JP2003032241A - Information processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To adequately switch over enciphering or decoding modules by flexibly selecting a plurality of ciphered or decoded algorithms. SOLUTION: An enciphering module selector 11 sends out enciphering module B generating information for generating an enciphering module B to an enciphering unit 12, which then completes a concrete circuit arrangement the enciphering unit 12, according to the enciphering module B generating information. A determining unit 13 acquires security power evaluating information for evaluating the security powers of a plurality of enciphering modules over a network 14 and selects the name of an enciphering module, having the highest security power at present upon receipt of a select instruction, by referencing the security power evaluating information. A security failure detector 16 acquires a failure of the security power of a working enciphering module via a communication channel.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing system, and in particular, when a security management trouble occurs, an algorithm for encryption or decryption can be flexibly selected and appropriately switched. Information processing system.

[0002]

2. Description of the Related Art Conventionally, in an encryption or decryption system for encrypting or decrypting information that requires confidentiality, the encryption or decryption algorithm or its selection method is fixed.

Once this encryption or decryption algorithm is broken by a malicious attacker, the confidential information cannot be kept secret after that, and a security management trouble actually occurs. If so, it is not easy to change the encryption or decryption algorithm.

Therefore, various attempts have conventionally been made to strengthen the encryption or decryption algorithm. For example, an encryption system or a decryption system that keeps the key length long by the RSA encryption method is one of them.

Further, if the same cipher is always used, the security becomes weak and the attacker can be broken sooner or later, so that a plurality of ciphers can be selected and a predetermined fixed code can be selected. An encryption system or a decryption system that selects a cipher by various selection procedures is also considered.

[0006]

By the way, among the above-mentioned conventional encryption system or decryption system, those which strengthen the algorithm or lengthen the key length are great for decryption or decryption at the time of encryption. There was a problem that it took time.

[0007] In addition, the selection procedure for selecting a plurality of encryption or decryption methods is fixed, so that a malicious attacker is given time to complete decryption (that is, However, after that, the deciphering method that took time will be effectively used), and again there is a problem that the security cannot be maintained.

Further, when these encryption or decryption systems are implemented by using hardware, the encryption or decryption algorithm is fixed, and the procedure corresponding to a specific encryption method or decryption method is required. Therefore, there is a problem that it is difficult to adopt another encryption method or decryption method.

Therefore, when devising the present invention, the realization of a strong security function that will not be broken for a long period of time, and in the event of a security management trouble, the encryption or decryption algorithm The challenge is to give a flexible structure to the module configuration of the module that executes the encryption or decryption algorithm so that it can be switched or changed, and the encryption cannot be easily broken by a malicious attacker. The challenge was to develop an unpredictable information processing system with algorithm selection.

The present invention has been made in view of the problems in the conventional information processing system as described above, and when a security management trouble occurs, a plurality of algorithms for encryption or decryption are provided. An object of the present invention is to provide an information processing system that can be flexibly selected and can appropriately switch between modules for encryption or decryption.

[0011]

In order to solve the above problems, the present invention provides an information processing system for encrypting or decrypting data, wherein one or a plurality of ciphers for performing the encryption or decryption is used. Cryptographic module generation information holding means for holding one or a plurality of cryptographic module generation information for generating a module, cryptographic module generation means for generating a cryptographic module based on the cryptographic module generation information, and the plurality of cryptographic modules The security evaluation information relating to each security is acquired through the communication path, stored and recorded, and the cryptographic module having the highest security level is selected from the one or a plurality of cryptographic modules by referring to the security evaluation information. Abnormality in security of the selection means and the cryptographic module The information processing system characterized by comprising a security abnormality detecting means for obtaining the raw via the communication path is provided.

That is, in the present invention, a security information database for managing security information based on information on the network is provided, and the main use and backup cryptographic modules are respectively referred to by referring to the security information on this database. When the security abnormality occurs, switching between the main use and backup cryptographic modules, and referring to the security information on the database to determine the optimal cryptographic module at this time, the optimal cryptographic module is determined. Therefore, by providing a means for updating the cryptographic module for main use, when the encryption or decryption algorithm is decrypted by a malicious third party, the decrypted encryption method or decryption method can be Prevents continued use

[0013]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. (First Embodiment) FIG. 1 is a block diagram showing the overall configuration of an information processing system according to the first embodiment of the present invention.

