JP4549263B2 - Random number generation apparatus and random number generation method - Google Patents

Description

  The present invention relates to a random number generation device and a random number generation method.

  Conventionally, an IC card has a function of performing encryption processing by a public key cryptosystem, and is sometimes used as a means for performing personal authentication using the function. During encryption processing, a key is generated using a random number. Conventionally, pseudo-random numbers using software have been used. In this case, depending on the method of obtaining the seed that is the source of the random numbers, the generated random numbers may be biased, or once generated from the pseudo-random numbers It is pointed out that it is possible to predict the random numbers that are generated.

  In view of this, methods and apparatuses for generating random numbers using physical phenomena such as thermal noise without using pseudo-random numbers have been developed. For example, in a random number generator that automatically adjusts the phase difference between two input signals input to a flip-flop so that the appearance rate of 1 or 0 of the flip-flop output is constant, noise is generated in the input line of the flip-flop. A circuit that is in an active state as a noise generation source, characterized in that a jitter generation circuit comprising a source, an amplification circuit that amplifies noise, and a mixer circuit that generates jitter in the input signal by the amplified noise signal is added. A device that uses weak thermal noise generated in an element is known (for example, see Patent Document 1).

  In the non-contact type IC card, exchange of signals with the reader / writer, power supply, and the like are performed by wireless communication with the reader / writer. Accordingly, since the current consumption affects the communication distance, it is desirable that the IC card operates with low power consumption.

JP 2002-366347 A

  However, the above-described conventional random number generator has the disadvantages that the circuit scale is large and the power consumption is large because the random number generation macro is composed only of analog circuits. Therefore, the conventional random number generator is not suitable for a system that requires low power consumption. In addition, depending on the circuit configuration of the random number generation macro, it is necessary to change the manufacturing process, which has a disadvantage of high manufacturing cost. Furthermore, there is a disadvantage that it is necessary to provide a scramble circuit inside and to perform random number agitation.

  SUMMARY OF THE INVENTION An object of the present invention is to provide a random number generation device and a random number generation method with a small circuit scale in order to solve the above-described problems caused by the prior art. Another object of the present invention is to provide a random number generation device and a random number generation method with low power consumption. Another object of the present invention is to provide a random number generation device and a random number generation method capable of reducing the manufacturing cost. Another object of the present invention is to provide a random number generation device and a random number generation method that do not require a scramble circuit.

  In order to solve the above-mentioned problems and achieve the object, the present invention applies an intermediate potential substantially equal to the threshold value to the gate of the field effect transistor, and turns on the field effect transistor according to the fluctuation of the intermediate potential due to thermal noise. A random number is generated by utilizing the fact that off is switched. For example, the intermediate potential is generated by dividing the power supply voltage by resistance in an intermediate potential generation unit having a resistance ladder. Then, a random number is generated at a desired timing by using the flip-flop and inputting the intermediate potential generated by the intermediate potential generation unit to the data terminal of the flip-flop.

  If the value of the intermediate potential when the clock signal input to the flip-flop is active is lower than the threshold value of the field effect transistor connected to the data terminal of the flip-flop, until the clock signal input next becomes active The flip-flop holds “0” and outputs “0” as random number data. If the value of the intermediate potential when the input of the clock signal is active is higher than the threshold value of the field effect transistor, the flip-flop holds “1” until the next input of the clock signal becomes active, and the random number data "1" is output.

  According to the present invention, the intermediate potential generation unit is configured by an analog circuit, and by applying the intermediate potential generated by the analog circuit to the data terminal of the flip-flop, a through current is generated at the data signal input unit of the flip-flop. There are no other factors that can increase power consumption. Since the random number generator (flip-flop) is composed of a digital circuit, low power consumption can be achieved.

  In the present invention, a gate for supplying a fixed potential to the data terminal of the flip-flop is provided, and this gate supplies the intermediate potential to the data terminal of the flip-flop when generating a random number, and the flip-flop when not generating a random number. The fixed potential may be supplied to the data terminal. As this gate, an AND gate or an OR gate can be used. In this way, when no random number is generated, no through current is generated at the data signal input portion of the flip-flop, so that the power consumption can be further reduced.

  Further, when the intermediate potential generation unit is configured using a resistance ladder, the resistance ladder may include a resistance group for coarse adjustment and a resistance group for fine adjustment. It is also preferable to monitor the output value of the flip-flop and control the intermediate potential so that the output values “0” and “1” are generated randomly and uniformly. In this way, by allowing the random number generator to check its own generated data, a high resistance against unauthorized access from outside can be obtained.

  Alternatively, a plurality of random number generators having the above-described configuration may be provided, each random number generator may be operated at different timings, and an exclusive OR of output values of all random number generators may be output as a random number. In this way, even if the output value of each random number generator is biased to “0” or “1”, the bias is averaged by the XOR circuit, so that the generation rate of random data increases.

  According to the random number generation device and the random number generation method according to the present invention, it is possible to reduce the circuit scale by configuring the digital circuit except for the intermediate potential generation unit. In addition, since a scramble circuit is unnecessary, the circuit scale can be reduced. Furthermore, it is configured by a digital circuit except for the intermediate potential generation unit, and by preventing the through current from flowing when the random number is not generated, there is an effect that the power consumption can be reduced. Furthermore, the analog circuit of the intermediate potential generation unit can be manufactured by a CMOS manufacturing process rather than an analog dedicated process, and thus the manufacturing cost can be reduced.

