CN101382963A - Authorisation and verification method for password position grouping and special chip thereof - Google Patents
Authorisation and verification method for password position grouping and special chip thereof Download PDFInfo
- Publication number
- CN101382963A CN101382963A CNA2007100509577A CN200710050957A CN101382963A CN 101382963 A CN101382963 A CN 101382963A CN A2007100509577 A CNA2007100509577 A CN A2007100509577A CN 200710050957 A CN200710050957 A CN 200710050957A CN 101382963 A CN101382963 A CN 101382963A
- Authority
- CN
- China
- Prior art keywords
- module
- password
- special chip
- cmg
- coding
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The invention provides an authentication method of code position combination authorization and a special chip thereof. The method conducts encoding to a code according to encoding rules of the CMG mechanism and then realizes the encoding of a group via a logical circuit so as to realize code authorization; position authorization is carried out by building an authorization central coordinate and authority radius; position authentication is carried out via the sum operation of extraction of square root and subtraction operation of an arithmetic logic unit; and after the position authentication is passed, a tri state gate is broken over, so that a state unit excites the pass of a signal, and operation of the state unit is started to carry out code authentication. The code authentication is passed by that a pin of the special chip generates a trigger signal, and authentication of an identifier combination is passed. The method is applicable to the technical field of electronic authorization.
Description
Technical field
The invention belongs to electronic authorization control field, be specifically related to a kind of password position combination authority checking method and special chip thereof.
Background technology
Usually rights management is divided into mandate and verifies two steps.In customs's entrepot trade, container quantity is many, flowability is big, and its monitoring management is challenging.Adopt key, electronic cipher or other proof of identification to supervise traditionally, means are comparatively single, and security is not high.
2006,26 (6) military engineerings offer a high price poplar " coding method of CMG Mechanism Optimization " article (: the coding method of a kind of anti-interference gear collection (CMG:counter-meshing gears) mechanism is disclosed 106 ~ 110), this coding method is used for mechanical cipher certifying organization, be skillfully constructed, the confidentiality height, but the processing of its mechanism relates to MEMS (microelectromechanical systems) processing technology, and MEMS technology to equipment require highly, this has hindered its practical application.
Summary of the invention
Comparatively single in order to overcome existing electronic authorization method and apparatus means, the deficiency that security is not high the invention provides a kind of password position combination authorization method and special chip thereof.
A kind of password position combination authority checking method of the present invention may further comprise the steps:
A) carry out password authorization
By the VHDL program, by CMG mechanism coding rule password is encoded, with downloading mode this program Solidification is become the fpga logic circuit again;
B) carry out post-authorization
Set authorized location information by the authorization message setter, comprise and authorize radius and authorization center point coordinate;
C) carry out location verification
(H), the real time position coordinate comprises longitude, dimension, highly for J, W to obtain the real time position coordinate by the position deriving means; This numerical value is made comparisons with the authorization center point coordinate that sets, as calculated, the distance D between authorized center and the real time position, its computing formula is as follows:
Wherein, (J, W H) are real-time center point coordinate, (J ', W ', H ') be the authorization center point coordinate;
D makes comparisons with the mandate radius R that sets again; Be appointed as authorized location if will authorize beyond the border, then as D〉during R, be judged as special chip and be within the scope of authority; If will authorize the border, then when D＜R, be judged as special chip and be within the scope of authority with the interior authorized location of being appointed as;
D) carry out password authentification
The input password carries out password authentification according to coding rule, and checking is by then exporting trigger pip.
Described positional information deriving means adopts the GPS receiver, and cipher input is keyboard or other input medias.
Described post-authorization adopts to be determined center point coordinate and authorizes the method for radius R to carry out.
The described scope of authority comprises following content
Be appointed as authorized location if will authorize beyond the border, then as D〉during R, special chip is within the scope of authority;
If will authorize the border with the interior authorized location of being appointed as, then when D＜R, special chip is within the scope of authority.
