KR100743981B1 - Locking and unlocking system of information storage apparatus and method thereof - Google Patents

Abstract

The present invention relates to a system for locking and unlocking an information storage device and a method thereof for preventing the leakage of information due to a user's neglect in an information storage device having important information stored therein.

To this end, the present invention includes an information storage device for storing important information and a mobile terminal carried by the user of the information storage device, and a key generated according to a predetermined encryption algorithm between the information storage device and the mobile terminal. Through the wireless communication between each other after the partnership is established, and set the lock function to the information storage device to prevent the information leakage when the user is out of a predetermined distance, and the information storage device when the access within the predetermined distance again Provides a lock and unlock system of information storage devices to unlock the lock function for use.

LFSR, key, Bluetooth, wireless communication

Description

LOCKING AND UNLOCKING SYSTEM OF INFORMATION STORAGE APPARATUS AND METHOD THEREOF

1A is a functional block diagram of a computer locking and unlocking system according to an embodiment of the present invention, and FIG. 1B is a functional block diagram of a computer locking and unlocking system according to another embodiment of the present invention.

2 is a block diagram illustrating a process of generating a sum sequence key in an encryption algorithm according to the present invention.

3 is a block diagram illustrating an encryption process and a decryption process in an encryption algorithm according to the present invention.

4 is a diagram illustrating a computer locking and releasing process in the computer locking and releasing system according to the present invention shown in FIGS. 1A and 1B.

<Description of Major Symbols in Drawing>

110a, 110b: computer 120a, 120b: mobile terminal

111: control unit 121: mobile terminal control unit

112: wireless communication module 122: mobile terminal wireless communication module

113: memory 123: mobile terminal memory

114: computer protector 115: USB port

The present invention relates to a locking device, and more particularly, to a lock and release system and method of the information storage device for preventing the leakage of information according to the user's negligence in the information storage device that stores important information.

With the advent of a high-tech information society, an important criterion for assessing the competitiveness of a country or company depends on which country or company develops and possesses core technologies.

Currently, Korea's industrial technologies, especially semiconductors, LCDs, PDPs, mobile phones, and automobiles, have secured coveted technology leadership around the world. As a result, coveted companies and countries are increasing.

On the other hand, their core technologies are at increased risk of exposure to industrial espionage.

These skills are often stored on technicians' computers, for example, when a developer or researcher is working on a computer to go to pick up a call, leave for a break, or leave for a meeting. Therefore, when the user is away from the computer, the lock function should be set to prevent the leakage of information.

However, setting these locks manually is cumbersome and can be overlooked.

Also, if you want to use the computer again, you must unlock the computer.

As such, the user frequently leaves the computer, and repeating the lock and unlock of the computer for information security is negligible and cumbersome, and thus, the risk of information leakage increases.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and establishes a partnership through wireless communication between an information storage device, such as a PC, in which important information is stored, and a mobile terminal mainly carried by the user of the information storage device. When the user's mobile terminal is out of a predetermined distance, the lock function is set on the information storage device to prevent information leakage, and when the user accesses the device within a predetermined distance, the lock function is released for use of the information storage device. An object of the present invention is to provide a system and a method for preventing leakage of information due to neglect.

In addition, a system and method for locking and releasing an information storage device that can enhance security by applying an encryption algorithm maintaining a 128-bit degree to wireless communication between the information storage device and a mobile terminal controlling the same. It aims to provide.

In order to achieve the above object, according to one aspect of the invention,

An information storage device storing important information, and a mobile terminal carried by the user of the information storage device; A partnership is established between the information storage device and the mobile terminal through a key generated according to a predetermined encryption algorithm, and the information is stored to prevent information leakage when the user deviates from the predetermined distance through wireless communication with each other after the partnership is established. It provides a locking and unlocking system of an information storage device which sets a locking function to the device and releases the locking function for use of the information storage device when approaching again within a predetermined distance.

In addition, the predetermined encryption algorithm is characterized by generating a carry, memory and key sequence bit output after randomly clocking the LFSR through a clock adjustment function.

In addition, the predetermined encryption algorithm is characterized by having two mutually clocked LFSRs, a carry and a memory bit.

Also, the two LFSRs randomly control clocks of different LFSRs to generate an irregular clock in each register. The LFSR irregular clock on one side is randomly determined according to the contents of two specific taps of the other LFSR. It features.