  Exemplary embodiments of a random number generation device and a random number generation method according to the present invention will be explained below in detail with reference to the accompanying drawings. In the following description, the same components are denoted by the same reference numerals, and redundant description is omitted.

(Embodiment 1)
FIG. 1 is a diagram illustrating an example of a random number generation device according to the first embodiment. As shown in FIG. 1, the random number generation device 1 includes an intermediate potential generation unit 2 and a D flip-flop 3. The intermediate potential generator 2 generates an intermediate potential VCCM that is substantially equal to the threshold value of the field effect transistor that constitutes the D flip-flop 3. The intermediate potential generation unit 2 includes, for example, a resistance ladder connected between the power supply terminal VCC and the ground terminal VSS, and generates an intermediate potential VCCM by dividing the power supply voltage by this resistance ladder.

  The intermediate potential VCCM generated by the intermediate potential generator 2 is applied to the data terminal D of the D flip-flop 3. When the input of the clock signal CLK to the clock terminal CK is active, the D flip-flop 3 takes in a value corresponding to the applied potential to the data terminal D, that is, the intermediate potential VCCM generated by the intermediate potential generation unit 2. . The D flip-flop 3 holds the fetched value until the next input of the clock signal CLK becomes active, and outputs it as random number data.

  For example, when the input of the clock signal to the D flip-flop 3 is active, if the value of the intermediate potential VCCM becomes lower than the threshold value of the field effect transistor connected to the data terminal D of the D flip-flop 3 due to thermal noise, The D flip-flop 3 holds “0”, and therefore outputs “0” as random number data. On the other hand, when the input of the clock signal is active, if the value of the intermediate potential VCCM becomes higher than the threshold value of the field effect transistor due to thermal noise, the D flip-flop 3 holds “1” and “1” as random number data. Is output.

  As shown in FIGS. 2 and 3, a gate is provided between the intermediate potential generation unit 2 and the data terminal D of the D flip-flop 3, and when generating a random number at the data terminal D of the D flip-flop 3, the intermediate potential generation unit The intermediate potential VCCM may be supplied from 2, and when a random number is not generated, a fixed potential may be supplied by the gate. The random number generator 4 shown in FIG. 2 is an example using an AND gate 5 that receives the intermediate potential VCCM generated by the intermediate potential generator 2 and the generation timing signal supplied from an external CPU or logic circuit. .

  When “0” is input to the AND gate 5 as the generation timing signal, the output of the AND gate 5 is fixed to “0”, so the input of the data terminal D of the D flip-flop 3 is fixed to “0”. . When the generation timing signal is “1”, the intermediate potential VCCM generated by the intermediate potential generator 2 is input to the data terminal D of the D flip-flop 3.

  The random number generator 6 shown in FIG. 3 is an example using an OR gate 7 that receives the intermediate potential VCCM generated by the intermediate potential generator 2 and the generation timing signal supplied from the outside. When “1” is input to the OR gate 7 as the generation timing signal, the output of the OR gate 7 is fixed to “1”, so the input of the data terminal D of the D flip-flop 3 is fixed to “1”. . When the generation timing signal is “0”, the intermediate potential VCCM generated by the intermediate potential generator 2 is input to the data terminal D of the D flip-flop 3.

  In the random number generator 1 having the configuration shown in FIG. 1, a through current is generated at the data signal input portion of the D flip-flop 3 even when no random number is generated. However, as shown in FIG. 2 or FIG. 3, when a random number is not generated by providing a gate for fixing the input to the data terminal D of the D flip-flop 3, a through current is generated at the data signal input portion of the D flip-flop 3. Therefore, low power consumption can be achieved. The gate that fixes the input to the data terminal D of the D flip-flop 3 is not limited to the AND gate 5 or the OR gate 7.

(Embodiment 2)
4-6 is a figure which shows an example of the random number generator of Embodiment 2. FIG. As shown in FIG. 4, the random number generation device 8 according to the second embodiment adds an output data monitoring unit 9 that monitors the random number data output from the D flip-flop 3 to the random number generation device 1 according to the first embodiment. Is. The same applies to the random number generation device 10 shown in FIG. 5 and the random number generation device 11 shown in FIG. 6, in which an output data monitoring unit 9 is added to the random number generation device 4 shown in FIG. 2 and the random number generation device 6 shown in FIG. It is.

  The output data monitoring unit 9 outputs an intermediate potential generation change signal that instructs the intermediate potential generation unit 2 to change the intermediate potential VCCM based on the random number data output from the D flip-flop 3. When receiving the intermediate potential generation change signal from the output data monitoring unit 9, the intermediate potential generation unit 2 changes the intermediate potential VCCM to be generated.

  FIG. 7 is a diagram illustrating an example of the intermediate potential generation unit 2. Here, although the number is not particularly limited, for example, six resistors R1, R2, R3, R4, R5, and R6 are connected in series between the power supply terminal VCC and the ground terminal VSS. It is assumed that the intermediate potential VCCM is generated by a resistor ladder including resistors R1, R2, R3, R4, R5, and R6. For convenience of explanation, R1, R2, R3, R4, R5, and R6 are sequentially set from the power supply terminal VCC side.

  As shown in FIG. 7, one end of the resistor R1 is connected to the power supply terminal VCC. A transfer gate for selecting an arbitrary node of the resistor ladder as a connection node of the resistor R1 and the resistor R2, the resistor R2 and the resistor R3, the resistor R3 and the resistor R4, the resistor R4 and the resistor R5, and the resistor R5 and the resistor R6, respectively. TG1, TG2, TG3, TG4 and TG5 are connected. Control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL, and VCC4SEL are supplied to the transfer gates TG1, TG2, TG3, TG4, and TG5 from the outside, respectively.