The information processing system according to the present embodiment is
Cryptographic module generation / selection device 11 (cryptographic module generation information holding means) that stores a plurality of cryptographic module generation information (here, each generation information of cryptographic modules A, B, and C) and sends out in accordance with a command; A cryptographic device 12 (cryptographic module generating means) that has a template and completes and sets the cryptographic module using the cryptographic module generation information sent from the cryptographic module generation / selection device 11, and for selecting the cryptographic module A judgment device 13 (selection means) for accumulating security information in a database and judging an optimum cryptographic module with security information for evaluating the security capability (security level) of each of a plurality of cryptographic modules, and a network 1.
4 and a communication device 1 for taking in security information on the network 14 and communicating with an external system.
5 and security information on the network 14 and a security anomaly detection device 16 for detecting the occurrence of a security anomaly by monitoring a notification from an external system.
(Security abnormality detecting means).

The cryptographic module is a module that executes encryption or decryption. The cryptographic module generation / selection device 11 generates cryptographic module generation information for generating a module that executes encryption or decryption (in the present embodiment shown in FIG. 1, the cryptographic module A,
B, C generation information) is included.

The cryptographic module A generation information (1
11), the cryptographic module B generation information (112) and the cryptographic module C generation information (113) can include cryptographic keys A, B, and C (not shown) such as a public key and a common key, respectively.

The cryptographic device 12 is provided with cryptographic module configuration units 121 and 122 which are converted into firmware, and generally uses the cryptographic module generation information sent from the cryptographic module generation / selection device 11 to complete the cryptographic module A, and Set. In the present embodiment shown in FIG. 1, the cryptographic module generation information A is stored in the cryptographic module configuration unit 121.
It is assumed that the cryptographic module A corresponding to the cryptographic module A is completed and the cryptographic module B corresponding to the cryptographic module generation information B is completed and set in the cryptographic module configuration unit 122.

In the present embodiment shown in FIG. 1, as the initial setting, the cryptographic module A for main use is set in the cryptographic module configuration unit 121, and the cryptographic module configuration unit 1 is set.
It is assumed that the cryptographic module B for backup is set in 22.

A circuit section (not shown) included in the cryptographic device 12 operates by using the cryptographic module generation information sent from the cryptographic module generation / selection device 11 so that the corresponding cryptographic module can be generated. Is composed of

Further, the calculation unit (not shown) included in the cryptographic device 12 can generate the corresponding cryptographic module by using the cryptographic module generation information sent by the cryptographic module generation / selection device 11. A cryptographic algorithm is incorporated.

The operation of the information processing system according to this embodiment will be described below. First, the command for selecting the cryptographic module A for main use is the cryptographic module generation / selection device 11
Sent to. The selection command is given from the user of the information processing system or the user of the external system via the network 14 and the communication device 15.

As a result, the cryptographic module generation / selection device 11 causes the determination device 13 to select the optimal (high security capability) cryptographic module generation information for main use at the present time.

Assuming that the selected cryptographic module is the cryptographic module A, the cryptographic module generation / selection device 11 stores the stored cryptographic module A generation information (111), cryptographic module B generation information (112), Cryptographic module A generation information (1) for generating the cryptographic module A from the cryptographic module C generation information (113)
11) is sent to the cryptographic device 12, and the circuit generation unit (not shown) of the cryptographic device 12 uses the sent cryptographic module A generation information (111) to send the cryptographic module configuration unit 121 of the cryptographic device 12 to the cryptographic module 12. Completed as A.

Next, a command for selecting the encryption method or the decryption method used for backup is transmitted to the cryptographic module generation / selection device 11. The selection command is given from the user of the information processing system or the user of the external system via the network 14 and the communication device 15.

