TW200931928A - Security management system of a secret key - Google Patents

Abstract

The present invention relates to a security management system of a secret key, which provides generating mechanisms and encryption algorithms for all kinds of secret keys and then stores the generated secret keys in a security access module (SAM) having export function for the secret keys or in a storage arithmetic facility and also provides a management system of the secret keys. The encryption system of the management system mainly combines a master key, a base key seed with an application specific date. Based on the cooperation between an international standard formula to generate respective mater keys for every applied file and Radio Frequency Identification TAG (RFID TAG) to store a special ID for media to calculate a special secret key, the special secret key can be used for managing the security of RFID storage media.

Description

200931928 IX. INSTRUCTIONS: [Technical field to which the invention pertains] The present invention relates to a security management system for secret recording, in particular to an RFID tag that can effectively prevent illegal use or copying of content 'this key security management system not only Can generate the master key (Master key), and can effectively manage the application authority to limit the master key, provide different permissions and limit the date of use 'and can also provide the program development design interface (API) to the application system to calculate the individual RFID The key of Tag, which can be used with or without contact, is a key security management system that can be applied to different applications for security processing, and which is more practical and convenient in its overall implementation. Innovative designer. [Prior Art] Radio Frequency Identification (RFID) is a radio frequency identification technology that performs identification (ID) by radio frequency transmission (RF). It can read and write a large amount of information at the same time' to carry out related management and decision-making. The RFID system is composed of a reader (Reader), an electronic tag (Transponder, also known as Tag) and an application software (Appl icati〇n System). The system operates mainly by means of wireless communication technology. The digital information is transmitted to the reader by non-contact communication. After the reader reads and recognizes the information of the electronic tag, it can be further processed, used or added as a software of the back-end application system. The electronic tag structure contains analog, digital and memory function chips, and an Antenna Pattern designed for different frequencies or application materials. The integrated circuit on each electronic tag 矽 crystal (1C) has the only electronic product generation hip pr〇duct 5 200931928

Code ‘ EPC) ’ and attached to the object to identify the target object. Different sizes and types can be selected in different fields. The electronic tags can be mainly divided into: (1) Active tag: Actively transmit messages through the attached battery. 'Long transmission distance, but large size and price The high 'battery life is about two years, and can't be reused later. (2) PassiveTag: It does not contain batteries, so it has a long life, small size and low price. The electromagnetic wave emitted by the reader/writer uses the principle of internal inductance or microwave reflection to start the wafer and reflect - 传输 to transmit information. (2) Semi-Active Tag: It is usually in a state of slumber, and wakes up the electronic tag through the FieldGenerator to reduce power consumption and less radio wave transmission in the environment. The object can be fixed by adding the Motion Detector to the right. The memory capacity of the chip in the electronic tag is mainly 64 bits to 256 bits. The characteristics of reading and writing data can be divided into: read-only (Read Q) and read-write (class 2). ), Write Once Read Many (class 1). Application software includes middleware and system integration. 'Application system software is mainly stored in workstations or personal computers, mainly dealing with the occurrence of rFID driver events, controlling the reading and writing of front-end readers and Handling parsing, filtering, extraction and summarization of RFID electronic tag information streams. The function of the mediation software 'through XML (Extensible Markup

Language) format file ' and SOAP (Simple object Access

Protocol) technology to deliver XML messages' by 〇DBC (〇bject Data 200931928

Base Connectivity technology communicates with the back-end enterprise information system and database management system to provide an instant and complete RFID data communication network. Application software can also achieve the effect of confidentiality by means of encryption and decryption, so that the digital data has the advantages of variability and liquidity, and integrates with the Internet, PC, PDA, Wireless, and future information appliances. The media device between the above-mentioned electronic tag and the application software is a reader/writer. After the reader can capture and recognize the electronic standard information, the data is transmitted.

It is expected to be processed by the back-end application system software. The current common reader format can be divided into: ° (1) Fixed Reader: It can be installed at the door to identify the entering personnel. (1) Hand-Held Reader: A device that is plugged into a special device, such as a Personal Digital Assistant (PDA), in a plug-in type (PCMCIA/CF card). When in use, it can move freely in each space, and read/write data for more fixed objects (such as valuable equipment) to establish and maintain complete electronic records. However, the better the general encryption effect, the more complicated it is, the more the link is, the slower the decoding is, so that if the system needs to decode quickly, its slow decoding speed is not applicable, and the decoding speed is not applicable. Faster, its plus = effect _ is poor, easy for the unscrupulous person (four) to crack, lose its = protection purpose, so that how to have a good encryption effect, and the solution speed, and the key, that is, an urgent need An important topic for research and development. ^丄缘疋 Inventors have in view of this 'long years of rich experience in the relevant industry development and actual production experience' to the existing structure and lack of research and improvement, provide - eclipse - recognition ~ into # ^ ^ type key security management The system, in order to achieve better 200931928 value for the purpose of the purpose. SUMMARY OF THE INVENTION The present invention provides a key security management system, which mainly provides various key generation mechanisms and encryption algorithms, and stores the generated secret records in a CPU smart card with a secret record export function, that is, a secure access module ( Security Access

