JP2006211728A - Encryption data processor and encryption data processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To update simply a cipher processing circuit for enciphering or decoding information through a communication means, in connection with encryption method. <P>SOLUTION: An encryption data processor is connected through the means of communications between a service station side 1A and an user side 1B, and is equipped with a receiving means for receiving a command and encryption processing program for requiring changs in an encryption processing program, transmitted from the service station side 1A to the user side 1B through the communication means, and a circuit updating means for updating the cipher processing circuit established in the user side by the encryption processing program. The cipher processing circuit established in the user side 1B can be rewritten readily, according to the encryption processing program transmitted from the service station side A. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an encrypted data processing apparatus and an encrypted data processing method, and more particularly to an encryption apparatus and method for encrypting or decrypting information exchanged with a user connected to a service station by communication means. Applicable to.

  In recent years, broadcasting routes have been diversified such as terrestrial broadcasting, satellite broadcasting, CATV (Cable Television), Internet broadcasting, etc., and interactive services have become possible through communication network such as the Internet. In addition, with the spread of multimedia, various types of information such as audio data, video data, character graphic information, and codes have been mixed. Along with this, for example, when exchanging information between a service station and a user via a communication line, various security functions are being required for contracted users only, electronic approval, electronic money, privacy protection, and the like.

  There are various techniques for maintaining security, depending on the information. For example, video information is relatively simple processing such as line shuffling, long text and long code information is DES (Data Encryption Standard) encryption, A function key method such as FEAL (Fast Data Encipherment Algorithm) encryption is used. For example, in the case of electronic approval, public key formulas such as RSA (Rivest Shamir Adelman) encryption can be used.

  In addition, encryption processing seems to be advancing day by day, and various improvements and new processing methods have been proposed and put into practical use in attempts to increase encryption strength.

  As is well known, the basic structure of encryption processing by the DES method, which is a representative of these encryption methods, realizes information randomization by a structure in which an involution structure is stored. In this structure, a function-coupled nonlinear transformation part is deeply related to the encryption strength. In the case of DES64, it is in a non-linear conversion table conversion function called S-box. Here, a non-linear change of 1 to 4 [bit] appears for an output of 1 [bit], and this is a multistage ( In DES64, it has a structure of 15 stages), and finally changes to 37 [bits], which are mixed very randomly and become very strong cryptographic processing. For this reason, no deciphering method has been discovered yet other than the key attack attack.

The brute force decryption method requires a calculation of 2 ⁵⁵ times the DES 64, for example, once there is a take 1000 years for decryption from computer to treatment with 1 [μsec].

However, with recent supercomputers and parallel processing technology, it is feared that functions that can be decoded in a short time in the near future are becoming more and more serious, and it is proposed to improve the decoding strength such as increasing the number of bits. Has been. In the future, various encryption strengthening methods have been proposed and tend to be upgraded. In the secret key system, there are various unique systems such as FEAL in addition to DES. In the public key RSA cipher, the processing form is greatly different from that of DES and the like, and the following remainder arithmetic expression is used, and encryption C≡M ^e mod using the input sentence M, the public keys e and n, and the secret key d n, decrypted M≡C ^d mod n.

  By the way, a high-speed exponent calculation method (2 lne calculations) is known as exponent calculation, but iterative calculation is heavy and processing time is required, so that it is indispensable to implement hardware with a DSP (Digital Signal Processor) or the like. Conventionally, it has been usual to propose hardware that is fixed according to each individual method for such a method in which processing is greatly different. However, such a fixed processing method has a problem that a unique encryption processor must be provided for each of a plurality of different services, and the version up cannot be dealt with.

