Secure Module Program Authentication for Communication Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems are vulnerable to tampering and snooping due to the disclosure of smartphone terminal specifications and software structures, allowing unauthentic software to transmit fake communication content encrypted with authentic cryptographic keys, making it difficult for external apparatuses to determine the authenticity of communication content.
Innovation Solution
A communication apparatus is designed with a secure module that includes a cryptographic unit, detecting unit, and generating unit to monitor and authenticate programs, ensuring only authentic programs can use the cryptographic key for encrypted communication, and modifying or updating scanning programs to prevent tampering and cracking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If specifications and software structures of terminals are disclosed to the public, then ease of operation and interoperability are improved, but security and protection of confidential information deteriorate
Solution Approach 1:
The system divides the terminal into two distinct parts: a public software layer that can be analyzed and tampered with, and a secure module that remains protected. The secure module contains the cryptographic unit, detecting unit, and generating unit, which operate independently from the public software. This segmentation allows the public software to maintain ease of operation while the secure module preserves security by isolating critical authentication functions.
Solution Approach 2:
The secure module acts as an intermediary between the public software and the authentication process. Even though unauthentic software can communicate with the secure module, the detecting unit within the secure module verifies the authenticity of programs attempting to access cryptographic keys. This intermediary function allows public software to operate freely while preventing unauthorized access to confidential information.
2Adaptability or versatility
If unauthentic software is allowed to operate, then adaptability and software freedom are improved, but authenticity of communication content deteriorates
Solution Approach 1:
The detecting unit performs preliminary authentication checks on programs before they can access cryptographic keys for encrypted communication. The secure module verifies the authenticity of the scanning program and target program in advance, preventing unauthentic software from transmitting fake communication content even if it operates freely. This preliminary verification maintains authenticity while allowing adaptable software operation.
Solution Approach 2:
The detecting unit continuously monitors and provides feedback on the authenticity of programs attempting to use cryptographic keys. When unauthentic software is detected, the system responds by preventing access to confidential information while allowing the software to continue operating for non-critical functions. This feedback mechanism maintains authenticity verification without completely restricting software adaptability.
3Ease of operation
If cryptographic keys are made accessible for encrypted communication, then ease of operation is improved, but protection against snooping and tampering deteriorates
Solution Approach 1:
The cryptographic unit is nested within the secure module, which itself is integrated into the terminal. This nested structure allows cryptographic keys to be accessible to authorized programs while remaining protected from snooping and tampering. The detecting unit within the secure module adds another layer of protection, verifying program authenticity before allowing key access, thus enabling ease of operation for authentic programs while preventing harmful access.
Data Source
Figure 1A~1C
Figure 2
Figure 3
AI summary
A communication apparatus (101) includes: a secure module (102); a first storage device, provided outside the secure module, to store a program for encrypted communication with an apparatus (103) external to the communication apparatus using a cryptographic key (K) stored in the secure module; a detecting unit (401), provided in the secure module, to detect tampering of the program; and a setting unit, provided in the secure module (102), to disable the encrypted communication when the tampering of the program is detected.