CN218866475U - Password device - Google Patents

Abstract

The application discloses password equipment is applied to data protection technical field, includes: a shield case; the password card is arranged in the accommodating cavity of the shielding cover, and the flexible layer coats the password card; the anti-dismantling controller is used for destroying preset data in the password card when the target pin per se is in a first level state; the N anti-disassembly switches are arranged on the password card and matched with the shielding cover, and are all in a closed state only when the shielding cover is in an unopened state; the target pin of the anti-disassembly controller is connected with the N anti-disassembly switches and the wires arranged in the flexible layer in series, when any 1 anti-disassembly switch is in an off state and/or the wires arranged in the flexible layer are in an open circuit, the target pin is in a first level state, and when the N anti-disassembly switches are in a closed state and the wires arranged in the flexible layer are not in an open circuit, the target pin is in a second level state. The password device has high safety, and the risk of secret key information leakage or tampering is reduced.

Description

Password device

Technical Field

The utility model relates to a data protection technical field especially relates to a password equipment.

Background

The PCI-E (Peripheral Component Interconnect Express) cipher card is a high-performance basic cipher device which is independently developed, is based on a hardware cipher processor and a multi-core processor, accords with the relevant technical specifications of the cipher device, can meet the requirements of signature/verification, encryption/decryption of application system data, and simultaneously provides a safe and perfect key management mechanism. And providing an application interface software library which accords with the code equipment application interface specification and supports multi-process and non-blocking calling, so that each safety application can be seamlessly connected and called with the PCI-E code card. The PCI-E password card is widely applied to various password security application systems and can carry out high-speed and multi-task parallel processing password operation.

At present, the security of data information is particularly important, and generally, a tamper-proof security mechanism is added to a cryptographic card, that is, when a shielding cover is illegally removed, a feedback signal is generated, so that a protection IC (Integrated Circuit) chip inside the cryptographic card destroys key information after receiving the feedback signal. In the prior art, usually, a Printed Circuit Board (PCB) is provided with a tamper point and is matched with a corresponding structure, so that a feedback signal is generated when a shielding case is illegally removed, or a light sensing device is provided to protect a password card, that is, a feedback signal is generated when a higher light intensity is sensed to trigger a tamper security mechanism.

The existing anti-dismantling mechanism is effective for the condition that key information is stolen by prying a shielding case, but in the existing scheme, one side of a password card provided with devices such as a key storage IC (integrated circuit) and a control IC (integrated circuit) is protected, namely the back of a PCB (printed circuit board) is exposed outside. If a lawless person cuts off some control circuits from the back or side of the password card through cutting, punching, detecting and the like, the anti-dismantling safety mechanism of the password card is invalid, and the key information is leaked or tampered. For the password card provided with the light sensing device for protection, if an illegal person removes the shielding case in an environment without a light source, the anti-removal safety mechanism of the password card can be invalid, and the key information is leaked or tampered.

In summary, how to effectively guarantee the security of the cryptographic device and reduce the risk of key information leakage or tampering is a technical problem that needs to be solved by those skilled in the art.

SUMMERY OF THE UTILITY MODEL

The utility model aims at providing a password equipment to guarantee password equipment's security effectively, reduce the risk that key information reveals or falsify.

In order to solve the technical problem, the utility model provides a following technical scheme:

a cryptographic device, comprising:

a shield having a receiving cavity;

the password card is arranged in the accommodating cavity and used for storing data;

the flexible layer is arranged in the accommodating cavity and used for coating the password card, and a lead is arranged in the flexible layer;

the anti-dismantling controller is arranged on the password card and is used for destroying preset data in the password card when a target pin of the anti-dismantling controller is in a first level state;

the N anti-disassembly switches are arranged on the password card and matched with the shielding case, so that the N anti-disassembly switches are all in a closed state only when the shielding case is in an unopened state; n is a positive integer;

the target pin of the anti-disassembly controller is connected with the N anti-disassembly switches and the leads arranged in the flexible layer in series, when any 1 anti-disassembly switch is in an off state and/or the leads arranged in the flexible layer are in an open circuit, the target pin is in a first level state, and when the N anti-disassembly switches are in a closed state and the leads arranged in the flexible layer are not in an open circuit, the target pin is in a second level state.