  The transfer gates TG1, TG2, TG3, TG4, and TG5 are supplied with the inverted signals of the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL, and VCC4SEL via inverters IN1, IN2, IN3, IN4, and IN5, respectively. The output sides of the transfer gates TG1, TG2, TG3, TG4, and TG5 are commonly connected to the output line 13 of the intermediate potential generator 2. A switching transistor 12 is connected between the resistor R6 and the ground terminal VSS. The switching transistor 12 is operated by a control signal VCCSEL supplied to the gate terminal from the outside.

  The control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL and VCC4SEL are supplied from, for example, a 5-bit register provided outside. Only one of the transfer gates TG1, TG2, TG3, TG4 and TG5 is turned on by the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL and VCC4SEL, and the rest are turned off. Alternatively, all transfer gates TG1, TG2, TG3, TG4, and TG5 are turned off.

  Although not particularly limited, for example, a potential that is ½ of the power supply voltage is set as the reference potential. In the initial state, the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL, and VCC4SEL are supplied so that the intermediate potential VCCM output to the output line 13 is substantially equal to the threshold value of the field effect transistor that constitutes the D flip-flop 3. . Then, the value of the 5-bit register is changed based on the intermediate potential generation change signal output from the output data monitoring unit 9, and the on / off states of the transfer gates TG1, TG2, TG3, TG4, and TG5 are appropriately switched. It is done.

  As an example, specific numerical values will be described. For example, the resistance values of the resistors R1 and R6 are 470 kΩ, and the resistance values of the resistors R2, R3, R4, and R5 are 5 kΩ. In this case, when the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL and VCC4SEL are “0”, “0”, “1”, “0” and “0”, respectively, the power supply voltage 0 is applied to the output line 13. .Times. (= 1− (470 + 5 + 5) / (470 + 5 + 5 + 5 + 5 + 470) = 1− (480/960) = 1−1 / 2 = 1−0.5), that is, a reference potential is output. When the power supply voltage is 3.3V, the reference potential is 1.65V.

  When the threshold value of the field effect transistor constituting the D flip-flop 3 is higher than the reference potential at the time of initial setting, each control signal VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL is used to make the intermediate potential VCCM higher than the reference potential. And VCC4SEL are changed to “0”, “1”, “0”, “0”, and “0”, respectively. As a result, an intermediate potential VCCM of 0.505 times the power supply voltage (= 1− (470 + 5) / (470 + 5 + 5 + 5 + 5 + 470) = 1−475 / 960 = 1−0.495) is output to the output line 13. When the power supply voltage is 3.3V, the intermediate potential VCCM is about 1.67V.

  If even the potential of 0.505 times the power supply voltage is lower than the threshold value of the field effect transistor constituting the D flip-flop 3, the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL and VCC4SEL are used to further increase the intermediate potential VCCM. Are changed to “1”, “0”, “0”, “0”, and “0”, respectively. Accordingly, the intermediate potential VCCM output to the output line 13 is 0.51 times the power supply voltage (= 1−470 / (470 + 5 + 5 + 5 + 5 + 470) = 1−470 / 960 = 1−0.49). When the power supply voltage is 3.3V, the intermediate potential VCCM is about 1.68V.

  On the other hand, when the threshold value of the field effect transistor constituting the D flip-flop 3 is lower than the reference potential, each of the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL, and VCC4SEL is set to make the intermediate potential VCCM lower than the reference potential. It is changed to “0”, “0”, “0”, “1”, and “0”. Accordingly, the intermediate potential VCCM output to the output line 13 is 0.495 times the power supply voltage (= 1− (470 + 5 + 5 + 5) / (470 + 5 + 5 + 5 + 5 + 470) = 1−485 / 960 = 1−0.505). When the power supply voltage is 3.3V, the intermediate potential VCCM is about 1.63V.

  If even the potential of 0.495 times the power supply voltage is higher than the threshold value of the field effect transistor constituting the D flip-flop 3, the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL and VCC4SEL are used to further lower the intermediate potential VCCM. Are changed to “0”, “0”, “0”, “0”, and “1”, respectively. As a result, the intermediate potential VCCM output to the output line 13 is 0.49 times the power supply voltage (= 1− (470 + 5 + 5 + 5 + 5) / (470 + 5 + 5 + 5 + 5 + 470) = 1−490 / 960 = 1−0.51). When the power supply voltage is 3.3V, the intermediate potential VCCM is about 1.62V.

  After the initial setting is completed, when the random number data output from the D flip-flop 3 is monitored by the output data monitoring unit 9, when the intermediate potential VCCM needs to be raised, the transfer gate is turned on at that time. In addition, the transfer gates on the power supply terminal VCC side are sequentially turned on. For example, when the intermediate potential VCCM needs to be raised when the intermediate potential VCCM is the reference potential, first, the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL, and VCC4SEL are set to “0”, “1”, It is changed to “0”, “0”, and “0”. As a result, the intermediate potential VCCM is changed to 0.505 times the power supply voltage.

  When the intermediate potential VCCM needs to be further increased, the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL and VCC4SEL are changed to “1”, “0”, “0”, “0” and “0”, respectively. As a result, the intermediate potential VCCM is changed to 0.51 times the power supply voltage.

  On the other hand, for example, when the intermediate potential VCCM needs to be lowered when the intermediate potential VCCM is the reference potential, first, the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL, and VCC4SEL are set to “0”, It is changed to “0”, “0”, “1”, and “0”. Thereby, the intermediate potential VCCM is changed to 0.495 times the power supply voltage.

