KR102058035B1 - Security-enhanced wireless communication apparatus - Google Patents

Abstract

The present invention relates to a security-enhanced wireless communication device, comprising: a memory divided into a plurality of security partitions, a security accelerator providing a plurality of security algorithms, and a security system call in association with an independent security service application. Enforce a security policy for a plurality of secure element adapters and APIs for providing an application programming interface (API) and provide a right to use the security accelerator according to the security policy, or provide a corresponding security partition. It includes a processor that controls the virtual machine (Virtual Machine) that provides access rights for. Accordingly, the present invention can provide a security solution specialized for a multi-purpose service using a virtual machine.

Description

Security-enhanced wireless communications device {SECURITY-ENHANCED WIRELESS COMMUNICATION APPARATUS}

TECHNICAL FIELD The present invention relates to wireless communication technology, and more particularly, to a security-enhanced wireless communication device capable of providing a security solution specialized for a multi-purpose service using a virtual machine.

Wireless push-to-talk (PTT) systems can be used in environments that require a group of multiple people, ie members, to communicate with each other in a PTM format. Examples of environments in which push-to-talk (PTT) applications may be used may include workgroup communications, secure communications, construction site communications, and local military communications. Push-to-talk (PTT) service corresponds to a typical half-duplex, and only one member can transmit information from another member at a given time. Push-to-talk (PTT) services are also important for security, but they are very vulnerable.

Korean Patent Registration No. 10-0978987 (Aug. 24, 2010) relates to a method and apparatus for establishing a fast security session in a half-duplex AD-HOC group voice cellular network channel, and to a security group communication in a wireless dispatch system including a device group. A technique is provided, and a device group can include a first secure device in communication with a plurality of second secure devices via a channel.

Korean Patent No. 10-1048523 (2011.07.05) relates to a multi-function radio, which can communicate with a mobile phone using Bluetooth, can receive radio, and has a PTT (Push to talk) switch mounted outside Wireless communication between PTT and PTT is useful for enjoying leisurely activities (eg bicycles, inline, motorcycles, etc.) with both hands free. Will be planted.

Korea Patent Registration No. 10-0978987 (2010.08.24) Korea Patent Registration No. 10-1048523 (2011.07.05)

An embodiment of the present invention is to provide a security-enhanced wireless communication device that can provide a security solution specialized for multi-purpose services using a virtual machine.

An embodiment of the present invention is to provide a security-enhanced wireless communication device that can determine an independent security policy for each security service, and can apply an independent security algorithm according to the security policy.

An embodiment of the present invention is to provide a security-enhanced wireless communication device that can control the use rights of the security accelerator or the access rights to the security partition according to the security policy.

Among the embodiments, the security-enhanced wireless communication device includes a memory divided into a plurality of security partitions, a security accelerator providing a plurality of security algorithms, and a security system call API in association with each independent security service application. Enforces a security policy with respect to a plurality of secure element adapters and the security system call API providing an application programming interface, and provides a right to use the security accelerator according to the security policy, or to a corresponding security partition. It includes a processor that controls a virtual machine that provides access rights.

The processor may set one of the plurality of secure element adapters as a chip operating system for a service relating to a smart card, and set the other as a file operating system for a service regarding remote file processing.

The chip operating system may store the payment request in a cloud server by transmitting a payment request to a payment approval device as a cloud message through a security system call API used in the payment process of the smart card.

When the chip operating system successfully receives the approval of the payment request, the chip operating system permits access to the security partition for the smart card, which is one of the plurality of security partitions, through the security accelerator, so that the corresponding security service application is connected to the security partition for the smart card. It is possible to prevent access to a payment method.

The chip operating system may provide the payment processing device with payment information derived from the payment means and fully encrypted by the security accelerator.

The file operating system may transmit the partially encrypted file to a file receiving and storage device by generating a partially encrypted file through the security accelerator by using a security system call API in a process of directly transmitting a P2P file.

The file operating system may generate the partially encrypted file by dividing the original file into a plurality of fragments and alternating the original fragment and the encrypted fragment.

The processor sets another one of the plurality of secure element adapters as a PTT operating system for a PTT service, and the PTT operating system directly accesses the P2P file by the file operating system through a secure system call API used before the PTT transmission process. Interfering with the transmission, the transmission of the variable encrypted PTT message is first processed through the security accelerator, and the variable encryption may be performed by a differential security algorithm according to the workload of the processor.

The disclosed technique can have the following effects. However, since a specific embodiment does not mean to include all of the following effects or only the following effects, it should not be understood that the scope of the disclosed technology is limited by this.

