JP2014090492A - Data processing apparatus, data processing system, and data processing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve an encryption technique for a data processing apparatus so as to decrease the possibility of communication being decrypted by a third person.SOLUTION: A data processing apparatus encrypts processing object data as encrypted data, and records the encrypted data in a predetermined recording medium. The apparatus also decrypts and returns the encrypted data recorded in the recording medium to the processing object data. Encryption is performed in units of plaintext segment data that is created by segmenting the processing object data by a prescribed number of bits. The numbers of bits of the plaintext segment data is varied, and dummy data having a size of a number of bits matching the largest number of bits is mixed into the plaintext segment data other than plaintext segment data having the largest number of bits among the plaintext segment data.

Description

  The present invention relates to a data processing apparatus capable of encrypting processing target data that is plain text and recording it as encrypted data on a predetermined recording medium, and decrypting the encrypted data read from the recording medium, and its application About.

  Now that the importance of information security is increasing, data that is not preferred to be known by a third party (in this specification, this is called “data to be processed”) is encrypted and recorded on a recording medium. The demand for such a data processing apparatus as described above is very large. Various encryption techniques have been proposed and put into practical use for concealing data to be processed, but it is difficult to completely prevent the decryption of the encryption.

In general, encryption of processing target data and recording on a predetermined recording medium are performed by cutting the processing target data into a predetermined number of bits, and encrypting data obtained by encrypting each of the cut data. It is performed by recording on a predetermined recording medium.
At this time, the data processing apparatus performs encryption or decryption processing in a fixed unit such as 8 bits or 16 bits.
Therefore, when such a unit is known to the outside, an algorithm and a key used for encryption are decrypted, and as a result, the content of communication is likely to be decrypted.
In addition, since existing data processing apparatuses perform encryption or decryption in standardized units such as 8 bits or 16 bits, encryption or decryption is performed in the same units as standardized units. In other data processing apparatuses, there is a possibility that an algorithm used for encryption or a key may be easily decrypted.

  The present invention includes two communication devices that can encrypt data to be processed in plain text and send it as encrypted data to a communication device on the other side, and decrypt the received encrypted data into data to be processed. An object of the present invention is to improve the data processing system so as to reduce the possibility of decryption of communication by a third party.

  In order to solve such a problem, the present inventor proposes the first to fifth inventions described below.

The data processing apparatus according to the first invention is as follows.
A data processing apparatus according to a first aspect of the invention is a means for encrypting processing target data, which is plain text, using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and the recording Means for decrypting encrypted data read out from a medium using an algorithm and a key used to encrypt the encrypted data to obtain data to be processed, the data processing device comprising: The data is cut into a plurality of plaintext cut data by a predetermined number of bits, and the encrypted data is cut into the same number of bits cut when the encrypted data is encrypted. The cutting means for making the encrypted cut data, and the plaintext cut data encrypted by a key and an algorithm that changes at a predetermined timing to encrypt the cut data And encryption / decryption means for decrypting the encrypted cut data into a plaintext cut data by decrypting the encrypted cut data with the key and algorithm used for encrypting the encrypted cut data, and the encryption / decryption The encrypted data obtained by collecting the encrypted cut data encrypted by the means is recorded on the recording medium, and the encrypted data recorded on the recording medium is read from and written to the recording medium. A connection means for connecting the plaintext cut data to the processing target data, and specific information for specifying the algorithm used when the processing target data is encrypted is associated with the encrypted data in advance. Specific information recording means for recording on the recording medium, wherein the cutting means converts the processing target data into the plaintext cut data. At least one is cut so as to have a different bit number from the other plaintext cut data, and the encryption / decryption means encrypts the encrypted cut data when decrypting it. The data processing apparatus is configured to read specific information associated with data from the specific information recording unit, and perform the decryption using a key and an algorithm specified based on the specific information.
In this data processing apparatus, when generating the plain text cut data by cutting the processing target data, since at least one of the plain text cut data has a different bit number from the other plain text cut data, a third party Unless you know what units the encrypted data is encrypted in, even if you know the algorithm and key used for encryption, It cannot be decrypted. In this data processing device, at least one of the plaintext cut data and the encrypted cut data can have a different number of bits from other plaintext cut data or encrypted cut data. In addition, since processing in units different from general data processing units of 8 bits or 16 bits is required for at least one plaintext cut data or encrypted cut data, it is difficult to analyze with a general computer It becomes.
Therefore, the encrypted communication in this data processing device is difficult to be decrypted by a third party.
The data processing apparatus according to the first aspect described above changes the algorithm, but may change the key. This also provides the same effect as described above.
For example, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used for encrypting the encrypted data into processing target data, the processing target data for each predetermined number of bits. Are cut into a plurality of plaintext cut data, and the encrypted data is cut into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. The plaintext cut data is encrypted with a cutting means and an algorithm and a key that changes at a predetermined timing to obtain encrypted cut data, and the encryption The encrypted data is encrypted by the key used when encrypting the encrypted data and the encryption / decryption means which is decrypted by the algorithm into plain text data, and encrypted by the encryption / decryption means. The encrypted data in which the encrypted cut data is collected is recorded on the recording medium, the read / write means for reading the encrypted data recorded on the recording medium from the recording medium, and the decrypted plaintext cut data Connection means for connecting to the processing target data and specific information for specifying the key used when the processing target data is encrypted are recorded on a predetermined recording medium in association with the encrypted data Specific information recording means, wherein the cutting means converts the processing object data into at least one of the plaintext cut data and other plaintext cut data. And the encryption / decryption means, when decrypting the encrypted cut data, specifies the specific information associated with the encrypted data. An example is a data processing device which is read from the information recording means, and performs the decryption by using an algorithm and a key specified based on the specific information.

The same effects as those of the first invention described above can also be obtained by the method exemplified below.
For example, a process of encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to form encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing apparatus encrypts the processing target data into a plurality of plaintext cut data by cutting the data to be processed into a plurality of plaintext cut data by a predetermined number of bits, and a key and an algorithm that changes at a predetermined timing. A process of obtaining encrypted cut data, a process of recording encrypted data in which the encrypted cut data is collected on the recording medium, and the processing pair. A process of recording specific information for specifying the algorithm used when data is encrypted in association with the encrypted data on a predetermined recording medium, and recording the encrypted data recorded on the recording medium. A process of reading from the medium, a process of cutting the encrypted data into a plurality of pieces of encrypted cut data by cutting into the same number of bits that were cut when the encrypted data was encrypted, and the encrypted cut Decrypting data into plaintext cut data by using the key and algorithm used to encrypt the encrypted cut data, and connecting the decrypted plaintext cut data to the processing target data The data processing apparatus converts the processing target data into a data in which at least one of the plaintext cut data is different from other plaintext cut data. When the encrypted cut data is decrypted, the specific information associated with the encrypted data is read from the predetermined recording medium, and the key and the specific information are A data processing method for performing the decoding by an identified algorithm.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing apparatus encrypts the processing target data into a plurality of plaintext cut data by cutting the data to be processed into a plurality of plaintext cut data by an algorithm and a key that changes at a predetermined timing. A process of obtaining encrypted cut data, a process of recording encrypted data in which the encrypted cut data is collected on the recording medium, and the processing pair. A process of recording specific information for specifying the key used when encrypting data in association with the encrypted data on a predetermined recording medium, and recording the encrypted data recorded on the recording medium A process of reading from the medium, a process of cutting the encrypted data into a plurality of pieces of encrypted cut data by cutting into the same number of bits that were cut when the encrypted data was encrypted, and the encrypted cut Decrypting data into plaintext cut data by using the key and algorithm used to encrypt the encrypted cut data, and connecting the decrypted plaintext cut data to the processing target data And the data processing device converts the data to be processed into a bit number in which at least one of the plaintext cut data is different from other plaintext cut data. And when decrypting the encrypted cut data, the specific information associated with the encrypted data is read from the predetermined recording medium, the algorithm, and the key specified based on the specific information A data processing method for performing the decoding according to the above.

The data processing apparatus according to the first invention can be as follows.
That is, means for encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used for encrypting the encrypted data into processing target data, the processing target data for each predetermined number of bits. Are cut into a plurality of plaintext cut data, and the encrypted data is cut into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. A cutting means, a solution generating means for sequentially generating a solution that is a pseudo-random number, and the plaintext cutting data is encrypted by a key and an algorithm generated based on the solution Encryption / decryption means that converts the encrypted cut data into plaintext cut data by decrypting the encrypted cut data with the key and algorithm used as the encrypted cut data; Read / write means for recording the encrypted data in which the encrypted cut data encrypted by the encryption / decryption means are collected on the recording medium and reading the encrypted data recorded on the recording medium from the recording medium And connection means for connecting the decrypted plaintext cut data to the processing target data, and specifying information for specifying the algorithm used when the processing target data is encrypted is encrypted. Specific information recording means for recording on a predetermined recording medium in association with the data, and the cutting means At least one of the sentence cut data is cut so as to have a different number of bits from the other plain text cut data, and the encryption / decryption means, when decrypting the encrypted cut data, The data processing apparatus is configured to read specific information associated with the encrypted data from the specific information recording unit, and perform the decryption using a key and an algorithm specified based on the specific information.
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used for encrypting the encrypted data into processing target data, the processing target data for each predetermined number of bits. Are cut into a plurality of plaintext cut data, and the encrypted data is cut into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. Cutting means, solution generating means for sequentially generating a solution that is a pseudo-random number, and encrypting the plaintext cut data with an algorithm and a key generated based on the solution Encrypted and decrypted data, and encryption / decryption means for decrypting the encrypted disconnected data into the plaintext disconnected data by decrypting the encrypted disconnected data with the key and algorithm used for encrypting the encrypted disconnected data, Read / write means for recording the encrypted data in which the encrypted cut data encrypted by the encryption / decryption means are collected on the recording medium and reading the encrypted data recorded on the recording medium from the recording medium And connection means for connecting the decrypted plaintext cut data to the processing target data, and specifying information for specifying the key used when the processing target data is encrypted is encrypted. Specific information recording means for recording on a predetermined recording medium in association with data, wherein the cutting means converts the processing target data into the plaintext cutting At least one of the data is cut so as to have a different bit number from the other plaintext cut data, and the encryption / decryption means, when decrypting the encrypted cut data, The data processing apparatus is configured to read specific information associated with encrypted data from the specific information recording means, and perform the decryption using an algorithm and a key specified based on the specific information.
Since these data processing apparatuses generate an algorithm or a solution using a solution that is a pseudo-random number, it is difficult to analyze the algorithm or the solution, and as a result, there is a possibility that the encryption is decrypted. It will be low.

Effects similar to those of the two inventions described immediately above can also be obtained by the method exemplified below.
For example, a process of encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to form encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing apparatus sequentially generates a solution that is a pseudo-random number, cuts the processing target data into a plurality of plaintext cut data for each predetermined number of bits, and converts the plaintext cut data into a key And a process of encrypting the encrypted cut data by the algorithm generated based on the solution and the encrypted cut data, A process of recording on a recording medium, a process of recording specific information for specifying the algorithm used when encrypting the processing target data on a predetermined recording medium in association with the encrypted data, and the recording A process of reading encrypted data recorded on a medium from the recording medium, and a plurality of encryptions by cutting the encrypted data by the same number of bits that was cut when the encrypted data was encrypted A process of converting into the cut data, a process of decrypting the encrypted cut data with the key and algorithm used to encrypt the encrypted cut data into the plain text cut data, and the decrypted plain text cut Connecting the data to the processing target data, and the data processing device reduces the processing target data to a smaller amount of the plaintext cut data. In addition, one is cut so that the number of bits is different from that of the other plaintext cut data, and when decrypting the encrypted cut data, the specific information associated with the encrypted data is This is a data processing method in which the decryption is performed by an algorithm specified based on a key and its identification information.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device sequentially generates a solution that is a pseudo-random number, cuts the processing target data into a plurality of plaintext cut data for each predetermined number of bits, and converts the plaintext cut data to an algorithm. , And a process of encrypting with the key generated based on the solution to obtain encrypted cut data, and encrypted data including the encrypted cut data A process of recording on a recording medium, a process of recording specific information for specifying the key used when encrypting the processing target data on a predetermined recording medium in association with the encrypted data, and the recording A process of reading encrypted data recorded on a medium from the recording medium, and a plurality of encryptions by cutting the encrypted data by the same number of bits that was cut when the encrypted data was encrypted A process of converting into the cut data, a process of decrypting the encrypted cut data with the key and algorithm used to encrypt the encrypted cut data into the plain text cut data, and the decrypted plain text cut Connecting the data to the processing target data, and the data processing device is configured to convert the processing target data into at least one of the plaintext cut data. When the encrypted cut data is decrypted, the specific information associated with the encrypted data is read from the predetermined recording medium when the encrypted cut data is decrypted. This is a data processing method in which the decryption is performed using a key specified based on the reading, the algorithm, and the specific information.

  According to a first aspect of the present invention, there is provided a data processing device including all of the plaintext cut data bits by including dummy data not related to the processing target data in the plaintext cut data except for the data having the largest number of bits. Mixing means for matching the number to the number of bits of the plaintext cut data having the largest number of bits may be provided. In this way, since the number of bits of the plaintext cut data or the encrypted cut data which are the units of encryption or decryption in the data processing device all match, it becomes easy to perform the encryption / decryption processing. On the other hand, since the third party does not know which data is the original plaintext cut data or encrypted cut data, and which data is dummy data, the possibility of decryption remains low. .

The data processing apparatus according to the second invention can be as follows.
That is, means for encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used for encrypting the encrypted data into processing target data, the processing target data for each predetermined number of bits. Are cut into a plurality of plaintext cut data, and the encrypted data is cut into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. The plaintext cut data is encrypted with a key and an algorithm that changes at a predetermined timing to obtain encrypted cut data, and the encrypted cut data The data is decrypted by the key and algorithm used when encrypting the encrypted cut data and converted into plain text cut data, and the encryption or the decryption is performed for each reference number of bits. The encryption / decryption means configured as described above and the encrypted data obtained by collecting the encrypted cut data encrypted by the encryption / decryption means are recorded on the recording medium and recorded on the recording medium. Read / write means for reading out the encrypted data from the recording medium, connection means for connecting the decrypted plaintext cut data to the processing target data, and used when the processing target data is encrypted Specific information recording means for recording specific information for specifying the algorithm in association with the encrypted data on a predetermined recording medium, and The cutting means is configured to cut the processing target data into a bit number shorter than the reference bit number, and by including dummy data unrelated to the processing target data in the plaintext cut data. And mixing means for matching the number of bits of the plaintext cut data with the reference bit number, and the encryption / decryption means associates the encrypted cut data with the encrypted data when decrypting the encrypted cut data The data processing apparatus is configured to read the specified information from the specified information recording means and perform the decryption by a key and an algorithm specified based on the specified information.
The cutting means in this data processing device cuts the data to be processed into a bit number shorter than the reference bit number. This reference bit number is, for example, 8 bits or 16 bits, which is the same as a general data processing unit. can do. In this way, when decryption is attempted, processing in a processing unit different from a general data processing unit of 8 bits or 16 bits is performed with at least one plaintext cut data or encrypted cut data. Since it becomes necessary, it becomes difficult to perform analysis on a general computer. In addition, the data processing device includes a mixing unit that includes dummy data that is not related to the processing target data in the plain text cut data so that the plain text cut data matches the reference bit number. As a result, this data processing apparatus can perform encryption / decryption processing in units of processing performed by a general computer, so that the hardware configuration does not have to be changed from the conventional one. Become. On the other hand, since the third party does not know which data is the original plaintext cut data or the encrypted cut data and which data is the dummy data, the possibility of decryption remains low.
The data processing apparatus described above changes the algorithm, but may change the key.
For example, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used for encrypting the encrypted data into processing target data, the processing target data for each predetermined number of bits. Are cut into a plurality of plaintext cut data, and the encrypted data is cut into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. The plaintext cut data is encrypted with a cutting means and an algorithm and a key that changes at a predetermined timing to obtain encrypted cut data, and the encryption The decrypted data is decrypted by the key used when encrypting the encrypted cut data and the algorithm to obtain plain text cut data, and the encryption or decryption is performed for each reference bit number serving as a reference. The encryption / decryption means adapted to perform and the encrypted data obtained by collecting the encrypted cut data encrypted by the encryption / decryption means are recorded on the recording medium and recorded on the recording medium. Used when reading and writing recorded encrypted data from the recording medium, connecting means for connecting the decrypted plaintext cut data to the processing target data, and encrypting the processing target data Specific information recording means for recording the specific information for specifying the given key on a predetermined recording medium in association with the encrypted data. Is configured to cut the processing target data into a bit number shorter than the reference bit number, and including the dummy data not related to the processing target data in the plaintext cut data, Mixing means for matching the number of bits of the plaintext cut data with the reference bit number, and the encryption / decryption means is associated with the encrypted data when decrypting the encrypted cut data An example is a data processing device that reads specific information from the specific information recording means, and performs the decryption using an algorithm and a key specified based on the specific information.

