JP2002064481A - Encryption apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an encryption apparatus by which a user can check operating conditions and can safely conduct data communications. SOLUTION: The encryption apparatus comprises a receiving section 1 for receiving data from the outside, a transmitting section 4 for transmitting the data to the outside, a control section 2 for outputting the data to be encrypted of the received data to an encryption section 3 and outputting the data not to be encrypted to the transmitting section 4, the encryption section 3 for encrypting or decoding the data received from the control section 2 and for outputting the encrypted or decoded data to the transmitting section 4, and a display section 5 for displaying that the encryption section 3 is now encrypting the data.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an encryption processing device for encrypting data received from one side and transmitting it to the other side.

[0002]

2. Description of the Related Art In recent years, for the purpose of security of data communication, an encryption processing device is arranged near a computer terminal, data transmitted from the computer terminal is subjected to encryption processing, and encrypted data is transmitted. The encrypted data received by the terminal may be subjected to decryption processing and received as normal data. The cryptographic processing device used in such a case is disclosed in
As disclosed in Japanese Patent No. 50554, it is determined whether or not to perform encryption processing on data based on a source address and a destination address of the data, and settings for this determination are made in advance.

[0003]

However, in the above-described cryptographic processing apparatus, a user or the like sets whether or not to perform cryptographic processing on data. There is also. If such a setting error occurs, the data will be transmitted to the outside without encryption processing,
Conversely, the encrypted data is received by the computer terminal without being decrypted. If the encrypted data is received by the computer terminal, the administrator is likely to notice a setting error, but if the plaintext data is transmitted without encryption processing, the administrator may not notice the setting error. high. Further, as a result, there is a possibility that important data leaks outside without being encrypted and is intercepted or tampered with.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and an object of the present invention is to enable a user to confirm the operation state of a cryptographic processing apparatus and perform secure data communication. An object of the present invention is to provide a processing device.

[0005]

SUMMARY OF THE INVENTION In order to solve the above problems, the present invention provides a receiving unit for receiving data from the outside, a transmitting unit for transmitting data to the outside,
A control unit that outputs data that requires encryption processing to the encryption processing unit among data received by the reception unit, and outputs data that does not require encryption processing to the transmission unit, and encrypts data received from the control unit. Or an encryption processing unit that performs one of the encryption processes of the decryption process and outputs the processing result data to the transmission unit, and a display unit that indicates that the encryption processing unit is performing the encryption process. It is characterized by the following.

The display section preferably has different display states between the encryption processing and the decryption processing, and further has a display state different according to the encryption method in the encryption processing. It may be.

The display unit may display that a processing error has occurred when the encryption processing unit causes a processing error.

[0008]

DESCRIPTION OF THE PREFERRED EMBODIMENTS A first embodiment of a cryptographic processing apparatus according to the present invention is shown in FIGS. 1 and 2, a second embodiment is shown in FIG. 3, and a third embodiment is shown in FIG. On the basis of the,
A fourth embodiment will be described with reference to FIG.

[First Embodiment] FIG. 1 is a block diagram showing the configuration of a cryptographic processing apparatus, and FIG. 2 is a perspective view showing the appearance of the cryptographic processing apparatus. In FIG. 1, the cryptographic processing apparatus includes a receiving unit 1, a control unit 2, a cryptographic processing unit 3, a transmitting unit 4, a display unit 5, a serial port communication unit 6, and a cryptographic processing setting unit 7. .

The receiving section 1 has a connector and receives data from the outside via a signal line connected to the connector. Here, the data includes encrypted data that cannot be grasped as it is without being encrypted and plaintext data that can be grasped as it is without being subjected to the encryption processing. Upon receiving the data, the receiving unit 1 outputs the data to the control unit 2.

The control unit 2 includes a buffer 2a formed of a readable and writable memory and a judgment unit 2b for judging the necessity of the encryption process. First, it is stored in the buffer 2a. The determination unit 2b sequentially reads the data stored in the buffer 2a, refers to the source address and the destination address of the data, and determines whether the data needs to be encrypted based on an encryption processing setting table described later. Determine whether or not. The determination unit 2b outputs the data determined not to require encryption processing to the transmission unit 4 as it is, and outputs the data determined to require encryption processing to the encryption processing unit 3.

