JP2001177516A - Method and device for enciphering and decoding, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technology for enciphering and decoding data faster. SOLUTION: An input data distributing part compares the data length of input data with a 1st reference value (step A2). When the data length is longer than the 1st reference value as a result of comparison, the input data is transferred to hardware 3. Then, the hardware 3 applies encipher and decoding processing to the input data (step A3). When the data length is not longer than the 1st reference value, the input data is transferred to an encipher and decoding processing part 22. Then, the part 22 applies encipher and decoding processing to the input data (step A4).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention
The present invention relates to a decoding technique.

[0002]

2. Description of the Related Art Conventionally, various techniques have been proposed for encrypting and decrypting data. For example, JP-A-9-
No. 288,565. The technology disclosed in this publication proposes an encryption device capable of realizing a stream cipher using a key sequence excellent in cryptographic security.

[0003] In addition, data encryption / decryption processing is performed by a CPU controlled by software rather than by a CPU controlled by software.
In general, processing can be performed faster by using a dedicated LSI chip or hardware such as an accelerator constituted by the dedicated LSI chip.

[0004]

By the way, depending on the data length of input data, there are cases where processing can be performed faster by software than by hardware. However, the conventional encryption / encoding processing is premised on processing using only one of hardware and software. For this reason, for example, in a conventional encryption / encoding device that performs encryption / encoding processing using only hardware, when the data length is shorter than a certain length, it is more likely than when processing is performed by software. There is a problem that the processing speed is reduced.

The present invention has been made to solve the above-mentioned problem, and has as its object to provide a technique for encrypting and decrypting data at a higher speed.

[0006]

In order to achieve this object, according to the encryption / decryption method of the present invention, the data length of input data is compared with a first reference value. According to the result, the encryption / decryption processing of the input data is performed by one of hardware for encryption / decryption processing and software for encryption / decryption processing.

As described above, according to the encryption / decryption method of the present invention, the processing method can be changed to hardware processing or software processing depending on the data length of the input data to be encrypted / decrypted. Switch. For this reason,
Either hardware or software can be selected for faster processing. As a result, the encryption / decryption processing can be performed at high speed by an optimal processing method regardless of the data length of the input data.

According to the second aspect of the present invention, when the data length is longer than the first reference value, the encryption / decryption processing is performed by hardware, and when the data length is shorter than the first reference value. Another method is to perform encryption / decryption processing by software. In this way, when the data length of the input data is short, the processing method can be switched to software. Therefore, the encryption / decryption processing can be performed at a higher speed regardless of the data length of the input data. The first reference value may be determined to be any suitable value based on the encryption / decryption algorithm to be used, the performance of hardware, and the performance of the CPU (central processing unit) of the computer.

By the way, the hardware selected based on the data length may be performing encryption / decryption processing of other data. In this case, if the input data is processed after the completion of the other processing, the processing may take more time than when the processing is performed by software.

Therefore, according to the third aspect of the present invention, when the data length is longer than the first reference value, the first usage status value of the hardware is compared with the second reference value, and the first usage status is compared. If the value is equal to or less than the second reference value, the encryption / decryption processing is performed.
When the data length is equal to or less than the first reference value or when the first use status value is higher than the second reference value, the second processing unit performs encryption / decryption processing by software. The usage status value is compared with the third reference value, and if the second usage status value is equal to or less than the second reference value, encryption / decryption processing is performed by software, and the second usage status value is determined by the third reference value. If it is higher than this, the encryption / decryption processing is performed by the hardware.

In this way, even if the input data has a long data length, it can be processed by software if the hardware is used for processing other data. As a result, the encryption / decryption processing can be performed stably and at high speed irrespective of the use condition of the hardware.

Further, when hardware is used, it is assumed that a processing unit operated by software is also used. Therefore, in the invention according to claim 3,
After determining the usage status of the hardware, the usage status of the processing unit is also determined. If the usage status satisfies the condition, the processing unit performs the encryption / decryption processing.

The second reference value is also a value indicating the degree of priority of hardware with respect to software when selecting an encryption / decryption processing method, and any suitable value can be adopted. In addition, the third reference value is
It is also a value indicating the degree of priority of software with respect to hardware in selecting a decoding method, and any suitable value can be adopted.

