KR20240108655A - Device with removable hardware security moudle and secutrity management method - Google Patents

Abstract

A security management method performed by a terminal including a communication unit and a processor is disclosed, according to some embodiments of the present disclosure. The security management method performed by the terminal includes detecting an attachment/detachment event of the hardware security module, a first authentication step of identifying the attached hardware security module when an attachment event of the hardware security module is detected, and use of the hardware security module. A second authentication step of authenticating authority, if the hardware security module is authenticated, applying a first security policy mode, if the first security policy mode is applied, forming an allowed secure communication channel, and the hardware It may include applying a second security policy mode when a detachment event of a security module is detected, and restricting the use of all communication channels when the second security policy mode is applied.

Description

Terminal and terminal security management method with detachable hardware security module {DEVICE WITH REMOVABLE HARDWARE SECURITY MOUDLE AND SECUTRITY MANAGEMENT METHOD}

This disclosure relates to a terminal with a detachable hardware security module and a security management method for the terminal. Specifically, it relates to a terminal and a security management method for the terminal that applies a security policy based on whether the hardware security module is detachable and the authentication result.

As the importance of data security increases with the expansion of online or Internet work environments, the need for dedicated hardware encryption equipment that can safely store, manage, and perform high-speed encryption processing for encryption keys that protect data is emerging. Accordingly, not only does it transfer, manage and protect the server's private key, which is the core of system operation, but also reduces the load on the server when performing cryptographic tasks such as issuing certificates, digital signatures, and signature verification, and improves encryption or decryption performance by improving hardware security. A module (Hardware Security Module, HSM) is being utilized.

The hardware security module can safely store and store confidential information such as private keys, and has a process and cryptographic operation device inside the device, enabling the generation of electronic signature keys and the creation and verification of electronic signatures. In addition, encryption keys can be managed, created, and stored using security tokens that have built-in processes or computing devices for encryption, decryption, and electronic signatures. These hardware security modules are removable.

In military units or security facilities, the scope of mobile device use by members needs to be strictly limited. Accordingly, in order to strengthen security in major security facilities, there is an urgent need for the development of technology that can control (restrict, control) the use of mobile terminals by members of the security facility.

Republic of Korea registered patent 10-1512502 (2015.04.09)

The present disclosure was developed in response to the above-described background technology, and includes a terminal with a detachable hardware security module and a security management method for the terminal, which prevents leakage of military secrets and controls the use of terminals within military units to strengthen security. We would like to provide.

The technical problems of the present disclosure are not limited to the technical problems mentioned above, and other technical problems not mentioned will be clearly understood by those skilled in the art from the description below.

According to an embodiment of the present disclosure to solve the above-described problem, a security management method performed by a terminal including a communication unit and a processor includes detecting a detachment event of a hardware security module, attachment of the hardware security module, When an event is detected, a first authentication step to identify the attached hardware security module, a second authentication step to authenticate the use authority of the hardware security module, and when the hardware security module is authenticated, a first security policy mode is applied. Step, when the first security policy mode is applied, forming an allowed secure communication channel and when a detachment event of the hardware security module is detected, applying a second security policy mode, the second security policy mode If applied, this may include restricting the use of all communication channels.

Identifying the hardware security module includes obtaining identification information of the attached hardware security module, and obtaining hardware security module group information assigned to the terminal based on usage permission mapping information obtained in advance from a predetermined server. It may include determining whether a hardware security module attached to the terminal belongs to the hardware security module group.

According to one embodiment, when the first security policy mode is applied, receiving at least one of a user's application execution command and application installation command, the metadata of the application related to at least one of the application execution command and the application installation command Confirming from data whether the application is an application classified into a preset whitelist, and if the application is an application classified into a preset whitelist, allowing at least one of installation and execution of the application. You can.

According to one embodiment, when the second security policy mode is applied, the method may include restricting installation and execution of the application regardless of the type of the application.

According to one embodiment, when the secure communication channel is established, data stored and transmitted/received by execution of the application classified into the whitelist may be encrypted or decrypted by the hardware security module.

