METHOD AND DEVICE FOR PREVENTING ACCESS TO ADMINISTRATIVE PRIVILEGE

• US 20140344562A1
• Filed: 05/20/2014
• Published: 11/20/2014
• Est. Priority Date: 05/20/2013
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: CHANG, Yong, KIM, Inkyo, LEE, Sangho, KIM, Doyoung, BAE, Eunhui, LEE, Kyunggeun
• Application Number:
  US14/282,499
• Publication Number:
  US 20140344562A1
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

A method and a device for preventing access to an administrative privilege are provided. The method includes acquiring a flash memory identifier from a flash memory, starting kernel loading, decoding an encrypted administrative privilege granting code using the flash memory identifier, and completing booting when the decoding succeeds. According to an embodiment of the present disclosure, the code for accessing the administrative privilege is encrypted using the identifier of the flash memory so that the unique password code can be loaded for each device, thereby enhancing the system security.

Claims

1. A method of preventing access to an administrative privilege of a device, the method comprising:

acquiring a flash memory identifier from a flash memory;

starting kernel loading;

decoding an encrypted administrative privilege granting code using the flash memory identifier; and

completing booting when the decoding succeeds.

2. The method of claim 1, further comprising:

generating a system error when the decoding fails.

3. The method of claim 1, wherein the starting of the kernel loading comprises:

loading a boot loader;

loading a flash memory decoding module; and

starting the kernel loading when the flash memory decoding module is loaded.

4. The method of claim 3, further comprising:

generating a system error when the loading of the flash memory decoding module fails.

5. The method of claim 1, wherein the decoding of the administrative privilege granting code comprises:

determining whether the flash memory identifier is the same as a pre-stored identifier; and

decoding the encrypted administrative privilege granting code using the flash memory identifier when the flash memory identifier is the same as the pre-stored identifier.

6. The method of claim 5, further comprising:

generating a system error when the flash memory identifier is not the same as the pre-stored identifier.

7. The method of claim 1, further comprising:

acquiring an identifier of the flash memory from the flash memory; and

encrypting an administrative privilege granting code using the identifier of the flash memory.

8. The method of claim 7, wherein the encrypting of the administrative privilege granting code comprises:

encrypting the administrative privilege granting code with an encryption executing code by using the identifier of the flash memory; and

deleting the encryption executing code.

9. A device for preventing access to an administrative privilege, the device comprising:

a flash memory comprising a flash memory identifier; and

a controller configured to acquire a flash memory identifier from a flash memory, start kernel loading, decode an encrypted administrative privilege granting code using the flash memory identifier, and complete booting when the decoding succeeds.

10. The device of claim 9, wherein the controller generates a system error when the decoding of the encrypted administrative privilege granting code fails.

11. The device of claim 9, wherein the controller loads a boot loader, loads a flash memory decoding module, and starts the kernel loading when the flash memory decoding module is loaded.

12. The device of claim 11, wherein the controller generates a system error when the loading of the flash memory decoding module fails.

13. The device of claim 9, wherein the controller determines whether the flash memory identifier is the same as a pre-stored identifier, and decodes the encrypted administrative privilege granting code using the flash memory identifier when the flash memory identifier is the same as the pre-stored identifier.

14. The device of claim 13, wherein the controller generates a system error when the flash memory identifier is not the same as the pre-stored identifier.

15. The device of claim 9, wherein the controller acquires an identifier of the flash memory from the flash memory, and encrypts an administrative privilege granting code using the identifier of the flash memory.

16. The device of claim 15, wherein the controller encrypts the administrative privilege granting code with an encryption executing code by using the identifier of the flash memory, and deletes the encryption executing code.