Preferably, the shielding cover is a detachable shielding cover, and a seal for detaching the deposit is attached to the detachable part of the shielding cover.

Preferably, the shielding cover is an opaque shielding cover, and the seal is an opaque seal.

Preferably, the flexible layer comprises a first flexible layer and a second flexible layer, and the shielding case comprises a shielding case upper shell and a shielding case lower shell detachably connected with the shielding case upper shell;

the first flexible layer is attached to each inner wall of the upper shielding case shell, and the second flexible layer is attached to each inner wall of the lower shielding case shell.

Preferably, the target pin is respectively connected with a first end of a pull-up resistor and a lead wire inlet end of the first flexible layer, and a lead wire arranged in the first flexible layer connects the lead wire inlet end of the first flexible layer with a lead wire outlet end of the first flexible layer; the second end of the pull-up resistor is connected with the positive electrode of the first power supply;

the wire outlet end of the first flexible layer is connected to the password card and is connected to the wire inlet end of the second flexible layer through wiring on the password card, and the wire inlet end of the second flexible layer is connected with the wire outlet end of the second flexible layer through a wire arranged in the second flexible layer;

and the lead wire outlet end of the second flexible layer is connected to the password card and is grounded through N anti-disassembly switches on the password card.

Preferably, the wire inlet end of the first flexible layer is connected to the target pin through a first connector or a first metal thimble, and the wire outlet end of the first flexible layer is connected to the password card through a second connector or a second metal thimble;

the wire inlet end of the second flexible layer is connected to the password card through a third connector or a third metal thimble; and the wire outlet end of the second flexible layer is connected to the password card through a fourth connector or a fourth metal thimble.

Preferably, the wires arranged in the first flexible layer and the wires arranged in the second flexible layer are both serpentine irregular wires.

Preferably, the method further comprises the following steps:

and the supporting frame is used for supporting the first flexible layer and the second flexible layer, so that the first flexible layer is tightly attached to each inner wall of the upper shield shell, and the second flexible layer is tightly attached to each inner wall of the lower shield shell.

Preferably, the first flexible layer is tightly attached to each inner wall of the upper shield shell through heat-resistant soft rubber, and the second flexible layer is tightly attached to each inner wall of the lower shield shell through heat-resistant soft rubber.

Preferably, the first flexible layer is a first FPC board or a first silver paste circuit membrane; the second flexible layer is a second FPC board or a second silver paste circuit membrane.

Use the embodiment of the utility model provides a technical scheme, the shield cover has and holds the chamber, consequently is arranged in the password card of storage data can set up and holds the chamber. In the accommodating cavity, a flexible layer used for wrapping the password card is further arranged, a lead is arranged in the flexible layer, and a target pin of the anti-dismounting controller is connected with the N anti-dismounting switches and the lead arranged in the flexible layer in series.

Under normal conditions, the flexible layer is not damaged, and when the shield cover is not the open mode, N anti-disassembly switches were the closed condition this moment to the wire of arranging in the flexible layer also does not break circuit, and the target pin is the second level state, can not trigger the anti-disassembly safety mechanism of preventing tearing open the controller. And if the illegal user has opened the shield cover, no matter open in the environment that does not have the light source, 1 or more among N anti-disassembly switches with shield cover matched with can become the off-state, when arbitrary 1 anti-disassembly switch is the off-state, the target pin can become first level state, just can trigger the anti-disassembly safety mechanism who prevents tearing the controller open, prevent promptly that the controller of tearing open can destroy the data of predetermineeing in the password card. If the illegal user does not open the shield cover, but hopes to cut off the control circuit through modes such as cutting, punching, detection, because in the scheme of this application, the flexible layer that has arranged the wire is cladding password card, consequently, the wire of flexible layer can be destroyed in illegal user's these operations, make the wire of flexible layer one or many places appear breaking, and as long as the wire has appeared breaking, the target pin can become first level state equally, and then trigger the anti-tear safety mechanism who prevents tearing the controller, prevent tearing the controller promptly and can destroy the preset data in the password card.

