KR101628614B1 - Method for Processing Electronic Signature by using Secure Operating System - Google Patents
Method for Processing Electronic Signature by using Secure Operating System Download PDFInfo
- Publication number
- KR101628614B1 KR101628614B1 KR1020150054342A KR20150054342A KR101628614B1 KR 101628614 B1 KR101628614 B1 KR 101628614B1 KR 1020150054342 A KR1020150054342 A KR 1020150054342A KR 20150054342 A KR20150054342 A KR 20150054342A KR 101628614 B1 KR101628614 B1 KR 101628614B1
- Authority
- KR
- South Korea
- Prior art keywords
- program
- secure
- memory area
- general
- signature
- Prior art date
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/42—User authentication using separate channels for security data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The present invention relates to a digital signature processing method using a security operating system, and a digital signature processing method using a security operating system according to the present invention includes a secure operating system (OS) having a secure kernel and a kernel structure (N) of a general OS allocates a memory area accessible from a designated program (s) of the secure OS, or allocates a memory area accessible by a designated program (s) of the secure OS, A second step of providing the signature object information to the memory area by the program (n); a step of checking whether the program (s) of the secure OS verifies the signature object information from the memory area (S) extracts a signature key from a certificate provided in the secure OS and generates an electronic signature value for the signature subject information A fourth step of verifying a digital signature value generated by a hardware security module (HSM), a fifth step of the program s providing the digital signature value to the memory area, And a sixth step of performing an electronic signature procedure using the digital signature value of the memory area.
Description
In a wireless terminal equipped with a secure operating system (OS) having a secure kernel and a general OS having a kernel structure, a certificate is provided to a separate secure OS side isolated from a general OS and then a certificate Lt; / RTI >
Recently, a Trust Zone technology has been proposed in which each physical processor core is divided into two worlds, Secure World and Normal World, and each world is isolated. Trust Zone technology is equipped with a normal operating system in the normal world, and Secure World is equipped with a security-enhanced operating system. By keeping Secure World isolated from the normal world, even if the normal world is hacked or forged, security of the normal world and isolated secure world .
The isolation of Secure World and Normal World in Trust Zone technology is one of the key points to ensure the security of Secure World. An application executed in the secure world can directly access and control various components such as a display device, a communication device, and an input device provided in the terminal without using the operating system of the normal world (Patent Registration No. 10-1259824) . Although Secure World and Normal World physically share a single processor core in a single terminal and Secure World runs through Normal World, Secure and Normal Worlds, in terms of hardware and software, Other systems.
Therefore, when a certificate is provided to a wireless terminal equipped with a secure world and a normal world, implementing a certificate function through only the secure world regardless of the normal world is performed by referring to a technical standard related to the trust zone, In order to implement the normal world and the secure world in real time, it is necessary to internally isolate the necessary procedures from each other through the isolated world, Which is difficult to solve.
SUMMARY OF THE INVENTION An object of the present invention to overcome the above problems is to provide a secure OS in which when a heterogeneous OS including a normal operating system and a secure operating system is mounted on a wireless terminal, The program (n) of the general OS allocates a memory area accessible from the designated program (s) of the secure OS or identifies the pre-allocated memory area and signs it with the program (s) of the secure OS And providing the object information, the program (s) of the secure OS digitally signs the signature object information using a certificate mounted on the secure OS.
The digital signature processing method using the security operating system according to the present invention can be applied to a secure operating system (Secure Operating System) having a secure kernel and a wireless terminal equipped with a general operating system (OS) (N) of the general OS allocates a memory area accessible in a designated program (s) of the secure OS or identifies a pre-allocated memory area; A second step of providing the signature object information to the memory area; a third step of the program (s) of the secure OS verifying signature object information from the memory area; Extracting the signature key from the certificate provided in the signature key information, generating a digital signature value for the signature target information, or verifying the digital signature value generated through the HSM (Hardware Security Module) , A program (s) providing the digital signature value to the memory area, and a sixth step of the program (n) performing an electronic signature procedure using the digital signature value of the memory area .
According to the present invention, the secure OS may include a trust zone installed in the processor.
According to the present invention, a method for processing an electronic signature using the secure operating system comprises the steps of: identifying that the program (s) assigned to the secure OS is loaded or the program (s) Storing the information in the general OS storage area, wherein the first step includes: allocating or confirming the memory area by the program (n) when the program (s) is loaded on the secure OS And a control unit.
According to the present invention, the digital signature processing method using the secure operating system may further include storing the user's certificate in the certificate storage area or the HSM of the secure OS by the program (s) And the program (n) allocates or confirms the memory area when the user's certificate is stored in the certificate storage area of the secure OS or in the HSM.
According to the present invention, the digital signature processing method using the secure operating system may further include a step in which the program (n) of the general OS receives signing object information from a server designated by the communication means of the wireless terminal, In the second step, the program (n) provides the signature subject information received from the server to the memory area.
According to the present invention, the digital signature processing method using the secure operating system may further include generating the signature subject information by the program (n) of the general OS, and the second step may include: And providing the generated signature object information to the memory area.
According to the present invention, the digital signature processing method using the secure operating system further includes storing and maintaining status information on the program (n) immediately before the program (n) is switched to the secure OS, The second step is characterized in that the program (n) provides signature target information to the memory area after the state information is stored.
According to the present invention, the first step may further include the step of the program (n) operating a secure OS through a SMC (Secure Monitor Call) command.
According to the present invention, in the first step, the program (n) allocates the memory area to the general OS or the pre-allocated memory area.
According to the present invention, the first step may allocate the memory area to the security monitor that performs the switching procedure between the general OS and the secure OS, or may check the pre-allocated memory area.
According to the present invention, in the first step, the program (n) can allocate a memory area accessible from the program (s) of the secure OS to the security server on the network or check the pre-allocated memory area.
According to the present invention, the first step may further comprise setting the program (n) as a process at the general OS side in which the program (n) refers to the memory area.
According to the present invention, a method for processing an electronic signature using the secure operating system comprises: after the program (s) confirms signature subject information from the memory area, the program (s) accesses the input means of the wireless terminal Receiving a PIN (Personal Identification Number), and authenticating the validity of the PIN input through the secure OS.
According to the present invention, in the digital signature processing method using the secure operating system, after the program (s) checks the digital signature value, the initial program (s) encrypts the digital signature value so as to be decryptable through the designated server And the fifth step is characterized by providing the encrypted digital signature value to the memory area.
According to the present invention, the digital signature processing method using the secure operating system may be configured such that after the program (s) provides the encrypted digital signature value to the memory area, the program (n) Further comprising the step of checking an encrypted digital signature value through a program (s) of the digital signature function, and the sixth step of performing an electronic signature procedure using the encrypted digital signature value.