Special chip of the present invention comprises serial communication modular, setter interface module, CMG coding module, control module, position comparison module, and each module realizes and is integrated among a slice FPGA, wherein with the VHDL language programming
A) serial communication modular links to each other with control module in special chip inside, links to each other with the position deriving means in the special chip outside; By serial communication modular, can be from outside receiving position coordinate;
B) the setter interface module links to each other respectively with CMG coding module, control module, position comparison module, can link to each other with outside setter by the special chip pin; By the setter interface module, can receive keying sequence from the outside;
C) the CMG coding module links to each other respectively with setter interface module, position comparison module, can link to each other with outside topworks by the special chip pin; By the CMG coding module, can carry out password authentification;
D) control module links to each other with serial communication modular, setter interface module, position comparison module, can link to each other with outside numerical display device by the special chip pin;
E) the position comparison module links to each other with setter interface module, CMG coding module, control module; By the ALU in the comparison module of position, can carry out the positional information checking; Adopt the distance between extraction of square root and circuit calculating authorization center point and the real time position; By the logic association of position comparison module and CMG coding module, can carry out the combined authentication of positional information and password.
Described CMG coding module adopts the state unit to realize the computing of CMG coding, adopts the state unit that the two-dimentional labyrinth mapping graph of this CMG coding is described; Certain of small circle corresponding states machine is determined state, and the long scale-of-two word string of 4bit is the coding of this state in the circle, and camber line is the state transitions line, is used for describing the state transitions after the state stepping, and the numeral on the camber line has been described the state step sequence; Password " A " is the sensitive signal of driving condition machine Assembly A stepping, password " B " is the sensitive signal of driving condition machine Assembly B stepping, current state phase in two group state machine stepping processes " with " when the result was " 0000 ", password authentification was passed through.
The present invention has determined the mapping relations one by one of physical construction and keying sequence according to the anti-coding method of interfering in the gear collecting mechanism.By in flash technology FPGA, solidifying logic state machine, describe the logic association between CMG physical construction again, thereby in special chip, set up this cryptography, realize password authorization; Carry out post-authorization by input in FPGA memory internal body and preservation target position information; By the external input media of special chip, the list entries signal carries out password authentification; By the external positional information deriving means of special chip, the input real-time position information is carried out location verification.After two kinds of checkings were all passed through, in the inner triggering level that produces of special chip, and by pin output, the indication checking was passed through.
The present invention has following characteristics:
1, special chip has that volume is little, versatility good, and verifying speed is fast.
2, this takes turns the coding method of collecting mechanism owing to realized anti-interference with the full-electronic mode, makes this special chip realize the cryptographic authorization functions that password is implicit, confidentiality is high.
3, special chip has added the location verification logic on the basis of password authentification, has realized the post-authorization control function on the one hand, has increased the level of security of special chip on the other hand.
4, the present invention can be used for the container management in the entrepot trade.
Description of drawings
Fig. 1 is a general structure schematic block diagram of the present invention
Fig. 2 is the work schematic block diagram of the outside setter 2 among Fig. 1
Fig. 3 is the work schematic block diagram of the exterior display device 8 among Fig. 1
Fig. 4 is the work synoptic diagram of the serial communication modular 3 among Fig. 1
Fig. 5 is the work synoptic diagram of the setter interface module 4 among Fig. 1
Fig. 6 is the work synoptic diagram of the control module 6 among Fig. 1
Fig. 7 is the work synoptic diagram of the position comparison module 7 among Fig. 1
Fig. 8 is CMG coding example two dimension labyrinth mapping graph
Fig. 9 describes for the state unit of CMG coding example
Embodiment
The present invention is further illustrated below in conjunction with accompanying drawing.
Fig. 1 is a general structure of the present invention, with serial communication modular 3, setter interface module 4, CMG coding module 5, control module 6, the programming of position comparison module 7 usefulness Hardware Description Language VHDL and be integrated among a slice FPGA9, wherein:
One end of setter interface module 4 links to each other respectively with CMG coding module 5 with control module 6, and the other end links to each other with setter 2, converts the input value of setter to discernible coding numerical value by setter interface module 4;
One end of CMG coding module 5 links to each other with setter interface module 4, receives the password from setter 2, and the other end links to each other with position comparison module 7, receives the triple gate control information from position comparison module 7;
One end of position comparison module 7 links to each other with control module 6, and the other end links to each other with CMG coding module 5.