The mobile terminal may further include a mobile terminal memory configured to store an encryption key for locking and releasing the information storage device generated according to the predetermined encryption algorithm; A mobile terminal wireless communication module for transmitting the encryption key for locking and releasing the information storage device stored in the mobile terminal memory to the information storage device; When the mobile terminal deviates a predetermined distance from the radius of the information storage device, the information storage device lock command signal is transmitted to the information storage device through the mobile terminal wireless communication module, and the mobile terminal transmits the information storage device radius. And a mobile terminal control unit for transmitting the information storage device unlocking command signal to the information storage device through the mobile terminal wireless communication module when entering within a predetermined distance.

The information storage device may further include: a wireless communication module configured to receive an encryption key for locking and releasing the information storage device from the mobile terminal wireless communication module; A memory for storing a decryption key for decrypting the encryption key for locking and unlocking the information storage device transmitted from the wireless communication module; A computer protector configured to lock the information storage device using a screen saver or a window lock function, or to unlock the information storage device by unlocking the screen saver or unlocking the window; Decode the signal received from the wireless communication module, if the information storage device lock signal to control the computer protection unit to lock the information storage device, if the information storage device unlock signal to control the computer protection unit to store the information And a control unit for unlocking the device.

In addition, a Bluetooth module is embedded in the information storage device and the mobile terminal to perform short-range wireless communication in a master slave manner between the mobile terminal and the information storage device.

In addition, the authentication certificate is wirelessly transmitted between the information storage device and the mobile terminal by using an encryption key according to the predetermined encryption algorithm.

According to another aspect of the present invention, in a system in which an information storage device for storing important information and a mobile terminal carried by the user of the information storage device are connected by a wireless network,

(a) establishing a partnership between the information storage device and the mobile terminal through a key generated according to a predetermined encryption algorithm stored in the information storage device and the mobile terminal;

(b) after establishing the partnership, if communication between the information storage device and the mobile terminal becomes possible, performing control for locking and releasing the information storage device through the mobile terminal. And a release method.

In addition, in the step (c), the controlling step may include: a first step of transmitting an encryption key of a lock signal command from the mobile terminal to the information storage device when the mobile terminal deviates from a predetermined distance; A second step in which the information storage device performs a security lock function by decrypting the encryption key received from the second step; and after the second step, the information storage device searches for and authenticates the mobile terminal with which the partnership is established; And a fourth step of releasing the security lock of the information storage device when the authenticated mobile terminal approaches a predetermined distance within the radius of the information storage device.

In addition, it characterized in that the short-range wireless communication of the master slave method between the mobile terminal and the information storage device.

In addition, between the information storage device and the mobile terminal is characterized in that the transmission of the authorized certificate wirelessly using an encryption key according to the predetermined encryption algorithm.

In addition, the predetermined encryption algorithm is characterized by generating a carry, memory and key sequence bit output after randomly clocking the LFSR through a clock adjustment function.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1A is a functional block diagram of a computer lock and unlock system in accordance with one embodiment of the present invention.

As shown in FIG. 1A, a computer locking and unlocking system according to an embodiment of the present invention includes a computer 110a in which important documents or materials are stored, and a mobile terminal 120a carried by the computer user. .

Here, a partnership relationship is established between the mobile terminal 120a and the computer 110a to control lock and release through a key generated according to a predetermined encryption algorithm.

That is, when the keys generated by the predetermined encryption algorithm stored in the mobile terminal 120a and the computer 110a coincide with each other through wireless communication, the computer lock is performed between the mobile terminal 120a and the computer 110a. And authentication for release is made.

Accordingly, the mobile terminal 120a sets a locking function to the computer 110a to prevent the leakage of information when the user is out of a predetermined distance through wireless communication with the computer 110a. Release the lock function for use of 110a.

In addition, the mobile terminal 120a includes a mobile terminal memory 123 for storing a computer lock and release encryption key generated according to an encryption algorithm according to the present invention, and for locking and releasing a computer stored in the mobile terminal memory 123. Mobile terminal wireless communication module 122 for transmitting the encryption key to computer 110a.

