KR20090040607A - Proofing memory hacking on user input information - Google Patents

Abstract

A memory protection about user input information for applying a password function to an interface controller inputting data about the user input information is provided to prevent the damage of the system due to hacking attack by storing user information in a memory. A user information input interface is implemented by using a data input interface security controller(A100). Inputted clear text data is encrypted and decoded. An encoding module performing a key function manager is implemented(A200). An encoding module encoding unit and an encoding module data decoding unit are interworked with the encoding module(A300). The plain text data is obtained and are not stored in the memory in the plaintext type. Data in which the encrypted data is stored in the memory or which are encrypted are transmitted to network(A500).

Description

Proofing memory hacking on user input information}

A system for storing user information in a memory and transmitting the same to a network, the present invention relates to a memory hacking prevention technology for user input information for preventing damage to a system due to a hacking attack by encrypting and storing the user information in a memory.

Internet banking provides electronic financial services using information entered by users. At this time, the information input by the user is stored in the memory as plain text data. Before transmitting the plain text data stored in the memory, the data is encrypted and transmitted using authentication and secure communication.

However, user information for authenticating or communicating over an Internet banking program is stored in a plain text memory. Hacker has developed a memory hacking program that can exploit these vulnerabilities, and there is a problem that the incident case occurs.

For example, the "A" user transferred $ 1,000 to the "I" user, but the hacking program changed the "I" account number and $ 1000 to the "hacker" account number and $ 9,000 before the transfer. There is a problem that a "hacker" exploits a user's assets.

The present invention has been made to solve the above problem and provides an application of a cryptographic function to an interface controller for inputting data.

Another object of the present invention is to provide a method of directly encrypting plain text data input by a user by an interface controller to which the encryption function is applied and storing the encrypted plain text data in a memory.

Another object of the present invention is to provide a memory hacking prevention system for user input information by directly encrypting the plain text data and storing it in a memory.

Another object of the present invention is to provide a method for preventing memory hacking on user input information.

Memory hacking prevention of the user input information of the present invention for achieving the above object is a data input interface security controller 20, the user information is input as plain text data; And an encryption module 100 for encrypting or decrypting the plain text data. It characterized in that it comprises a.

In addition, the data input interface security controller 20 is composed of a public area 80 and a protection area 90,

In addition, the public area 80 includes interface processing means 81 which are means provided by a general controller; Encrypted data obtaining means (82) which is a means for receiving encrypted data obtained by interworking of the protection area (90) with the encryption module (100); It characterized in that it comprises a.

In addition, the protection area 90 includes a cryptographic module interlocking data encryption means 51 for encrypting the plain text data input through the data input interface security controller 20 in association with the cryptographic module 100;

Encryption module interlocking data decrypting means (52) for decrypting the data encrypted by the encryption module interlocking data encryption means (51) in conjunction with the encryption module (100); And data verification means (53) for verifying whether the plain text data and the decrypted data input through the data input interface security controller (20) are the same data. It characterized in that it comprises a.

In addition, the encryption module 100 is composed of a software encryption module 30 or a hardware encryption module 40,

The software encryption module 30 is characterized by providing an encryption function, a key management function and a decryption function in the form of an application program.

In addition, the encryption module 100 is composed of a software encryption module 30 or a hardware encryption module 40,

The hardware encryption module 40 provides an encryption function, a key management function, and a decryption function in the form of a smart card or a USB, and the hardware encryption module driver 41 must be installed in the user PC 10.

Further, the encryption module 100 encrypts a key for encrypting the encryption module 100 of the memory hacking prevention system for the user input information including the data input interface security controller 20 and the encryption module 100 into which user information is input. Setting through key generation and key exchange (S10); Inputting user information as plain text data into the data input interface security controller 20 (S20); Verifying by comparing or decrypting the plain text data input in the user information input step (S20) using the encryption module 100 to compare the decrypted data obtained through the decryption of the plain text data and the encryption module 100. Step S30; Acquiring encrypted data obtained through encryption of the encryption module 100 and storing the encrypted data in an encrypted form to store or transmit the encrypted data (S40); It characterized in that it comprises a.