The principle of work of special chip inner function module of the present invention and external module thereof is as follows.
Position deriving means 1 obtains the elements of a fix, comprises longitude, latitude, highly.With the data framing, preserve by three independent FIFO that serial communication modular 3 enters in the control module 6 in the mode of serial communication;
Registers group in the position comparison module 6 is preserved respectively from the mandate radius of real time position coordinate in the control module 6 and setter 2, authorization center point coordinate, carry out computing in the ALU of two kinds of data in position comparison module 6, thereby obtain the location verification result.The location verification result represents that with logical one location verification passes through, and represents the location verification failure with logical zero.
Verify that the output of resultant logic links to each other with triple gate in the CMG coding module 5, be used for the input of supervisory keyboard keying sequence, when the location verification result is logical one, the triple gate conducting, keying sequence enters CMG coding module 5, otherwise triple gate is high-impedance state.State unit in the CMG coding module has shone upon the coding structure of CMG.The decoding sequence driving condition machine of input produces output quantity, and carries out and computing under each state, computing is passed through by password authentification then.
Described positional information deriving means adopts the GPS receiver: adopt jupiter 12 type OEM plates, the 1st, 3,4 pin are that the power supply input pin of antenna and receiver section connects+the 5V direct supply in 20 stitch of receiver, the 11st pin is the serial signal output pin, the 20th pin is the clock output pin of GPS receiver, and output frequency is 10KHZ.Serial signal inserts serial ports receiver module 11 by winding displacement.
Described setter such as Fig. 2, adopt the rank scanning keyboard, this keyboard is 4 * 5 rectangular distribution, comprise numerical key " 1 ", " 2 ", " 3, " 4, " 5 ", " 6 ", " 7 ", " 8 ", " 9 ", " 0 " ". ", function key " ENTER, " CANCER " and password initiating key " CODE ", longitude initiating key " J ", latitude initiating key " W ", height initiating key " H ", radius error initiating key " R ", cryptographic key " A ", " B ".In fact each key in the keyboard is exactly mechanical switch one by one, and this switch is positioned at the intersection point place of line and alignment, and when key was pressed, the line of its intersection point and alignment were connected, and the level on corresponding line or the alignment changes, thereby determines the function key that is pressed.Keyboard links to each other with the d0-d3 input end of keyboard interface module 4 by the wiring on the pcb board.
Described display device such as Fig. 3 adopt 7 sections mixed decimal point charactrons.D1-D9, A, B link to each other with display control module 18 in the control module 6, and wherein D1-D9 shows longitude, latitude, height number respectively, and A, B be the display password sequence respectively.
Described serial communication modular 3 is made up of baud rate generation module 10, serial ports receiver module 11 as shown in Figure 4; The clkin end of baud rate generation module 10 links to each other with the clk_uart end of control module 6, the baud rate output terminal bd_out of baud rate generation module 10 links to each other with the baud rate input end rxd_bd of serial ports receiver module, the rxd end of serial ports receiver module 11 links to each other with the txd end of GPS receiver module 1 by Serial Port Line, and the data output end data_0-data_7 of serial ports receiver module 11 links to each other with the data_0-data_7 input end of control module 6.
Described setter interface module 4 as shown in Figure 5, by keyboard scan module 12, keyboard disappear tremble module 13, keyboard decoding module 14 is formed; The clkin of keyboard scan module 12 end links to each other with the clk_key end of control module 6, and the disappear clkin that trembles module 13 of keyboard holds and links to each other with the clk_jitter of control module 6.The keyboard keyout_0-keyout_2 that trembles module 13 that disappears links to each other with the keyin_0-keyin_2 of control module.