Module 'SAM) card, and provides key management function; mainly uses the encryption system of the system to combine the master key and a system secret code with an application broadcast number, and calculate according to the international standard formula Each application 主 the master key of the file; the decrypted password is stored in an RFID Tag and the only available password that is decrypted by the locked encryption system, and is limited by the time available for use. [Embodiment] For a more complete and clear disclosure of the technical content, the purpose of the invention and the effects thereof achieved by the present invention, the following is a detailed description, and please refer to the drawings and drawings: First, the first embodiment of the present invention is shown in the schematic diagram of the system architecture. The present invention mainly divides the RFID tag (radio frequency identification technology electronic tag) memory data into one or several application files (App 1 i cat i). 〇n file), each application file has a security control block, security control block memory key and access rights, generated and protected by the key management system 'high security RFID reader (Rea (jer) can only read or write RFID tags with correct density; the key security management system generates a unique set of master keys for each application file, and stores these master keys in In the key card with security protection mechanism, the user can load the application file keys into the temporary storage application in the computer according to the permission definition of the key card. 8 200931928 The main system defined by the system The Master Key is stored in a Security Access Module (SAM) card, which is an international standard high security CPU card (CPU Card). 2 is a schematic diagram of the master key generation architecture of the present invention. The master key of the key security management system of the present invention is generated by multiple groups (1 to N) basic key record base code (Base Key Seed). ), the system security key system (System Key) built in the key security management system, and the application specific data (Application Specific Data) combined, according to the international standard quasi-calculation formula (such as · MD2, 3DES...) formula calculation The master key of each application file; where: the system key code (System Key), which is a unique key built into the security management system, and can effectively manage the application rights of the restricted master key. Permissions and restrictions on the date of use. Please refer to the third diagram of the application file key generation architecture of the present invention. Each application file of each RFID Tag (radio frequency identification technology electronic tag) memory is shown. Applicati〇nfile) has a unique set of keys. When the RFID reader reads and writes the RFID tag, it must use the actual key of the Application file to properly authenticate the RFID tag and read or write the data. These keys are calculated by the international standard calculus formula (eg, MD2, 3DES...). This key calculus formula uses the master key (ApplicationKey), application file name, and RFID tag of each application file. The unique serial number (UID) is used as the calculation parameter, and then the unique key of the application file of each RFID Tag memory is calculated. The security key generated by the RFIDTag application KeyMan (secure security management system) is stored in the security access module (9 200931928 SAM) card, and the conditions are set according to the relevant authority (read and write) via the key security management system. , the key expiration date), the application file key must be applied before the application system enables the reader to read and write RFID tags.

Key) is loaded into the system for temporary storage, and then passed the international standard calculation formula (such as: MD2, 3DES...) to calculate the correct key of the application broadcast on the RFIDTag, and then load the RFID reader to be normal. The disclosure of the various embodiments described above is intended to facilitate the description of the present invention and is not intended to limit the architectural composition of the present invention. Therefore, the simple replacement of the variable equivalent structure of the numerical value is still the present invention. The scope of design.

欵, in summary, the embodiment of the present invention can achieve the expected use of the work is not the specific structure of its 3 kg exposure, not only has not been seen in similar products, seeking: open before the application, Cheng has fully met The provisions of the Patent Law and the application for patents, please apply for review

10 200931928 [Simple diagram of the diagram] First diagram: schematic diagram of the system architecture of the present invention. Second diagram: Schematic diagram of the master key generation architecture of the present invention. Third diagram: Schematic diagram of the application profile key generation architecture of the present invention. 】

Claims (1)

200931928 X. Patent application scope: I A key security management system, which mainly divides the RFID Tag (radio frequency identification technology electronic tag) memory data space into an application file, and the key security management system uses the application file. (Appl i cat ion file) generates a unique set of master secret records; wherein: the master key (Master Key) is generated by the base key seed (Base Key Seed), the system security built into the key security management system. Key base, (Application Key ic Data) combined with 'calculation to generate the master key of each application file; the system key base code (System Key), which is within the key security management system The built key is designed by the manufacturer and guarantees that each system's built-in key is unique. 2. The key security management system as described in the scope of the patent application, wherein the RFID Tag (radio frequency identification technology electronic standard) memory resource and the space are divided into an application file (Application file). 3. The key security management system according to claim 1, wherein the RFID tag (memory RFID tag) memory space is divided into several application files (Applicati〇n file). 4. The key security management system of claim 1, wherein the base key seed is a single group. The key security management system of claim 1, wherein the base key seed is a plurality of groups. 'As claimed in claim 1, the key security management system, wherein the master key is based on an international calculus formula to generate a master key for each application file' can effectively manage the master key. Should be 12 200931928 with permissions, provide different permissions and limit the date of use. 7. The key security management system according to claim 1, wherein the RFID reader uses the actual key of the application file to correctly and RFID tags (radio frequency identification technology electronic tags) ) Complete the certification and read and write the materials. 8. For example, the key security management system described in the first paragraph of the patent application 'in which the RFID tag (radio frequency identification technology electronic tag) is generated by the female full service' is stored in the security access module (Security Access) Module; SAM) card. 9. For the key security management system described in claim 6, wherein the international standard calculation formula is MD2. 10. The key security management system described in claim 6 of the patent scope, wherein the international standard calculation formula is 3DES. ❹ 13