KR20070108723A - Apparatus and method for providing security access control - Google Patents

Abstract

An apparatus and a method for providing security access control are provided to simplify a security work and an insecurity work of users by executing the user's input process which needs security in the security zone and executing the user's input process which do not need security in the insecurity zone. An apparatus for providing security access control includes an input part(281), a virtual hierarchical part(250), a security hierarchical part, and an insecurity hierarchical part. The input part receives user's command. The virtual hierarchical part makes a virtual command corresponding to the command according to security or insecurity of the command. The security hierarchical part executes a security work according to the command which needs security among the virtual commands. The insecurity hierarchical part executes an insecurity work according to the command which does not need security among the virtual commands.

Description

Apparatus and method for providing security access control

1 is a conceptual diagram illustrating a software area of an apparatus for providing security access control according to an embodiment of the present invention.

2 is a block diagram illustrating an apparatus for providing security access control according to an embodiment of the present invention.

3 is a block diagram illustrating an apparatus for providing security access control according to another embodiment of the present invention.

4 is a flowchart illustrating a process of providing a security service according to an embodiment of the present invention.

5 is an exemplary view showing a result of whether or not security according to an embodiment of the present invention.

<Explanation of symbols on main parts of the drawings>

210: security application 220: security operating system

230: non-secure application 240: non-secure operating system

250: virtual layer unit 260: secure boot loader

270: hash storage unit 280: interface unit

290: display unit

The present invention relates to an apparatus and a method for providing security access control, and more particularly, to a security area including an application requiring security and an operating system therefor and an application not requiring security and an operating system for the same. The present invention relates to a device and a method for providing security access control to protect a device from an external security attack by dividing a software area of the device into an insecure area.

The development of integrated technology has led to the emergence of various portable devices. In recent years, wireless pagers have emerged, starting with sound playback devices such as tape players and CD players, and mobile phones and MP3 players are now widely available, and portable game machines have also appeared.

In particular, the mobile phone may be used in various ways beyond the use as a communication means, of which the role as a watch, a digital camera, a camcorder, and an MP3 player is representative, and also supports an Internet banking service.

However, when performing a security task such as internet banking using a mobile phone, the user enters a card number and password, etc. If a virus program, spyware or adware is inserted into the mobile phone, If malware such as) is installed, security information may be leaked to the outside.

These malicious programs intercept security information entered by the user after gaining administrator rights on the system of the mobile phone. Although there are security programs to prevent them, security programs are generally developed after the malicious programs are active. This does not provide full security.

Therefore, there is a need for the emergence of an invention that can prevent a security attack from a malicious program using a security system itself without using a security program.

An object of the present invention is to classify a software area of a device into a security area including an application requiring security and an operating system therefor and an unsecure area including an application not requiring security and an operating system therefor.

In addition, an object of the present invention is to allow a user's input requiring security to be performed through a secure area, and a user's input without security to be performed through a non-secure area.

The objects of the present invention are not limited to the above-mentioned objects, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, an apparatus for providing security access control according to an embodiment of the present invention includes an input unit for receiving a command of a user and a virtual command for generating a virtual command corresponding to the command depending on whether the command is secure. And a security layer unit for performing a security task according to a command requiring security among the virtual commands, and a non-security layer unit performing a non-security task according to a command without security required among the virtual commands.

According to an aspect of the present invention, there is provided a method of providing security access control, including receiving a command of a user, generating a virtual command corresponding to the command according to whether the command is secure, Outputting a result of the process, performing a security task according to a command requiring security among the virtual commands, and performing a non-security task according to a command not requiring security among the virtual commands.

Specific details of other embodiments are included in the detailed description and the drawings.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but can be implemented in various different forms, and only the embodiments make the disclosure of the present invention complete, and the general knowledge in the art to which the present invention belongs. It is provided to fully inform the person having the scope of the invention, which is defined only by the scope of the claims. Like reference numerals refer to like elements throughout.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a conceptual diagram illustrating a software area 100 of an apparatus for providing security access control according to an embodiment of the present invention, in which the software area 100 includes the security area 110, the non-security area 120, and the security virtual area ( 130 and the hardware input / output area 140. Hereinafter, the security device 200 is taken as a mobile device such as a mobile phone and a PDA as an example, but this is merely exemplary and all devices capable of communicating with a general operating system are provided in the security device 200. Of course it can be included.

The security area 110 is an area in which an application requiring security (hereinafter referred to as a security application) and an operating system for driving the same (hereinafter referred to as a security operating system) are located. The change of data existing in the security area 110 may be performed by a security application or a security operating system, but may not be performed by external input.

The non-secure area 120 is an area in which an application (hereinafter referred to as a non-secure application) that does not require security and an operating system for driving the same (hereinafter, referred to as a non-secure operating system) are located. The change of data existing in the non-secure area 120 may be performed by an insecure application or an insecure operating system, or may be performed by external input. In addition, a separate non-secure application may be additionally provided by a user input.

