SMART CARD SERVICE METHOD AND APPARATUS FOR PERFORMING THE SAME

• US 20140115675A1
• Filed: 10/17/2013
• Published: 04/24/2014
• Est. Priority Date: 10/18/2012
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: LEE, Joong Soo, JUNG, Young Woo, AHN, Chang Won
• Granted Patent: US 9,503,454 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

Provided are a smart card service method and an apparatus for performing the same. The smart card service method includes receiving a certificate generation request from a terminal, transmitting the certificate generation request to an authentication processing device, and storing credential information with respect to the generated certificate in a virtual machine associated with the terminal in response to a certificate generation success message provided from the authentication processing device. Thus, it is possible to reduce costs in accordance with manufacturing smart card hardware, and support smart card services in a more enhanced security environment.

Claims

1. A smart card service method, which is performed in an apparatus enabling processing of digital data, the smart card service method comprising:

receiving a certificate generation request from a terminal;

transmitting the certificate generation request to an authentication processing device; and

storing credential information with respect to the generated certificate in a virtual machine associated with the terminal in response to a certificate generation success message provided from the authentication processing device.

2. The smart card service method of claim 1, before the storing of the credential information, further comprising:

verifying whether the virtual machine associated with the terminal exists; and

generating the virtual machine associated with the terminal when the virtual machine associated with the terminal does not exist.

3. The smart card service method of claim 1, after the storing of the credential information, further comprising:

receiving an authentication request from the terminal;

acquiring the credential information from the virtual machine associated with the terminal;

transmitting the authentication request to the authentication processing device using the acquired credential information; and

transmitting, to the terminal, an authentication result received from the authentication processing device.

4. The smart card service method of claim 1, after the storing of the credential information, further comprising:

receiving a certificate deletion request from the terminal;

acquiring the credential information from the virtual machine associated with the terminal;

transmitting the certificate deletion request to the authentication processing device using the acquired credential information; and

receiving a certificate deletion result from the authentication processing device.

5. The smart card service method of claim 4, after the receiving of the certificate deletion result, further comprising:

verifying whether the credential information exists in the virtual machine associated with the terminal; and

deleting the virtual machine associated with the terminal when the credential information does not exist in the virtual machine associated with the terminal.

6. A smart card service apparatus, comprising:

a cloud server configured to include credential information of each of a plurality of user terminals and a plurality of virtual machines for executing a smart card function of each of the user terminals; and

an interface unit configured to communicate with an authentication management device so as to receive a request for a process associated with authentication from an arbitrary user terminal and perform the received request for the process using credential information included in a virtual machine associated with the arbitrary user terminal.

7. The smart card service apparatus of claim 6, further comprising a cloud user management unit configured to allow access to the smart card service apparatus only with respect to an authorized user.

8. The smart card service apparatus of claim 6, further comprising a cloud channel management unit configured to manage a communication channel for security of communication between the smart card service apparatus and the plurality of user terminals and communication between the smart card service apparatus and the authentication management device.

9. The smart card service apparatus of claim 6, wherein the interface unit receives a certificate generation request from the arbitrary user terminal, transmits the certificate generation request to the authentication management device, and stores credential information with respect to the generated certificate in the virtual machine associated with the arbitrary user terminal based on a certificate generation success message provided from the authentication management device.

10. The smart card service apparatus of claim 6, wherein the interface unit receives an authentication request from the arbitrary user terminal, acquires the credential information from the virtual machine associated with the arbitrary user terminal, transmits the authentication request to the authentication management device using the acquired credential information, and transmits an authentication result provided from the authentication management device to the arbitrary user terminal.

11. The smart card service apparatus of claim 6, wherein the interface unit receives a certificate deletion request from the arbitrary user terminal, acquires the credential information from the virtual machine associated with the arbitrary user terminal, and transmits the certificate deletion request to the authentication management device using the acquired credential information.

12. The smart card service apparatus of claim 11, wherein the interface unit receives a message indicating that certificate deletion is successfully performed from the authentication management device, verifies whether the credential information exists in the virtual machine associated with the arbitrary user terminal, and deletes the virtual machine associated with the arbitrary user terminal when the credential information does not exist in the virtual machine associated with the arbitrary user terminal.