KR20220048079A - A Semiconductor Security Chip With A Built-in Quantum Random Number Generator (QRNG) and A Physical Unclonable Function (PUF), And A Digital Wallet Running Within The Chip - Google Patents

Abstract

Disclosed are a semiconductor security chip and a digital wallet having the same therein. The semiconductor security chip comprises: a quantum random number generator (QRNG); a physical unclonable function (PUF) for ensuring the security of the security chip itself by providing a random number necessary to prevent the security chip from being physically copied, as well as an ID for uniquely designating the security chip; and a QRNG which dynamically generates and provides short-lived true random numbers, thereby preventing wiretapping or forgery that occur in at least one process of updating firmware and certificates between network nodes, authenticating network nodes for counterparties in digital token transactions, and transmitting and receiving transaction data between digital wallets. Therefore, the scalability and stability problems with a DLT can be fundamentally solved.

Description

A Semiconductor Security Chip With A Built-in Quantum Random Number Generator (QRNG) and A Physical Unclonable Function (PUF) ), And A Digital Wallet Running Within The Chip}

The present invention relates to a quantum random number generator and a security chip incorporating a physical copy protection function, and more particularly, a key component of a device necessary for safely storing and exchanging digital tokens without fear of forgery and falsification. It relates to a semiconductor security chip and a digital wallet that is built-in to the chip and operates only inside the chip.

The background technology of the present invention is a quantum random number generator (QRNG), a physical copy protection function (PUF), a cryptography function, and a distributed ledger technology (DLT).

A quantum random number generator (QRNG) uses the decay of radioactive isotopes as an entropy source to dynamically generate high-quality true random numbers and provides them to cryptographic functions and DLT-related components. do.

The physical copy protection function (PUF) generates an unpredictable random number in hardware by using the difference in the microscopic structure between semiconductor chips produced in the same manufacturing process, and uses this random number to separate individual semiconductor chips from other semiconductor chips. It allows for uniquely referable as well as non-copyable.

Distributed Ledger Technology (DLT) is a technology platform that enables the safe exchange of digital tokens in an insecure environment such as the Internet, and is used as a base technology for cryptographic assets such as Bitcoin and Ethereum.

On the other hand, DLT entrusts verification of the validity and uniqueness of transactions and management of the ledger to an unspecified or specific small number of network nodes called validating nodes. When the communication network is paralyzed due to earthquakes, floods, wars, etc., it has a major weakness in that it is difficult to guarantee the completeness of the transaction in real time because the nodes of the transaction parties are cut off (offline) from the verification node.

The weakness in terms of scalability and stability is that if all nodes in the DLT network take over the transaction verification and ledger management functions that a few are responsible for, that is, if you use the drastically distributed ledger technology (DDLT) can be healed If all nodes in the network have a transaction verification function, etc., there is no need to communicate with a third-party verification node to send and receive digital tokens, enabling real-time P2P transactions between transaction parties. The size of the transaction that can be processed is also expanded unlimitedly.

However, DDLT cannot be applied to the network node of DLT, that is, a digital wallet in the form of software that operates in memory. This is because memory is relatively easy to access and thus vulnerable to forgery attacks. For example, malicious users can manipulate the ledger of their digital wallet to inflate their token holdings. Therefore, in order to prevent such a situation, a secure network node that prevents manipulation of digital wallet programs, information stored in digital wallets, and communication data between digital wallets is required.

Patent Publication No./Date 1020180135562 (2018.12.21), "Quantum random number generation method of a random pulse generator using alpha particles of radioactive isotopes" Patent Publication No. (date) 1020190106034 (2019.09.18), "Apparatus and method for implementing PUF-based blockchain"

The present invention was devised to solve the scalability and stability problems of DLT, and the problem to be solved through the present invention is verification of the validity and uniqueness of digital token transactions performed by an unspecified or a small number of verification nodes and management of the ledger. It is to provide a network node for secure DDLT that allows the function to be distributed to all nodes in the network.