As a result, the cryptographic module generation / selection device 11 causes the determination device 13 to select the most suitable cryptographic module for backup at the present time. Assuming that the selected cryptographic module is the cryptographic module B,
The cryptographic module generation / selection device 11 stores the stored cryptographic module A generation information (111) and cryptographic module B.
Generation information (112), Cryptographic module C generation information (11
The cryptographic module B generation information (112) for generating the cryptographic module B from 3) is sent to the cryptographic device 12. The circuit generation unit of the cryptographic device 12 uses the sent cryptographic module B generation information (112) to perform the cryptographic device 12 operation.
The cryptographic module configuration unit 122 is completed as a cryptographic module B.

Thereafter, the cryptographic module A for main use,
Also, the encryption module B for backup performs encryption or decryption. During this time, the security abnormality detection device 16 monitors the security abnormality information on the network 14 via the communication device 15 to detect the security abnormality. Then, an instruction to switch the encryption method or the decryption method is sent to the encryption module generation / selection device 11.

As a result, the cryptographic module generation / selection device 11 stores the cryptographic module A generation information (111), the cryptographic module B generation information (112),
From the cryptographic module C generation information (113), the determination device 1
3 is caused to select the most suitable cryptographic module generation information at the present time, and this is sent to the cryptographic device 12. The circuit generation unit of the cryptographic device 12 is the cryptographic module configuration unit 12 of the cryptographic device 12.
1 is recreated as a new cryptographic module corresponding to this cryptographic module generation information.

After that, the cryptographic module A for main use
Is switched to the backup cryptographic module B generated in the cryptographic module configuration unit 122, and a new backup cryptographic module is set again with the new cryptographic module generated in the cryptographic module configuration unit 121. The change result of the cryptographic module and the history information at this time are stored in a database (described later) in the determination device 13, and are also recorded as cryptographic module A generation information (111).

At this point, the security capability of the cryptographic module B for backup can be evaluated by activating the determination device 13. Next, the determination device 13
Notifies the external system on the network 14 via the communication device 15 of the notification that the cryptographic module configuration unit 121 is changed to the new cryptographic module and the information such as the cryptographic key of the new cryptographic module. This notification is performed using the cryptographic module B.

FIG. 2 is a table showing the contents of security information recorded in the judgment device of the information processing system according to the first embodiment of the present invention and the database in the judgment device.

A security information database 131 for recording the security information of each cryptographic module in a table format is installed in the judgment device 13. The security information items for each cryptographic module recorded in the security information database 131 are the security level of the cryptographic module, the security level, the tamper resistance, the operability, the implementation restriction in this system, and the fraud caused by the security problem. It is a history and the like, and generally, evaluation values (scores) corresponding to these items are recorded. However, in the example shown in FIG. 2, the number of fraud history is shown as the evaluation value, and the deduction system is adopted.

These evaluation values are constantly updated by the security information obtained through the network 14 while the system is operating. When the cryptographic module selection request from the cryptographic module generation / selection device 11 is sent out, the determination device 13 totalizes the current evaluation value of each of these items on the security information database 131 for each cryptographic module, The cryptographic module having the maximum total value (total value) is determined to be the optimal cryptographic module at the present time, and the cryptographic module generation / selection device 11 is notified of the module name of this cryptographic module.

In the present invention, the encryption device 12 is generally used.
It is possible to set a plurality of backup cryptographic modules inside and use these backup cryptographic modules as appropriate for main use each time the security anomaly detection device 16 detects a security anomaly. is there.

(Second Embodiment) FIG. 3 is a block diagram showing the overall configuration of an information processing system according to a second embodiment of the present invention.

The information processing system according to this embodiment is
Cryptographic system A (2
1), encryption system B (22), and encryption database 2
3 is provided.

Cryptographic system A (21), cryptographic system B
(22) is assumed to be the information processing system according to the first embodiment of the present invention shown in FIG. The number of cryptosystems and cryptographic databases connected to the network 14 may be arbitrary plural.

The operation of the information processing system according to this embodiment will be described below. Each of the encryption system A (21), the determination device in the encryption system B (22), and the encryption database 23 exchanges security information via the network 14, and each security abnormality detection device 16
When security anomalies are detected by each other, the security information managed by each other system is acquired through the network 14 (external security information acquisition means), and the security information management database is managed by itself as necessary. Is updated (security information update means).