Applying the first security policy mode may include selectively restricting functions of components of the terminal according to the first security policy.

Applying the second security policy mode may include restricting all functions of components of the terminal according to the second security policy.

According to one embodiment, when the terminal is rebooted, it is checked whether an available hardware security module is attached to the terminal, and if the available hardware security module is not attached to the terminal, the use The functions of the terminal are restricted according to the second security policy mode until an attachment event of a possible hardware security module is detected, and when the available hardware security module is attached to the terminal, the user authentication process of the terminal When the user authentication process is completed by starting, the use of at least some of the functions of the terminal may be permitted according to the first security policy mode.

According to one embodiment, a communication terminal may include a communication unit and a processor.

The processor detects an attachment/detachment event of a hardware security module, and when an attachment event of the hardware security module is detected, identifies an attached hardware security module, authenticates the attached hardware security module, and when the hardware security module is authenticated. , applies a first security policy mode, and when the first security policy mode is applied, forms an allowed secure communication channel, and when the hardware detachment event is detected, applies a second security policy mode, and when the second security policy mode is applied, When policy mode is applied, the use of all communication channels can be restricted.

The technical solutions obtainable from the present disclosure are not limited to the solutions mentioned above, and other solutions not mentioned above will become clear to those skilled in the art from the description below. It will be understandable.

The present disclosure was developed in response to the above-described background technology, and can provide a terminal with a detachable hardware security module and a security management method for the terminal. Through this, the use of terminals within military units can be controlled to prevent leaks of military secrets and strengthen security.

The effects that can be obtained from the present disclosure are not limited to the effects mentioned above, and other effects not mentioned can be clearly understood by those skilled in the art from the description below. .

Various aspects will now be described with reference to the drawings, where like reference numerals are used to collectively refer to like elements. In the examples below, for purposes of explanation, numerous specific details are set forth to provide a comprehensive understanding of one or more aspects. However, it will be clear that such aspect(s) may be practiced without these specific details. In other instances, well-known structures and devices are shown in block diagram form to facilitate describing one or more aspects.
1 shows a system that provides a security management service for a terminal according to an exemplary embodiment.
Figure 2 is a block diagram illustrating a terminal with a detachable hardware security module according to some embodiments of the present disclosure.
Figure 3 is a flowchart for explaining a terminal security management method according to some embodiments of the present disclosure.
FIG. 4 is a flowchart illustrating a process in which step S320 shown in FIG. 3 is performed.
Figure 5a is a conceptual diagram showing a case in which the first security policy mode is applied.
Figure 5b is an example diagram to explain a case in which the second security policy mode is applied.
Figure 6 is a flowchart showing the process of applying the first security policy mode.
Figure 7 is a flow chart to explain the operation of the terminal when rebooting.

Since the present invention can make various changes and have various embodiments, specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention. While describing each drawing, similar reference numerals are used for similar components.

Terms such as first, second, A, and B may be used to describe various components, but the components should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, a first component may be named a second component, and similarly, the second component may also be named a first component without departing from the scope of the present invention. The term and/or includes any of a plurality of related stated items or a combination of a plurality of related stated items.

When a component is said to be "connected" or "connected" to another component, it is understood that it may be directly connected to or connected to the other component, but that other components may exist in between. It should be. On the other hand, when it is mentioned that a component is “directly connected” or “directly connected” to another component, it should be understood that there are no other components in between.

The terms used in this application are only used to describe specific embodiments and are not intended to limit the invention. Singular expressions include plural expressions unless the context clearly dictates otherwise. In this application, terms such as “comprise” or “have” are intended to designate the presence of features, numbers, steps, operations, components, parts, or combinations thereof described in the specification, but are not intended to indicate the presence of one or more other features. It should be understood that this does not exclude in advance the possibility of the existence or addition of elements, numbers, steps, operations, components, parts, or combinations thereof.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as generally understood by a person of ordinary skill in the technical field to which the present invention pertains. Terms defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted in an ideal or excessively formal sense unless explicitly defined in the present application. No.