According to the present invention, when a heterogeneous OS including a general OS and a secure OS is mounted on a wireless terminal, the user's certificate is provided to the secure OS, and signature information is provided from the general OS to the secure OS, It is advantageous to provide a secure electronic signature for hacking or tampering with a general OS.
1 is a diagram illustrating a functional configuration of a wireless terminal according to an embodiment of the present invention.
2 is a diagram showing a functional configuration of a program according to an embodiment of the present invention.
3 is a diagram illustrating a process of preparing a program s in a secure OS according to an embodiment of the present invention.
4 is a diagram illustrating a transaction interoperation process between a general OS and a secure OS according to an embodiment of the present invention.
5 is a diagram illustrating a process of generating an electronic signature through a secure OS according to an embodiment of the present invention and using the generated digital signature through a general OS.
The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention.
In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.
As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.
1 is a functional block diagram of a wireless terminal 100 according to an embodiment of the present invention.
1 is a block diagram illustrating a configuration of a secure OS 120 having a secure kernel 130 and a general OS 110 having a kernel structure disclosed therein. 1 is a block diagram illustrating a functional configuration of processing digital signature of signature subject information by using the digital signature of the wireless terminal 100 according to an exemplary embodiment of the present invention. It is to be understood that the present invention is not limited to the above-described exemplary embodiments, and various changes and modifications may be made without departing from the scope of the present invention. The wireless terminal 100 of FIG. 1 may include various terminals such as a smart phone, a tablet PC, and a PDA, which are equipped with the secure OS 120 and the general OS 110.
1, the wireless terminal 100 includes a control unit 105, a memory unit 175, a screen output unit 140, a user input unit 145, a sound processing unit 150, a short range wireless communication unit 155, A wireless network communication unit 160, an NFC unit 170, a USIM reader unit 165, and a USIM, and has a battery for power supply.
The control unit 105 is a general term for controlling the operation of the wireless terminal 100. The control unit 105 physically includes a processor and an execution memory, ). Preferably, the processor may comprise an ARM processor.
According to the present invention, the control unit 105 includes a normal world in which a normal OS 110 in which a kernel structure, an API and a driver are displayed, and a secure kernel And a secure world in which a secure operating system 120 (Secure Operating System) having a security function 130 is operated. The normal world and the secure world are constructed in a mutually isolated structure. Preferably, the secure OS 120 includes a Trust Zone of the ARM processor. Hereinafter, a functional configuration for the present invention on the general OS 110 and the secure OS 120 will be described with reference to the control unit 105 for convenience.
The memory unit 175 is a generic name of a nonvolatile memory corresponding to a storage unit included in the wireless terminal 100 and includes at least one program code executed through the control unit 105 and at least one And stores the data set.
According to the present invention, the memory unit 175 may include a general OS storage area accessed by the general OS 110 and a secure OS storage area accessed by the secure OS 120, I can not access the OS storage area. The general OS storage area may store program codes corresponding to applications executed through the general OS 110 and at least one data set used by applications of the general OS 110. [ The secure OS storage area may store program codes corresponding to applications executed through the secure OS 120 and at least one data set used by applications of the secure OS 120. [
The general OS 110 has a kernel (hereinafter, referred to as a "general kernel 115" in contrast to the security kernel 130 of the secure OS 120) The general kernel 115 of the wireless terminal 100 may include various types of the wireless terminal 100 such as the screen output unit 140, the user input unit 145, the sound processing unit 150, the short- Resources, and may be provided with a driver on the general OS 110 for this purpose. The general kernel 115 of the general OS 110 can not access the secure OS storage area and the general OS 110 and the secure OS 120 are isolated from each other.
The secure OS 120 includes a secure kernel 130 in which a kernel structure is not disclosed and the secure kernel 130 of the secure OS 120 includes a screen output unit 140, a user input unit 145, The mobile terminal 100 may access various resources of the wireless terminal 100 such as the processor 150, the short range wireless communication unit 155 and the wireless network communication unit 160 and may include a driver on the secure OS 120 for this purpose. Preferably, the secure kernel 130 of the secure OS 120 can not access the normal OS storage area, and the secure OS 120 and the normal OS 110 are isolated from each other.
According to an embodiment of the present invention, the secure OS storage area may include an HSM area operated by a hardware security module (HSM)
The screen output unit 140 may include a display such as a liquid crystal display (LCD) or a touch screen including a touch input unit as a screen output unit provided in the wireless terminal 100 .
The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the display or the touch screen of the screen output unit 140. The general kernel 115 is connected to the screen output unit 140, The security OS 120 can not access the screen output unit 140. In this case,
The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the display or the touch screen of the screen output unit 140, The general OS 110 can not access the screen output unit 140 when accessing and controlling the display unit 140. [
The user input unit 145 may be a user input unit provided in the wireless terminal 100 and may include a touch input unit of the touch screen when the screen output unit 140 includes a touch screen. A keypad, and a key button.
The general kernel 115 of the general OS 110 includes a driver for accessing and controlling a touch input unit, a keypad or a key button of the user input unit 145. The general kernel 115 is connected to the user input unit 145 The security OS 120 can not access the user input unit 145. In this case,
The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the touch input unit, keypad or key button of the user input unit 145, When accessing and controlling the input unit 145, the general OS 110 can not access the user input unit 145.
The sound processing unit 150 may include sound output means and sound input means included in the wireless terminal 100, and may include a speaker for outputting sound and a microphone for receiving sound.
The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the speaker or the microphone of the sound processing unit 150. The general kernel 115 accesses the sound processing unit 150 The security OS 120 can not access the sound processing unit 150 controlled by the general OS 110. [
The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the speaker or microphone of the sound processing unit 150. The secure kernel 130 may be provided in the sound processing unit 150, The general OS 110 can not access the sound processing unit 150 controlled by the secure OS 120. In this case,
The wireless network communication unit 160 and the short-range wireless communication unit 155 are communication means for connecting the wireless terminal 100 to a communication network. Preferably, the wireless terminal 100 is a wireless communication unit And may further include one or more short-range wireless communication units 155. FIG.
The wireless network communication unit 160 is a collective term for communication means for connecting the wireless terminal 100 to a wireless communication network via a base station and includes an antenna for transmitting and receiving a radio frequency signal of a specific frequency band, And at least one processing module. The wireless network communication unit 160 may connect the wireless terminal 100 to a call network including a call channel and a data channel via the exchange and may transmit the packet data based wireless network data To a data network providing communication (e.g., the Internet).