The wireless communication device with enhanced security according to an embodiment of the present invention may determine an independent security policy for each security service, and apply an independent security algorithm according to the security policy.

The wireless communication device with enhanced security according to an embodiment of the present invention may control the use rights of the security accelerator or the access right for the security partition according to the security policy.

1 is a diagram illustrating a security enhanced wireless communication system according to an embodiment of the present invention.
FIG. 2 is a block diagram illustrating the wireless communication device in FIG. 1.
3 is a block diagram illustrating the secure element in FIG. 2.
4 is a flowchart illustrating a process of providing a smart card payment service through a chip operating system by a wireless communication device according to an embodiment of the present invention.
5 is an exemplary diagram illustrating a process of generating a partially encrypted file in a file operating system.
6 is a view for explaining the main functions provided in the security-enhanced wireless communication device according to an embodiment of the present invention.

Description of the present invention is only an embodiment for structural or functional description, the scope of the present invention should not be construed as limited by the embodiments described in the text. That is, since the embodiments may be variously modified and may have various forms, the scope of the present invention should be understood to include equivalents capable of realizing the technical idea. In addition, the objects or effects presented in the present invention does not mean that a specific embodiment should include all or only such effects, the scope of the present invention should not be understood as being limited thereby.

On the other hand, the meaning of the terms described in the present application should be understood as follows.

Terms such as "first" and "second" are intended to distinguish one component from another component, and the scope of rights should not be limited by these terms. For example, the first component may be named a second component, and similarly, the second component may also be named a first component.

When a component is referred to as being "connected" to another component, it should be understood that there may be other components in between, although it may be directly connected to the other component. On the other hand, when a component is referred to as being "directly connected" to another component, it should be understood that there is no other component in between. On the other hand, other expressions describing the relationship between the components, such as "between" and "immediately between" or "neighboring to" and "directly neighboring to", should be interpreted as well.

Singular expressions should be understood to include plural expressions unless the context clearly indicates otherwise, and terms such as "comprise" or "have" refer to a feature, number, step, operation, component, part, or feature thereof. It is to be understood that the combination is intended to be present and does not exclude in advance the possibility of the presence or addition of one or more other features or numbers, steps, operations, components, parts or combinations thereof.

In each step, an identification code (e.g., a, b, c, etc.) is used for convenience of description, and the identification code does not describe the order of the steps, and each step clearly indicates a specific order in context. Unless stated otherwise, they may occur out of the order noted. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

The present invention can be embodied as computer readable code on a computer readable recording medium, and the computer readable recording medium includes all kinds of recording devices in which data can be read by a computer system. . Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. Generally, the terms defined in the dictionary used are to be interpreted to coincide with the meanings in the context of the related art, and should not be interpreted as having ideal or excessively formal meanings unless clearly defined in the present application.

1 is a diagram illustrating a security-enhanced wireless communication system according to an embodiment of the present invention.

Referring to FIG. 1, a security enhanced wireless communication system (hereinafter, referred to as a wireless communication system) 100 may include at least two wireless communication devices 110.

The wireless communication device 110 may correspond to a push-to-talk (PTT) terminal capable of using a real-time wireless communication service including one-to-one or one-to-many instant communication. The wireless communication device 111 of any one of the plurality of wireless communication devices 110 constituting the wireless communication system 100 may be connected to at least one wireless communication device 112 or 113 of the other wireless communication devices 112 and 113. It can be connected via a network and can send and receive messages.

FIG. 2 is a block diagram illustrating the wireless communication device in FIG. 1.

Referring to FIG. 2, the wireless communication device 110 may include a security service application 210, a security element adapter 220, a virtual machine 230, and a security element 240. It may include.

The security service application 210 may correspond to an application program for providing an independent security service provided by the wireless communication device 110. The wireless communication device 110 may provide a plurality of security services, and may include a security service application 210 that independently performs an operation for each security service to provide each security service.

For example, the security service application 210 corresponds to an application for providing smart card solution service, cloud network service, P2P direct communication service, P2P relay communication service, and file transfer / storage service. In addition, the present invention is not limited thereto and may correspond to an application capable of directly performing various types of security services provided by the wireless communication device 110.

The security service application 210 may be basically installed in the wireless communication device 110, and the wireless communication device 110 may directly download and install an installation related file through a network. The wireless communication device 110 may access an update server (not shown in FIG. 1) and periodically check whether the security service application 210 is updated, and automatically update when an update file exists. can do.

