System, terminal, and method

Abstract

Provided are a system, a terminal, and a method capable of determining whether a file downloaded from storage is falsified.　A system (100) is provided with: a first terminal (1) having a storage unit (14) and an upload control unit (11) for storing a backup file of a file in the storage unit (14) and uploading the file and information pertaining to the file path of the backup file to a storage (5); a second terminal (3) having a download control unit (31) for downloading the file and the information pertaining to the file path from the storage; and a determination unit (33) for determining whether the file is falsified on the basis of the file downloaded by the second terminal (3) and the backup file that can be accessed on the basis of the information pertaining to the file path.

Description

System, terminal and method

[0001] One aspect of the present disclosure relates to a system, a terminal, and a method.

[0002] Storage (server devices) that store files such as text, images, and video content uploaded via a network are known. For example, Patent Literature 1 (JP-A-2005-102666) describes a server device that can embed user information of an uploading terminal in a file.

[0003] Japanese Patent Application Laid-Open No. 2006-236250

[0004] Although the storage device described in Patent Document 1 can identify the owner of a file, it cannot be denied that there is a possibility that part of the file may be rewritten. As a result, there is a risk that a file downloaded from the storage device may be used without realizing that it has been tampered with.

[0005] Therefore, an object of one aspect of the present invention is to provide a system, a terminal, and a method that can determine whether a file downloaded from storage has been tampered with.

[0006] A system according to one aspect of the present disclosure includes a first terminal having a memory unit and an upload control unit that stores a backup file of a file in the memory unit and uploads information relating to the file and the file path of the backup file to storage; a second terminal having a download control unit that downloads the file and the information relating to the file path from the storage; and a determination unit that determines whether or not the backup file has been tampered with based on the file downloaded by the second terminal and the information relating to the file path.

[0007] According to one aspect of the present disclosure, it is possible to determine whether a file downloaded from storage has been tampered with.

[0008] Fig. 1 is a diagram showing an example of a system configuration of a tampering detection system according to an embodiment. Fig. 2 is a diagram showing an example of a functional configuration of a tampering detection system according to an embodiment. Fig. 3 is a flowchart showing an example of an operation of a first terminal. Fig. 4 is a flowchart showing an example of an operation of a second terminal. Fig. 5 is a diagram showing an example of a hardware configuration of a terminal according to an embodiment.

[0009] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In the description of the drawings, the same elements are designated by the same reference numerals, and duplicate explanations will be omitted. Furthermore, the embodiments of the present disclosure in the following description are specific examples of the present invention, and the present invention is not limited to these embodiments unless otherwise specified to limit the present invention.

[0010] FIG. 1 is a diagram showing an example of the system configuration of a tampering detection system (system) according to an embodiment. FIG. 2 is a diagram showing an example of the functional configuration of the tampering detection system according to an embodiment. As shown in FIGS. 1 and 2 , the tampering detection system 100 includes at least one first terminal (terminal) 1, at least one second terminal (terminal) 3, and a storage 5. The tampering detection system 100 is a system that determines whether a file uploaded from the first terminal 1 to the storage 5 and downloaded from the storage 5 by the second terminal 3 has been tampered with. The first terminal 1, the storage 5, and the second terminal 3 are communicatively connected to each other via a network such as a mobile communication network, and are capable of transmitting and receiving information to and from each other.

[0011] The storage 5 of this embodiment is a known distributed storage and is configured to include multiple storages 5A, 5B, ..., 5N. Files uploaded from the first terminal 1 are stored in memory units (storage areas) 51A, 51B, ..., 51N in each of the multiple storages 5A, 5B, ..., 5N. When a file is downloaded from the storage 5 to the second terminal 3, the file is transmitted from the memory units 51A, 51B, ..., 51N in each of the multiple storages 5A, 5B, ..., 5N. Examples of files include image files, video files, text files, document files, audio files, music files, software source code files, program executable files, etc.