According to an embodiment of the present invention, the wireless network communication unit 160 may be a mobile communication unit that performs at least one of connection to a mobile communication network, location registration, call processing, call connection, data communication, and handoff according to the CDMA / WCDMA / ≪ / RTI > Meanwhile, according to the intention of a person skilled in the art, the wireless network communication unit 160 may further include a portable Internet communication structure for performing at least one of connection to the portable Internet, location registration, data communication and handoff according to the IEEE 802.16 standard, It is evident that the present invention is not limited by the wireless communication configuration provided by the wireless network communication unit 160. [ That is, the wireless network communication unit 160 is a general term for a configuration unit that connects to a wireless communication network through a cell-based base station irrespective of a frequency band of a wireless section, a type of a communication network, or a protocol.
The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the wireless network communication unit 160. The general kernel 115 accesses and controls the wireless network communication unit 160 The security OS 120 can not access the wireless network communication unit 160 controlled by the general OS 110. [
The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the wireless network communication unit 160. The secure kernel 130 may access the wireless network communication unit 160 The general OS 110 can not access the wireless network communication unit 160 controlled by the secure OS 120. [
The short-range wireless communication unit 155 is a generic term of communication means for connecting a communication session using a radio frequency signal within a predetermined distance (for example, about 10 meters) as a communication medium and connecting the wireless terminal 100 to the communication network The wireless terminal 100 can be connected to the communication network through at least one of Wi-Fi communication, Bluetooth communication, public wireless communication, and UWB. According to an embodiment of the present invention, the short-distance wireless communication unit 155 may connect the wireless terminal 100 to a data network providing packet-based short-range wireless data communication through a wireless AP.
The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the short range wireless communication unit 155. The general kernel 115 accesses and controls the short range wireless communication unit 155 The secure OS 120 can not access the short range wireless communication unit 155 controlled by the general OS 110. [
The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the short range wireless communication unit 155 and the secure kernel 130 may access the short range wireless communication unit 155 The general OS 110 can not access the short range wireless communication unit 155 controlled by the secure OS 120. [
The NFC unit 170 may be a communication resource for processing one or more proximity wireless communications, such as bi-directional proximity wireless communication, full-duplex proximity wireless communication, and half-duplex proximity wireless communication, using a radio frequency signal as a communication medium at a close distance , And is capable of processing proximity wireless communication according to the NFC (Near Field Communication) standard of the 13.56-MHz frequency band.
The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the NFC unit 170. When the general kernel 115 accesses and controls the NFC unit 170, The secure OS 120 can not access the NFC unit 170 controlled by the general OS 110. [
The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the NFC unit 170. The secure kernel 130 accesses the NFC unit 170 to control The general OS 110 can not access the NFC unit 170 controlled by the secure OS 120. [
The USIM reader unit 165 is a generic term of a configuration for exchanging at least one data set with a universal subscriber identity module mounted or detached from the mobile station 100 based on the ISO / IEC 7816 standard , And the data set is exchanged in a half duplex communication manner through an APDU (Application Protocol Data Unit).
The USIM is an SIM type card provided with an IC chip according to the ISO / IEC 7816 standard, and includes an input / output interface including at least one contact connected to the USIM reader unit 165, (Or processing) the program code for the IC chip or extracting (or processing) the data set in accordance with at least one command transmitted from the wireless terminal 100 in connection with the input / output interface To the input / output interface.
According to the present invention, the general OS 110 is loaded with various applications operating using the general kernel 115, and the user can control various applications executed in the general OS 110 through the general kernel 115 The general OS 115 performs a user operation by a user input unit 145 controlled by the general kernel 115 while displaying one or more interface screens through a screen output unit 140. The general OS 115, The application of the present invention performs a designated transaction operation and provides various services to the user. Hereinafter, an application (or a program module embedded in or linked to an application) operating in accordance with the present invention on the general OS 110 is referred to as " program (n) 200 " Preferably, the program (n) 200 includes an application using an electronic signature such as a banking application, a payment application, or an authentication application executed in the general OS 110 . However, the program (n) 200 is not limited to a banking application, a payment application, or an authentication application. Any application can be used as long as it is an application running on the general OS 110, and belongs to the scope of the present invention .
According to the embodiment of the present invention, the program (n) 200 of the general OS 110 is provided in the upper part of the general kernel 115 on the OS structure and operates using the general kernel 115.
According to the present invention, at least one security application operating on the secure kernel 130 is installed in the secure OS 120. [ The security application on the secure OS 120 operates using the secure kernel 130 and may be connected to the screen output unit 140, the user input unit 145, the sound processing unit 150, The wireless network communication unit 160, the short range wireless communication unit 155, and the like. Hereinafter, a security application (or a program module embedded in or linked to a security application) operating in accordance with the present invention on a general OS 110 is referred to as " program (s) 240 " Preferably, the program (s) 240 may include a certificate application running in the secure OS 120.
According to an embodiment of the present invention, the program (s) 240 of the secure OS 120 is provided in the upper part of the secure kernel 130 on the OS structure and operates using the secure kernel 130.
According to an embodiment of the present invention, the program (s) 240 may include program code for operating the
According to an embodiment of the present invention, the program (s) 240 can be interworked with the NFC-based
The OS of the wireless terminal 100 is switched from the general OS 110 to the secure OS 120 in the secure OS 120 (or between the general OS 110 and the secure OS 120) Or a security monitor 125 (Secure Monitor) that performs a series of procedures for switching from the security OS 120 to the general OS 110. [ Since the security monitor 125 uses the command of the secure OS 120, FIG. 1 illustrates the security monitor 125 as being provided in the secure OS 120 for the sake of convenience.
The security monitor 125 monitors whether an SMC (Secure Monitor Call) command is generated through the kernel or an IRQ (Interrupt Request) to FIQ (Fast Interrupt Request) Can be performed.
2 is a diagram showing a functional configuration of a program according to an embodiment of the present invention.
2 shows the functional configuration of the program (n) 200 of the general OS 110 and the program (s) 240 of the secure OS 120. In the technical field of the present invention, It will be understood by those skilled in the art that various changes and modifications of the program may be made without departing from the spirit and scope of the present invention as defined by the following claims. The technical characteristics are not limited only by the method shown in FIG.
Referring to FIG. 2, the program (s) 240 of the secure OS 120 includes a certificate storage area 245 for storing and managing a user's certificate in the certificate storage area of the secure OS 120 or the
The program (s) 240 collectively refers to a program that is executed in the secure OS 120 and manages the certificate used by the secure OS 120. The program (s) 240 preferably stores the certificate of the user issued through the certification authority, Or to issue a certificate to the
When the program (s) 240 mounted on the secure OS 120 is executed at least once, the certificate storage unit 245 stores the certificate of the user in the certificate storage area of the secure OS 120 or the
According to an embodiment of the present invention, when a key pair (e.g., a public key, a private key, etc.) is generated and submitted to a certification authority in a designated terminal / server in a certificate issuing procedure, the certification authority generates a certificate And the certificate storage unit 245 receives the certificate through the wireless network communication unit 160 or the short-range wireless communication unit 155 of the wireless terminal 100, 120) certificate storage area.