Described control module 6 is made up of Clock management module 15, fifo module 16, the module of fetching data 17, display control module 18 as shown in Figure 6.Fifo module 16 is made of 3 separate FIFO (first in first out), the fifo module that capacity is 11 * 4bit is used for the memory error radius, the fifo module that capacity is 11 * 4bit is used for storage center point longitude parameter, the fifo module that capacity is 11 * 4bit is used for storage center point latitude parameter, and the fifo module that capacity is 11 * 4bit is used for storage center point height parameter; Display control module is made up of 11 digital management and control molding pieces, and wherein 9 module controls longitude and latitude numerical value show, 2 module controls keying sequences show.The data output end q0-q7 of FIFO cache module 17 links to each other with the data input pin in0-in7 of display control module 18, and FIFO cache module 17 is 256 bytes.
Described position comparison module is made up of coordinate comparison module 19, condition discrimination module 20 as shown in Figure 7.In coordinate comparison module 19, the authorization center point coordinate leaves among the ROM of a 3 * 10bit (the ROM programmed configurations is in FPGA9 inside), authorizes radius R ' leave in the register of a 1 * 10bit in the condition discrimination module 20.The data input pin d0-d7 of coordinate comparison module links to each other with the data output end cd_dout0-cd_dout7 of setter interface module; In condition discrimination module 20, input end d0-d9 links to each other with the output terminal d0-d9 of coordinate comparison module; The logic output terminal l_0 of condition discrimination module 20 links to each other with the logic input terminal l_1 of CMG coding module.
Computation process in coordinate comparison module 19 is as follows:
Wherein, (J, W H) are real-time center point coordinate, (J ', W ', H ') be the authorization center point coordinate.D is the distance between real-time central point and the authorization center point.
In condition discrimination module 20, D makes comparisons with authorizing radius R, produces logic output according to comparative result.Be appointed as authorized location if will authorize beyond the border, then as D〉during R, be judged as special chip and be within the scope of authority; If will authorize the border, then when D＜R, be judged as special chip and be within the scope of authority with the interior authorized location of being appointed as.
Fig. 8 is the two-dimentional labyrinth mapping graph of a CMG coding example, and " labyrinth " is made of " wall " and " road ".This figure has reflected the logic essence of CMG mechanism, promptly has only the node for " complete 0 " of AND operation result among the figure, is only on " road ", with such node called after " circuit node (route node) "; Otherwise, called after " wall node (wall node) ".Each node in the labyrinth.Obviously, as if being " A ", be " B " with Y circuit node value radially with X circuit node value radially, then should can derive unique decoding path in the two dimension labyrinth: " ABBBBAAABAAABBAABBBABAAB ".
In the CMG coding module 5, adopted the state unit that this two dimension labyrinth mapping graph is described.Fig. 9 is a state unit example of describing this coding.Among the figure, Assembly A, Assembly B are two separate state machines, certain of small circle corresponding states machine is determined state, the long scale-of-two word string of 4bit is the coding of this state in the circle, camber line is the state transitions line, be used for describing the state transitions after the state stepping, the numeral on the camber line has been described the state step sequence.Keying sequence is made up of symbol " A ", " B ", " A " is the sensitive signal of driving condition machine Assembly A stepping, " B " is the sensitive signal of driving condition machine Assembly B stepping, current state phase in two group state machine stepping processes " with " when the result was " 0000 ", the keying sequence checking was passed through.Therefore, a unique password " ABBBBAAABAAABBAABBBABAAB " has been shone upon in this group state machine and computing thereof.
The tristate gate control end tri_1 of CMG coding module 5 links to each other with the output terminal tri_0 of condition discrimination module 20; Output terminal is directly connected on the output pin of FPGA, and whether this pin is used to indicate final combination mandate to pass through.
The present invention is integrated in a plurality of data interface modules, data memory module, display control module, ALU among the FPGA9, makes it become special-purpose control special chip., therefore can the security of special chip further be improved according to the actual operating position change scope of authority and licencing key because but the FPGA9 online programming can communicate with host computer.