[0012] The first terminal 1 and the second terminal 3 are mobile communication terminals that perform mobile communication in a mobile communication network (by connecting to the mobile communication network). In this embodiment, the first terminal 1 and the second terminal 3 are assumed to be smartphones, but they may also be mobile communication terminals such as tablet terminals other than smartphones or personal computers.

[0013] Fig. 1 is a diagram showing an example of the system configuration of a tampering detection system according to an embodiment. As shown in Fig. 1, a first terminal 1 includes an upload control unit 11, an access control unit 12, a first memory unit 13, a second memory unit (memory unit) 14, and an operation display unit 15. The functional blocks in the first terminal 1 do not have to be configured as shown in Fig. 2; some functional blocks may be missing, multiple functional blocks may be integrated into one functional block, or one functional block may be separated into multiple functional blocks.

[0014] Each function of the first terminal 1 will be described below.

[0015] When uploading a file to the storage 5, the upload control unit 11 saves a backup file of the file in the second storage unit 14, and packages the file and information about the file path of the backup file, and uploads the packaged file to the storage 5. The file path here is a concept that includes not only a local file path in the first terminal 1, but also key information that identifies the first terminal 1 (for example, an IP address, an IMEI (International Mobile Equipment Identifier)).

[0016] The upload control unit 11 distributes and uploads the packaged files to the multiple storages 5A, 5B, ..., 5N. Note that known encryption technology is used for uploading from the first terminal 1 to the multiple storages 5A, 5B, ..., 5N. Note that the packaging does not have to be performed by the upload control unit 11, and may be performed at the timing when the storages 5 save the files in the memory units 51A, 51B, ..., 51N.

[0017] The upload control unit 11 stores a hash value (first hash value) generated (calculated) based on the file to be uploaded as a backup file in the second storage unit 14. Furthermore, if the determination unit 32 determines that tampering has occurred and the upload control unit 11 receives information to that effect from the determination unit 32, the upload control unit 11 re-uploads the file corresponding to the tampered file to the storage 5. The method by which the determination unit 32 determines whether the file has been tampered will be described in detail later.

[0018] The access control unit 12 controls access to the second storage unit 14 from the second terminal 3. The access control unit 12 of this embodiment permits the determination unit 32 of the second terminal 3 to access the second storage unit 14 only when the hash value transmitted from the determination unit 32 matches the hash value stored in the second storage unit 14. When the second storage unit 14 is accessed from an external terminal different from the second terminal 3, the access control unit 12 may display that fact on the operation display unit 15.

[0019] The first storage unit 13 stores various data handled by the first terminal 1. Examples of the data include an operating system (OS) program, various application programs, and files such as images, videos, text, documents, and audio.

[0020] The second storage unit 14 stores backup files generated by the upload control unit 11. The second storage unit 14 stores hash values ​​generated from files to be uploaded. The second storage unit 14 may be a part of the first storage unit 13, or may be a storage area logically or physically isolated from the first storage unit 13.

[0021] The operation display unit 15 notifies the operator of various information and accepts input of various information from the operator.

[0022] The second terminal 3 is configured to include a download control unit 31, a determination unit 32, a third storage unit 33, and an operation display unit (second notification unit) 35. The functional blocks in the second terminal 3 do not have to be configured as shown in Fig. 2, and some functional blocks may be missing, multiple functional blocks may be integrated into one functional block, or one functional block may be separated into multiple functional blocks.

[0023] Each function of the second terminal 3 will be described below.

[0024] The download control unit 31 downloads packaged files from multiple storages 5A, 5B, ..., 5N. Note that downloads from the multiple storages 5A, 5B, ..., 5N to the second terminal 3 use known encryption technology. The download control unit 31 downloads files and information related to file paths from the storages 5. The download control unit 31 downloads multiple files from the multiple storages 5A, 5B, ..., 5N, combines them, and obtains information related to the files and file paths uploaded by the first terminal 1.

[0025] The determination unit 32 determines whether or not the file has been tampered with based on the file downloaded from the storage 5 and a backup file that can be accessed based on information about the file path. More specifically, the determination unit 32 calculates a hash value (hereinafter also referred to as a "second hash value") of the file downloaded from the storage 5. Next, the determination unit 32 obtains a hash value (hereinafter also referred to as a "first hash value") that can be accessed based on information about the file path included in the file downloaded from the storage 5.

