JP2001290708A - Information processor and private information security method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processor and a private information security method capable of preventing a program or data managed by an individual from being used or quoted by others. SOLUTION: This processor has a plurality of freely attachable and detachable semiconductor storing parts 1, 2 and 3 provided with program storage areas 1A, 2A and 3A and key information storage areas 1B, 2B and 3B, a selector 18 selecting and connecting any of the parts 1, 2 and 3 to a system bus 26, a key information inputting means 12 for being able to input key information from the outside and a selector decision circuit 14 for deciding which to be selected among the parts 1, 2 and 3 with the selector 18, and the selector decision circuit 14 makes the selector 18 select a coinciding semiconductor storing part 1, 2 or 3 obtained by comparing the pieces of key information of the areas 1B, 2B and 3B with the key information from the means 12.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to private information management technology, and more particularly, to private information or private programs based on key information in an environment where a single device can be used by a plurality of persons. The present invention relates to an information processing apparatus and a private information security method that can be used independently and can prevent a program or data managed by an individual from being used or cited by another person.

[0002]

2. Description of the Related Art In recent years, a flash memory card which has a PCMCIA interface or the like as an external storage device and is detachably connected to a personal computer main body has been used in a notebook personal computer or the like.

[0003] However, data stored in the flash memory card can be easily read by any person who accesses the personal computer by removing the flash memory card from the main body of the personal computer and connecting it to another computer. Was. For this reason, flash memory cards are not suitable for storing confidential data.

[0004] As a conventional technique for solving such a problem, for example, Japanese Patent Application Laid-Open No. H11-26553 is disclosed.
Japanese Patent Publication No. 18 discloses a method. That is, the prior art aims to provide a mutual authentication system and a mutual authentication method that can authenticate a person who accesses data stored in a removable storage device. And an access unit, wherein the access unit creates first authentication data based on a password supplied by an operation of the operator, creates a delivery key, and supplies the delivery key to the storage unit. First digest creating means for creating a first digest representing a result of converting the first authentication data so that the first authentication data cannot be substantially reverse-converted; and substantially incapable of performing the reverse conversion on the first authentication data. And a second digest creating unit that creates a second digest representing the result of the conversion and supplies the digest to the storage unit. A data storage unit having an area, a unit for storing the encrypted second authentication data, and a unit for decrypting the encrypted second authentication data using the delivery key supplied from the access unit. Creating a third digest representing the second authentication data converted so that the reverse conversion cannot be performed substantially, and supplying the third digest to the access means; A fourth digest creating means for creating a fourth digest representing what has been converted so that the inverse conversion cannot be performed, and obtaining a second digest from the access means so that the second and fourth digests are substantially It is determined whether or not the authentication data indicates the same authentication data, and if it is determined that the authentication data is indicated, the data supplied from the access means is stored and stored in the storage area in accordance with the instruction of the access means. Means for obtaining data from the area and supplying the data obtained from the storage area to the access means, wherein the access means obtains a third digest from the storage means, and the first and third digests Determining whether to indicate substantially the same authentication data, and when it is determined to indicate, indicates an instruction to request the storage means to acquire data from the storage area, an instruction to request storage of data in the storage area, and There is provided a means for supplying data to the storage means.

According to such a mutual authentication system, the storage means and the access means are such that the authentication data stored in the storage means and the authentication data generated from the password supplied to the access means are substantially the same. Then, the user or the like is permitted to access the storage area of the data storage means. Therefore, if the password is not disclosed to anyone other than the user, the person who accesses the data is authenticated.

The access means includes means for creating a user key based on the password, encrypting the user key using the delivery key to create an encrypted user key, and supplying the encrypted user key to the storage means. , The storage means has a storage area substantially inaccessible from the access means, and stores the system key, the encrypted second authentication data, and the encrypted unique key in the storage area. Means, means for decrypting the encrypted user key supplied from the access means using the delivery key, and means for decrypting the encrypted unique key using the system key and the decrypted user key. Key decryption means; and authentication data decryption means for decrypting the encrypted first authentication data using the decrypted unique key to create second authentication data. It may be. Thereby, the second
Confidentiality of the authentication data is increased, and the confidentiality of data used for decryption of the second authentication data is also increased. Therefore, there is a danger that access to the storage unit may be erroneously permitted by an unauthorized operation or the like. Decrease.