The encryption processing unit 3 performs one of an encryption process for converting plaintext data into encrypted data and a decryption process for converting encrypted data into plaintext data in accordance with the data. Things. When the data received from the control unit 2 is plaintext data, the encryption processing unit 3 converts the data into encrypted data by performing encryption processing, and then outputs the encrypted data to the transmission unit 4 and receives the encrypted data from the control unit 3. If the data is encrypted data, it performs decryption processing to convert the data into plaintext data, and then outputs the plaintext data to the transmission unit 4. The encryption processing method performed by the encryption processing unit 3 is not particularly limited to the single DES method, the triple DES method, and the like.
In the present embodiment, a single DES system is adopted.
Then, while performing the encryption processing, the encryption processing unit 3 outputs a processing display signal notifying that the processing is being performed to the display unit 5.

The transmission section 4 has a connector and transmits data to the outside via a signal line connected to the connector. The transmission unit 4 is either the control unit 2 or the encryption processing unit 3
Send the data received from.

The display unit 5 includes a display device such as an LED or a liquid crystal display, and displays that the encryption processing unit 3 is performing encryption processing. As shown in FIG. It is arranged on the outer surface of the body 8 so as to be visible from the outside. Specifically, the display state differs between when the processing display signal is received from the encryption processing unit 3 and when it is not received. In this embodiment, the LED is turned on when the processing display signal is received, and is turned off when the processing display signal is not received. Of course, the display operation of the display unit 5 is not limited to this, and the state may be changed depending on the color of the LED to be lit, or the state may be changed depending on the number of lit LEDs or the liquid crystal display content.

The serial port communication unit 6 communicates with a serial terminal such as a personal computer using communication means such as RS-232C and receives a setting command from the serial terminal.

The encryption processing setting section 7 is composed of a readable and writable memory, and stores a set value based on a setting command from a serial terminal. Encryption processing setting unit 7
Stores an encryption processing setting table in which, for example, a source address, a destination address, and necessity of encryption processing are associated with each other.

Next, the operation of the cryptographic processing apparatus configured as described above will be described. First, prior to the start of the operation of the cryptographic processing device, the serial terminal performs an initial setting operation such as setting of a cryptographic processing setting table. When the initial setting operation is completed and the cryptographic processing device starts operating, the receiving unit 1
Receives data one after another and outputs the data to the buffer 2 a of the control unit 2. The judging unit 2b takes out the data from the buffer 2a and refers to the source address and destination address of the data and the encryption processing setting table, and outputs to the encryption processing unit 3 data that requires encryption processing. The encryption processing unit 3 performs an encryption process on the input data and outputs the processed data to the transmission unit 4, and outputs a processing display signal to the display unit 5 during the processing. The display unit 5 turns on the LED while receiving the processing display signal, and displays that the encryption processing is being performed so that it can be visually confirmed.

In the cryptographic processing apparatus configured as described above, while the cryptographic processing apparatus performs cryptographic processing on data, the display unit 5 displays a message to that effect. The operation state of the processing device can be confirmed, and safe data communication can be performed. In other words, if the display unit 5 does not light up even though data that requires encryption processing is being transmitted and received, it means that data is being transmitted and received without encryption processing, and the operation of the encryption processing is visually confirmed. By doing so, it is possible to easily and quickly find such an undesirable state. If the user finds an error in the cryptographic processing operation, the user can cause the cryptographic processing apparatus to perform a desired operation by resetting the cryptographic processing setting table, and important data leaks out to eavesdropping. And tampering can be prevented beforehand.

[Second Embodiment] FIG. 3 is a block diagram of a cryptographic processing apparatus according to the present invention. In FIG. 3, the same reference numerals are given to the same parts as those of the cryptographic processing apparatus described in the first embodiment, and the detailed description of the same parts will be omitted.

