KR20100031408A - Method for processing secret data based on virtualization and trusted platform module in network system, and computer readable recording medium - Google Patents

Abstract

PURPOSE: A data security processing method and a record media thereof are provided to improve security by dividing a business domain and a security domain through a virtualization technique. CONSTITUTION: The hash value generated in a first trust platform module(224) of a client terminal(212) is transmitted. The client terminal is authenticated based on the hash value received from a server(200). A virtual machine is transmitted to the client terminal. The client terminal accesses a confidential data storage unit(208) through a security domain based on the virtual machine. The server encodes the confidential data through a second trust platform module(210) of the server. The server stores the encrypted confidential data in a confidential data storage unit.

Description

Method for processing secret data based on virtualization and trusted platform module in network system, and computer readable recording medium}

According to the present invention, a client terminal is authorized to authenticate a server using a virtualization and trust platform module, encrypts data required for security management through a specific domain, stores the data in a server, and decrypts only when necessary, thereby preventing external leakage of the data during use. It relates to a data security processing method for preventing and a recording medium storing a program for executing the same.

In general, the security of data can be divided into encryption method and blocking leakage path. Encrypting data is protected by encrypting the data using standard encryption algorithms such as AES (Advanced Encryption Standard) or RSA (Rivest Shamir Adleman).

The encryption algorithm randomly generates a key to be used for encryption, encrypts the data using the key, and the encrypted data can only be used after decryption. Therefore, in order to decrypt data, a key to be used for decryption is required, which is associated with an encryption key.

The encryption key is divided into a symmetric key and an asymmetric key. A symmetric key is used in an AES encryption algorithm and an asymmetric key is used in an RSA encryption algorithm. A symmetric key is an encryption method having the same encryption key and decryption key, and an asymmetric key uses a decryption key different from the encryption key. Therefore, when data is protected by encrypting the data, it is possible to secure the data safely unless the decryption key is leaked to the outside.

 By applying this technology, DRM (Digital Rights Management) technology has been developed and used. DRM is mainly used for media files such as music files, and provides the buyer with the encrypted media file and the decryption key for decrypting it. As a result, other users who do not have the decryption key will not be able to use the media file.

DRM is used to handle not only media files but also company confidential documents. If a confidential document needs to be provided externally, it is decrypted by an administrator who manages the DRM key and then provided externally.

The method of blocking data leakage path is to monitor the flow of the network from the outside, such as a firewall, or to exchange data between the data used in each domain by using virtually independent memory areas between domains as operating systems through virtualization. By blocking, there is a way to prevent the leakage of data.

Firewalls block unauthorized external access according to predefined rules, and identify applications using the network to prevent the transmission of unauthorized packets. Virtualization means that each operating system is executed by forming a domain with independent execution areas on a program that manages a domain called a hypervisor. Each domain is allocated an execution region by a hypervisor, and since it is impossible to access an execution region used by another domain, data exchange between domains can be blocked. Through this technology, it is possible to prevent the leakage of confidential data by identifying and blocking the movement path of the wrong data.

 This conventional technique is an effective way to prevent the leakage of confidential data. However, the method presented above has the disadvantage that data leakage may occur due to the defect or misuse of the software itself.

In addition, in such an encryption method, since the decryption key used is stored in the storage space of the client terminal, it is always exposed to intrusion such as external hacking.

1 is a block diagram of a system for explaining data security using a conventional DRM decryption key.

As shown in FIG. 1, when the data storage means 102 of the server 100 transmits DRM-encrypted data to the client terminal 106 operated by the operating system 110, the client terminal 06 processes the DRM monitoring process. Through 108, the DRM of the data encrypted with the DRM decryption key is released and used.

In this case, since the manager 104 manages the DRM decryption key used for encryption in the case of DRM, which is widely used in a company or a public institution, leakage of confidential data by the manager may occur. In the case of firewalls or virtualization, incorrect policy settings can allow malicious programs to connect to external networks.

The present invention manages the encryption / decryption key of the confidential data of the server in hardware using a trust platform module (TPM), and provides a separate virtualization domain that can access the confidential data only to the client authenticated through the TPM. Provides a method to handle data security using a virtualization and trust platform module that prevents the leakage of confidential data by providing a security environment that can operate independently without being affected by the work environment, and provides a recording medium storing a program for performing the same. There is.