The secure element adapter 220 may interoperate one-to-one with the security service application 210 and may provide a secure system call application programming interface (API). The secure element adapter 220 may provide the security system call API to the security service application 210 that is interoperable with the corresponding secure element adapter 220 according to the security policy.

When the specific security service application 210 is executed, the wireless communication device 110 may generate a secure element adapter 220 and interwork the generated secure element adapter 220 with the generated secure element adapter 220 in a one-to-one manner. . The wireless communication device 110 may determine a security policy suitable for the corresponding security service application 210 and apply the determined security policy to the secure element adapter 220. The wireless communication device 110 may delete the secure element adapter 220 associated with the corresponding security service application 210 when the security service application 210 completes its operation and terminates.

The virtual machine 230 may manage the operation of the secure element adapter 220. The virtual machine 230 may be controlled by a processor (not shown in FIG. 2) included in the secure element 240. The processor will be described in detail with reference to FIG. 3.

The virtual machine 230 may enforce a security policy with respect to the plurality of secure element adapters 230 and the secure system call API. More specifically, the virtual machine 230 may force the plurality of secure element adapters 230 to provide a secure system call API to the secure service application 210 according to the security policy applied to each.

In one embodiment, the virtual machine 230 may differentially determine the security policy based on the content of the security service provided by the security service application 210. More specifically, the virtual machine 230 may determine the differential security policy in the order in which high security is required due to the nature of the service. For example, the virtual machine 230 may set a differential security policy in order of smart card solution service, file transfer / storage service, P2P relay communication service, P2P direct communication service, and cloud network service in order of applying high security standards. You can decide.

The virtual machine 230 may provide permission to use a security accelerator (not shown in FIG. 2) or access to a corresponding security partition of a memory (not shown in FIG. 2) according to a security policy. . Here, the security accelerator and the memory will be described in detail with reference to FIG. 3.

The security element 240 may be responsible for overall security processing of the wireless communication device 110. The secure element 240 can provide an execution environment in which the virtual machine 230 can operate and can control the operation of the virtual machine 230. The secure element 240 may provide an environment in which the respective security service applications 210 operate through the virtual machine 230, and use rights or memory for the security accelerator in the process of performing the security service applications 210. You can control access rights for.

3 is a block diagram illustrating the secure element in FIG. 2.

The secure element 240 can include a memory 310, a security accelerator 330, and a processor 350.

The memory 310 may be implemented as a flash memory, and may be divided into a plurality of security partitions. Herein, the security partition may correspond to a portion of the memory 310, and access may be restricted to be used for providing a corresponding security service in association with a specific security service application 210. Each of the secure partitions constituting the memory 310 may be associated with a particular secure service application 210 under the control of the virtual machine 230 under the control of the secure element 240.

The memory 310 may include a secondary memory device which is implemented as a nonvolatile memory such as a solid state disk (SSD) or a hard disk drive (HDD), and is used to store overall data necessary for the wireless communication device 110. It may include a main memory implemented with volatile memory such as random access memory (RAM). The memory 310 may be implemented independently of RAM or read only memory (ROM).

The security accelerator 330 may provide a plurality of security algorithms. The security service application 210 may apply a security policy by the virtual machine 230, and perform a service operation to which a corresponding security algorithm is applied by using the security accelerator 330 according to the applied security policy. The wireless communication device 110 may control usage rights for each security service application 210 to use the security accelerator 330 through the virtual machine 230.

The processor 350 may execute the security service application 210 associated with the main functions of the wireless communication device 110, manage the memory 310 that is read or written throughout the process, and may store the memory 310 in the memory 310. The synchronization time between volatile and nonvolatile memory can be scheduled. The processor 350 may control overall operations of the wireless communication device 110 and may be electrically connected to the memory 310 and the security accelerator 330 to control data flow therebetween. The processor 350 may be implemented as a central processing unit (CPU) of the wireless communication device 130.

In one embodiment, the processor 350 sets one of the plurality of secure element adapters 220 as a chip operating system for services relating to a smart card, and the other for services related to remote file processing. Can be set as a file operating system. Here, the chip operating system may correspond to system software required to provide a smart card solution service through the wireless communication device 110, and the file operating system may provide a file transfer and storage service through the wireless communication device 110. This may correspond to the system software required for the purpose. The chip operating system and the file operating system may control the operation of the associated security service application 210 under the control of the virtual machine 230.

In one embodiment, the chip operating system may store the payment request in the cloud server by transmitting the payment request to the payment approval device as a cloud message through a secure system call API used in the payment process of the smart card. More specifically, when the chip operating system receives the payment request signal based on the smart card information embedded in the wireless communication device 110, the payment request information is secured through the security system call API and then through the cloud network as a cloud message. The payment can be sent to the approved device.