The storage means decodes the supplied data when the access means issues an instruction to request storage of data in the storage area and supplies data to be stored in the storage area. Means for encrypting using the unique key and storing the encrypted data in the storage area, and storing the encrypted data when the access means instructs to obtain the data stored in the storage area. And means for decrypting using the unique key obtained from the area, and supplying it to the access means.
As a result, the data stored in the storage area of the data storage means is stored in a state of being encrypted with the unique key.
For this reason, for example, even if the storage area receives an unauthorized access, the contents of the data will not be leaked unless the person who has made the unauthorized access knows the unique key. Therefore, the confidentiality of data is further enhanced.

[0008] The unique key decrypting means comprises means for substantially preventing data generated for decrypting the encrypted unique key and the decrypted unique key from being supplied to the access means. May also be
The authentication data decrypting means comprises means for substantially preventing data generated for decrypting the encrypted first authentication data and second authentication data from being supplied to the access means. It may be. This allows
Since the data generated in the process of restoring the unique key and the authentication data is also kept secret, the danger that the data leaks to the outside and that the unique key and the authentication data are back calculated is reduced.

The access means acquires the first delivery key information from the means for generating a first random number and the storage means,
Means for creating a first delivery key based on the delivery key information and the first random number, and obtaining a second random number from the storage means, and providing a second delivery key based on the second random number and the first random number. Means for generating key information and supplying the second delivery key information to the storage means, wherein the storage means generates a second random number and a third random number; Means for generating the first delivery key information based on the first delivery key information and supplying the first delivery key information and the second random number to the access means;
Means for generating a second delivery key substantially identical to the first delivery key based on the third random number and the second delivery key information supplied from the access means. . As a result, the delivery key is also sent from the access means to the storage means while maintaining the confidentiality. Therefore, the delivery key is illegally acquired, and the data exchanged between the access means and the storage means is decrypted illegally. Dangers such as

The first to fourth digests are, for example,
The access unit includes a unit that generates a fourth random number and supplies the generated random number to the storage unit, and the first digest creation unit includes the first digest generation unit.
Means for generating a first digest by determining a value of a one-way function using the authentication data of the above and a fourth random number as variables, wherein the second digest generating means comprises: Means for generating a second digest by determining a value of a one-way function having a third random number as a variable, wherein the third digest generating means includes: a second authentication data; a fourth random number; Means for generating a third digest by obtaining the value of a one-way function having a variable as a variable. The fourth digest generating means includes a means for determining the second authentication data and the third random number as a variable. It is generated by providing a means for generating a fourth digest by obtaining the value of the direction function.

The access means converts signature information, which is supplied in accordance with the operation of the operator, for identifying the operator so that the reverse conversion cannot be performed substantially, and creates signature information for specifying the operator. Means for supplying information to the storage means,
The storage means is means for obtaining the signature information supplied from the access means, and determines whether or not the signature information is stored in the storage area. If it is determined that the signature information is not stored, the storage means is supplied from the access means. The signature information is stored in the storage area, and when it is determined that the signature information is stored, whether the stored signature information and the signature information supplied from the access unit indicate substantially the same operator. And means for refusing to follow the instruction given by the access means when it is determined that the access is not shown.
By this, when a person who has already accessed the storage area of the data storage means is substantially prevented from accessing the storage area by another person, the data in the storage area can be obtained by another person. The danger of being reduced.

[0012]

However, in the prior art, each person is required to independently convert a private program or data based on key information in an environment where a plurality of persons can touch with one apparatus. Since it is difficult to use, there is a problem that it is not possible to prevent a program or data managed by an individual from being used or cited by others.

The present invention has been made in view of such a problem, and an object of the present invention is to store private programs or data as key information in an environment where a plurality of people can touch with one device. It is an object of the present invention to provide an information processing apparatus and a private information security method that can be used independently by each individual based on the above and prevent programs or data managed by the individual from being used or quoted by others.