  As described so far, encryption strength is largely determined by non-linear processing of function combination. The major difference between the DES and the FEAL method lies in this function coupling part, and the most important process is how non-linear and reliable random transformation is performed, and several structures have been proposed according to the times. Encryption processing is processing in units of blocks (for example, data is 56 [bits] and parity 8 [bits] in units of 64 [bit]), and the number of bits is also directly related to the encryption strength. It is important to select the number of bits according to the situation. These must continue to be provided to users who maintain the encryption strength as a version up and gain trust. In addition to these secret key methods that are mainly adapted to large-volume data transfer, there are, for example, authentication applications and secret key distribution applications of public key methods using RSA encryption, and there are also methods in which the encryption structure is completely different. However, in the past, in order to cope with such various unique methods and to upgrade the hardware version of the encryption circuit in order to counter the decryption of the encryption method, the hardware must be replaced. There was a problem that only a new purchase could be dealt with.

  The present invention has been made in consideration of the above points, and an encrypted data processing apparatus and encrypted data processing capable of easily updating an encryption processing circuit for encrypting or decrypting information exchanged through communication means We are going to propose a method.

  In order to solve this problem, in the present invention, the service station side and the user side are connected by communication means, and the information exchanged through the communication means is encrypted, or the encrypted information is decrypted. In the data processing apparatus, provided to the user side by the receiving means for receiving the command and the encryption processing program for requesting the user to change the encryption processing program transmitted from the service station side through the communication means, and the encryption processing program By providing the circuit updating means for updating the cryptographic processing circuit, the cryptographic processing circuit on the user side can be easily rewritten according to the cryptographic processing program transmitted from the service station side.

  As described above, according to the present invention, the service station side and the user side are connected by the communication means, and the encryption processing program change sent from the service station side to the user side through the communication means is changed. By receiving the requested command, receiving the cryptographic processing program on the user side according to the command, and updating the cryptographic processing circuit provided on the user side by the cryptographic processing program, the user It is possible to realize an encryption apparatus and method that can easily rewrite the encryption processing circuit provided on the side according to the encryption processing program transmitted from the service station side.

  Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

(1) First Embodiment (1-1) Overall Configuration of Encryption Device In FIG. 1, reference numeral 1 denotes an encryption device as a whole, which is taken by a camera at a service station side 1A that provides materials to a user. Material data SV composed of the recorded video material or video / audio material of a VTR (Video Tape Recorder) is input to the broadcast information input unit 2 and the database (DB) 3 to the editing unit 4. When the material data SV is input, the editing unit 4 edits the material data SV with the editing device 5 such as a VTR, terrorist, or computer, and then encrypts the material data SV with the encryption processor 6 into the encrypted data SX. .

  In the editor 5, the encrypted data SX encrypted is sent from the sending unit 7 provided with facilities such as terrestrial broadcasting and satellite broadcasting to the user receiver 10 provided on the user side 1B through the communication network 8A. Sent to.

  The user receiver 10 decrypts the received encrypted data SX with the encryption processor 11 and outputs the material data SV decrypted from the encrypted data SX on the screen of the television receiver (TV) 12. Further, the decrypted material data SV is recorded and reproduced by the VTR 13.

  As shown in FIG. 2, when the encrypted processor SX receives the encrypted encrypted data SX, the existing encryption processing program corresponding to the encrypted data SX is already prepared. A cryptographic processing program is read from the memory 21 and loaded into the cryptographic processing circuit 22.

  The cryptographic processing circuit 22 is formed by a digital signal processing circuit of an FPGA (Field Programmable Gate Array) system such as an EEPROM (Electrically Erasable Programmable ROM), and the cryptographic processing algorithm according to the loaded cryptographic processing program. Can be arbitrarily set to change the wiring of the gate array of the encryption processing circuit 22.

  Here, when the encryption processing program is loaded into the encryption processing circuit 22, encryption processing is executed according to the key data K by the key data K input from the key data input unit 23. During encryption processing, a predetermined area of the memory 21 is used as a table (LUT, Look Up Table) for code conversion processing executed in the encryption processing step.

  When the non-existing encryption processing program P1 corresponding to the encryption data SX is transmitted from the service station side 1A to the user side 1B through the communication network 8A, the user receiver 10 transmits the encryption processing program P1 to the external load I / O. It can be taken in via F24.

  The material data SV decrypted by the encryption processing circuit 22 is sent to the TV 12 and output.

