JP6735062B2 - Random number sequence generation device, method and program - Google Patents

Description

The present invention relates to a random number sequence generation device, method and program.

2. Description of the Related Art Conventionally, there is a technique of generating non-overlapping values such as UUID (Universally Unique Identifier) (Non-Patent Document 1). There are multiple versions of UUID, and version 1 guarantees that the MAC address and the time stamp do not overlap. In addition, as the other versions of the UUID, a version that uses a random number and a version that uses a hash value are standardized.

P. Leach, M.; Mealling, R.; Salz, A Universally Unique IDentifier (UUID) URN Namespace RFC4122

However, since UUID version 1 has high regularity and can be easily generated by anyone, it is not suitable for use as a PIN (Personal identification number) or a passcode. Further, in other versions, although the regularity is low, the uniqueness is not guaranteed, and the property that anyone can generate is similar to the version 1.

Therefore, there is a demand for an apparatus that generates a random number sequence that guarantees uniqueness, does not cause a collision, and is difficult for unauthorized third parties to issue.

An object of the present invention is to provide a random number sequence generation device, method, and program capable of generating a random number sequence whose uniqueness is guaranteed and which is difficult to be illegally issued.

Specifically, the following solutions are provided.
(1) A number generation unit that generates a unique number, a cipher creation unit that encrypts the unique number by a cryptographic algorithm, the unique number, and the cipher created by the cipher creation unit are connected. A random number sequence generation device comprising: a sequence creating unit that creates the connected sequence, and a conversion unit that converts the connected sequence into a unique random number sequence using a predetermined rule.

The random number sequence generation device according to (1) generates a unique number, encrypts the generated unique number by a cryptographic algorithm, and creates a concatenated sequence that concatenates the unique number and the created cipher, The concatenated sequence is converted into a unique random number sequence using a predetermined rule.
Therefore, the random number sequence generation device according to (1) guarantees uniqueness by including the unique number, and the regularity of the unique number is hidden by the conversion, and it is difficult to illegally issue by including the code. A random number sequence can be generated.

(2) The random number according to (1), wherein the conversion unit rearranges the order of the elements forming the connected sequence, creates a rearranged changed connected sequence, and converts the changed connected sequence into the random number sequence. Column generator.

The random number sequence generation device according to (2) can further hide the regularity by rearranging and converting the order of the elements of the concatenated sequence, and thus can generate a random number sequence that is difficult to be illegally issued.

(3) The cipher creation unit creates an converted cipher string by converting the cipher to a predetermined number of digits, and the string creation unit uses the converted cipher string and the unique number to create the converted cipher string. The random number sequence generation device according to (1) or (2), which creates a connected sequence.

The random number sequence generation device according to (3) can generate a random number sequence with a designated number of digits.

(4) The random number sequence generation device according to (3), further including a check digit adding unit that calculates a check digit based on the elements of the random number sequence and adds the calculated check digit to the random number sequence.

The random number sequence generation device according to (4) can generate a random number sequence that can be checked to be correctly issued, such as detection of a PIN input error, by adding a check digit.

(5) The random number sequence generation device according to any one of (1) to (4), wherein the conversion unit performs conversion by using a conversion table that converts each element forming the connected sequence into a code.

The random number sequence generation device according to (5) can easily generate a random number sequence that is difficult to be illegally issued by converting each element into a code.

(6) The random number sequence generation device according to any one of (1) to (5), wherein the number generation unit sets a number obtained by connecting a date and a counter for each date as the unique number.

The random number sequence generation device according to (6) can easily generate a random number sequence whose uniqueness is assured by the number that connects the date and the counter for each date.

(7) The random number sequence generation device according to any one of (1) to (6), further including a secure protected storage unit that stores a secret key used for the encryption algorithm.

Since the random number sequence generation device according to (7) stores the private key in the secure protection storage unit, the confidentiality of the encryption process is enhanced, and thus the random number sequence that is more difficult to be illegally issued can be generated.

(8) A method executed by the random number sequence generation device according to (1), wherein the number generation unit generates a unique number, and the cipher generation unit generates the unique number. A cipher creation step of enciphering with a cipher algorithm using a secret key, and a random number sequence creation in which the string creation unit creates a concatenated string that connects the unique number and the cipher created by the cipher creation unit. And a conversion step in which the conversion unit converts the connected sequence into a unique random number sequence using a predetermined rule.

Similar to (1), the method according to (8) can generate a random number sequence whose uniqueness is guaranteed and which is difficult to be illegally issued.

(9) A program for causing a computer to execute the steps described in (8).

The program according to (9) can cause a computer to function so as to generate a random number sequence whose uniqueness is guaranteed and which is difficult to be illegally issued.