It can be seen that no matter an illegal user opens the shielding case or cuts off the control circuit by cutting, punching, detecting and other modes, the anti-dismantling safety mechanism can be triggered, so that the password equipment has high safety, and the risk of secret key information leakage or tampering is effectively reduced.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to these drawings without creative efforts.

Fig. 1 is an exploded view of a cryptographic device of the present invention;

fig. 2 is a schematic diagram of a front circuit structure of a password card according to an embodiment of the present invention;

fig. 3a is a schematic structural diagram of an upper housing of a shielding case according to an embodiment of the present invention;

fig. 3b is a schematic structural diagram of a lower shell of a shielding case according to an embodiment of the present invention;

FIG. 3c is a schematic view of a serpentine shaped irregular conductor of the flexible layer according to an embodiment of the present invention;

FIG. 3d is a schematic structural diagram of a supporting frame according to an embodiment of the present invention;

fig. 4 is a schematic diagram of a circuit structure of the first flexible layer, the second flexible layer and each detachable switch sequentially connected to the target pin according to an embodiment of the present invention.

Detailed Description

The core of the utility model is to provide a cryptographic equipment has very high security, has reduced the risk that key information reveals or falsify effectively.

In order to make the technical field better understand the solution of the present invention, the following detailed description of the present invention is provided with reference to the accompanying drawings and the detailed description. It is to be understood that the embodiments described are only some embodiments of the invention, and not all embodiments. Based on the embodiments in the present invention, all other embodiments obtained by a person skilled in the art without creative work belong to the protection scope of the present invention.

Referring to fig. 1, fig. 1 is an exploded view of a cryptographic device according to the present invention, the cryptographic device may include:

a shield having a receiving cavity;

a password card 30 disposed in the receiving cavity for storing data;

the flexible layer is arranged in the accommodating cavity and used for coating the password card 30, and a lead is arranged in the flexible layer;

the anti-dismounting controller is arranged on the password card 30 and is used for destroying preset data in the password card 30 when a target pin of the anti-dismounting controller is in a first level state;

the N anti-disassembly switches are arranged on the password card 30 and matched with the shielding case, so that the N anti-disassembly switches are all in a closed state only when the shielding case is in an unopened state; n is a positive integer;

the target pin of the anti-disassembly controller is connected with the N anti-disassembly switches and the wires arranged in the flexible layer in series, when any 1 anti-disassembly switch is in an off state and/or the wires arranged in the flexible layer are in an open circuit, the target pin is in a first level state, and when the N anti-disassembly switches are in a closed state and the wires arranged in the flexible layer are not in an open circuit, the target pin is in a second level state.

Specifically, in the scheme of this application, what the shield cover played is the effect of shielding protection, realize the physics protection to each components and parts including password card 30 in holding the chamber promptly, in practical application, because password card 30 can generate heat when using, consequently, the better material of thermal diffusivity can be chooseed for use to the shield cover, for example in a concrete occasion, can choose for use the aluminium system material of producing the grade to make the shield cover of this application, better thermal diffusivity has, and also comparatively light, the cost is lower, can effectively shield electromagnetic interference.

For convenience of production and assembly, the shielding case is usually designed to be detachable, that is, the shielding case is usually a detachable shielding case. For example, in the embodiment of fig. 1, considering that the password card 30 is generally sheet-shaped, the shield case may include a shield case upper shell 11 and a shield case lower shell 12 detachably connected to the shield case upper shell 11, and the shield case upper shell 11 and the shield case lower shell 12 are generally rectangular, i.e., a recessed receiving cavity is formed, so as to conveniently and effectively place the password card 30.

When the upper shield shell 11 and the lower shield shell 12 are detachably connected, there are various specific implementation manners, for example, the detachable connection may be implemented by screws, or the detachable connection may be implemented by a snap-in structure. Of course, in other specific embodiments, the shielding cover with other structures may be selected according to actual needs, and the shielding protection function may be effectively implemented.