By the way, selected based on the data length,
There is a case where a processing device such as a CPU operated by software performs processing other than encryption / decryption processing and encryption / decryption processing of other data. In this case, if the input data is processed after the completion of the other processing, the processing may take more time than when the processing is performed by hardware.

According to the fourth aspect of the present invention, when the data length is equal to or less than the first reference value, the second usage status value of the processing unit that performs encryption / decryption processing by software and the third reference value Compare with the value, if the second usage status value is less than or equal to the second reference value, perform encryption / decryption processing by the software, if the second usage status value is higher than the third reference value, The first usage status value of the hardware is compared with the second reference value, and if the first usage status value is equal to or less than the second reference value, the encryption / decryption processing is performed by hardware, and the first usage status value is determined. When the value is higher than the second reference value, encryption / decryption processing is performed by software.

In this way, even if input data having a short data length is used for processing other data, a processing unit such as a CPU operated by software can be processed by hardware. Becomes As a result, the encryption / decryption processing can be performed stably and at high speed irrespective of the usage status of the processing unit by software.

Further, when a processing unit operated by software is used, it is assumed that hardware is also used. Therefore, in the invention according to claim 4,
After determining the usage status of the processing unit, the usage status of the hardware is also determined. If the usage status satisfies the condition, the processing unit performs encryption / decryption processing.

The second reference value is also a value indicating the degree of priority of hardware with respect to software when selecting an encryption / decryption processing method, and any suitable value can be adopted. In addition, the third reference value is
It is also a value indicating the degree of priority of software with respect to hardware in selecting a decoding method, and any suitable value can be adopted.

According to a fifth aspect of the present invention, there is provided a method of setting the first usage status value to the number of times of processing of hardware and setting the second usage status value to the usage rate of the processing unit. As described above, when the first usage status value is set as the number of times of processing, the usage status of hardware can be appropriately represented. In this case, the second reference value may be set to any suitable number of times of processing.
Furthermore, if the second usage status value is used as the usage rate, the usage status of the processing unit operated by software can be appropriately represented. In this case, the third reference value may be set to any suitable processing rate.

According to a sixth aspect of the present invention, there is provided a method of setting the first reference value to an individual value depending on the type of the encryption algorithm of the input data. In this way, if the first reference value is set for each type of algorithm, an optimum reference value can be selected according to each type of algorithm. As a result, regardless of the type of algorithm,
The encryption / decryption processing can be performed at high speed.

Further, according to the encryption / decryption device of the present invention, a processing unit for performing encryption / decryption processing of input data by software for encryption / decryption processing, Hardware for encryption / decryption processing that performs encryption / decryption processing of
The input data distribution unit compares the data length of the input data with the first reference value, and transfers the input data to one of the processing unit and the hardware according to the comparison result.

As described above, according to the encryption / decryption device of the present invention, the input data distribution unit allows the processing method to be performed by hardware, or by the data length of the input data to be encrypted / decrypted. , Switch to processing by software. For this reason, it is possible to select either a hardware or software method that can perform the processing faster. As a result, the encryption / decryption processing can be performed at high speed by an optimal processing method regardless of the data length of the input data.

According to the present invention, when the data length is longer than the first reference value, the input data distribution unit transfers the input data to the hardware so that the data length is equal to the first reference value. In the following cases, the input data is transferred to the processing unit.

With this configuration, when the data length of the input data is short, the processing method can be switched to software. Therefore, the encryption / decryption processing can be performed at a higher speed regardless of the data length of the input data. The first reference value may be determined to be any suitable value based on the encryption / decryption algorithm to be used, the performance of hardware, and the performance of the CPU (central processing unit) of the computer.