1 illustrates a system for performing a security management method of a terminal 100 according to some embodiments of the present disclosure.

Referring to FIG. 1, a system that provides a security management service may include a terminal 100, a hardware security module 200, a secure communication channel establishment network 300, and a service app server 400. That is, the terminal 100 to which the hardware security module 200 is attached may be connected to the service app server 400 through the secure communication channel formation network 300.

The terminal 100 may be a computing device used by a user belonging to an organization that requires security maintenance.

The hardware security module 200 may refer to a dedicated device that generates and stores encryption keys. The hardware security module 200 may refer to a dedicated device that generates and stores related keys for various applications that require encryption keys. In particular, internal information included in the hardware security module 200 may not be copied or reproduced externally.

According to one embodiment, the hardware security module 200 may generate random numbers using an algorithm. The hardware security module 200 can provide a defense function against the following attacks to steal encryption keys. The hardware security module 200 can use a dedicated OS (Operation System) and software to prevent attacks using the network. The hardware security module 200 may provide a defense function against physical attacks. When the hardware security module 200 is attacked from the outside, it can be set to destroy the stored encryption key on its own.

The hardware security module 200 according to an embodiment of the present invention may be a device that has obtained KCMVP (Korea Cryptographic Module. Validation Program) certification. KCMVP is a system that certifies the security of hardware security solutions that meet the government's security requirements, such as encryption module stability and implementation suitability, and the hardware security module 200 may be a device that complies with the relevant verification standards.

The hardware security module 200 can provide higher stability than a conventional security device that installs a cryptographic library in a server and performs calculations. In the prior art, the cryptographic function is performed according to the algorithm received from the cryptographic library in the application program, and the information and password can be passed as variables.

According to one embodiment, the hardware security module 200 may be attached to the terminal 100. The terminal 100 can operate with the hardware security module 200 attached. Before the hardware security module 200 is attached, the terminal 100 may have limited functionality.

According to one embodiment, the terminal 100 and the hardware security module 200 may be paired and provided to the user. For example, an administrator at a military unit may provide a user with a terminal 100 and a hardware security module 200 as a set. The administrator can receive delivery of a commercial smartphone, register the terminal identification information in the military network, and register those subject to permission to use the terminal as users. Administrators can register hardware security modules for those subject to permission and proceed with the permission process. The usage authorization procedure may be a procedure that must be performed separately so that a specific hardware security module can be used in a paired terminal. Administrators may need to install security software separately on the terminal. The administrator can perform a testing and verification process to check whether the function is functional after all procedures.

The secure communication channel forming network 300 may include wired Internet including dedicated lines, wireless Internet, mobile communication network, satellite communication network, etc. The secure communication channel forming network 300 may be a closed network such as a 5G wireless communication network, a Long Term Evolution (LTE) wireless communication network, a Local Area Network (LAN), or a Wide Area Network (WAN), or an open network such as the Internet. You can. The Internet uses the TCP/IP protocol and several services that exist at its upper layer, such as HTTP (Hyper Text Transfer Protocol), Telnet, FTP (File Transfer Protocol), DNS (Domain Name System), SMTP (Simple Mail Transfer Protocol), and SNMP. It refers to a worldwide open computer network structure that provides (Simple Network Management Protocol), NFS (Network File Service), and NIS (Network Information Service).

According to one embodiment, the secure communication channel forming network 300 may be a 5G communication network. The secure communication channel forming network 300 may vary depending on the security policy applied to the terminal 100.

According to one embodiment, the secure communication channel forming network 300 may be a network in which a secure communication channel is formed by the terminal 100 to which the hardware security module 200 is attached according to an applied security policy. The terminal 100 can communicate only through the network 300 that forms a secure communication channel based on the section encryption communication function in accordance with the security policy.