A means for solving the problems of the present invention is a semiconductor security chip 110 having a quantum random number generator (QRNG) 120, a physical copy protection function (PUF) 140, a crypto processor, a memory, etc. as components, and this chip It is composed of a cryptography and a digital wallet 130 that are built-in and executed, that is, hardware, software, and cryptographic functions are closely coupled to provide a network node for DDLT that operates as one.

The core of the technical idea implemented in the network node for DDLT is to secure the physical safety of the network node by using the static random number of the PUF 140 and the copy protection function, and the dynamic random number of the QRNG 120 It is used to add logical stability to prevent malicious users from compromising the stability of DDLT through duplication, access, eavesdropping, etc.

To describe the above idea in more detail, the PUF 140 generates a random number that is unpredictable but always the same, so that it can be used as a fingerprint of the chip in hardware, and stores the random number inside the chip using the random number. It prevents physical duplication and information leakage of security chips by storing the firmware, certificates for nodes and node certification authorities, programs for cryptographic functions and digital wallets, and digital token transaction ledgers in encrypted form.

QRNG (120) utilizes radioactive isotope decay as a source of randomness to generate short-lived ephemeral true random numbers with properties of unpredictability, uniform distribution, and lack of patterns. After dynamically creating it, it is provided to the cryptographic function and digital wallet 130, which are other key components of the security chip 110, so that communication with the outside of the security chip (firmware update, certificate update, and the counterpart node of the digital token transaction) It is used to enhance the stability of authentication, including sending and receiving transaction data between digital wallets).

The digital wallet 130 performs functions such as authentication of the counterparty node, storage, transmission, and reception of digital tokens, validation and uniqueness of digital token transactions, and digital token transaction ledger management using PUF, QRNG, encryption technology, etc. do. And, as mentioned above, all components of the digital wallet except for the user interface 150 and the application program interface (API) 160 used to receive input from the user or display the processing result to the user are mounted on a security chip, It must run inside a secure chip.

The present invention utilizes a semiconductor chip containing both PUF and QRNG, which are independently manufactured and utilized, to configure a network node having both physical and logical stability, so that all nodes, not a few network nodes, are digitally It is now possible to implement a DDLT platform that verifies the validity and uniqueness of token transactions and performs the ledger management function, thereby providing the effect of fundamentally solving the scalability and stability problems of DLT.

In addition, the prior invention divides the network node into a security area and a user area, and in preparation for the possibility that the user area is exposed to malicious users, etc., in addition to the consensus between the network nodes, the consensus within the network node (between the security area and the user area) agreement), but the present invention fundamentally eliminates the possibility of exposure to malicious users by placing all components of the network node in the security area (in the chip), and through this, the two-step agreement (network By reducing the process of agreement between nodes and agreement within network nodes) to one step (agreement between network nodes), it also provides the effect of reducing the time required to perform a single transaction.

The positive effect of the present invention, which is a network node for DDLT consisting of a semiconductor security chip with a quantum random number generator and a physical copy protection function, and a digital wallet that is built into the chip, can perform large-scale transactions in real time (near instantly) under any adverse conditions. ) can appear the most in the operating environment of central bank digital currency, which must be processed at the same time.

1 is a block diagram illustrating an internal configuration of a network node for DDLT and a communication method between network nodes according to an embodiment of the present invention;
2 is a block diagram illustrating a procedure for registering a security chip with a certification authority according to an embodiment of the present invention;
3 is an operation explanatory diagram for explaining a procedure for encrypting plaintext data by a digital wallet according to an embodiment of the present invention;
4 is an exemplary configuration diagram for explaining a communication combination between a device equipped with a security chip and a digital wallet according to an embodiment of the present invention;
5 is an exemplary operation explanatory diagram illustrating the configuration and operation of a ledger stored in each device of the DDLT according to an embodiment of the present invention.

The invention disclosed herein may be embodied in various forms and is not limited to the examples set forth herein. In addition, the terms used herein are only used to describe specific embodiments, and are not intended to limit the scope or form of the present invention. Hereinafter, embodiments of the present invention will be described in more detail with reference to the drawings.