According to the ninth aspect of the present invention, a hardware processing monitoring unit that monitors the usage status of hardware and outputs the usage status as a first usage status value, and monitors the usage status of the processing unit. A software processing monitoring unit that outputs the usage status as a second usage status value, and the input data distribution unit, when the data length is longer than the first reference value, the first usage status value and Compare to the second reference value,
When the first usage status value is equal to or less than the second reference value, the input data is transferred to the hardware, and when the data length is equal to or less than the first reference value, or when the first usage status value is higher than the second reference value. In this case, the second usage status value is compared with the third reference value, and if the second usage status value is equal to or less than the second reference value, the input data is transferred to the processing unit, and the second usage status value is set to the third reference value. When the value is higher than the reference value, the input data is transferred to hardware.

With such a configuration, even if the input data has a long data length, it can be processed by software if the hardware is used for processing other data. As a result, the encryption / decryption processing can be performed stably and at high speed irrespective of the use condition of the hardware.

Further, when hardware is used, it is also assumed that a processing unit operated by software is also used. Therefore, in the invention according to claim 3,
After determining the usage status of the hardware, the usage status of the processing unit is also determined. If the usage status satisfies the condition, the processing unit performs the encryption / decryption processing.

The second reference value is also a value indicating the degree of priority of hardware with respect to software when selecting an encryption / decryption processing method, and any suitable value can be adopted. In addition, the third reference value is
It is also a value indicating the degree of priority of software with respect to hardware in selecting a decoding method, and any suitable value can be adopted.

According to the tenth aspect of the present invention, a hardware processing monitoring unit that monitors the usage status of hardware and outputs the usage status as a first usage status value, and monitors the usage status of the processing unit. A software processing monitoring unit that outputs the usage status as a second usage status value, wherein the input data distribution unit outputs the second usage status value and the third reference value when the data length is equal to or less than the first reference value. Compare the value to the second usage status value, if the second usage status value is less than the second reference value, transfer the input data to the processing unit, if the second usage status value is higher than the third reference value, the first usage status The value is compared with the second reference value.If the first usage value is less than or equal to the second reference value, the input data is transferred to the hardware, and if the first usage value is higher than the second reference value, , The input data is transferred to the processing unit.

With such a configuration, even if input data having a short data length is used, if a processing unit such as a CPU operated by software is used for processing other data, it can be processed by hardware. Becomes possible. As a result, regardless of the usage status of the processing unit by software,
The encryption / decryption processing can be performed stably and at high speed.

Further, when a processing unit operated by software is used, it is assumed that hardware is also used. Therefore, in the invention according to claim 4,
After determining the usage status of the processing unit, the usage status of the hardware is also determined. If the usage status satisfies the condition, the processing unit performs encryption / decryption processing.

The second reference value is also a value indicating the degree of priority of hardware with respect to software when selecting an encryption / decryption processing method, and any suitable value can be adopted. In addition, the third reference value is
It is also a value indicating the degree of priority of software with respect to hardware when selecting a decoding processing method, and any suitable value can be adopted.

Further, according to the first recording medium of the present invention, the processing for comparing the data length of the input data with the first reference value, and the processing for the case where the data length is longer than the first reference value, Sending encryption / decryption processing of input data to hardware for encryption / decryption processing, and processing of encrypting / decrypting input data when the data length is equal to or less than a first reference value. As a recording medium on which a program for causing a computer to execute is recorded.

The program recorded on the first recording medium of the present invention is read by the computer of the encryption / decryption device and software processing is executed, whereby the input data to be encrypted / decrypted is processed. Depending on the data length,
This makes it possible to select a method that can be processed quickly, either in hardware or software. In particular, when the data length of the input data is short, the processing method can be switched to software. For this reason, the encryption / decryption processing can be performed at high speed by an optimal processing method regardless of the data length of the input data.

According to the second recording medium of the present invention, the processing for comparing the data length of the input data with the first reference value and the processing for comparing the data length with the first reference value when the data length is longer than the first reference value are performed. Comparing the first usage status value of the hardware for encryption / decryption processing with the second reference value, and when the first usage status value is equal to or less than the second reference value, the input data is sent to the hardware. If the process to send and the data length is less than or equal to the first reference value,
Or, if the first usage status value is higher than the second reference value,
A process of comparing the second usage status value and the third reference value of the processing unit that performs the encryption / decryption process with the software for encryption / decryption processing, and the second usage status value is equal to or less than the second reference value In the case of, the processing unit encrypts and decrypts the input data, and sends the input data to the hardware for the encryption and decryption processing when the second usage status value is higher than the third reference value. And a program for causing a computer to execute the processing to be performed.