The cryptographic processing apparatus of the present embodiment shown in FIG. 3 is different from the cryptographic processing apparatus described in the first embodiment in the following features.

That is, the display section 9 has a configuration in which the display state is made different between the encryption processing and the decryption processing. Specifically, a display operation control unit 10 is provided between the encryption processing unit 3 and the display unit 9, and the display operation control unit 10 determines whether the processing content of the encryption processing of the encryption processing unit 3 is encryption processing. Is to be detected.

The display operation control section 10 outputs an encryption processing display signal to the display section 9 when the encryption processing section 3 is performing the encryption processing, and decrypts the signal when the encryption processing section 3 is performing the decryption processing. The processing display signal is output to the display unit 9. The display unit 9 illuminates the LED in red when receiving the encryption processing display signal, and illuminates the LED in green when receiving the decryption processing display signal. When neither the encryption processing display signal nor the decryption processing display signal is received, the display unit 9 turns off the LED and displays that the encryption processing unit 3 is not performing the encryption processing.

Next, the operation of the cryptographic processing apparatus configured as described above will be described. When data is input from the receiving unit 1 to the buffer 2a, the determination unit 2b reads the data and determines the output destination, and when the data is input from the determination unit 2b to the encryption processing unit 3, the encryption processing unit 3 The encrypted data is subjected to cryptographic processing, and the processed data is output to the transmission unit 4, and a processing display signal is output to the display operation control unit 10 during the processing. When the display operation control unit 10 receives the signal, the display operation control unit 10 detects whether the processing content of the encryption processing of the encryption processing unit 3 is the encryption processing or the decryption processing, and determines whether the encryption processing unit 3 is performing the encryption processing. If the encryption processing unit 3 outputs a decryption processing display signal to the display unit 9, the decryption processing display signal is output to the display unit 9. The display unit 9 illuminates the LED in red while receiving the encryption processing display signal so as to visually confirm that the encryption processing is being performed, and displays the LED while receiving the decryption processing display signal. The LED is lit in green to indicate that the decoding process is being performed so that it can be visually confirmed.

In the cryptographic processing apparatus configured as described above, while the cryptographic processing apparatus is performing encryption processing on data, it is determined whether the display unit 9 is performing encryption processing. Is displayed, so that the user can confirm a more detailed operation state.

[Third Embodiment] FIG. 4 is a block diagram of a cryptographic processing apparatus according to the present invention. In FIG. 4, the same reference numerals are given to the same parts as those of the cryptographic processing apparatus described in the first embodiment, and the detailed description of the same parts will be omitted.

The cryptographic processing apparatus of the present embodiment shown in FIG. 4 is different from the cryptographic processing apparatus described in the first embodiment in the following features.

That is, the display unit 11 is configured to change the display state according to the encryption method in the encryption processing. Specifically, the encryption processing units 3a, 3a,
3b, the encryption processing units 3a and 3b and the display unit 11
The display operation control unit 12 is provided between
2 detects which encryption method is being used for encryption processing. The control unit 2 determines which encryption method is to be used for encryption processing based on the encryption processing setting table. That is, the encryption processing setting table describes the correspondence between the source address, the destination address and the necessity of the encryption processing, and the encryption method of the encryption processing when performing the encryption processing. Further, in the present embodiment, the encryption processing unit 3a performs the encryption processing by the single DES method,
Performs the encryption processing by the triple DES method.

The display operation control section 12 outputs a first processing display signal to the display section 11 when the encryption processing section 3a is performing the encryption processing, and outputs the second encryption processing signal when the encryption processing section 3b is performing the encryption processing. The display signal is output to the display unit 11. The display unit 11 illuminates the LED in red when receiving the first encryption processing display signal, and illuminates the LED in green when receiving the second encryption processing signal. When neither the first encryption processing display signal nor the second encryption processing display signal is received, the display unit 11 turns off the LED and displays that the encryption processing unit 3 is not performing the encryption processing. Display 1
The display state of 1 is an example. For example, a plurality of LEDs may be provided and displayed so that each LED corresponds to each encryption method, or the encryption method name may be displayed on the liquid crystal display device. It may be indicated by characters or marks. LE
In the case where a plurality of D are provided and each LED corresponds to the encryption method,
This is more preferable because the display color of each LED can be further used for displaying the encryption processing and the decryption processing.