  Here, key data K for cryptographic processing corresponding to the cryptographic processing program P1 is transmitted from the service station side 1A to the user receiver 1B through the communication network 8A.

(1-2) Cryptographic Processing Circuit Program Procedure The cryptographic processing circuit program by the actual cryptographic processing program is executed according to the cryptographic processing programming procedure as shown in FIG. That is, when the cryptographic processing programming procedure is started between the service station side 1A and the user side 1B, first, at step SP1, when the user receiver 10 receives a transmission command from the service station side 1A, the command is encrypted at step SP2. It is determined whether or not the command is an instruction to change the program. If the command is an instruction to change the encryption processing program, the process proceeds to step SP3 and the encryption processing program P1 is received by the external load I / F 24. The data is read into the memory 21 (FIG. 2). If the received command is not a command for instructing to change the encryption processing program, the process proceeds to step SP4 to execute processing according to the received command.

  In step SP5 following step SP3, the cryptographic processing circuit 22 is reprogrammed by the cryptographic processing program P1 read into the memory 21.

  In the following step SP6, the user receiver 10 sends key data K corresponding to the cryptographic processing program P1 newly reprogrammed from the cryptographic processing circuit 22 through the communication network 8A from the service station side 1A to the user side 1B. This is notified to the user by displaying a message or the like on the screen of the TV 12, and the cryptographic processing programming procedure is thereby terminated.

(1-3) Structure of Encryption Processing Circuit FIG. 4 shows an example of the encryption processing circuit 22 using the DES technique. When the cryptographic processing circuit 22 receives, for example, plain text input data C0 having a total number of 64 bits (including 56 bits for character data and 8 bits for parity data) as material data from the data input unit 30, After the input data C0 is replaced by the transposition circuit 31 by the initial transposition P using the correspondence table, the transposed data P1 is branched, and the transposed data C1 is branched to the first-stage cryptographic processing circuit 32A1. Send it out.

  In the first-stage cryptographic processing circuit 32A1, first, data C1L and C1R obtained by branching the 64-bit transposed data C1 into 32 bits are sent to the rotation circuits 41 and 42, respectively.

  In this case, as shown in FIG. 5A, the input data x is divided into data yL and yR by branching. The data yL and yR branched in this way become data x again by the branching. That is, the branched structure is an involution structure.

  The rotation circuits 41 and 42 perform the operation of switching the LSB (Least Significant Bit) and the MSB (Most Significant Bit) by rotation operation on the 32-bit data C1L and C1R, respectively, and the data C2L and C2R. Output.

  In this case, as shown in FIG. 5B, when the input data x is converted into data y by rotation, the first input data x is obtained when the rotation operation is performed again on the data y. That is, the rotation operation has an involution structure.

  Next, in the transposition / non-linear substitution circuit 43, function coupling by transposition and non-linear substitution as shown in FIG. 5C is performed using predetermined key data K input from the key data input unit 44 for one data C2L. Then, an exclusive OR circuit (Exclusive-OR circuit) 45 as shown in FIG. 5 (D) performs exclusive OR with the other data C2R, and the resulting data C3L is rotated. Send to circuit 47. Here, the rotation circuit 47 performs a rotation operation on the data C3L.

  On the other hand, the data C2R is sent to the rotation circuit 46 as it is, and the rotation operation is performed in the rotation circuit 46. In this way, the exchange operation as shown in FIG. 5E and the rotation operation as shown in FIG. 5B are performed on the data C2R and C3L.

In this way, encryption processing similar to the encryption processing of the first-stage encryption processing circuit 32A1 is repeatedly executed up to the n-th encryption processing circuit 32An.
When the cryptographic processing in the n-th stage cryptographic processing circuit 32An is completed, the branched data are combined and sent to the transposing circuit 35.

The transposition circuit 35 outputs the final encrypted data CX from the data output unit 36 after applying the final transposition P- ¹ to the transposition P by the transposition circuit 31 to the data C4.