The program recorded on the second recording medium of the present invention is read into the computer of the encryption / decryption device, and the software processing is executed, whereby the input data to be encrypted / decrypted is processed. Depending on the data length,
This makes it possible to select a method that can be processed quickly, either in hardware or software. Furthermore, even if the input data has a long data length, if the hardware is used for processing other data, it can be processed by software. As a result, it is possible to stably perform high-speed encryption / decryption processing irrespective of the data length and the use condition of hardware.

According to the third recording magnification of the present invention, when the data length of the input data is compared with the first reference value, and when the data length is equal to or less than the first reference value, A process of comparing a second usage status value of a processing unit that performs encryption / decryption processing with software for encryption / decryption processing with a third reference value, and that the second usage status value is a second reference value In the following cases, the processing unit encrypts / decrypts input data and, when the second usage status value is higher than the third reference value, uses the hardware for encryption / decryption processing first. A process of comparing the status value with the second reference value; a process of sending input data to the hardware when the first usage status value is equal to or less than the second reference value; If it is higher, the processing unit encrypts and decrypts the input data. Programs to be executed by the computer is as recorded recording medium.

The program recorded on the third recording medium of the present invention is read by the computer of the encryption / decryption device, and the software processing is executed. Depending on the data length,
This makes it possible to select a method that can be processed quickly, either in hardware or software. In addition, even if the input data has a short data length, the CPU operates with software.
If the processing unit such as is used for processing other data, it can be processed by hardware. As a result, it is possible to perform the encryption / decryption processing stably and at high speed regardless of the data length and the usage status of the processing unit by software.

[0039]

Embodiments of the present invention will be described below with reference to the drawings. The processing in the input data distribution unit and the software processing unit in the encryption / decryption processing in each of the following embodiments is executed by a computer (software processing unit) controlled by a program. This program is provided by, for example, a recording medium (not shown). As the recording medium, for example, a magnetic disk, a semiconductor memory, any other,
Anything that can be read by a computer can be used. Also, the program recorded on the recording medium can be read by a computer via a communication line.

[First Embodiment] In the first embodiment, an example of the first, second, sixth, seventh, eighth and eleventh aspects of the present invention will be described together. First, the configuration of the encryption / decryption device according to the first embodiment will be described with reference to FIG. FIG. 1 is a block diagram for explaining the configuration of the encryption / decryption device according to the first embodiment.

As shown in FIG. 1, the encryption / decryption device 1
Is a software processing unit (also simply referred to as a processing unit).
2 and encryption / decryption hardware (also simply referred to as hardware) 3 for performing data encryption / decryption processing. And the software processing unit 2
Is composed of, for example, a CPU of a normal computer. The hardware 3 includes, for example, a dedicated LSI chip for encryption / decryption processing, and an accelerator configured by the dedicated LSI chip.

Further, the software processing section 2 performs input data distribution section (also simply referred to as distribution section) 21 and encryption / decryption processing of input data by software for encryption / decryption processing. And an encryption / decryption processing unit (also simply referred to as a processing unit) 22.

The input data distributor 21 compares the data length of the input data with the first reference value, and transfers the input data to one of the processing unit and the hardware according to the comparison result. ing. That is, the transfer is made to the one that requires less time for the encryption / decryption processing.

Here, FIG. 2 schematically shows the relationship between the data length of the input data and the encryption / decryption processing time in the hardware 3 and the processing unit 2. The straight line I in FIG.
The processing time by the hardware 3 is shown. Also, a straight line II
Indicates a processing time by the processing unit 2 operated by software. As shown by the straight lines I and II, when the data length is shorter than Lt, the processing time by software is shorter than the processing time by hardware. On the other hand, when the data length is longer than Lt, the processing time by hardware is shorter than the processing time by software.

Therefore, the data length Lt when the curve I and the curve II intersect is preferably used as the first reference value to switch the input data processing method to either hardware or software.