In addition, the data verification step (S30) comprises the step of encrypting the plain text data with the encryption module 100 to obtain encrypted data (S31); Decrypting the encrypted data of the plain text data with the encryption module 100 to obtain decrypted data (S32); And comparing whether the plaintext data and the decoded data are the same (S33).

If the plain text data and the decoded data are the same in the data comparing step S33, the data processing step S40 is performed. If the plain text data and the decoded data are not the same, the memory hacking prevention system is terminated. It characterized in that the step (S34) to perform.

      In addition, in the key setting step (S10), in the case of interlocking with other targets of the program of the server and the terminal, it characterized in that the key is set through the key exchange, which is a key management function of the encryption module 100.

In addition, when interlocking with another object that is a program of the server and the terminal in the data storage or transmission step (S40), the object receiving the encrypted data is data encrypted using the key exchanged in the key setting step (S10). It is characterized by decoding the.

Memory hacking prevention of the user input information according to the present invention provides a method that can protect the user information by preventing a hacking attack on the memory in which the user input information is stored.

In addition, it provides a secure service for all electronic financial transaction services, such as Internet banking or electronic commerce that requires user information input.

Hereinafter, memory hacking prevention of user input information of the present invention will be described in detail with reference to the accompanying drawings.

The drawings introduced below are provided by way of example so that the spirit of the invention to those skilled in the art can fully convey.

Accordingly, the present invention is not limited to the drawings presented below and may be embodied in other forms. Also, like reference numerals denote like elements throughout the specification.

At this time, if there is no other definition in the technical terms and scientific terms used, it has a meaning commonly understood by those of ordinary skill in the art to which the present invention belongs, the gist of the present invention in the following description and the accompanying drawings Descriptions of well-known functions and configurations that may be unnecessarily blurred are omitted.

1 is a block diagram showing a data input interface security controller and a cryptographic module interworking structure of a system and method for preventing memory hacking of user input information according to the present invention, and FIG. 2 is a memory hacking prevention of user input information according to the present invention. A block diagram showing the functional structure of the data input interface security controller and cryptographic module of the system and method.

As shown in FIG. 1, the memory hacking prevention system for user input information according to the present invention includes a data input interface security controller 20 and an encryption module 100, which are application programs.

The data input interface security controller 20 includes a cryptographic module interface 50.

The cryptographic module 100 operates by installing a hardware cryptographic module driver 41 on the user PC 10 in the form of a smart card and a USB and a software cryptographic module 30 located inside the application program and external to the application program. It consists of a hardware cryptographic module 40.

A memory 70 in which the encrypted information 60 provided by the data input interface security controller 20 and the encryption module 100 is stored is located inside the user PC 10.

As shown in FIG. 2, the data input interface security controller 20 is divided into a public area 80 and a protection area 90.

The public area 80 has an interface data processing means 81 and an encrypted data obtaining means 82 having a general data processing function. The interface processing means 81 is a means provided by a general controller, and the encrypted data obtaining means 82 stores the plain text data input through the data input interface 20 in the protection area 90. The module 100 receives the encrypted data obtained through the encryption by the interlocking means.

The protection area 90 is composed of an encryption module interlocking data encryption means 51, an encryption module interlocking data decryption means 52, and a data verification means 53 to encrypt the plain text data in conjunction with the encryption module 100. And decoding.

The encryption module interworking data encryption means 51 is a means for obtaining the encrypted data by encrypting the plain text data which is user information input through the application program of the user PC 10 in cooperation with the encryption module 100.

The encryption module interlocking data decrypting means 52 is means for decrypting the encrypted data to obtain decrypted data.

The data verification means 53 is a means for verifying by comparing whether the plain text data and the decoded data are the same.

The encryption module 100 may be selectively configured among the software encryption module 30 or the hardware encryption module 40.

The software encryption module 30 is a module that provides a cryptographic function by implementing a key generation, key distribution, key exchange, encryption function, and decryption function in the form of an application program.

The hardware encryption module 40 provides a key generation, key distribution, key exchange, encryption function and decryption function in the form of a smart card or USB, and the hardware encryption module of the hardware encryption module to be used in the user PC 10 Driver 41 is required.

