JP3224565B2 - Cryptographic integrated circuit device and cryptographic data communication system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a cryptographic data communication system, and more particularly to a technique for managing a cryptographic integrated circuit device used in a cryptographic data communication system.

[0002]

2. Description of the Related Art A conventional cryptographic data communication system uses cryptography to provide security when used in a credit system, a financial transaction system, or the like. This encryption algorithm is stored in the semiconductor integrated circuit device.

[0003] In a terminal device in a conventional encrypted data communication system, the method of confirming the discard of this terminal device is determined by the number of the terminal device notified by the user (the terminal device number stamped outside the terminal device). I was going. In that case, an EEPROM (Electrically
Erasable and Programmable Lead Only Memory)
It was not possible to confirm whether or not the data contents held by the device were erased.

Further, the conventional semiconductor integrated circuit device in the terminal device has only an encryption algorithm mounted thereon, and its control is performed by external software. Therefore, when encryption is realized using a semiconductor integrated circuit,
The degree of security varies depending on the configuration of the external software to be controlled.

[0005]

However, the conventional technique has the following problems.

[0006] Since the cryptographic integrated circuit device itself did not have an encryption / decryption function valid flag, and the software controlling the cryptographic integrated circuit device performed the function on behalf of the
The cryptographic integrated circuit device alone was vulnerable to encryption / decryption requests.

[0007] Since the cryptographic integrated circuit device itself does not have a function of authenticating software for controlling the cryptographic integrated circuit, the cryptographic integrated circuit device alone was vulnerable to an encryption / decryption request.

[0008] Since the cryptographic integrated circuit device itself does not have a function of restricting software for controlling the cryptographic integrated circuit, the cryptographic integrated circuit device alone is not vulnerable to an encryption / decryption request.

[0009] Since the cryptographic integrated circuit device itself does not have a logging function, the cryptographic integrated circuit device alone cannot maintain a state at the time of occurrence of an error, and it is difficult to manage a failure.

[0010] If the data inside the terminal device is held, there is a possibility that the data is used illegally. Further, even when an erroneous report is made at the time of notification of a terminal device number from a user, it cannot be confirmed.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and an object of the present invention is to provide a technique capable of preventing unauthorized access to a cryptographic integrated circuit device.

Another object of the present invention is to make it possible to easily determine the cause of an error when an error occurs in the cryptographic integrated circuit device.
To provide a cryptographic integrated circuit device .

The above and other objects and novel features of the present invention will become apparent from the description of the present specification and the accompanying drawings.

[0014]

To achieve the above object, the present invention relates to a cryptographic integrated circuit device, comprising:
Means and storage means for storing an encryption key input from outside
And encrypting input data using the encryption key,
Alternatively, an encryption / decryption means for performing decryption,
Generate a password using the key and output it to the outside
A password generation unit stored in the storage unit;
Within a certain period of time after the power is turned on, an external password is
If not, the encryption / decryption means is invalidated.
Encryption / decryption invalidation means, and within a certain time after power-on,
If a password is entered from outside,
The entered password and the password stored in the storage means.
Comparing means for comparing the password with
If the comparison result matches, the encryption / decryption means
Is valid, and the comparison result by the comparing means does not match
In the meantime, there is an encryption restriction method for invalidating the encryption / decryption means.
And external factors during the use of the encryption / decryption means.
Error occurs in the cryptographic integrated circuit device
Characterized by chromatic and error history storage means for storing the gravel.

Further , the present invention provides an encrypted data communication system.
The cryptographic integrated circuit device, central processing unit and
And a terminal device with a memory
And a host computer connected via a communication line .

[0016]

[0017]

[0018]

[0019]

[0020]

[0021]

According to the above-mentioned means (1) , the password is held in the cryptographic integrated circuit device , and
To the operator, and then use the encryption and decryption functions
Authenticates the operator with a password before
Unauthorized access to the cryptographic integrated circuit device can be prevented.

