Image processing apparatus and control method thereof

• US 10,382,207 B2
• Filed: 04/05/2017
• Issued: 08/13/2019
• Est. Priority Date: 04/05/2016
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Chang-woo, Lee, Nam-gwon
• Primary Examiner(s): Leung, Robert B
• Assistant Examiner(s): Ho, Thomas
• Application Number:
  US15/479,951
• Publication Number:
  US 20170288878A1
• Time in Patent Office: 860 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

An image processing apparatus is provided. The image processing apparatus includes a storage configured to store an operating system (OS) of the image processing apparatus, a script file including a program code and a first electronic signature, and an interpreter program provided to execute the program code on the OS; and at least one processor configured to perform an authentication of the first electronic signature with the OS in response to the interpreter program executing the program code on the OS, and selectively permit or block the execution of the program code according to whether the first electronic signature passes or fails to pass the authentication.

Claims

1. An image processing apparatus, comprising:

a storage to store an operating system (OS) of the image processing apparatus, a script file including a program code and an electronic signature, and an interpreter program provided to execute the program code on the OS; and

a processor to execute the OS to;

evaluate a request for executing the program code of the script file,

identify whether the program code is to be executed by the interpreter program according to the evaluated request,

identify whether the electronic signature of the script file is authenticated if the program code is identified to be executed by the interpreter program, and

execute the interpreter program to interpret the program code into a language available for the OS if the electronic signature of the script file is identified to be authenticated, and execute the interpreted language.

2. The apparatus according to claim 1, wherein the electronic signature includes a code which is generated by converting the program code based on a determined algorithm.

3. The apparatus according to claim 2, wherein the determined algorithm includes a hash function.

4. The apparatus according to claim 1, wherein the script file further includes a separator to separate the program code and the electronic signature, and

wherein the electronic signature includes a code which is generated by converting the program code and the separator based on a determined algorithm.

5. The apparatus according to claim 2, wherein the electronic signature is generated by encrypting the code with a secret key, and

wherein the processor decrypts the electronic signature with a public key corresponding to the secret key.

6. The apparatus according to claim 5, wherein the processor:

compares a first authentication code generated by decrypting the electronic signature with the public key with a second authentication code generated by converting the program code based on the determined algorithm, and

determines that the electronic signature passes the authentication based on the first authentication code being equal to the second authentication code and that the electronic signature fails the authentication based on the first authentication code not being equal to the second authentication code.

7. The apparatus according to claim 1, wherein the processor identifies the interpreter program from among a plurality of programs executed on the OS, based on identification information appended to the interpreter program.

8. The apparatus according to claim 7, wherein the processor:

performs an authentication of another electronic signature appended to the identified interpreter program, and

performs the authentication of the electronic signature based on the other electronic signature passing the authentication, and blocks the execution of the program code without performing the authentication of the electronic signature based on the other electronic signature failing the authentication.

9. The apparatus according to claim 8, wherein the other electronic signature includes another code which is generated by converting an interpreter program code based on another determined algorithm.

10. The apparatus according to claim 9, wherein the other determined algorithm includes a hash function.

11. A control method of an image processing apparatus, the control method comprising:

storing an operating system (OS) of the image processing apparatus, a script file including a program code and an electronic signature, and an interpreter program provided to execute the program code on the OS;

evaluating a request for executing the program code of the script file,

identifying whether the program code is to be executed by the interpreter program according to the evaluated request;

identifying whether the electronic signature of the script file is authenticated if the program code is identified to be executed by the interpreter program, and

executing the interpreter program to interpreting the program code into a language available for the OS if the electronic signature of the script file is identified to be authenticated, and executing the interpreted language.

12. The method according to claim 11, wherein the electronic signature includes a code which is generated by converting the program code based on a determined algorithm.

13. The method according to claim 12, wherein the determined algorithm includes a hash function.

14. The method according to claim 11, wherein the script file further includes a separator to separate the program code and the electronic signature, and

wherein the electronic signature includes a code which is generated by converting the program code and the separator based on a determined algorithm.

15. The method according to claim 12, wherein the electronic signature is generated by encrypting the code with a secret key, and

wherein the electronic signature is decrypted with a public key corresponding to the secret key.

16. The method according to claim 15, further comprising:

comparing a first authentication code generated by decrypting the electronic signature with the public key with a second authentication code generated by converting the program code based on the determined algorithm, and

determining that the electronic signature passes the authentication based on to the first authentication code being equal to the second authentication code and that the electronic signature fails the authentication based on to the first authentication code not being equal to the second authentication code.

17. The method according to claim 11, wherein the identifying whether the program code is to be executed by the interpreter program includes identifying the interpreter program from among a plurality of programs executed on the OS, based on identification information appended to the interpreter program.

18. The method according to claim 17, wherein the identifying the interpreter program includes:

performing an authentication of another electronic signature appended to the identified interpreter program, and

performing the authentication of the electronic signature based on the other electronic signature passing the authentication, and blocking the execution of the program code without performing the authentication of the electronic signature based on the other electronic signature failing the authentication.

19. The method according to claim 18, wherein the other electronic signature includes another code which is generated by converting an interpreter program code based on another determined algorithm.

20. The method according to claim 19, wherein the other determined algorithm includes a hash function.