In addition, when the mobile terminal 120a deviates from the radius of the computer 110a by a predetermined distance, the computer lock command signal is transmitted to the computer 110a through the mobile terminal wireless communication module 122, and the mobile terminal 120a When entering within a predetermined distance within the radius of the computer (110a) includes a mobile terminal control unit 121 for transmitting a computer unlock command signal to the computer via the mobile terminal wireless communication module 122.

In addition, the computer lock command signal and the computer unlock command signal are keys encrypted according to the encryption algorithm according to the present invention, and can maintain a 128-bit degree of security to improve security.

In addition, the predetermined distance is a distance away from the visual field of the computer user, it is usually a range of 1 ~ 2m radius from the computer.

The computer 110a includes a wireless communication module 112 that receives an encryption key for locking and releasing a computer from the mobile terminal wireless communication module 122, and an encryption for locking and releasing a computer transmitted from the wireless communication module 112. And a memory 113 in which a decryption key for decrypting the key is stored.

In addition, the computer protector 114 may lock the computer by using the screen saver or the window lock function, or unlock the computer by unlocking the screen saver or unlocking the window.

In addition, by decoding the signal received from the wireless communication module 112, if the computer lock signal to control the computer to protect the computer 114, if the computer unlock signal to control the computer to protect the computer 114 It includes a control unit 111 to release the lock.

In general, as the mobile terminal 120a, a personal portable device such as a mobile phone, an MP3 player, a PDA, or a margarine device may be used. Among these, the mobile phone corresponds to a main mobile terminal because most users carry it as an important communication means. Can be.

In this regard, when a user moves a mobile phone from one computer to another, the working computer is locked and other people cannot use the computer.

In addition, when the mobile terminal user approaches the computer by a predetermined distance, the computer releases the lock function without receiving any input from the user so that the user can work.

In addition, an encryption algorithm for locking and releasing a computer is stored in the mobile terminal memory 123 or the memory 113 of the computer.

FIG. 1B is a functional block diagram of a computer locking and unlocking system according to another embodiment of the present invention, in which the same components as those of the computer locking and unlocking system according to the embodiment of the present invention shown in FIG. Reference numerals are given to the drawings, and description thereof is omitted.

In particular, another embodiment of the present invention is different from the embodiment of the present invention in that the Bluetooth module 116 and 126 are additionally connected between the control unit and the wireless communication module.

As shown in FIG. 1B, the computer locking and unlocking system according to another embodiment of the present invention is a type of locking and releasing the computer 110b using Bluetooth, and the mobile terminal 120b is a cellular phone that supports Bluetooth. MP3 players, PDAs, and margares can be used.

In addition, the Bluetooth module 116 and 126 may be configured as a chip embedded in the control unit 111 of the computer 110b and the control unit 121 of the mobile terminal 120b. (Pin Code)

Therefore, when the mobile phone user moves to another place with the mobile phone from the working computer, the working computer is locked and when the user approaches the computer as far as possible with Bluetooth communication, the computer does not receive any input from the user. Disable the feature so that the user can work on it.

As described above, according to another embodiment of the present invention, the mobile terminal locks the computer when the mobile terminal deviates from the computer by a predetermined distance through the master slave type short-range wireless communication between the mobile terminal and the computer. Release it.

In addition, the computer lock command signal and the computer unlock command signal use a key encrypted according to the encryption algorithm according to the present invention to maintain a 128-bit degree of security to improve security.

In addition, the predetermined distance is a distance away from the visual field of the computer user, it is usually a range of 1 ~ 2m radius from the computer.

1A and 1B, a USB port 115 may be connected to a communication module 113 of a computer so that a device for storing authorized certificates may be connected.

Authorized certificates required for secure e-commerce have been used a lot recently, when using a portable margarage device connected to the computer's USB port 115, there is an inconvenience to log in and log out every time you use the certificate.

Therefore, in the computer lock and unlock system according to the present invention, since the authorized certificate can be wirelessly transmitted from the mobile terminal to the computer or vice versa using a 128-bit encryption key, users who frequently log in and log out use. You can reduce the inconvenience.

In addition, by using the 128-bit encryption algorithm according to the present invention, it is possible to improve the security by eliminating the risk of decryption during the wireless transmission of the authentication certificate between the mobile terminal and the computer, such as a mager device or a mobile phone.

In this case, wireless transmission of the public certificate is possible in various wireless communication forms such as Bluetooth communication, RFID, infrared communication.