[0014]

The gist of the present invention is that a plurality of detachable semiconductor storage units each having a program storage area and a key information storage area, and which of the plurality of semiconductor storage units are provided. A selector for selecting one of them and connecting to the system bus, key information input means for enabling external input of key information, and a selector determining circuit for determining which of the semiconductor storage units is to be selected by the selector. The selector determination circuit compares the key information stored in the key information storage area of the semiconductor storage unit with the key information input from the key information input means, and determines that the semiconductor storage unit matches. An information processing apparatus characterized by having a function of causing the selector to make a selection. The gist of the invention according to claim 2 is that each of the plurality of semiconductor storage units is connected to a predetermined bus, and the bus is selectively connected to the system bus by the selector. A boot loader, a program storage area, a main storage unit, a control circuit including a CPU, and the selector determination circuit are connected to each other, and the key information input unit has a function of acquiring key information from the outside, and the selector determination circuit And connecting the key information to the selector determination circuit, wherein the selector determination circuit is configured to instruct the selector to connect to the selector and connect any of the buses to the system bus. Claim 1.
In the information processing device described in the above. The gist of the invention described in claim 3 is that the selector has means for acquiring key information of each of the plurality of semiconductor storage units and transmitting the key information to the selector determination circuit. Information processing device. The gist of the invention described in claim 4 resides in the information processing apparatus according to any one of claims 1 to 3, wherein the semiconductor storage unit is configured by an IC card. The gist of the invention described in claim 5 is that, by setting the IC card in a device and providing key information from the outside, a program owned by the individual is executed, and processing is performed using private data. An information processing apparatus according to a fourth aspect is provided. The gist of the invention according to claim 6 is that a plurality of detachable semiconductor storage units each including a program storage area and a key information storage area and one of the plurality of semiconductor storage units are selected. A selector connected to a system bus, key information input means for enabling external input of key information, and a selector determination circuit for determining which of the semiconductor storage units is to be selected by the selector; Has a function of comparing the key information stored in the key information storage area of the semiconductor storage unit with the key information input from the key information input unit and allowing the selector to select the semiconductor storage unit even if the key information matches. Information processing device having
A step of storing different specific key information in each of the key information storage areas of the plurality of semiconductor storage units; a step of the selector recognizing the key information through a bus; Collecting the key information stored in the semiconductor storage unit, obtaining the key information from the outside by the key information input means, and selecting the key information obtained by the key information input means into the selector. Sending to the determination circuit, and when the selector determination circuit recognizes that the key information of the semiconductor storage unit and the key information obtained from the key information input unit match, controls the selector to connect the bus to the system. Connected to a bus, the selector notifies the control circuit that the bus has been connected to the system bus, and based on the notification from the selector, The control circuit activating a boot loader to transfer a program from a program storage area of the semiconductor storage unit to the program storage area connected to the system bus; and transferring the transferred program to the control circuit. The selector determining circuit interrupts the control circuit through the system bus based on the key information newly obtained from the key information input means, and stops the program being executed. Private information security method characterized by having.

[0015]

DESCRIPTION OF THE PREFERRED EMBODIMENTS (First Embodiment) FIG. 1 is a functional block diagram for explaining an information processing apparatus 10 according to one embodiment of the present invention. In FIG. 1, 1, 2,
3 is a semiconductor storage unit, 1A, 2A and 3A are program storage areas, 1B, 2B and 3B are key information storage areas, 10 is an information processing apparatus, 12 is key information input means, 14 is a selector determination circuit, and 16 is a control circuit. , 18 are selectors, 20 is a boot loader, 22 is a program storage area, 24 is a main storage unit, 26 is a system bus, and 31, 32 and 33 are buses.

The information processing apparatus 10 according to the present embodiment has a detachable semiconductor storage section 1 having a program storage area 1A and a key information storage area 1B, and a detachable semiconductor storage section having a program storage area 2A and a key information storage area 2B. Plural semiconductor storage units 2
A plurality of detachable semiconductor storage units 3 each having a program storage area 3A and a key information storage area 3B, and selecting one of the semiconductor storage units 1, 2, 3 and connecting to the system bus 26 A key information input means 12 for inputting key information from the outside, and a selector determination circuit 14 for determining which semiconductor storage unit 1, 2, 3 is to be selected by the selector 18. The determination circuit 14 is configured to store the key information storage areas 1B, 2B, 3 of the semiconductor storage units 1, 2, 3,
B, the key information input from the key information input means 12 is compared with the key information and the semiconductor storage units 1, 2, 2
It is characterized in that it has a function of causing the selector 18 to select 3.

