Method and apparatus for authenticating and managing application using trusted platform module

A method for managing an application using a mobile trusted module included in a mobile device, the method comprising:

• receiving a storage root key (SRK) generation request from the application which is installed in the mobile device;
• generating an application SRK generation request message including identification information on the application and transmitting the generated application SRK generation request message to the mobile trusted module;
• and
• receiving and storing SRK generation result information on the application from the mobile trusted module,
• wherein the generated SRK is used to safely store at least some of data and key values which are generated only by the application.

An apparatus for authenticating and managing an application, the apparatus comprising:

• a mobile device having a memory and a processor coupled to the memory;
• a mobile trusted module included in the mobile device and configured to store a hash value of an authentication data for at least one application and a secret key value of an authentication data which are installed in a mobile device, authenticate the application using the stored hash value and secret key value of the authentication data, and generate a storage root key (SRK) for the application, the hash value of the authentication data being generated by a mobile device manufacturer or a common carrier;
• and
• a trusted software stack (TSS) middleware configured to generate a message requesting authentication for the application and generation of the storage root key (SRK) and transmit the generated message to the mobile trusted module and manage result information received from the mobile trusted module in response to the transmitted message,
• wherein the mobile trusted module includes an internal memory and the internal memory stores the secret key values for the authentication data and the hash values of the authentication data for each of the at least one application.