The effects of the data processing apparatus according to the second invention can also be obtained by the method exemplified below.
For example, a process of encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to form encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device is configured to cut the processing target data into a plurality of plaintext cut data by cutting the data to be processed by a predetermined number of bits, and to determine the plaintext cut data based on a key and an algorithm that changes at a predetermined timing. A process of encrypting each reference bit number to obtain encrypted cut data, and encrypted data obtained by collecting the encrypted cut data on the recording medium. A process of recording, a process of recording specific information for specifying the algorithm used when encrypting the processing target data in association with the encrypted data on a predetermined recording medium, and recording on the recording medium Reading the encrypted data from the recording medium, and cutting the encrypted data into a plurality of encrypted cut data by cutting the same encrypted data every bit number that was cut when the encrypted data was encrypted. Decrypting the encrypted cut data into the plaintext cut data by decrypting the encrypted cut data for each reference bit number according to the key and algorithm used for encrypting the encrypted cut data, Connecting the plaintext cut data to the processing target data, and the data processing device determines the processing target data according to the reference bit number. The number of bits of the plaintext cut data is matched with the reference number of bits by including dummy data unrelated to the processing target data in the plaintext cut data. When the encrypted cut data is decrypted, the specific information associated with the encrypted data is read from the predetermined recording medium, and the key is decrypted by the algorithm specified based on the specific information. This is a data processing method.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing apparatus is configured to cut the processing target data into a plurality of plaintext cut data by cutting the data to be processed by a predetermined number of bits, and to determine the plaintext cut data based on an algorithm and a key that changes at a predetermined timing. A process of encrypting each reference bit number to obtain encrypted cut data, and encrypted data obtained by collecting the encrypted cut data on the recording medium. A process of recording, a process of recording specific information for specifying the key used when encrypting the processing target data in association with the encrypted data on a predetermined recording medium, and recording on the recording medium Reading the encrypted data from the recording medium, and cutting the encrypted data into a plurality of encrypted cut data by cutting the same encrypted data every bit number that was cut when the encrypted data was encrypted. Decrypting the encrypted cut data into the plaintext cut data by decrypting the encrypted cut data for each reference bit number according to the key and algorithm used for encrypting the encrypted cut data, Connecting the plaintext cut data to the processing target data, and the data processing device converts the processing target data to a bit shorter than the reference bit number. And including the dummy data not related to the processing target data in the plaintext cut data to match the number of bits of the plaintext cut data with the reference bit number, When decrypting the encrypted cut data, the specific information associated with the encrypted data is read from the predetermined recording medium, and the decryption is performed using an algorithm and a key specified based on the specific information. That is the data processing method.

The data processing apparatus of the second invention can be as follows.
That is, means for encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used for encrypting the encrypted data into processing target data, the processing target data for each predetermined number of bits. Are cut into a plurality of plaintext cut data, and the encrypted data is cut into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. A cutting means, a solution generating means for sequentially generating a solution that is a pseudo-random number, and the plaintext cutting data is encrypted by a key and an algorithm generated based on the solution The encoded cut data, and the encrypted cut data is decrypted by the key and algorithm used when encrypting the encrypted cut data into the plain text cut data, and the reference bit serving as a reference Encryption / decryption means adapted to perform the encryption or decryption for each number, and encrypted data obtained by collecting encrypted cut data encrypted by the encryption / decryption means, Reading and writing means for reading the encrypted data recorded on the recording medium from the recording medium, and connecting means for connecting the decrypted plaintext cut data to the processing target data. Specific information for specifying the algorithm used when encrypting the processing target data is associated with the encrypted data on a predetermined recording medium. Specific information recording means for recording, and mixing means for matching the number of bits of the plaintext cut data with the reference bit number by including dummy data unrelated to the processing target data in the plaintext cut data. The cutting means cuts the data to be processed into a bit number shorter than the reference bit number, and the encryption / decryption means decrypts the encrypted cut data. Data is read from the specific information recording means when the data is encrypted, and the decryption is performed by the key and an algorithm specified based on the specific information. It is a processing device.
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used for encrypting the encrypted data into processing target data, the processing target data for each predetermined number of bits. Are cut into a plurality of plaintext cut data, and the encrypted data is cut into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. Cutting means, solution generating means for sequentially generating a solution that is a pseudo-random number, and encrypting the plaintext cut data with an algorithm and a key generated based on the solution The encrypted cut data, the encrypted cut data is decrypted by the key and algorithm used to encrypt the encrypted cut data, and the plain cut data is obtained as a reference bit. Encryption / decryption means adapted to perform the encryption or decryption for each number, and encrypted data obtained by collecting encrypted cut data encrypted by the encryption / decryption means, Reading and writing means for reading the encrypted data recorded on the recording medium from the recording medium, and connecting means for connecting the decrypted plaintext cut data to the processing target data. Specific information for specifying the key used when the processing target data is encrypted is recorded on a predetermined recording medium in association with the encrypted data. Constant information recording means, and mixing means for matching the number of bits of the plaintext cut data with the reference bit number by including dummy data not related to the processing target data in the plaintext cut data. The cutting means cuts the data to be processed into a bit number shorter than the reference bit number, and the encryption / decryption means decrypts the encrypted cut data. In this case, the specific information associated with the encrypted data is read from the specific information recording means, and the decryption is performed with the algorithm and the key specified based on the specific information. It is.
Since these data processing apparatuses generate an algorithm or a solution using a solution that is a pseudo-random number, it is difficult to analyze the algorithm or the solution, and as a result, there is a possibility that the encryption is decrypted. It will be low.

The effects of the two second inventions described most recently can also be obtained, for example, by the following method.
For example, a process of encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to form encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing apparatus sequentially generates a solution that is a pseudo-random number, cuts the processing target data into a plurality of plaintext cut data for each predetermined number of bits, and converts the plaintext cut data into a key , And a process of encrypting each reference bit number as a reference by the algorithm generated based on the solution to obtain encrypted cut data, and the plaintext cut data, A process of matching the number of bits of the plaintext cut data with the reference bit number by including dummy data unrelated to the data to be processed, and encrypted data in which the encrypted cut data is collected, Recording on the predetermined recording medium in association with the encrypted data, the process for recording the specific information for specifying the algorithm used when the processing target data was encrypted, and the recording medium A process of reading recorded encrypted data from the recording medium, and a plurality of pieces of encrypted cut data by cutting the encrypted data by the same number of bits that was cut when the encrypted data was encrypted And the key used when encrypting the encrypted cut data and an algorithm for each reference bit number Encoding the plaintext cut data and connecting the decrypted plaintext cut data to the processing target data, and the data processing device includes the processing target data as the processing target data. At least one of the plaintext cut data has a bit number different from that of the other plaintext cut data so as to cut to a bit number shorter than the reference bit number, and decrypts the encrypted cut data In this case, the data processing method corresponds to a case where the specific information associated with the encrypted data is read from the predetermined recording medium and the decryption is performed by the key and the algorithm specified based on the specific information.
Also, a process for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to form encrypted data, a process for recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device sequentially generates a solution that is a pseudo-random number, cuts the processing target data into a plurality of plaintext cut data for each predetermined number of bits, and converts the plaintext cut data to an algorithm. , And a process of encrypting each reference bit number as a reference with the key generated based on the solution to obtain encrypted cut data, and the plaintext cut data, By including dummy data unrelated to the processing target data, the process of matching the number of bits of the plaintext cut data with the reference bit number, and the encrypted data obtained by collecting the encrypted cut data are stored in the recording medium. A process of recording, a process of recording specific information for specifying the key used when the processing target data is encrypted in association with the encrypted data, on a predetermined recording medium, and recording on the recording medium Reading the encrypted data from the recording medium, and cutting the encrypted data into a plurality of encrypted cut data by cutting the same encrypted data every bit number that was cut when the encrypted data was encrypted. And decrypting the encrypted cut data for each reference bit number using the algorithm and key used to encrypt the encrypted cut data. A step of connecting the decrypted plaintext cut data to the processing target data, and the data processing device converts the processing target data into the plaintext cut data. At least one has a bit number different from that of other plaintext cut data so that the bit number is shorter than the reference bit number, and when decrypting the encrypted cut data, This is a data processing method in which specific information associated with encrypted data is read from the predetermined recording medium, and the decryption is performed using an algorithm and a key specified based on the specific information.

The cutting means in the data processing device of the second invention may cut the processing target data into a fixed number of bits as long as the processing target data is cut shorter than the reference bit number. In addition, it may be cut into different numbers of bits. The former is easier to process, but the latter is less likely to be decrypted.
When the cutting means cuts the data to be processed into a certain number of bits shorter than the reference number of bits, the mixing means includes the dummy data at a specific position of the plaintext cut data. Alternatively, the dummy data may be included in a predetermined position that is different for each plaintext cut data. The former is easier to process, but the latter is less likely to be decrypted.

The solution generation means in the second invention may be configured to generate the solution each time the processing target data is encrypted or the encrypted data is decrypted, or the plaintext cut data The solution may be generated every time encryption or decryption of the encrypted cut data is performed.
When the second invention has a solution generating means, the mixing means in the second invention may be configured to determine the predetermined position including the dummy data based on the solution. The cutting means may cut the processing target data based on the solution so that at least one of the plaintext cut data has a different bit number from other plaintext cut data.

The third invention is as follows.
According to a third aspect of the present invention, there is provided means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and reading from the recording medium Means for decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data to make the data to be processed, and encrypting a plurality of data to be processed And a data processing device configured to decrypt the plurality of encrypted data in the same order as they were encrypted, and cuts the processing target data every predetermined number of bits. In addition to a plurality of plaintext cut data, the encrypted data is cut at the same number of bits as the encrypted data is cut when the encrypted data is encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions. A solution generating means for sequentially generating a new solution each time the processing is performed, and a first algorithm generating means for sequentially generating a new algorithm each time the processing target data is encrypted using the generated solution. Second algorithm generation means for sequentially generating the same new algorithm as that generated by the first algorithm generation means each time the encrypted data is decrypted using the obtained solution, and the plaintext cut data And encrypted cut data by encrypting with the algorithm generated by the first algorithm generating means, and the encrypted cut data The plaintext cut by decrypting the key used when encrypting the encrypted cut data and the same algorithm used when encrypting the encrypted data generated by the second algorithm generating means The encryption / decryption means for data and the encrypted data obtained by collecting the encrypted cut data encrypted by the encryption / decryption means are recorded on the recording medium and recorded on the recording medium. Read / write means for reading encrypted data from the recording medium, and connection means for connecting the decrypted plaintext cut data to the processing target data, wherein the cutting means includes the processing target data Data processing in which at least one of the plaintext cut data has a bit number different from that of the other plaintext cut data. Device.
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. A plurality of encrypted cut data obtained by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions and the cutting means that performs the processing. A solution generating means for sequentially generating a new solution each time, a first key generating means for sequentially generating a new key each time the data to be processed is encrypted using the generated solution, and a generated solution Second key generation means for generating the same new key as that generated by the first key generation means each time the encrypted data is decrypted by using the plaintext cut data, an algorithm, and An algorithm used when encrypting the encrypted cut data with the key generated by the first key generation means and encrypting the encrypted cut data, And encryption / decryption means for decrypting the encrypted data generated by the second key generation means with the same key used when encrypting the encrypted data into plaintext cut data, and the encryption / decryption Recording encrypted data, which is a collection of encrypted cut data encrypted by the encryption means, on the recording medium, and reading / writing means for reading the encrypted data recorded on the recording medium from the recording medium, and decryption And connecting means for connecting the plaintext cut data thus made into the processing target data, wherein the cutting means converts the processing target data into at least one of the plaintext cut data and other plaintext cut data. This is a data processing device which is designed to cut so as to have different numbers of bits.
The data processing device of the third invention is similar to the data processing device of the first invention, but unlike the data processing device of the first invention, specifies the algorithm or key used when encrypting the data to be processed. Therefore, specific information is not used. This is because the data processing device according to the third aspect of the invention encrypts a plurality of data to be processed into encrypted data, and decrypts the plurality of encrypted data in the same order as they are encrypted. It is related to what is being done.
The algorithm generating means and the key generating means in the data processing apparatus according to the third aspect of the invention each generate an algorithm or key each time the data to be processed is encrypted. In addition, the data processing apparatus according to the third aspect of the invention generates the same algorithm and key as used when encrypting when performing decryption.
Accordingly, in the data processing device according to the third aspect of the invention, the same algorithm or key as the algorithm or key generated in the past is sequentially generated, so that the plurality of encrypted data are the same as when they are encrypted. As long as decoding is performed in order, it is not necessary to use the specific information as described above.

The effect which the above-mentioned 3rd invention shows can be acquired also by the following methods, for example.
That is, a process of encrypting plaintext processing target data using a predetermined algorithm and a predetermined key to obtain encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. By substituting a past solution into a predetermined solution generation algorithm that can be performed, a process of sequentially generating new solutions each time the processing target data is encrypted, A first algorithm generating process for sequentially generating a new algorithm each time the processing target data is encrypted using the obtained solution, a key, and an algorithm generated by the first algorithm generating process Encrypting the encrypted cut data into encrypted cut data, recording the encrypted data including the encrypted cut data onto the recording medium, and encrypting the data recorded on the recording medium from the recording medium. A reading process; a second algorithm generation process for generating the same new algorithm that is sequentially generated in the first algorithm generation process each time the encrypted data is decrypted using the generated solution; Multiple encrypted cuts by cutting the encrypted data by the same number of bits that were cut when the encrypted data was encrypted And a key used when encrypting the encrypted cut data and the encrypted data generated by the second algorithm generation step are encrypted. A process of decrypting the plaintext cut data by the same algorithm as that used, and a process of connecting the decrypted plaintext cut data to the processing target data. A plurality of processing target data is encrypted to be encrypted data, and a plurality of the encrypted data are decrypted in the same order as they are encrypted, and the processing target data is at least the plaintext cut data One is a data processing method for cutting so that the number of bits is different from that of other plaintext cut data.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. A process of generating a new solution sequentially every time the data to be processed is encrypted by substituting a past solution into a predetermined solution generation algorithm A first key generation process that sequentially generates a new key each time the processing target data is encrypted using the obtained solution, and the plaintext cut data is generated by an algorithm and the first key generation process. A process of encrypting the encrypted cut data by using a key, a process of recording the encrypted data including the encrypted cut data on the recording medium, and the encrypted data recorded on the recording medium. And a second key generation process for generating the same new key as that generated in the first key generation process every time the encrypted data is decrypted using the generated solution, Cutting the encrypted data into a plurality of encrypted disconnected data by cutting the encrypted data into a plurality of encrypted disconnected data by the same number of bits that were disconnected when the encrypted data was encrypted; De And a process for decrypting the encrypted data generated by the second key generation process with the same key as that used for encrypting the data into plaintext cut data. And connecting the decrypted plaintext cut data to the processing target data, and the data processing device encrypts a plurality of processing target data into encrypted data, Decrypt a plurality of the encrypted data in the same order as they were encrypted, and cut the data to be processed so that at least one of the plaintext cut data has a different number of bits from the other plaintext cut data This is a data processing method.