  When the intermediate potential VCCM needs to be further lowered, the control signals VCC0SEL, VCC1SEL, VCC2SEL, VCC3SEL and VCC4SEL are changed to “0”, “0”, “0”, “0” and “1”, respectively. Thereby, the intermediate potential VCCM is changed to 0.49 times the power supply voltage.

  The switching transistor 12 is composed of an NMOS transistor, and the control signal VCCSEL when generating random number data is “1”, and the switching transistor 12 is turned on. On the other hand, when no random number data is generated, the control signal VCCSEL is “0”, and the switching transistor 12 is turned off. Since the switching transistor 12 is turned off, the current flowing through the resistance ladder is suppressed, so that power consumption can be reduced.

  Here, the analog circuit that generates the intermediate potential VCCM and the digital circuit that generates the random number data are generally affected by semiconductor manufacturing variations. In order to absorb the influence, the intermediate potential VCCM can be adjusted at a step interval sufficiently narrower than the threshold value of the D flip-flop 3, and the voltage range sufficiently wider than the variation of the analog circuit can be adjusted. It is desirable to arrange a resistance ladder of the intermediate potential generation unit 2. Note that the number of stages of resistance of the resistance ladder may be 5 or less, or 7 or more.

  Further, the intermediate potential generation unit 2 may have the configuration shown in FIG. In the configuration shown in FIG. 8, a resistor group 14 for coarse adjustment and a resistor group 15 for fine adjustment are provided in the resistor ladder. Here, although the number is not particularly limited, the resistor group 14 for coarse adjustment is configured by a resistor ladder in which five resistors R7, R8, R9, R10, and R11 are connected in series. It is assumed that the resistor group 15 includes a resistor ladder in which five resistors R12, R13, R14, R15, and R16 are connected in series.

  For the convenience of explanation, the coarse adjustment resistor group 14 is R7, R8, R9, R10 and R11 in order from the power supply terminal VCC side, and the fine adjustment resistor group 15 is R16 in order from the ground terminal VSS side. Let R15, R14, R13 and R12. The resistance values of the resistors R12, R13, R14, and R15 belonging to the fine adjustment resistor group 15 are smaller than the resistance values of the resistors R8, R9, R10, and R11 belonging to the coarse adjustment resistor group 14.

  As shown in FIG. 8, one end of the resistor R7 is connected to the power supply terminal VCC. Transfer nodes TG6, TG7, TG8 for selecting any node of the resistor ladder are connected to the resistors R7 and R8, resistors R8 and R9, resistors R9 and R10, and resistors R10 and R11, respectively. TG9 and TG10 are connected. Control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL and VCC14SEL are supplied to the transfer gates TG6, TG7, TG8, TG9 and TG10 from the outside, respectively.

  The transfer gates TG6, TG7, TG8, TG9, and TG10 are supplied with the inverted signals of the control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL, and VCC14SEL via the inverters IN6, IN7, IN8, IN9, and IN10, respectively. The output sides of the transfer gates TG6, TG7, TG8, TG9 and TG10 are commonly connected to the internal signal line 16 of the intermediate potential generating unit 2. The internal signal line 16 is connected to the input side of the transfer gate TG11.

  One end of the resistor R12 is connected to the internal signal line 16. Transfer nodes TG12, TG13, TG14 for selecting an arbitrary node of the resistance ladder are connected to the connection nodes of the resistance R12 and the resistance R13, the resistance R13 and the resistance R14, the resistance R14 and the resistance R15, and the resistance R15 and the resistance R16, respectively. TG15 is connected. Control signals VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL, and VCC24SEL are supplied from the outside to the transfer gates TG11, TG12, TG13, TG14, and TG15, respectively.

  The transfer gates TG11, TG12, TG13, TG14, and TG15 are supplied with the inverted signals of the control signals VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL, and VCC24SEL via the inverters IN11, IN12, IN13, IN14, and IN15, respectively. The output sides of the transfer gates TG11, TG12, TG13, TG14, and TG15 are commonly connected to the output line 13 for outputting the intermediate potential VCCM. The switching transistor 12 is connected between the resistor R16 and the ground terminal VSS. The switching transistor 12 is operated by a control signal VCCSEL supplied to the gate terminal from the outside.

  The control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL, and VCC14SEL are supplied from, for example, a 5-bit register provided outside. Only one of the transfer gates TG6, TG7, TG8, TG9 and TG10 is turned on by the control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL and VCC14SEL, and the rest are turned off.

  Further, the control signals VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL and VCC24SEL are supplied from, for example, another 5-bit register provided outside. Only one of the transfer gates TG11, TG12, TG13, TG14, and TG15 is turned on by the control signals VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL, and VCC24SEL, and the rest are turned off. Alternatively, all the transfer gates TG6, TG7, TG8, TG9, TG10, TG11, TG12, TG13, TG14 and TG15 may be turned off.

  Although not particularly limited, for example, a potential that is ½ of the power supply voltage output to the output line 13 is set as the reference potential. At this time, the control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL, VCC14SEL, VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL and VCC24SEL are “0”, “0”, “1”, “0”, “0”, “1”, respectively. , “0”, “0”, “0”, and “0”.

  In other words, the resistance values of the resistors R7, R8, R9, R10, R11, R12, R13, R14, R15, and R16 so that a potential of 1/2 of the power supply voltage is output to the output line 13 at this time. Is set. That is, the sum of the resistance values of the resistors R7, R8, and R9 is set to be equal to the sum of the resistance values of the resistors R10, R11, R12, R13, R14, R15, and R16.