[0026] More specifically, the determination unit 32 accesses the second storage unit 14 of the first terminal 1 based on information related to the file path. At this time, the access from the determination unit 32 of the second terminal 3 to the second storage unit 14 of the first terminal 1 may be via communication via a communication network or short-range wireless communication. The determination unit 32 acquires the first hash value stored in the second storage unit 14 as a backup file.

[0027] The determination unit 32 determines whether the file downloaded from the storage 5 has been tampered with, based on whether the second hash value matches the first hash value. Specifically, if the second hash value matches the first hash value, it determines that there has been no tampering, and if the second hash value does not match the first hash value, it determines that there has been tampering.

[0028] When the determination unit 32 determines that the file downloaded from the storage 5 has been tampered with, it displays a message that the file downloaded from the storage 5 has been tampered with via the operation display unit 35. When the determination unit 32 determines that the file downloaded from the storage 5 has been tampered with, it may delete the file stored in the storage 5. This file deletion may be performed directly by the determination unit 32 of the second terminal 3. Alternatively, the determination unit 32 may notify the user of the corresponding first terminal 1 that the file has been tampered with, which causes the first terminal 1 to delete the corresponding file.

[0029] The third storage unit 33 stores various data handled by the second terminal 3. Examples of the data include operating system (OS) programs, various application programs, and files such as images, videos, text, documents, and audio. The third storage unit 33 may also store files downloaded from the storage 5.

[0030] The operation display unit 35 notifies the operator of various information and accepts input of various information from the operator. The operation display unit 35 functions as a notification unit that notifies the operator of the determination result of the determination unit 32.

[0031] Next, a mechanism for determining whether a file has been tampered with will be described using an example in which a first terminal 1 and a second terminal 3 exchange files via storage 5, mainly with reference to Figures 3 and 4. Figure 3 is a flowchart showing an example of the operation of the first terminal. Figure 4 is a flowchart showing an example of the operation of the second terminal.

[0032] First, the operation of the first terminal 1 will be described. The user of the first terminal 1 selects a file (content) to be uploaded. The upload control unit 11 calculates a hash value (first hash value) of the file to be uploaded (step S1). Next, the upload control unit 11 saves the calculated hash value as a backup file in the second storage unit 14 (step S2). Next, the upload control unit 11 packages the file to be uploaded and information related to the file path, and uploads the package to the distributed storages 5A, 5B, ..., 5N (step S3).

[0033] Next, the operation of the second terminal 3 will be described. The user of the second terminal 3 accesses the storage 5 and selects the file (content) they wish to download. The download control unit 31 downloads the distributed files from the distributed storages 5A, 5B, ..., 5N and combines the downloaded files (step S11). This allows the download control unit 31 to obtain information about the file and file path uploaded by the first terminal 1 (step S12).

[0034] Next, the determination unit 32 accesses the second storage unit 14 of the first terminal 1 based on information about the downloaded file path and obtains the hash value stored in the second storage unit 14 (step S13). Next, the determination unit 32 calculates the hash value of the downloaded file. The determination unit 32 determines whether the hash value stored in the second storage unit 14 is the same as the hash value of the downloaded file (step S14). If the determination unit 32 determines that the hash value stored in the second storage unit 14 matches the hash value of the downloaded file (YES in S14), it determines that the downloaded file has not been tampered with (step S15). If the hash value stored in the second storage unit 14 does not match the hash value of the downloaded file (NO in S14), it determines that the downloaded file has been tampered with (step S16).

[0035] Next, the effects of the tampering detection system 100 according to the embodiment will be described.