The memory 70 of the user PC 10 has a function of storing encrypted storage user information 61 and encrypted transmission user information 62. The plain text data is encrypted and stored in the memory 70, and then the transmission 12 or the storage 13 button is selected in the user information input window 11. When the transmit button 12 is selected, encrypted transmission user information 62 stored in the memory 70 is transmitted over the network. When the storage button 13 is selected, the encrypted storage user information 61 stored in the memory is stored.

3 illustrates an application procedure of a memory hacking prevention system and method for user input information having an interworking structure with the above-described function.

As shown in FIG. 3, when developing an application program used in the user PC 10, the data input interface security controller 20 is used to use a user information input interface without using a conventional controller. (A100)

A cryptographic module 100 is implemented to encrypt and decrypt plain text data input to the data input interface security controller 20 and perform a key management function for setting keys for key exchange and key distribution.

The cryptographic module interlocking data encryption means 51 and the cryptographic module interlocking data decrypting means 52 of the data input interface security controller 20 implement a function interworking with the cryptographic module 100 used in the application program. A300)

Instead of acquiring the plain text data from the data input interface security controller 20 and storing the plain text data in a plain text form, verifying that the data encrypted by the encryption module 100 is the same as the plain text data and acquiring the verified data. A function of storing the encrypted data in the memory 70 is implemented (A400).

The encrypted data stored in the memory 70 is stored in the memory 70 according to a button selected from the transmission button 12 or the storage button 13 of the user information input window 11 or the network. It implements the function to transmit to the server. (A500)

4 and 5 illustrate a method of operating a memory hacking prevention system for the user input information according to the present invention.

As shown in FIG. 4, first, a key setting step S10 is performed by using a key generation, key exchange, and key distribution function of the encryption module 100.

After performing the key setting step S10, a user information input step S20 of inputting user information as plain text data into the user information input window 11 is performed.

A button for storing or transmitting the plain text data is selected. If the save button 13 is selected, the encrypted data is stored in the memory 70, and if the send button 12 is selected, the encrypted data stored in the memory 70 is transmitted over the network.

After performing the user information input step S20, a data verification step S30 for encrypting, decrypting, and comparing data is performed.

As shown in FIG. 5, the data verification step S30 includes a data encryption step S31, a data decryption step S32, and a data comparison step S33.

In the data encryption step (S31), the plain text data is encrypted by interlocking the encryption module interworking data encryption means 51 and the encryption module 100 to obtain encrypted data.

In the data decryption step (S32), the encrypted data is decrypted by interlocking the encryption module interworking data decryption means 52 and the encryption module 100 to obtain decrypted data.

The data comparing step S33 compares and verifies whether the plain text data and the decoded data are the same data using the data verifying means 53.

If the plain text data and the decoded data are not the same as the result of the comparison in the data comparing step S33, a failure processing step S34 is performed.

Data processing for storing or transmitting the encrypted information 60 stored in the memory 70 in the form of encrypted data when the plain text data and the decrypted data are the same data as a result of the comparison in the data comparing step S33. Step S40 is performed.

1 is a block diagram showing a data input interface security controller and an encryption module interworking structure of a system and method for preventing memory hacking of user input information according to the present invention;

2 is a block diagram showing a data input interface security controller and a cryptographic module function structure of a system and method for preventing memory hacking of user input information according to the present invention;

3 is a flowchart illustrating a procedure for applying a security controller of a system and method for preventing memory hacking to user input information according to the present invention;

4 is a flowchart illustrating a procedure of operating a security controller of a system and method for preventing memory hacking of user input information according to the present invention;

5 is a flowchart illustrating a data verification step in a procedure of operating a security controller of a system and method for preventing memory hacking of user input information according to the present invention.

