Application access control method and electronic apparatus implementing the same

Patent metadata

Field	Value
Publication number	US-10078599-B2
Application number	US-201615200909-A
Country	US
Kind code	B2
Filing date	Jul 1, 2016
Priority date	Mar 13, 2013
Publication date	Sep 18, 2018
Grant date	Sep 18, 2018

Abstract

A method and apparatus of access control in an electronic apparatus implementing the method are provided. The method of operating an electronic apparatus includes detecting an access request to a resource from an application included in a first area of a memory by a processor of the electronic apparatus, in response to the access request, executing an access control module included in a second area of the memory to calculate a hash value of the application by the processor, determining whether a record exists in the memory, the record corresponding to the hash value and identification information of the application, by executing the access control module by the processor, and allowing access to the resource by the processor when the record exists in the memory.

First claim

What is claimed is:

1. An apparatus comprising:
memory including a first area having a first security level, and a second area having a second security level higher than the first security level;
a touchscreen; and
a processor adapted to:
detect a request for a registration to access the second area, from an application in the first area,
extract identification information of the application and a hash value of the application as representative information of the application,
decrypt an access table in the first area using a key in the second area,
determine whether the access table includes the representative information of the application,
encrypt, using the key, the representative information when the access table does not include the representative information of the application, and
register the representative information of the application in the access table.

2. The apparatus of claim 1 , wherein the memory comprises a volatile memory.

3. The apparatus of claim 2 , further comprising a non-volatile memory, and the processor is adapted to:
temporarily extract the application from the non-volatile memory to the first area.

4. The apparatus of claim 3 , wherein the processor is adapted to:
temporarily extract the access table from the non-volatile memory to the first area.

5. The apparatus of claim 1 , wherein the processor is adapted to:
acquire a user input allowing the application to access the second area using the touchscreen; and
update the access table further based at least in part on the user input.

6. The apparatus of claim 1 , wherein the processor is adapted to:
extract the key from a hardware or a firmware of the apparatus.

7. The apparatus of claim 1 , wherein the processor is adapted to:
update the access table by storing the encrypted representative information in a non-volatile memory.

8. The apparatus of claim 1 , wherein the processor is adapted to:
display, using the touchscreen, an information indicating that the representative information is included in the access table based at least in part on the determination that the access table includes the representative information.

9. The apparatus of claim 1 , wherein the second area comprises:
an area requiring authentication of access by the processor.

10. A method comprising:
detecting, by a processor included in an electronic device, a request for a registration to access a second area of memory included in the electronic device, from an application in a first area of the memory, the second area having a more enhanced security than that of the first area;
extracting identification information of the application and a hash value of the application as representative information of the application;
decrypting, by the processor, an access table in the first area using a key in the second area;
determining, by the processor, whether the access table includes the representative information of the application;
encrypting, by the processor using the key, the representative information when the access table does not include the representative information of the application; and
registering the representative information of the application in the access table.

11. The method of claim 10 , further comprising:
acquiring a user input associated with the request, using a touchscreen included in the electronic device.

12. The method of claim 10 , further comprising:
extracting the application to the first area from a non-volatile memory included in the electronic device.

13. The method of claim 10 , further comprising:
storing the encrypted representative information in the access table stored in a non-volatile memory included in the electronic device.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Korkishko Tymur
• Lee Kyunghee
• Pometun Sergiy
• Belousov Sergey
• Shutovskyi Vasyl
• Vasylskyy Vitaliy
• Androsov Andrey
• Dovgan Kateryna

Classifications

• G06F2212/1052

  Security improvement · CPC title

• G06F21/44

  Program or device authentication · CPC title

• H04L63/123 Primary

  received data contents, e.g. message integrity · CPC title

• G06F12/1408 Primary

  by using cryptography (for digital transmission H04L9/00) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title