안전한 스마트 단말을 위한 가상화 기반 도메인 분리 보안 플랫폼 구현
Implementation of Virtualization-based Domain Separation Security Platform for Smart Devices
1
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
최근 들어, 스마트 단말에서 오피스, 화상회의 등 스마트워크 업무와 관련된 중요한 정보들을 다루는 경우가 많아졌다. 또한 스마트 단말의 실행환경이 공개 소프트웨어 환경 위주로 발전하면서, 사용자들이 임의의 응용소프트웨어를 다운받아 사용하는 것이용이하게 됨에 따라, 스마트 단말이 보안적 측면에서 취약하게 되었다. 본 논문에서는 TEE(Trusted Execution Environment) 기반의 격리된 안전실행환경 영역을 가지는 모바일 단말 플랫폼인 가상화 기반 스마트 단말 보안 기술의 특징을 알아본다. 또한,본 논문에서는 스마트 단말에서 실행되는 응용프로그램을 위한 도메인 분리 기반의 안전한 스마트 단말 보안 플랫폼에 대한 구현방법을 제안한다.
Abstract
Recently, important information related with smart work such as office and video conference are handled in smartdevice quite a lot compare with before. Also, execution environment of smart devices is getting developed as opensoftware environment. It brought convenience to download and use any kind of application software. By that,security side of smart devices became vulnerable. This paper will discuss characteristics of smart device securitytechnology based on virtualization that is a mobile device platform with isolated secure execution area based onTEE (Trusted Execution Environment). Also, this paper will suggest an implementation method about safe smartdevice security platform based on domain separation for application software which can be executed in smartdevices.
참고문헌 (16)
- Mobey Forum Mobile Financial Services, "Alternatives for Banks to offer Secure Mobile Payments version 1.0", ~ (2010)
- "TCG mobile reference architecture specification version 1.0"[URL]
- Siani Pearson, "Trusted Computing Platforms", ~ (2003)
- TCG, "TCG Mobile Trusted Module Specification", Version 1.0, Revision 7.02, ~ (2010)
- Bickford J., "Rootkits on Smart Phones:Attacks, Implications and Opportunities", Workshop on Mobile Computing Sys. and Appl. (HotMobile'10) (2010), ACM
- "Global Platform Device Technology, “The Trusted Execution Environment: Delivering Enhanced Security at a Lower Cost to the Mobile Market,”", Global Platform White Paper, ~ (2011)
- Y. H. Kim, "TeeMo: A Generic Trusted Execution Framework for Mobile Devices", Proc. of International Conference on Computer, Networks, Systems, and Industrial Applications (CNSI), pp.579~583 (2012)
- Y. H. Kim, "Building Secure Execution Environment for Mobile Platform", Proc. of First ACIS, 2011, 119~122
- H. I. Joo, "Secure Booting using TPM on Mobile Platform", NCS2006, ~ (2006)
- M.S. Kim, "Common Security Core Module for Mobile Platform", KIISC, 16(3) (2006)
- H. Chai, "TEEI-A Mobile Security Infrastructure for TEE Integration", Proc. of IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications, pp.914~920 (2014)
- M. Kim, "Design and implementation of mobile trusted module for trusted mobile computing", IEEE Transactions on Consumer Electronics, 56(8), pp.134~140 (2010)
- K. H. Baek, "Trend of Research and Technology for SEE", Electronics and Telecommunications Trends, 22(5) (2007)
- 오도환, "Highly Secure Mobile Devices Assisted with Trusted Cloud Computing Environments", ETRI Journal, 37(2), pp.348~358 (2015), 한국전자통신연구원[DOI]
- M. L. Polla, "A Survey on Security for Mobile Devices", IEEE Communications surveys & tutorials, 15(1), pp.446~471 (2013)
- W. Arthur, "A Practical Guide to TPM 2.0: Using the Trusted Platform Module in the New Age of Security" (2015), Apress