Explanation of symbols on the main parts of the drawings

10: User PC 11: User Information Input Window

12: Transfer Button 13: Save Button

20: data entry interface security controller

30: software encryption module 40: hardware encryption module

50: encryption module interface 51: encryption module interworking data encryption means

52: encryption module interworking data decoding means 53: data verification means

60: encrypted information 61: encrypted user information

62: user information for encrypted transmission 70: memory

80: public domain 81: interface processing means

82: means for obtaining encrypted data 90: protection area

100: cryptographic module

Claims (14)

A data input interface security controller through which user information is input as plain text data; And an encryption module for encrypting or decrypting the plain text data. Memory hacking prevention system for the user input information, characterized in that comprising a. The method of claim 1, The data input interface security controller is composed of a public area and a protection area, The public area comprises interface processing means which are means provided by a general controller; And encrypted data obtaining means, which is means for receiving encrypted data obtained by interworking the protection area with the encryption module. Memory hacking prevention system for the user input information, characterized in that comprising a. The method of claim 2, The protection area includes encryption module interlocking data encryption means for encrypting the plain text data input through the data input interface security controller in conjunction with the encryption module; Encryption module interlocking data decrypting means for decrypting the data encrypted by the encryption module interlocking data encryption means in conjunction with the encryption module; And Data verification means for verifying whether the plain text data and the decrypted data input through the data input interface security controller are the same data; Memory hacking prevention system for the user input information, characterized in that comprising a. The method of claim 1, The cryptographic module is composed of a software cryptographic module or a hardware cryptographic module, The software encryption module is a memory hacking prevention system for the user input information, characterized in that providing an encryption function, key management function and decryption function in the form of an application program. The method of claim 1, The cryptographic module is composed of a software cryptographic module or a hardware cryptographic module, The hardware encryption module provides an encryption function, a key management function, and a decryption function in the form of a smart card or USB, and a memory hacking prevention system for user input information, characterized in that a hardware encryption module driver must be installed in a user PC. Setting a key for encrypting the encryption module of the memory hacking prevention system for the user input information including a data input interface security controller and an encryption module into which user information is input through key generation and key exchange of the encryption module; Inputting user information as plain text data into the data input interface security controller; Verifying by comparing or decrypting the plain text data input in the user information input step by using the encryption module to compare the plain text data with the decrypted data obtained through the decryption of the encryption module; And Acquiring encrypted data obtained through encryption of the encryption module and storing the encrypted data in an encrypted form to store or transmit the encrypted data; Memory hacking prevention method for the user input information, characterized in that comprises a. The method of claim 6, The data verifying step may include encrypting the plain text data with the encryption module to obtain encrypted data; Decrypting the encrypted data of the plain text data with the encryption module to obtain decrypted data; And And comparing the plain text data and the decoded data with each other. 2. The method according to claim 6 or 7, And performing the data processing step when the plain text data and the decoded data are the same in the data comparing step, and terminating a memory hacking prevention system when the plain text data and the decoded data are not the same. How to prevent memory hacks for user input information. The method of claim 6, The data input interface security controller is composed of a public area and a protection area, The public area comprises interface processing means which are means provided by a general controller; And encrypted data obtaining means, which is means for receiving encrypted data obtained by interworking the protection area with the encryption module. Memory hacking prevention method for the user input information, characterized in that comprises a. The method of claim 9, The protection area includes encryption module interlocking data encryption means for encrypting the plain text data input through the data input interface security controller in conjunction with the encryption module; Encryption module interlocking data decrypting means for decrypting the data encrypted by the encryption module interlocking data encryption means in conjunction with the encryption module; And Data verification means for verifying whether the plain text data and the decrypted data input through the data input interface security controller are the same data; Memory hacking prevention method for the user input information, characterized in that is configured to include. The method of claim 6, The cryptographic module is composed of a software cryptographic module or a hardware cryptographic module, The software encryption module prevents memory hacking on user input information, characterized by providing an encryption function, a key management function, and a decryption function in the form of an application program. The method of claim 6, The cryptographic module is composed of a software cryptographic module or a hardware cryptographic module, The hardware encryption module provides an encryption function, a key management function, and a decryption function in the form of a smart card or USB, and a method for preventing memory hacking on user input information, characterized in that a hardware encryption module driver must be installed in a user PC. The method of claim 6, When interlocking with another object that is a program of the server and the terminal in the key setting step, the memory hacking prevention method for the user input information, characterized in that for setting the key through the key exchange function, the key management function of the encryption module. The method of claim 6 or 13, In the case of interworking with the other object which is a program of the server and the terminal in the data storage or transmission step, the user receiving the encrypted data decrypts the encrypted data using the key exchanged in the key setting step. How to prevent memory hacking on input information.

Images