2 and 3 illustrate a cryptographic algorithm used in the computer lock and unlock system according to the present invention used in FIGS. 1A and 1B.

The cryptographic algorithm according to the present invention is largely composed of a sequential key generation, an encryption and a decryption process. FIG. 2 is a block diagram illustrating a sequential key generation process in the encryption algorithm according to the present invention.

Referring to FIG. 2, a process of generating a sum sequence key, a key loading process, and a key updating process through clock control will be described.

1. The process of generating the sum sequence key

The encryption algorithm according to the present invention may be configured in the form of an LM sum sequence generator of r = 2 having two linear feedback shift registers (LFSRs) and one bit memory (input) of c _j-1 and d _j-1 . have.

Here, two LFSRs are denoted by L _a and L _b , a carry bit is denoted by c, and a memory bit added to correspond to Meier attack and Dawson attack is denoted by d.

At j, a _j and b _j are the outputs of LFSR L _a and L _b (the 1-bit output of L _a is denoted as a _j , and the 1-bit output of L _b denoted as b _j ), output at time j z _j is _defined by f _z , carry state c _j is _defined by f _c , and memory state d _j is defined by f _d .

Here, the output function f _z outputs a key sequence bit z _j , the remaining bits are carry bits and stored in memory, and the carry sequence c _j and d _j Is used as input to the combining function to generate the next bit.

Therefore, the output key sequence of the encryption algorithm is generated by combining the LFSR sequence with the carry and memory sequences.

In addition, the encryption algorithm has two mutually clock-controlled LFSRs and a carry and memory bits, and the lengths of the LFSRs are 127 bits and 129 bits, respectively. All the memory bits provide the cryptographic algorithm with 258 bits of internal status bits, which are filled in by the 128-bit key and the 128-bit initialization vector.

The return polynomials of L _a and L _b are respectively selected from the following equations (1) (2) of the primitive polynomials p _a (x) and p _b (x), and all bits of the LFSR are all zero state: Do not allow initialization to

Here, the random number is equal to the exponent value of x and the tap number of the LFSR, and Equation (1) and (2) indicate the number of taps to be fed back, and the number of taps is fed back to increase security. .

In addition, the carry function f _c , the output function f _z , and the memory function f _d are defined as follows.

Here, j-1 means a previous time clock and j means a current time clock.

In addition, equation (3) (4) (5) represents the full adder of the exclusive OR (XOR) value, for example, the input is a _j = 1, b _j = 1, c _j-1 = 1 With a value of, the output will have a binary 11 value of c _j = 1 and z _j = 1.

Thus, the output key sequence bits z _j , The carry bits c _j and the memory bits d _j take the same form as the LM sum sequence generator in structure, but the output sequence and the level of the performance are greatly improved.

2. Clock control

The encryption algorithm according to the present invention may be configured in the form of a sum sequence generator to which a mutual clock adjustment structure is added.

In this way, the LFSR is supplied with an irregular clock, and the irregular clock of the LFSR is randomly determined by the contents of two specific taps of the remaining LFSR.

That is, in the cryptographic algorithm according to the present invention, two LFSRs randomly control the clocks of different LFSRs to generate an irregular clock in each register, and two taps are obtained from L _a to calculate a range of 1 to 4 values. , L _b is fed back by a random number of 1 to 4 clocks.

Similarly, we control the clock of L _a after obtaining a random value ranging from 1 to 4 from the two tap values of L _b .

As such, the number of irregular clocks supplied to one LFSR is obtained from the clock adjustment functions f _a or f _b generated in the remaining LFSRs, and the clock adjustment functions f _a and f _b are represented by equations (6) and (7). Is defined as:

An example of an irregular clock supply through the clock adjustment functions f _a and f _b is as follows.

Clock adjustment value if general irregular value of from 1 to 4 come out is obtained from a particular tap, for example, the value from the two tabs (42, 85) of the L _a (1, 0) is f _a (L _a) = 2 * 1 + 0 * 1 + 1 = 3

In this way, if the value of two taps is (0, 0), it is 1 clock, if it is (0, 1), it is 2 clocks, if it is (1, 0) it is 3 clocks, and if it is (1, 1) 4 clocks are moved. Decryption is difficult because the value of the tap is unpredictable.