Lt is a value determined by the encryption / decryption algorithm to be used, the performance of the hardware, and the performance of the CPU (central processing unit) of the computer. Also, it is preferable to set an individual value for each type of encryption algorithm of input data as the first reference value, and to use an optimal value as the first reference value according to the type of algorithm.

In the first embodiment, when the data length of the input data is longer than the first reference value, the input data distribution unit 21 transfers the input data to hardware. When the data length is equal to or less than the first reference value, the distribution unit 21 transfers the input data to the processing unit.

Next, an encryption / decryption method according to the first embodiment will be described with reference to FIG. FIG. 3 is a flowchart for explaining the encryption / decryption method in the first embodiment. As shown in FIG.
In the decoding process, first, input data is input to the input data distribution unit 21 (Step A1 in FIG. 3). next,
The input data distribution unit 21 compares the data length of the input data with the first reference value (Step A2 in FIG. 3).

As a result of the comparison, if the data length is longer than the first reference value, the input data distribution unit 21 transfers the input data to the hardware 3 (in the case of “YES” in step A2). Then, the hardware 3 performs encryption / decryption processing of the input data (step A3 in FIG. 3). here,
The encryption / decryption processing refers to performing decryption processing when input data is encrypted, and performing encryption processing when input data is not encrypted. For the encryption processing and the decryption processing, for example, a conventionally known arbitrary and suitable technique as described in the above-mentioned document 1 can be used.

When the data length is less than the first reference value,
The input data distribution unit 21 transfers the input data to the encryption / decryption processing unit 22 (in the case of “NO” in Step A2). Then, the encryption / decryption processing unit 22 performs encryption / decryption processing of the input data (step A in FIG. 3).
4). Note that the algorithm of the encryption / decryption processing by software may be the same as or different from the algorithm of the encryption / decryption processing by hardware.

As described above, according to the first embodiment, when the data length of input data is short, the processing method can be switched to software. Therefore, the encryption / decryption processing can be performed at a higher speed regardless of the data length of the input data.

[Second Embodiment] In a second embodiment, an example of the invention described in claims 1, 3, 5, 6, 7, 9 and 12 will be described together. First, the configuration of the encryption / decryption device according to the second embodiment will be described with reference to FIG.
FIG. 4 is a block diagram for explaining the configuration of the encryption / decryption device according to the second embodiment.

As shown in FIG. 4, the encryption / decryption device 1
a is composed of a software processing unit (also simply referred to as a processing unit) 2a and encryption / decryption hardware (also simply referred to as hardware) 3 for performing data encryption / decryption processing. I have. As in the first embodiment, the software processing unit 2a includes an input data distribution unit (also simply referred to as a distribution unit) 21a and software for encrypting / decrypting input data for encryption / decryption processing. And an encryption / decryption processing unit (also simply referred to as a processing unit) 22 performed by software.

Further, in the second embodiment, the software processing unit 2a includes a hardware processing monitoring unit 23 for monitoring the usage status of hardware, and a software processing monitoring unit 23 for monitoring the usage status of the processing unit 22. It has. Then, the hardware processing monitoring unit 23 monitors the usage status of the hardware, and outputs the usage status as a first usage status value. Further, the software processing monitoring unit 23 outputs the usage status of the processing unit 22 as a second usage status value.

As the first use status value, for example, the number of times of hardware processing may be used. As described above, when the first usage status value is set as the number of times of processing, the usage status of hardware can be appropriately represented. Also, the second reference value is
It is also a value indicating the degree of priority of hardware over software when selecting an encryption / decryption processing method, and any suitable number of processing times can be adopted.

As the second usage status value, for example,
It is good to use the processing unit. As described above, by using the second usage status value as the usage rate, the usage status of the processing unit operated by software can be appropriately represented. Further, the third reference value is also a value indicating the degree of priority of the software with respect to the hardware in selecting the encryption / decryption processing method, and any suitable usage rate value can be adopted.

As for the second and third reference values, it is preferable to set individual values for each type of encryption algorithm of the input data, and to adopt an optimum value according to the type of algorithm.

The input data distribution unit 21a sends the input data to one of the processing unit and the hardware based on one or both of the second and third usage status values in addition to the data length of the input data. It is configured to transfer.