According to the present invention, it is possible to generate a random number sequence whose uniqueness is guaranteed and which is difficult to be illegally issued.

It is a block diagram which shows the structure of the random number sequence generator which concerns on one Embodiment of this invention. It is a figure which shows the example of the conversion table of the random number sequence generator which concerns on one Embodiment of this invention. It is a flow chart which shows an example of processing of a random number sequence generation device concerning one embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a random number sequence generation device 10 according to an exemplary embodiment of the present invention. The random number sequence generation device 10 stores a number generation unit 11, a cipher generation unit 12, a sequence generation unit 13, a conversion unit 14, a check digit addition unit 15, a protection storage unit 30, and a conversion table 311. And a part 31. Each part will be described in detail.

The number generation unit 11 generates a unique number. Specifically, the number generation unit 11 sets a number based on the date and a counter for each date as a unique number. For example, the number generation unit 11 creates a 3-digit date number counted up for each date from the processing start date of the random number sequence generation device 10. Next, the number generation unit 11 is a counter that counts up from 0 for each date and acquires a count from a counter (for example, a 5-digit counter) that counts up each time the random number sequence generation device 10 generates a random number sequence. To do. Next, the number generation unit 11 generates an 8-digit unique number by connecting the acquired count to the date number.
In any case, the count-up method is not limited to decimal (that is, 0 to 9), and may be, for example, decimal. In the case of the 30-digit system, the count-up method may be, for example, 0 to 9 and 20 alphabets selected from a to z to sequentially increment and carry. It is also possible to use symbols to sequentially increase and carry. The code appearing in the unique number is also used corresponding to a predetermined rule (for example, the conversion table 311 or the like) used in the conversion unit 14 described later.

The cipher creation unit 12 encrypts the unique number generated by the number generation unit 11 with a cryptographic algorithm.
The cryptographic algorithm may be a one-way function keyed hash function or the like, and may use the secret key K.

The cipher creation unit 12 may create a converted cipher string by converting the created cipher to a predetermined number of digits. Specifically, the cipher creation unit 12 creates a converted cipher string by extracting a part of the cipher (for example, upper 6 digits). That is, the cipher creation unit 12 can convert the cipher into a predetermined number of digits, and, for example, when a predetermined number of digits is designated, can generate a converted cipher string having the designated number of digits.

The column creation unit 13 creates a concatenated string in which the unique number generated by the number generation unit 11 and the cipher created by the cipher creation unit 12 are concatenated.
When the cipher creating unit 12 creates the converted cipher string, the string creating unit 13 creates a concatenated string from the converted cipher string and the unique number.

The conversion unit 14 uses a predetermined rule to convert the concatenated sequence into a unique random number sequence so that it is not known that the concatenated sequence includes a unique number.
The predetermined rule may be, for example, a conversion table 311 (see FIG. 2 described later) that converts each element forming a unique random number sequence into a code.

The conversion unit 14 may rearrange the order of the elements forming the concatenated sequence, create a rearranged modified concatenated sequence, and convert the created modified concatenated sequence into a unique random number sequence.

The protection storage unit 30 securely stores the secret key K used for the encryption algorithm. The protection storage unit 30 may also store a predetermined rule used by the conversion unit 14 (for example, the conversion table 311 or the like).
The protection storage unit 30 may be a software secure element having a memory protection function and a register protection function. The software secure element can protect data stored in the memory, access to the memory performed by the program, operations executed by the CPU, and the like. The software secure element can securely process or store the secret key K used in the cryptographic algorithm, the process including the secret key K, the calculation, and the conversion table 311 (see FIG. 2 described later). Protect from analysis.

The check digit addition unit 15 calculates a check digit from the concatenated sequence based on the elements of the unique random number sequence converted by the conversion unit 14, and adds the calculated check digit to the unique random number sequence. Specifically, the check digit adding unit 15 adds a check digit based on the unique random number sequence converted by the converting unit 14 from the converted cipher string having a predetermined number of digits created by the cipher creating unit 12.
The random number sequence created by properly adjusting the number of digits and adding the check digit in this way is a random number sequence that guarantees uniqueness and is difficult to illegally issue, so it is printed on a card and used. It is possible.

FIG. 2 is a diagram showing an example of the conversion table 311 of the random number sequence generation device 10 according to the embodiment of the present invention. The conversion table 311 of FIG. 2 is an example corresponding to that the code appearing in the concatenated string is the base 30. In the conversion table 311 shown in FIG. 2, a row has 30 characters (alphanumeric characters 0 to 9 and a to z characters 30) and a column has 30 characters (alphanumeric characters 0 to 9 and a to z characters 30). It is composed of and.
The conversion unit 14 associates each two digits of the connected column to be converted with a row and a column of the conversion table 311, and converts into a code stored at the intersection of the corresponding row and column. For example, when the connected string to be converted is “0ac1... ”, the conversion unit 14 sets “0” and “a” to “c0” and “c” and “1” to “ds”. Conversion table 311 using the conversion table 311.