(Example)

A semiconductor security chip according to an embodiment of the present invention, a quantum random number generator (QRNG); a physical copy protection function (PUF) for securing the security of the security chip itself by providing not only an ID uniquely designating the security chip but also a random number necessary to prevent the security chip from being physically copied; By dynamically generating and providing short-lived genuine random numbers, eavesdropping that may occur during at least one of firmware and certificate updates between network nodes, authentication of network nodes for counterparties in digital token transactions, and transmission/reception of transaction data between digital wallets; Quantum random number generator (QRNG) for preventing forgery, etc.; characterized in that it is provided integrally.

The network node 100 for DDLT encompassing the present invention integrates the semiconductor security chip 110, the digital wallet 130 that is mounted on the chip and operates, and the interfaces 150 and 160 necessary for using the digital wallet. It is characterized in that it is provided with.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to Figs.

1 is a block diagram illustrating an internal configuration of a network node for DDLT and a communication method between network nodes according to an embodiment of the present invention, and FIG. 2 is a security chip according to an embodiment of the present invention to an authentication authority. It is a block diagram illustrating a registration procedure, and FIG. 3 is an operation explanatory diagram for explaining a procedure for encrypting plaintext data by a digital wallet according to an embodiment of the present invention.

4 is an exemplary configuration diagram for explaining a communication combination between devices equipped with a security chip and a digital wallet according to an embodiment of the present invention, and FIG. 5 is a configuration of a ledger stored in each device of DDLT according to an embodiment of the present invention. and an exemplary action explanatory diagram showing the action.

First, the security chip 110, which is a core component of the network node for DDLT, is a physical replica of a hardware element as shown in FIG. It is composed of a digital wallet 130, interfaces 150, 160, etc. which are software elements such as a preventive function (PUF) 140, a quantum random number generator (QRNG, 120), and the like.

In addition to the above-mentioned components, the security chip 110 includes a crypto processor and memory specialized for performing cryptographic algorithms inside the hardware so that a digital wallet can use it, although not shown in FIG. 1 . should include

The PUF 140 provides not only an ID uniquely designating the security chip 110 but also a random number necessary to prevent the security chip 110 from being physically copied, thereby securing the security of the security chip itself. is utilized

The QRNGs 120 and 310 are implemented in a software manner and have properties such as unpredictability, uniform distribution, and absence of patterns by using quantum mechanical properties rather than pseudo random numbers that can have a certain pattern. Generates a genuine random number of , and provides the random number to cryptographic algorithms 320 and 330 , and the like.

The QRNGs 120 and 310 statically generate random numbers and, unlike PUF, which is in charge of the physical security of the network node for DDLT, dynamically generates and provides short-lived true random numbers for communication between network nodes (firmware and certificates). It is mainly used to prevent eavesdropping and forgery that may occur in the process of updating, authentication of network nodes for the counterparty of digital token transactions, transmission and reception of transaction data between digital wallets, etc.).

Next, the digital wallet according to an embodiment of the present invention includes a quantum random number generator (QRNG), a physical copy protection function (PUF), a crypto processor and a memory in a cryptographic digital wallet having a semiconductor security chip. Including, but mounted in a built-in form inside the semiconductor security chip, executed inside the semiconductor security chip, authentication of a digital token transaction partner, verification of validity and uniqueness of digital token transaction, digital token It is characterized in that it performs the management function of the transaction ledger.

The digital wallets 130 and 300 perform storage, transmission, and reception of digital tokens, validation and uniqueness of digital token transactions, and ledger management functions, and include cryptographic algorithms necessary to perform these functions. do it with

The digital wallets 130 and 300 have a user interface ( 150) and the function provided through the application program interface (API) 160, it is configured to be installed and executed inside the security chip in a built-in form.

The core of the technical idea of the present invention is to manufacture QRNG, PUF, crypto processor, memory, etc. in a single semiconductor chip, and to implement the encryption function and digital wallet in a built-in form in this semiconductor chip, thereby improving the configuration and function of the network node. It is hidden from the outside (including legitimate users).