Next, an encryption / decryption method according to the second embodiment will be described with reference to FIG. FIG. 5 is a flowchart for explaining the encryption / decryption method according to the first embodiment. As shown in FIG.
In the decoding process, first, input data is input to the input data distribution unit 21 (Step B1 in FIG. 5). next,
The input data distribution unit 21a compares the data length of the input data with the first reference value as a first comparison (Step B2 in FIG. 5).

As a result of the first comparison, when the data length is longer than the first reference value (in the case of “YES” in step B2),
The input data distribution unit 21a compares the first usage status value and the second reference value as a second comparison (Step B in FIG. 5).
3). As a result of the second comparison, if the first usage status value is equal to or smaller than the second reference value, the input data distribution unit 21a transfers the input data to the hardware 3 (in the case of “NO” in Step B3). Then, the hardware 3 performs the encryption / decryption processing of the input data (step B4 in FIG. 5).

When the data length is equal to or less than the first reference value as a result of the first comparison, or when the first usage status value is higher than the second reference value as a result of the second comparison, the input data distribution The unit 21a compares the second usage status value and the third reference value as a third comparison (Step B5 in FIG. 5). As a result of the third comparison, if the second usage status value is equal to or less than the third reference value, the input data distribution unit 21a transfers the input data to the encryption / decryption processing unit 22 ("NO" in step B5). Case).
Then, the encryption / decryption processing unit 22 performs encryption / decryption processing of the input data (step B6 in FIG. 5).

If the result of the third comparison shows that the second use status value is higher than the third reference value, the input data distribution unit 21a
Transfers the input data to the hardware 3 ("YES" in step B5). And hardware 3
Perform the encryption / decryption processing of the input data (step B4 in FIG. 5).

As described above, according to the second embodiment, it is possible to process input data having a long data length by software when hardware is used for processing other data. . Further, in the second embodiment, after determining the usage status of the hardware, the usage status of the processing unit is also determined. If the usage status satisfies the condition, the processing unit performs encryption / decryption processing. Therefore, according to the second embodiment, the data length, hardware usage, and
The encryption / decryption processing can be performed stably and at high speed irrespective of the usage status of the processing unit by software.

[Third Embodiment] In a third embodiment, an example of the first, fourth, fifth, sixth, seventh, tenth, and thirteenth aspects of the present invention will be described together. Note that the configuration of the encryption / encoding device of the third embodiment is the same as the configuration of the encryption / decryption device of the second embodiment shown in FIG. 4, and thus a detailed description thereof will be omitted.

Next, an encryption / decryption method according to the first embodiment will be described with reference to FIG. FIG. 6 is a flowchart for explaining the encryption / decryption method in the first embodiment. In the above-described second embodiment, as shown in FIG. 5, after determining the usage status of the hardware (first usage status value), the usage status of the processing unit (second usage status value) is further determined as necessary. However, in the third embodiment, as shown in FIG. 6, after the usage status (second usage status value) of the processing unit is also determined, the usage status of the hardware (first Usage value) is also determined.

The input data distribution unit 21a sends the input data to one of the processing unit and the hardware based on one or both of the second and third usage status values in addition to the data length of the input data. It is configured to transfer.

As shown in FIG. 6, in the encryption / decryption processing, first, input data is input to the input data distribution unit 21 (step C1 in FIG. 6). Next, the input data distribution unit 21a compares the data length of the input data with the first reference value as a first comparison (Step C2 in FIG. 6).

As a result of the first comparison, when the data length is equal to or less than the first reference value (in the case of “NO” in step C2), the input data distribution unit 21a compares the second usage status value with the third reference value. A comparison is made as a second comparison (step C3 in FIG. 6). As a result of the second comparison, if the second usage status value is equal to or less than the third reference value, the input data distribution unit 21a encrypts the input data.
Transfer to the decryption processing unit 22 (“NO” in step C3)
in the case of). Then, the encryption / decryption processing unit 22 performs encryption / decryption processing of the input data (step C in FIG. 6).
4).

