SECURE MODULE AND INFORMATION PROCESSING APPARATUS

• US 20120042380A1
• Filed: 04/26/2011
• Published: 02/16/2012
• Est. Priority Date: 08/10/2010
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited, Fujitsu Semiconductor Limited (Fujitsu Limited)
• Inventors: KOHIYAMA, Kiyoshi, Kawakami, Tatsuro, Yoshitake, Toshiyuki, Takakusu, Masakazu
• Granted Patent: US 9,177,117 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/14 against software analysis or reverse engineering, e.g. by obfuscation
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04N 21/4143 embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/443 OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8173 End-user applications, e.g. Web browser, game

Abstract

A secure module includes a generating unit that executes generation processing of generating a scanning program that causes scan processing, which generates unique code for a program under test, to be executed at a connected device and further executes update processing of randomly updating contents of the scanning program; a storage device storing therein the unique code for the program under test; and an authenticating unit that if the scanning program is executed by the connected device and executed with respect to the program under test stored at a designated storage area in the connected device, authenticates validity of the program under test stored at the designated storage area, based on the unique code stored in the storage device and execution results of the scanning program executed at the connected device.

Claims

1. A secure module comprising:

a generating unit that executes generation processing of generating a scanning program that causes scan processing, which generates unique code for a program under test, to be executed at a connected device and further executes update processing of randomly updating contents of the scanning program;

a storage device storing therein the unique code for the program under test; and

an authenticating unit that if the scanning program is executed by the connected device and executed with respect to the program under test stored at a designated storage area in the connected device, authenticates validity of the program under test stored at the designated storage area, based on the unique code stored in the storage device and execution results of the scanning program executed at the connected device.

2. The secure module according to claim 1, wherein the secure module is of a structure that prohibits internally stored information from being reference externally.

3. The secure module according to claim 1, wherein the generating unit executes the update processing periodically.

4. The secure module according to claim 1, wherein the generating unit executes the update processing at random intervals.

5. The secure module according to claim 1, wherein the generating unit, as the update processing, obfuscates a command of the scanning program.

6. The secure module according to claim 1, wherein the generating unit, as the update processing, changes an address that is to be scanned in the designated storage area and that has been specified by the scanning program.

7. The secure module according to claim 1, wherein the generating unit, as the update processing, changes a sequence of addresses that are to be scanned in the designated storage area and that are specified in a command group in the scanning program.

8. The secure module according to claim 1, wherein the generating unit, as the updating processing, changes contents of a computation command that is based on data specified by a command in the scanning program;

stores to the storage device, a computation result obtained consequent to the computation command post-change; and

adds a command to return the obtained computation result to the secure module.

9. The secure module according to claim 1, wherein the generating unit, as the updating processing, changes a command in the scanning program to a command dependent on an address at which the scanning program is stored in the connected device.

10. The secure module according to claim 1, wherein the generating unit, as the generating processing, randomly generates a scanning program having description content that is different while maintaining generation of code identical to the unique code.

11. The secure module according to claim 10, wherein the generating unit executes the generation processing periodically.

12. The secure module according to claim 10, wherein the generating unit executes the generation processing at random intervals.

13. The secure module according to claim 1, further comprising

a modifying unit that modifies the program under test into program code having description content that is different and a function that is the same, wherein

unique code for the modified program under test is written to the storage device, overwriting existing unique code.

14. The secure module according to claim 13, wherein the modifying unit obfuscates a command in the program under test.

15. The secure module according to claim 13, wherein the modifying unit shuffles a command in the program under test;

stores to the storage device, a table correlating a jump command specifying an address to which a jump is made and an address of the jump command;

changes contents of the jump command in the program under test post-shuffling, to a read-command for the table; and

writes to the designated storage area, the program under test including the read-command.

16. The secure module according to claim 13, wherein the modifying unit shuffles a command in the program under test;

stores to the storage device, a table correlating a jump command specifying an address to which a jump is made, a jump source command, and an address of the jump source command;

changes contents of the jump source command in the program under test post-shuffling, to a read-command for the table; and

writes to the designated storage area, the program under test including the read-command.

17. The secure module according to claim 13, wherein the modifying unit substitutes a given command in the program under test, with an encrypted command that is the given command encrypted, a read-command instructing reading from the secure module, and a decrypting command instructing decryption of the encrypted command;

stores to the storage device, a table correlating an address of the read-command and a decryption key that decrypts the encrypted command;

and writes to the designated storage area, the modified program under test.

18. The secure module according to claim 13, wherein the modifying unit substitutes a given command in the program under test, with a read-command instructing reading from the secure module;

stores to the storage device, a table correlating an address of the read-command and the given command pre-substitution; and

writes to the designated storage area, the modified program under test.

19. The secure module according to claim 13, wherein

the modifying unit, during execution of the scan program at the connected device, modifies the program under test into program code having description content that is different and a function that is the same, and

unique code for the modified program under test is written to the storage device, overwriting existing unique code.

20. An information processing apparatus comprising:

a processor;

memory; and

a secure module comprising;

a generating unit that executes generation processing of generating a scanning program that causes scan processing, which generates unique code for the program under test, to be executed by the processor and executes update processing of randomly updating contents of the scanning program;

a storage device storing therein the unique code for the program under test; and

an authenticating unit that if the scanning program is executed with respect to the program under test stored at a designated storage area in the memory, authenticates validity of the program under test stored at the designated storage area, based on the unique code stored in the storage device and execution results of the scanning program.