For example, malware, such as a virus program, spyware, or adware that corresponds to a program input from the outside, may be installed in the non-secure area 120. The security zone 110 may not be installed.

In addition, from the standpoint of the security area 110, since the non-security area 120 also corresponds to an external input, the security application and security of the security area 110 by the non-security application and the non-security operating system existing in the non-security area 120. The operating system and data are not affected.

In addition, the security operating system and the non-security operating system may be different kinds of operating systems. Accordingly, even if a malicious program driven in the non-secure area 120 is transferred to the security area 110 by the non-secure operating system, the malicious program is not driven by the security operating system which is a different type of operating system from the non-secure operating system.

Meanwhile, the security area 110 and the non-security area 120 may be formed as logical areas or physical areas. For example, in order for an operating system and an application to operate, it must be loaded into memory, with some of the memory area allocated for the secure area 110 and others for the non-secure area 120. . By such memory allocation, the secure virtual area 130 performs access to the secure area 110 or the non-secure area 120 using the address of the memory.

The secure virtual area 130 serves to generate a virtual command for a command input or output through the hardware input / output area 140. The virtual command generated in this way is transferred to the secure area 110 or the non-secure area 120 depending on the security.

That is, the secure virtual area 130 serves to block direct access to the hardware input / output area 140 by the secure area 110 or the non-secure area 120, and the secure area 110 and the non-secure area ( Only communication with the selected one of the regions 120 is performed.

2 is a block diagram illustrating an apparatus for providing security access control according to an exemplary embodiment of the present invention, in which an apparatus for providing security access control (hereinafter, referred to as a security apparatus) 200 is a security application 210 and security operations. System 220, non-secure application 230, non-secure operating system 240, virtual layer unit 250, secure boot loader 260, interface unit 280, display unit 290 and hash storage unit 270 It is configured to include.

The security application 210 is an application requiring security, such as a program that performs a short message service or an Internet banking, and is an application driven by the security operating system 220. The security application 210 and the security operating system 220 may exist only in the security area 110 and are not affected by other input commands except the virtual layer unit 250.

The non-secure application 230 is an application that does not require security, such as a game, and is an application driven by the non-secure operating system 240. The non-secure application 230 and the non-secure operating system 240 may exist only in the non-secure area 120, and may be affected by other input commands as well as the virtual layer unit 250.

The virtual layer unit 250 serves to generate a virtual command for a command input through the interface unit 280. To this end, the interface unit 280 may be configured to include an input unit 281 that receives a user's command.

The virtual command generated by the virtual layer unit 250 is transmitted to the secure operating system 220 or the non-secure operating system 240 depending on whether the security.

On the other hand, if the input command is a command that requires security, the virtual layer unit 250 generates a virtual command for the command while blocking communication with the non-secure operating system 240, the input command is secure If the command is not required, the virtual layer unit 250 blocks the communication with the security operating system 220 while generating a virtual command for the command.

That is, the virtual layer unit 250 blocks communication between the security operating system 220 and the non-secure operating system 240 by communicating only with either the secure operating system 220 or the non-secure operating system 240. will be.

In addition, the virtual layer unit 250 plays a role of displaying whether or not the security of the current work through the display unit 290. The display unit 290 may include a cathode ray tube (CRT), a liquid crystal display (LCD), a light emitting diode (LED), and an organic light emitting diode (LCD) capable of displaying an input image signal. A module having an image display means such as an OLED, an organic light-emitting diode (PDP) or a plasma display panel (PDP), and the output unit 282 may include a display unit 290, the input unit 281 is a keypad In the case that the module emits light of a specific color around the keypad may also be included in the display unit 290.

In general, the boot loader is executed before the operating system is booted, finishing all related tasks necessary for the kernel to boot properly and finally booting the operating system. Not only the operation but also checks whether the virtual layer unit 250 and the security operating system 220 are changed.

If the virtual layer unit 250 or the security operating system 220 is damaged due to an external input or an internal error, security information existing in the security area 110 may be leaked. Such a virtual layer unit 250 or the security may be leaked. In order to prevent a malfunction of the operating system 220, the secure boot loader 260 checks the states of the virtual layer unit 250 and the secure operating system 220 before the security device 200 performs an operation.

In order to confirm whether the virtual layer unit 250 or the security operating system 220 is changed, the secure boot loader 260 may store the hash value of the virtual layer unit 250 stored in the hash storage unit 270 and the current virtual layer unit. The hash value of 250 is compared or the hash value of the security operating system 220 stored in the hash storage unit 270 and the hash value of the current security operating system 220 are compared.

Thus, if the compared values are the same, the secure boot loader 260 loads the virtual layer unit 250 and the secure operating system 220 in memory so as to be driven and ends the operation if the compared values are not the same.

