APPARATUS AND METHOD FOR PROTECTING INFORMATION IN COMMUNICATION SYSTEM

• US 20170091484A1
• Filed: 07/22/2016
• Published: 03/30/2017
• Est. Priority Date: 09/24/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: LEE, Bo-Young, KIM, Sung-Kee
• Granted Patent: US 10,380,378 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

The present disclosure relates to a sensor network, machine type communication (MTC), machine-to-machine (M2M) communication, and technology for internet of things (IoT). The present disclosure may be applied to intelligent services based on the above technologies, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A method, communication device, and server for protecting information in a communication device in a communication system are provided. The method includes acquiring a database security analysis result for an application (App) upon detecting that the App is run, and outputting the database security analysis result for the App.

Claims

1. A method for protecting information in a communication device in a communication system, the method comprising:

acquiring a database security analysis result for an application (App) upon detecting that the App is run; and

outputting the database security analysis result for the App.

2. The method of claim 1, wherein the acquiring of the database security analysis result for the App comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to a server; and

receiving a database security analysis response message, which includes the database security analysis result for the App, from the server.

3. The method of claim 1, wherein the acquiring of the database security analysis result for the App comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to a server;

receiving a database security analysis response message, which indicates that the database security analysis result for the App is not stored in the server, from the server; and

performing a database security analyzing operation for the App to acquire the database security analysis result for the App.

4. The method of claim 3, wherein the performing of the database security analyzing operation for the App comprises:

detecting that a database within application (DBA) for the App is generated if a specific type of information access authority related to a specific type of information access is included in authorities which are requested in the App;

detecting that the App reads a specific type of information included in a database within device included in the communication device; and

performing the database security analyzing operation for the DBA to acquire the database security analysis result for the App.

5. The method of claim 1, further comprising:

transmitting the database security analysis result for the App to a server.

6. The method of claim 1, further comprising:

acquiring the database security analysis result for the App upon detecting that the App will be installed; and

outputting the database security analysis result for the App.

7. The method of claim 6, wherein the acquiring of the database security analysis result for the App upon detecting that the App will be installed comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to the server upon detecting that the App will be installed; and

receiving a database security analysis result response message, which includes the database security analysis result for the App, from the server.

8. The method of claim 6, wherein the acquiring of the database security analysis result for the App upon detecting that the App will be installed comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to the server upon detecting that the App will be installed;

receiving a database security analysis result response message, which indicates that the database security analysis result for the App is not stored in the server, from the server; and

performing a database security analyzing operation for the App to acquire the database security analysis result for the App.

9. The method of claim 8, wherein the performing of the database security analysis result operation for the App comprises:

detecting that a database within application (DBA) for the App is generated if a specific type of information access authority related to a specific type of information access is included in authorities which are requested in the App;

detecting that the App reads a specific type of information included in a database within device included in the communication device; and

performing the database security analyzing operation for the DBA to acquire the database security analysis result for the App.

10. The method of claim 6, further comprising:

transmitting the database security analysis result for the App to the server.

11. A communication device in a communication system, the communication device comprising:

a processor configured to;

acquire a database security analysis result for an application (App) upon detecting that the App is run, and

output the database security analysis result for the App.

12. The communication device of claim 11, wherein the acquiring of the database security analysis result for the App comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to a server; and

receiving a database security analysis response message, which includes the database security analysis result for the App, from the server.

13. The communication device of claim 11, wherein the acquiring of the database security analysis result for the App comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to a server;

receiving a database security analysis response message, which indicates that the database security analysis result for the App is not available at the server, from the server; and

performing a database security analyzing operation for the App to acquire the database security analysis result for the App.

14. The communication device of claim 13, wherein the performing of the database security analyzing operation for the App comprises:

detecting that a database within application (DBA) for the App is generated if a specific type of information access authority related to a specific type of information access is included in authorities which are requested in the App;

detecting that the App reads a specific type of information included in a database within device included in the communication device; and

performing the database security analyzing operation for the DBA to acquire the database security analysis result for the App.

15. The communication device of claim 11, wherein the processor is further configured to transmit the database security analysis result for the App to a server.

16. The communication device of claim 11, wherein the processor is further configured to:

acquire the database security analysis result for the App upon detecting that the App will be installed, and

output the database security analysis result for the App.

17. The communication device of claim 16, wherein the acquiring of the database security analysis result for the App upon detecting that the App will be installed comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to a server upon detecting that the App will be installed; and

receiving a database security analysis result response message, which includes the database security analysis result for the App, from the server.

18. The communication device of claim 16, wherein the acquiring of the database security analysis result for the App upon detecting that the App will be installed comprises:

transmitting a database security analysis result request message, which requests the database security analysis result for the App, to a server upon detecting that the App will be installed;

receiving a database security analysis result response message, which indicates that the database security analysis result for the App is not available at the server, from the server; and

performing a database security analyzing operation for the App to acquire the database security analysis result for the App.

19. The communication device of claim 18, wherein the performing of the database security analyzing operation for the App comprises:

detecting that a database within application (DBA) for the App is generated if a specific type of information access authority related to a specific type of information access is included in authorities which are requested in the App;

detecting that the App reads a specific type of information included in a database within device included in the communication device; and

performing the database security analyzing operation for the DBA to acquire the database security analysis result for the App.

20. The communication device of claim 16, wherein the processor is further configured to transmit the database security analysis result for the App to a server.