DYNAMIC SECURITY MODULE TERMINAL DEVICE AND METHOD OF OPERATING SAME

• US 20180012025A1
• Filed: 09/12/2017
• Published: 01/11/2018
• Est. Priority Date: 03/13/2015
• Status: Active Grant

• Current Assignee: EverSpin Corp.
• Original Assignee: EverSpin Corp.
• Inventors: Ha, Young Bin
• Granted Patent: US 10,867,049 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/14 against software analysis or reverse engineering, e.g. by obfuscation
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/567 using dedicated hardware
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding

Abstract

Disclosed herein are a dynamic security module terminal device for receiving a dynamic security module and transmitting a security management event to a security server, and a method of operating the dynamic security module terminal device. The dynamic security module terminal device includes a communication unit configured to transmit and receive a security management event over a network, and a processor configured to control the communication unit. The processor is configured to create a security session with a security server, and to receive the dynamic security module from the security server so that part or all of code of the dynamic security module performing security management has a predetermined valid period.

Claims

1. A dynamic security module terminal device for receiving a dynamic security module and transmitting a security management event to a security server, the dynamic security module terminal device comprising:

a communication unit configured to transmit and receive a security management event over a network; and

a processor configured to control the communication unit;

wherein the processor is configured to;

create a security session with a security server; and

receive a dynamic security module from the security server so that part or all of code of the dynamic security module performing security management has a predetermined valid period.

2. The dynamic security module terminal device of claim 1, wherein the processor is further configured to receive a security management examination result value from the security server.

3. The dynamic security module terminal device of claim 1, wherein the dynamic security module is configured to stop running of an application program installed on the terminal device when it is determined that a security problem has occurred in the terminal device as a result of the security management.

4. The dynamic security module terminal device of claim 1, wherein the processor is configured to create the security session by receiving a session ID from the security server and then storing the received session ID.

5. The dynamic security module terminal device of claim 1, wherein the creation of the security session is performed after authentication has been completed by the security server.

6. The dynamic security module terminal device of claim 1, wherein the predetermined valid period is configured to delete the part or all of the code or block use of the part or all of the code when the predetermined valid period expires.

7. The dynamic security module terminal device of claim 1, wherein the security management event is configured to:

transmit at least one type of information about the dynamic security module upon execution thereof, selected from the group consisting of a function name of the code of the dynamic security module, a variable designating an algorithm to be executed, a protocol field, a variable designating a protocol sequence, a variable designating a compile level, and a variable designating an executable code obfuscation method, to the security server; and

allow whether the information upon execution is identical to a configuration of parameters regarding the dynamic security module stored in the security server to be verified.

8. The dynamic security module terminal device of claim 1, wherein the processor is further configured to additionally receive encrypted signature information regarding the dynamic security module when receiving the dynamic security module from the security server.

9. The dynamic security module terminal device of claim 8, wherein a public key corresponding to a private key of the encrypted signature information is set in the terminal device, and the encrypted signature information is decrypted using the public key.

10. The dynamic security module terminal device of claim 1, wherein the processor is further configured to:

additionally receive information about an entry point of the code of the dynamic security module performing the security management when receiving the dynamic security module from the security server; and

allow the dynamic security module to be executed from the entry point.

11. A method of operating a dynamic security module terminal device for receiving a dynamic security module and transmitting a security management event to a security server, the method comprising:

creating a security session with a security server; and

receiving a dynamic security module from the security server so that part or all of code of the dynamic security module performing security management has a predetermined valid period.

12. The method of claim 11, further comprising receiving a security management examination result value from the security server.

13. The method of claim 11, further comprising stopping running of an application program installed on the terminal device when it is determined that a security problem has occurred in the terminal device as a result of the security management.

14. The method of claim 11, wherein the security session is created by receiving a session ID from the security server and then storing the received session ID.

15. The method of claim 11, wherein the security management event is configured to:

transmit at least one type of information about the dynamic security module upon execution thereof, selected from the group consisting of a function name of the code of the dynamic security module, a variable designating an algorithm to be executed, a protocol field, a variable designating a protocol sequence, a variable designating a compile level, and a variable designating an executable code obfuscation method, to the security server; and

allow whether the information upon execution is identical to a configuration of parameters regarding the dynamic security module stored in the security server to be verified.

16. A computer-readable storage medium having stored thereon a computer program that, when executed by a processor, causes the processor to execute the method of claim 11.