[0036] The tampering detection system 100, the tampering detection method (method), the first terminal 1, and the second terminal 3 of the above embodiment can determine whether files exchanged between the first terminal 1, which uploads files to the storage 5, and the second terminal 3, which downloads files from the storage 5, have been tampered with. This reduces the possibility that a user who downloads a tampered, malicious file will unintentionally use the file or that the file will be widely distributed. Furthermore, according to this embodiment, the presence or absence of tampering can be checked using a memory unit provided in the terminal itself. In other words, the presence or absence of tampering can be checked using functions provided in the first terminal 1 and the second terminal 3 without using functions on the storage 5 side, so that the presence or absence of tampering in exchanged files can be determined with a simple configuration.

[0037] The determination unit 32 is provided in the second terminal 3, and the second terminal 3 may have an operation display unit 35 that notifies the determination result of the determination unit 32. With this configuration, if tampering is detected in a downloaded file, the user of the second terminal 3 is notified that the file has been tampered with. As a result, it is possible to prevent the tampered file from being used unintentionally.

[0038] The upload control unit 11 may store a first hash value generated based on the uploaded file as a backup file, and the determination unit 32 may determine whether the file has been tampered with based on the first hash value and a second hash value generated based on the downloaded file. In this configuration, the presence or absence of tampering is determined by comparing hash values ​​with smaller capacities than when a copy of the uploaded file is saved as a backup file. As a result, the load on the determination process and the communication process can be reduced, enabling faster determination. Furthermore, generating a hash value improves security by protecting privacy and preventing damage in the event of file leakage, compared to when a copy of the uploaded file is saved as a backup file.

[0039] The upload control unit 11 may permit the determination unit 32 to access the second storage unit 14 only if the second hash value matches the first hash value. In other words, if the second hash value does not match the first hash value, the determination unit 32 will not permit access to the second storage unit 14. In this configuration, it is determined whether the second terminal 3 attempting to access the second storage unit 14 is a download destination terminal. In other words, unauthorized access to the second storage unit 14 can be prevented.

[0040] If the determination unit 32 determines that the downloaded file has been tampered with, it may delete the file stored in the storage 5. This configuration makes it possible to prevent the tampered file from being used unintentionally.

[0041] The upload control unit 11 may re-upload the file corresponding to the file determined to have been tampered with to the storage 5. This allows the user to continue downloading the desired file without tampering.

[0042] The first terminal 1 stores a backup file of the file in the second storage unit 14 and includes an upload control unit 11 that uploads the file and information about the file path of the backup file to the storage 5, and an access control unit 12 that permits the second terminal (download terminal) 3 that has downloaded the file and information about the file path from the storage 5 to access the backup file that can be accessed based on the information about the file path. The first terminal 1 configured in this way can determine whether the file downloaded from the storage 5 has been tampered with.

[0043] The second terminal 3 includes a first storage unit 13 that stores backup files of files, an upload control unit 11 that uploads information about the files and the file paths of the backup files to the storage 5, a download control unit 31 that downloads information about the files and the file paths from the storage 5 uploaded by the first terminal (upload terminal) 1, and a determination unit 32 that determines whether or not a file has been tampered with based on the backup file that can be accessed based on the downloaded file and the information about the file path. The second terminal 3 configured in this manner can determine whether a file downloaded from the storage 5 has been tampered with.

[0044] The system of the present disclosure may have the following configuration.

[0045] [1] A system comprising: a first terminal having a memory unit and an upload control unit that stores a backup file of a file in the memory unit and uploads the file and information related to the file path of the backup file to a storage; a second terminal having a download control unit that downloads the file and information related to the file path from the storage; and a determination unit that determines whether or not the file has been tampered with based on the file downloaded by the second terminal and the backup file that can be accessed based on the information related to the file path.

[0046] [2] The system according to [1], wherein the determination unit is provided in the second terminal, and the second terminal has a second notification unit that notifies the determination result of the determination unit.

[0047] [3] The system according to [1] or [2], wherein the determination unit determines whether or not the downloaded file has been tampered with based on whether or not the downloaded file matches the backup file.

[0048] [4] The system described in any one of [1] to [3], wherein the upload control unit saves a first hash value generated based on information about the file to be uploaded and the file path as the backup file, and the determination unit determines whether or not the tampering has occurred based on the first hash value and a second hash value generated based on information about the downloaded file and the file path.