  Thus, according to the encryption of the encryption processing circuit 22 having the involution structure, encryption and decryption can be performed by the same encryption processing circuit.

  Here, the key data K used for each transposition / non-linear substitution circuit 43 of the n-th stage cryptographic processing circuit 32An from the first-stage cryptographic processing circuit 32A1 is input from the key input unit 33, and in the key generation circuit 34. Different key data K is generated and sent to each n-th stage encryption processing circuit 32An.

(1-4) Operation and effect of the first embodiment In the above configuration, the material data SV edited by the editing unit 4 on the service station side 1A is encrypted into the encrypted data SX by the encryption processor 6. Thereafter, the data is transmitted from the sending unit 7 to the user receiver 10 provided on the user side 1B through the communication network 8A.

  When receiving the encrypted data SX, the user receiver 10 decrypts the encrypted data SX by the encryption processor 11 and outputs the material data SV decrypted by the TV 12 to the screen. Further, the decrypted material data SV can be recorded and reproduced by the VTR 13.

  Here, when changing the encryption processing program of the encryption processor 11, when the user receiver 10 on the user side 1B receives a command from the service station side 1A, the received command is a command for instructing the change of the encryption processing program. It is determined whether or not. If the received command is a command for changing the encryption processing program, the encryption processing program P1 is read into the memory 21 through the external load I / F 24 (FIG. 2). As a result, the FPGA cryptographic processing circuit 22 is reprogrammed by the cryptographic processing program P 1 read into the memory 21. Thereby, the cryptographic processing circuit 22 can be changed to an arbitrary cryptographic processing circuit by the cryptographic processing program P1 transmitted from the service station side 1A.

  Here, when the cryptographic processing circuit 22 of the user receiver 10 is reprogrammed, the user receiver 10 sends a message or the like on the screen of the TV 12 that the key data K corresponding to the cryptographic processing program P1 is sent to the user side 1B. The user is informed by the display of.

  When the update of the encryption processing program of the encryption processing circuit 22 in the encryption processor 11 is completed in this way, the user uses the updated updated encryption processing program as a source data SV for the encryption data SX transmitted from the service station side 1A. Can be decrypted. Thus, the user side 1B can decrypt the encrypted material data SV sent from the service station side 1A by the cryptographic processing circuit 22 created by the latest cryptographic processing program that can be easily updated.

  According to the above configuration, the FPGA-type cryptographic processing circuit 22 in the cryptographic processor 11 is connected to the service station side 1A in response to a command instructed by the user receiver 10 to change the cryptographic processing program transmitted from the service station side 1A. By reprogramming with the cryptographic processing program P1 transmitted from the service station side 1A, the cryptographic processing circuit 22 of the cryptographic processor 11 is changed by the cryptographic processing program P1 transmitted from the service station side 1A. It can easily be changed to the latest encryption processing circuit 22 of the specification, and by this, the contents of the encryption processing circuit having a high probability of being decrypted with the passage of time can be arbitrarily updated to enhance encryption, and transmission The confidentiality of the material data SV to be processed can be reliably protected.

  Also, by changing the FPGA-type cryptographic processing circuit 22 with the software of the cryptographic processing program P1, the cryptographic processing circuit 22 can perform hardware processing for cryptographic processing with various types of cryptographic processing programs. .

  Furthermore, by changing the cryptographic processing circuit 22 with the software of the cryptographic processing program P1, the hardware of the cryptographic processing circuit 22 can be greatly reduced, and the hardware can be prevented from being thrown away for environmental protection. Can be useful.

  In the first embodiment described above, the case where the satellite broadcast or terrestrial broadcast communication network 8A is used to transmit the cryptographic processing program P1 from the service station side 1A to the user side 1B has been described. For example, an Internet line may be used. Thus, the encryption information can be transmitted from the user side 1B to the service station side 1A.

  In the first embodiment described above, the case where a branch structure, a rotation structure, an exchange structure, etc. are used as the involution structure used in the cryptographic processing circuit is described. However, the present invention is not limited to this, and FIG. If the structure surrounded by the inverse function is used, an involution structure can be obtained. Thus, decryption can be performed by the same process as encryption.