On the other hand, since DDLT operates based on communication between network nodes of the P2P method, it requires a procedure to check whether the counterpart node is a node equipped with a normal security chip that has been authenticated by a certification authority.

FIG. 2 shows a procedure for registering the security chips 200 and 220 of the present invention with the certification authority 210 before use by mounting the security chips 200 and 220 in the DDLT network node.

The registration target security chips 200 and 220 provide the ID provided by the PUF, which is a core component of the chip, to the certification authority 210, and then receive a certificate from the certification authority and store it inside the certification authority 210. ) to register

Referring to FIG. 2 , the network node equipped with the security chips 200 and 220 according to the embodiment of the present invention does not communicate with the network node equipped with the security chip that does not have a certificate issued by the certification authority 210 . It shouldn't, and you can't actually communicate.

All digital wallets must secure a communication channel that can securely exchange data with the counterpart digital wallet in order to send and receive digital tokens. Herein, the secure communication channel refers to a data exchange means that guarantees all confidentiality, integrity, and availability of data.

3 shows an example in which the digital wallet 300 uses an elliptic curve integrated encryption scheme (ECIES), which is an integrated encryption system using an elliptic curve in a security chip to secure a secure communication channel.

In the digital wallets 130 and 300, the sender and the receiver share (340) a secret key by using an unsecure communication means such as NFC, Bluetooth, WiFi, Internet, LTE, 5G, etc., and based on the secret key A secure communication channel is implemented by sending and receiving data after encrypting it using the generated keys.

Referring to FIG. 3 , in the embodiment of the present invention, the encryption algorithm is stored in the security chip and executed in the security chip.

The present invention can be mounted on various devices to configure a network node for DDLT.

4 shows devices for a DDLT network node in which a security chip can be mounted. The security chip of the present invention may be mounted on a desktop 400 , a laptop 410 , a tablet 430 , a smart phone 440 , an IoT device 450 , a commercial bank server 420 , a smart card, a USB, and the like. Digital tokens can be directly circulated between these devices without going through a third party.

On the other hand, the desktop 473, laptop 474, tablet 475, smart phone 471, POS terminal 470, IoT device 472, etc. not equipped with a security chip are commercial bank servers 460, etc. Digital tokens must be exchanged through an indirect distribution method.

A device for every network node maintains a ledger of transactions related to it. For example, transactions 520 and 530 between device ₁ 500 and device ₃ 510 are stored only on these two devices so that these transactions are not exposed to other devices, and all devices do not have to maintain a huge ledger. .

5 shows how the network node for DDLT equipped with the security chip of the present invention manages its transaction ledger in the memory of the security chip.

Although the present invention has been described with reference to an embodiment thereof as described above, various modifications, variations, and additions are possible within the same scope of the technical spirit, and these can all be considered to be included in the scope of the present application. there is.

110: security chip
120: quantum random number generator (QRNG)
130: digital wallet
140: Physical Copy Protection (PUF)
150, 160: interface

Claims (2)

A semiconductor security chip comprising:
quantum random number generator (QRNG);
a physical copy protection function (PUF) for securing the security of the security chip itself by providing not only an ID uniquely designating the security chip but also a random number necessary to prevent the security chip from being physically copied;
By dynamically generating and providing short-lived genuine random numbers, eavesdropping that may occur during at least one of firmware and certificate updates between network nodes, authentication of network nodes for counterparties in digital token transactions, and transmission and reception of transaction data between digital wallets; Quantum random number generator (QRNG) to prevent forgery, etc.;
A semiconductor security chip, characterized in that it is provided integrally with. In a digital wallet (cryptographic digital wallet) having a semiconductor security chip,
comprising a quantum random number generator (QRNG), a physical copy protection function (PUF), a cryptoprocessor and memory;
It is mounted inside the semiconductor security chip in a built-in form, and is executed inside the semiconductor security chip, and functions to authenticate a digital token transaction partner, verify the validity and uniqueness of a digital token transaction, and manage the digital token transaction ledger. Cryptographic technology-based digital wallet, characterized in that it performs.

Images