Furthermore, in practical application, the shielding cover is a detachable shielding cover, so that a seal for detaching the deposit can be attached to a gap of the shielding cover, that is, the detachable part of the shielding cover. Detaching the mark-removed seal means that if the seal is torn off, a mark which is not easy to erase is obviously left on the shielding case. In the embodiment of fig. 1, the upper shield shell 11 and the lower shield shell 12 are rectangular, so that a gap is formed after the upper shield shell 11 and the lower shield shell 12 are connected, and the gap can be adhered by a seal to prevent illegal detection through the gap.

In some cases, information such as the ID of the password card 30 may be recorded on the seal, and thus, when the seal is handed to a manufacturer for processing, a worker may determine whether the shield cover has been opened by observing whether there is a seal tearing trace and comparing whether the information recorded on the seal matches the information related to the internal password card 30.

Further, in an embodiment of the present invention, the shielding cover is an opaque shielding cover, and the seal is an opaque seal.

In the embodiment, the shielding cover is an opaque shielding cover, and the sealing strip is an opaque sealing strip, so that an illegal user is prevented from directly observing the internal circuit structure through the gap of the shielding cover or directly observing the internal circuit structure through the shielding cover, and the safety of the scheme is further guaranteed.

The cryptographic card 30 is disposed in the receiving cavity and may be used to store data, such as key data, for example, a key. The specific circuit structure of the cryptographic card 30 can be set and adjusted according to actual needs.

The password card 30 is provided with N anti-disassembly switches matched with the shielding case, and the N anti-disassembly switches are matched with the shielding case, so that the on-off states of the N anti-disassembly switches are influenced by the shielding case.

It can be understood that, after the installation is completed, when the password device of the application is normally used, the shielding case is in a closed state, that is, in an unopened state, and at this time, the N anti-disassembly switches are all in a closed state. When the shield cover is opened once, that is, the shield cover is in an open state, at this time, 1 or more of the N anti-removal switches are switched to an off state. This mechanism can be realized through the spring structure, and when the shield cover was closed, through the spring structure in the compression each anti-disassembly switch for each anti-disassembly switch is the closure state, and illegal user in case opened the shield cover, just can appear foretell 1 or a plurality of anti-disassembly switch and switch into the condition of off-state. Of course, except spring structure, also can adopt the anti-disassembly switch of other structures in other concrete occasions, as long as can cooperate with the shield cover, realize this application to anti-disassembly switch's functional requirement can, do not influence the utility model discloses an implement.

In addition, it can be understood that the specific value of N may be set and adjusted according to actual needs, which generally depends on the size of the cryptographic card 30, and the larger the value of N is, the better the protection effect is, and certainly the higher the cost is. For example, fig. 2 is a schematic position diagram of 5 anti-detachment switches of the front circuit structure of the password card 30 in an embodiment, where N =5 in fig. 2, that is, 5 anti-detachment switches are provided, which are sequentially labeled as S1, S2, S3, S4, and S5, and the 5 anti-detachment switches are dispersedly disposed at different positions on the password card 30, so that even if an illegal user only slightly opens the shielding case, at least 1 anti-detachment switch becomes off. It should be noted that fig. 2 shows the positions of 5 anti-detachment switches, and other specific circuit structures of the password card 30 can be set and adjusted according to actual needs, which is not described in this application.

When the anti-disassembly controller is used normally, the N anti-disassembly switches are in the closed state, and the conducting wires arranged in the flexible layer are not broken, so that the target pins are in the second level state, and the anti-disassembly safety mechanism of the anti-disassembly controller cannot be triggered at the moment. And if any 1 anti-disassembly switch is in an off state, the level state of the target pin can be changed, namely the target pin is in a first level state, so that an anti-disassembly safety mechanism of the anti-disassembly controller is triggered.

The tamper controller is disposed on the password card 30, and when a target pin of the tamper controller is in a first level state, the tamper controller destroys preset data in the password card 30. The preset data may be key data stored in the cryptographic card 30, or may be all data, that is, a specific range of the preset data, and may be set in advance as needed. The preset data may be destroyed in various ways, and the common way is data coverage, for example, in practical applications, after triggering the tamper security mechanism of the tamper controller, the tamper controller will cover the preset data in the password card 30 with all 0 s. Of course, in other concrete occasions, can adopt other data destruction modes as required, and do not influence the utility model discloses an implement.