FIG. 4 is a flow chart showing the operation of the judging device of the information processing system according to the second embodiment of the present invention. Hereinafter, the operation of the determination device of the information processing system according to the present embodiment will be described using the flowchart shown in FIG. 4 with reference to FIGS.

When the security anomaly detecting device 16 detects a security anomaly, the judging device 13 first verifies in step S1 whether or not there is another cryptosystem on the network 14 and determines whether another cryptographic system is present on the network 14. If there is a cryptographic system, move to step S2, network 1
If there is no other encryption system on 4, the system waits for security abnormality detection.

In step S2, it is verified whether or not the security information managed by itself should be updated by the security information managed by another system. If it should be updated, the process proceeds to step S3. If it is not necessary to update it, It just waits for security abnormality detection.

In step S3, the security information managed by the other system is obtained via the network 14 and the communication device 15, and the security information managed by itself is updated based on the security information managed by the other system. Wait for security abnormality detection.

[0042]

As described above, according to the present invention, the security information database for managing the security information based on the information on the network is provided, and the cryptographic modules for main use and backup are provided on this database. Determine each by referring to the information, and switch between the main use and backup cryptographic modules when a security abnormality occurs,
The security module on the above database is referred to determine the optimal cryptographic module at this time, and the cryptographic module for main use is updated with this optimal cryptographic module. It is possible to prevent the decrypted encryption method or decryption method from being continuously used, such as when the algorithm is decrypted.

[Brief description of drawings]

FIG. 1 is a block diagram showing an overall configuration of an information processing system according to a first embodiment of the present invention.

FIG. 2 is a table showing the contents of security information recorded in a judgment device of the information processing system according to the first embodiment of the present invention and a database in the judgment device.

FIG. 3 is a block diagram showing an overall configuration of an information processing system according to a second embodiment of the present invention.

FIG. 4 is a flowchart showing an operation of the determination device of the information processing system according to the second exemplary embodiment of the present invention.

[Explanation of symbols]

11 ... Cryptographic module generation / selection device, 12 ... Cryptographic device, 13 ... Judgment device, 14 ... Network, 15
...... Communication device, 16 …… Security abnormality detection device, 2
1 ... Cryptographic system A, 22 ... Cryptographic system B, 23
...... Cryptographic database, 111 ... Cryptographic module A generation information, 112 ... Cryptographic module B generation information, 113
...... Cryptographic module C generation information, 121, 122 ...... Cryptographic module configuration unit, 131 ...... Security information database

Claims (6)

[Claims] 1. An information processing system for encrypting or decrypting data, wherein one or more cryptographic module generation information for generating one or more cryptographic modules for performing encryption or decryption is provided. Cryptographic module generation information holding means for holding, cryptographic module generation means for generating a cryptographic module based on the cryptographic module generation information, and security evaluation information regarding the security of each of the plurality of cryptographic modules is acquired via a communication path. And storing and recording, selecting means for selecting the cryptographic module having the highest security level from the one or more cryptographic modules by referring to the security evaluation information, and the occurrence of a security abnormality of the cryptographic module by the communication. Security anomaly detection to get through the road The information processing system comprising: the means. 2. The information processing system according to claim 1, wherein the cryptographic module to be mainly used is switched to a cryptographic module for backup in response to a security abnormality occurrence signal from the security abnormality detecting means. 3. The information processing system according to claim 2, wherein the backup cryptographic module is selected with reference to the security evaluation information. 4. The cryptographic module used for the main,
The information processing system according to claim 2, wherein the switching to the cryptographic module for backup is notified via the communication path. 5. The cryptographic module used for the main,
3. The information processing system according to claim 2, wherein the switching to the cryptographic module for backup is reflected in the security evaluation information stored and recorded by the selecting unit. 6. A cryptographic module is selected by the selection means, cryptographic module generation information for generating the selected cryptographic module is selected from the cryptographic module generation information holding means, and the cryptographic module generation means. The information processing system according to any one of claims 1 to 5, wherein the new cryptographic module is generated based on the selected cryptographic module generation information.