Information security system in smart mobile environment

Abstract

Provided is a security communication method of a terminal device. A first authentication unit of the terminal device identifies a first subscriber to connect a first communication network. A second authentication unit of the terminal device exclusively operates with the first authentication unit, and identifies a second subscriber to connect a second communication network which is different from the first communication network. When the second subscriber is identified, at least one external communication module of the terminal device can be inactive.

1 . A terminal device, comprising:
 an application processor configured to perform information processing for the terminal device;   a first authentication unit configured to identify a subscriber when the terminal device connects to a communication network; and   a second authentication unit configured to identify a subscriber to the terminal device by exclusively operating with the first authentication unit, and   wherein, when the second authentication unit identifies the subscriber to the terminal device, the application processor inactivates remaining modules among modules in the terminal device for communication or data storage, from which a predetermined permanent operation group is excluded.   
     
     
         2 . The terminal device of  claim 1 , wherein the permanent operation group comprises a baseband module configured to provide a cellular communication connection. 
     
     
         3 . The terminal device of  claim 1 , wherein the remaining modules, excluding the permanent operation group, comprise at least one of a wireless local area network (WLAN) module, a Bluetooth module, a near field communication (NFC) module, and data storage media. 
     
     
         4 . The terminal device of  claim 1 , wherein the second authentication unit comprises an authentication circuit to block an unauthorized external access by performing secure authentication and an authentication module configured to identify the subscriber to the terminal device with respect to an access authorized by the authentication circuit. 
     
     
         5 . The terminal device of  claim 4 , wherein the authentication module is configured by a mobile trusted platform module (mTPM). 
     
     
         6 . The terminal device of  claim 4 , wherein the authentication module comprises a protected storage. 
     
     
         7 . The terminal device of  claim 4 , wherein the authentication circuit comprises a physical unclonable function (PUF), and
 wherein the authentication circuit is configured to perform the secure authentication using at least one identification key provided by the PUF.   
     
     
         8 . The terminal device of  claim 1 , wherein at least one of the first authentication unit and the second authentication unit is provided in a form of a subscriber identity module (SIM) card. 
     
     
         9 . The terminal device of  claim 1 , wherein the second authentication unit is provided in a form of a secure digital (SD) card. 
     
     
         10 . A terminal device, comprising:
 a first authentication unit comprising one or more processors and configured to identify a first subscriber to be connected to a first communication network; and   a second authentication unit configured to identify a second subscriber to be connected to a second communication network different from the first communication network, and   wherein, when the second subscriber is identified, the second communication network is connected and at least one of external communication module is inactivated.   
     
     
         11 . The terminal device of  claim 10 , wherein the second communication network is one of a dedicated military communication network, a dedicated administrative communication network, and a dedicated power management communication network. 
     
     
         12 . The terminal device of  claim 10 , wherein the second authentication unit comprises an authentication module configured by a mobile trusted platform module (mTPM). 
     
     
         13 . The terminal device of  claim 12 , wherein the authentication module comprises a protected storage. 
     
     
         14 . The terminal device of  claim 10 , wherein the second authentication unit comprises an authentication circuit configured to perform secure authentication and block an unauthorized external access. 
     
     
         15 . The terminal device of  claim 14 , wherein the authentication circuit comprises a physical unclonable function (PUF), and
 wherein the authentication circuit configured to performs the secure authentication using at least one identification key provided by the PUF.   
     
     
         16 . A security management method for a terminal device, the method comprising:
 determining second authentication unit performs identifying of a subscriber associated to the terminal device instead of a first authentication unit; and   inactivating at least one communication module of the terminal device.   
     
     
         17 . The method of  claim 16 , further comprising:
 blocking an access to the terminal device through an external input and output interface.   
     
     
         18 . The method of  claim 16 , wherein, when the first authentication unit identifies the subscriber to the terminal device, communication is performed using a cellular network provided by an external communication operator; and when the second authentication unit identifies the subscriber to the terminal device, communication is performed using a secure communication network different from the cellular network.