In addition, in some occasions, when the anti-dismantling safety mechanism of the anti-dismantling controller is triggered, the anti-dismantling controller can also light a status lamp connected with the anti-dismantling controller so as to indicate that the anti-dismantling safety mechanism is triggered. The status light and tamper controller may be battery powered, for example, using button cells.

In the containing cavity of the shielding case, the flexible layer used for coating the password card 30 is further arranged, and a wire is arranged in the flexible layer. As with the anti-detach switch, the on/off of the conductive lines disposed in the flex layer also affects the level state of the target pin.

During normal use, N anti-disassembly switches are all in a closed state, and the wire arranged in the flexible layer is not broken, so that the target pin is in the second level state, as described above, the target pin in the second level state does not trigger the anti-disassembly safety mechanism of the anti-disassembly controller.

If the illegal user does not open the shielding case, but hopes to cut off the control circuit by cutting, punching, detecting and other modes, because in the scheme of this application, the flexible layer covers the password card 30, therefore, these operations of the illegal user can destroy the wire of the flexible layer, make one or more places of the wire of the flexible layer break, and as long as the wire breaks, the target pin can become the first level state, trigger the anti-dismantling safety mechanism of the anti-dismantling controller.

The Flexible layer is made of a Flexible material and is also required to be provided with a lead, so that in practical application, a Flexible Printed Circuit (FPC) board is selected as a common mode, or a silver paste Circuit film can be selected in some occasions. For example, the first flexible layer 21 used in the embodiments later in the present application may be specifically a first FPC board, or a first silver paste circuit film; the second flexible layer 22 used may be embodied as a second FPC board, or as a second silver paste circuit film.

In a specific embodiment of the present invention, the flexible layer includes a first flexible layer 21 and a second flexible layer 22, and the shield cover includes a shield cover upper shell 11 and a shield cover lower shell 12 detachably connected to the shield cover upper shell 11;

the first flexible layer 21 is attached to each inner wall of the upper shield shell 11, and the second flexible layer 22 is attached to each inner wall of the lower shield shell 12.

This embodiment takes into account that the shield can be generally composed of a shield can upper shell 11 and a shield can lower shell 12 detachably connected to the shield can upper shell 11, and thus for the convenience of implementing the flexible layer of the present application, the flexible layer can also be composed of a first flexible layer 21 and a second flexible layer 22.

Because first flexible layer 21 all laminates with each inner wall of shield cover upper shell 11, take shield cover upper shell 11 of fig. 3a as an example, first flexible layer 21 alright all laminates with 5 faces of the inner wall of shield cover upper shell 11, and is the same, to shield cover lower shell 12 of fig. 3b, second flexible layer 22 can all laminate with 5 faces of the inner wall of shield cover lower shell 12, makes like this that the password card 30 in the holding chamber is wrapped well by the flexible layer, does not have the blind area of protection. In fig. 1 of the present application, the flexible layer is also the design of the first flexible layer 21 and the second flexible layer 22 used.

It is further understood that the present application requires that the target pin is in the first level state when any 1 of the tamper switches is in the off state and/or the wires disposed in the flexible layer are open, and therefore, an easier way to implement the circuit is to connect the target pin in series with the N tamper switches and the wires disposed in the flexible layer. In this embodiment, since the flexible layer covering the password card 30 is composed of the first flexible layer 21 and the second flexible layer 22, the wires in the first flexible layer 21 and the second flexible layer 22 are required to be connected in series to the target pins.

For example, in an embodiment of the present invention, referring to fig. 4, the target pin is connected to the first end of the pull-up resistor R1 and the wire inlet end of the first flexible layer 21, respectively, and the wire arranged in the first flexible layer 21 connects the wire inlet end of the first flexible layer 21 with the wire outlet end of the first flexible layer 21; the second end of the pull-up resistor R1 is connected with the positive electrode of the first power supply; the first power supply positive pole is marked V1 in fig. 4.