  In the initial setting, for example, first, rough adjustment of the intermediate potential VCCM is performed. At this time, in order to connect the internal signal line 16 to the output line 13, the transfer gate TG11 is turned on. In this state, the control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL and VCC14SEL are set so that the transfer gates TG6, TG7, TG8, TG9 and TG10 connected to the resistor group 14 for coarse adjustment are sequentially turned on in this order. Will be changed.

  The states of the control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL, and VCC14SEL when the output value of the D flip-flop 3 is biased to “1” rather than “0” and the potential of the output line 13 is the lowest. It is selected as the state at the end of coarse adjustment. Subsequently, in this state, the intermediate potential VCCM is finely adjusted.

  At the time of fine adjustment, the control signals VCC21SEL, VCC22SEL, VCC23SEL, and VCC24SEL are changed so that the transfer gates TG12, TG13, TG14, and TG15 connected to the fine adjustment resistor group 15 are sequentially turned on in this order. . Thereby, the potential of the output line 13 is gradually lowered. Then, the state of the control signals VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL, and VCC24SEL when the potential of the output line 13 is closest to the threshold value of the field effect transistor that constitutes the D flip-flop 3, that is, the intermediate potential VCCM Is selected as the state at the end of the adjustment.

  After the initial setting, as a result of monitoring the random number data output from the D flip-flop 3 by the output data monitoring unit 9, when the intermediate potential VCCM needs to be increased, the potential of the output line 13 gradually increases, The control signals VCC10SEL, VCC11SEL, VCC12SEL, VCC13SEL, VCC14SEL, VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL and VCC24SEL are changed so as to be closest to the threshold value of the field effect transistor constituting the D flip-flop 3. When it is necessary to lower the intermediate potential VCCM, the control signals VCC10SEL, VCC11SEL, VCC12SEL, so that the potential of the output line 13 is gradually lowered and is closest to the threshold value of the field effect transistor constituting the D flip-flop 3. VCC13SEL, VCC14SEL, VCC20SEL, VCC21SEL, VCC22SEL, VCC23SEL and VCC24SEL are changed.

  Note that when the random number data is not generated, the switching transistor 12 is turned off by the control signal VCCSEL as in the case of the intermediate potential generation unit 2 shown in FIG. According to the configuration shown in FIG. 8, the adjustment range of the intermediate potential VCCM is wider than that in the configuration shown in FIG. 7, and the intermediate potential VCCM can be adjusted at finer intervals. Note that the number of stages of resistors in the coarse adjustment resistor group 14 may be 5 or less, or 7 or more. The same applies to the number of resistance stages of the resistance group 15 for fine adjustment.

  Further, the intermediate potential generation unit 2 may have the configuration shown in FIG. In the configuration shown in FIG. 9, although the number is not particularly limited, for example, six resistors R17, R18, R19, R20, R21, and R22 are connected in series between the power supply terminal VCC and the ground terminal VSS. It is assumed that the intermediate potential VCCM is generated by a resistor ladder including these six resistors R17, R18, R19, R20, R21, and R22. For convenience of explanation, R17, R18, R19, R20, R21, and R22 are sequentially set from the power supply terminal VCC side.

  As shown in FIG. 9, one end of the resistor R17 is connected to the power supply terminal VCC. The output line 13 of the intermediate potential generation unit 2 is connected to a connection node between the resistors R17 and R18. A transfer gate TG16 for bypassing the resistor R18 is connected between the connection node of the resistors R17 and R18 and the connection node of the resistors R18 and R19. A transfer gate TG17 for bypassing the resistor R19 is connected between a connection node of the resistors R18 and R19 and a connection node of the resistors R19 and R20.

  A transfer gate TG18 for bypassing the resistor R20 is connected between the connection node of the resistors R19 and R20 and the connection node of the resistors R20 and R21. A transfer gate TG19 for bypassing the resistor R21 is connected between the connection node of the resistors R20 and R21 and the connection node of the resistors R21 and R22. Control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL are supplied to the transfer gates TG16, TG17, TG18, and TG19 from the outside, respectively.

  The transfer gates TG16, TG17, TG18, and TG19 are supplied with inverted signals of the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL via inverters IN16, IN17, IN18, and IN19, respectively. The switching transistor 12 is connected between the resistor R22 and the ground terminal VSS. The switching transistor 12 is operated by a control signal VCCSEL supplied to the gate terminal from the outside.

  The control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL are supplied from, for example, a 4-bit register provided outside. Each of the transfer gates TG16, TG17, TG18, and TG19 is turned on or turned off independently of the others by the respective control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL.

  Although not particularly limited, for example, a potential that is ½ of the power supply voltage is set as the reference potential. In the initial state, the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL are supplied so that the intermediate potential VCCM output to the output line 13 is substantially equal to the threshold value of the field effect transistor that constitutes the D flip-flop 3. Then, based on the intermediate potential generation change signal output from the output data monitoring unit 9, the value of the 4-bit register is changed, and the on / off states of the transfer gates TG16, TG17, TG18, and TG19 are appropriately switched.

  As an example, specific numerical values will be described. For example, the resistance values of the resistors R17, R18, R19, R20, R21, and R22 are 470 kΩ, 2 kΩ, 4 kΩ, 8 kΩ, 16 kΩ, and 454 kΩ, respectively. In this case, when the control signals VCC31SEL, VCC32SEL, VCC33SEL and VCC34SEL are “1”, “1”, “1” and “0”, respectively, the transfer gates TG16, TG17 and TG18 are turned on, and the transfer gate TG19. Is turned off.