The semiconductor storage units 1, 2, 3 are respectively connected to a bus 3
1, 32 and 33 are connected. Buses 31, 32, 33
Are selectively connected to the system bus 26 by the selector 18.

The system bus 26 has a boot loader 2
0, a program storage area 22, a main storage unit 24, a control circuit 16 including a CPU, and a selector determination circuit 14 are connected to each other.

The key information input means 12 has a function of acquiring key information from the outside, and is connected to the selector determination circuit 14 and transmits the key information to the selector determination circuit 14.

The selector judging circuit 14 is connected to the selector 18 and connects one of the buses 31, 32, 33 to the system bus 2.
An instruction is issued to the selector 18 to connect to the selector 6.

The selector 18 is connected to the semiconductor storage units 1 and 1
There is a means for acquiring a few key information and transmitting it to the selector determination circuit 14.

Next, the operation of the information processing apparatus 10 (private information security method) will be described. Referring to FIG.
In the present embodiment, a plurality of semiconductor storage units 1, 2, 2
Different key information is stored in the key information storage areas 1B, 2B, 3B of No. 3 respectively.

The selector 18 transmits the key information to the bus 31,
32 and 33. The selector determination circuit 14 issues a request to the selector 18 and collects each key information stored in the semiconductor storage units 1, 2, and 3.

The key information input means 12 has means for obtaining key information from outside. For example, this includes inputting a password from a keyboard and inputting fingerprint information from a scanner. The concept of the key is palm print information, iris information, and a wide variety of other types. Here, a password is assumed as the key information. That is, the key may be read as a password. The key information obtained by the key information input means 12 is sent to the selector determination circuit 14.

Here, when the selector determination circuit 14 recognizes that the key information of the semiconductor storage unit 1 and the key information obtained from the key information input means 12 match, the selector 18 is controlled to connect the bus 31 to the system bus 26. Connecting. Selector 18
Notifies the control circuit 16 that the bus 31 has been connected to the system bus 26. This notification is not limited to the bus 31, and the selector 18 notifies the control circuit 16 if any of the buses 32 and 33 is connected to the system bus 26.

The control circuit 16 activates the boot loader 20 based on the notification from the selector 18 and
The program is transferred from the program storage area 1A to the program storage area 22 connected to the system bus 26. Then, the transferred program is stored in C of the control circuit 16.
Execute using PU.

Based on the key information newly obtained from the key information input means 12, the selector determination circuit 14
To interrupt the control circuit 16 to stop the program being executed.

In this embodiment, three examples of the semiconductor storage units 1, 2, 3 are shown. However, the present invention is not limited to this, and the extension from one to a finite n (natural number) is possible. It is easy to think about.

The present embodiment is configured as described above, and has the following effects. First, the first effect is that the key information can be input and the corresponding programs in the semiconductor storage units 1, 2, and 3 can be executed. It can be operated.

A second effect is that it is possible to prohibit the use of a program or data by mistake or obvious intention since it cannot be executed by another person.

A third effect is that a necessary program can be selectively selected by connecting a plurality of semiconductor storage units 1, 2, and 3. For example, when it is assumed that the information processing apparatus 10 is used as a video game, an effect is provided that a user can select and use a necessary program (game).

The fourth effect is that the semiconductor storage unit 1
Attaching and detaching the components 2 and 3 makes it easy to change or expand the program. For example, in a case where data of a digital camera or digital data of music is stored in the semiconductor storage units 1, 2, 3 simultaneously with a program, data can be easily exchanged as needed.

(Second Embodiment) In the present embodiment, the semiconductor storage units 1, 2, 3 are configured by IC cards, and are set in the information processing apparatus 10 to provide key information from the outside, thereby enabling personal information It is characterized in that it runs its own program and performs processing using private data.

It should be noted that the present invention is not limited to the above embodiments, and it is clear that the embodiments can be appropriately modified within the scope of the technical idea of the present invention. Further, the number, position, shape, and the like of the constituent members are not limited to the above-described embodiment, and can be set to numbers, positions, shapes, and the like suitable for carrying out the present invention. In each drawing, the same components are denoted by the same reference numerals.

