System and method of verifying integrity of software

A method of verifying integrity of software installed on a mobile terminal by an office trust software monitor server, the method comprising:

• receiving, by the office trust software monitor server from the mobile terminal, mobile terminal information including a first software hash value and a software identification (ID) with respect to the software;
• transmitting, by the office trust software monitor server, the software ID received from the mobile terminal to a software publishing server;
• receiving, by the office trust software monitor server, from the software publishing server, a second software hash value with respect to the software corresponding to the software ID;
• comparing, by the office trust software monitor server, the first software hash value and the second software hash value to produce a comparison result;
• verifying, by the office trust software monitor server using the comparison result, the integrity of the software;
• receiving, by a smart trust software monitor server from the office trust software monitor server, a first initial hash value with respect to a software installation region;
• receiving, by the smart trust software monitor server from the mobile terminal, a second initial hash value with respect to the software installation region;
• comparing, by the smart trust software monitor server, the first initial hash value and the second initial hash value;
• transmitting, by the smart trust software monitor server to the mobile terminal, the verification failure alarm information to the mobile terminal when the first initial hash value and the second initial hash value are not the same;
• and
• performing, by the mobile terminal in response to receiving the verification failure alarm information, a security policy, the security policy including at least one of an operation of deleting the software and an operation of limiting access to a memory by the software,
• wherein the mobile terminal comprises a second memory divided into the software installation region in which a data value is not changed and a user data region in which the data value is changed, and
• wherein the verifying of the integrity comprises:
• generating, by the office trust software monitor server, alarm information according to the comparison result of the first software hash value and the second software hash value, and
• transmitting the generated alarm information to the mobile terminal.

A method, performed by a smart trust software monitor server, of verifying integrity of software installed on a mobile terminal, the method comprising:

• receiving, from an office trust software monitor server, an identification (ID) of the office trust software monitor server and mobile terminal information including a first initial hash value, the first initial hash value being obtained by applying a hash function to data of an initial state of a software installation region of the mobile terminal;
• updating the mobile terminal information which is previously stored using the mobile terminal information which is repeatedly received from the office trust software monitor server;
• transmitting, to the mobile terminal, a request for integrity verification of the software;
• receiving, from the mobile terminal in response to the request of the integrity verification of the software, a second initial hash value with respect to the software installation region;
• comparing the first initial hash value and the second initial hash value to produce a comparison result;
• verifying the integrity of the software using the comparison result;
• transmitting, to the mobile terminal, verification failure alarm information in response to a determination that the verification of the software is failed,
• wherein the verification failure alarm information indicates that the mobile terminal is to perform a security policy, the security policy including at least one of an operation of deleting the software and an operation of limiting access to a memory by the software,
• wherein the mobile terminal comprises a second memory divided into the software installation region in which a data value is not changed and a user data region in which the data value is changed, and
• wherein the verifying of the integrity comprises:
• generating alarm information according to the comparison result of the first initial hash value and the second initial hash value;
• and
• transmitting the generated alarm information to the mobile terminal, the generated alarm information including one of the verification failure alarm information and verification failure alarm information.