  Accordingly, only the resistor R17 (470 kΩ) is connected between the power supply terminal VCC and the output line 13, and the resistor R21 (16 kΩ) and the resistor R22 (454 kΩ) are connected between the output line 13 and the ground terminal VSS. become. Therefore, the potential of the output line 13 is 0.5 times the power supply voltage (= 1−470 / (470 + 16 + 454) = 1− (470/940) = 1−1 / 2 = 1−0.5), that is, the reference potential. Is output.

  Tables 1 and 2 show the values (“1” or “0”) of the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL, and the resistances between the power supply terminal VCC and the output line 13 and between the ground terminal VSS and the output line 13. The value (kΩ), the magnification of the intermediate potential VCCM output to the output line 13 with respect to the power supply voltage, and the value (V) of the intermediate potential VCCM when the power supply voltage is 3.3V are collectively shown.

  When the threshold value of the field effect transistor that constitutes the D flip-flop 3 is higher than the reference potential at the time of initial setting, the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL are changed to combinations in any of the columns in Table 2. Is done. On the other hand, when the threshold value of the field effect transistor constituting the D flip-flop 3 is lower than the reference potential, the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL are changed to any combination of the columns except the rightmost column in Table 1. Is done.

  After the initial setting, if the intermediate potential VCCM needs to be raised as a result of monitoring the random number data output from the D flip-flop 3 by the output data monitoring unit 9, the control signals VCC31SEL, VCC32SEL, VCC33SEL and VCC34SEL at that time are required. If any of the columns in Table 1 is a combination, it is changed to a combination in any column on the right side of that in Table 1 or a combination in any column in Table 2. If the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL when the intermediate potential VCCM needs to be increased are combined in any of the columns in Table 2, change to any combination on the right side of that in Table 2 Is done.

  On the other hand, when it is necessary to lower the intermediate potential VCCCM, if the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL at that time are combinations in any of the columns in Table 1, any one on the left side of that in Table 1 It is changed to the combination of the column. If the control signals VCC31SEL, VCC32SEL, VCC33SEL, and VCC34SEL when the intermediate potential VCCM needs to be lowered are combinations in any column in Table 2, any combination in any column on the left side of that in Table 2 or The combination is changed to one of the columns in Table 1.

  Note that when the random number data is not generated, the switching transistor 12 is turned off by the control signal VCCSEL as in the case of the intermediate potential generation unit 2 shown in FIG. According to the configuration shown in FIG. 9, the adjustment range of the intermediate potential VCCM is wider than that in the configuration shown in FIG. 7, and the intermediate potential VCCM can be adjusted at finer intervals. Note that the number of stages of resistance of the resistance ladder may be 5 or less, or 7 or more. The number of adjustment stages of the intermediate potential VCCM changes according to the number of resistance ladder stages. The above specific example is a configuration example when the intermediate potential VCCM is adjusted in 16 steps. In the specific example, the ratio of the resistance values of the resistors R21, R20, R19, and R18 is 8: 4: 2: 1, but other ratios may be used.

  Next, the configuration of the output data monitoring unit 9 will be described. FIG. 10 is a diagram illustrating an example of the output data monitoring unit 9. The output data monitoring unit 9 shown in FIG. 10 has a first counter 17 that advances by 1 when the random number data output from the D flip-flop 3 is “1”, and the random number data is “0”. A second counter 18 is sometimes provided which advances the count value by one. The first counter 17 is reset when the random number data is “0”. The second counter 18 is reset when the random number data is “1”.

  Although not particularly limited, for example, in the case of preparing a total of 16 random number data, the first counter 17 and the second counter 18 are constituted by 4-bit counters. When the random number data is “1” for 16 consecutive times, an intermediate potential generation change signal for lowering the intermediate potential VCCM is output from the first counter 17. On the other hand, when the random number data is “0” for 16 consecutive times, an intermediate potential generation change signal for increasing the intermediate potential VCCM is output from the second counter 18. The number of bits of the counter is not limited to 4 bits.

  The output data monitoring unit 9 may have the configuration shown in FIG. In the configuration shown in FIG. 11, although not particularly limited, for example, when 16 pieces of random number data are prepared in total, 8 is loaded to each of the first counter 17 and the second counter 18 as an initial value of the count value. Therefore, after the generation of random number data is started, when the random number data is “1” for eight consecutive times, the first counter 17 outputs an intermediate potential generation change signal for decreasing the intermediate potential VCCM. On the other hand, when the random number data is “0” for eight consecutive times, the second counter 18 outputs an intermediate potential generation change signal for increasing the intermediate potential VCCM.

  The configuration shown in FIG. 11 is effective when the number of bits of a key used in, for example, an IC card is small. Note that the value loaded as the initial value of the count value in the first counter 17 and the second counter 18 is not limited to eight. The loaded value may be arbitrarily set using an external register or the like.

  Further, the output data monitoring unit 9 may be configured as shown in FIG. In the configuration shown in FIG. 12, when the random number data output from the D flip-flop 3 is “1”, the count value advances by 1, and when it is “0”, the third counter 19 returns the count value by 1. A fourth counter 20 that counts the number of generated random number data, a NAND gate 21, and three AND gates 22, 23, and 24.