[0049] [5] The system described in any one of [1] to [4], wherein the upload control unit saves a third hash value generated based on the file to be uploaded as the backup file, and the determination unit transmits a fourth hash value generated based on the downloaded file to the first terminal, and the access control unit allows the determination unit to access the memory unit if the fourth hash value transmitted from the determination unit matches the third hash value.

[0050] [6] The system according to any one of [1] to [5], wherein the determination unit deletes the file stored in the storage when it determines that the downloaded file has been tampered with.

[0051] [7] The system according to [6], wherein the upload control unit re-uploads the file corresponding to the file determined to have been tampered with to the storage.

[0052] [8] A terminal comprising: an upload control unit that stores a backup file of a file in a memory unit and uploads the file and information about the file path of the backup file to a storage; and an access control unit that permits a download terminal that has downloaded the file and information about the file path from the storage to access the backup file that can be accessed based on the information about the file path.

[0053] [9] A terminal comprising: an upload terminal that includes a storage unit that stores a backup file of a file; an upload control unit that uploads the file and information about the file path of the backup file to storage; a download control unit that downloads the file and information about the file path from the storage that is uploaded by the upload terminal; and a determination unit that determines whether or not the file has been tampered with based on the downloaded file and the backup file that can be accessed based on the information about the file path.

[0054]

[10] A method including: an uploading step in which, when a first terminal uploads a file to a storage, a backup file of the file is stored in a memory unit and information relating to the file and the file path of the backup file is uploaded to the storage; a downloading step in which, when a second terminal downloads the file from the storage, the file and information relating to the file path are downloaded; and a determining step in which, on the second terminal, whether or not the file has been tampered with is determined based on the downloaded file and the backup file that can be accessed based on the information relating to the file path.

[0055] Although one embodiment has been described above, one aspect of the present disclosure is not limited to the above embodiment, and various modifications are possible without departing from the spirit of the present disclosure.

[0056] In the above embodiment, an example has been described in which the hash value of a file to be uploaded is stored in the second storage unit 14 as a backup file, but this is not limiting. For example, the upload control unit 11 may store a copy of the file to be uploaded as a backup file in the second storage unit 14 without processing it. In this case, the determination unit 32 may determine whether the file has been tampered with based on whether the downloaded file matches the backup file. In this configuration, whether the file has been tampered with is determined based on the degree of match between the file uploaded by the first terminal 1 and the file downloaded by the second terminal 3, thereby improving the accuracy of tampering detection.

[0057] The upload control unit 11 may store a hash value (first hash value) generated based on the file to be uploaded and information about the file path as a backup file in the second storage unit 14. In this case, security can be further improved.

[0058] In the above embodiment and modified example, the determination unit 32 is described as being provided in the second terminal 3, but it may be provided in the first terminal 1. Specifically, for example, a determination unit that compares a hash value (second hash value) transmitted by the determination unit 32 with a hash value (first hash value) stored in the second storage unit 14 may be provided in the first terminal 1. In this case, the determination unit provided in the first terminal 1 may transmit the result of the comparison to the second terminal 3.

[0059] In the above embodiment and modified example, the storage 5 used by the first terminal 1 and the second terminal 3 is distributed storage 5A, 5B, ..., 5N, but it may also be a single storage.

[0060] In the above embodiment and modified examples, the backup file generated by the upload control unit 11 is stored in the second memory unit 14. However, to avoid the risk of the hash value itself being tampered with, the backup file may be stored in a secure area such as a secure element, or in a database using a blockchain or the like.

[0061] The block diagrams used to explain the above embodiments show functional blocks. These functional blocks (components) are realized by any combination of at least one of hardware and software. Furthermore, the method for realizing each functional block is not particularly limited. That is, each functional block may be realized using a single device that is physically or logically coupled, or may be realized using two or more physically or logically separated devices that are directly or indirectly connected (for example, using wires, wirelessly, etc.) and these multiple devices. The functional block may also be realized by combining software with the single device or the multiple devices.