Data security processing method using a virtualization and trust platform module in the network system according to the present invention for achieving the above object,

Transmitting a hash value generated by a first trusted platform module (first TPM) of the client terminal;

Transmitting a virtual machine to the client terminal when the client terminal is authenticated based on the hash value received from a server;

Accessing the confidential data storage means of the server through the security domain configured based on the virtual machine in the client terminal; And

And encrypting the confidential data in the server through a second trust platform module (second TPM) of the server and storing the confidential data in the confidential data storage means.

In addition, the process of authenticating the client terminal based on the hash value is characterized in that the terminal is authenticated when it matches with a hash value previously set in the server.

In addition, when the authenticated client terminal accesses the confidential data storage means to read the confidential data, the server decrypts the encrypted confidential data using the decryption key generated by the second trusted platform module. It characterized in that it further comprises.

In addition, when the client terminal fails to authenticate,

Launching the work domain and switching the console to the work domain.

The client terminal may control a plurality of domains to operate in one system using a hypervisor.

As described above, the virtualization and TPM-based confidential data security processing method of the present invention has the following effects.

First, by separating the business domain from the security domain through virtualization techniques, security can be strengthened without being affected by the existing business methods.

Second, since confidential data can only be accessed through a secure domain that is not connected to an external network, there is no possibility of leaking confidential data through the secure domain.

Third, the security domain is impossible to modify and use for malicious purposes in the client because only the authenticated client provides the virtual machine unmodified in the server.

Fourth, the encryption / decryption keys used for encryption and decryption are encrypted using the TPM, and key management is performed in the TPM, which is hardware, so that the existing software security method can be strengthened.

Fifth, even if confidential data managed by using the TPM is leaked to the outside, the encryption / decryption key exists only inside the TPM, so it is impossible to decrypt the confidential data from the outside.

Hereinafter, exemplary embodiments of the present invention will be described with reference to the accompanying drawings.

2 is a block diagram of a system for explaining a virtualization and TPM-based data security processing method according to the present invention. The client terminal 212 is applied with a virtualization technology, the hypervisor 220, the administrator domain 214, the business domain 216 is driven at initial startup. The hypervisor 220 manages multiple domains to operate in one system, and the administrator domain 214 monitors other domains and gives a user control over the domain. The business domain 216 is connected to a network for everyday document work or the Internet.

The secure domain 218 is blocked from accessing the network to prevent installation of unauthorized applications in the domain, and accesses the confidential data storage means 208 of the server 200 using a network storage protocol such as the iSCSI protocol. can do.

The data storage means 222 of the client terminal 212 is accessible in all domains except the security domain 218, and can freely install and delete data and applications of daily work. The first TPM 224 of the client terminal 212 is used in the startup process and generates a hash value for the operating system and processes that are executed at the startup of the client in the boot loader, and thus is a register that exists in the TPM. Save it in the Platform Configuration Register.

The server 200 uses a general operating system to which virtualization technology is not applied. The server 200 stores a virtual machine (VM) storage unit 206 and confidential data for storing a virtual machine for a secure domain to be provided to the client terminal 106. It is composed of a confidential data storage means 208 for encrypting and managing using the second TPM (210). In the operating system used in the server 200, an authentication framework for authenticating the client terminal 212 through a hash value received from the client terminal 212 and transmitting a virtual machine is established. Is configured as a file system that can be encrypted using the second TPM 210.

The VM storage unit 206 stores a virtual machine for configuring the security domain 218 to be used in the client terminal 212 and is stored in an unencrypted state. The confidential data storage means 208 stores confidential data and is encrypted and stored through the second TPM 210 when the data is stored. The second TPM 210 of the server 100 encrypts and manages an encryption / decryption key used when encrypting the confidential data of the confidential data storage means 208 using a key generated inside the second TPM. Strengthen security techniques.

The verification and authentication process of the client terminal 212 of the server 200 is performed by transmitting the hash value stored in the PCR in the first TPM 224 from the client terminal 212 to the server 200, and the client terminal 212. When the authentication is completed, the server 200 transmits the virtual machine of the VM storage unit 206 to the client terminal 212. The client terminal 212 accesses the confidential data storage means 208 of the server through the security domain 218 configured based on the received virtual machine, and the second TPM 210 when accessing through the security domain 218. By decrypting the confidential data in the TPM encrypted file system 204 using the decryption key generated by the so that the client terminal 212 can be accessed and used.