[0035]

Since the present invention is configured as described above, the following effects can be obtained. First, the first effect is that the key information can be input and the corresponding program of the semiconductor storage unit can be executed, so that the operation can be performed using the programs and data required by the persons holding the key. It is.

The second effect is that it is possible to prohibit the use of a program or data by mistake or obvious intention since it cannot be executed by another person.

A third effect is that a necessary program can be selectively selected by connecting a plurality of semiconductor storage units. For example, when it is assumed that the information processing apparatus is used as a video game, an effect is provided that a user can select and use a necessary program (game).

A fourth effect is that the program can be easily changed or expanded by attaching and detaching the semiconductor storage unit. For example, in a case where data of a digital camera or digital data of music is stored in a semiconductor storage unit at the same time as a program, data can be easily exchanged as needed.

[Brief description of the drawings]

FIG. 1 is a functional block diagram for explaining an information processing apparatus according to an embodiment of the present invention.

[Explanation of symbols]

 1, 2, 3 ... semiconductor storage section 1A, 2A, 3A ... program storage area 1B, 2B, 3B ... key information storage area 10 ... information processing device 12 ... key information input means 14 ... selector determination circuit 16 ... control circuit 18 ... Selector 20 Boot loader 22 Program storage area 24 Main storage unit 26 System bus 31, 32, 33 Bus

Claims (6)

[Claims] 1. A plurality of detachable semiconductor storage units each having a program storage area and a key information storage area, a selector for selecting any one of the plurality of semiconductor storage units and connecting to the system bus, A key information input unit that allows key information to be input from outside; and a selector determination circuit that determines which of the semiconductor storage units is to be selected by the selector. A key information stored in a key information storage area, and a key information input from the key information input means. The key information is matched, but has a function of causing the selector to select the semiconductor storage unit. apparatus. 2. Each of the plurality of semiconductor storage units is connected to a predetermined bus, the bus is selectively connected to the system bus by the selector, and a boot loader, a program storage area, A storage unit, a control circuit including a CPU, and the selector determination circuit are connected to each other. The key information input means has a function of acquiring key information from the outside, and is connected to the selector determination circuit to determine the key information by the selector determination. The circuit of claim 1, wherein the selector determination circuit is configured to connect to the selector and issue an instruction to the selector to connect one of the buses to the system bus. Information processing device. 3. The information processing apparatus according to claim 2, wherein the selector has means for acquiring key information of each of the plurality of semiconductor storage units and transmitting the key information to the selector determination circuit. 4. The information processing apparatus according to claim 1, wherein the semiconductor storage unit is configured by an IC card. 5. The personal computer according to claim 4, wherein said IC card is set in an apparatus and key information is given from outside to execute a personally owned program and perform processing using private data. Information processing device. 6. A plurality of detachable semiconductor storage units each having a program storage area and a key information storage area, a selector for selecting any one of the plurality of semiconductor storage units and connecting to a system bus, A key information input unit that allows key information to be input from the outside, and a selector determination circuit that determines which of the semiconductor storage units is to be selected by the selector,
The selector determination circuit compares the key information stored in the key information storage area of the semiconductor storage unit with the key information input from the key information input unit and determines that the key storage unit matches the key information. In the information processing apparatus having a function of selecting, a step of storing different specific key information in each of the key information storage areas of the plurality of semiconductor storage units, and a step of the selector recognizing the key information through a bus. A step in which the selector determination circuit issues a request to the selector to collect key information stored in the semiconductor storage unit; a step in which the key information input unit acquires key information from outside; Sending key information obtained by the input means to the selector determination circuit; key information of the semiconductor storage unit and key information obtained from the key information input means When the selector determination circuit recognizes that they match, the selector controls the selector to connect the bus to the system bus, and notifies the control circuit that the selector has connected the bus to the system bus. A step in which the control circuit, based on the notification from the selector, activates a boot loader and transfers a program from a program storage area of the semiconductor storage unit to the program storage area connected to the system bus; Executing the transferred program using the CPU of the control circuit, and based on the key information newly obtained from the key information input means,
The private information security method according to claim 1, further comprising a step of interrupting the control circuit via the system bus and stopping the program being executed.