Since clock control moves the other LFSR by the number of clocks read from the two taps, if the value of the two taps 42 and 85 in L _a is (1, 0), L _b is moved by three clocks.

Also, if the values of the two taps 43 and 86 in L _b are (0, 1), L _a is shifted by two clocks.

In this way, if one output is obtained after moving both LFSRs, a binary random value is obtained. Therefore, to obtain a 1024-bit random value, the process is repeated 1024 times.

Therefore, the clock adjustment functions f _a and f _b randomly clock the LFSR and then generate the carry, memory, and key sequence bit outputs, thereby increasing the password stealth and stability.

3. Key Loading and Key Updates

Key loading is used to initially give a secret key and get random output, and key update allows the key to be updated as needed.

That is, in a communication system, a synchronous error requires retransmission of the entire message (or remaining messages), and in the case of synchronous stream cipher, another key sequence should be used for safety.

For this purpose, key rekeying should be a method of resynchronizing the initial vector (iv) to be transmitted with the secret key (k) in plain text state, or another public method.

In the encryption algorithm according to the present invention, initial key loading and key updating are performed as follows.

In the encryption algorithm according to the present invention, the initial state is filled from the key (k) and the initialization vector (iv, initial key), and since the internal state length is longer than the key length, the key expansion process for filling the internal state is performed. Required.

In addition, both the key k and the initialization vector iv are 128 bits long, and the key and initialization vector fill the 256-bit internal state (the initial carry and memory are initialized to '0').

Here, the initial value may be regarded as a key as necessary and may be set as a fixed value forever. In the present invention, the initial value is regarded as a key and is set as a 128 bit key and a 256 bit key of the 128 bit initial value.

In addition, the encryption algorithm has two mutually clock controlled LFSRs (L _a , L _b ) and carry and memory bits, and the lengths of the LFSRs are 127 bits and 129 bits, respectively. All memory bits provide the cryptographic algorithm with 258 bits of internal status bits, which are filled in by the 128-bit key (k) and the 128-bit initialization vector (iv).

iv)mod 2¹²⁷ 과 같이 나타낸다.In addition, the initial setting process can be used for a key update, the process of generating the initial state of the key stream generator uses the generator itself twice, and the start state of the L _a is simply by a logical exclusive sum (XORing) L _a = (k

iv) as mod 2 ¹²⁷

The 129-bit initial state for L _b is taken from the 128-bit key and shifted 1 bit to the left, including the internal 129-bit word.

(0｜iv)이다. 일단 키와 초기벡터가 설정된 후, 암호 알고리즘을 작동시켜 258비트 길이의 키 수열을 2회 생성한 다음, 나중 258 비트를 이용하여 다음과 같이 두 LFSR 및 캐리 비트들을 재초기화 한다. 즉, 처음 127 비트는 L_a의 초기 상태를 설정하고, 다음 129 비트는 L_b 의 초기 상태를, 그리고 나머지 2비트로 캐리비트(c₀, d₀)를 설정한다. 이 때, 어느 하나의 LFSR이라도 0-벡터로 초기화되어서는 안된다.The initial vector is then logically summed (XORing) with 0 and an internal 129-bit word, that is, L _b = (k << 1)

(0 | iv). Once the key and initial vector are set, the cryptographic algorithm is run to generate a 258-bit long sequence of keys twice, and then the 258 bits are used to reinitialize the two LFSRs and carry bits as follows. That is, the first 127 bits set the initial state of L _a , the next 129 bits set the initial state of L _b , and the carry bits (c ₀ , d ₀ ) with the remaining 2 bits. At this time, any one LFSR should not be initialized to 0-vector.

This reinitialization shows that the best attack on the key renewal process is an exhaustive key-search attack because of the high security of the encryption algorithm.

3 is a block diagram illustrating an encryption process and a decryption process in an encryption algorithm according to the present invention.

As shown in FIG. 3, the key bit sequence (hereinafter, referred to as key) k and plaintext (m) generated by the key generator (inter-clock adjustable LM sum sequence generator) shown in FIG. Generate an encryption key C through eXclusive OR (C = E _k (m)).

In addition, the key k generated through the same key generation unit disposed at the transmitting and receiving end is repeated twice exclusively with the transmitting and receiving end (XOR (XOR)) so that the encrypted key is decrypted to obtain a plain text (m = D _k). (C)).