[0062] Functions include, but are not limited to, judgment, determination, judgment, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, resolution, selection, election, establishment, comparison, assumption, expectation, regard, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, and assignment. For example, a functional block (component) that performs transmission is called a transmitting unit or transmitter. As mentioned above, there are no particular limitations on how these functions are implemented.

[0063] For example, the first terminal 1 and the second terminal 3 in an embodiment of the present disclosure may function as computers that perform processing of the tampering detection method of the present disclosure. Fig. 5 is a diagram showing an example of the hardware configuration of the first terminal 1 and the second terminal 3 according to an embodiment of the present disclosure. The first terminal 1 and the second terminal 3 described above may be physically configured as computer devices including a processor 1001, a memory 1002, a storage 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, etc.

[0064] In the following description, the term "device" can be read as a circuit, a device, a unit, etc. The hardware configuration of the first terminal 1 and the second terminal 3 may be configured to include one or more of the devices shown in the figure, or may be configured to exclude some of the devices.

[0065] Each function of the first terminal 1 and the second terminal 3 is realized by loading specified software (programs) onto hardware such as a processor 1001, memory 1002, etc., so that the processor 1001 performs calculations, controls communication via a communication device 1004, and controls at least one of reading and writing data in the memory 1002 and storage 1003.

[0066] The processor 1001 controls the entire computer by running, for example, an operating system. The processor 1001 may be configured as a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic unit, a register, etc. For example, the above-mentioned upload control unit 11, access control unit 12, download control unit 31, determination unit 32, etc. may be realized by including the processor 1001.

[0067] The processor 1001 also reads programs (program codes), software modules, data, etc. from at least one of the storage 1003 and the communication device 1004 into the memory 1002 and executes various processes in accordance with the programs. The programs used are those that cause a computer to execute at least some of the operations described in the above-described embodiments. For example, the upload control unit 11, the access control unit 12, the download control unit 31, and the determination unit 32 may be implemented by a control program stored in the memory 1002 and running on the processor 1001, and similar implementations may be used for other functional blocks. While the above-described various processes have been described as being executed by one processor 1001, they may also be executed simultaneously or sequentially by two or more processors 1001. The processor 1001 may be implemented by one or more chips. The programs may also be transmitted from a network via a telecommunications line.

[0068] The memory 1002 is a computer-readable recording medium and may be configured by at least one of, for example, a read-only memory (ROM), an erasable programmable ROM (EPROM), an electrically erasable programmable ROM (EEPROM), a random access memory (RAM), etc. The memory 1002 may also be called a register, a cache, a main memory (primary storage device), etc. The memory 1002 can store executable programs (program codes), software modules, etc. for implementing the tampering detection method according to an embodiment of the present disclosure.

[0069] Storage 1003 is a computer-readable recording medium and may be composed of at least one of an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disk), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy (registered trademark) disk, a magnetic strip, etc. Storage 1003 may also be referred to as an auxiliary storage device. The above-mentioned storage medium may be, for example, a database, a server, or other appropriate medium including at least one of memory 1002 and storage 1003. For example, the above-mentioned first memory unit 13, second memory unit 14, and third memory unit 33 may be realized by including storage 1003.

[0070] The communication device 1004 is hardware (transmission / reception device) for communicating between computers via at least one of a wired network and a wireless network, and is also referred to as, for example, a network device, a network controller, a network card, a communication module, etc. The communication device 1004 may be configured to include a high-frequency switch, a duplexer, a filter, a frequency synthesizer, etc. to realize at least one of frequency division duplex (FDD) and time division duplex (TDD). For example, the above-mentioned upload control unit 11, access control unit 12, download control unit 31, determination unit 32, etc. may be realized by including the communication device 1004.

[0071] The input device 1005 is an input device (e.g., a keyboard, a mouse, a microphone, a switch, a button, a sensor, etc.) that receives input from the outside. The output device 1006 is an output device (e.g., a display, a speaker, an LED lamp, etc.) that outputs to the outside. Note that, like the operation display unit 15 and the operation display unit 35, the input device 1005 and the output device 1006 may be integrated into one device (e.g., a touch panel).