Here, the security processing by the chip operating system may correspond to an operation for protecting the payment request information by applying a security algorithm and encrypting the payment request information including the personal information through a security system call API. In this case, the applied security algorithm may transmit the secured payment request information as a cloud message to the payment approval device through the cloud network according to the security policy enforced by the virtual machine 230. The payment approval device may be connected to the wireless communication device 110 through a cloud network, and when a payment request is received from a specific wireless communication device 110 while performing another task, the payment approval device transmits the payment request to the cloud server in the order received. Can be stored. The payment approval device may process the payment request in the order stored in the cloud server.

In one embodiment, the chip operating system permits access to the security partition for the smart card, which is one of a plurality of security partitions, via the security accelerator 330 upon successful receipt of the payment request. Access to payment methods in the security partition for smart cards can be prevented.

Since the smart card payment service corresponds to a service requiring high security, even if the chip operating system is a security service application 210 that provides the smart card payment service, the access to the secure partition for the smart card in which the payment method is stored is very strictly restricted. This can enhance security.

In one embodiment, the chip operating system may provide the payment processing device with payment information derived from the payment means and fully encrypted by the security accelerator 330. In order to protect payment information derived from a payment method, the chip operating system may encrypt the application by using a security algorithm having the strictest security standard through the security accelerator 330. Finally, the encrypted payment information is provided to the payment processing device, and the payment processing device performs the payment processing based on the payment information.

In one embodiment, the file operating system generates a partially encrypted file through the security accelerator 330 by using a security system call API in the process of transmitting a peer to peer (P2P) file directly, partially in a file receiving storage device. You can transfer encrypted files.

In one embodiment, the file operating system may generate the partially encrypted file by dividing the original file into a plurality of fragments and alternating the original fragment and the encrypted fragment. 5 is an exemplary diagram illustrating a process of generating a partially encrypted file in a file operating system. Referring to FIG. 5, the file operating system may divide the original file 510 into a plurality of fragments 551 and 553. The file operating system may apply the security algorithm through the security accelerator 330 to some of the plurality of fragments to generate encrypted fragments 553. The file operating system may generate the partially encrypted file 530 by alternating the original slice 551 and the encrypted slice 553.

In one embodiment, the file operating system may divide the original file into as many fragments as calculated through the following equation, and alternately generate the partially encrypted file by alternating the original fragment and the encrypted fragment.

[Equation]

Where k is the proportional constant, N is the number of segments to be split, P is the workload of the processor, F is the size of the original file, and S is the security level of the security policy. S may be normalized to a certain score according to the security level of the security policy, and the higher the security level may have a higher score.

The larger the size of the original file, the less workload the processor has, and the higher the level of security in the security policy, the more fragments the original file can have. The file operating system may encrypt some of the fragments divided into appropriate numbers according to the above equation by applying a security algorithm, and transfer the original file as it is by generating the partially encrypted file by alternating the original fragment and the encrypted fragments. It can be more secure than that.

In one embodiment, the file operating system may encrypt the entire file by applying a security algorithm. In addition, by considering only the part of the original file in consideration of the workload of the processor 350, the loss due to the workload of the processor may be compensated for by enhancing the security of the file. As a result, the file operating system can maintain a certain level of safety of file processing-related services as a whole.

In one embodiment, the processor 350 may set another one of the plurality of secure element adapters 220 as a PTT operating system for Push To Talk (PTT) service. Here, the PTT operating system may correspond to system software necessary to provide a PTT service through the wireless communication device 110.

In one embodiment, the PTT operating system first interrupts the transmission of the P2P file by the file operating system via the security system call API used before the PTT transmission process and preferentially processes the transmission of the variable encrypted PTT message through the security accelerator 330. can do.

The PTT operating system can provide the PTT service independently of the P2P file transfer, and can stop the P2P file transfer and process the PTT message first in the middle of the P2P file transfer process by the file operating system. . The virtual machine 230 may determine the priority of the operation as well as the operation between the secure element adapters 220, and manage the operation of the secure element adapter 220 according to the priority.

In one embodiment, the PTT operating system may generate a PTT message by applying a variable encryption that is performed by a different security algorithm according to the workload of the processor 350 through the security accelerator 330. More specifically, the PTT operating system may monitor the workload of the processor 350 in real time, and when the workload of the processor 350 is large, a security algorithm having a relatively low security standard is applied, and the work of the processor 350 is performed. When the load is small, encryption may be performed by applying a security algorithm having a relatively high security standard, thereby providing an independent PTT service to a work load of the processor 350.