The cryptographic integrated circuit device has a timer.
Counting starts when the power of the cryptographic integrated circuit device is turned on.
The specified data before the timer expires.
If not transferred to the cryptographic integrated circuit device, the cryptographic integrated circuit device
Disables the encryption and decryption functions, so that unauthorized access to the cryptographic integrated circuit device can be prevented.

Further, access is made to the cryptographic integrated circuit device.
For any reason, software or hardware,
If an error occurs in the cryptographic integrated circuit device,
Error information is stored in the road device and the cause of the error is clarified
The data can be used for the error cause
Can be easily determined.

[0024] The encrypted data communication system of the means (2) above.
According to the system, the cryptographic integrated circuit device of the above-mentioned means (1),
Terminal device having central processing unit and memory, center, etc.
Connected to a host computer installed in
In an encrypted data communication system,
For example, unauthorized access to host computers such as payment centers
Security and prevent encrypted data communication systems.
It is possible to prevent unauthorized use of the cryptographic integrated circuit device of the system terminal device .

[0025]

[0026]

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram showing an embodiment of a cryptographic data communication system according to the present invention.

FIG. 1 is a block diagram showing a system configuration of an embodiment of the cryptographic data communication system of the present invention.
Is a host computer disposed in a settlement center or the like, and is a main computer in an online system. 2
Is a terminal device for inputting and outputting data via the communication line 3 or a medium. The terminal device 2 includes a central processing unit (CPU) 21, an encryption integrated circuit device 22, and an internal memory 23. The communication line 3 uses, for example, a telephone line network.

As shown in FIG. 1, the encrypted data communication system of this embodiment executes encryption / decryption in response to an encryption request and a decryption request from the terminal device 2. The encrypted data generated by the terminal device 2 using the cryptographic integrated circuit device 22 is transmitted to the host computer 1 disposed in the settlement center through the communication line (telephone line) 3. The host computer 1 processes the encrypted data and reports the result to the terminal device 2 in cipher text. The terminal device 2 that has received the ciphertext decrypts the encrypted integrated circuit device 22 and checks the processing result.

FIG. 2 is a block diagram showing details of the hardware configuration of the cryptographic integrated circuit device 22. Reference numeral 221 denotes a central processing unit (CPU). 222 is RAM (Random A)
ccess Memory), which is used for work. Reference numeral 223 denotes a ROM (Read Only Memory) in which a control program and the like are stored. 224 is E
It is an EPROM and is built in the cryptographic integrated circuit device 22. 225 is an input port for inputting data, 22
6 is an output port for outputting data, and 227 is a control port for controlling input / output of data. Reference numeral 228 denotes a timer, which is composed of a register whose contents change at regular intervals in order to measure time. Reference numeral 229 denotes a data bus, and the input port 225, output port 226, control port 227, CPU 221, RAM 222, ROM 22
3. Data lines and address lines connecting the EEPROM 224.

The cryptographic integrated circuit device 22 of this embodiment is similar to that of FIG.
As shown in (2), the encrypted / decrypted data is received from the input port 225 and stored in the RAM 222. If the received data is an encryption request, the received data stored in the RAM 222 is encrypted and output to the output port 226. Also, R
When there is data to be stored by the cryptographic integrated circuit device 22 at the time of encryption / decryption in the AM 222, the EEPROM 2
Save to 24. As described above, by storing the data in the EEPROM 224, the cryptographic integrated circuit device 22 can store necessary data therein even when the power is turned off.

FIG. 3 is a block diagram showing the software configuration (functional configuration) of the cryptographic integrated circuit device 22.
Reference numeral 1 denotes an initial setting unit, which comprises software for initializing each port of the cryptographic integrated circuit device 22, the value of the timer 228, the RAM 222, and the like. Reference numeral 32 denotes a receiving unit, which includes software for transferring data from the input port 225 to the RAM 222. Reference numeral 33 denotes a command execution unit, which comprises software for processing data input from the input port 225 and stored in the RAM 222. 3
Reference numeral 4 denotes a transmission unit, which is composed of software for outputting output data stored in the RAM 222 using the output port 226. Reference numeral 35 denotes an encryption / decryption unit, which comprises software for encrypting / decrypting data at the request of the command execution unit 33. Reference numeral 36 denotes a password generation unit, which comprises software for generating a password in response to a request from the command execution unit 33. 37 is a history storage unit,
The status of the CPU 221 is changed to E upon request from the command execution unit 33.
It is composed of software to be stored in the EPROM 224. Reference numeral 38 denotes a timer interrupt unit, which is made up of software for notifying the command execution unit 33 of the result of the timer 228.