Meanwhile, when the
Or if the security OS 120 is interworking with the
Meanwhile, when the user's certificate is issued through the certification authority, the certificate storage unit 245 performs the specified certificate copy procedure to transmit the certificate, which has been issued to the user, to the certificate storage area of the secure OS 120 or the secure OS 120 to the
Referring to FIG. 2, the program (s) 240 of the secure OS 120 registers PIN information for performing PIN (Personal Identification Number) authentication for digital signature using a certificate on the secure OS 120 And a PIN registration unit 250 for registering the PIN.
When the program (s) 240 mounted on the secure OS 120 is executed at least once, the PIN registration unit 250 stores the PIN information for digital signature in the designated PIN storage area on the secure OS storage area . If the PIN information is not stored in the PIN storage area, the PIN registration unit 250 obtains the access right of the screen output unit 140 and the user input unit 145 according to a designated procedure, And receives the PIN information through the user input unit 145 and stores the PIN information in the PIN storage area. The PIN registration unit 250 may encrypt the PIN information according to a designated encryption scheme and store the encrypted PIN information in the PIN storage area. The general OS 110 can not access the PIN storage area.
Referring to FIG. 2, the program (n) 200 of the general OS 110 includes an information checking unit 205 for checking signature subject information to be digitally signed using a user's certificate while performing a specified operation, (S) 240 of the secure OS 120. The secure OS 120 may be configured to perform a series of procedures for transferring the signature target information to the secure OS 120 through the general kernel 115, And a linkage procedure unit 210 for checking the allocated memory area and providing the checked signature target information to the memory area. Meanwhile, according to another embodiment of the present invention, the process of allocating the memory area or checking the pre-allocated memory area may be performed through the program (s) 240 of the secure OS 120, (s) 240 to allocate / verify the memory area may be included as a scope of right.
The program (n) 200 is executed in the general OS 110 and performs at least one designated operation such as banking, payment, and authentication. The information checking unit 205 identifies a user's certificate To identify the signature target information to be electronically signed. The signature target information includes at least one of authentication information for certificate login, authentication information for user authentication, a transaction for preventing denial of a transaction corresponding to a transaction operation performed through the program (n) 200 of the general OS 110, And / or information.
According to the first signature verification method of the present invention, the information verification unit 205 can receive the signature subject information from the designated server through the communication means of the wireless terminal 100. [ For example, if the program (n) 200 is a banking app, the information verifying unit 205 receives signature target information including transaction information corresponding to a banking transaction through the banking app from a designated banking server . Alternatively, when the program (n) 200 is a payment application, the information verification unit 205 may receive signature target information including payment information for payment through the payment application from the designated payment server. Alternatively, when the program (n) 200 is an authentication app, the information verification unit 205 may receive signature object information including authentication information for authentication through the authentication application from a specified authentication server.
According to the second signature verification method of the present invention, the information verification unit 205 can generate signature subject information during a designated operation of the program (n) 200. [ For example, when the program (n) 200 is a banking app, the information identifying unit 205 may generate signature information including transaction information input through the banking app. Alternatively, when the program (n) 200 is a payment application, the information verification unit 205 may generate signature target information including payment information inputted through the payment application. Or the program (n) 200 is an authenticated app, the information verifying unit 205 verifies whether the program (n) 200 is a signature target including authentication information (e.g. MIN, IMSI, IMEI, etc. of the wireless terminal 100) Information can be generated.
According to the third signature verification method of the present invention, the information verification unit 205 can verify signature subject information by combining at least two of the first and second signature verification methods. For example, some of the signature subject information may be received from a designated server and the other part may be generated during a specified operation of the program (n)
The interworking procedure unit 210 checks whether the secure OS 120 is loaded in the wireless terminal 100 at least at the first execution of the program (n) 200 installed in the general OS 110 And a program (s) 240 for managing the user's certificate and processing the digital signature to the secure OS 120 when the secure OS 120 is installed in the wireless terminal 100 Can be performed. If the secure OS 120 manages the user's certificate and processes a digital signature, the interworking procedure unit 210 transmits the program s (s) 240 to the secure OS 120, (S) 240 installed in the secure OS 120 and / or information identifying the program (s) 240 installed in the secure OS 120 may be stored and maintained in the general OS storage area .
When the signature object information is confirmed through the information verification unit 205, the interworking procedure unit 210 determines that the program (s) 240 is installed in the secure OS 120 based on the identification information (S) 240 on the secure OS 120 and / or verifies the program (s) 240 mounted on the secure OS 120.
When the signature object information is confirmed and / or the program (s) 240 of the secure OS 120 is confirmed through the identification information, the interworking procedure unit 210 transmits the secure () (N) 200 immediately before switching to the OS 120. The program (n) The interworking procedure unit 210 manages the certificate of the user through the general kernel 115 at the time of switching the OS of the wireless terminal 100 from the general OS 110 to the secure OS 120, The OS of the wireless terminal 100 is switched from the normal OS 110 to the secure OS 120 by storing the state information of the signature process program 240 in the normal OS storage area, (N) 200, the interface state of the program (n) 200, and the state of the communication session state of the program (n) 200 when switching from the general OS 120 to the general OS 110 Etc.) can be maintained.
According to an embodiment of the present invention, the interworking procedure unit 210 may be configured to execute the security OS 120 immediately before switching to the secure OS 120 through the general kernel 115 (for example, immediately before the security OS 120 is driven via the SMC command) The program (n) 200 may be initialized and / or the general OS 110 (n) may be initialized in the process of switching the general OS 110 to the secure OS 120 by maintaining the state information of the program When the OS of the wireless terminal 100 is switched from the secure OS 120 to the normal OS 110 even if an exceptional situation occurs such as a page fault occurs during the procedure of switching from the secure OS 120 to the secure OS 120, The state of the program (n) 200 can be restored to the state immediately before switching to the secure OS 120 using the state information.
(S) 240 of the secure OS 120 and / or the state information of the program (n) 200 is stored in the secure OS 120, (210) generates an SMC command for driving the secure OS (120) through the general kernel (115). The security monitor 125 verifies the validity of the SMC command and performs a procedure for driving the secure OS 120 according to the SMC command when the verification is successful.