4 is a flowchart illustrating a process of providing a smart card payment service through a chip operating system by a wireless communication device according to an embodiment of the present invention.

Referring to FIG. 4, the wireless communication device 110 may set one of the plurality of secure element adapters 220 as a chip operating system for a service related to a smart card through the processor 350 (step S410). The wireless communication device 110 may allow the chip operating system to transmit a payment request to the payment approval device as a cloud message through a security system call API used in the payment process of the smart card (step S430).

At this time, when the payment approval device receiving the payment request is processing another payment request, the payment request message may be stored in the cloud server. The payment request message stored in the cloud server may be processed by the payment approval device in order according to the storage order.

The wireless communication device 110 may allow the chip operating system to allow access to the smart card security partition through the security accelerator 330 when the approval of the payment request is received (step S470). The wireless communication device 110 may allow the chip operating system to provide the payment processing device with payment information derived from the payment means in the smart card security partition and fully encrypted by the security accelerator 330 (step S490).

6 is a view for explaining the main functions provided in the security-enhanced wireless communication device according to an embodiment of the present invention.

Referring to FIG. 6, the wireless communication device 660 may provide five security services, and provide a security service application 210 that independently performs an operation for each security service to provide each security service. It may include. It may be provided to the security service application 210 that is linked with the 220.

When the specific security service application 210 is executed, the wireless communication device 660 may generate the secure element adapter 220 and may interwork the generated secure element adapter 220 with the generated secure element adapter 220 one-to-one. . The wireless communication device 660 may manage the operation of the secure element adapter 220 through the virtual machine 230.

The security services provided by the wireless communication device 660 include smart card solution service 610, cloud network service 620, P2P direct communication service 630, and P2P relay communication service 640. ) And file transfer / storage service 650. The wireless communication device 660 may determine an independent security policy for each security service, and apply an independent security algorithm according to each security policy.

Although described above with reference to a preferred embodiment of the present invention, those skilled in the art will be variously modified and changed within the scope of the invention without departing from the spirit and scope of the invention described in the claims below I can understand that you can.

100: security enhanced wireless communication system
110: wireless communication device
210: security service application 220: secure element adapter
230: virtual machine 240: secure element
310: memory 330: security accelerator
350: processor
510: Source file 530: Encrypted file
551: original intercept 553: encrypted intercept
660: wireless communication device

Claims (8)

Memory divided into a plurality of secure partitions;
A security accelerator for providing a plurality of security algorithms; And
A security policy is enforced with respect to the security system call API and a plurality of security element adapters, each of which provides a security system call API in conjunction with an independent security service application. It includes a processor for controlling the virtual machine (Virtual Machine) that provides the use rights of the security accelerator or access rights for the security partition,
The processor sets one of the plurality of secure element adapters as a chip operating system for a service related to a smart card, the other as a file operating system for a service related to a remote file processing, and another one. To the PTT operating system for PTT (Push To Talk) service,
The chip operating system provides the payment processing device with payment information derived from a payment means in a security partition for a smart card, which is one of the plurality of security partitions, and fully encrypted by the security accelerator, and the file operating system provides an original file. The PTT operating system is divided into a number of fragments calculated based on the security load of the processor and the security policy of the processor. A security-enhanced wireless communication device, characterized in that it first processes transmission of a variable encrypted PTT message through the security accelerator, wherein the variable encryption is performed by a different security algorithm according to the workload of the processor. .
delete The method of claim 1, wherein the chip operating system
Security-enhanced wireless communication device, characterized in that for transmitting the payment request as a cloud message to the payment approval device through a secure system call API used in the payment process of the smart card to store the payment request in the cloud server. .
The method of claim 3, wherein the chip operating system
If the approval of the payment request is successfully received, allowing access to the security partition for the smart card, which is one of the plurality of security partitions, through the security accelerator to allow the corresponding security service application to the payment means in the security partition for the smart card. Security-enhanced wireless communication device, characterized in that preventing access.
delete The method of claim 1, wherein the file operating system
In the process of direct P2P (Direct Peer To Peer) file transmission, the security system call API is used to generate a partially encrypted file through the security accelerator to transmit the partially encrypted file to a file receiving storage device. Security-enhanced wireless communication device.
The system of claim 6, wherein the file operating system
And dividing an original file into a plurality of fragments and alternating an original fragment and an encrypted fragment to generate the partially encrypted file.
delete

Images