The service app server 400 may be a server related to performing the functions of a service app permitted according to the security policy applied to the terminal 100. The service app server 400 may store and manage user information of the terminal 100 and information of the hardware security module 200 matched to the terminal 100. The service app server 400 may store and manage authentication information (eg, user account information and password, etc.) of users who can use the terminal 100. The service app server 400 determines which security policy mode the terminal 100 will operate in, the first security policy mode and the second security policy mode, which will be described later, based on the user authentication information transmitted by the terminal 100, and makes the decision. Based on this, the security policy mode conversion of the terminal 100 can be approved. The service app server 400 may store identification information of a hardware security module 200 that is commercially available for the terminal 100 and distribute the identification information of the corresponding hardware security module to the terminal 100 . For example, a plurality of hardware security modules 200 may be set to be available for each terminal 100.

When the terminal 100 operates according to the first security policy mode, the service app server 400 may communicate with the terminal 100 through a predetermined secure communication channel. The service app server 400 may support the operation of a service application that can be used by the user of the terminal 100 according to the first security policy mode. For example, if the user of the terminal 100 is a member of a military unit, a service application available to the user may be a service application that supports resource management of the military unit or information exchange between military unit members.

FIG. 2 is a block diagram illustrating an example of a terminal 100 to which the hardware security module 200 is attachable and detachable according to some embodiments of the present disclosure.

Referring to FIG. 2, the terminal 100 may include a processor 110 and a communication unit 120. However, the above-described components are not essential for implementing the terminal 100, so the terminal 100 may have more or less components than the components listed above.

In the present disclosure, terminal 100 may refer to a personal communication device. The terminal 100 may be a communication device provided to an individual after being set up by an administrator belonging to a military unit. The terminal 100 may include a personal computer (PC), a note book, a mobile terminal, a smart phone, and a tablet PC, and can connect to a wired/wireless network. It can include all types of terminals.

The processor 110 can typically process the overall operation of the terminal 100. The processor 110 may provide or process appropriate information or functions to the user by processing signals, data, information, etc. input or output through the components of the terminal 100 or running a stored application program.

The processor 110 may consist of one or more cores, such as a central processing unit (CPU), a general purpose graphics processing unit (GPGPU), a tensor processing unit (TPU), etc. It may include a processor for data analysis.

In the present disclosure, the processor 110 may change the security policy mode by detecting an attachment/detachment event of the hardware security module 200.

Specifically, the processor 110 detects an attachment/detachment event of the hardware security module 200, and when an attachment event of the hardware security module 200 is detected, the processor 110 identifies the attached hardware security module and attaches the hardware security module 200. You can authenticate usage rights. If the hardware security module is authenticated, the first security policy mode may be applied and a permitted secure communication channel may be formed according to the first security policy.

In another embodiment, the processor 110 may detect a detachment event of the hardware security module 200 and apply a second security policy mode when the hardware detachment event is detected. When the second security policy mode is applied, the processor 110 may restrict the use of all communication channels.

Hereinafter, an example of a method of security management by the processor 110 will be described with reference to FIG. 3.

The communication unit 120 may include one or more modules that enable communication between the terminal 100 and the communication system and network 300.

FIG. 3 is a flowchart illustrating an example of a security management method for the terminal 100 according to some embodiments of the present disclosure.

Referring to FIG. 3, the terminal 100 detects an attachment/detachment event of the hardware security module 200 (S310), and when an attachment event of the hardware security module 200 is detected, the terminal 100 identifies the attached hardware security module 200. (S320), the authority to use the hardware security module 200 is authenticated (S330), and if the hardware security module is authenticated, the first security policy mode can be applied (S340). When the first security policy mode is applied, the terminal 100 can form a secure communication channel permitted according to the first security policy mode (S350).

According to another embodiment, the terminal 100 detects a detachment event of the hardware security module 200 (S310), and when the detachment event of the hardware security module 200 is detected, applies the second security policy mode ( S360), when the second security policy mode is applied, the use of all communication channels can be restricted (S370).

