Apparatus and system for remotely verifying integrity of memory for mobile platform, and method therefor

A system comprising:

• the verification apparatus that determines whether the device has the shared private key with the verification apparatus by checking whether a second authentication code generated by the device matches a first authentication code generated by the verification apparatus, generates a local check code by filling empty areas of the memory in the device with first random numbers, and verifies the integrity of the device by determining whether the local check code matches the remote check code;
• and
• the device that generates the second authentication code using the information on the first authentication code produced by the verification apparatus and creates the remote check code based on the information used to generate the local check code,
• wherein the verification apparatus generates the first authentication code using a second random number,
• wherein the verification apparatus comprises a verifying unit which comprises:
• a generating unit that produces the second random number used to generate the first authentication code;
• and
• an encoding unit that encrypts the second random number and the shared private key and determines whether the first authentication code generated by the verification apparatus matches the second authentication code generated by the device;
• wherein the verification apparatus is communicably connected to the device over a network, to remotely verify the integrity of the memory in the device.

A method comprising:

• determining whether a device has a shared private key with a verification apparatus by checking whether a first authentication code generated by the verification apparatus matches a second authentication code generated by the device;
• when the device has the shared private key with the verification apparatus, filling empty areas of a memory in the device with first random numbers based on a pre-stored memory filling map and generating a local check code that verifies an integrity of the memory by reading contents of the memory filled with the first random number;
• transmitting, to the device, information on the first authentication code generated by the verification apparatus and an integrity check parameter used to create a remote check code, that verifies the integrity of the memory, and receiving the second authentication code and the remote check code from the device;
• and
• verifying the integrity of the memory by checking if the local check code matches the remote check code,
• wherein the verification apparatus generates the first authentication code using a second random number,
• wherein the determining operation comprises:
• generating the second random number used to create the first authentication code;
• and
• encoding the second random number and the shared private key and determining whether the first authentication code generated by the verification apparatus matches the second authentication code generated by the device;
• wherein the verification apparatus is communicably connected to the device over a network, to remotely verify the integrity of the memory in the device.

A method comprising:

• determining whether a device has a private key shared with a verification apparatus by checking whether a first authentication code generated by the device matches a second authentication code generated by the verification apparatus;
• the verification apparatus filling empty areas of the memory in the device with first random numbers based on a pre-stored memory filling map and generating a local check code that verifies an integrity of the memory by reading contents of the memory filled with the first random number;
• the verification apparatus transmitting to the device an integrity check parameter used to generate a remote check code, generated by the device that verifies the integrity of the memory;
• the device generating the remote check code using the received integrity check parameter and transmitting the remote check code generated by the device to the verification apparatus;
• and
• verifying the integrity of the memory in the device by checking if the local check code matches the remote check code,
• wherein the verification apparatus generates the second authentication code using a second random number,
• wherein the verification apparatus comprises a verifying unit which comprises:
• a generating unit that produces the second random number used to generate the first authentication code;
• and
• an encoding unit that encrypts the second random number and the shared private key and determines whether the first authentication code generated by the verification apparatus matches the second authentication code generated by the device;
• wherein the verification apparatus is communicably connected to the device over a network, to remotely verify the integrity of the memory in the device.

A device which shares a private key with a verification apparatus, the device comprising:

• an interface unit that receives an integrity check parameter and information on a first authentication code generated by the verification apparatus, and transmits a second authentication code generated by the device and a generated remote check code to the verification apparatus;
• an authenticating unit that generates the second authentication code using a first random number and the information on the first authentication code generated by the verification apparatus;
• a code generating unit that produces the remote check code using a received integrity check parameter and a message authentication code (MAC) generating function;
• and
• a central processing unit (CPU) that stores the MAC generating function and the shared private key,
• wherein the verification apparatus generates the first authentication code using a second random number,
• wherein the verification apparatus comprises a verifying unit which comprises:
• a generating unit that produces the second random number used to generate the first authentication code;
• and
• an encoding unit that encrypts the second random number and the shared private key and determines whether the first authentication code generated by the verification apparatus matches the second authentication code generated by the device;
• wherein the integrity check parameter comprises a memory filling map to fill empty areas of a memory in the device, and information on the first random number used to generate a local check code;
• wherein the verification apparatus is communicably connected to the device over a network, to remotely verify the integrity of the memory in the device.