Meanwhile, at a predetermined point in time before, during, or after the start of the operation of the secure OS 120, the linkage procedure unit 210 accesses the secure OS 120 while being accessible from the program (n) (S) 240 of the program (s) 240, or identifies pre-allocated memory areas. For example, the allocated memory area may include a shared memory for inter-process communication between the program (n) 200 of the general OS 110 and the program (s) 240 of the secure OS 120 have. While the normal shared memory is allocated in the OS for inter-process communication within the same OS, the memory region of the present invention is used for inter-process communication of heterogeneous processes executed in heterogeneous OS including general OS 110 and secure OS 120 Which is a shared memory for providing the data.
According to the first memory area allocation method of the present invention, the linkage procedure unit 210 allocates the memory area on the general OS 110 or checks the memory area allocated on the general OS 110 . In this case, the security monitor 125 can access or monitor the memory area of the general OS 110, and the program (s) 240 of the secure OS 120 can be accessed through the security monitor 125 (Or access to) the memory area of the OS 110 indirectly.
According to the second memory area allocation method of the present invention, the linking procedure unit 210 allocates the memory area on the security monitor 125 or the memory area allocated to the security monitor 125 have. In this case, the interworking procedure unit 210 can allocate the memory area to the security monitor 125 or check the memory area allocated to the security monitor 125 through the SMC command.
According to the third memory area allocation method of the present invention, the interworking procedure unit 210 can access (or access) the program (n) 200 and can also access the program (s) 240 (Or connectable) to the security server on the network, or to identify the memory area allocated to the security server. When the memory area is allocated to the security server on the network, the program (n) 200 of the general OS 110 and the program (s) 240 of the secure OS 120 communicate with the security server, You can read or write data to and from the memory area.
The interworking procedure unit 210 may set the program (n) 200 as a process of the general OS 110 that refers to the allocated memory area. Preferably, the interworking procedure unit 210 provides a PID (Process ID) of the program (n) 200 to the memory area so that the program (s) 240 of the secure OS 120 operates The program (s) 240 can set the program (n) 200 as a process of the general OS 110 side to read data recorded in the allocated memory area.
When a memory area accessible by the program (s) 240 of the secure OS 120 is allocated through at least one of the first to third memory area allocation schemes, or when a pre-allocated memory area is identified, The procedure unit 210 can set a program (s) 240 designated as a process accessible from the secure OS 120 to the allocated memory area. For example, the interworking procedure unit 210 may store the address information of the allocated memory area (e.g., a memory address of a RAM, a memory address of a RAM provided in the processor, (S) 240 used by the secure OS 120 through the security monitor 125 and a network address (and / or identification value) identifying the memory area . ≪ / RTI >
(S) 240 of the secure OS 120 is allocated / verified and / or the memory region is made accessible in the program (s) 240 of the secure OS 120 The interworking procedure unit 210 may be configured to interlock with the security monitor 125 to prevent access to the memory area from other processes other than the program (n) 200 of the processes of the general OS 110 . Preferably, the interworking procedure unit 210 uses the memory access control function of the security monitor 125 to control the process of the general OS 110 in a process other than the program (n) Can not be accessed.
Meanwhile, a memory area accessible by the program (s) 240 of the secure OS 120 may be allocated, or a pre-allocated memory area may be identified through at least one of the first to third memory area allocation methods, and / Or if the access control procedure of the memory area is performed, the linking procedure unit 210 provides the signature target information confirmed through the information checking unit 205 to the memory area, The program (s) 240 processes the signature subject information by digital signature using the user's certificate.
When the secure OS 120 is activated by the SMC command and the program (s) 240 of the secure OS 120 is executed, the access right of the allocated / confirmed memory area is managed by the security monitor 125 (S) 240 of the secure OS 120. In this case,
Referring to FIG. 2, the program (s) 240 of the secure OS 120 may identify a memory area allocated through at least one of the first to third memory area allocation methods, And an interlock processing unit 255 for performing a procedure for interlocking.
When the security OS 120 is activated and the program (s) 240 of the secure OS 120 is executed, the interworking processor 255 interlocks with the operation procedure performed through the security monitor 125, (S) 240 and accesses the memory area through at least one of the first to third memory area allocation methods. Preferably, the interworking processor 255 may perform a procedure for obtaining an access right to the memory area.
Meanwhile, the interworking processor 255 may check the memory area at any time before referring to the memory area in the program (s) 240, and the interlocking processor 255 may check the memory area at a specific time The present invention is not limited thereto.
Referring to FIG. 2, when the user's PIN information is stored in the designated PIN storage area of the secure OS 120 through the PIN registration unit 250, the program (s) And a PIN authentication unit 260 receiving the PIN information through the input unit of the wireless terminal 100 and authenticating the validity.
When the secure OS 120 is activated and the program (s) 240 of the secure OS 120 is executed, the PIN authenticator 260 transmits the program (s) 240 to the screen output unit 140 and the user input unit 145, displays an interface for PIN authentication on the screen output unit 140, inputs PIN information through the user input unit 145, and compares the PIN information with PIN information stored in the PIN storage area (Or verification operation) to verify the validity of the input PIN information.
Referring to FIG. 2, the program (s) 240 of the secure OS 120 includes an information linkage unit 265 for confirming signature target information from a memory area shared with the program (n) 200, A certificate verification unit 270 for verifying a certificate of a user provided in the certificate storage area of the secure OS 120 or the
When the secure OS 120 is activated and the program (s) 240 of the secure OS 120 is executed and / or the PIN authentication is successful, the information interlocking unit 265 transmits the inter- (N) 200 of the generic OS 110, the signature object information corresponding to the transaction operation of the general OS 110 is confirmed.
When the secure OS 120 is activated and the program (s) 240 of the secure OS 120 is executed and / or the PIN authentication is successful, the certificate validation unit 270 determines whether the certificate storage unit 245 ) Of the security OS 120 or the certificate of the user stored in the
If the certificate of the user stored in the certificate storage area of the secure OS 120 or the
The signature key extractor 275 or the
When the digital signature value is generated, the digital signature providing unit 290 provides the digital signature value to the memory area confirmed through the linkage processing unit 255, The OS of the wireless terminal 100 is switched from the secure OS 120 to the normal OS 110. [ Preferably, the digital signature providing unit 290 records the digital signature value in the memory area so as to read or refer to the digital signature value through the program (n) 200 of the general OS 110 can do.
Meanwhile, when the digital signature value is generated, the encryption processing unit 285 encrypts the digital signature value according to a designated encryption method (for example, encrypts the digital signature value using a user public key) It is possible to provide the encrypted digital signature value to the memory area confirmed through the interlock processing unit 255. [ The digital signature value can be decrypted through the program (n) 200 of the general OS 110 or encrypted to be decrypted through a designated server authenticating the digital signature value.
According to another embodiment of the present invention, the digital signature unit 280 may include signature data including an electronic signature value generated by digitally signing the signature subject information through the signature key (for example, The digital signature providing unit 290 may provide the signature data to the memory area and may encrypt the signature data through the encryption processing unit 285 according to the method of operation, .