The lead outlet end of the first flexible layer 21 is connected to the password card 30 and is connected to the lead inlet end of the second flexible layer 22 through the wiring on the password card 30, and the lead inlet end of the second flexible layer 22 is connected with the lead outlet end of the second flexible layer 22 through the lead arranged in the second flexible layer 22;

the wire outlet end of the second flexible layer 22 is connected to the password card 30 and is grounded through N anti-disassembly switches on the password card 30.

In this embodiment, under normal conditions, that is, when the N anti-detachment switches are all in the closed state and the wires arranged in the flexible layers are not broken, the target pin may pass through the wires arranged in the first flexible layer 21, the wires arranged in the second flexible layer 22, and the N anti-detachment switches, which are connected in series in this order, and may be grounded, that is, the target pin is in the low level state at this time, and the second level state is in the low level state. In fig. 4, the target pin is marked as SDIO, N is set to 5, and these 5 anti-disassembly switches are sequentially referred to as a first anti-disassembly switch S1, a second anti-disassembly switch S2, a third anti-disassembly switch S3, a fourth anti-disassembly switch S4, and a fifth anti-disassembly switch S5. In some cases, a protection resistor with a smaller resistance value may be disposed between the fifth anti-removal switch S5 and the ground.

And if any 1 of the anti-detach switches is in an off state and/or a wire arranged in the flexible layer is broken, the level state of the target pin is pulled high by the pull-up resistor R1 connected to the positive electrode of the first power supply, i.e., the first level state is a high level in this example.

It is understood that, in other embodiments, by adjusting the circuit structure, the circuit structure can be designed such that the first level state is a low level and the second level state is a high level, which does not affect the implementation of the present invention.

In addition, in practical applications, the pull-up resistor R1 in fig. 4 and the first power supply connected to the pull-up resistor R1 may be disposed inside the tamper controller.

In a specific embodiment of the present invention, the wire inlet end of the first flexible layer 21 is connected to the target pin through a first connector or a first metal thimble, and the wire outlet end of the first flexible layer 21 is connected to the password card 30 through a second connector or a second metal thimble;

the lead wire inlet end of the second flexible layer 22 is connected to the password card 30 through a third connector or a third metal thimble; the wire outlet of the second flexible layer 22 is connected to the combination card 30 through a fourth connector or a fourth metal thimble.

This embodiment considers that, since the first flexible layer 21 needs to be attached to each inner wall of the upper housing 11 of the shielding case, and the wire incoming end of the first flexible layer 21 needs to be connected to the target pin of the tamper controller, the tamper controller is welded to the password card 30, and the password card 30 is spaced from the inner wall of the shielding case. Therefore, in order to effectively connect the wire inlet end of the first flexible layer 21 with the target pin of the anti-detach controller, in this embodiment, the wire inlet end of the first flexible layer 21 is connected to the target pin through the first connector or the first metal thimble.

Similarly, the wire outlet end of the first flexible layer 21, the wire inlet end of the second flexible layer 22, and the wire outlet end of the second flexible layer 22 all need to be connected to the password card 30, so in this embodiment, a connector or a metal thimble is used to connect to the password card 30.

The connector and the metal thimble play a role of a wire on a circuit, and in practical application, because the front and the back of the password card 30 are uniformly provided with the circuit, and the heights of the circuits are possibly different, compared with the distance between the back of the password card 30 and the inner wall of the upper shield shell 11 and the distance between the back of the password card 30 and the inner wall of the lower shield shell 12, the distance between the front of the password card 30 and the inner wall of the lower shield shell 11 has a certain difference, the required connector and the metal thimble can be selected according to the difference in the heights, and the connector can be generally specifically selected to be a pogopin connector.

As can be seen from the above description, the present application needs to realize the protection for the password card 30 based on the wires arranged in the flexible layer, and therefore, the more dense and irregular the wires arranged in the flexible layer, the better the protection effect, and therefore, in a specific embodiment of the present invention, the wires arranged in the first flexible layer 21 and the wires arranged in the second flexible layer 22 may be both serpentine irregular wires. Referring to fig. 3c, a layout of the serpentine irregular conductor in one embodiment is shown, and the first flexible layer 21 and the second flexible layer 22 can both adopt the conductor layout shown in fig. 3 c.