Furthermore, in the first embodiment described above, as shown in FIG. 6A, the structure of the encryption processing circuit 22 is key data given to the encryption processing circuit 50 before and after a strong encryption processing circuit 50 such as DES. A weak cryptographic processing circuit 51 (for example, an exclusive OR circuit) in which key data K2 different from K1 is set may be connected. In this case, it is known that if the number of effective bits for block encryption processing is m + 1, the number of times of decryption by smashing is 2 ^m, and decryption is impossible unless the key data K1 and K2 are known at the same time. The number of times the two different key data K1 and K2 are crushed is 22 ^m . For example, if the number of bits of input data is 56 bits, if a computer that processes 1 [μsec] at a time performs 1000 parallel processing, weak encryption processing can be performed in about one year only with a strong encryption processing circuit With a simple structure in which the circuit 51 is simply connected to the front and rear, it can be set so that the decryption takes about 10 ¹⁷ years, thus making the decryption virtually impossible.

The structure of the cryptographic processing circuit 22 may be any structure as long as the high-strength cryptographic processing circuit F is sandwiched and connected by the low-strength cryptographic processing circuit H as shown in FIG. As shown in FIG. 6C, the number of stages of serial sandwiching connection of the low-strength cryptographic processing circuit H can be up to about 2 ^m . Thereby, the encryption processing strength of the encryption processing circuit can be increased according to the number of connection stages.

  Further, according to the above-described embodiment, the case where the key data K for encryption processing is transmitted from the service station side 1A to the user side 1B through the communication network 8A has been described. However, the present invention is not limited to this. The key data K may be kept confidential as a registered mail, and the key data K obtained by the encryption processing program P1 illegally intruding into the communication network 8A may be maintained. It can be prevented from being decoded by information.

(2) Second Embodiment In FIG. 7, in which parts corresponding to those in FIG. 1 are assigned the same reference numerals, reference numeral 60 denotes an encryption device according to the second embodiment, and a user receiver 61 is provided with a personal computer. The other configuration is the same as that of the first embodiment.

  As shown in FIG. 8, when the user receiver 61 receives the encrypted data SX transmitted from the service station side 1A by the network device 62 through the Internet 8B connected by a telephone line, the CPU (Central Processing Unit) is received. Under the control of 63, the encryption processor 64 decrypts the encrypted data SX.

  The material data SV decrypted from the cipher data SX in the cipher processor 64 is a man-machine interface (man-machine I / F) 65 in which the user has input / output means such as a mouse, a keyboard, and a monitor (not shown). Is stored in a storage device 66 such as a DVD under the control of the CPU 63, and can be read out from the storage device 66 by random access.

  The cryptographic processing circuit in the cryptographic processor 64 is formed in an expansion board in the personal computer as an FPGA digital signal processing circuit. When the user operates the man-machine I / F 65, the CPU 63 Under the control of the program creation control unit 67, the encryption program stored in the memory in the program creation control unit 67 is loaded into the cryptographic processing circuit 22 in the expansion board via the bus in the CPU 63, thereby encrypting the encryption program. The circuit connection of the cryptographic processing circuit 22 can be changed according to the encryption program.

  In FIG. 9, in which the same reference numerals are assigned to the parts corresponding to those in FIG. 2, the cryptographic processor 64 sets the memory card 69 in the memory card interface (memory card I / F) 68. The encryption data SX and encryption processing program P1 stored in the memory card 69 are loaded into the encryption processing circuit 22 via the external load I / F 24 via the / F control unit 70.

  In the above configuration, when the user receiver 61 receives the encrypted data SX transmitted from the service station side 1A by the network device 62, the encryption processor 64 decrypts the encrypted data SX under the control of the CPU 63. .

  The cryptographic processing circuit 22 in the cryptographic processor 64 is formed by an FPGA digital signal processing circuit, and is stored in a memory in the program creation control unit 67 under the control of the program creation control unit 67. The gate array wiring of the encryption processing circuit 22 can be freely changed by software for creating an encryption program.

