Apparatus and system for remotely verifying integrity of memory for mobile platform, and method therefor

A method for verifying the integrity of a device that is connected to a verification apparatus over a network, the method comprising:

• determining whether the device has a shared private key with the verification apparatus by checking whether a first authentication code generated by the verification apparatus matches a second authentication code generated by the device;
• when the device has the shared private key with the verification apparatus, filling empty areas of a memory in the device with first random numbers based on a pre-stored memory filling map and generating a local check code that verifies an integrity of the memory;
• transmitting, to the device, information on the first authentication code generated by the verification apparatus and an integrity check parameter used to create a remote check code, that verifies the integrity of the memory, and receiving the second authentication code and the remote check code from the device;
• and
• verifying the integrity of the memory by checking if the local check code matches the remote check code.

A method using a system comprising a device and a verification apparatus communicably connected to the device over a network that remotely verifies the integrity of a memory in the device, the method comprising:

• determining whether the device has a private key shared with the verification apparatus by checking whether a first authentication code generated by the device matches a second authentication code generated by the verification apparatus;
• the verification apparatus filling empty areas of the memory in the device with first random numbers based on a pre-stored memory filling map and generating a local check code that verifies the integrity of the memory;
• the verification apparatus transmitting to the device an integrity check parameter used to generate a remote check code, generated by the device that verifies the integrity of the memory;
• the device generating the remote check code using the received integrity check parameter and transmitting the remote check code generated by the device to the verification apparatus;
• and
• verifying the integrity of the memory in the device by checking if the local check code matches the remote check code.

A device which shares a private key with a verification apparatus and is connected to the verification apparatus via a network, the device comprising:

• an interface unit that receives an integrity check parameter and information on a first authentication code generated by the verification apparatus, and transmits a second authentication code generated by the device and a generated remote check code to the verification apparatus;
• an authenticating unit that generates the second authentication code using a second random number and the information on the first authentication code generated by the verification apparatus;
• a code generating unit that produces the remote check code using a received integrity check parameter and a message authentication code (MAC) generating function;
• and
• a central processing unit (CPU) that stores the MAC generating function and the shared private key.