User Terminal For Detecting Forgery Of Application Program Based On Signature Information And Method Of Detecting Forgery Of Application Program Using The Same

摘要

A user terminal for detecting forgery of an application program based on signature information and a method of detecting forgery of an application program using the user terminal are disclosed. The user terminal includes a signature information extraction circuit, a communication circuit and a forgery determination circuit. When the application program is installed on the user terminal, the signature information extraction circuit extracts the signature information of the application program on a platform level. When the application program is executed, the communication circuit transmits information of the user terminal and the application program to an authentication server on the platform level to receive original signature information of the application program from the authentication server, or receives the original signature information from a peripheral device paired with the user terminal. The forgery determination circuit compares the original signature information received from the authentication server or the peripheral device with the extracted signature information on the platform level to determine whether the application program is tampered. Accordingly, the user terminal may be protected from a tampered application program. In addition, since forgery of the application program is detected on the platform level, it may overcome limitations of tamper detection technologies on an application program level that can be evaded by an attacker.

主权项

1. A user terminal for detecting forgery of an application program installed on the user terminal, the user terminal comprising:
a signature information extraction circuit configured to, when the application program is installed on the user terminal, extract signature information of the application program on a platform level; a communication circuit configured to, when the installed application program is executed, transmit information of the user terminal and information of the application program to an authentication server on the platform level to receive original signature information of the application program from the authentication server, or to receive the original signature information of the application program from a peripheral device paired with the user terminal; and a forgery determination circuit configured to compare the original signature information of the application program received from the authentication server or the peripheral device with the extracted signature information of the application program on the platform level to determine whether the application program is tampered.