The third invention can be as follows.
For example, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. A plurality of encrypted cut data obtained by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions and the cutting means that performs the processing. A first solution generating unit that sequentially generates a new solution each time, and a first algorithm that sequentially generates a new algorithm each time the processing target data is encrypted using the solution generated by the first solution generating unit. The encrypted data is decrypted by substituting the past solution into an algorithm generating means and a predetermined solution generating algorithm capable of generating a new solution by substituting at least one of the past solutions. The second solution generating means for generating the same new solution as that generated by the first solution generating means each time, and the encrypted data using the solution generated by the second solution generating means. Second algorithm generating means for generating the same new algorithm that is sequentially generated by the first algorithm generating means each time encoding is performed, and the plaintext cut data is generated by the key and the first algorithm generating means The encrypted cut data is encrypted into encrypted cut data, the encrypted cut data is encrypted with the key used when encrypting the encrypted cut data, and the encryption generated by the second algorithm generating means The encryption / decryption means that decrypts the plaintext cut data by the same algorithm used when encrypting the encrypted data and the encrypted cut data encrypted by the encryption / decryption means are combined. The encrypted data recorded on the recording medium, and the encrypted data recorded on the recording medium Read / write means for reading from the recording medium, and connection means for connecting the decrypted plaintext cut data to the processing target data, wherein the cutting means converts the processing target data to the plaintext The data processing apparatus is configured to cut so that at least one of the cut data has a bit number different from that of other plain text cut data.
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. A plurality of encrypted cut data obtained by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions and the cutting means that performs the processing. A first solution generation unit that sequentially generates a new solution each time, and a first key that sequentially generates a new key each time the data to be processed is encrypted using the solution generated by the first solution generation unit The encrypted data is decrypted by substituting the past solution into a key generation means and a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions. Second solution generating means for generating the same new solution as that generated by the first solution generating means each time, and decryption of the encrypted data using the solution generated by the second solution generating means Every time you do A second key generation unit that generates the same new key as that generated by the first key generation unit; and the plaintext cut data is encrypted by an algorithm and a key generated by the first key generation unit. When encrypting the encrypted cut data, the algorithm used when encrypting the encrypted cut data, and the encrypted data generated by the second key generation means Encryption / decryption means for decrypting the plaintext cut data by using the same key as used in the above, and encrypted data obtained by collecting the encrypted cut data encrypted by the encryption / decryption means, Read / write means for reading the encrypted data recorded on the recording medium from the recording medium, and the decrypted plaintext cut data Connecting means for connecting to the processing target data, wherein the cutting means converts the processing target data so that at least one of the plaintext cut data has a different bit number from other plaintext cut data. A data processing device that is designed to be disconnected.
These data processing devices are different from the above-described two data processing devices in that the solution generation means is the first algorithm generation means, the second algorithm generation means, or the first key generation means and the second key generation means, respectively. There are two points corresponding to. Even if it does in this way, the effect similar to the two data processing apparatuses shown previously can be acquired.

The effects of the two most recent data processing apparatuses can be obtained by, for example, the following two data processing methods.
That is, a process of encrypting plaintext processing target data using a predetermined algorithm and a predetermined key to obtain encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. A first solution generation step of sequentially generating a new solution each time the data to be processed is encrypted by substituting a past solution into a predetermined solution generation algorithm A first algorithm generation step of sequentially generating a new algorithm each time the processing target data is encrypted using the solution generated in the first solution generation step, the plaintext cut data, the key, and the A process of encrypting the encrypted cut data by the algorithm generated in the first algorithm generation process, a process of recording the encrypted data in which the encrypted cut data is collected on the recording medium, and a recording on the recording medium Substituting the past solution into a predetermined solution generation algorithm capable of generating a new solution by substituting at least one of the past solutions, and reading the encrypted data from the recording medium, A second solution generation step of generating the same new solution as that generated in the first solution generation step each time the encrypted data is decrypted; A second algorithm generation process for generating the same new algorithm as that generated in the first algorithm generation process each time the encrypted data is decrypted using the solution generated in the second solution generation process Cutting the encrypted data into a plurality of encrypted disconnected data by cutting the encrypted data into the plurality of encrypted disconnected data by the same number of bits that were disconnected when the encrypted data was encrypted; The key used for encrypting the encrypted cut data and the plaintext cut data by decrypting the encrypted data generated by the second algorithm generation process using the same algorithm as used for encrypting the encrypted data. And the process of connecting the decrypted plaintext cut data to the processing target data, and the data processing device includes a plurality of processes. The target data is encrypted to be encrypted data, and a plurality of the encrypted data are decrypted in the same order as they are encrypted, and the processing target data is converted into at least one of the plaintext cut data other than This is a data processing method that cuts the number of bits different from that of the plaintext cut data.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. By substituting a past solution into a predetermined solution generation algorithm that can be generated, a first solution generation overrun is generated each time the processing target data is encrypted. A first key generation process that sequentially generates a new key each time the processing target data is encrypted using the solution generated in the first solution generation process, the plaintext cut data, an algorithm, and Encrypting with the key generated in the first key generation process to obtain encrypted cut data, recording encrypted data including the encrypted cut data on the recording medium, and recording on the recording medium By reading the recorded encrypted data from the recording medium and substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions Each time the encrypted data is decrypted, a second solution generation process for generating the same new solution as that generated in the first solution generation process, and a second solution generation process. A second key generation process for generating the same new key as that generated in the first key generation process each time the encrypted data is decrypted using the obtained solution; and Cutting the same number of bits as when the encrypted data was encrypted into a plurality of encrypted disconnected data, and encrypting the encrypted disconnected data into the encrypted disconnected data The algorithm used, and the process of decrypting the encrypted data generated by the second key generation process with the same key as used to encrypt the plaintext cut data, and the decrypted data Connecting the plaintext cut data to the processing target data, and the data processing device encrypts a plurality of processing target data into encrypted data and a plurality of the encrypted data. A data processing method, wherein data is decrypted in the same order as they were encrypted, and the processing target data is cut so that at least one of the plaintext cut data has a different bit number from other plaintext cut data It is.

The fourth invention is as follows.
That is, means for encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. In addition to cutting data, the encrypted data is cut into the same number of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions. Solution generating means for sequentially generating a new solution each time, first algorithm generating means for sequentially generating a new algorithm each time the data to be processed is encrypted using the generated solution, and the generated solution Second algorithm generating means for generating the same new algorithm as that generated by the first algorithm generating means each time the encrypted data is decrypted by using the plaintext cut data, the key, and The encrypted cut data is encrypted by the algorithm generated by the first algorithm generating means, and the encrypted cut data is The plaintext cut data decrypted by the same algorithm used when encrypting the encrypted data generated by the second algorithm generating means and the key used when encrypting the encoded cut data And encryption / decryption means for performing encryption or decryption for each reference number of reference bits, and encryption encrypted by the encryption / decryption means The encrypted data in which the cut data is collected is recorded on the recording medium, and the read / write means for reading the encrypted data recorded on the recording medium from the recording medium is connected to the decrypted plaintext cut data. Connecting means for making the data to be processed, the cutting means cutting the data to be processed into a bit number shorter than the reference bit number. And a mixing means for matching the number of bits of the plaintext cut data with the reference bit number by including dummy data unrelated to the processing target data in the plaintext cut data. It is a data processing device.
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. A plurality of encrypted cut data obtained by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions and the cutting means that performs the processing. A solution generating means for sequentially generating a new solution each time, a first key generating means for sequentially generating a new key each time the data to be processed is encrypted using the generated solution, and a generated solution Second key generation means for generating the same new key as that generated by the first key generation means each time the encrypted data is decrypted by using the plaintext cut data, an algorithm, and An algorithm used when encrypting the encrypted cut data with the key generated by the first key generation means and encrypting the encrypted cut data, And decrypting the encrypted data generated by the second key generating means with the same key as that used to encrypt the plaintext cut data, for each reference bit number serving as a reference, Encryption data decrypted by encryption / decryption means adapted to perform encryption or decryption and encrypted cut data encrypted by the encryption / decryption means is recorded on the recording medium. And reading / writing means for reading the encrypted data recorded on the recording medium from the recording medium, and connecting means for connecting the decrypted plaintext cut data to the processing target data. The cutting means is configured to cut the processing target data into a bit number shorter than the reference bit number, and to the plaintext cutting data, the processing target data. The data processing apparatus includes a mixing unit that includes dummy data that is not related to the data to match the number of bits of the plaintext cut data with the reference number of bits.

The same effect as the above-described fourth invention can be obtained, for example, by the following method.
That is, a process of encrypting plaintext processing target data using a predetermined algorithm and a predetermined key to obtain encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. By substituting a past solution into a predetermined solution generation algorithm that can be performed, a process of sequentially generating new solutions each time the processing target data is encrypted, A first algorithm generation process that sequentially generates a new algorithm each time the processing target data is encrypted using the solution, and the plaintext cut data includes dummy data that is not related to the processing target data The process of matching the number of bits of the plaintext cut data with a reference bit number serving as a reference, and encrypting the plaintext cut data for each reference bit number by a key and an algorithm generated by the first algorithm generation step And converting the encrypted cut data into encrypted data, recording encrypted data into the recording medium, and reading encrypted data recorded on the recording medium from the recording medium And each time the encrypted data is decrypted using the generated solution, the first algorithm is generated in sequence. A second algorithm generation process for generating the same new algorithm as the one described above, and a plurality of encryption cuts by cutting the encrypted data into the same number of bits as the encrypted data was cut when the encrypted data was encrypted A process of making data, a key used when encrypting the encrypted cut data, and a key used when encrypting the encrypted data generated by the second algorithm generation process A process for decoding the reference bit number into the plain text cut data by the same algorithm as described above, and connecting the decrypted plain text cut data to the processing target data. The data processing apparatus encrypts a plurality of pieces of processing target data into encrypted data, and the plurality of pieces of encrypted data are the same as when they are encrypted. This is a data processing method that performs decoding in the same order and cuts the data to be processed into a bit number shorter than the reference bit number.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. A process of generating a new solution sequentially every time the data to be processed is encrypted by substituting a past solution into a predetermined solution generation algorithm A first key generation process that sequentially generates a new key each time the processing target data is encrypted using the obtained solution, and dummy data that is not related to the processing target data is included in the plaintext cut data Thus, the process of matching the number of bits of the plaintext cut data with the reference bit number serving as a reference, and the plaintext cut data are converted into the algorithm and the key generated by the first key generation process for each reference bit number. A process of encrypting the encrypted cut data, a process of recording the encrypted data including the encrypted cut data on the recording medium, and reading the encrypted data recorded on the recording medium from the recording medium And second key generation for generating the same new key as that generated in the first key generation step each time the encrypted data is decrypted using the generated solution Cutting the encrypted data into a plurality of encrypted cut data by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted; For each reference bit number, the algorithm used when encrypting the encrypted cut data and the same key used when encrypting the encrypted data generated by the second key generation process A process of decrypting the plaintext cut data and connecting the decrypted plaintext cut data to the processing target data, wherein the data processing apparatus encrypts a plurality of processing target data The encrypted data is converted into encrypted data, and the plurality of encrypted data are decrypted in the same order as they are encrypted, and the data to be processed is converted into a bit shorter than the reference bit number. This is a data processing method that cuts the number of packets.

  These data processing devices according to the fourth invention are similar to the data processing device according to the second invention. The difference is that the data processing apparatus according to the fourth invention does not have the specific information recording means. The reason why the data processing apparatus according to the fourth invention does not have the specific information recording means is the same as the reason why the third invention does not have it.

The fourth invention may also have two solution generation means as the third invention does. It is as follows.
Means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium Means for decrypting the encrypted data using the algorithm and key used to encrypt the data to be processed data, and encrypting the plurality of processed data into encrypted data. A data processing apparatus configured to decrypt the encrypted data in the same order as they are encrypted, and a plurality of plaintext cut data by cutting the processing target data every predetermined number of bits In addition, the encrypted data is cut into a plurality of pieces of encrypted cut data by cutting the same number of bits as the cut when the encrypted data is encrypted. Each time the data to be processed is encrypted by substituting the past solution into a predetermined solution generation algorithm capable of generating a new solution by substituting at least one of the past solution with the means First solution generation means for sequentially generating new solutions, and first algorithm generation for sequentially generating new algorithms each time the data to be processed is encrypted using the solutions generated by the first solution generation means Each time the encrypted data is decrypted by substituting the past solution into a predetermined solution generating algorithm capable of generating a new solution by substituting at least one of the past solutions A second solution generating unit that sequentially generates a new solution that is generated by the first solution generating unit; and a decryption of the encrypted data using the solution generated by the second solution generating unit. Second algorithm generating means for generating the same new algorithm as that generated by the first algorithm generating means each time, a plaintext cut data, a key, and an algorithm generated by the first algorithm generating means And encrypting the encrypted cut data into the encrypted cut data, the key used when encrypting the encrypted cut data, and the encrypted data generated by the second algorithm generating means The plaintext cut data is decrypted by the same algorithm used when encrypting, and the encryption / decryption is performed for each reference bit number serving as a reference. Encrypted data in which decryption means and encrypted cut data encrypted by the encryption / decryption means are collected Is connected to the read / write means for reading the encrypted data recorded on the recording medium from the recording medium and the decrypted plaintext cut data to form the processing target data. Connecting means, and the cutting means cuts the processing target data into a bit number shorter than the reference bit number, and the plaintext cut data includes the processing target data and Is a data processing apparatus comprising mixing means for including the irrelevant dummy data to match the number of bits of the plaintext cut data with the reference number of bits.
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. A plurality of encrypted cut data obtained by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions and the cutting means that performs the processing. A first solution generation unit that sequentially generates a new solution each time, and a first key that sequentially generates a new key each time the data to be processed is encrypted using the solution generated by the first solution generation unit The encrypted data is decrypted by substituting the past solution into a key generation means and a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions. Second solution generating means for generating the same new solution as that generated by the first solution generating means each time, and decryption of the encrypted data using the solution generated by the second solution generating means Every time you do A second key generation unit that generates the same new key as that generated by the first key generation unit; and the plaintext cut data is encrypted by an algorithm and a key generated by the first key generation unit. When encrypting the encrypted cut data, the algorithm used when encrypting the encrypted cut data, and the encrypted data generated by the second key generation means Encryption / decryption means for decrypting with the same key used in the above to obtain plain text cut data, and performing the encryption or decryption for each reference number of bits The encrypted data obtained by collecting the encrypted cut data encrypted by the encryption / decryption means is recorded on the recording medium and recorded on the recording medium. Read / write means for reading encrypted data from the recording medium, and connection means for connecting the decrypted plaintext cut data to the processing target data, wherein the cutting means includes the processing target data Is cut to a bit number shorter than the reference bit number, and the plaintext cut data includes dummy data that is not related to the processing target data, so that the number of bits of the plaintext cut data is Is a data processing device provided with mixing means for matching the number with the reference bit number.