[0072] Furthermore, each device, such as the processor 1001 and the memory 1002, is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus, or may be configured using different buses between each device.

[0073] Furthermore, the first terminal 1 and the second terminal 3 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, the processor 1001 may be implemented using at least one of these pieces of hardware.

[0074] The notification of information is not limited to the aspects / embodiments described in the present disclosure and may be performed using other methods. For example, the notification of information may be performed by physical layer signaling (e.g., Downlink Control Information (DCI) and Uplink Control Information (UCI)), higher layer signaling (e.g., Radio Resource Control (RRC) signaling, Medium Access Control (MAC) signaling, broadcast information (Master Information Block (MIB) and System Information Block (SIB))), other signals, or a combination thereof. Furthermore, the RRC signaling may be referred to as an RRC message, and may be, for example, an RRC Connection Setup message, an RRC Connection Reconfiguration message, or the like.

[0075] Each aspect / embodiment described in the present disclosure may be applied to at least one of systems using LTE (Long Term Evolution), LTE-Advanced (LTE-A), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), FRA (Future Radio Access), NR (New Radio), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, UWB (Ultra-Wide Band), Bluetooth (registered trademark), or other suitable systems, and next-generation systems enhanced based on these. Furthermore, a combination of multiple systems (e.g., a combination of at least one of LTE and LTE-A with 5G, etc.) may also be applied.

[0076] The order of the procedures, sequences, flowcharts, etc. of each aspect / embodiment described in this disclosure may be changed unless it is consistent. For example, the methods described in this disclosure present elements of various steps using an example order, and are not limited to the particular order presented.

[0077] Input and output information may be stored in a specific location (for example, memory) or may be managed using a management table. Input and output information may be overwritten, updated, or added to. Output information may be deleted. Input information may be transmitted to another device.

[0078] The determination may be made based on a value represented by one bit (0 or 1), a Boolean value (true or false), or a numerical comparison (e.g., comparison with a predetermined value).

[0079] The aspects / embodiments described in this disclosure may be used alone, in combination, or switched depending on the implementation. Notification of predetermined information (e.g., notification that "X is true") is not limited to explicit notification, but may be implicit (e.g., not notifying the predetermined information).

[0080] Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended to be illustrative and does not have any limiting meaning on the present disclosure.

[0081] Software shall be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

[0082] Software, instructions, information, etc. may also be transmitted or received over a transmission medium. For example, if software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and / or wireless technologies (such as infrared, microwave), then these wired and / or wireless technologies are included within the definition of transmission media.

[0083] The information, signals, etc. described in this disclosure may be represented using any of a variety of different technologies. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof.

[0084] In addition, terms explained in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings.

[0085] As used in this disclosure, the terms "system" and "network" are used interchangeably.

[0086] Similarly, the user terminal in the present disclosure may be read as a base station. In this case, the base station may be configured to have the functions of the first terminal 1 and the second terminal 3 described above.

[0087] As used in this disclosure, the terms "determining" and "determining" may encompass a wide variety of actions. "Determining" and "determining" may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up, searching, inquiring (e.g., searching a table, database, or other data structure), ascertaining, and the like. "Determining" and "determining" may also include receiving (e.g., receiving information), transmitting (e.g., sending information), input, output, accessing (e.g., accessing data in memory), and the like, all of which are considered to be "determining." "Determining" and "determining" may also include resolving, selecting, choosing, establishing, comparing, and the like, all of which are considered to be "determining." In other words, "judgment" and "decision" can include regarding some action as having been "judged" or "decided." Also, "judgment (decision)" can be interpreted as "assuming," "expecting," "considering," etc.