Here, the plain text may correspond to a signal for locking and releasing the computer.

4 is a diagram illustrating a computer locking and releasing process in the computer locking and releasing system according to the present invention shown in FIGS. 1A and 1B.

As shown in Figure 4, in the computer lock and unlock system according to the present invention is initially set as follows.

The encryption algorithm (described in FIGS. 2 and 3) according to the present invention is installed in the memory of the user's computer and the mobile terminal, and the wireless communication module is connected.

That is, the mobile terminal operates in a connection standby mode with a computer, and attempts to interconnect by executing an encryption algorithm (S401).

When requesting the mobile terminal for the 128-bit key bit sequence (key) k generated through the key generation unit according to the encryption algorithm according to the present invention (S402), the mobile terminal transmits the same key to the computer, thereby allowing the user computer and the computer. A partnership relationship is established between mobile terminals (S403).

In this case, when establishing a partnership through Bluetooth communication, it may be set to a PIN code (phone password) input.

After the partnership is established with each other, communication between the user computer and the mobile terminal is enabled, and the control for locking and releasing the user computer is possible through the mobile terminal (S404).

Hereinafter, a control process for locking and releasing a user computer through a mobile terminal will be described.

If the user is away for a break out, rests or attends a meeting (usually the user always carries the mobile terminal), the computer detects that the connection with the mobile terminal is lost (step 1).

Here, the predetermined distance for detecting the disconnection is a distance away from the visual field of the computer user, and typically a radius of 1 to 2 m from the computer is preferable.

In other words, if it is out of the predetermined distance, the mobile terminal transmits an encryption key of the computer lock signal command to the computer.

Thereafter, the encryption key received from the computer is decrypted to perform a security lock function on the computer using the screen saver or the window lock function of the computer saver (second step).

Thereafter, the computer continuously finds the mobile terminal of the user whose partnership has been established, and determines that the mobile terminal possesses the same key generated by the key generation unit as the terminal where the partnership is established (step 3).

In other words, an authentication process is performed to enable computer locking and unlocking only between a mobile terminal and a computer having a partnership using the same key.

Thereafter, when the authenticated mobile terminal approaches the predetermined distance range from the computer, the screen saver release or window lock release is performed (step 4).

In addition, by using a 128-bit encryption key, it is possible to wirelessly transmit a certificate from the mobile terminal to the computer or vice versa.

Through this, it is possible to reduce user inconvenience caused by frequent login and logout use, and to improve security by eliminating the risk of decryption in the wireless transmission of an authorized certificate between a mobile terminal such as a margarine device or a mobile phone and a computer.

As described above, in the computer locking and unlocking system according to the present invention, a device for storing important documents is not limited to a computer, but for various types of digital devices and electronic products such as PDAs, notebook PCs, etc., in which important information can be stored. Can be applied.

In addition, as the mobile terminal, various types of personal portable devices such as a mobile phone, an MP3 player, a PDA, a memory stick for storing information, and a marger device may be used.

In addition, the wireless communication between the important information storage device and the mobile terminal controlling the same, a wireless communication type of various methods other than Bluetooth communication, RFID, infrared communication method that is representative of short-range wireless communication may be applied.

In addition, the locking device using the encryption algorithm according to the present invention increases the nonlinearity by improving the nonlinearity by clock-controlling the LM sum sequence generator, thereby improving the degree of safety and security.

In addition, when n = 256, the period can be 2 ¹²⁸ or more and the linear complexity can be 2 ¹²⁸ or more, and it can be seen that the basic random test item satisfies well.

Through this, it can be applied to next generation mobile communication, satellite communication, or various network communication requiring high speed.

While the above has been described a specific embodiment of the computer lock and unlock system and method according to the present invention, this is for illustration, those of ordinary skill in the art without departing from the spirit of the present invention Modifications are possible and will fall within the scope of the present invention.

As described above, a system for locking and releasing an information storage device and a method thereof according to the present invention provide wireless communication between an information storage device such as a PC storing important information and a mobile terminal mainly carried by the user of the information storage device. Establish a partnership, set a lock function on the information storage device to prevent information leakage when the user's mobile terminal is out of a predetermined distance, and lock the function to use the information storage device when the user accesses the device within a predetermined distance. It provides a system and a method to release.