As described above, when the terminal 100 changes the security policy mode based on the attachment/detachment event of the hardware security module 200, and the security of the communication channel is not guaranteed by the hardware security module 200, the user's terminal ( 100) By restricting use, security information can be prevented from being leaked to the outside world.

According to one embodiment, the terminal 100 may have a physical structure to which an external device can be attached. By way of example, the terminal 100 may include a USB connector, a smart connector (pogo pin, etc.), and a Lightning 8-pin. In step S310, the terminal 100 may detect an event in which the hardware security module 200 is attached.

In step S320, the terminal 100 may identify the attached hardware security module detected in step S310. The terminal 100 may obtain identification information (eg, UUID, MAC, SERIAL) of the attached hardware security module and identify the attached hardware security module based on this.

Hereinafter, an example of how the terminal 100 identifies a hardware security module will be described with reference to FIG. 4.

In step S330, the terminal 100 may perform a procedure to authenticate usage rights for the user. The terminal 100 may provide an interface for authentication of users registered for use permission. Users can complete authentication using ID (identification) and password.

If the user fails authentication in step S330, the terminal 100 may provide an authentication failure alarm. The terminal 100 may provide a re-authentication interface a predetermined number of times. According to one embodiment, the terminal 100 may apply the second security policy mode when the user fails authentication more than a predetermined number of times.

In step S340, the terminal 100 may apply the first security policy mode. The terminal 100 may be set according to the encryption algorithm and key by calling an API (Application Programming Interface) provided by the hardware encryption module 200.

In step S340, the terminal 100 may execute and install some predetermined applications according to the first security policy mode. According to the first security policy mode, some components of the terminal 100 can be operated. For example, according to the first security policy, components such as the microphone, GPS, and camera of the terminal 100 may be controlled to be partially limited and partially used. In other words, the camera may not operate but the microphone may be controlled to operate.

In step S350, the terminal 100 may form a secure communication channel according to the first security policy applied in step S340. When a secure communication channel is formed in step S350, the terminal 100 and the service app server 400 can transmit and receive data through a secure communication channel allowed in the first security policy mode. Data transmitted by the terminal 100 may be encrypted and transmitted by a hardware security module. The service app server 400 can decrypt data encrypted by the hardware security module according to a pre-designated security protocol. Data received by the terminal 100 may be encrypted by the service app server 400. The terminal 100 can decrypt encrypted data using the hardware security module 200.

In step S360, the terminal 100 may apply the second security policy mode when a hardware security module 200 detachment event is detected. When the second security policy mode is applied, installation and execution of applications may be restricted regardless of the type of application. Additionally, when applying the second security policy mode, the functions of all components of the terminal can be restricted according to the second security policy.

As described above, based on the attachment/detachment event of the hardware security module 200, the terminal 100 may restrict the functions of the components of the terminal 100 or permit the use of the functions according to the first or second security policy mode. You can. Additionally, in the first security policy mode, communication between the terminal 100 and the service app server 400 can be performed through a previously permitted secure communication channel. Through this, communication security can be strengthened by having data encrypted and decrypted by the hardware security module 200 in the first security policy mode. Additionally, in the second security policy mode, all communication channels can be blocked to prevent data from being exposed to the outside when the hardware security module 200 is not involved.

In step S370, the terminal 100 may restrict the use of all communication channels based on the second security policy mode.

FIG. 4 is a flowchart illustrating a process in which step S320 shown in FIG. 3 is performed.

Referring to FIG. 4, the terminal 100 acquires identification information of the attached hardware security module 200 (S322), and determines the hardware allocated to the terminal based on usage permission mapping information obtained in advance from a predetermined server. Security module group information can be obtained (S324), and it can be determined whether the hardware security module attached to the terminal belongs to the hardware group (S326).