In a specific embodiment of the present invention, the present invention can further include:

and the support frame 40 is used for supporting the first flexible layer 21 and the second flexible layer 22, so that the first flexible layer 21 is tightly attached to each inner wall of the upper shield shell 11, and the second flexible layer 22 is tightly attached to each inner wall of the lower shield shell 12.

As described above, the first flexible layer 21 is attached to each inner wall of the upper shield shell 11, and the second flexible layer 22 is attached to each inner wall of the lower shield shell 12, so that gaps, namely, dead zones, can be avoided by effective attachment.

However, if an illegal user shakes the password device, the first flexible layer 21 and/or the second flexible layer 22 may fall off and cannot be effectively attached to the inner wall of the corresponding shield shell, so that a gap occurs, that is, the flexible layer cannot completely cover the password card 30, so that the illegal user cuts and punches a hole to cut off a control circuit, and a space of a safety anti-detachment mechanism of an anti-detachment controller in the password card 30 is damaged, therefore, in this embodiment, the first flexible layer 21 and the second flexible layer 22 are effectively supported by the support frame 40, so that the first flexible layer 21 and the second flexible layer 22 are both tightly attached to the inner wall of the corresponding shield shell, and the gap is not easily caused by falling off.

Referring to fig. 3d, a specific structure of the support bracket 40 is shown, which is a rectangular frame structure, and can effectively cooperate with the rectangular combination card 30 and the shielding case, and the structure of the support bracket 40 is also adopted in the embodiment of fig. 1. Of course, in other embodiments, the shape and structure of the supporting frame 40 may be designed based on the specific structures of the shielding case, the combination card 30 and the flexible layer, and the purpose of the supporting frame 40 in the present application may be achieved.

Except that support frame 40 supports, gluing also is an optional mode, promptly the utility model discloses a specific embodiment, first flexible layer 21 can all closely laminate through heat-resisting flexible glue with each inner wall of shield cover upper shell 11, and second flexible layer 22 can all closely laminate through heat-resisting flexible glue with each inner wall of shield cover lower shell 12. It should be noted that, because the combination card 30 will generate heat, the heat-resistant soft glue is adopted in this embodiment, and the soft glue with better heat dissipation property can be generally selected.

Use the embodiment of the utility model provides a technical scheme, the shield cover has and holds the chamber, consequently is arranged in the password card 30 of storage data can set up and holds the chamber. In the accommodating cavity, a flexible layer for wrapping the password card 30 is further provided, and a wire is arranged in the flexible layer, and a target pin of the tamper controller is connected in series with the N tamper switches and the wire arranged in the flexible layer.

Under normal conditions, the flexible layer is not damaged, and when the shield cover is not the open mode, N anti-disassembly switches were the closed condition this moment to the wire of arranging in the flexible layer also does not break circuit, and the target pin is the second level state, can not trigger the anti-disassembly safety mechanism of preventing tearing open the controller. And if the illegal user has opened the shield cover, no matter whether open in the environment that does not have the light source, 1 or more among N anti-disassembly switches with shield cover matched with can become the shutoff state, when arbitrary 1 anti-disassembly switch was the shutoff state, the target pin can become first level state, just can trigger the anti-disassembly safety mechanism who prevents tearing open the controller, prevents tearing open the controller promptly and can destroy the preset data in the password card 30. If the illegal user does not open the shield cover, but hope to cut off the control circuit through modes such as cutting, punching, detection, because in the scheme of this application, the flexible layer of arranging the wire is cladding password card 30, consequently, the wire of flexible layer can be destroyed in these operations of illegal user, make the wire of flexible layer one or many places appear breaking circuit, and as long as the wire has appeared breaking circuit, the target pin can become first level state equally, and then trigger the anti-tear safety mechanism who prevents tearing the controller, prevent tearing the controller promptly and can destroy the default data in the password card 30.

It can be seen that no matter an illegal user opens the shielding case or cuts off the control circuit by cutting, punching, detecting and other modes, the anti-dismantling safety mechanism can be triggered, so that the password equipment has high safety, and the risk of secret key information leakage or tampering is effectively reduced.