As shown in FIG. 2 and FIG. 3, when the power of the cryptographic integrated circuit device 22 is turned on, the initial setting unit 31 first operates the internal RAM 222, each port 225, 2
26, 227 and the timer 228 are initialized. When the initialization is completed, the receiving unit 32 operates to transfer the received data input from the input port 225 to the RAM 222 and store it.
When the receiving unit 32 completes data reception, the command executing unit 33 operates to perform processing for encrypting or decrypting data in the RAM 222. At this time, the decryption unit 35 stores the processing result in the EEPROM 224 according to the internal state of the cryptographic integrated circuit device 22 stored in the EEPROM 224.

FIG. 4 is a diagram for explaining the operation of the cryptographic data communication system in which the terminal device 2 uses the encryption / decryption of the cryptographic integrated circuit device 22. Reference numeral 41 denotes the cryptographic integrated circuit device 22 and the host. An application program (application program) for performing work using the computer 1.

The processing operation of the cryptographic data communication system according to the present embodiment, as shown in FIGS. 1 to 4, when the power of the terminal device 2 and the cryptographic integrated circuit device 22 is turned on, the initial setting unit 31 operates. Upon completion of the initialization processing, the receiving unit 32 operates. At this time, the operation of the timer interrupt unit 38 is started at the same time. If there is no received data for the time set in the timer interrupt unit 38 from the start of the operation of the receiving unit 32, the cryptographic integrated circuit device 22 receives a notification of the reception timeout from the timer interrupt unit 38. Upon receiving the timeout notification, the receiving unit 32 stores the timeout status in the RAM 222.
When the data reception is completed by the reception unit 32, the command execution unit 33 operates. The command execution unit 33 includes a RAM 222
The timeout state is referred to. If the time-out state is reached, the encryption / decryption unit 35 and the password generation unit 36 do not operate, and the transmission unit 34 operates immediately. Receiver 3
2 starts the timer 27, and when a timeout occurs, the encryption / decryption process is not performed and the received data in the RAM 222 is output as it is, thereby
Can prevent unauthorized use of the cryptographic integrated circuit device 22 in the terminal device 2 unrelated to the settlement processing.

When the cryptographic integrated circuit device 22 is manufactured, no key for encryption / decryption is registered inside. For this reason, the application program 41 needs to make a request for a key to the host computer 1 disposed in the settlement center. The application program 41 issues a key request to the host computer 1 (FIG. 4).
), And receives a key from the host computer 1 (FIG. 4).
of). The application program 41 transmits the data received from the host computer 1 to the cryptographic integrated circuit device 22 through the input port (FIG. 4). In the cryptographic integrated circuit device 22, when the receiving unit 32 completes data reception, the command execution unit 33 operates to store the data received from the host computer 1 in the RAM 222 as the key in the received data in the RAM 222. The cryptographic integrated circuit device 22 storing the key generates a password in the password generation unit 36, and stores the password in the RAM 222 and the EEPROM 22.
Save to 4. Then, the transmitting unit 34 operates to transmit the password to the application program 41 (FIG. 4).
of).

In order for the application program 41 to perform encryption / decryption using the key received from the host computer 1, after the power of the cryptographic integrated circuit device 22 is turned on, the receiving unit 32 stores the time-out state in the RAM 222. prior to registration, it is necessary to enter the password to the input port 24. The cryptographic integrated circuit device 22 stores the password received by the receiving unit 32 in the RAM 222. Next, the command execution unit 33 first checks the timeout state,
If the timeout has not occurred, the received data in the RAM 222 is compared with the password stored in the EEPROM 224. As a result of the comparison, if they are the same, the cryptographic integrated circuit device 22 authenticates the application program 41 as a valid application program, and permits the encryption / decryption processing.

