital signature operation on the generated file using the received private key (S490). Specifically, the external server 200 may obtain a signature value by encrypting a hash value of a newly generated file using the received changed private key, and may transmit the file including the signature value to the electronic device 100 .

5 is a flowchart illustrating a method of controlling the electronic device 100 according to an embodiment of the present disclosure.

When the kernel detects the execution of the first file in the first virtual space to which the first public key is allocated among the plurality of virtual spaces, the electronic device 100 uses the first public key to generate a signature included in the executed first file The value may be decoded (S510).

The electronic device 100 may verify the signature value of the first file by comparing the decrypted signature value with a hash value corresponding to the first file ( S520 ).

The hash value corresponding to the first file means a hash value extracted through the first file. When the decrypted signature value and the hash value corresponding to the first file are the same, the electronic device 100 may identify the integrity of the signature value and maintain execution of the file. When the decrypted signature value is different from the hash value corresponding to the first file or the signature value is not included in the first file, the electronic device 100 may stop the execution of the file.

Various embodiments of the present disclosure may be implemented as software including instructions stored in a machine-readable storage medium readable by a machine (eg, a computer). As a device that is called and can operate according to the called command, it may include an electronic device (eg, the electronic device 100) according to the disclosed embodiments. When the command is executed by the processor, the processor directly Alternatively, a function corresponding to the instruction may be performed using other components under the control of the processor. The instruction may include code generated or executed by a compiler or an interpreter. , may be provided in the form of a non-transitory storage medium, where the 'non-transitory storage medium' does not include a signal and means that it is tangible and data is semi-permanent in the storage medium Alternatively, temporary storage is not distinguished, for example, a 'non-transitory storage medium' may include a buffer in which data is temporarily stored.

According to an embodiment, the method according to various embodiments disclosed in this document may be included and provided in a computer program product. Computer program products may be traded between sellers and buyers as commodities. The computer program product may be distributed in the form of a machine-readable storage medium (eg, compact disc read only memory (CD-ROM)) or online through an application store (eg, Play Store™). In the case of online distribution, at least a portion of the computer program product (eg, a downloadable app) is at least temporarily stored in a storage medium such as a memory of a server of a manufacturer, a server of an application store, or a relay server, or is temporarily stored can be created with

Each of the components (eg, a module or a program) according to various embodiments may be composed of a singular or a plurality of entities, and some sub-components of the aforementioned sub-components may be omitted, or other sub-components may be It may be further included in various embodiments. Alternatively or additionally, some components (eg, a module or a program) may be integrated into a single entity, so that functions performed by each corresponding component prior to integration may be performed identically or similarly. According to various embodiments, operations performed by a module, program, or other component are executed sequentially, parallel, iteratively, or heuristically, or at least some operations are executed in a different order, are omitted, or other operations are added. can be

Claims

In an electronic device,

a memory that shares resources of an operating system and a kernel on the operating system and includes a plurality of virtualization spaces to which a unique public key is allocated; and

A processor for verifying a signature value included in a file executed in at least one virtual space among the plurality of virtual spaces; includes;

The processor is

When the kernel detects the execution of the first file in the first virtual space to which the first public key is allocated among the plurality of virtual spaces, the signature value included in the executed first file is generated using the first public key. decrypt,

An electronic device for verifying the signature value of the first file by comparing the decrypted signature value with a hash value corresponding to the first file.
According to claim 1,

The processor is

When the kernel detects that the second file is executed in a space other than the plurality of virtualized spaces, it decrypts a signature value included in the second file using a second public key allocated on the operating system,

verifying the signature value of the second file by comparing the decrypted signature value using the second public key with a hash value corresponding to the second file;

The electronic device of claim 1, wherein the second public key and the first public key are different from each other.
According to claim 1,

The processor is

When the decrypted signature value and the hash value corresponding to the first file do not match or the signature value is not included in the first file, the electronic device stops execution of the first file.
The method of claim 1,

A communication unit including a circuit; further comprising,

The processor is

Receiving a third file from an external server through the communication unit,

When the kernel detects that the third file is executed in a third virtual space corresponding to the external server among the plurality of virtual spaces, the third file is used using a third public key included in the third virtual space. Decrypt the signature value included in

The electronic device verifies the signature value of the third file by comparing the decrypted signature value with a hash value corresponding to the third file.
According to claim 1,

A security level is allocated to each of the plurality of virtualization spaces,

The processor is

When the kernel detects that a fourth file is executed in a fourth virtualized space to which a first security level is allocated among the plurality of virtualized spaces, the fourth file is compared with the first security level by comparing the security level allocated to the file An electronic device that determines whether or not to stop the execution of a file.
6. The method of claim 5,

The processor is

When the security level assigned to the fourth file is less than the first security level or the security level is not assigned to the fourth file, it is determined to stop the execution of the fourth file;

When the security level assigned to the fourth file is equal to or greater than the first security level, the electronic device determines to execute the fourth file.
6. The method of claim 5,

The processor is

When the kernel detects the execution of the fifth file in a space other than the plurality of virtualized spaces, the execution of the fifth file is performed by comparing the security level of the fifth file with the second security level allocated to the operating system. decide whether to stop

The second security level is different from the first security level.
6. The method of claim 5,

The processor is

When the kernel detects execution of a sixth file in a sixth virtual space to which the first security level is allocated and a third public key is allocated among the plurality of virtual spaces, the signature value of the file is converted to the third public key decrypt using

The electronic device determines whether to stop execution of the sixth file based on the decrypted signature value and a security level assigned to the sixth file.
According to claim 1,

Communication unit; further comprising,

The processor is

Changing the public key allocated to the first virtual space according to a user command,

An electronic device for controlling the communication unit to transmit the private key corresponding to the changed public key to an external server corresponding to the first virtual space.
2. The method of claim 1

The virtualized space is an electronic device, characterized in that the container (container).
A method for controlling an electronic device comprising an operating system and a memory that shares resources of a kernel on the operating system and includes a plurality of virtualized spaces to which unique public keys are respectively allocated,

When the kernel detects the execution of the first file in the first virtual space to which the first public key is allocated among the plurality of virtual spaces, the signature value included in the executed first file is generated using the first public key. decrypting; and

and verifying the signature value of the first file by comparing the decrypted signature value with a hash value corresponding to the first file.
12. The method of claim 11,

when the kernel detects that the second file is executed in a space other than the plurality of virtualized spaces, decrypting a signature value included in the second file using a second public key allocated to the operating system; and

Comparing a signature value decrypted using the second public key with a hash value corresponding to the second file to verify the signature value of the second file;

The second public key and the first public key are different from each other.
12. The method of claim 11,

The verification step is

When the decrypted signature value and the hash value corresponding to the first file do not match or the signature value is not included in the first file, stopping execution of the first file; .
12. The method of claim 11,

receiving a third file from an external server;

When the kernel detects that the third file is executed in a third virtual space corresponding to the external server among the plurality of virtual spaces, the third file is used using a third public key included in the third virtual space. Decrypting the signature value included in the; and

and verifying the signature value of the third file by comparing the decrypted signature value with a hash value corresponding to the third file.
12. The method of claim 11,

A security level is allocated to each of the plurality of virtualization spaces,

When the kernel detects that a fourth file is executed in a fourth virtualized space to which a first security level is allocated among the plurality of virtualized spaces, the fourth file is compared with the first security level by comparing the security level allocated to the file The control method further comprising; determining whether to stop the execution of the file.