The same effects as those of the two most recent data processing apparatuses can be obtained by the following method, for example.
That is, a process of encrypting plaintext processing target data using a predetermined algorithm and a predetermined key to obtain encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. A first solution generation step of sequentially generating a new solution each time the data to be processed is encrypted by substituting a past solution into a predetermined solution generation algorithm In the plaintext cut data, dummy data that is not related to the processing target data is included to match the number of bits of the plaintext cut data with a reference reference bit number, and in the first solution generation step, A first algorithm generation process that sequentially generates a new algorithm each time the processing target data is encrypted using the generated solution, and the plaintext cut data is generated by a key and the first algorithm generation process. And a process of encrypting the encrypted cut data into encrypted recording data, a process of recording the encrypted data including the encrypted cut data on the recording medium, and a recording medium recorded on the recording medium. A new solution can be generated by substituting at least one of the past solution and the process of reading the encrypted data from the recording medium. By substituting a past solution into a predetermined solution generation algorithm, a second solution that sequentially generates a new solution that is generated in the first solution generation process every time the encrypted data is decrypted. A new algorithm that is sequentially generated in the first algorithm generation process each time the encrypted data is decrypted using the generation process and the solution generated in the second solution generation process. Two algorithm generation steps, a step of cutting the encrypted data into a plurality of pieces of encrypted cut data by cutting the encrypted data into the same number of bits cut when the encrypted data is encrypted, and the encrypted cut The key used when encrypting the encrypted cut data and the same key used when encrypting the encrypted data generated by the second algorithm generation process. The data processing device includes a step of decrypting the data into the plaintext cut data by the algorithm and connecting the decrypted plaintext cut data to the processing target data. A plurality of processing target data is encrypted to be encrypted data, and a plurality of the encrypted data are decrypted in the same order as they are encrypted, and the processing target data is more than the reference number of bits. This is a data processing method that cuts to a short bit number.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. By substituting a past solution into a predetermined solution generation algorithm that can be generated, a first solution generation overrun is generated each time the processing target data is encrypted. A first key generation process that sequentially generates a new key each time the processing target data is encrypted using the solution generated in the first solution generation process, and the processing target is included in the plaintext cut data. By including dummy data not related to data, the process of matching the number of bits of the plaintext cut data with the reference number of bits as a reference, and the plaintext cut data are generated by an algorithm and the first key generation process A process of encrypting the encrypted cut data by encrypting each reference bit number with the key thus obtained, a process of recording the encrypted data including the encrypted cut data on the recording medium, and a recording medium recorded on the recording medium. A predetermined solution generation algorithm capable of generating a new solution by substituting at least one of the past solutions and a process of reading the encrypted data from the recording medium By substituting past solutions, a second solution generation process for generating the same new solution as that generated in the first solution generation process each time the encrypted data is decrypted, A second key generation process for generating the same new key as that generated in the first key generation process each time the encrypted data is decrypted using the solution generated in the solution generation process; A process of cutting the encrypted data into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted, and converting the encrypted cut data into the encrypted cut data And the plaintext that is decrypted for each reference bit number with the same key used when encrypting the encrypted data generated by the second key generation process and the algorithm used when encrypting Cutting data A process and a process of connecting the decrypted plaintext cut data to the processing target data, and the data processing device encrypts a plurality of processing target data into encrypted data. A data processing method in which a plurality of the encrypted data are decrypted in the same order as they are encrypted, and the processing target data is cut into a bit number shorter than the reference bit number.

The data processing apparatus according to the fourth aspect of the invention can be as follows.
That is, means for encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. In addition to cutting data, the encrypted data is cut into the same number of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions. Solution generating means for sequentially generating a new solution each time, first algorithm generating means for sequentially generating a new algorithm each time the data to be processed is encrypted using the generated solution, and the generated solution Second algorithm generating means for generating the same new algorithm as that generated by the first algorithm generating means each time the encrypted data is decrypted by using the plaintext cut data, the key, and The encrypted cut data is encrypted by the algorithm generated by the first algorithm generating means, and the encrypted cut data is The plaintext cut data decrypted by the same algorithm used when encrypting the encrypted data generated by the second algorithm generating means and the key used when encrypting the encoded cut data And encryption / decryption means for performing encryption or decryption for each reference number of reference bits, and encryption encrypted by the encryption / decryption means The encrypted data in which the cut data is collected is recorded on the recording medium, and the read / write means for reading the encrypted data recorded on the recording medium from the recording medium is connected to the decrypted plaintext cut data. Connecting means for converting the processing target data into the processing target data, wherein the disconnecting means converts the processing target data into at least one of the processing target data. The number of bits different from that of the processing target data is cut so that the number of bits is shorter than the reference number of bits, and the plaintext cut data is dummy data that is not related to the processing target data. The data processing apparatus is provided with mixing means for matching the number of bits of the plaintext cut data with the reference number of bits by including
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. A plurality of encrypted cut data obtained by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions and the cutting means that performs the processing. A solution generating means for sequentially generating a new solution each time, a first key generating means for sequentially generating a new key each time the data to be processed is encrypted using the generated solution, and a generated solution Second key generation means for generating the same new key as that generated by the first key generation means each time the encrypted data is decrypted by using the plaintext cut data, an algorithm, and An algorithm used when encrypting the encrypted cut data with the key generated by the first key generation means and encrypting the encrypted cut data, And decrypting the encrypted data generated by the second key generating means with the same key as that used to encrypt the plaintext cut data, for each reference bit number serving as a reference, Encryption data decrypted by encryption / decryption means adapted to perform encryption or decryption and encrypted cut data encrypted by the encryption / decryption means is recorded on the recording medium. And reading / writing means for reading the encrypted data recorded on the recording medium from the recording medium, and connecting means for connecting the decrypted plaintext cut data to the processing target data. The cutting means uses the reference bit number so that at least one of the processing target data has a bit number different from that of the other processing target data. The number of bits of the plaintext cut data is set to the reference bit number by including dummy data unrelated to the processing target data in the plaintext cut data. A data processing apparatus comprising mixing means for matching.

The effects of the two most recent data processing apparatuses can also be obtained, for example, by the following method.
That is, a process of encrypting plaintext processing target data using a predetermined algorithm and a predetermined key to obtain encrypted data, a process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. By substituting a past solution into a predetermined solution generation algorithm that can be performed, a process of sequentially generating new solutions each time the processing target data is encrypted, A first algorithm generation process that sequentially generates a new algorithm each time the processing target data is encrypted using the solution, and the plaintext cut data includes dummy data that is not related to the processing target data The process of matching the number of bits of the plaintext cut data with a reference bit number serving as a reference, and encrypting the plaintext cut data for each reference bit number by a key and an algorithm generated by the first algorithm generation step And converting the encrypted cut data into encrypted data, recording encrypted data into the recording medium, and reading encrypted data recorded on the recording medium from the recording medium And each time the encrypted data is decrypted using the generated solution, the first algorithm is generated in sequence. A second algorithm generation process for generating the same new algorithm as the one described above, and a plurality of encryption cuts by cutting the encrypted data into the same number of bits as the encrypted data was cut when the encrypted data was encrypted A process of making data, a key used when encrypting the encrypted cut data, and a key used when encrypting the encrypted data generated by the second algorithm generation process A process for decoding the reference bit number into the plain text cut data by the same algorithm as described above, and connecting the decrypted plain text cut data to the processing target data. The data processing apparatus encrypts a plurality of pieces of processing target data into encrypted data, and the plurality of pieces of encrypted data are the same as when they are encrypted. The data to be processed is cut so that at least one of the plaintext cut data has a bit number different from that of the other plaintext cut data, so that the number of bits is shorter than the reference bit number. This is a data processing method.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. A process of generating a new solution sequentially every time the data to be processed is encrypted by substituting a past solution into a predetermined solution generation algorithm A first key generation process that sequentially generates a new key each time the processing target data is encrypted using the obtained solution, and dummy data that is not related to the processing target data is included in the plaintext cut data Thus, the process of matching the number of bits of the plaintext cut data with the reference bit number serving as a reference, and the plaintext cut data are converted into the algorithm and the key generated by the first key generation process for each reference bit number. A process of encrypting the encrypted cut data, a process of recording the encrypted data including the encrypted cut data on the recording medium, and reading the encrypted data recorded on the recording medium from the recording medium And second key generation for generating the same new key as that generated in the first key generation step each time the encrypted data is decrypted using the generated solution Cutting the encrypted data into a plurality of encrypted cut data by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted; For each reference bit number, the algorithm used when encrypting the encrypted cut data and the same key used when encrypting the encrypted data generated by the second key generation process A process of decrypting the plaintext cut data and connecting the decrypted plaintext cut data to the processing target data, wherein the data processing apparatus encrypts a plurality of processing target data And encrypting the encrypted data, decrypting the plurality of encrypted data in the same order as they were encrypted, and converting the processing target data to at least the plaintext cut data No. 1 is a data processing method in which one bit has a bit number different from that of other plaintext cut data and is cut to have a bit number shorter than the reference bit number.

The two most recent data processing apparatuses can be configured as follows including two solution generation means.
That is, means for encrypting data to be processed in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. In addition to cutting data, the encrypted data is cut into the same number of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions. A first solution generating unit that sequentially generates a new solution each time, and a first algorithm that sequentially generates a new algorithm each time the processing target data is encrypted using the solution generated by the first solution generating unit. The encrypted data is decrypted by substituting the past solution into an algorithm generating means and a predetermined solution generating algorithm capable of generating a new solution by substituting at least one of the past solutions. The second solution generating means for generating the same new solution as the first solution generating means each time, and the decryption of the encrypted data using the solution generated by the second solution generating means. Second algorithm generating means for generating the same new algorithm that is sequentially generated by the first algorithm generating means each time, and the plaintext cut data is generated by the key and the first algorithm generating means. The encrypted cut data is encrypted into encrypted cut data, the encrypted cut data is a key used when encrypting the encrypted cut data, and the encryption is generated by the second algorithm generating means A cipher that is decrypted into plaintext cut data by the same algorithm used when encrypting the data, and that performs the encryption or the decryption for each reference number of reference bits And encryption / decryption means, and a cipher that combines the encrypted cut data encrypted by the encryption / decryption means Recording data on the recording medium and connecting the read / write means for reading the encrypted data recorded on the recording medium from the recording medium and the decrypted plaintext cut data to the processing target data Connecting means for performing the processing, wherein the disconnecting means sets the processing target data so that at least one of the processing target data has a bit number different from that of the other processing target data. The number of bits of the plaintext cut data is matched with the reference number of bits by including dummy data unrelated to the processing target data in the plaintext cut data. It is a data processing apparatus provided with the mixing means to make it.
Alternatively, means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium And a means for decrypting the encrypted data using the algorithm and key used to encrypt the encrypted data to process target data, and encrypting a plurality of processing target data into encrypted data, A data processing apparatus configured to decrypt a plurality of the encrypted data in the same order as they are encrypted, wherein the processing target data is cut into a plurality of plaintexts every predetermined number of bits. A plurality of encrypted cut data obtained by cutting the encrypted data into the same number of bits that were cut when the encrypted data was encrypted. The processing target data is encrypted by substituting the past solution into a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions and the cutting means that performs the processing. A first solution generation unit that sequentially generates a new solution each time, and a first key that sequentially generates a new key each time the data to be processed is encrypted using the solution generated by the first solution generation unit The encrypted data is decrypted by substituting the past solution into a key generation means and a predetermined solution generation algorithm that can generate a new solution by substituting at least one of the past solutions. Second solution generating means for generating the same new solution as that generated by the first solution generating means each time, and decryption of the encrypted data using the solution generated by the second solution generating means Every time you do A second key generation unit that generates the same new key as that generated by the first key generation unit; and the plaintext cut data is encrypted by an algorithm and a key generated by the first key generation unit. When encrypting the encrypted cut data, the algorithm used when encrypting the encrypted cut data, and the encrypted data generated by the second key generation means Encryption / decryption means for decrypting with the same key used in the above to obtain plain text cut data, and performing the encryption or decryption for each reference number of bits The encrypted data obtained by collecting the encrypted cut data encrypted by the encryption / decryption means is recorded on the recording medium and recorded on the recording medium. Read / write means for reading encrypted data from the recording medium, and connection means for connecting the decrypted plaintext cut data to the processing target data, wherein the cutting means includes the processing target data Is cut into a bit number shorter than the reference bit number so that at least one of the processing target data has a bit number different from that of the other processing target data. The data processing apparatus includes a mixing unit that includes dummy data that is not related to the processing target data to match the number of bits of the plaintext cut data with the reference number of bits.

The effects of the two most recent data processing apparatuses can also be obtained by the following method, for example.
A process of encrypting plain data to be processed using a predetermined algorithm and a predetermined key to obtain encrypted data, a process of recording the encrypted data on a predetermined recording medium, and an encryption read from the recording medium A data processing method executed by a data processing apparatus that executes a process of decrypting encrypted data using the algorithm and key used when encrypting the encrypted data into processing target data, A data processing device that generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by cutting each predetermined number of bits Substituting the past solution into the solution generation algorithm, a first solution generation step of sequentially generating a new solution every time the data to be processed is encrypted, By including dummy data unrelated to the processing target data in the plaintext cut data, the plaintext cut data is generated in the first solution generation process and the process of matching the number of bits of the plaintext cut data with the reference reference bit number A first algorithm generating process for sequentially generating a new algorithm each time the processing target data is encrypted using the obtained solution, a key, and an algorithm generated by the first algorithm generating process Encrypting each reference bit number into encrypted cut data, recording encrypted data including the encrypted cut data on the recording medium, and encryption recorded on the recording medium A process for reading data from the recording medium and a predetermined solution that can generate a new solution by substituting at least one of the past solutions A second solution generation process that generates the same new solution that is sequentially generated in the first solution generation process every time the encrypted data is decrypted by substituting a past solution into the solution generation algorithm And a second algorithm for generating the same new algorithm that is sequentially generated in the first algorithm generation step each time the encrypted data is decrypted using the solution generated in the second solution generation step A step of generating, a step of cutting the encrypted data into a plurality of pieces of encrypted cut data by cutting into the same number of bits that were cut when the encrypted data was encrypted, and The same key used when encrypting the encrypted cut data and the same algorithm used when encrypting the encrypted data generated by the second algorithm generation process The data processing device includes a step of decoding the plaintext cut data into the plaintext cut data for each reference bit number and a step of connecting the decrypted plaintext cut data to the processing target data. A plurality of processing target data is encrypted to be encrypted data, and a plurality of the encrypted data are decrypted in the same order as they are encrypted, and the processing target data is at least the plaintext cut data In this data processing method, one bit has a bit number different from that of the other plaintext cut data, and the bit number is shorter than the reference bit number.
Alternatively, the process target data which is plaintext is encrypted using a predetermined algorithm and a predetermined key to be encrypted data, the process of recording the encrypted data on a predetermined recording medium, and reading from the recording medium A data processing method to be executed by a data processing apparatus that executes the process of decrypting the encrypted data using the algorithm and key used when encrypting the encrypted data into the processing target data The data processing device generates a new solution by substituting at least one of the past solutions and a process of cutting the processing target data into a plurality of plaintext cut data by a predetermined number of bits. By substituting a past solution into a predetermined solution generation algorithm that can be generated, a first solution generation overrun is generated each time the processing target data is encrypted. A first key generation process that sequentially generates a new key each time the processing target data is encrypted using the solution generated in the first solution generation process, and the processing target is included in the plaintext cut data. By including dummy data not related to data, the process of matching the number of bits of the plaintext cut data with the reference number of bits as a reference, and the plaintext cut data are generated by an algorithm and the first key generation process A process of encrypting the encrypted cut data by encrypting each reference bit number with the key thus obtained, a process of recording the encrypted data including the encrypted cut data on the recording medium, and a recording medium recorded on the recording medium. A predetermined solution generation algorithm capable of generating a new solution by substituting at least one of the past solutions and a process of reading the encrypted data from the recording medium By substituting past solutions, a second solution generation process for generating the same new solution as that generated in the first solution generation process each time the encrypted data is decrypted, A second key generation process for generating the same new key as that generated in the first key generation process each time the encrypted data is decrypted using the solution generated in the solution generation process; A process of cutting the encrypted data into a plurality of encrypted cut data by cutting the same number of bits as when the encrypted data was encrypted, and converting the encrypted cut data into the encrypted cut data And the plaintext that is decrypted for each reference bit number with the same key used when encrypting the encrypted data generated by the second key generation process and the algorithm used when encrypting Cutting data A process and a process of connecting the decrypted plaintext cut data to the processing target data, and the data processing device encrypts a plurality of processing target data into encrypted data. The plurality of encrypted data are decrypted in the same order as they are encrypted, and the processing target data is set so that at least one of the plaintext cut data has a different bit number from other plaintext cut data. A data processing method for cutting so that the number of bits is shorter than the reference number of bits.