When the OS of the wireless terminal 100 is switched to the general OS 110 according to an embodiment of the present invention, the linkage procedure unit 210 of the program (n) 200 acquires the access right of the memory area (Or based on the acquired rights) to access the memory area. Meanwhile, the interworking procedure unit 210 of the program (n) 200 may restore the status of the program (n) 200 immediately before switching to the secure OS 120 using the status information.
Referring to FIG. 2, the program (n) 200 of the general OS 110 refers to the memory area and checks the digital signature value provided by the program (s) 240 of the secure OS 120 An electronic signature use unit 225 for sending the signature data including the digital signature value to a designated server or using the digital signature value for the operation of the program 200, And a data generation unit 220 for generating signature data including the digital signature value.
When the OS of the wireless terminal 100 is switched to the general OS 110, the digital signature verification unit 215 refers to the memory area in cooperation with the linkage procedure unit 210, (S) 240 of the program (s) 240 confirms the digital signature value provided to the memory area. If the digital signature verification unit 215 generates and provides the signature data including the digital signature value in the program (s) 240 of the secure OS 120, the digital signature verification unit 215 obtains the digital signature value from the memory area It is possible to confirm the signature data included. If the digital signature value (or signature data) provided by the program (s) 240 of the secure OS 120 is encrypted so as to be decrypted through the program (n) 200, the digital signature validation unit 215 ) Can decrypt the encrypted digital signature value (or signature data).
On the other hand, when the digital signature value is confirmed through the digital signature verification unit 215, the data generation unit 220 outputs the signature data including the digital signature value (for example, a combination of the digital signature value and the signature subject information) Can be generated. If the program (s) 240 of the secure OS 120 provides the signature data including the digital signature value, the data generation unit 220 may be omitted.
The digital signature using unit 225 transmits the signature data to the designated server through the communication means of the wireless terminal 100 or performs processing such that the signature data is used for the designated operation of the program (n) (E.g., banking, settlement, authentication, etc.) using the program (n) 200 is provided. If the signature data is generated through the program (s) 240 of the secure OS 120 and encrypted so as to be decrypted through the designated server, the digital signature use unit 225 transmits the signature data to the wireless terminal 100 Means for transmitting the encrypted signature data to the server.
FIG. 3 is a diagram illustrating a process of preparing a program (s) 240 in the secure OS 120 according to an embodiment of the present invention.
More specifically, FIG. 3 illustrates a process of loading a program (s) 240 in a secure OS 120 and storing a user's certificate. If the program (s) 240 is stored in the secure OS 120, It will be appreciated that various implementations of the process of preparing the program (s) 240 (e.g., omitting some of the steps or changing the order) may be inferred by referring to and / or modifying FIG. 3, The present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.
Referring to FIG. 3, a program (n) 200 of a general OS 110 is connected to a security OS 120 (or a wireless terminal 100) based on a model (or a type of a processor) ) (Trust zone) is mounted (300). If the secure OS 120 is installed in the wireless terminal 100, the program 200 performs a procedure for loading the program 240 specified in the secure OS 120 (305).
(S) 240 is loaded (310) in the secure OS 120 according to a designated procedure and the program (s) 240 is loaded into the certificate storage area of the secure OS 120 or the HSM 135 (315) whether the user's certificate is provided. If the certificate storage area of the secure OS 120 or the certificate of the user provided in the
If the issuance / copying process of the certificate is completed, the program (s) 240 stores (325) the user's certificate in the certificate storage area of the secure OS 120 or in the
When the program (s) 240 is loaded on the secure OS 120, the program 200 of the general OS 110 transmits the program 240 to the secure OS 120 (S) 240 mounted on the secure OS 120, and / or information identifying the presence of the program (s) 240 mounted on the secure OS 120.
4 is a diagram illustrating a transaction interlocking process between the general OS 110 and the security OS 120 according to an embodiment of the present invention.
In more detail, FIG. 4 shows a case where the program (n) 200 of the general OS 110 confirms the signature target information while performing the specified operation, Referring to FIG. 4 and / or modified by a person having ordinary skill in the art to which the present invention pertains, It is to be understood that the invention may be practiced otherwise than as specifically described herein, but it is to be understood that the invention may be practiced otherwise than as specifically described herein, The technical features are not limited by the method alone.
Referring to FIG. 4, a program (n) 200 of a general OS 110 performs a designated operation (400) implemented therein, and uses the user's certificate during the designated operation to transmit signature target information (405). If the signature object information is confirmed, the program (n) 200 manages the certificate of the user on the security OS 120 side of the wireless terminal 100 using the identification information and processes the electronic signature s) 240 is mounted (410). If the program (s) 240 is not loaded in the secure OS 120, the program 200 may execute a procedure for loading the program 240 into the secure OS 120 Can be performed.
Meanwhile, if the program (s) 240 is installed in the secure OS 120, the program (n) 200 may transmit status information of the program (n) 200 before switching to the secure OS 120 (S) 240 of the secure OS 120 by allocating a memory area accessible by the program (s) 240 of the secure OS 120 by switching the OS of the wireless terminal 100 to the secure OS 120, The allocated memory area is checked (420). If the memory area is allocated / confirmed, the program (n) 200 sets the access right of the program (n) 200 to the allocated / confirmed memory area, and at the same time, (S) 240 to access the memory area (step 425), providing the verified signature object information to the memory area (step 430) The OS of the wireless terminal 100 is switched to the secure OS 120 (435).
When the OS of the wireless terminal 100 is switched to the secure OS 120 and the program s 240 is executed 440, the program s 240 performs the process shown in FIG. 3 If the PIN information is registered in the PIN storage area of the secure OS 120 and acquires the access right to the screen output unit 140 and the user input unit 145 of the wireless terminal 100 in case of registration, And outputs the input interface and confirms the PIN information input through the interface (445). If the PIN information is inputted, the program (s) 240 authenticates the validity of the inputted PIN information through the PIN information stored in the PIN storage area (450). If the validity of the PIN information is not authenticated The program s 240 processes the OS of the wireless terminal 100 to be switched to the general OS 110 in step 455. If the OS of the wireless terminal 100 is switched to the general OS 110, (N) 200 of the general OS 110 restores the state of the program (n) 200 before switching to the secure OS 120 (460).
Meanwhile, when the validity of the PIN information is authenticated, the program (s) 240 identifies a memory area that is allocated through the program (n) 200 and can be shared with the program (n) 200 465). The memory area may be allocated through the program (s) 240 according to an implementation method, and the present invention may include an embodiment in which the program (s) 240 allocates the memory area. If the memory area accessible by the program (s) 240 is not confirmed, the program (s) 240 processes the OS of the wireless terminal 100 to switch to the general OS 110 (455) , When the OS of the wireless terminal 100 is switched to the general OS 110, the program n of the general OS 110 transmits the program n (n) before the switch to the secure OS 120 200 are restored (460).