[0088] The terms "connected," "coupled," or any variation thereof, refer to any direct or indirect connection or coupling between two or more elements, and may include the presence of one or more intermediate elements between two elements that are "connected" or "coupled" to each other. The coupling or connection between elements may be physical, logical, or a combination thereof. For example, "connected" may be read as "access." As used in this disclosure, two elements may be considered to be "connected" or "coupled" to each other using one or more wires, cables, and / or printed electrical connections, as well as electromagnetic energy having wavelengths in the radio frequency range, microwave range, and optical (both visible and invisible) range, as some non-limiting and non-exhaustive examples.

[0089] As used in this disclosure, the phrase "based on" does not mean "based only on," unless expressly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

[0090] As used in this disclosure, any reference to an element using a designation such as "first," "second," etc. does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed or that the first element must in some way precede the second element.

[0091] When the terms "include," "including," and variations thereof are used in this disclosure, these terms are intended to be inclusive, similar to the term "comprising." Furthermore, when the term "or" is used in this disclosure, it is not intended to be an exclusive or.

[0092] In this disclosure, where articles are added by translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are in the plural form.

[0093] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "coupled" may also be interpreted in the same way as "different."

[0094] 1...first terminal, 3...second terminal, 5 (5A, 5B, ..., 5N)...storage, 11...upload control unit, 12...access control unit, 13...first memory unit, 14...second memory unit (memory unit), 15...operation display unit, 31...download control unit, 32...determination unit, 33...third memory unit, 35...operation display unit, 100...tampering detection system (system), 1001...processor, 1002...memory, 1003...storage, 1004...communication device, 1005...input device, 1006...output device, 1007...bus.

Claims

1. A system comprising: a first terminal having a memory unit and an upload control unit that stores a backup file of a file in the memory unit and uploads the file and information regarding the file path of the backup file to storage; a second terminal having a download control unit that downloads the file and information regarding the file path from the storage; and a determination unit that determines whether or not the file has been tampered with based on the file downloaded on the second terminal and the backup file that can be accessed based on the information regarding the file path.

2. The system according to claim 1, wherein the determination unit is provided in the second terminal, and the second terminal has a second notification unit that notifies the determination result of the determination unit.

3. The system according to claim 1 or 2, wherein the determination unit determines whether the downloaded file has been tampered with based on whether the downloaded file matches the backup file.

4. The system described in claim 1, wherein the upload control unit saves a first hash value generated based on information about the file to be uploaded and the file path as the backup file, and the determination unit determines whether or not the file has been tampered with based on the first hash value and a second hash value generated based on information about the downloaded file and the file path.

5. The system of claim 1, further comprising an access control unit that allows the judgment unit to access the storage unit if the second hash value sent from the judgment unit matches the first hash value, and the upload control unit stores a first hash value generated based on the file to be uploaded as the backup file, and the judgment unit transmits a second hash value generated based on the downloaded file to the first terminal.

6. The system according to claim 1, wherein said determination unit deletes said file stored in said storage if it determines that said downloaded file has been tampered with.

7. The system according to claim 6, wherein the upload control unit re-uploads the file corresponding to the file determined to have been tampered with to the storage.

8. A terminal comprising: an upload control unit that stores a backup file of a file in a memory unit and uploads the file and information about the file path of the backup file to storage; and an access control unit that permits a download terminal that has downloaded the file and information about the file path from the storage to access the backup file that can be accessed based on the information about the file path.

9. A terminal comprising: an upload terminal having a memory unit for storing a backup file of a file; an upload control unit for uploading the file and information relating to the file path of the backup file to storage; a download control unit for downloading the file and information relating to the file path from the storage to which the file is uploaded; and a determination unit for determining whether or not the file has been tampered with based on the downloaded file and the backup file that can be accessed based on the information relating to the file path.

10. A method comprising: an uploading step in which, when a first terminal uploads a file to storage, a backup file of the file is stored in a memory unit and information relating to the file and the file path of the backup file is uploaded to the storage; a downloading step in which, when a second terminal downloads the file from the storage, the file and information relating to the file path are downloaded; and a determination step in which the second terminal determines whether or not the file has been tampered with based on the downloaded file and the backup file that can be accessed based on the information relating to the file path.

Images