  Further, when the user receiver 61 receives a command transmitted from the service station side 1A by the network device 62, the user receiver 61 determines by the CPU 63 whether or not the received command is an encryption processing program change command. If the received command is a change command for the cryptographic processing program, the cryptographic processing program P1 is received via the Internet 8B and is taken into the cryptographic processing circuit 22 via the external load I / F 24. Thereby, the contents of the cryptographic processing circuit 22 can be changed by the cryptographic processing program P1.

  When the user receiver 61 receives the cryptographic processing program P1 from the service station 1A, the user receiver 61 notifies the user that the cryptographic processing program is updated and new key data K is transmitted through a monitor (not shown) of a personal computer. .

  When the user confirms reception of the key data K, the user can transmit the reception confirmation from the user side 1B to the service station side 1A through the Internet 8B.

  In addition, encryption information can be transmitted from the user side 1B to the service station side 1A using the encryption processor 64 via the Internet 8B.

  Also, the cryptographic processor 64 sets the memory card 69 storing the cryptographic processing program P1 in the service station side 1A to the memory card I / F 68, thereby performing cryptographic processing via the memory card I / F control unit 70. The program P1 can be sent to the cryptographic processing circuit 22.

  Further, the encryption processor 64 can fetch the encryption data SX from the memory card 69 by setting the memory card 69 storing the encryption data SX in the service station side 1A to the memory card I / F 68. Thereby, it is possible to remarkably improve confidentiality when the cryptographic processing program P1 and the encrypted data SX are exchanged between the service station side 1A and the user side 1B.

  Further, the encryption processor 64 sets the key data K stored in the memory card 69 on the service station side 1A to the memory card I / F 68 by setting the key data K for encryption processing from the memory card 69 to the key data K. Can be taken out. Thereby, the confidentiality when the key data K is exchanged between the service station side 1A and the user side 1B can be remarkably improved.

  According to the above configuration, by providing a personal computer in the user receiver 61, transmission of the encryption processing program from the service station side 1A to the user side 1B can be automatically received and captured by the CPU 63, The same effects as those of the first embodiment can be obtained.

  In addition, the encryption processing program P1, encryption data SX, encryption data SX, encryption data SX, encryption data SX, encryption data SX, encryption data SX, encryption data SX, encryption data SX, encryption data SX, encryption data SX, Confidentiality when exchanging key data K can be significantly improved.

  Further, since the information data is encrypted and exchanged with the service station side 1A through the Internet 8B, bidirectional information exchange with the confidentiality of the information data can be performed.

(3) Other Embodiments In the above-described embodiments, the case where the service station side 1A and the user side 1B are connected by terrestrial broadcasting, satellite broadcasting, or a telephone line has been described. However, the present invention is not limited to this. Alternatively, the connection may be made by ISDN (Integrated Services Digital Network), CATV (Cable Television), TCP / IP (Transmission Control Protocol / Internet Protocol), or the like. Thereby, the same effect as the above-mentioned Example can be acquired. Further, terrestrial broadcasting, satellite direction, telephone line and ISDN, CATV, TCP / IP may be used in parallel.

  In the above-described embodiments, the case where the cryptographic processing circuit 22 is of the FPGA system has been described. However, the present invention is not limited to this, and may be software for cryptographic processing.

  In the above-described embodiments, the case where character data is encrypted has been described. However, the present invention is not limited to this, and may be used when image data is encrypted by a shuffling method or the like.

  Furthermore, in the above-described embodiment, a case has been described in which the service station side 1A notifies the user side 1B that the key data K corresponding to the new encryption processing program P1 is transmitted after the encryption processing circuit 22 is updated. The present invention is not limited to this, and the encryption processing circuit that does not require the key data K may be notified only of the change of the encryption processing program.