Next, the operation of the cryptographic processing apparatus configured as described above will be described. First, the receiving unit 1 sequentially receives data and outputs the data to the buffer 2a of the control unit 2. The determining unit 2b takes out the data from the buffer 2a, refers to the source address and the destination address of the data, determines whether or not the encryption processing is necessary based on the encryption processing setting table, and determines the data to be subjected to the encryption processing. Further, based on the encryption processing setting table, the processor determines the encryption method to be processed, and outputs the data to the encryption processing units 3a and 3b that perform encryption processing on the data using the corresponding encryption method. In the encryption processing units 3a and 3b,
The input data is subjected to cryptographic processing and the processed data is output to the transmitting unit 4, and an encryption processing display signal is output to the display operation control unit 12 during the processing. Display operation control unit 1
2 receives the signal, and selects one of the encryption processing units 3a and 3b.
From the encryption processing unit 3a, and outputs a first encryption processing display signal to the display unit 11 if it is from the encryption processing unit 3a, and outputs a second encryption processing display signal to the display unit 11 if it is from the encryption processing unit 3b. Output. The display unit 11 lights the LED in red when receiving the first encryption processing display signal, and lights the LED in green when receiving the second encryption processing display signal.

In the cryptographic processing apparatus configured as described above, while the cryptographic processing apparatus is performing encryption processing on data, the encryption method used by the display unit 11 to perform encryption processing. Is displayed, the user can confirm a more detailed operation state.

In the present embodiment, two types of encryption systems are used. However, the present invention is not limited to this, and it goes without saying that any encryption processing device having a plurality of encryption systems may be used. Also, although the description has been made assuming that the encryption processing units 3a and 3b are provided for each encryption method, it is only necessary to be able to support a plurality of encryption methods, and a single encryption processing unit is based on a plurality of encryption methods. An encryption process may be performed, and the encryption method is not limited to two.

[Fourth Embodiment] FIG. 5 is a block diagram of a cryptographic processing apparatus according to the present invention. In FIG. 5, the same parts as those of the cryptographic processing apparatus described in the first embodiment are denoted by the same reference numerals, and the detailed description of the same parts will be omitted.

The cryptographic processing apparatus of this embodiment shown in FIG. 5 is different from the cryptographic processing apparatus described in the first embodiment in that it has the following features.

That is, the display unit 13 is configured to display that a processing error has occurred when the encryption processing unit 3 has caused a processing error. Specifically, the encryption processing unit 3
A display operation control unit 14 is provided between the display unit 13 and the display unit 13 so that the display operation control unit 14 detects an encryption processing error. A cryptographic processing error refers to a case where the cryptographic processing unit does not support a cryptographic method required for processing received data.
For example, there is a case where the cryptographic processing apparatus itself includes only the cryptographic processing unit of the A method even though the processing of the B method is necessary to decrypt the received encrypted data. The display operation control section 14 detects the occurrence of such an encryption processing error by monitoring the determination section 2b, and when detecting a processing error, outputs a processing error detection signal to the display section 13
Output to When receiving the processing display signal from the display operation control unit 12, the display operation control unit 12 outputs the signal to the display unit 13. When the display unit 13 receives the processing error detection signal, the display unit LE
Light D in red. When receiving the processing display signal, the display unit 13 lights the LED in green to indicate that there is no error in the processing. Note that the display unit 13 may be provided with a separate LED corresponding to the processing error detection signal.