<Example of generating 16-digit unique random number sequence>
As an example of the random number sequence generation method, a case where the random number sequence generation device 10 generates a 16-digit random number sequence by using 30 of alphanumeric characters will be described. The configuration of the random number sequence is as follows.
S(ymd||counter||Trunc(E _K (ymd||counter), n))||chksm
Here, ymd is an issue date, counter is a counter for managing the number of issues on that day, and E _K is an encryption algorithm. E _K may be a one-way function such as a keyed hash function.
Trunc(x,n) is a function that extracts upper n bits from x and assigns alphanumeric characters. S is a function that sorts input values and performs table conversion. chksm is a check digit. The symbol "||" represents that the preceding and following character strings are connected.

The random number sequence generation device 10 generates a unique number (ymd||counter).
That is, the random number sequence generation device 10 assigns 3 digits to the issue date ymd, sets the start date to “000”, and counts up every day. The random number sequence generation device 10 allocates five digits to the counter counter and counts up the issuance of the unique random number sequence of the day from “00000” in order.

Next, the random number sequence generation device 10 creates the cipher E _K (ymd||counter).
That is, the random number sequence generation device 10 inputs the “issue date||counter” into a cryptographic algorithm (for example, AES (Advanced Encryption Standard) or the like) using the secret key K or a one-way function.

Next, the random number sequence generation device 10 extracts the upper 6 digits of the created cipher by the function Trunc(E _K (ymd||counter), n) (for example, n=6).
That is, the random number sequence generation device 10 assigns 6 digits to the encrypted portion and extracts the upper 6 digits from the obtained encryption.

Next, the random number sequence generation device 10 creates a concatenated sequence ymd||counter||Trunc(E _K (ymd||counter),n) in which (ymd||counter) is concatenated.

Next, the random number sequence generation device 10 converts the concatenated sequence by two digits by the conversion table 311, and the unique random number sequence S(ymd||counter||Trunc(E _K (ymd||counter),n)). To generate. The function S may rearrange the elements of the connected sequence.
That is, the random number sequence generation device 10 uses the conversion table 311 to convert every two digits for the concatenated sequence created by the issue date (three digits), the counter (five digits), and the encryption part (six digits). The converted 14-digit code is used as the upper 14 digits of the unique random number sequence.

Next, the random number sequence generation device 10 generates a unique random number sequence S(ymd||counter||Trunc(E _K (ymd||counter),n))||chksm to which a check digit is added.
That is, the random number sequence generation device 10 uses the remainder obtained by dividing the sum of each element of the unique random number sequence by 30 as the check digit. For example, the random number sequence generation device 10 divides a 14-digit code into upper 7 digits and lower 7 digits to calculate check digits, and sets the calculated check digits as the 15th digit and the 16th digit, respectively.

The random number sequence created in this way cannot be created by another device. For example, another device cannot generate a unique random number sequence by the same procedure because it cannot obtain the secret key K. That is, the random number sequence generation device 10 generates a unique random number sequence that cannot be generated by another device and does not have the same random number sequence.

FIG. 3 is a flowchart showing an example of processing of the random number sequence generation device 10 according to the embodiment of the present invention. The random number sequence generation device 10 is configured by hardware included in a computer and its peripheral devices and software that controls the hardware. The following process is a process executed by a control unit (for example, a CPU) according to predetermined software.

In step S101, the CPU (number generation unit 11) generates a unique number. More specifically, the CPU counts up the counter for each date, and generates a unique number by concatenating the counted up count and the date number based on the date.

In step S102, the CPU (encryption creating unit 12) creates an encryption from the unique number by an encryption algorithm. More specifically, the CPU encrypts the unique number generated in step S101 with a cryptographic algorithm using the secret key K.

In step S103, the CPU (cipher creation unit 12) converts the cipher into a predetermined number of digits. More specifically, the CPU extracts a predetermined upper digit number of the cipher created in step S102.

In step S104, the CPU (column creating unit 13) creates a linked column. More specifically, the CPU connects the cipher code converted in step S103 and the unique number generated in step S101.

In step S105, the CPU (conversion unit 14) rearranges the elements of the connected sequence. More specifically, the CPU rearranges the elements of the linked sequence created in step S104.

