IP Library › Granted Patent US 10,474,845
Granted Patent B2
US 10,474,845 · App. 15/631,916 · Granted Nov 12, 2019

Duo operating system for android security, mobile device having the same, method of securing mobile device having the same

Inventors: Souhwan Jung (Seoul, KR); Ngoc-Tu Chau (Seoul, KR); Jungsoo Park (Seoul, KR)
Assignee: FOUNDATION OF SOONGSIL UNIVERSITY-INDUSTRY COOPERATION
G06F21/74G06F9/545G06F21/53G06F21/6281
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,474,845
App. No.
15/631,916
Granted
Nov 12, 2019
Kind
B2
Abstract

A duo operating system (OS) for Android security is provided. The duo operating system includes an Android kernel providing drivers for a hardware and an interface of a mobile device, a security platform storing a security key of an integrity check when a kernel is booted in a Linux space, a first layer containing a Linux-based operating system executing a mobile device monitoring and a mobile device security examination, and a second layer containing one or more container-based Android operating systems being a user space layer interacting with users through Android applications.

Claims (31)

1. A duo operating system (OS) for Android security, the duo operating system comprising:

an Android kernel providing drivers for interfacing with a hardware of a mobile device;

a security platform storing a security key for an integrity check when a kernel is booted in a Linux space;

a first layer creating the Linux space and containing a Linux-based operating system executing a monitoring and a security examination of the mobile device; and

a second layer creating an Android space and containing one or more container-based Android operating systems to create a user space layer interacting with users through Android applications,

wherein monitoring and security applications are installed in the Linux space and the Android applications are installed in the Android space, and the monitoring and security applications and the Android applications are operated separately from each other,

wherein, when the Android applications installed in the Android space are run, the Linux-based operating system in the first layer simultaneously detects whether the Android applications run in the second layer are malicious through the monitoring and security applications installed in the Linux space.

2. The duo operating system of claim 1 , wherein the first layer includes Android-space tools used for deployment, management, security, monitoring, and other expansions.

3. The duo operating system of claim 1 , wherein a mobile device management (MDM) module is installed on the first layer to control a behavior of the second layer.

4. The duo operating system of claim 1 , wherein a malware analysis module is installed on the first layer to analyze an Android package kit (APK) file and a .so library executed in the second layer.

5. The duo operating system of claim 1 , wherein a multi-OS single-platform is installed on the first layer.

6. A mobile device having a duo operating system for Android security, the duo operating system comprising:

an Android kernel providing drivers for interfacing with a hardware of a mobile device;

a security platform storing a security key for an integrity check when a kernel is booted in a Linux space;

a first layer creating the Linux space and containing a Linux-based operating system executing a monitoring and a security examination of the mobile device; and

a second layer creating an Android space and containing one or more container-based Android operating systems to create a user space layer interacting with users through Android applications,

wherein monitoring and security applications are installed in the Linux space and the Android applications are installed in the Android space, and the monitoring and security applications and the Android applications are operated separately from each other,

wherein, when the Android applications installed in the Android space are run, the Linux-based operating system in the first layer simultaneously detects whether the Android applications run in the second layer are malicious through the monitoring and security applications installed in the Linux space.

7. The mobile device of claim 6 , wherein the first layer includes Android-space tools used for deployment, management, security, monitoring, and other expansions.

8. The mobile device of claim 6 , wherein a mobile device management (MDM) module is installed on the first layer to control a behavior of the second layer.

9. The mobile device of claim 6 , wherein a malware analysis module is installed on the first layer to analyze an Android package kit (APK) file and a .so library executed in the second layer.

10. The mobile device of claim 6 , wherein a multi-OS single-platform is installed on the first layer.

11. A method of securing a mobile device equipped with a duo operating system (OS) including a first layer creating a Linux space and containing a Linux-based operating system executing a monitoring and a security examination for the mobile device, and a second layer creating an Android space and containing one or more container-based Android operating systems to create a user space layer interacting with users through Android applications, the method comprising:

verifying, by an Android kernel, an integrity of an Android container through a security platform in which a security key is stored when a kernel is booted in the Linux space;

executing the Android applications installed in the second layer; and

detecting a malicious behavior on the Android applications installed in the second layer through monitoring and security applications installed in the first layer,

wherein the monitoring and security applications and the Android applications are operated separately from each other,

wherein, when the Android applications installed in the second layer are run, the Linux-based operating system in the first layer simultaneously detects whether the Android applications run in the second layer are malicious through the monitoring and security applications installed in the first layer.

12. The method of claim 11 , further comprising continuously operating, by an administrator program installed in the first layer, to analyze an Android package kit (APK) file and a .so library executed in the second layer.

13. The method of claim 11 , further comprising, when the Android-space tools and the mobile device monitoring and security application are downloaded to the mobile device, installing the Android-space tools and the mobile device monitoring and security application on the first layer, wherein the Android-space tools are used for deployment, management, security, and monitoring.

14. The method of claim 11 , further comprising installing a new Android application on the second layer when the new Android application is downloaded to the mobile device.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 18, 2021
From: FOUNDATION OF SOONGSIL UNIVERSITY-INDUSTRY COOPERATION
To: CROWDSTRIKE, INC.
Reel/Frame 057824/0340 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 23, 2017
From: JUNG, SOUHWAN; CHAU, NGOC-TU; PARK, JUNGSOO
To: FOUNDATION OF SOONGSIL UNIVERSITY-INDUSTRY COOPERATION
Reel/Frame 042800/0139 →
Priority Claims (2)
KR 10-2016-0152410 · Nov 16, 2016 · national
KR 10-2017-0005820 · Jan 13, 2017 · national
Continuity (1)
Related Publication 20180137308A1 · May 17, 2018