The terminal 100 may store information about the hardware security module 200 that the terminal 100 can use in advance. For example, the information of the hardware security module 200 may be stored in the terminal 100 in advance by the distributor of the terminal 100. As another example, the terminal 100 may obtain information about the available hardware security module 200 from the service app server 400. For example, there may be one or more hardware security modules 200 that the terminal 100 can use. The terminal 100 may obtain and store in advance information on the hardware security module 200 or a group of hardware security modules that it can use. Hereinafter, information about the hardware security module 200 or a group of hardware security modules that the terminal 100 can use is described as usage permission mapping information.

In step S322, the terminal 100 may recognize the Universally Unique IDentifier (UUID), MAC, and SERIAL information of the hardware security module 200.

The terminal 100 may obtain hardware security module group or hardware security module information assigned to the terminal based on usage permission mapping information.

In step S326, the terminal 100 can authenticate the attached hardware security module by checking whether the identification information obtained in step S322 is included in the hardware security module group information obtained in step S324.

Through this, it may be possible for the terminal 100 to set up a secure communication channel using only the hardware security module 200 preset by a security manager or the like. In addition, security management of the terminal 100 can be facilitated by blocking in advance the use of a hardware security module that cannot form a secure communication channel with the service app server 400.

Figure 5a is an example diagram to explain a case in which the first security policy mode is applied.

Referring to FIG. 5A, when the first security policy mode is applied, only network channels previously permitted according to the first security policy can be activated. Pre-allowed network channels may include 5G networks, LTE networks, etc., but the embodiment is not limited thereto. As an example, the terminal 100 allows only 5G wireless communication connections, and can disconnect all networks such as WiFi (Wireless Fidelity), Bluetooth, and tethering that are unsuitable for forming a secure communication channel. . Accordingly, the terminal 100 can form a secure communication channel using a preset network (for example, a 5G network or an LTE network).

Figure 5b is an example diagram to explain a case in which the second security policy mode is applied.

Referring to FIG. 5B, when the second security policy mode is applied, connections to all networks may be disconnected according to the second security policy. During this process, all previously maintained communication channel sessions may be terminated.

Figure 6 is a flowchart illustrating the process of applying the first security policy mode.

Referring to FIG. 6, when a command for executing and installing an application is input (S610), the terminal 100 checks whether the application belongs to the whitelist classification (S620), and when it is confirmed that it belongs to the whitelist, the input command can be allowed. Whitelist classification may be specified in advance by an administrator of the service app server 400, etc. The whitelist classification may include identification information of applications that the service app server 400 can provide services through a secure communication channel.

In step S610, the user may input a command to run or install an application on the terminal.

In step S620, the terminal 100 may obtain application identification information from the application metadata input in step S610. The terminal 100 can check whether the identification information of the application belongs to the whitelist classification.

In step S630, if the corresponding application is included in the whitelist, the stored and transmitted/received data resulting from the execution of the application classified as whitelisted is encrypted or decrypted by the hardware security module to execute and install the application. can be allowed.

Figure 7 is a flow chart to explain the operation of the terminal when rebooting.

Referring to FIG. 7, when the terminal 100 is rebooted, it checks whether the available hardware security module 200 is attached to the terminal 100 (S720), and determines whether the available hardware security module 200 is attached to the terminal 100. ) is not attached to the terminal 100, restricts the function of the terminal 100 according to the second security policy mode until an attachment event of the available hardware security module 200 is detected, and , when the available hardware security module 200 is attached to the terminal 100, the user of the terminal 100 is authenticated (S730), and the terminal 100 is configured according to the first security policy mode. The use of at least some of the functions may be permitted (S740).

In step S710, the terminal 100 may run a security management process in the background.

When the terminal 100 is rebooted in step S720, a process for checking whether the hardware security module 200 is attached can be created. Even in a state where the user cannot use the terminal 100, the terminal 100 can independently determine whether the hardware security module 200 is attached or detachable. In other words, even when rebooting, the security management process may continue to run in the background. If the hardware security module 200 is in a detached state or a detachment event is detected, the terminal 100 can proceed with the user authentication process on its own.

According to one embodiment, when the hardware security module 200 is detached, the terminal 100 may apply the second security policy mode and wait until the hardware security module 200 event is detected.