On the other hand, as a result of the first comparison, when the data length is longer than the first reference value (in the case of “YES” in step C2), or as a result of the second comparison, If it is higher than the three reference values, the input data distribution unit 21a compares the first use status value and the second reference value as a third comparison (Step C5 in FIG. 6). As a result of the third comparison, if the first usage status value is equal to or less than the second reference value, the input data distribution unit 2
1a transfers the input data to the hardware 3 (in the case of "NO" in step C5). And hardware 3
Perform the encryption / decryption processing of the input data (step C6 in FIG. 6).

If the result of the third comparison shows that the first usage status value is higher than the second reference value, the input data distribution unit 21a
Transfers the input data to the encryption / decryption processing unit 22 (in the case of “YES” in step C5). Then, the encryption / decryption processing unit 22 performs encryption / decryption processing of the input data (step C4 in FIG. 6).

As described above, according to the third embodiment, even if the input data has a short data length, the C operating on software can be used.
If a processing unit such as a PU is used for processing other data, it can be processed by hardware. Furthermore, in the third embodiment, after determining the usage status of the processing unit, the usage status of the hardware is also determined. If the usage status satisfies the condition, the encryption / decryption processing is performed by the hardware. Therefore, according to the second embodiment, the encryption / decryption processing can be performed stably and at high speed regardless of the data length, the usage status of the processing unit by software, and the usage status of hardware. .

In the above-described embodiment, an example in which the present invention is configured under specific conditions has been described. However, the present invention can be variously modified. For example, in the second embodiment and the third embodiment described above, the number of processes is adopted as the first usage status value, and the usage rate is adopted as the second usage status value. Any suitable value can be adopted as the situation value.

[0073]

As described in detail above, according to the inventions of the present application, the encryption / decryption of the input data is achieved by optimizing the data processing means according to the data length of the input data. The speed of the decoding process can be increased.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating an encryption / decryption device according to a first embodiment.

FIG. 2 is a schematic diagram showing the relationship between data length and encryption / decryption processing time.

FIG. 3 is a flowchart for explaining an encryption / decryption method according to the first embodiment.

FIG. 4 is a block diagram illustrating an encryption / decryption device according to a second embodiment.

FIG. 5 is a flowchart for explaining an encryption / decryption method according to the second embodiment.

FIG. 6 is a flowchart illustrating an encryption / decryption method according to a third embodiment.

[Explanation of symbols]

 1, 1a encryption / decryption device 2, 2a software processing unit 3 hardware for encryption / decryption processing 21, 21a input data distribution means 22 encryption / decryption processing unit 23 software processing monitoring unit 24 hardware Processing monitoring unit

Claims (13)

