User device and integrity verification method of the same

Patent metadata

Field	Value
Publication number	US-2016274918-A1
Application number	US-201615068111-A
Country	US
Kind code	A1
Filing date	Mar 11, 2016
Priority date	Mar 20, 2015
Publication date	Sep 22, 2016
Grant date	—

Abstract

Provided is an integrity verification method for a user device includes verifying integrity of a first verification target on a basis of a first integrity verification scheme during executing a boot-loader, uncompressing a kernel image according to the integrity verification result for the first verification target and verifying integrity of a second verification target on a basis of a second integrity verification scheme while the kernel image is uncompressed, and driving an operating system according to the integrity verification result for the second verification target and verifying integrity of a third verification target on a basis of a third integrity verification scheme while the operating system is driven.

First claim

What is claimed is:

1 . An integrity verification method of a user device, the integrity verification method comprising:
verifying integrity of a first verification target on a basis of a first integrity verification scheme during executing a boot-loader; uncompressing a kernel image according to the integrity verification result for the first verification target and verifying integrity of a second verification target on a basis of a second integrity verification scheme while the kernel image is uncompressed; and driving an operating system according to the integrity verification result for the second verification target and verifying integrity of a third verification target on a basis of a third integrity verification scheme while the operating system is driven, wherein the first verification target comprises the boot-loader and kernel image, the second verification target comprises a system component and files related to a pre-installed application, and the third verification target comprises the system component and files related to an application to be executed, and each of the first to third integrity verification schemes are a static verification scheme or a dynamic verification scheme according to the first to third verification targets.

2 . The integrity verification method of claim 1 , further comprising executing a boot control code to perform initialization before the boot-loader is executed.

3 . The integrity verification method of claim 1 , wherein the verifying of integrity of the first verification target comprises:
extracting integrity values of the boot-loader and kernel image; verifying integrities of the boot-loader and kernel image on a basis of the integrity values; and stopping the execution of the boot-loader when the integrities of the boot-loader and kernel image are damaged.

4 . The integrity verification method of claim 3 , wherein the first integrity verification scheme is the static verification scheme in which the integrity verification is performed every time the boor-loader is executed.

5 . The integrity verification method of claim 1 , wherein the verifying of integrity of the second verification target comprises:
detecting an event for the system component; verifying integrity of the system component on a basis of a preset system component verification policy before booting when the event is a load event to a memory; and performing the event for the system component when the integrity of the system component is ensured, and recording a log message without performing the event for the system component when the integrity of the system component is damaged.

6 . The integrity verification method of claim 5 , wherein the preset system component verification policy before booting comprises at least any one of first to fourth verification policies,
wherein the first verification policy indicates a policy for verifying integrity for all system components, the second verification policy indicates a policy for verifying integrity for an important system component among the system components, the third verification policy indicates a policy for grouping the system components to verify integrity, and the fourth verification policy indicates a policy for verifying integrity of the system component on a basis of an accumulated one way hash function.

7 . The integrity verification method of claim 5 , wherein the verifying of integrity of the second verification target further comprises verifying integrity of files related to the preset application.

8 . The integrity verification method of claim 7 , wherein the second integrity verification scheme comprises the dynamic verification scheme in which the integrity verification is performed according to whether an event for the system component occurs and the static dynamic verification scheme in which the integrity verification is performed for files related to the preset application.

9 . The integrity verification method of claim 1 , wherein the verifying of integrity of the third verification target comprises:
detecting an event for the system component; determining whether the event is a load event to the memory; reading a binary file of the system component when the event is the load event and reading the system component stored in the memory when the event is not the load event; verifying integrity of the read system component on a basis of a pre-determined system component verification policy; and performing the event when the integrity of the read system component is ensured, and recording a log message without performing the event when the integrity of the read system component is damaged.

10 . The integrity verification method of claim 9 , wherein the verifying of integrity of the third verification target further comprises:
verifying integrity of the installation file of the application to be executed; and stopping execution of the application to be executed when the integrity of the installation file of the application to be executed is damaged, and recording the log message.

11 . The integrity verification method of claim 10 , wherein the verifying of integrity of the third verification target further comprises:
detecting an event for a system class related to the application to be executed when the integrity of the installation file of the application to be executed is ensured; verifying the integrity of the system class on a basis of the pre-determined application verification policy; and forcibly terminating the application to be executed when the integrity of the system class is damaged.

12 . A user device comprising:
an application processor configured to perform a booting operation comprising a device initialization operation, boot-loader execution operation, kernel execution operation, and operating system driving operation; a memory to which a system component and application-related files are loaded according to a control of the application processor; a device integrity verifier configured to extract integrity values of the system component or the application-related files according to each operation of the booting operation; and a security device configured to verify integrity of a verification target on a basis of the extracted integrity values, wherein the device integrity verifier receives the verification result from the security device and stops an operation for the system component or application-related files according to the received verification result to terminate the booting operation.

13 . The user device according to claim 12 , wherein the security device comprises:
a communication unit configured to perform encrypted serial communication with the device integrity verifier; a shield memory configured to store data and key values related to integrity verification for the system component and application-related files; and a processor configured to perform the integrity verification on a basis of the extracted integrity values, wherein the security device performs encrypted communication with the device integrity verifier on the basis of the key value.

14 . The user device of claim 12 , wherein the device integrity verifier is driven according to a control of the application processor.

Assignees

• Electronics & Telecommunications Res Inst

Inventors

• Moon Yong Hyuk

Classifications

• G06F9/4406 Primary

  Loading of operating system · CPC title

• G06F9/542

  Event management; Broadcasting; Multicasting; Notifications · CPC title

• G06F2221/034

  Test or assess a computer or a system · CPC title

• G06F21/57

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• G06F21/575

  Secure boot · CPC title