  The third invention and the fourth invention can have various variations described in the first invention and the second invention, respectively.

The fifth invention is as follows.
According to a fifth aspect of the present invention, a plurality of first data processing devices, the same number of second data processing devices as the first data processing devices paired with each of the plurality of first data processing devices, and third data processing are provided. Communication is performed between the first data processing device and the second data processing device using encrypted data obtained by encrypting processing target data that is plaintext, and the second data processing device. The third data processing apparatus is a data processing system in which communication with processing target data is performed.
The data processing system includes a first device having the first data processing device, and a second device having the second data processing device and the third data processing device.
Further, both the first data processing device and the second data processing device in this data processing system cut the processing target data into a plurality of plaintext cut data by cutting each predetermined bit number, and the encrypted data Cutting means for cutting the same number of bits as when the encrypted data was encrypted into a plurality of encrypted disconnected data, the first data processing device and the first The solution generation means for sequentially generating solutions different from those of the other first data processing apparatus and the second data processing apparatus, which are common to the two data processing apparatuses, and the plaintext cut data are received from the solution generation means. Encrypted by an algorithm common to the first data processing device and the second data processing device generated based on the solution to obtain encrypted cut data, Encryption / decryption means for decrypting encrypted cut data by an algorithm used when encrypting the encrypted cut data to obtain plain text cut data, and connecting the decrypted plain text cut data to the process Connection means for making the target data, and transmission / reception means for transmitting and receiving the encrypted data are provided.
Further, the third data processing device in this data processing system is one of the data processing devices described in the first to fourth inventions, and the second data processing device is encrypted by the first data processing device. The data to be processed generated by decrypting the encrypted data is encrypted, the encrypted data is recorded on the recording medium, and the encrypted data read from the recording medium is decrypted to the second data processing apparatus. To send.
This data processing system is an application of the data processing apparatus described so far. Between the first device having the first data processing device and the second device having the second data processing device and the third data processing device, the first data processing device and the second data processing device are wireless, or It is designed to exchange data by wire. Therefore, the second data processing apparatus can record the processing target data received from a number of first data processing apparatuses in an encrypted state on the recording medium of the second data processing apparatus. It is an advantage of this data processing system that such one-to-many processing can be performed.

The figure which shows the whole structure of the data processing system in 1st Embodiment. The figure which shows the hardware constitutions of the 1st data processing apparatus contained in the data processing system shown in FIG. The block diagram which shows the structure of the communication apparatus contained in the 1st data processing apparatus shown in FIG. The block diagram which shows the structure of the encryption apparatus contained in the 1st data processing apparatus shown in FIG. The figure which shows the hardware constitutions of the 2nd data processing apparatus contained in the data processing system shown in FIG. The block diagram which shows the structure of the encryption apparatus contained in the 2nd data processing apparatus shown in FIG. The block diagram which shows the structure of the other encryption apparatus contained in the 2nd data processing apparatus shown in FIG. The block diagram which shows the structure of the communication apparatus contained in the 2nd data processing apparatus shown in FIG. 2 is a flowchart showing a flow of processing executed in the data processing system shown in FIG. 1. 10 is a flowchart showing the flow of processing executed in S110 shown in FIG. 10 is a flowchart showing the flow of processing executed in S130 shown in FIG. 10 is a flowchart showing the flow of processing executed in S140 shown in FIG. 10 is a flowchart showing the flow of processing executed in S150 shown in FIG. The figure which shows the hardware constitutions of the encryption apparatus contained in the data processor in 2nd Embodiment. The flowchart which shows the flow of the encryption process performed with the data processor in 2nd Embodiment. The flowchart which shows the flow of the decoding process performed with the data processor in 2nd Embodiment. The figure which shows the hardware constitutions of the encryption apparatus contained in the modification of the data processor by 2nd Embodiment.

  Hereinafter, preferred first and second embodiments of the present invention will be described in detail with reference to the drawings. In the description of the first embodiment and the second embodiment, common reference numerals are used in common portions, and redundant descriptions are omitted.

<< First Embodiment >>
The data processing system according to this embodiment is schematically configured as shown in FIG.
The data processing system includes a plurality of first data processing devices 11 and one second data processing device 12 connected to each other via a network 13. In this embodiment, the network 13 is a LAN (Local Area Network).
The plurality of first data processing devices 11 and the second data processing device 12 perform encrypted communication with each other.
The network 13 may have other configurations as long as data exchange between the first data processing device 11 and the second data processing device 12 is possible.

  The configurations of the first data processing device 11 and the second data processing device 12 will be described. First, the configuration of the first data processing apparatus 11 will be described.

The hardware configuration of the first data processing device 11 is shown in FIG.
In this embodiment, the first data processing device 11 includes a central processing unit (CPU) 21, a read only memory (ROM) 22, a hard disk drive (HDD) 23, a random access memory (RAM) 24, an input device 25, a display. The apparatus 26, the encryption apparatus 27, the communication apparatus 28, and the bus 29 are included. The CPU 21, ROM 22, HDD 23, RAM 24, input device 25, display device 26, encryption device 27, and communication device 28 can exchange data via a bus 29.
The ROM 22 or the HDD 23 may include a predetermined program and predetermined data (this may include data to be processed, which is the case in the present embodiment. Includes data necessary for executing the above program). The CPU 21 controls the entire first data processing apparatus 11, and executes processes to be described later based on programs and data stored in the ROM 22 or the HDD 23. The RAM 24 is used as a working storage area when the CPU 21 performs processing.
The input device 25 includes a keyboard and a mouse, and is used for inputting commands and data. The display device 26 includes an LCD (liquid crystal display), a CRT (cathode ray tube), and the like, and is used to display commands, input data, processing status to be described later, and the like.
The encryption device 27 performs encryption of processing target data and decryption of encrypted data, which will be described later.
The communication device 28 performs communication with the second data processing device 12 via the network 13. Note that the communication device 28 of the second data processing device 12 performs communication with the first data processing device 11 via the network 13.

Next, the configuration of the communication device 28 will be described. FIG. 3 shows a block configuration diagram of the communication device 28.
The communication device 28 includes an interface unit 281, an authentication data generation unit 282, and a communication unit 283.
The interface unit 281 exchanges data between the bus 29 and the communication device 28. The interface unit 281 sends the encrypted data received from the bus 29 to the authentication data generation unit 282, and sends the encrypted data received from the communication unit 283 to the bus 29.
The authentication data generation unit 282 adds authentication data to, for example, a header of encrypted data to be transmitted when transmission of encrypted data to be described later to the second data processing device 12 is performed. The authentication data identifies the first data processing apparatus 11 that transmits the encrypted data. The authentication data is assigned to each first data processing device 11 by an administrator of the second data processing device 12 and is recorded in the ROM 22 or the HDD 23, for example. The authentication data generation unit 282 adds authentication data read from the ROM 22 or the HDD 23 to the encrypted data. As will be described later, the second data processing device 12 can grasp from which first data processing device 11 the encrypted data is sent based on the authentication data added to the received encrypted data. The authentication data generation unit 282 is configured to send encrypted data to which the authentication data is added to the communication unit 283. The communication unit 283 is configured to send the received encrypted data to the second data processing device 12.

Next, the configuration of the encryption device 27 will be described. FIG. 4 shows a block configuration diagram of the encryption device 27.
The encryption device 27 includes an interface unit 271, a preprocessing unit 272, an encryption / decryption unit 273, a solution generation unit 274, an algorithm generation unit 275, a key generation unit 276, and a connection unit 277.

The interface unit 271 exchanges data between the bus 29 and the communication device 28.
The interface unit 271 receives the processing target data from the HDDHH 23 via the bus 29 and the encrypted data from the communication unit 28 via the bus 29. The received processing target data or encrypted data is received from the communication unit 28 via the bus 29. Is sent to the pre-processing unit 272. Further, when the interface unit 271 receives the data to be processed or the encrypted data, the interface unit 271 sends data indicating that to the solution generation unit 274.
On the other hand, the interface unit 271 receives processing target data or encrypted data from the connection unit 277 and sends the received processing target data or encrypted data to the bus 29 as described later. Yes.

  The pre-processing unit 272 cuts the processing target data or encrypted data received from the bus 29 via the interface unit 271 for each predetermined number of bits, and generates plain text cut data or encrypted cut data. Is sent to the encryption / decryption unit 273. How to cut the data to be processed or the encrypted data will be described later. In this embodiment, the pre-processing unit 272 has a function of including dummy data, which is data unrelated to the processing target data, in the processing target data by a method described later.

  The encryption / decryption unit 273 receives the plaintext cut data or the encrypted cut data from the preprocessing unit 272, encrypts the plaintext cut data when it is received, and encrypts the cut data when it is received. Has a function of decrypting. Note that the encryption / decryption unit 273 in this embodiment has a fixed reference bit number as a processing unit when performing encryption and decryption processing. The reference bit number in this embodiment is 8 bits, although not limited thereto. Details of the encryption and decryption processing will be described later.

  The solution generation unit 274 sequentially generates solutions. The solution generated by the solution generation unit 274 of the first data processing device 11 is the same as the solution generated by the solution generation unit 274A of the second data processing device 12, which will be described later, in the same order. Has been. The solution in this embodiment is a pseudorandom number. The generated solution is sent to the preprocessing unit 272, the algorithm generation unit 275, and the key generation unit 276.

  The algorithm generation unit 275 generates an algorithm based on the solution received from the solution generation unit 274. This algorithm is used when the encryption / decryption unit 273 performs encryption processing and decryption processing.

  The key generation unit 276 generates a key based on the solution received from the solution generation unit 274. The key is used when the encryption / decryption unit 273 performs encryption processing and decryption processing.

  The connection unit 277 has a function of connecting plain text cut data generated by decrypting the encrypted cut data by the encryption / decryption unit 273 in the original order to make a set of data to be processed. Yes. The data to be processed is sent to the interface unit 271 and is sent to the HDD 23 or the CPU 21 via the bus 29 as necessary. The connection unit 277 also has a function of connecting encrypted cut data generated by encrypting the plaintext cut data by the encryption / decryption unit 273 to form a set of encrypted data. The encrypted data is sent to the interface unit 271, from there, sent to the communication unit 283 of the communication device 28 via the bus 29, and further sent from the communication unit 283 to the second data processing device 12. It has become. Note that the connecting unit 277 may not have a function of connecting encrypted cut data generated by encrypting plaintext cut data by the encryption / decryption unit 273. In this case, the encrypted cut data is sequentially sent to the counterpart communication device in the order of encryption. When the connection unit 277 is such, the encrypted cut data can be directly sent to the communication unit 283 without passing through the connection unit 277.

Next, the configuration of the second data processing device 12 will be described.
The hardware configuration of the second data processing device 12 is as shown in FIG.
The hardware configuration of the second data processing device 12 is basically the same as that of the first data processing device 11, but there are two types of encryption devices 27 that were one in the first data processing device 11, It differs from the first data processing device 11 in that an encryption device 27A and an encryption device 27B are provided instead of the encryption device 27.
The CPU 21, ROM 22, HDD 23, RAM 24, input device 25, display device 26, and bus 29 in the second data processing device 12 are the same as those in the first data processing device 11.

  Similar to the encryption device 27 in the first data processing device 11, the encryption device 27A and the encryption device 27B have functions of encrypting data to be processed and decrypting the encrypted data. Hereinafter, both configurations will be described in order.

The number of encryption devices 27 </ b> A is the same as the number of first data processing devices 11, and each of them is associated with one of the first data processing devices 11. That is, the encryption device 27A and the first data processing device 11 associated with each other can decrypt the encrypted data generated by the other party encrypting the processing target data. On the contrary, the encryption device 27A and the first data processing device 11 that are not associated with each other cannot decrypt the encrypted data generated by the other party encrypting the processing target data.
The encryption device 27A is configured as shown in FIG.
The encryption device 27A includes an interface unit 271A, a preprocessing unit 272A, an encryption / decryption unit 273A, a solution generation unit 274A, an algorithm generation unit 275A, a key generation unit 276A, and a connection unit 277A.
The interface unit 271A receives processing target data from the encryption device 27B via the bus 29 and encrypted data from the communication unit 28 via the bus 29. The encrypted data is sent to the preprocessing unit 272A. Further, when the interface unit 271A receives the processing target data or the encrypted data, the interface unit 271A sends data indicating that to the solution generation unit 274A.
On the other hand, as will be described later, the interface unit 271A receives processing target data or encrypted data from the connection unit 277A, and sends the received processing target data or encrypted data to the bus 29. Yes.
The pre-processing unit 272A cuts the processing target data or encrypted data received from the bus 29 via the interface unit 271A for each predetermined number of bits, and generates plain text cut data or encrypted cut data. Is sent to the encryption / decryption unit 273A. In this embodiment, the preprocessing unit 272A has a function of including dummy data, which is data unrelated to the processing target data, in the processing target data by a method described later.
The encryption / decryption unit 273A receives the plaintext cut data or the encrypted cut data from the preprocessing unit 272A, encrypts the plaintext cut data when it is received, and encrypts the cut data when it is received. Has a function of decrypting. In this embodiment, the encryption / decryption unit 273A has a fixed number of reference bits, which is a processing unit when performing encryption and decryption processing. The reference bit number in this embodiment is 8 bits, although not limited thereto. Details of the encryption and decryption processing will be described later.
The solution generation unit 274A sequentially generates solutions. The solution generated by the solution generator 274A is the same as the solution generated by the solution generator 274 of the first data processing device 11 and the solution generated in the same order. The generated solution is sent to the preprocessing unit 272A, the algorithm generation unit 275A, and the key generation unit 276A.
The algorithm generation unit 275A generates an algorithm based on the solution received from the solution generation unit 274A. This algorithm is used when the encryption / decryption unit 273A performs encryption processing and decryption processing. The algorithm generated by the algorithm generation unit 275A in the second data processing device 12 is the same as the algorithm generated in the same order by the algorithm generation unit 275 in the first data processing device 11.
Key generation unit 276A generates a key based on the solution received from solution generation unit 274A. The key is used when the encryption / decryption unit 273A performs encryption processing and decryption processing. The key generated by the key generation unit 276A in the second data processing device 12 is the same as the key generated in the same order by the key generation unit 276 in the first data processing device 11.
The function of the connection unit 277A in the second data processing device 12 is the same as that of the first data processing device 11. The connecting unit 277A generates processing target data by combining the plaintext cut data generated by the encryption / decryption unit 273A decrypting the encrypted cut data. This processing target data is sent to the encryption device 27B via the bus 29. The connection unit 277A also generates encrypted data by combining the encrypted cut data generated by the encryption / decryption unit 273A encrypting the plain text cut data. This encrypted data is sent to the first data processing device 11 via the communication device 28.