Claims (6)
1. a password position makes up the authority checking method, and described method may further comprise the steps:
A) carry out password authorization
By the VHDL program, by CMG mechanism coding rule password is encoded, with downloading mode this program Solidification is become the fpga logic circuit again;
B) carry out post-authorization
Set authorized location information by the authorization message setter, comprise and authorize radius and authorization center point coordinate;
C) carry out location verification
(H), the real time position coordinate comprises longitude, dimension, highly for J, W to obtain the real time position coordinate by the position deriving means; This numerical value is made comparisons with the authorization center point coordinate that sets, as calculated, the distance D between authorized center and the real time position, its computing formula is as follows:
Wherein, (J, W H) are real-time center point coordinate, (J ', W ', H ') be the authorization center point coordinate;
D makes comparisons with the mandate radius R that sets again; Be appointed as authorized location if will authorize beyond the border, then as D〉during R, be judged as special chip and be within the scope of authority; If will authorize the border, then when D＜R, be judged as special chip and be within the scope of authority with the interior authorized location of being appointed as;
D) carry out password authentification
The input password carries out password authentification according to coding rule, and checking is by then exporting trigger pip.
2. a kind of password position combination authority checking method according to claim 1, it is characterized in that: described positional information deriving means adopts the GPS receiver, and cipher input is keyboard or other input medias.
3. password position combination authority checking method according to claim 1 is characterized in that: described post-authorization adopts to be determined center point coordinate and authorizes the method for radius R to carry out.
4. password position combination authority checking method according to claim 1, it is characterized in that: the described scope of authority comprises following content
Be appointed as authorized location if will authorize beyond the border, then as D〉during R, special chip is within the scope of authority;
If will authorize the border with the interior authorized location of being appointed as, then when D＜R, special chip is within the scope of authority.
5. the special chip that is used for the described a kind of password position combination authority checking method of claim 1, it is characterized in that: described special chip comprises serial communication modular 3, setter interface module 4, CMG coding module 5, control module 6, position comparison module 7, each module realizes and is integrated among a slice FPGA9, wherein with the VHDL language programming
A) serial communication modular 3 links to each other with control module 6 in special chip inside, links to each other with the position deriving means in the special chip outside; By serial communication modular 3, can be from outside receiving position coordinate;
B) setter interface module 4 links to each other respectively with CMG coding module 5, control module 6, position comparison module 7, can link to each other with outside setter by the special chip pin; By setter interface module 4, can receive keying sequence from the outside;
C) CMG coding module 5 links to each other respectively with setter interface module 4, position comparison module 7, can link to each other with outside topworks by the special chip pin; By CMG coding module 5, can carry out password authentification;
D) control module 6 links to each other with serial communication modular 3, setter interface module 4, position comparison module 7, can link to each other with outside numerical display device by the special chip pin;
E) position comparison module 7 links to each other with setter interface module 4, CMG coding module 5, control module 6; By the ALU in the position comparison module 7, can carry out the positional information checking; Adopt the distance between extraction of square root and circuit calculating authorization center point and the real time position; By the logic association of position comparison module 7 and CMG coding module 5, can carry out the combined authentication of positional information and password.