  Although not particularly limited, for example, when the third counter 19 is composed of a 5-bit counter and 16 random numbers are prepared in total, the generation of random number data is started (when the random number generation party signal is input). ) Is loaded into the third counter 19 as an initial value of the count value. Then, when 16 random number data are generated and the count value of the third counter 19 increased or decreased thereby is smaller than a predetermined number, the third counter 19 is connected via the NAND gate 21 and the AND gate 22. Output an intermediate potential generation change signal for increasing the intermediate potential VCCM. The predetermined number at this time is a number equal to or smaller than 16 set as the initial value of the count value at the start of generation of random number data.

  On the other hand, after the 16 random number data are generated, if the count value of the third counter 19 is larger than the predetermined number, the intermediate potential VCCM is output from the third counter 19 via the NAND gate 21 and the AND gate 22. An intermediate potential generation change signal for lowering is output. The predetermined number at this time is a number that is equal to or larger than 16 set as the initial value of the count value at the start of generation of random number data.

  According to the configuration shown in FIG. 12, for example, when the generated 16 random number data is biased to “0”, “1” is increased when the next 16 random number data is generated. Can be adjusted. The same applies to the reverse case. Therefore, averaged random number data with little bias can be obtained. Note that the value loaded as the initial value of the count value into the third counter 19 is not limited to 16. The loaded value may be arbitrarily set using an external register or the like.

(Embodiment 3)
FIG. 13 is a diagram illustrating an example of the random number generation device according to the third embodiment. A random number generation device 31 according to the third embodiment prepares a plurality of random number generation devices 1 according to the first embodiment, operates the plurality of random number generation devices 1 at different timings by a plurality of delay circuits 32, and generates an XOR circuit as random number data. 33 outputs an exclusive OR of the output values of each random number generator 1. Instead of the random number generator 1 shown in FIG. 1, the random number generator 4 shown in FIG. 2 or the random number generator 6 shown in FIG. 3 may be used.

  Further, like the random number generator 34 shown in FIG. 14, an output data monitoring unit 35 for monitoring the random number data output from the XOR circuit 33 is added to the random number generator 31 shown in FIG. The intermediate potential VCCM may be controlled based on the random number data thus obtained. Since the output data monitoring unit 35 is the same as the output data monitoring unit 9 described in the second embodiment, a duplicate description is omitted.

  As described above, according to each of the above embodiments, the intermediate potential generation unit 2 is configured by an analog circuit, and the intermediate potential VCCM generated by the analog circuit is applied to the data terminal of the D flip-flop 3. Therefore, even if a through current is generated in the data signal input portion of the D flip-flop 3, there is no other factor that can increase the power consumption, so that the power consumption can be reduced. In addition, since the random number generator (D flip-flop 3) is composed of a digital circuit, the circuit scale can be reduced and the power consumption can be reduced.

  Further, by providing gates 5 and 7 for supplying a fixed potential to the data terminal of the D flip-flop 3, a through current is not generated at the data signal input portion of the D flip-flop 3 when a random number is not generated. Therefore, the power consumption can be further reduced. Further, as in the second embodiment, the intermediate potential VCCM is controlled by feeding back the monitoring result of the generated random number data, and the random number generator 8 (10, 11) checks its own generated data. High resistance against unauthorized access from outside can be obtained.

  Further, as in the third embodiment, each random number generator 1 (4, 6) is operated at different timings to obtain exclusive OR of all output values. , 6) even if the output value is biased to "0" or "1", the bias is averaged by the XOR circuit 33, so that the generation rate of random number data is increased. By combining this configuration with the configuration in which the random number generation device 1 (4, 6) checks its own generated data and controls the intermediate potential VCCM, high resistance to unauthorized access from outside can be obtained.

  Specifically, when comparing the operating current consumption of a random number generator manufactured with 0.18 μm technology, the current consumption of a conventional random number generator composed only of analog circuits was about 2 mA. Thus, in the embodiment in which the random number generator is configured by a digital circuit, the current consumption can be reduced to about 50 μA or less. That is, the power consumption can be reduced. In the embodiment, the analog dedicated process is not necessary in the manufacturing process. Therefore, the manufacturing cost can be reduced. Furthermore, even if it did not pass through a scramble circuit, the generation | occurrence | production of the random number of the grade which can pass a FIPS-140-2 test was able to be obtained. That is, it was possible to reduce the circuit scale and improve the reliability.

  In the above description, the present description is not limited to the above-described embodiment, and various modifications can be made. The configurations of the intermediate potential generation unit 2 and the output data monitoring unit 9 are not limited to the configurations described in the embodiments. For example, the intermediate potential generation unit 2 may be configured to generate the intermediate potential VCCM by a capacitance division type instead of the resistance division type of each configuration described above.

(Supplementary Note 1) A flip-flop that samples and outputs a value corresponding to the potential applied to the data terminal based on the clock signal;
An intermediate potential generation unit that generates an intermediate potential substantially equal to the threshold value of the field-effect transistor constituting the flip-flop and supplies the intermediate potential to the data terminal of the flip-flop;
A random number generator characterized by comprising:

(Supplementary Note 2) A gate is provided between the intermediate potential generation unit and the flip-flop to fix a supply potential to the data terminal of the flip-flop regardless of the intermediate potential generated by the intermediate potential generation unit. 2. The random number generator according to appendix 1, wherein

(Supplementary note 3) The random number generator according to supplementary note 2, wherein the gate is an AND gate that receives an intermediate potential generated by the intermediate potential generation unit and a control signal supplied from outside.

(Supplementary note 4) The random number generator according to supplementary note 2, wherein the gate is an OR gate that receives an intermediate potential generated by the intermediate potential generation unit and a control signal supplied from outside.