There is only one encryption device 27B.
The encryption device 27B has a function of re-encrypting the processing target data generated by the encryption device 27A decrypting the encrypted data generated by the first data processing device 11 by encrypting the processing target data. have. The encryption device 27B is configured to record the generated encrypted data in the HDD 23 in the second data processing device 12. The encryption device 27B has a function of decrypting the encrypted data read from the HDD 23.
The encryption device 27B is configured as shown in FIG.
The encryption device 27B includes an interface unit 271B, a preprocessing unit 272B, an encryption / decryption unit 273B, a solution generation unit 274B, an algorithm generation unit 275B, a key generation unit 276B, a connection unit 277B, and a specific information generation unit 278B. Composed.
The interface unit 271B of the encryption device 27B receives the data to be processed from the encryption device 27A via the bus 29 and the encrypted data from the HDD 23 in the second data processing device 12 via the bus 29. The received processing target data or encrypted data is sent to the preprocessing unit 272B. Further, when the interface unit 271B receives the data to be processed or the encrypted data, the interface unit 271B sends data indicating that to the solution generation unit 274B.
On the other hand, as will be described later, the interface unit 271B receives processing target data from the connection unit 277B in the encryption device 27B, and receives encrypted data from the specific information generation unit 278B. Data or encrypted data is sent to the bus 29.
The pre-processing unit 272B cuts the processing target data or encrypted data received from the bus 29 via the interface unit 271B for each predetermined number of bits, and generates plain text cut data or encrypted cut data. Is sent to the encryption / decryption unit 273B. In this embodiment, the preprocessing unit 272B has a function of including dummy data, which is data unrelated to the processing target data, in the processing target data by a method described later.
The encryption / decryption unit 273B receives the plaintext cut data or the encrypted cut data from the preprocessing unit 272B, encrypts the plaintext cut data when it is received, and encrypts the cut data when it is received. Has a function of decrypting. In this embodiment, the encryption / decryption unit 273B has a fixed number of reference bits, which is a processing unit when performing encryption and decryption processing. The reference bit number in this embodiment is 8 bits, although not limited thereto. Details of the encryption and decryption processing will be described later. Note that the encryption / decryption unit 273B performs decryption by using an algorithm and a key specified based on specific information to be described later.
The solution generator 274B sequentially generates solutions. The solution generated by the solution generator 274B is a pseudo random number. The generated solution is sent to the algorithm generation unit 275B and the key generation unit 276B, and is also sent to the preprocessing unit 272B in this embodiment.
The algorithm generation unit 275B generates an algorithm based on the solution received from the solution generation unit 274B. This algorithm is used when the encryption / decryption unit 273B performs encryption processing and decryption processing.
The key generation unit 276B generates a key based on the solution received from the solution generation unit 274B. The key is used when the encryption / decryption unit 273B performs encryption processing and decryption processing. The key generated by the key generation unit 276B in the second data processing device 12 is the same as the key generated in the same order by the key generation unit 276 in the first data processing device 11.
The connecting unit 277B in the second data processing device 12 has a function of generating processing target data by connecting plaintext cut data generated by the encryption / decryption unit 273B decrypting the encrypted cut data. This processing target data is sent to the encryption device 27A. The connection unit 277B also generates encrypted data by combining the encrypted cut data generated by the encryption / decryption unit 273B encrypting the plain text cut data. This encrypted data is recorded in the HDD 23 in the second data processing device 12.

The encryption device 27B includes a specific information generation unit 278B.
The specific information generation unit 278B adds specific information to the encrypted data generated by the connection unit 277B. This specific information is information for specifying the algorithm and key used when encrypting the encrypted data to which the specific information is added. Specifically, the algorithm itself used when encrypting the encrypted data, the key itself used when encrypting the encrypted data, and the algorithm or key used when encrypting the encrypted data Or the information used to indicate the order of the generated solution. In this embodiment, since both the algorithm and the key are changed, the specifying information specifies both the algorithm and the key, or the solution used to generate the algorithm and the key. Or the order in which the solutions were generated must be specified, but if only one of the algorithm and the solution changes, the specific information can only identify the algorithm and the solution that changes If it is.
In this embodiment, the specific information generation unit 278B adds the specific information to the encrypted data. However, the specific information is associated with the encrypted data in a place different from the encrypted data. It may be stored after being performed.

The configuration of the communication device 28 in the second data processing device 12 is substantially the same as the configuration of the communication device 28 in the first data processing device 11. The functions of the interface unit 281 and the communication unit 283 are the same as those in the communication device 28 of the first data processing device 11. The communication device 28 of the second data processing device 12 is different from the communication device 28 of the first data processing device 11 in that an authentication unit 284 is provided instead of the authentication data generation unit 282 in the first data processing device 11. .
The authentication unit 284 reads the authentication data included in the header in this embodiment of the encrypted data received from the first data processing device 11, and from which first data processing device 11 the encrypted data comes from. It is to judge whether there is. The encrypted data is sent via the interface unit 281 to the encryption device 27A associated with the first data processing device 11 that is the transmission source.

Next, the flow of processing performed in this data processing system will be described.
If it demonstrates roughly using FIG. 9, the flow of the process performed with this data processing system is as follows.
First, the encryption device 27 of the first data processing device 11 among the plurality of first data processing devices 11 encrypts the processing target data to generate encrypted data (S110).
Next, the first data processing device 11 sends the encrypted data to the second data processing device 12 (S120).
Next, among the plurality of encryption devices 27A in the second data processing device 12 that has received the encrypted data, the one associated with the first data processing device 11 that has sent the encrypted data is the encryption device. The encrypted data is decrypted and returned to the processing target data (S130).
Next, the decrypted data to be processed is encrypted by the encryption device 27B and recorded in the HDD 23 in the second data processing device 12 (S140).
Next, for example, in response to a request from the first data processing device 11, the encryption device 27B decrypts the encrypted data in the HDD 23 and returns it to the processing target data (S150).
Next, the processing target data is encrypted by the encryption device 27A into encrypted data (S160).
Next, the second data processing device 12 sends the encrypted data to the first data processing device (S170).
Next, the encrypted data is decrypted by the encryption device 27 in the first data processing device 11 and returned to the original data to be processed (S180).

  First, FIG. 10 illustrates the process of S110 described above in which the encryption device 27 of one first data processing device 11 among a plurality of first data processing devices 11 encrypts the processing target data to generate the encrypted data. The details will be described with reference to FIG.

First, processing target data is read (S1101). The processing target data may be any data that needs to be transmitted from the first data processing device 11 to the second data processing device 12. In this embodiment, it is assumed that the processing target data is recorded in the HDD 23. Data read into the first data processing device 11 from another recording medium such as an external recording medium may be the processing target data.
For example, when a command indicating that processing target data can be sent from the input device 25 to the second data processing device 12 is input, the CPU 21 reads the processing target data from the HDD 23 and temporarily records it in, for example, the RAM 24. This processing target data is sent from the HDD 23 to the encryption device 27 via the bus 29. More specifically, the processing target data is sent to the preprocessing unit 272 via the interface unit 271.

  In the preprocessing unit 272, the processing target data is cut into a plain text cut data every predetermined number of bits (S1102). The preprocessing unit 272 includes dummy data in the plain text cut data as necessary.

There may be one method for generating the plaintext cut data from the processing target data, but in this embodiment, the plaintext cut data is generated from the processing target data by any of the following three methods. ing.
A) The data to be processed is cut into a plaintext cut data by cutting it into a constant bit number shorter than the reference bit number, and all of the plaintext cut data whose bit number is shorter than the reference bit number When dummy data is included in the position B) The data to be processed is cut into a fixed number of bits shorter than the reference number of bits to obtain plain text cut data, and all of them are shortened in number of bits than the reference number of bits. C) When the dummy data is included at different positions of the plaintext cut data, the data to be processed is cut into the number of bits equal to or shorter than the reference bit number to obtain the plaintext cut data, and the data is less than the reference bit number. When dummy data is included in each plaintext cut data with a short number of bits

  Which of the three methods described above generates plaintext cut data from the processing target data is determined by the solution generated by the solution generation unit 274.

Therefore, how the solution generation unit 274 generates a solution will be described first.
When the interface unit 271 receives the processing target data from the bus 29, the solution generation unit 274 receives the information from the interface unit 271.
In response to this, the solution generation unit 274 starts generating the solution. In this embodiment, the solution generation unit 274 generates a solution each time processing target data is received by the interface unit 271. Although not limited to this, the solution in this embodiment is an 8 × 8 matrix (X).

The solution generation unit 274 does not necessarily have to be so, but in this embodiment, the solution is generated continuously as if it is a nonlinear transition. This solution results in a pseudorandom number.
In order to continuously generate solutions so as to make a non-linear transition, for example, (1) a solution generation process includes a calculation of a power of a past solution, and (2) a solution generation process includes the past 2 It is conceivable to include a method of multiplying two or more solutions or combining (1) and (2).

In this embodiment, the solution generator 274 has the 01st solution (X ₀₁ ) and the 02nd solution (X ₀₂ ) as predetermined initial matrices (for example, the 01st solution and the 02nd solution). Is recorded in a predetermined memory such as the HDD 23 or the ROM 22). The initial matrices of the first data processing devices 11 are different from each other. Therefore, the solutions generated in the first data processing devices 11 are different from each other.
Each of the plurality of encryption devices 27A in the second data processing device 12 has the same initial matrix as that of the first data processing device 11 associated with each encryption device 27A.

The solution generation unit 274 generates the first solution (X ₁ ) as follows by substituting this initial matrix into the solution generation algorithm.
First solution (X ₁ ) = X ₀₂ X ₀₁ + α (α = 8 × 8 matrix)
This is the first solution generated.
Next, when the interface unit 271 receives the processing target data from the bus 29, the solution generation unit 274 generates the second solution (X ₂ ) as follows.
Second solution (X ₂ ) = X ₁ X ₀₂ + α
Similarly, every time the interface unit 271 receives processing target data from the bus 29, the solution generation unit 274 generates the third solution, the fourth solution,..., The Nth solution as follows.
Third solution (X ₃ ) = X ₂ X ₁ + α
Fourth solution (X ₄ ) = X ₃ X ₂ + α
:
Nth solution (X _N ) = X _N−1 X _N−2 + α
The solution generated in this way is sent to the preprocessing unit 272, the algorithm generation unit 275, and the key generation unit 276 and is held by the solution generation unit 274. In this embodiment, in order to generate the Nth solution ( _XN ), the N-1th solution ( _XN-1 ) and the N-2th solution ( _XN-2 ) are generated immediately before that. Two other solutions are used. Therefore, when generating a new solution, the solution generation unit 274 must hold the last two solutions generated in the past (or any other person who is not the solution generation unit 274 needs to obtain these two solutions. Must be retained). Conversely, solutions older than the last two solutions generated in the past are not used in the future to generate new solutions. Therefore, in this embodiment, the two previous solutions are always held in the solution generation unit 274. However, the second solution up to that point, which has become the third most recent solution when a new solution is generated, is used. The solution that has been is deleted from a predetermined memory or the like in which the solution is recorded.
It should be noted that the solution generated in this way is chaotic with a non-linear transition and becomes a pseudo-random number.

In order to cause a nonlinear transition, the Nth solution (X _N ) = X _N−1 X _N−2 + α described above is obtained when the Nth solution is obtained.
In addition to using the following formula, it is conceivable to use the following formula.
For example,
(A) Nth solution (X _N ) = (X _N−1 ) ^P
(B) Nth solution (X _N ) = (X _N-1 ) ^P (X _N-2 ) ^Q (X _N-3 ) ^R (X _N-4 ) ^S
(C) Nth solution (X _N ) = (X _N−1 ) ^P + (X _N−2 ) ^Q
Etc.
P, Q, R, and S are predetermined constants. In addition, the solution generation unit 274 has two initial matrices when using the equation (a) or (c) and four initial matrices when using the equation (b).
Moreover, although α mentioned above was a constant, it can also be used as specific changing environment information. This environmental information is information that occurs naturally one after another over time, and can be acquired in common at distant locations. Information determined based on the contents of a television broadcast of a certain TV station, information determined based on the result of a specific sport, and the like.
If the above-mentioned α is created one after another from such environmental information and common information is generated, the confidentiality of communication can be further enhanced.
Of course, it is possible to add α (this may be generated from the environment information) to the right side of the mathematical expressions (a) to (c).

As described above, the preprocessing unit 272 that has received the solution (that is, the above-described solution) determines whether to generate the plain text cut data according to any of the above-described methods A), B), and C). . In this embodiment, the present invention is not limited to this, but the sum of the numbers constituting the 8-by-8 matrix that is the solution is divided by 3, and when the remainder is 0, the method of A) Plain text cut data is generated by the method B) when the remainder is 1, and by the method C) when the remainder is 2, respectively.
When the plain text cut data is generated by the method A), the preprocessing unit 272 sequentially processes the data to be processed received from the interface unit 271 from the top, and has a certain number of bits shorter than the reference number of bits (this embodiment) In this case, plain text cut data is generated by cutting at 7 bits). Further, the preprocessing unit 272 embeds dummy data at a fixed position of the plain text cut data. Note that the position in the plain text cut data in which the dummy data is embedded may be changed or may be fixed. In the latter case, the position where the dummy data is embedded can be, for example, the beginning or end of the plaintext cut data, or a predetermined intermediate position such as the second bit or the third bit. The dummy data may be any data as long as it is irrelevant to the processing target data. For example, a process of always embedding data of 0, embedding data of 1, or embedding data of 1 and 0 alternately is conceivable. As yet another example, it is possible to determine what dummy data is to be embedded based on the above solution. For example, the sum of the numbers that make up the 8-by-8 matrix, which is the solution, is divided by 9, and when the remainder is 0, 0, 0, 0, 0. In the case of 0, 1, 0, 1 ... every other 1 is inserted, and when the remainder is 2, 0, 0, 1, 0, 0, 1 ... every other 1 is inserted, Similarly, when the remainder is 3, every third is inserted, when the remainder is 4, every fourth,...
When the plain text cut data is generated by the method B), the preprocessing unit 272 cuts the processing target data into a fixed number of bits (for example, 7 bits) shorter than the reference number of bits and cuts the plain text. In addition to data, dummy data is included at different positions of the plaintext cut data, all of which are shorter than the reference number of bits. In this case, the position where the dummy data is embedded may be fixed, or for each of the plaintext cut data, the first bit, the second bit, the third bit, the eighth bit, the first bit, the second bit, the eighth bit. , May be changed regularly, or may be changed randomly. When the position where the dummy data is embedded changes randomly, for example, the position where the dummy data is embedded may be determined based on the solution.
As a method of determining the position where dummy data is to be embedded by the solution, for example, the sum of the numbers constituting the 8-by-8 matrix that is the solution is divided by 8, and when the remainder is 0, the plaintext Dummy data is alternately embedded at the beginning and end of every other cut data. When the remainder is 1, plain text cut data with dummy data embedded at the top and plain text cut data with dummy data embedded at the end are 2 When the remainder is 2, make sure that every third plaintext cut data with dummy data embedded at the beginning and every third plaintext cut data with dummy data embedded at the end, ... When the remainder is 7, processing is performed so that every 8 plaintext cut data with dummy data embedded at the beginning and every other plaintext cut data with dummy data embedded at the end. It can be so. It is also possible to move the position further without fixing the position where the dummy data is embedded, such as the beginning and the end.
When the plain text cut data is generated by the method C), the data to be processed is cut to the number of bits equal to or shorter than the reference number of bits. This cutting can be performed by cutting the data to be processed into a random length shorter than 8 bits. For example, the sum of the numbers constituting the matrix of 8 rows and 8 columns as a solution is 8 When the remainder is 0, the head portion of the data to be processed at that time is cut by 8 bits, and when the remainder is 1, the head portion of the data to be processed at that time is cut by 1 bit. When the remainder is 2, the head portion of the processing target data at that point is cut by 2 bits, and when the remainder is 7, the head portion of the processing target data at that point is cut by 7 bits. it can. Also, the preprocessing unit 272 embeds dummy data in each of the plaintext cut data having a bit number shorter than the reference bit number among the plaintext cut data generated thereby. In this case, the dummy data embedding position may be a specific position such as the beginning or the end, or may be a predetermined position that changes depending on the solution.
In any case, the plaintext cut data generated in this way is sent to the encryption / decryption unit 273 in a stream in the order of generation.