[Claims] 1. A data length of input data is compared with a first reference value, and encryption / decryption processing of the input data is performed according to a comparison result, hardware for encryption / decryption processing, and An encryption / decryption method, which is performed by any one of software for encryption / decryption processing. 2. When the data length is longer than the first reference value, encryption / decryption processing of the input data is performed by the hardware, and when the data length is equal to or less than the first reference value. 2. The encryption / decryption method according to claim 1, wherein said encryption / decryption processing is performed by said software. 3. When the data length is longer than the first reference value, comparing a first usage status value of the hardware with a second reference value, wherein the first usage status value is equal to the second reference value. If the value is equal to or less than the value, the encryption / decryption processing is performed by the hardware.If the data length is equal to or less than the first reference value, or the first use status value is greater than the second reference value. If the value is higher, the second use status value of the processing unit that performs encryption / decryption processing by the software is compared with a third reference value, and when the second use status value is equal to or less than the second reference value, Performing the encryption / decryption processing by the software, and performing the encryption / decryption processing by the hardware when the second usage status value is higher than the third reference value. The encryption / decryption method according to claim 1. 4. When the data length is equal to or less than the first reference value, a second use status value of a processing unit that performs encryption / decryption processing by the software is compared with a third reference value; When the second usage status value is equal to or less than the second reference value, the encryption / decryption process is performed by the software. When the second usage status value is higher than the third reference value, the hardware Comparing the first usage status value of the hardware with a second reference value, and when the first usage status value is equal to or less than the second reference value, performs the encryption / decryption processing by the hardware; 2. The encryption / decryption method according to claim 1, wherein the encryption / decryption processing is performed by the software when the first usage status value is higher than the second reference value. 5. The cipher according to claim 3, wherein the first usage status value is the number of times of processing of the hardware, and the second usage status value is a usage rate of the processing unit. And compounding methods. 6. The method according to claim 1, wherein the first reference value is an individual value depending on a type of an encryption algorithm of the input data.
Composite method. 7. A processing section for performing encryption / decryption processing of input data by software for encryption / decryption processing, and a hardware for encryption / decryption processing for performing encryption / decryption processing of data. Hardware, and an input data distribution unit, wherein the input data distribution unit compares the data length of the input data with a first reference value, and, according to a comparison result, converts the input data into the processing unit and the hardware. An encryption / decryption device characterized by transferring data to one of them. 8. The input data distribution unit, when the data length is longer than the first reference value, transfers the input data to the hardware, and the data length is equal to or less than the first reference value. 8. The encryption / decryption device according to claim 7, wherein the input data is transferred to the processing unit in such a case. 9. Monitoring the use status of the hardware,
A hardware processing monitoring unit that outputs the usage status as a first usage status value, and a software processing monitoring unit that monitors the usage status of the processing unit and outputs the usage status as a second usage status value, The input data distribution unit, when the data length is longer than the first reference value, compares the first usage status value and a second reference value, the first usage status value is the second reference value In the following cases, the input data is transferred to the hardware.If the data length is equal to or less than the first reference value, or if the first use status value is higher than the second reference value, Comparing a second usage status value with a third reference value, and when the second usage status value is equal to or less than the second reference value, transferring the input data to the processing unit; If it is higher than the third reference value, the input data 8. The encryption / decryption device according to claim 7, wherein data is transferred to said hardware. 10. A hardware processing monitoring unit that monitors the usage status of the hardware and outputs the usage status as a first usage status value, and monitors the usage status of the processing unit and determines the usage status as a second usage status. A software processing monitoring unit that outputs a usage status value, wherein the input data distribution unit compares the second usage status value with a third reference value when the data length is equal to or less than the first reference value. When the second usage status value is equal to or less than the second reference value, the input data is transferred to the processing unit, and when the second usage status value is higher than the third reference value, the Comparing the one usage status value with a second reference value, and transferring the input data to the hardware when the first usage status value is equal to or less than the second reference value; If it is higher than the second reference value, the input data Encryption and compounding apparatus according to claim 7, wherein the transfer of data to the processing unit. 11. A process for comparing the data length of input data with a first reference value, and, if the data length is longer than the first reference value, encrypting the input data with hardware for encryption / decryption processing. A program for causing a computer to execute a process of transmitting the input data to the hardware and a process of encrypting and decrypting the input data when the data length is equal to or less than the first reference value. Medium. 12. A process for comparing a data length of input data with a first reference value, and a first use of hardware for encryption / decryption processing when the data length is longer than the first reference value. A process of comparing a status value with a second reference value; a process of transmitting the input data to the hardware when the first usage status value is equal to or less than the second reference value; If the value is equal to or less than one reference value, or if the first use status value is higher than the second reference value, the processing unit performs encryption / decryption processing by software for encryption / decryption processing. A process of comparing the second usage status value with the second usage status value, and a process of encrypting and decrypting the input data in the processing unit when the second usage status value is equal to or less than the second reference value, When the second usage status value is higher than the third reference value , A recording medium, wherein a program for executing a process of sending the input data to the hardware for the encryption and decryption processing in a computer is recorded. 13. A process for comparing the data length of input data with a first reference value;
A process of comparing a second use status value of a processing unit that performs encryption / decryption processing with decryption software with a third reference value, wherein the second use status value is equal to or less than the second reference value. In the case of, processing of encrypting and decrypting the input data in the processing unit, and, if the second usage status value is higher than the third reference value, the hardware for encryption / decryption processing A process of comparing a first usage status value with a second reference value; a process of transmitting the input data to the hardware when the first usage status value is equal to or less than the second reference value; A recording medium on which a program for causing a computer to execute a process of encrypting and decrypting the input data in the processing unit when the usage status value is higher than the second reference value is recorded.