Meanwhile, if a memory area accessible by the program (s) 240 is confirmed, the program (s) 240 confirms the access right to the memory area (470). If the access right to the memory area is not confirmed, the program (s) 240 processes the OS of the wireless terminal 100 to switch to the general OS 110 (455), and the wireless terminal 100 (N) 200 of the general OS 110 restores the state of the program (n) 200 before switching to the secure OS 120 when the OS of the general OS 110 is switched to the general OS 110 (460).
5 is a diagram illustrating a process of generating an electronic signature through the secure OS 120 and using the generated digital signature through the general OS 110 according to an embodiment of the present invention.
5 is a flowchart illustrating a process of using the digital signature in the program (n) 200 of the general OS 110 by providing the signature object information in the program (s) 240 of the secure OS 120 by digital signature 5, a digital signature is generated through the secure OS 120 and is transmitted to the general OS 110 through the general OS 110, It will be appreciated that various implementations of the process (e.g., omitting some of the steps or changing the order) may be inferred, but the present invention includes all of the methods contemplated above, The technical features thereof are not limited only by the method of implementation.
Referring to FIG. 5, a memory area shared by the program (s) 240 of the secure OS 120 and the program (n) 200 of the general OS 110 is checked through the process shown in FIG. 4 When the access right is confirmed, the program (s) 240 confirms the signature target information provided by the program (n) 200 of the general OS 110 (500) from the memory area. If the signature object information is not confirmed from the memory area, the program (s) 240 processes the OS of the wireless terminal 100 to switch to the general OS 110 (540) (N) 200 of the general OS 110 switches the state of the program (n) 200 before switching to the secure OS 120 when the OS of the general OS 110 is switched to the general OS 110 (545).
Meanwhile, when the signature object information is confirmed from the memory area, the program (s) 240 accesses the certificate storage area of the secure OS 120 or the user of the user of the
If the user's certificate is confirmed, the program (s) 240 or the
According to an embodiment of the present invention, when the digital signature value for the signature subject information is generated, the program (s) 240 transmits the digital signature value to the program (n) 200 (Step 520). According to an embodiment of the present invention, the program (s) 240 encrypts the digital signature value using a designated encryption method and provides the digital signature value to the memory area (520). The program (s) 240 processes the OS of the wireless terminal 100 to be switched to the general OS 110 (step 535). When the OS of the wireless terminal 100 is switched to the general OS 110 The program 200 of the general OS 110 restores the state of the program 200 before switching to the secure OS 120 in operation 540.
According to another embodiment of the present invention, when a digital signature value for the signature subject information is generated, the program (s) 240 generates (525) signature data including the digital signature value, And provides the signature data to a memory area shared with the program (n) 200 of the general OS 110 (530). According to an embodiment of the present invention, the program (s) 240 encrypts the signature data using a designated encryption method and provides the encrypted data to the memory area (530). The program (s) 240 processes the OS of the wireless terminal 100 to be switched to the general OS 110 (step 535). When the OS of the wireless terminal 100 is switched to the general OS 110 The program 200 of the general OS 110 restores the state of the program 200 before switching to the secure OS 120 in operation 540.
The program 200 of the general OS 110 identifies and accesses 545 a memory area shared with the program 240 of the secure OS 120, (Or signature data) provided by the program (s) 240 of the server 120 (550). If the digital signature value (or signature data) is not verified, the program (n) 200 outputs an error and initiates the operation of the program (n) 200 (555).
When the digital signature value is confirmed from the memory area according to an embodiment of the present invention, the program (n) 200 generates (560) signature data including the digital signature value, and transmits the signature (N) 200 by carrying out (565), or by processing (565) or making the signature data available for operation of the program (n) (200) (570). Meanwhile, if the program (s) 240 of the secure OS 120 encrypts the digital signature value so as to be decryptable through the program (n) 200, the program (n) Decrypting the digital signature value to generate signature data including the decrypted digital signature value in operation 560 and transmitting the signature data to a designated server in operation 565. In operation 565, The signature data may be processed to be used (565).
If the signature data including the digital signature value is confirmed from the memory area according to another embodiment of the present invention, the program (n) 200 transmits the signature data to the designated server (565) The program (n) 200 performs an operation procedure using signature data in operation (565) by making the signature data used in operation of the program (n) 200 (570). Meanwhile, when the program (s) 240 of the secure OS 120 encrypts the signature data so as to be decryptable through a designated server, the program (n) 200 transmits the encrypted signature data to the designated server (565). (N) 200 encrypts the signature data in a program (s) 240 of the secure OS 120 so as to be decryptable through the program (n) 200, the program (n) And decodes the data to be used for operation of the program (n) 200 (565).
100: wireless terminal 110: general OS
115: Generic kernel 120: Security OS
125: Security Monitor 130: Security Kernel
200: program (n) 205: information verification unit
210: Interworking Procedure Unit 215: Digital Signature Verification Unit
220: Data Generation Unit 225: Digital Signature Usage Unit
240: program (s) 245: certificate storage unit
250: PIN registration unit 355:
260: PIN authentication unit 265:
270: Certificate verification unit 275: Signature key extraction unit
280: digital signature unit 285:
290: Digital Signature Offering
Claims (15)
A first step in which the program (n) of the general OS allocates a memory area accessible by the designated program (s) of the secure OS or identifies an allocated memory area;
A second step of the program (n) providing signature target information to the memory area;
A third step of the program (s) of the secure OS verifying signature subject information from the memory area;
The program (s) extracts a signature key from a certificate provided in the secure OS and generates an electronic signature value for the signature subject information or verifies an electronic signature value generated through an HSM (Hardware Security Module) step;
The program (s) providing the digital signature value to the memory area; And
And a sixth step of the program (n) performing an electronic signature procedure using an electronic signature value of the memory area.
And a trust zone mounted on the processor.
Further comprising the step of identifying whether the program (n) has the program (s) assigned to the secure OS mounted or the identification information identifying the program (s) mounted on the secure OS in the general OS storage area,
Wherein the first step comprises the step of allocating or confirming the memory area by the program (n) when the program (s) is loaded on the secure OS. Way.
Further comprising the step of the program (s) storing the user's certificate in the certificate storage area of the secure OS or the HSM,
Wherein the first step comprises the step of allocating or confirming the memory area by the program (n) when the user's certificate is stored in the certificate storage area of the secure OS or in the HSM. A method for processing an electronic signature.
Further comprising a step in which the program (n) of the general OS receives signing object information from a designated server via communication means of the wireless terminal,
Wherein the second step comprises the step of providing the program object (n) to the memory area with the signature object information received from the server.