In parallel with the generation of the plaintext cut data, the algorithm generation unit 275 generates an algorithm used when encrypting the plaintext cut data.
The algorithm generation unit 275 in this embodiment generates an algorithm based on the solution.
In this embodiment, the algorithm generation unit 275 generates an algorithm as follows.
The algorithm in this embodiment is as follows: “When plaintext cut data that is 8-bit data is a matrix Y of 1 row and 8 columns, the matrix X of 8 rows and 8 columns that is the solution is raised to a power, and then clockwise. The matrix obtained by multiplying the matrix rotated by n × 90 ° by Y is defined.
Here, a may be a predetermined constant, but in this embodiment, a is a number that changes based on the solution. That is, the algorithm in this embodiment changes based on the solution. For example, a is a remainder when a number obtained by adding all the numbers of matrix elements included in a solution that is a matrix of 8 rows and 8 columns is divided by 5 (however, if the remainder is 0, a = 1)).
Further, the above-mentioned n is a predetermined number determined by the key. If the key is a fixed number, n is fixed, but the key changes based on the solution as described below. That is, in this embodiment, this n also changes based on the solution.
However, the algorithm can be determined as another one.
In this embodiment, the algorithm generation unit 275 generates an algorithm each time a solution is received from the solution generation unit 274 and sends it to the encryption / decryption unit 273.

In parallel with the generation of the plaintext cut data, the key generation unit 276 generates a key used when encrypting the plaintext cut data.
The key generation unit 276 generates a key based on the solution.
In this embodiment, the key generation unit 276 generates a key as follows.
The key in this embodiment is a number obtained by adding all the numbers that are the elements of the matrix included in the solution that is a matrix of 8 rows and 8 columns. Thus, the key changes based on the solution in this embodiment.
Note that the key can be determined as another one.
In this embodiment, the key generation unit 276 generates a key each time a solution is received from the solution generation unit 274 and sends it to the encryption / decryption unit 273.

The encryption / decryption unit 273 encrypts the plaintext cut data received from the preprocessing unit 272 based on the algorithm received from the algorithm generation unit 275 and the key received from the key generation unit 276 (S1103).
As described above, when the plaintext cut data, which is 8-bit data, is set to a matrix Y of 1 row and 8 columns, the algorithm uses the matrix X of 8 rows and 8 columns, which is the solution, to the a power, and then rotates clockwise. Is obtained by multiplying the matrix rotated by n × 90 ° by Y ”, and the key n is the number as described above.
For example, when a is 3 and n is 6, 8 obtained by rotating an 8 × 8 matrix obtained by raising X to the third power clockwise by 6 × 90 ° = 540 °. Encryption is performed by multiplying the matrix of 8 rows by the plaintext cut data.
Data generated in this way is encrypted cut data.

  The encrypted cut data is sent to the connection unit 277. The connection unit 277 connects the encrypted cut data together to generate encrypted data (S1104). The arrangement order of the encrypted cut data at this time corresponds to the arrangement order of the original plaintext cut data.

  As described above, first, the process of S110 in which the first data processing apparatus 11 encrypts the processing target data and generates the encrypted data ends.

The encrypted data generated in this way is sent to the communication device 28 in the first data processing device 11 via the bus 29. The encrypted data is received by the interface 281 in the communication apparatus and sent to the authentication data generation unit 282. The authentication data generation unit 282 sends the encrypted data to the communication unit 283 after adding the authentication data to the header of the encrypted data.
The communication unit 283 sends the encrypted data to the second data processing device 12 via the network 13. Thereby, the process of S120 mentioned above is performed.

In the second data processing device 12 that has received the encrypted data, the process of S130 is executed to decrypt the encrypted data and return it to the data to be processed.
Hereinafter, this decoding process will be described in detail with reference to FIG.

The encrypted data sent to the second data processing device 12 is received by the communication unit 283 in the communication device 28 of the second data processing device 12 (S1201).
The communication unit 283 sends the encrypted data to the authentication unit 284. The authentication unit 284 determines which first data processing device 11 the encrypted data has come from based on the authentication data added to the encrypted data (S1202).
After the determination by the authentication unit 284, the encrypted data is sent to the interface unit 281. The interface unit 281 sends the encrypted data to the encryption device 27A associated with the first data processing device 11 determined by the authentication unit 284 as the transmission source of the encrypted data.

The preprocessing unit 272A in the encryption device 27A receives this encrypted data via the interface unit 271A.
The preprocessing unit 272A cuts the received encrypted data every predetermined number of bits to generate encrypted cut data (S1203).
When the encrypted data is generated by cutting the encrypted data, the preprocessing unit 272A performs a process reverse to that performed by the connection unit 277 of the first data processing apparatus 11. That is, the encrypted data is cut every 8 bits from the head and divided into a plurality of encrypted cut data.

Next, the encrypted cut data is sent to the encryption / decryption unit 273A, where it is decrypted and converted into plaintext cut data (S1204).
Decryption is executed as a process reverse to that performed by the encryption / decryption unit 273 in the first data processing apparatus 11. Therefore, the second data processing device 12 requires an algorithm and a key that are necessary when the first data processing device 11 performs encryption.

The algorithm and key used for decryption are generated in the encryption device 27A. The mechanism will be explained.
Information that the interface unit 271A of the encryption device 27A has received the encrypted data is sent to the solution generation unit 274A. The solution generation unit 274A generates a solution every time this information is received, triggered by the reception of this information.
The solution generation performed by the solution generation unit 274A in the encryption device 27A of the second data processing device 12 is performed through the same process as that performed by the solution generation unit 274 of the first data processing device 11. As described above, the solution generation unit 274A has the same initial value as the solution generation unit 274 of the first data processing apparatus 11 associated with the encryption device 27A including the solution generation unit 274A. It has a matrix and an algorithm for solution generation. Therefore, a solution generated in the encryption device 27A of the second data processing device 12 is generated in the encryption device 27 of the corresponding first data processing device 11 if the generated sequences are compared with each other. It is the same as the solution to be done.
The generated solution is sent from the solution generation unit 274A to the preprocessing unit 272A, the algorithm generation unit 275A, and the key generation unit 276A.
The algorithm generation unit 275A generates an algorithm every time a solution is received based on the received solution. The process of generating an algorithm by the algorithm generation unit 275A of the second data processing device 12 is the same as the process of generating the algorithm by the algorithm generation unit 275 of the first data processing device 11. The generated algorithm is sent from the algorithm generation unit 275A to the encryption / decryption unit 273A.
On the other hand, the key generation unit 276A generates a key each time a solution is received based on the received solution. The process of generating the key by the key generation unit 276A of the second data processing device 12 is the same as the process of generating the key by the key generation unit 276 of the first data processing device 11. The generated key is sent from the key generation unit 276A to the encryption / decryption unit 273A.
By the way, in this data processing system, every time encryption is performed by the first data processing device 11, a new solution is generated by the first data processing device 11, and the encrypted data generated by the first data processing device 11 is generated. Is decrypted by the second data processing device 12, a new solution is generated by the second data processing device 12. Further, as described above, the solutions generated by the encryption device 27A of the second data processing device 12 are encrypted in the corresponding first data processing device 11 if the generated sequences are compared with each other. This is the same as the solution generated by the device 27. Therefore, the solution generated when encrypting the data to be processed, which is the first data processing device 11, and the algorithm and key generated based on the solution are all the algorithm and key generated using the solution. When the encrypted data generated by the first data processing device 11 is decrypted using, the solution generated by the encryption device 27A of the second data processing device 12 and the algorithm generated based on the solution And will always match the key. This situation is the same when the second data processing device 12 performs encryption and the first data processing device 11 performs decryption.

  In the encryption / decryption unit 273A, as described above, the decryption process is performed using the algorithm received from the algorithm generation unit 275A. More specifically, the encryption / decryption unit 273A uses the algorithm received from the algorithm generation unit 275A (“8 when the plaintext cut data, which is 8-bit data, is a matrix Y with 1 row and 8 columns, 8 Based on the definition of “the encrypted cut data is obtained by multiplying a matrix X rotated by n × 90 ° clockwise after multiplying the matrix X of row 8 columns by a power” with Y), An algorithm for performing the decryption process (“If the encrypted cut data is viewed as a 1-by-8 matrix Z, the 8 × 8 matrix X as a solution is raised to a power, and then n × clockwise. By multiplying the inverse matrix of the matrix rotated by 90 ° by Y and defining it as plaintext cut data ”, and performing an operation according to the above definition using a key, Decryption processing is performed. In this way, the encryption / decryption unit 273A sequentially decrypts the encrypted cut data supplied in a stream from the preprocessing unit 272A to generate plaintext cut data.

Next, the encryption / decryption unit 273A removes the dummy data from the plaintext cut data as necessary (S1205). As described above, the solution generated by the solution generation unit 274A is sent to the preprocessing unit 272A. This solution is used when the preprocessing unit 272 of the first data processing apparatus 11 determines how the dummy data is embedded in the plain text cut data. In other words, the solution that the pre-processing unit 272A of the encryption device 27A has at that time has been decrypted (or decrypted) by the encryption / decryption unit 273A of the second data processing device 12. Or it shows how the dummy data is embedded in the encrypted cut data (more precisely, the plaintext cut data before the encrypted cut data is encrypted) is there.
The preprocessing unit 272A sends information about where the dummy data is embedded in the plaintext cut data decrypted by the encryption / decryption unit 273A to the encryption / decryption unit 273A.
Using this, the encryption / decryption unit 273A removes the dummy data from the plaintext cut data.

The plain text cut data generated in this way is sent to the connection unit 277A. The connection unit 277A connects the received plaintext cut data as a whole, and returns the data to be processed in the original state before being encrypted by the first data processing device 11 (S1206).
In this way, the process of S130 in which the second data processing device 12 decrypts the encrypted data and returns it to the processing target data ends.

  The generated processing target data is sent from the connection unit 277A to the interface unit 271A, and is sent to the encryption device 27B via the bus 29.

Here, the encryption device 27B performs the process of S140 described above to encrypt the decrypted data to be processed again into encrypted data.
The encryption process in the encryption device 27B is performed in a flow substantially similar to that in the first data processing device 11 (FIG. 12).

The processing target data sent to the encryption device 27B is received by the interface unit 271B (S1301).
The interface unit 271B sends this to the preprocessing unit 272B.
The preprocessing unit 272B cuts the received processing target data every predetermined number of bits to generate plaintext cut data (S1302). In this case, the method of cutting the data to be processed does not have to be the same as that of the encryption device 27 and the encryption device 27A. By performing the processing, the processing target data is disconnected. In addition, the preprocessing unit 272B performs the same processing as that described in the encryption device 27, and includes dummy data as necessary in the plaintext cut data.

Next, the plain text cut data is sent to the encryption / decryption unit 273B, where it is encrypted and becomes encrypted cut data (S1303).
Here, as in the case of the encryption device 27, an algorithm and a key used for encryption are generated. The solution is generated prior to this, as in the case of the encryption device 27. The flow from solution generation to algorithm and key generation will be described below.

When the interface unit 271B receives the processing target data from the bus 29, the solution generation unit 274B receives the information from the interface unit 271B. The solution generation unit 274B only needs to be able to generate a solution at an appropriate timing, but the solution generation unit 274B in this embodiment receives information from the interface unit 271B that the processing target data has been received. In response to this, a solution is generated. The details of the solution generation are the same as those described in the encryption device 27.
The generated solution is sent to the algorithm generation unit 275B and the key generation unit 276B.

  The algorithm generation unit 275B and the key generation unit 276B perform the same processing as that executed by the algorithm generation unit 275 and the key generation unit 276 in the encryption device 27 to generate an algorithm and a key. The generated algorithm and key are sent from the algorithm generation unit 275B or the key generation unit 276B to the encryption / decryption unit 273B.

The encryption / decryption unit 273B receives the algorithm from the algorithm generation unit 275B and the key from the key generation unit 276B, and sequentially encrypts the plaintext cut data received from the preprocessing unit 272B based on the algorithm (S1303).
Details of the encryption are the same as those described for the encryption device 27.
The generated encrypted cut data is sequentially sent to the connection unit 277B.

  The connection unit 277B collects the encrypted cut data as encrypted data (S1304). This encrypted data is sent to the specific information generation unit 278B.

The specific information generation unit 278B adds the specific information as described above to, for example, the header of the received encrypted data (S1305).
The encrypted data to which the specific information is added is sent to the bus 29 via the interface unit 271B, and is recorded on the HDD 23 in the second data processing device 12.

  Next, for example, when the first data processing apparatus 11 gives an instruction to return the encrypted data recorded in the HDD 23 in the second data processing apparatus 12 to the first data processing apparatus 11, the second data The processing device 12 executes the following processing.

First, the process of S150 described above is executed in which the encryption device 27B reads the encrypted data from the HDD 23, decrypts the encrypted data, and returns it to the process target data. Details of this processing will be described with reference to FIG.
Specifically, the interface unit 271B in the encryption device 27B of the second data processing device 12 reads the encrypted data from the HDD 23 via the bus 29 (S1401).
The interface unit 271B sends this encrypted data to the preprocessing unit 272B. The preprocessing unit 272B cuts the received encrypted data every predetermined number of bits to generate encrypted cut data (S1402).
When the encrypted data is cut to generate the encrypted cut data, the preprocessing unit 272B performs the same processing as the above-described processing performed by the preprocessing unit 272A of the encryption device 27A when performing the decryption. That is, the encrypted data is cut every 8 bits from the head and divided into a plurality of encrypted cut data.

Next, the encrypted cut data is sequentially sent to the encryption / decryption unit 273B, where it is decrypted and converted into plaintext cut data (S1403).
Decryption is executed as processing similar to the processing described above performed by the encryption / decryption unit 273A of the encryption device 27A when performing decryption. In order to perform such decryption, the second data processing device 12 requires an algorithm and a key.

The algorithm and key are generated as follows.
The interface unit 271B in this embodiment can read specific information added to encrypted data. This specific information is information for specifying the algorithm and key used when encrypting the encrypted data to which the specific information is added.
For example, when the specific information is the algorithm and key itself used when encrypting the encrypted data, the interface 217B reads the algorithm and key from the encrypted data, and for example, reads them through the preprocessing unit 272B. The data is sent to the encryption / decryption unit 273B. The encryption / decryption unit 273B decrypts the encrypted cut data based on the algorithm and the key.
Further, when the specific information is the algorithm used when encrypting the encrypted data and the solution used when generating the key, the interface 217B reads this solution from the encrypted data, The data is sent to the generation unit 275B and the key generation unit 276B. In this case, the algorithm generation unit 275B and the key generation unit 276B generate an algorithm and a key based on the accepted solution, respectively. This algorithm and key are used when encrypting encrypted data to which the solution is added. It matches each algorithm and key used. The algorithm generation unit 275B and the key generation unit 276B send the generated algorithm and key to the encryption / decryption unit 273B. The encryption / decryption unit 273B decrypts the encrypted cut data based on the algorithm and the key.
Also, if the specific information is information indicating the algorithm used when encrypting the encrypted data and the solution used when generating the key is the generated solution, the interface 217B reads this information from the encrypted data and sends it to the solution generator 274B. The solution generator 274B that has received this information generates solutions up to the indicated order. This solution coincides with the solution used when encrypting the encrypted data to which the above-described information is added. In this case, only the initial matrix is held without being erased so that the solutions generated in the same order are always the same. The solution generation unit 274B sends the generated solution to the algorithm generation unit 275B and the key generation unit 276B. The algorithm generation unit 275B and the key generation unit 276B generate an algorithm and a key based on the accepted solution. The algorithm and the key are the algorithms used when encrypting the encrypted data to which the solution was added. And key respectively. The algorithm generation unit 275B and the key generation unit 276B send the generated algorithm and key to the encryption / decryption unit 273B. The encryption / decryption unit 273B decrypts the encrypted cut data based on the algorithm and the key.
As described above, the encrypted cut data is returned to the plain text cut data.