By implementing this method, the encryption / decryption processing from the application program 41 having no password issued by the cryptographic integrated circuit device 22 is refused, and the illegal use of the cryptographic integrated circuit device 22 is prevented. Can be.

When an abnormal state (supply voltage defect, supply clock defect, internal defect) occurs while the cryptographic integrated circuit device 22 is operating, the history storage unit 37 determines the cause of the abnormality and the operating state at that time. Write to EEPROM 224. By performing this method, the cause of the abnormality can be analyzed in detail, and the analysis time can be reduced.

Although the present invention has been described in detail with reference to the embodiments, it is needless to say that the present invention is not limited to the above-described embodiments and can be variously modified without departing from the gist thereof. Absent.

[0040]

As described above, according to the present invention, the following effects can be obtained. (1) Unauthorized access to the cryptographic integrated circuit device can be prevented. (2) When an error in the encryption integrated circuit device occurs, it holds error information to the <br/> cryptographic integrated circuit device, it is possible to data to elucidate the cause of the error,
It is possible to easily determine the cause of the error. (3) In an encrypted data communication system, for example, unauthorized access to a host computer such as a settlement center can be prevented. Further, unauthorized use of the cryptographic integrated circuit device of the terminal device for the cryptographic data communication system can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a system configuration of an embodiment of an encrypted data communication system according to the present invention;

FIG. 2 is a block diagram showing details of a hardware configuration of the cryptographic integrated circuit device according to the embodiment;

FIG. 3 is a block diagram showing a software configuration (functional configuration) of the cryptographic integrated circuit device according to the embodiment;

FIG. 4 is an exemplary view for explaining the operation of the cryptographic data communication system using the encryption / decryption of the cryptographic integrated circuit device of the embodiment.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Host computer, 2 ... Terminal device, 3 ... Communication line, 21 ... Terminal device central processing unit (CPU), 22 ...
Cryptographic integrated circuit device, 23 internal memory, 221 central processing unit (CPU) of cryptographic integrated circuit device, 222 RA
M, 223 ... ROM, 224 ... EEPROM, 225 ...
Input port 226 Output port 227 Control port 228 Timer 229 Data bus 31 Initial setting unit 32 Receiving unit 33 Command executing unit 34
Transmission unit, 35: encryption / decryption unit, 36: password generation unit, 37: history storage unit, 38: timer interrupt unit, 41 ...
Application program.

──────────────────────────────────────────────────続 き Continuation of front page (56) References JP-A-59-186426 (JP, A) JP-A-63-124152 (JP, A) JP-A-3-96021 (JP, A) JP-A 59-18621 201110 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , DB name) H04L 9/10 G09C 1/00

Claims (2)

(57) [Claims] 1. A data holding unit, a storage unit for storing an encryption key input from outside, and encryption of input data using the encryption key.
Or encrypting / decrypting means for performing decryption, and generating a password using the encryption key and outputting the password to the outside.
Password generation means to be stored in the storage means.
After the power is turned on, a password is input from outside within a certain period of time
If not, invalidate the encryption / decryption means
Encryption / decryption invalidation means and password input from outside within a certain time after power-on
The password entered from the outside,
Compare with the password stored in the storage means
When the comparison result of the comparing means and the comparing means match, the encryption
Enable the decryption / decryption means, and
If they do not match, invalidate the encryption / decryption means.
Encryption restriction means and encryption / decryption means while using the
When an error occurs in the integrated circuit device, the error history is retained.
Error history holding means for storing
Cryptographic integrated circuit device. 2. The cryptographic integrated circuit device according to claim 1,
Communication between a terminal device having a storage device, a central processing unit, and a memory, and a host computer disposed in a center or the like.
An encrypted data communication system characterized by being connected by a line
M