Through this, it is possible to prevent the leakage of information due to negligence of the user.

In addition, security can be enhanced by applying an encryption algorithm that maintains a 128-bit degree to wireless communication between the information storage device and the mobile terminal controlling the same.

In addition, the encryption algorithm according to the present invention randomly clocks the LFSR through a clock adjustment function, and then generates a key sequence bit output, thereby increasing nonlinearity in the generated key, making it difficult to decipher a correlation attack or the like. .

Through this, the cycle will be ²¹²⁸ or more, it is possible to implement the linear complexity of ²¹²⁸ or more, in many mobile communication, satellite communication or the various network applications that require a high speed is possible.

Claims (13)

Important information is stored, and receives and decrypts an encrypted lock setting command or an unlocking command according to an encryption algorithm for generating a random encryption key from a mobile terminal in which a partnership is set, and performs a lock function according to the decrypted lock setting command. An information storage device for setting or releasing a lock function according to the decrypted unlock command; If the separation distance is greater than a predetermined distance from the information storage device, the lock setting command is encrypted according to the encryption algorithm and provided to the information storage device, and if the separation distance from the information storage device is less than a predetermined distance. A mobile terminal for encrypting the unlock command in accordance with the encryption algorithm to provide to the information storage device Locking and unlocking system of the information storage device comprising a. The method of claim 1, And the cryptographic algorithm randomly clocks the LFSR via a clock adjustment function to generate a carry, memory and key sequence bit output. The method of claim 2, The cryptographic algorithm is characterized in that it has two mutually clock-controlled LFSR, carry and memory bits. The method of claim 3, wherein The two LFSRs randomly control clocks of different LFSRs to generate an irregular clock in each register. The LFSR irregular clock on one side is randomly determined according to the contents of two specific taps of the other LFSR. Lock and unlock system of information storage. The method of claim 1, The mobile terminal, A memory in which the lock command or the unlock command or the certificate information and the encryption algorithm are stored; A wireless communication module configured to transmit the lock setting command or the unlocking command or the certificate information encrypted according to the encryption algorithm to the information storage device; If the separation distance from the information storage device is greater than or equal to a predetermined distance, the lock setting command is encrypted according to the encryption algorithm and provided to the information storage device. If the separation distance from the information storage device is less than or equal to the predetermined distance, the unlocking command is performed. To encrypt the data according to the encryption algorithm and provide it to the information storage device Locking and unlocking system of the information storage device comprising a. The method of claim 1, The information storage device, A wireless communication module receiving the lock setting or the unlocking command from the mobile terminal; A memory for storing a lock setting or unlock command or certificate information; Decrypts the lock setting or the unlocking command received from the wireless communication module, decrypts the lock setting or the unlocking command, sets a lock function according to the decrypted lock setting command, or releases the decrypted lock Control to release the lock on command Locking and unlocking system of the information storage device comprising a. The method of claim 1, And a Bluetooth module embedded in the information storage device and the mobile terminal to perform short-range wireless communication in a master slave manner between the mobile terminal and the information storage device. The method of claim 1, And a system for transmitting an authorized certificate wirelessly between the information storage device and the mobile terminal using an encryption key according to the encryption algorithm. If the separation distance from the information storage device with which the partnership is set is greater than or equal to a predetermined distance, encrypting the pre-stored lock setting command according to an encryption algorithm for generating a random encryption key and transmitting the encrypted information to the information storage device; Receiving and decrypting, by the information storage device, the encrypted lock setting command and setting a lock function according to the lock setting command; Encrypting, by the mobile terminal, a pre-stored unlock command according to a predetermined encryption algorithm when the separation distance from the information storage device for which the partnership is set is less than or equal to a predetermined distance; Receiving and decrypting the encrypted unlocking command and setting a lock function according to the unlocking command. delete The method of claim 9, And a master slave short-range wireless communication between the mobile terminal and the information storage device. The method of claim 9, And transmitting a public certificate wirelessly between the information storage device and the mobile terminal by using an encryption key according to the predetermined encryption algorithm. The method of claim 9, And the predetermined encryption algorithm randomly clocks the LFSR through a clock adjustment function, and then generates a carry, memory and key sequence bit output.

Images