Next, the encryption / decryption unit 273B removes the dummy data from the plaintext cut data as necessary (S1404).
Here, if the dummy data included in the plaintext cut data is included in an appropriate position based on the solution, the encryption / decryption unit 273B determines that the plaintext cut data when removing the dummy data. Requires the solution used when was encrypted last time. If the specific information is the solution used when the plaintext cut data was previously encrypted, the interface 217B sends this solution to the encryption / decryption unit 273B. In addition, when the specific information is information indicating the number of solutions generated when the plaintext cut data was previously encrypted, the solution generator 274B generates the generated solution. Is sent to the encryption / decryption unit 273B. Using this solution, the encryption / decryption unit 273B removes dummy data included in an appropriate position based on the solution.
When dummy data included in the plaintext cut data is included at an appropriate position based on the solution, the specific information may be the algorithm and key itself used to encrypt the encrypted data. It is not preferable. This is because the encryption / decryption unit 273B cannot obtain the solution, and thus the dummy data cannot be removed.

  The plain text cut data from which the dummy data is removed is sent to the connection unit 277B. The plain text cut data is connected together at the connection unit 277B and returned to the processing target data (S1405).

This plaintext cut data is sent to the bus 29 via the interface unit 271B, and the cipher associated with the first data processing apparatus 11 that has requested transmission of the encrypted data that was the source of this plaintext cut data. Sent to the composing apparatus 27A.
Receiving this, the encryption device 27A executes the process of S160 described above, which encrypts the processing target data into encrypted data.

  The encryption device 27A executes this processing as the same processing as that described in S110 performed by the encryption device 27 of the first data processing device 11 when the processing target data is encrypted data.

  The encrypted data generated by the encryption device 27A is sent to the communication device 28 in the second data processing device 12 via the bus 29, and from there, the transmission of encrypted data is requested via the network 13. The data is sent to the communication unit 28 of the first data processing device 11. This corresponds to the processing of S170 described above.

  This encrypted data is decrypted by the encryption device 27 in the first data processing device 11. This is the process of S180 described above. The encryption device 27 assumes that this processing is the same as the processing described in S130 performed by the encryption device 27A of the second data processing device 12 when decrypting the encrypted data into the processing target data. Run.

  In short, the encryption device 27 incorporated in each of the first data processing devices 11 in this embodiment, and the second data processing device 12 associated with the first data processing device 11 incorporating the encryption device 27. The encryption device 27A can decrypt the encrypted data encrypted by the other party.

  The processing target data generated by being decrypted by the encryption device 27 in the first data processing device 11 is the same as that in the HDD 23 in the first data processing device 11 before the processing of S110 is performed. . This processing target data is recorded in, for example, the HDD 23 in the first data processing device 11. The first data processing apparatus 11 can appropriately use it.

<< Second Embodiment >>
In the second embodiment, there is only one data processing device.
The hardware configuration of the data processing device in the second embodiment is the same as that of the first data processing device 11 in the first embodiment. However, the data processing device according to the second embodiment does not need communication, and thus does not have the communication device 28 included in the first data processing device 11.
That is, the data processing device in the second embodiment includes a CPU 21, ROM 22, HDD 23, RAM 24, input device 25, display device 26, encryption device 27, and bus 29. These functions basically match the functions of the CPU 21, ROM 22, HDD 23, RAM 24, input device 25, display device 26, encryption device 27, and bus 29 in the first data processing device 11.
However, the configuration of the encryption device 27 in the data processing device in the second embodiment is the same as the configuration of the encryption device 27 built in the first data processing device 11 in the first embodiment (the one shown in FIG. 4). The algorithm generation unit 275 is replaced with the first algorithm generation unit 275X and the second algorithm generation unit 275Y, and the key generation unit 276 is replaced with the first key generation unit 276X and the second key generation unit 276Y. This is different from the encryption device 27 of the first embodiment (FIG. 14).

In the data processing apparatus of the second embodiment, as will be described later, the processing target data recorded in the HDD 23 is encrypted by the encryption apparatus 27, the encrypted data generated by the encryption is recorded in the HDD 23, and the HDD 23 is recorded. Each process of decrypting the encrypted data recorded in the encryption device 27 and recording the processing target data generated by the decryption to the HDD 23 is performed in the second embodiment. There are a plurality of encrypted data, and the order in which the encrypted data is decrypted matches the order in which the encrypted data is encrypted from the data to be processed.
The difference between the encryption device 27 in the data processing device in the second embodiment and the encryption device 27 incorporated in the first data processing device 11 in the first embodiment is related to this point. Yes.

As described above, the encryption device 27 in the data processing device according to the second embodiment has a structure as shown in FIG.
The interface unit 271, the preprocessing unit 272, the encryption / decryption unit 273, the solution generation unit 274, and the connection unit 277 included in the encryption device 27 in the data processing apparatus according to the second embodiment are basically the first. The same functions as those in the encryption device 27 of the first data processing device 11 of the embodiment are provided. The interface unit 271 exchanges data between the bus 29 and the communication device 28.
The pre-processing unit 272 cuts the processing target data or encrypted data received from the bus 29 via the interface unit 271 for each predetermined number of bits, and generates plain text cut data or encrypted cut data. Is sent to the encryption / decryption unit 273. The preprocessing unit 272 may include dummy data in the plain text cut data.
The encryption / decryption unit 273 receives the plaintext cut data or the encrypted cut data from the preprocessing unit 272, encrypts the plaintext cut data when it is received, and encrypts the cut data when it is received. Is decrypted. In the encryption / decryption unit 273, the reference bit number, which is a processing unit when performing encryption and decryption processing, is fixed to 8 bits in this embodiment.
The solution generator 274 sequentially generates solutions. In this embodiment, the solution is generated every time the preprocessing unit 272 receives the processing target data. The solution is a pseudo-random number.
The connection unit 277 has a function of connecting plain text cut data generated by decrypting the encrypted cut data by the encryption / decryption unit 273 in the original order to make a set of data to be processed. Yes. The connection unit 277 also has a function of connecting encrypted cut data generated by encrypting the plaintext cut data by the encryption / decryption unit 273 to form a set of encrypted data.

The first algorithm generation unit 275X generates an algorithm based on the solution received from the solution generation unit 274. This algorithm is used when performing encryption. Second algorithm generation unit 275Y generates an algorithm based on the solution received from solution generation unit 274. This algorithm is used when performing decoding. In addition, the 1st algorithm production | generation part 275X and the 2nd algorithm production | generation part 275Y are made to produce | generate the same algorithm, when producing | generating an algorithm using the same solution.
The first key generation unit 276X generates a key based on the solution received from the solution generation unit 274. This key is used when encryption is performed. The second key generation unit 276Y generates a key based on the solution received from the solution generation unit 274. This key is used when performing decryption. The first key generation unit 276X and the second key generation unit 276Y are configured to generate the same key when generating a key using the same solution.
In this embodiment, the first algorithm generation unit 275X and the first key generation unit 276X generate an algorithm and a key each time the preprocessing unit 272 receives processing target data. The second algorithm generation unit 275Y and the second key generation unit 276Y generate an algorithm and a key each time the preprocessing unit 272 receives encrypted data.

The operation of the data processing apparatus in the second embodiment will be described with reference to FIG.
First, processing target data is read (S1501). The processing target data is read from the HDD 23 in this embodiment. The processing target data is sent from the HDD 23 to the encryption device 27 via the bus 29. More specifically, the processing target data is sent to the preprocessing unit 272 via the interface unit 271.

In the preprocessing unit 272, the processing target data is cut into a plain text cut data every predetermined number of bits (S1502). The preprocessing unit 272 includes dummy data in the plain text cut data as necessary.
The method for generating the plaintext cut data from the processing target data is the same as that described in S1102 of the first embodiment.

On the other hand, the solution generation unit 274 generates a solution in response to the reception of information from the interface unit 271 that the interface unit 271 has received the processing target data. The solution may be generated each time the processing target data is disconnected by the preprocessing unit 272. In this case, the generation of the processing target data in the preprocessing unit 272 and the generation of the solution in the solution generation unit 274 are synchronized.
The solution generation method in this embodiment is the same as that performed by the solution generation unit 274 when the first data processing apparatus 11 of the first embodiment performs encryption.
The generated solution is sent to the first algorithm generation unit 275X, the second algorithm generation unit 275Y, the first key generation unit 276X, and the second key generation unit 276Y.
The first algorithm generation unit 275X and the first key generation unit 276X that have received this generate an algorithm and a key, respectively. The algorithm and key generation method in this embodiment are the same as those performed by the algorithm generation unit 275 and the key generation unit 276 when the first data processing device 11 of the first embodiment generates the algorithm and the key. .
The first algorithm generation unit 275X and the first key generation unit 276X send the generated algorithm and key to the encryption / decryption unit 273.
The encryption / decryption unit 273 encrypts the plain text cut data received from the preprocessing unit 272 based on the algorithm received from the first algorithm generation unit 275X and the key received from the first key generation unit 276X. (S1503). This process is performed as the same process as the process of S1103 described in the first embodiment.
The encrypted cut data generated in this way is sent to the connection unit 277, where it is connected together and used as encrypted data (S1504).

The encrypted data generated as described above is recorded in the HDD 23 in the data processing device via the bus 29.
Such encryption processing is performed a plurality of times in this embodiment.

In this data processing apparatus, the encrypted data recorded in the HDD 23 is decrypted.
Hereinafter, the decoding process will be described in detail with reference to FIG.
Decryption is started when the encryption device 27 reads the encrypted data recorded in the HDD 23 (S1601).
When the preprocessing unit 272 in the encryption device 27 receives encrypted data from the HDD 23 via the interface unit 271, the preprocessing unit 272 cuts the received encrypted data every predetermined number of bits, Encrypted cut data is generated (S1602).
When the encrypted data is cut to generate the encrypted cut data, the preprocessing unit 272 performs a process reverse to that performed in the above-described encryption process. That is, the encrypted data is cut every 8 bits from the head and divided into a plurality of encrypted cut data. This process is the same as the process of S1203 in the first embodiment.
Next, the encrypted cut data is sent to the encryption / decryption unit 273, where it is decrypted and converted into plain text cut data (S1603).
Decryption is executed as a process opposite to the above-described encryption process performed by the encryption / decryption unit 273. Therefore, the encryption / decryption unit 273 requires the algorithm and key used for encryption. Here, using the previously generated solution, the second algorithm generation unit 275Y generates an algorithm, and the second key generation unit 276Y generates a key. Since the order in which the encrypted data is decrypted matches the order in which the encrypted data is encrypted from the data to be processed, the second algorithm generation unit 275Y and the second key generation unit 276Y generate The algorithm and key to be generated are generated based on the solution used when the encrypted data to be decrypted is encrypted. This is because the algorithm generated by the second algorithm generation unit 275Y and the key generated by the second key generation unit 276Y are used when the encrypted data to be decrypted is encrypted. It means to match the key.
The second algorithm generation unit 275Y and the second key generation unit 276Y require the algorithm and key to be decrypted by the encryption / decryption unit 273 after the solution generation unit 274 has generated the solution. The algorithm and key may be generated at any timing until.
The algorithm generated by the second algorithm generation unit 275Y and the key generated by the second key generation unit 276Y are sent to the encryption / decryption unit 273. The encryption / decryption unit 273 sequentially decrypts the encrypted cut data using the algorithm and the key to obtain plain text cut data. This process is executed as the same process as that described in S1204 of the first embodiment.
Next, the encryption / decryption unit 273 removes dummy data from the plain text cut data as necessary (S1604). This process is executed as the same process as the process of S1205 in the first embodiment.

The plain text cut data generated in this way is sent to the connection unit 277. The connection unit 277 connects the received plain text cut data together to generate processing target data (S1605).
The generated processing target data is sent from the connection unit 277 to the interface unit 271 and recorded in the HDD 23 via the bus 29.

≪Modification≫
The data processing apparatus in the second embodiment can be modified as follows.
The data processing device in this modification is slightly different from the data processing device in the second embodiment in the configuration of the encryption device 27. The other parts are the same as those of the data processing apparatus in the second embodiment described above.
The encryption device 27 of the data processing device in the modification is configured as shown in FIG. The encryption device 27 includes two solution generation units, a first solution generation unit 274X and a second solution generation unit 274Y. The data in the second embodiment that includes only one solution generation unit 274 It differs from the encryption device 27 of the processing device.
Both the first solution generation unit 274X and the second solution generation unit 274Y generate solutions in the same manner as the solution generation unit 274 in the second embodiment.
The first solution generation unit 274X generates a solution in response to reception of information from the interface unit 271 that the interface unit 271 has received data to be processed. However, the first solution generation unit 274X may generate a solution each time the data to be processed is disconnected by the preprocessing unit 272. The solution generated by the first solution generator 274X is sent to the first algorithm generator 275X and the first key generator 276X. The first algorithm generation unit 275X and the first key generation unit 276X that have received this generate an algorithm and a key as in the second embodiment, and send them to the encryption / decryption unit 273. The encryption / decryption unit 273 performs an encryption process using the algorithm and key received from the first algorithm generation unit 275X and the first key generation unit 276X.
On the other hand, the second solution generation unit 274Y generates a solution in response to reception of information from the interface unit 271 that the interface unit 271 has received encrypted data. However, the second solution generation unit 274Y may generate a solution every time the encrypted data is disconnected by the preprocessing unit 272. The solution generated by the second solution generation unit 274Y is sent to the second algorithm generation unit 275Y and the second key generation unit 276Y. The second algorithm generation unit 275Y and the second key generation unit 276Y that have received this generate an algorithm and a key as in the second embodiment, and send them to the encryption / decryption unit 273. The encryption / decryption unit 273 performs a decryption process using the algorithm and key received from the second algorithm generation unit 275Y and the second key generation unit 276Y.
The solutions generated by the second solution generation unit 274Y are the same as the solutions generated by the first solution generation unit 274X if the solutions generated in the same order are compared. This is because the solution generator 271 in the encryption device 27 built in the first data processing device 11 and the solution generation in the encryption device 27A built in the second data processing device 12 in the first embodiment. This is the same as the case where the unit 271A generates the same solution when comparing the units generated in the same order. That is, the second solution generation unit 274Y and the first solution generation unit 274X in this modification have the same solution generation algorithm and the same initial matrix.
Except for the solution generation and algorithm generation processing, the data processing device in this modification performs the same processing as the data processing device of the second embodiment.

  Note that the encryption device included in the second embodiment and the modifications thereof can be replaced with the encryption device 27B in the first embodiment.

11 First Data Processing Device 12 Second Data Processing Device 13 Network 27 Encryption Device 28 Communication Device 271 Interface Unit 272 Preprocessing Unit 273 Encryption / Decryption Unit 274 Solution Generation Unit 275 Algorithm Generation Unit 276 Key Generation Unit 277 Connection Part 278B specific information generation part

Claims (1)

Means for encrypting processing target data in plain text using a predetermined algorithm and a predetermined key to obtain encrypted data, a recording medium for recording the encrypted data, and encrypted data read from the recording medium A data processing apparatus comprising means for decrypting encrypted data using the algorithm and key used to encrypt the data to be processed data;
The processing target data is cut into a plurality of plaintext cut data by cutting at a predetermined number of bits, and the encrypted data is cut at the same number of bits that was cut when the encrypted data was encrypted. Cutting means to make a plurality of encrypted cut data,
The plaintext cut data is encrypted with a key and an algorithm that changes at a predetermined timing to obtain encrypted cut data, and the encrypted cut data is a key used when encrypting the encrypted cut data, And encryption / decryption means that decrypts the data into plaintext cut data by an algorithm;
Read / write that records the encrypted data in which the encrypted cut data encrypted by the encryption / decryption means are collected on the recording medium and reads the encrypted data recorded on the recording medium from the recording medium Means,
Connection means for connecting the decrypted plaintext cut data to the processing target data;
Specific information recording means for associating specific information for specifying the algorithm used when encrypting the processing target data with the encrypted data and recording the information on a predetermined recording medium;
With
The cutting means is configured to cut the processing target data so that at least one of the plaintext cut data has a different bit number from other plaintext cut data,
The encryption / decryption means, when decrypting the encrypted cut data, reads the specific information associated with the encrypted data from the specific information recording means and specifies the key based on the key and the specific information The decryption is performed by an algorithm that has been
Data processing device.

Images