Here, the hash value comparison of the security operating system 220 may be performed by the virtual layer unit 250 instead of the secure boot loader 260.

The hash storage unit 270 is a Tamper Resistant Module that prevents unauthorized access and data change from the outside, for example, a hard disk, an SD card (Secure Digital Card), and an SM card (Smart Media Card). , A module capable of inputting / outputting information such as a multimedia card (MMC) or a memory stick, may be provided inside the security device 200, or may be provided in a separate device.

The interface unit 280 receives a command of a user and outputs a work result of the secure application 210 or the non-secure application 230. That is, the interface unit 280 may include an input unit 281 such as a button, a touch pad, and a wheel, and an output unit 282 such as an LCD, an LED, and an OLED.

The display unit 290 described above may be included in the interface unit 280 or may be provided separately.

3A to 3B are block diagrams illustrating an apparatus for providing security access control according to another embodiment of the present invention, and FIG. 3A illustrates a plurality of security applications 311a and 312a and security operations in one security area 310a. There are schemes 321a and 322a, and a plurality of non-secure applications 331a and 332a and non-secure operating systems 341a and 342a exist in one non-secure region 320a.

In general, a plurality of secure applications 311a and 312a and a plurality of non-secure applications 331a and 332a may exist in the security device 200. Each application exists in an area corresponding to its security and may be provided with an operating system for driving each application. The virtual layer unit 250 determines whether or not the security according to the type of the user command input through the input unit 281, and then causes the corresponding operating system to perform the operation.

Meanwhile, as illustrated in FIG. 3B, one security operating system 320 and one non-security operating system 340 exist in the security area 310b and the non-security area 320b, respectively, and each of the plurality of security applications ( 311b and 312b and a plurality of non-secure applications 331b and 332b may operate.

At this time, the virtual layer unit 250 may control the access to the application by the operating system using the access control method. That is, the virtual layer unit 250 may allow the security operating system 320 or the non-security operating system 340 to control access to a specific resource.

As such an access control method, MAC (Mandatory Access Control) or Role-Based Access Control (RBAC) may be used, and the virtual layer unit 250 may use the access control method to determine whether the current work is secure. After deciding on this, control access to specific resources for the operating system.

For example, when a work command for the first security application 311b is input, the virtual layer unit 250 determines that the work requires security, and then starts communication with the security operating system 320, and thus, the non-security. Block communication with the operating system 340. In addition, since the task is a task for the first security application 311b, the virtual layer unit 250 is controlled by the security operating system 320 by the first security application 311b and the first security application 311b. It is blocking access to the security application except the resource.

4 is a flowchart illustrating a process of providing a security service according to an embodiment of the present invention.

As power is applied to the security device 200 to provide a security service, the secure boot loader 260 first checks whether the virtual layer unit 250 has been changed (S410). To this end, the secure boot loader 260 checks whether the hash value of the virtual layer unit 250 and the hash value of the virtual layer unit 250 stored in the hash storage unit 270 are identical. Thus, if the two values are the same, the virtual layer unit 250 is loaded into the memory (S420), otherwise the operation is terminated.

In addition, the secure boot loader 260 checks whether the security operating system 220 has been changed (S430). To this end, the secure boot loader 260 checks whether the hash value of the security operating system 220 and the hash value of the security operating system 220 stored in the hash storage unit 270 are identical. Thus, if the two values are the same, the security operating system 220 is loaded into memory (S440), otherwise the operation ends.

Here, the hash value comparison of the security operating system 220 may be performed by the virtual layer unit 250 loaded on the memory, not by the secure boot loader 260.

After the virtual layer unit 250 and the security operating system 220 are loaded onto the memory, the input unit 281 receives a user command (S450). The user command may be a command for a secure operation or a command for a non-secure operation. The virtual layer unit 250 determines whether or not the user command is secure (S460). The virtual security command or the virtual non-security command is generated according to the security of the command (S470).

The generated virtual command is transmitted to the secure area 110 or the non-secure area 120 depending on whether the security command is secure.

Meanwhile, a plurality of security applications and a plurality of non-security applications may exist in the security area 110 and the non-security area 120, respectively. The virtual layer unit 250 may use the security control system 220 using the above-described access control method. Alternatively, the non-secure operating system 240 may be prevented from accessing an application that does not correspond to the virtual command.

When the input user command is a security command, the virtual layer unit 250 may display a screen indicating that a security operation is in progress through the display unit 290 provided.

The security application or the non-secure application performs a task according to the virtual security command or the virtual non-security command (S480), and the result is output through the output unit 282 (S490).

