Application access control method and electronic apparatus implementing the same

1. A method of access control in an electronic apparatus, the method comprising:

detecting an access request to a resource from an application included in a first area of a memory by a processor of the electronic apparatus;

in response to the access request, executing an access control module included in a second area of the memory to calculate a hash value of the application by the processor;

determining whether a record exists in the memory, the record corresponding to the hash value and identification information of the application, by executing the access control module by the processor; and

allowing access to the resource by the processor when the record exists in the memory, the record corresponding to the hash value and the identification information of the application,

wherein the resource includes a system resource and an application resource, wherein the determining of whether the record exists in the memory comprises:

decrypting the record encrypted and stored in the first area by using a key included in the second area; and

determining whether the decrypted record corresponds to the hash value and the identification information,

wherein the second area is an area requiring authentication of access by the processor.

2. The method of claim 1 , wherein the memory is a volatile memory.

3. The method of claim 1 , wherein allowing of the access to the resource comprises:

decrypting another the record encrypted and stored in the first area by using a key included in the second area; and

transferring the resource to the application, wherein the second area is an area requiring authentication of access by the processor.

4. The method of claim 1 , further comprising:

encrypting the resource;

calculating a first hash value of the resource and encrypting the first hash value by a key; and

storing the encrypted resource and the encrypted first hash value,

wherein allowing of the access to the resource comprises:

decoding the encrypted resource by the key to calculate a second hash value;

decoding the encrypted first hash value by the key; and

allowing access to the resource when the second hash value is equal to the first hash value,

wherein the key is stored in an area of the memory requiring authentication of access by the processor.

5. The method of claim 1 , wherein calculating of the hash value comprises calculating at least one hash value from among hash values of a binary path of the application, a code of the application, and static data of the application.

6. The method of claim 1 , wherein the identification information comprises at least one of a binary path of the application and information stored in relation to the application.

7. The method of claim 1 , further comprising outputting a warning message when the record corresponding to the hash value and the identification information of the application does not exist in the memory.

8. The method of claim 1 , further comprising:

detecting a registration request from a second application by the processor;

in response to the registration request, calculating a second hash value of the second application;

determining whether a second record exists in the memory, the second record corresponding to the second hash value and second identification information of the second application; and

storing the second hash value and the second identification information of the second application when the second record does not exist in the memory.

9. An electronic apparatus comprising:

a first memory divided into a first area and a second area;

a second memory configured to store an access control table including a hash value and identification information of an application and a record for access control of the application to correspond to a resource; and

a processor configured to load the access control module into the first area and load the record in the first area,

wherein, using the access control module loaded into the first area, the processor is configured to perform:

in response to an access request from the application, calculating a hash value of the application by the processor;

determining whether a record exists in the first memory, the record corresponding to the hash value and identification information of the application; and

allowing access to the resource when the record exists in the first memory, wherein the resource includes a system resource and an application resource,

wherein the determining of whether the record exists in the first memory comprises:

decrypting another record encrypted and stored in the first area by using a key included in the second area; and

determining whether the decrypted record corresponds to the hash value and the identification information, and

wherein the second area is an area requiring authentication of access.

10. The electronic apparatus of claim 9 , wherein at least one of the first memory and the second memory is a volatile memory.

11. The electronic apparatus of claim 9 , wherein allowing of the access to the resource comprises:

decrypting another record encrypted and stored in the first area by using a key included in the second area; and

transferring the resource to the application,

wherein the second area is an area requiring authentication of access.

12. The electronic apparatus of claim 9 , wherein the processor is configured to divide the first memory into the first area and the second area and loads a key for decoding stored in a third memory into the second area.

13. The electronic apparatus of claim 9 , wherein the access control module is configured to perform:

encrypting the resource;

calculating a first hash value of the resource and encrypting the first hash value by a key; and

storing the encrypted resource and the encrypted first hash value, wherein allowing of the access to the resource comprises:

decoding the encrypted resource by the key to calculate a second hash value;

decoding the encrypted first hash value by the key; and

allowing access to the resource when the second hash value is equal to the first hash value,

wherein the key is stored in an area of the memory, the area requiring authentication of access by the processor.

14. The electronic apparatus of claim 9 , wherein calculating of the hash value comprises:

calculating at least one hash value from among hash values of a binary path of the application, a code of the application, and static data of the application.

15. The electronic apparatus of claim 9 , wherein the identification information comprises at least one of a binary path of the application and information stored in relation to the application.

16. The electronic apparatus of claim 9 , wherein the access control module is configured to output a warning message when a record corresponding to the hash value and the identification information of the application does not exist in the memory.

17. The electronic apparatus of claim 9 , wherein, using the access control module, the processor is configured to perform:

detecting a registration request from a second application;

in response to the registration request, calculating a second hash value of the second application;

determining whether a second record exists in the memory, the second record corresponding to the second hash value and identification information of the second application; and

storing the second hash value and the identification information of the second application when the second record does not exist in the memory.