In step S106, the CPU (conversion unit 14) converts the concatenated string by the conversion table 311 to generate a unique random number string. More specifically, the CPU uses the conversion table 311 to convert every two digits of the elements forming the concatenated string created in step S105 to generate a unique random number string.

In step S107, the CPU (check digit adding unit 15) calculates a check digit from the unique random number sequence and adds the calculated check digit to the unique random number sequence. More specifically, the CPU calculates a check digit based on the element of the unique random number sequence generated in step S106, and adds the calculated check digit to the unique random number sequence. After that, the CPU ends the process.

According to the present embodiment, the random number sequence generation device 10 includes a unique random number sequence that is difficult to be illegally issued by including a character string that is converted by the conversion table 311 and the regularity of the unique number is hidden, and the cipher. To generate. Further, the random number sequence generation device 10 rearranges the order of the elements of the concatenated sequence and converts the elements to further hide the regularity and generate a unique random number sequence that is difficult to be illegally issued. The random number sequence generation device 10 generates a unique random number sequence having a designated number of digits. The random number sequence generation device 10 generates a unique random number sequence to which a check digit is added and which can be checked to be correctly issued such as detection of a PIN input error. The random number sequence generation device 10 easily generates a random number sequence in which each element is converted into a code and which is difficult to be illegally issued. The random number sequence generation device 10 easily generates a random number sequence in which uniqueness is guaranteed by a number that connects a date and a counter for each date. The random number sequence generation device 10 stores the secret key K in the secure protection storage unit 30, enhances the confidentiality of the encryption process, and generates a unique random number sequence that is more difficult to be illegally issued.
In this way, the random number sequence generation device 10 generates a unique random number sequence in which uniqueness is guaranteed, no collision occurs, and it is difficult for a third party to illegally issue it.
Further, the random number sequence generation device 10 is a predetermined card suitable for charging electronic money, using pay services, and the like, which is sold at retail stores and has a PIN or passcode printed thereon. It is possible to generate a random number sequence of digits.

Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments. Further, the effects described in the embodiments of the present invention only list the most suitable effects that occur from the present invention, and the effects according to the present invention are limited to those described in the embodiments of the present invention. is not.

A series of processes by the random number sequence generation device 10 can also be performed by software. When the series of processes is performed by software, a program forming the software is installed in a general-purpose computer or the like. Further, the program may be recorded in a computer-readable recording medium (for example, a removable medium such as a CD-ROM) and distributed to the user, or may be downloaded to the user's computer via a network. May be distributed by

10 Random Number Sequence Generation Device 11 Number Generation Unit 12 Cryptography Creation Unit 13 Sequence Creation Unit 14 Conversion Unit 15 Check Digit Addition Unit 30 Protected Storage Unit 31 Storage Unit 311 Conversion Table

Claims (9)

A number generator that generates a unique number,
A cipher creation unit that encrypts the unique number by a cryptographic algorithm,
A column creation unit that creates a concatenated string that connects the unique number and the cipher created by the cipher creating unit;
A conversion unit for converting the concatenated sequence into a unique random number sequence using a predetermined rule,
A random number sequence generation device comprising. The random number sequence generation device according to claim 1, wherein the conversion unit rearranges the order of the elements forming the connected sequence, creates a rearranged changed connected sequence, and converts the changed connected sequence into the random number sequence. .. The cipher creating unit creates a converted cipher string by converting the cipher to a predetermined number of digits,
The random number sequence generation device according to claim 1 or 2, wherein the sequence creation unit creates the concatenated sequence from the converted encrypted sequence and the unique number. The random number sequence generation device according to claim 3, further comprising a check digit addition unit that calculates a check digit based on an element of the random number sequence and adds the calculated check digit to the random number sequence. The random number sequence generation device according to any one of claims 1 to 4, wherein the conversion unit performs conversion by using a conversion table that converts each element forming the connected sequence into a code. The random number sequence generation device according to any one of claims 1 to 5, wherein the number generation unit sets a number obtained by connecting a date and a counter for each date as the unique number. The random number sequence generation device according to claim 1, further comprising a secure protection storage unit that stores a secret key used for the encryption algorithm. A method executed by the random number sequence generation device according to claim 1, comprising:
A number generation step in which the number generation unit generates a unique number,
A cipher creating step in which the cipher creating section encrypts the unique number by a cryptographic algorithm;
The sequence creation unit, a random number sequence creation step of creating a concatenated sequence in which the unique number and the cipher created in the cipher creation step are concatenated;
A conversion step in which the conversion unit converts the connected sequence into a unique random number sequence using a predetermined rule;
A method comprising. A program for causing a computer to execute each step according to claim 8.

Images