It will be appreciated that the combination of each block in the accompanying block diagram and each step in the flowchart may be performed by computer program instructions. These computer program instructions may be mounted on a processor of a general purpose computer, special purpose computer, or other programmable data processing equipment such that the instructions performed through the processor of the computer or other programmable data processing equipment are described in each block or flowchart of the block diagram. It will create means for performing the functions described in the steps. These computer program instructions may be stored in a computer usable or computer readable memory that can be directed to a computer or other programmable data processing equipment to implement functionality in a particular manner, and thus the computer usable or computer readable memory. It is also possible for the instructions stored in to produce an article of manufacture containing instruction means for performing the functions described in each block or flowchart of each step of the block diagram. Computer program instructions It is also possible to mount on a computer or other programmable data processing equipment, so a series of operating steps are performed on the computer or other programmable data processing equipment to create a computer-implemented process to perform the computer or other programmable data processing equipment. It is also possible for the instructions to provide steps for performing the functions described in each block of the block diagram and in each step of the flowchart.

In addition, each block or step may represent a portion of a module, segment or code that includes one or more executable instructions for executing a specified logical function (s). It should also be noted that in some alternative implementations, the functions noted in the blocks or steps may occur out of order. For example, the two blocks or steps shown in succession may in fact be executed substantially concurrently or the blocks or steps may sometimes be performed in the reverse order, depending on the functionality involved.

5 is an exemplary view showing a result of whether or not security according to an embodiment of the present invention.

The user may input a job command requiring security such as Internet banking or a text message. When the security command is input, the virtual layer unit 250 indicates that the current job is a secure job through the display unit 290. Indicates.

That is, as shown in FIG. 5, light 510 having a specific color is emitted to the edge of the display unit 290 or a specific icon 520 is displayed at a predetermined position of the screen.

Accordingly, the user can confirm that communication is currently performed only between the virtual layer unit 250 and the secure operating system 220, and communication is blocked between the virtual layer unit 250 and the non-secure operating system 240.

The result of whether or not the security through the display unit 290 is output only through the virtual layer unit 250, and is not output through the security operating system 220 or the non-secure operating system 240. Since the virtual layer unit 250 is authenticated through the secure boot loader 260, it is unlikely to perform a malfunction. However, the security operating system 220 or the non-secure operating system 240 may malfunction due to a malicious program or an internal error. Because there is a possibility to perform.

Although embodiments of the present invention have been described above with reference to the accompanying drawings, those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features thereof. I can understand that. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive.

According to the apparatus and method for providing the security access control of the present invention as described above has one or more of the following effects.

First, malicious programs are classified into a security area by dividing the software area of the device into a security area including an application requiring security and an operating system therefor and an unsecured area including an application requiring no security and an operating system therefor. It has the advantage of preventing penetration.

Second, the user's input requiring security is performed through the security domain, and the user's input without security is performed through the non-security domain so that the user can easily perform the security and non-security tasks. There is also an advantage.

Claims (14)

An input unit for receiving a command of a user; A virtual layer unit generating a virtual command corresponding to the command according to whether the command is secure; A security layer unit which performs a security operation according to a command requiring security among the virtual commands; And And an insecure layer unit configured to perform an insecure task according to a command for which security is not required among the virtual commands. The method of claim 1, Apparatus for providing a security access control further comprising an output unit for outputting a result of whether the security. The method of claim 1, And the virtual layer unit provides security access control to block a result of the security task from entering the non-secure layer unit or a result of the non-secure task into the security layer unit. The method of claim 1, And the virtual layer unit provides security access control to block direct access to the security layer unit or the non-secure layer unit of the input unit. The method of claim 1, And the security layer unit and the non-security layer unit each have at least one or more identical operating systems or at least one different operating system. The method of claim 1, And a secure boot loader for checking whether the virtual layer unit has been changed. The method of claim 6, The secure boot loader provides a security access control for determining whether to operate the virtual layer unit by comparing a hash value of the virtual layer unit with a previously stored hash value. The method of claim 6, The secure boot loader provides a security access control for checking whether the operating system included in the security layer unit is changed. The method of claim 8, The secure boot loader provides a security access control to determine whether the operating system operates by comparing a hash value of the operating system with a previously stored hash value. (a) receiving a command of a user; generating a virtual command corresponding to the command according to whether the command is secure; (c) outputting a result as to whether the security; (d) performing a security operation according to a command requiring security among the virtual commands; And (e) performing non-secure operations in accordance with one of the virtual commands for which security is not required. The method of claim 10, And confirming whether or not the virtual layer unit performing the step (b) has been changed. The method of claim 11, The determining of whether the change includes providing a security access control includes comparing a hash value of the virtual layer unit with a pre-stored hash value to determine whether to operate the virtual layer unit. The method of claim 10, And confirming whether a change of an operating system that drives an application that performs the step of (d) is provided. The method of claim 13, The determining of whether the change includes providing a security access control includes comparing a hash value of the operating system with a previously stored hash value and determining whether the operating system is operating.

Images