It is a block diagram which shows the whole structure of the encryption apparatus by 1st Example. It is a block diagram which shows the structure of the encryption processor by 1st Example. It is a flowchart which shows a cryptographic processing programming procedure. It is a block diagram which shows the structure of a cryptographic processing circuit. It is a basic diagram with which it uses for description of an involution structure. It is a block diagram for explanation of the cryptographic processing circuit. It is a block diagram which shows the whole structure of the encryption apparatus by 2nd Example. It is a block diagram which shows the structure of the user receiver by 2nd Example. It is a block diagram which shows the structure of the encryption processor by 2nd Example.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Encryption apparatus, 2 ... Broadcast information input part, 3 ... DB, 4 ... Editing part, 5 ... Editor, 6 ... Cryptographic processor, 7 ... Sending part, 8A ... Communication network Work, 8B ... Internet, 10, 61 ... User receiver, 11, 64 ... Cryptographic processor, 12 ... TV, 13 ... VTR, 21 ... Memory, 22 ... Cryptographic processing circuit, 23, 44... Key data input unit, 24... External load I / F, 30... Data input unit, 31, 35... Transposition circuit, 32 A 1, 32 A 2. ... Key input unit 34 ... Key generation circuit 41, 42, 46, 47 ... Rotation circuit 43 ... Transposition / non-linear substitution circuit 45 ... EXOR circuit 62 ... Network device 63 ... CPU, 65 ... Man machine I / F, 66 ... Memory Location, 67 ...... programming controller, 68 ...... memory card I / F, 69 ...... memory card, 70 ...... memory card I / F control unit.

Claims (8)

Receiving means for receiving the encrypted data and an updated encryption processing program for updating the encryption processing program of the encryption processing means for decrypting the encrypted data;
A cryptographic processing program update means for automatically updating the cryptographic processing program of the cryptographic processing means by reprogramming the cryptographic processing means using the updated cryptographic processing program received by the receiving means;
The encryption processing means updated by the encryption processing program updating means inputs key data necessary for decrypting the encrypted data received by the receiving means, and is input by the input means. Cryptographic processing means for decrypting the encrypted data received by the receiving means using the key data and the updated cryptographic processing program of the cryptographic processing means updated by the cryptographic processing program updating means. An encrypted data processing device. The receiving means receives a command indicating whether to update the cryptographic processing program of the cryptographic processing means,
The cryptographic processing program updating means automatically updates the cryptographic processing program of the cryptographic processing means to the updated cryptographic processing program when the command received by the receiving means indicates updating of the cryptographic processing program. The encrypted data processing apparatus according to claim 1, wherein: The encrypted data processing apparatus according to claim 1, wherein the encryption processing unit includes a gate array circuit in which wiring can be rewritten. The encrypted data processing apparatus according to claim 1, further comprising notification means for notifying a user on the display screen that the key data has been input to the key data input means. 2. The encrypted data processing apparatus according to claim 1, wherein the receiving unit receives the encrypted data and the updated encryption processing program through an Internet line. The encrypted data processing apparatus according to claim 1, wherein the data receiving means receives the updated encryption processing program stored in a predetermined memory card via a memory card interface. The encryption processing means uses other key data different from the key data before and after the encryption processing circuit for decrypting the encrypted data using the key data input by the key data input means. 2. The encrypted data processing apparatus according to claim 1, wherein an exclusive OR circuit is connected. A receiving step for receiving the encrypted data and an updated cryptographic processing program for updating the cryptographic processing program of the cryptographic processing means for decrypting the encrypted data;
A cryptographic processing program update step for automatically updating the cryptographic processing program of the cryptographic processing means by reprogramming the cryptographic processing means using the updated cryptographic processing program received in the reception step;
The encryption processing means updated in the encryption processing program update step inputs a key data input step for inputting key data necessary for decrypting the encrypted data received in the reception step, and is input in the input step. Using the key data and the updated cryptographic processing program of the cryptographic processing means updated by the cryptographic processing program updating means, comprising: a cryptographic processing step for decrypting the encrypted data received by the reception step. An encrypted data processing method characterized by the above.

Images