Next, the operation of the cryptographic processing apparatus configured as described above will be described. First, the receiving unit 1 receives data one after another and outputs it to the control unit 2 to the buffer 2a. The judging unit 2b takes out the data from the buffer 2a and judges whether or not the encryption processing is necessary by referring to the source address and the destination address of the data and the encryption processing setting table. Then, the judging unit 2 b checks the encryption method of the data that needs the encryption processing, and outputs the data to the encryption processing unit 3. At this time, if the encryption method of the data confirmed by the determination unit 2b is not compatible with the encryption processing unit 3, the determination unit 2b
At b, an encryption error occurs. Display operation control unit 14
Detects the encryption processing error, outputs a processing error detection signal to the display unit 13, and the display unit 13 lights the LED in red to indicate that an encryption processing error has occurred.

In the cryptographic processing apparatus configured as described above, when the cryptographic processing apparatus has an error in the cryptographic processing, the display unit 13 displays the fact so that the user can promptly make the error. Can be grasped.

In this embodiment, the processing error is monitored by the judging unit 2b. However, any point may be monitored as long as the processing error can be detected.
The display operation control unit 14 may monitor the encryption processing unit 3 and detect a processing error.

The cryptographic processing apparatuses according to the present invention described in the first to fourth embodiments described above can be used in combination, and for example, the cryptographic processing operation can be performed by turning on and off the LED. The presence / absence is indicated, the encryption / decryption is indicated by the LED display color, the encryption method is indicated by a plurality of LEDs, and the LED color and L provided separately
A cryptographic processing device that displays a processing error by ED may be used.

The cryptographic processing device of the present invention is not limited to the above-described ones, and it goes without saying that various modifications can be made without departing from the spirit of the present invention.

[0040]

According to the first aspect of the present invention, the display unit displays that the encryption processing unit is performing encryption processing. So
This has the effect that the user can visually check the operation state of the cryptographic processing device and can perform secure data communication.

According to the second aspect of the present invention, in addition to the effect of the first aspect of the present invention, the display unit is different in the display state between the encryption processing and the decryption processing. This has the effect that the user can check the operation state in more detail.

According to the third aspect of the present invention, there is provided the first aspect.
Alternatively, in addition to the effect of the invention described in claim 2, the display unit changes the display state according to the encryption system in the encryption process, and displays which encryption system the display unit performs the encryption process. This has the effect that the user can check the operation state in more detail.

According to the fourth aspect of the present invention, there is provided the first aspect.
In addition to the effects of the invention according to any one of claims 3 to 3,
The display unit displays that a processing error has occurred when the encryption processing unit causes a processing error, so that the user can quickly grasp the encryption processing error.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating an example of a configuration of a cryptographic processing device according to the present invention.

FIG. 2 is a perspective view showing the appearance of the cryptographic processing device of the present invention.

FIG. 3 is a block diagram illustrating an example of a configuration of a cryptographic processing device of the present invention.

FIG. 4 is a block diagram illustrating an example of a configuration of a cryptographic processing device of the present invention.

FIG. 5 is a block diagram illustrating an example of a configuration of a cryptographic processing device of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Receiving part 2 Control part 3 Encryption processing part 4 Transmission part 5 Display part 9 Display part 11 Display part

 ──────────────────────────────────────────────────続 き Continued on the front page (72) Inventor Toshifumi Miura 1048 Kazuma Kadoma, Kadoma-shi, Osaka F-term in Matsushita Electric Works, Ltd. (reference) 5J104 AA33 AA35 AA36 NA43

Claims (4)

[Claims] A receiving unit that receives data from the outside, a transmitting unit that sends data to the outside, and data that needs to be encrypted among data received by the receiving unit is output to an encryption processing unit, and the encryption processing is performed. A control unit that outputs unnecessary data to the transmission unit, and performs one of the encryption process and the decryption process on the data received from the control unit, and outputs the processing result data to the transmission unit. An encryption processing unit for performing encryption processing, and a display unit for displaying that the encryption processing unit is performing encryption processing. 2. The cryptographic processing apparatus according to claim 1, wherein the display unit changes a display state between the encryption processing and the decryption processing. 3. The encryption processing device according to claim 1, wherein the display unit changes a display state according to an encryption method in encryption processing. 4. The apparatus according to claim 1, wherein the display unit displays a message indicating that a processing error has occurred when the encryption processing unit has caused a processing error. Cryptographic processing unit.