6. special chip according to claim 5 is characterized in that: described CMG coding module 5, and adopt the state unit to realize the computing of CMG coding, adopt the state unit that the two-dimentional labyrinth mapping graph of this CMG coding is described; Certain of small circle corresponding states machine is determined state, and the long scale-of-two word string of 4bit is the coding of this state in the circle, and camber line is the state transitions line, is used for describing the state transitions after the state stepping, and the numeral on the camber line has been described the state step sequence; Password " A " is the sensitive signal of driving condition machine Assembly A stepping, password " B " is the sensitive signal of driving condition machine Assembly B stepping, current state phase in two group state machine stepping processes " with " when the result was " 0000 ", password authentification was passed through.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2007100509577A CN101382963A (en) | 2008-03-22 | 2008-03-22 | Authorisation and verification method for password position grouping and special chip thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2007100509577A CN101382963A (en) | 2008-03-22 | 2008-03-22 | Authorisation and verification method for password position grouping and special chip thereof |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101382963A true CN101382963A (en) | 2009-03-11 |
Family
ID=40462801
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2007100509577A Pending CN101382963A (en) | 2008-03-22 | 2008-03-22 | Authorisation and verification method for password position grouping and special chip thereof |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101382963A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104579667A (en) * | 2013-10-28 | 2015-04-29 | 腾讯科技（深圳）有限公司 | Account password management method, device and system |
| CN106471766A (en) * | 2014-03-31 | 2017-03-01 | 爱迪德技术有限公司 | Crypto chip and correlation technique |
| CN113158172A (en) * | 2021-02-26 | 2021-07-23 | 山东英信计算机技术有限公司 | Chip-based password acquisition method, device, equipment and storage medium |
-
2008
- 2008-03-22 CN CNA2007100509577A patent/CN101382963A/en active Pending
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104579667A (en) * | 2013-10-28 | 2015-04-29 | 腾讯科技（深圳）有限公司 | Account password management method, device and system |
| CN106471766A (en) * | 2014-03-31 | 2017-03-01 | 爱迪德技术有限公司 | Crypto chip and correlation technique |
| US10237065B2 (en) | 2014-03-31 | 2019-03-19 | Irdeto B.V. | Cryptographic chip and related methods |
| CN106471766B (en) * | 2014-03-31 | 2019-08-06 | 爱迪德技术有限公司 | Crypto chip and correlation technique |
| CN113158172A (en) * | 2021-02-26 | 2021-07-23 | 山东英信计算机技术有限公司 | Chip-based password acquisition method, device, equipment and storage medium |
| CN113158172B (en) * | 2021-02-26 | 2022-03-22 | 山东英信计算机技术有限公司 | Chip-based password acquisition method, device, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108021805A (en) | Detect method, apparatus, equipment and the storage medium of Android application program running environment | |
| US20080235520A1 (en) | Transportable, Configurable Data Carrier For Exchanging Data Between Electrical Devices, and Method Therefor | |
| US8185934B2 (en) | Programmable data protection device, secure programming manager system and process for controlling access to an interconnect network for an integrated circuit | |
| CN103879157B (en) | Parameter sending method, storage chip and the imaging cartridge of imaging cartridge storage chip | |
| US20070079133A1 (en) | Portable storage device having a subject identification information and a configuration method thereof | |
| US20020010856A1 (en) | IC, IC-mounted electronic device, debugging method and IC debugger | |
| CN109933529A (en) | Verification method and verification platform based on computing unit | |
| CN107741559B (en) | Single event upset test system and method under space radiation environment | |
| CN101369001A (en) | Apparatus used for debugging programmable chip and field programmable gate array chip | |
| CN108073351A (en) | The date storage method and credible chip of nonvolatile storage space in chip | |
| CN104468035B (en) | A kind of distribution POS data reliability transmission system and method | |
| CN109753391A (en) | The systems, devices and methods of the functional test of one or more structures of processor | |
| CN108334346B (en) | Method and device for developing service control process | |
| CN101382963A (en) | Authorisation and verification method for password position grouping and special chip thereof | |
| CN109977702A (en) | A kind of FPGA device encrypted authentication system and method based on DS2432 chip | |
| CN103514092A (en) | Method for automatic testing of software system of ATM | |
| CN102685121B (en) | A kind of digital signature method and device | |
| CN111414605A (en) | Unlocking method and device of embedded security unit, electronic equipment and storage medium | |
| CN107678879A (en) | A kind of apparatus and method verified in real time for bus and memory cell data block | |
| CN104217141B (en) | Reinforced virtual instrument measuring software metrology support method and device | |
| CN103118367B (en) | System and method for safety certification of mobile phones | |
| CN100440180C (en) | Processor, storage device, computer system, LSI system and method for transferring data | |
| CN103677598A (en) | Touch screen and method and device for achieving touch unlocking on same | |
| CN109582334A (en) | The upgrade method and device of programmable logic device | |
| CN104052726A (en) | Access control method and mobile terminal which employs access control method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Open date: 20090311 |