Further comprising the step of the program (n) of the general OS generating the signature subject information,
Wherein the second step comprises the step of providing the generated signature object information to the memory area by the program (n).
Further comprising the step of storing and holding status information on the program (n) immediately before the program (n) is switched to the secure OS,
Wherein the second step comprises: providing the signature object information to the memory area after the state information is stored in the program (n).
Further comprising the step of the program (n) operating a secure OS through an SMC (Secure Monitor Call) command.
Wherein the program (n) allocates the memory area to a general OS or identifies a pre-allocated memory area.
Wherein the program (n) allocates the memory area to the security monitor performing the switching procedure between the general OS and the security OS, or verifies the pre-allocated memory area.
Wherein the program (n) allocates a memory area accessible from a program (s) of a secure OS to a security server on the network or identifies a pre-allocated memory area.
Further comprising setting the program (n) as a process of the general OS side in which the program (n) refers to the memory area.
After the program (s) confirms the signature subject information from the memory area,
Receiving the PIN (Personal Identification Number) by accessing the input means of the wireless terminal through the security OS; And
And authenticating the validity of the PIN input through the secure OS. ≪ RTI ID = 0.0 > [10] < / RTI >
After the program (s) checks the digital signature value,
Further comprising encrypting the digital signature value so that the program s is decryptable via a designated server,
And the fifth step provides the encrypted digital signature value to the memory area.
After the program (s) provides the encrypted digital signature value to the memory area,
Further comprising: the program (n) verifying the encrypted digital signature value via the program (s) of the secure OS from the memory area,
The method of claim 6, wherein the digital signature process is performed using the encrypted digital signature value.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| KR1020150054342A KR101628614B1 (en) | 2015-04-17 | 2015-04-17 | Method for Processing Electronic Signature by using Secure Operating System |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| KR1020150054342A KR101628614B1 (en) | 2015-04-17 | 2015-04-17 | Method for Processing Electronic Signature by using Secure Operating System |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| KR101628614B1 true KR101628614B1 (en) | 2016-06-08 |
Family
ID=56194087
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| KR1020150054342A KR101628614B1 (en) | 2015-04-17 | 2015-04-17 | Method for Processing Electronic Signature by using Secure Operating System |
Country Status (1)
| Country | Link |
|---|---|
| KR (1) | KR101628614B1 (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2020171538A1 (en) * | 2019-02-19 | 2020-08-27 | Samsung Electronics Co., Ltd. | Electronic device and method for providing digital signature service of block chain using the same |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR101260934B1 (en) * | 2011-12-07 | 2013-05-06 | 한국과학기술연구원 | Method and system for application synchronization |
| KR20130101632A (en) * | 2012-02-16 | 2013-09-16 | 삼성전자주식회사 | Contents security system and method thereof |
| KR101364996B1 (en) * | 2012-02-24 | 2014-02-20 | 사단법인 금융보안연구원 | Electronic Financial System Using Hardware at Smart Terminal and Operating Method Thereof |
| JP2015037298A (en) * | 2013-08-16 | 2015-02-23 | Kddi株式会社 | Terminal, id-type signature ciphering method, and program |
-
2015
- 2015-04-17 KR KR1020150054342A patent/KR101628614B1/en active IP Right Grant
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR101260934B1 (en) * | 2011-12-07 | 2013-05-06 | 한국과학기술연구원 | Method and system for application synchronization |
| KR20130101632A (en) * | 2012-02-16 | 2013-09-16 | 삼성전자주식회사 | Contents security system and method thereof |
| KR101364996B1 (en) * | 2012-02-24 | 2014-02-20 | 사단법인 금융보안연구원 | Electronic Financial System Using Hardware at Smart Terminal and Operating Method Thereof |
| JP2015037298A (en) * | 2013-08-16 | 2015-02-23 | Kddi株式会社 | Terminal, id-type signature ciphering method, and program |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2020171538A1 (en) * | 2019-02-19 | 2020-08-27 | Samsung Electronics Co., Ltd. | Electronic device and method for providing digital signature service of block chain using the same |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105325021B (en) | Method and apparatus for remote portable wireless device authentication | |
| KR101628615B1 (en) | Method for Providing Safety Electronic Signature by using Secure Operating System | |
| KR20150101016A (en) | Method for Controlling Transaction Means by using End-To-End Mutual Authentication based on Near Field Communication | |
| KR101662947B1 (en) | Method for Providing Session Security by using Secure Operating System | |
| KR101628614B1 (en) | Method for Processing Electronic Signature by using Secure Operating System | |
| KR20160124336A (en) | Method for Providing Electronic Signature by using Secure Operating System | |
| KR101853970B1 (en) | Method for Relaying Authentication Number | |
| KR101628610B1 (en) | Method for Providing One Time Password by using Secure Operating System | |
| KR20170010341A (en) | Method for Processing Certification by using Secure Operating System | |
| KR101866031B1 (en) | Method for Providing Server type One Time Password by using Secure Operating System | |
| KR101505735B1 (en) | Method for Authenticating Near Field Communication Card by using Time Verification | |
| KR102358598B1 (en) | Method for Processing Two Channel Authentication by using Contactless Media | |
| KR20150065996A (en) | Method for providing safety login based on one time code by using user's card | |
| KR101702770B1 (en) | Method for Providing Security Keypad by using Secure Operating System | |
| US11974126B2 (en) | Method, first and second device and system for connecting to at least one chip | |
| KR101678793B1 (en) | Method for Verifying Integrity of Application by using Secure Operating System | |
| KR101777042B1 (en) | Card for Generating Electronic Signature based on Asynchronous Local Area Radio Communication | |
| KR101777041B1 (en) | Method for Generating One Time Password based on Asynchronous Local Area Radio Communication | |
| KR20170095797A (en) | Method for Processing Certification by using Secure Operating System | |
| KR101777043B1 (en) | Method for Generating Electronic Signature based on Asynchronous Local Area Radio Communication | |
| KR101846646B1 (en) | Method for Providing Security Communication based on Asynchronous Local Area Radio Communication | |
| KR20160114966A (en) | Method for Processing Certification by using Secure Operating System | |
| KR101777044B1 (en) | Card for Generating One Time Password based on Asynchronous Local Area Radio Communication | |
| KR101704249B1 (en) | Method for Controlling Integrated Circuit Chip by using Distributed Processing | |
| KR20160114961A (en) | Method for Providing One Time Password Linked Transaction by using Secure Operating System |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| E701 | Decision to grant or registration of patent right | ||
| GRNT | Written decision to grant | ||
| FPAY | Annual fee payment |
Payment date: 20190603 Year of fee payment: 4 |