If attachment of the hardware security module 200 is confirmed in step S730, the terminal 100 may initiate a user authentication process. Accordingly, a user authentication interface can be provided to the user. Illustratively, the user may authenticate the user using an ID and password.

If user authentication is successful in step S730, the terminal 100 can apply the first security policy mode in step S740.

With reference to FIGS. 1 to 7 , the terminal and its security management method according to exemplary embodiments have been described. According to at least one embodiment, even if the security of the communication channel is not guaranteed by the hardware security module 200 as described above, the security policy mode is changed according to the connection state between the terminal 100 and the hardware security module 200. The use of the terminal 100 may be restricted. This can strengthen communication security and prevent security information from being leaked to the outside.

In addition, it may be possible for the terminal 100 to set up a secure communication channel using only the hardware security module 200 preset by a security manager, etc., and a hardware security module that cannot form a secure communication channel with the service app server 400. Security management of the terminal 100 can be facilitated by blocking the use of in advance.

The description of the presented embodiments is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be applied to other embodiments without departing from the scope of the disclosure. Thus, the present disclosure is not limited to the embodiments presented herein but is to be interpreted in the broadest scope consistent with the principles and novel features presented herein.

Claims (8)

In a security management method performed by a terminal including a communication unit and a processor,
Detecting an attachment/detachment event of a hardware security module;
When an attachment event of the hardware security module is detected, a first authentication step of identifying the attached hardware security module;
a second authentication step of authenticating authority to use the hardware security module;
If the hardware security module is authenticated, applying a first security policy mode;
When the first security policy mode is applied, forming an permitted secure communication channel;
applying a second security policy mode when a detachment event of the hardware security module is detected; and
A security management method comprising restricting the use of all communication channels when the second security policy mode is applied.
According to claim 1,
The step of identifying the hardware security module is,
Obtaining identification information of an attached hardware security module;
Obtaining hardware security module group information allocated to the terminal based on usage permission mapping information previously obtained from a predetermined server;
A communication terminal security management method comprising determining whether a hardware security module attached to the terminal belongs to the hardware security module group.
According to clause 2,
When the first security policy mode is applied,
Receiving at least one of a user's application execution command and application installation command;
Checking whether the application is an application classified into a preset whitelist from metadata of the application related to at least one of the application execution command and the application installation command;
A security management method comprising allowing at least one of installation and execution of the application when the application is classified into a preset whitelist.
According to clause 3,
When the second security policy mode is applied,
A security management method comprising restricting installation and execution of the application regardless of the type of the application.
According to clause 4,
When the secure communication channel is established, data stored and transmitted/received by execution of the application classified into the whitelist is encrypted or decrypted by the hardware security module.
According to clause 5,
The step of applying the first security policy mode is,
and selectively restricting functions of components of the terminal according to the first security policy.
The step of applying the second security policy mode is
A communication terminal security management method comprising restricting all functions of components of the terminal according to the second security policy.
According to clause 6,
When the terminal is rebooted, check whether an available hardware security module is attached to the terminal,
If the available hardware security module is not attached to the terminal, restrict the functions of the terminal according to the second security policy mode until an attachment event of the available hardware security module is detected,
When the available hardware security module is attached to the terminal, the user authentication process of the terminal is initiated, and when the user authentication process is completed, the use of at least some of the functions of the terminal is performed according to the first security policy mode. Allowed communication terminal security management method.
In a communication terminal,
Ministry of Communications and
Includes a processor,
The processor,
Detects attachment/detachment events of hardware security modules,
When an attachment event of the hardware security module is detected, identify the attached hardware security module,
Authenticate the attached hardware security module,
If the hardware security module is authenticated, apply the first security policy mode,
When the first security policy mode is applied, an permitted secure communication channel is formed,
When a detachment event of the hardware security module is detected, a second security policy mode is applied,
A communication terminal characterized in that when the second security policy mode is applied, the use of all communication channels is restricted.