It is further noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, article, or apparatus. Without further limitation, an element defined by the phrases "comprising one of 8230 \8230;" does not exclude the presence of additional like elements in a process, article, or device that comprises the element.

The principle and the implementation of the present invention are explained by applying a specific embodiment, and the description of the above embodiment is only used to help understand the technical solution and the core idea of the present invention. It should be noted that, for those skilled in the art, without departing from the principle of the present invention, the present invention can also be modified and modified in several ways, and these modifications and modifications also fall into the protection scope of the present invention.

Claims (10)

1. A cryptographic device, comprising:

a shield having a receiving cavity;

the password card is arranged in the accommodating cavity and used for storing data;

the flexible layer is arranged in the accommodating cavity and used for coating the password card, and a lead is arranged in the flexible layer;

the anti-dismounting controller is arranged on the password card and used for destroying preset data in the password card when a target pin of the anti-dismounting controller is in a first level state;

the N anti-disassembly switches are arranged on the password card and matched with the shielding case, so that the N anti-disassembly switches are all in a closed state only when the shielding case is in an unopened state; n is a positive integer;

the target pin of the anti-disassembly controller is connected with the N anti-disassembly switches and the leads arranged in the flexible layer in series, when any 1 anti-disassembly switch is in an off state and/or the leads arranged in the flexible layer are broken, the target pin is in a first level state, and when the N anti-disassembly switches are in a closed state and the leads arranged in the flexible layer are not broken, the target pin is in a second level state.

2. The password device of claim 1, wherein the shielding case is a detachable shielding case, and a seal for detaching the storage trace is attached to the detachable portion of the shielding case.

3. The cryptographic device of claim 2, wherein the shield is an opaque shield and the seal is an opaque seal.

4. The cryptographic device of any one of claims 1 to 3, wherein the flexible layer comprises a first flexible layer and a second flexible layer, and the shield comprises a shield upper shell and a shield lower shell detachably connected to the shield upper shell;

the first flexible layer is attached to each inner wall of the upper shielding case shell, and the second flexible layer is attached to each inner wall of the lower shielding case shell.

5. The password device according to claim 4, wherein the target pin is connected to a first end of a pull-up resistor and a wire inlet end of the first flexible layer, respectively, and a wire arranged in the first flexible layer connects the wire inlet end of the first flexible layer with the wire outlet end of the first flexible layer; the second end of the pull-up resistor is connected with the positive electrode of the first power supply;

the wire outlet end of the first flexible layer is connected to the password card and is connected to the wire inlet end of the second flexible layer through wiring on the password card, and the wire inlet end of the second flexible layer is connected with the wire outlet end of the second flexible layer through a wire arranged in the second flexible layer;

and the lead wire outlet end of the second flexible layer is connected to the password card and is grounded through N anti-disassembly switches on the password card.

6. The cryptographic device of claim 5, wherein the wire inlet end of the first flexible layer is connected to the target pin through a first connector or a first metal thimble, and the wire outlet end of the first flexible layer is connected to the cryptographic card through a second connector or a second metal thimble;

the wire inlet end of the second flexible layer is connected to the password card through a third connector or a third metal thimble; and the wire outlet end of the second flexible layer is connected to the password card through a fourth connector or a fourth metal thimble.

7. The cryptographic device of claim 4, wherein the wires disposed in the first flexible layer and the wires disposed in the second flexible layer are both serpentine irregular wires.

8. The cryptographic device of claim 4, further comprising:

and the supporting frame is used for supporting the first flexible layer and the second flexible layer, so that the first flexible layer is tightly attached to each inner wall of the upper shield shell, and the second flexible layer is tightly attached to each inner wall of the lower shield shell.

9. The password device of claim 4, wherein the first flexible layer is closely attached to each inner wall of the upper housing of the shield cover through heat-resistant soft glue, and the second flexible layer is closely attached to each inner wall of the lower housing of the shield cover through heat-resistant soft glue.

10. The password device of claim 4, wherein the first flexible layer is a first FPC board or a first silver paste circuit film; the second flexible layer is a second FPC board or a second silver paste circuit membrane.

Images