(Additional remark 5) The said intermediate potential production | generation part is provided with the resistance ladder which carries out resistance division of the power supply voltage, and produces | generates intermediate potential by carrying out resistance division of the power supply voltage with this resistance ladder, The additional notes 1-4 characterized by the above-mentioned. The random number generator according to any one of the above.

(Additional remark 6) The said resistance ladder is provided with the resistance group for rough adjustment, and the resistance group for fine adjustment, The random number generator of Additional remark 5 characterized by the above-mentioned.

(Additional remark 7) It is further provided with the output data monitoring part which monitors the output value of the said flip-flop, and instruct | indicates the change of intermediate potential with respect to the said intermediate potential production | generation part, when this output value is always the same. The random number generation device according to any one of Supplementary notes 1 to 6, which is characterized.

(Supplementary Note 8) An output data monitoring unit that monitors the output value of the flip-flop, and instructs the intermediate potential generation unit to change the intermediate potential when the output value is continuously the same by a certain number The random number generator according to any one of appendices 1 to 6, further comprising:

(Additional remark 9) The output value monitoring part which monitors the output value of the said flip-flop, and instruct | indicates the change of intermediate potential with respect to the said intermediate potential production | generation part when the distribution of this output value is not uniform is further provided. The random number generator according to any one of appendices 1 to 6, characterized in that:

(Appendix 10) A plurality of random number generators according to any one of Appendices 1-6,
A delay circuit for operating the random number generators at different timings;
An XOR circuit that outputs an exclusive OR of the output values of the random number generators;
A random number generator characterized by comprising:

(Supplementary Note 11) An intermediate potential substantially equal to the threshold value of the field effect transistor is applied to the gate of the field effect transistor, and a random number is generated by switching the output value of the field effect transistor in accordance with the fluctuation of the intermediate potential due to thermal noise. A random number generation method characterized by:

(Supplementary note 12) The random number generation method according to supplementary note 11, wherein the output value of the field effect transistor is monitored, and the intermediate potential is changed when the output value is always the same.

(Supplementary note 13) The random number generation method according to supplementary note 11, wherein the output value of the field effect transistor is monitored, and the intermediate potential is changed when the output value is continuously the same by a certain number .

(Supplementary note 14) The random number generation method according to supplementary note 11, wherein the output value of the field effect transistor is monitored, and the intermediate potential is changed when the distribution of the output value is not uniform.

  As described above, the random number generation device and the random number generation method according to the present invention are useful for a random number generation device used for science and technology calculations, encryption processing in a game machine, a computer, or the like. It is suitable for a random number generator mounted on a device that performs processing such as a card.

It is a figure which shows an example of the random number generator of Embodiment 1. FIG. It is a figure which shows the other example of the random number generator of Embodiment 1. FIG. It is a figure which shows the further another example of the random number generator of Embodiment 1. FIG. It is a figure which shows an example of the random number generator of Embodiment 2. It is a figure which shows the other example of the random number generator of Embodiment 2. FIG. It is a figure which shows the further another example of the random number generator of Embodiment 2. FIG. It is a figure which shows an example of an intermediate potential production | generation part. It is a figure which shows the other example of an intermediate potential production | generation part. It is a figure which shows the further another example of an intermediate potential production | generation part. It is a figure which shows an example of an output data monitoring part. It is a figure which shows the other example of an output data monitoring part. It is a figure which shows the further another example of an output data monitoring part. FIG. 10 is a diagram illustrating an example of a random number generation device according to a third embodiment. It is a figure which shows the other example of the random number generator of Embodiment 3.

Explanation of symbols

R1 to R22 Resistance (ladder)
VCCM Intermediate potential 1, 4, 6, 8, 10, 11 Random number generator 2 Intermediate potential generator 3 D flip-flop 5 AND gate 7 OR gate 9 Output data monitor 14 Rough adjustment resistor group 15 Fine adjustment resistor group

Claims (6)

A flip-flop that samples and outputs a value corresponding to the potential applied to the data terminal based on the clock signal;
An intermediate potential generation unit that generates an intermediate potential substantially equal to the threshold value of the field-effect transistor constituting the flip-flop and supplies the intermediate potential to the data terminal of the flip-flop;
A gate for fixing a supply potential to the data terminal of the flip-flop between the intermediate potential generation unit and the flip-flop regardless of the intermediate potential generated by the intermediate potential generation unit;
A random number generator characterized by comprising: The random number generator according to claim 1, wherein the gate is an AND gate or an OR gate that receives the intermediate potential and a control signal supplied from outside .   The said intermediate potential generation part is provided with the resistance ladder which carries out resistance division of the power supply voltage, and produces | generates intermediate potential by carrying out resistance division of the power supply voltage by this resistance ladder. Random number generator. An output data monitoring unit that monitors the output value of the flip-flop, and instructs the intermediate potential generation unit to change the intermediate potential when the output value is always or continuously equal to a certain number; The random number generation device according to claim 1, wherein the random number generation device is a random number generation device. Generate an intermediate potential substantially equal to the threshold value of the field-effect transistor included in the flip-flop that samples and outputs a value corresponding to the applied potential to the data terminal based on the clock signal,
Supplying the intermediate potential to the data terminal of the flip-flop;
A random number generation method characterized in that , based on a control signal, a supply potential to a data terminal of the flip-flop is fixed regardless of the intermediate potential . Monitor the output value of the flip-flop;
6. The random number generation method according to claim 5, wherein the change of the intermediate potential is instructed when the output value is always or continuously the same for a certain number.

Images