3 is a flowchart illustrating a data security processing method on a network system according to the present invention.

When the client terminal 212 is first started, the BIOS initializes the TPM (S40) and invokes the boot loader (S41). The boot loader generates a hash value for the images of the hypervisor 220, the administrator domain 214, and the business domain 216 to be used at system startup by using the TPM and stores the hash value in the PCR register of the first TPM 224. (S42).

The boot loader executes the hypervisor 220, and the hypervisor 220 activates the administrator domain 214 (S43 and S44). After the manager domain 214 is activated, the client terminal 212 connects to the server and transmits a hash value for the image stored in the PCR to the server (S45). The operating system 202 of the server authenticates by comparing the hash value received from the client terminal 212 with a preset hash value, and determines whether the client terminal 212 is started using normal images (S46).

 If it is determined that the startup is completed with the normal image through authentication, the server transmits a virtual machine for driving the security domain 218 to the client (S50). If it is determined that the startup is not completed with the normal image, the server does not transmit the virtual machine to the client terminal 212 (S80), and the client terminal 212 starts the business domain 216 (S81) and then the business domain 216. Switch to the console to complete the startup (S82).

When the virtual machine is transmitted to the client terminal 212, the hypervisor 220 activates the business domain 216 and the security domain 218 (S51, S52). Depending on the type of work, the console can be changed to a work domain and a secure domain. When the console is switched to the work domain 216, the user can perform daily work tasks such as email or document work (S53, S60). , S61).

 When the console is switched to the secure domain 218, the secure domain connects to the data storage of the server using a network storage protocol such as iSCSI (S70 and S71). When the client terminal 212 accesses the confidential data storage means 208 of the server to generate and store the confidential data through the secure domain (S72), the TPM encrypted file system 204 in the operating system of the server performs an encryption algorithm such as AES. Encrypt the data using (S73). The encryption / decryption key in the form of a symmetric key used for encryption is encrypted again by the key generated in the second TPM 210 and stored (S74). When the client terminal 212 wants to use the confidential data stored in the confidential data storage means 208 through the secure domain (S75), the TPM encryption and the file system 204 in the operating system of the server encrypt / decrypt the corresponding data. After the key is decrypted using the second TPM 210 (S76), the secret data is decrypted using the decrypted key (S77) to be used by the client terminal (S78).

 As described above, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined by the claims below and equivalents thereof.

1 is a block diagram of a system for explaining data security using a conventional DRM decryption key.

2 is a block diagram of a system for explaining a virtualization and TPM-based data security processing method according to the present invention.

3 is a flowchart illustrating a data security processing method on a network system according to the present invention.

Claims (6)

Transmitting a hash value generated by a first trusted platform module (first TPM) of the client terminal; Transmitting a virtual machine to the client terminal when the client terminal is authenticated based on the hash value received from a server; Accessing the confidential data storage means of the server through the security domain configured based on the virtual machine in the client terminal; And And encrypting the confidential data in the server through a second trust platform module (second TPM) of the server and storing the secret data in the secret data storage means. How to handle data security. The confidential data encrypted according to claim 1, wherein when the authenticated client terminal accesses the confidential data storage means to read the confidential data, the server encrypts the secret data encrypted using a decryption key generated by a second trust platform module. Data security processing method using a virtualization and trust platform module in a network system, characterized in that further comprising the step of decrypting. The network system of claim 1, wherein the authenticating of the client terminal based on the hash value authenticates the terminal when the server compares with a hash value previously set in the server. How to handle data security with virtualization and trust platform modules. The method of claim 1, wherein when the client terminal fails to authenticate, A method of processing data security using a virtualization and trust platform module in a network system, including starting a business domain and switching a console to a business domain. 5. The method of claim 4, wherein the client terminal controls the plurality of domains to operate in one system by using a hypervisor. 6. A recording medium storing a program for executing the data security processing method using the virtualization and trust platform module in the network system according to claim 2.

Images