JP3257506B2 - Highly reliable encryption mechanism - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a highly reliable encryption mechanism, and more particularly to a highly reliable encryption mechanism used in an information processing apparatus.

[0002]

2. Description of the Related Art In recent years, there has been an increasing need to encrypt data at the time of data transfer or data storage for the purpose of improving the security of data handled by a single computer system or via a network.

[0003] The encryption of this data and the decryption of the encrypted data require a considerable amount of processing, and software cannot provide sufficient performance. For this reason, dedicated hardware (encryption card) for performing data encryption / decryption processing is connected to speed up data encryption / decryption processing.

In the case of performing encryption / decryption using this encryption card, if a problem such as a failure occurs in the encryption card and the problem is not detected, there is a possibility that the converted data becomes incorrect data. .

In the case of data encryption / decryption in data transfer via a network or in the case of stored data decryption, there is a high possibility that the data will be rescued by re-execution or execution after repair. In the case where data encryption is performed at the time of data storage, if the data is stored as encrypted data without detecting that the conversion has failed, a serious problem that data cannot be correctly decrypted at the time of reading the data is caused. There is a risk.

As a prior art document, Japanese Patent Application Laid-Open No. 62-11 / 1987
No. 5941. In the “encryption processing system” disclosed in this publication, three or more data processing devices are provided and a DES (Data Encryption Sta.
ndard) is performed by at least two data processing devices, a failure of the data processing device is detected by comparing the outputs of the two data processing devices, and an erroneous operation is performed by specifying the failed data processing device and the failure. Reproducing the processed data.

[0007]

The first problem is that the "encryption processing system" disclosed in Japanese Patent Application Laid-Open No. Sho 62-115941 has a versatility that can be widely applied to any type of encryption. It is missing. The reason for this is that the processing is advanced by comparing the operation results of the respective stages constituting the encryption algorithm, and is specialized for DES encryption or similar encryption.

The second problem is that of Japanese Patent Application Laid-Open No. 62-11594.
In the “encryption processing system” disclosed in Japanese Patent Publication No.
In the case of a configuration of one data processing device, normal operation cannot be performed if even two data processing devices fail. The reason is that if two data processing devices fail, the operation results of the two data processing devices always become inconsistent, and the encryption / decryption process cannot be continued with only the remaining one normal data processing device. is there. Further, even when a common device such as an input / output control device or a comparator fails, the encryption / decryption process cannot be continued.

A first object of the present invention is to compare universally the data obtained as a result of encryption / decryption processing with a pair of encryption cards, so that it can be universally applied to all types of encryption without specializing in specific encryption. An object of the present invention is to provide a highly reliable encryption mechanism.

A second object of the present invention is to provide a high-reliability encryption system capable of continuing data encryption / decryption even when an encryption card fails.

[0011] The high-reliability method of encryption mechanism of the present invention, information
In the high-reliability scheme of the encryption mechanism in the processing unit,
The first hardware is a dedicated hardware that is mounted on the information processing apparatus and performs high-speed data encryption processing and data decryption processing .
Of the encryption card ( 31 in FIG. 1) and the information processing device
Speeds up data encryption and decryption
A second cryptographic card (FIG. 1)
32) and the encrypted data to the first encryption card or
Other instructs the decryption encrypted by the first encryption card
First encryption card control means for receiving the result data of the processing or decoding processing (131 in FIG. 1), the second encryption
Instruct the card to encrypt or decrypt data and
Result of encryption or decryption processing by an encryption card
Second encryption card control means for receiving data (1 in FIG. 1)
32), the encryption process and the decryption process of data the
A cryptographic operation means (14 in FIG. 1) performed by software processing by the information processing device, and a request for encryption of original data
Others Oyo the first based on a decoding request of encrypted-data-
And the first and second encryption card control means .
It said by two of the encryption card encryption of the original data or
Other instructs the decryption of the encrypted-data-the first Oyo
The first and second encryption card control means obtained from the first and second encryption card control means.
And the result data of the encryption or decryption processing by the second encryption card , and if they match, the result data is encrypted.
Returned to the encryption requestor or decryption requestor , and if they do not match, the cryptographic operation means encrypts or encrypts the original data.
Others the encryption operation and instructs the decryption of the encrypted-data-
Data resulting from encryption or decryption by
It is characterized by having encryption data comparison means (12 in FIG. 1) returned to the encryption requestor or decryption requester .

[0012] Further, according to the present invention, there is provided a method for enhancing the reliability of an encryption mechanism in an information processing apparatus having a storage device.
In a high reliability method, the information processing device is mounted on the information processing device,
A first encryption card ( 31 in FIG. 1) which is dedicated hardware for performing high-speed data encryption and decryption processing .
And a data encryption process implemented in the information processing apparatus.
Dedicated hardware that performs high-speed decoding
And a second encryption card (32 in FIG. 1) that instructs the first encryption card to encrypt or decrypt data .
Result of encryption or decryption processing by an encryption card
First encryption card control means for receiving the data (1, Figure 1
31 ) and encrypting or encrypting data in the second encryption card.
Instructs decryption and performs encryption processing using the second encryption card.
Second encryption for receiving result data of the encryption or decryption process
A card control means (132 in FIG. 1), processing data encryption
Management and cryptographic operation means for performing a decoding process with Sofutou <br/> E A processing by the information processing unit (14 in FIG. 1), wherein Symbol
Encryption or dark stored original data in the original data storage unit or encrypted-data-storage unit of the憶device
Request decryption of the issued data and return the returned data
The encrypted data storage unit or the original data storage
Data encryption processing means stored in the storage unit (11 in FIG. 1)
And the original data from the data encryption processing means.
Wherein according to said first and second cryptographic card relative to said first and second encryption card control means in response to the decoding request of the encrypted request or the encrypted-data-in over data origination
Instructs null data encryption or decryption of the encrypted data, and performs encryption by the first and second encryption cards.
Compares the result data of the processing or decoding processing, if they match return the result data to the data encryption processing unit, the said cryptographic calculation means if they do not match the original
Encryption or decryption processing by the encryption operation means instructs the encryption or the decryption of the encrypted-data-data
Encryption data comparison means (12 in FIG. 1) for returning the result data of the processing to the data encryption processing means .

Meanwhile, the recording medium of the present invention, computer instructs the first encryption data to the encryption card or decryption is a dedicated hardware which performs the encryption process and the decryption process of the data at high speed According to the first encryption card
Receive the result data of encryption or decryption processing
First encryption card control means (131 in FIG. 1), the data
Dedicated hardware for high-speed encryption and decryption processing
Data encryption on the second encryption card
Instructs decryption and performs encryption processing using the second encryption card
Alternatively, a second encryption key for receiving data resulting from the decryption processing.
Chromatography (132 of FIG. 1) de control means, our encryption of data
Cryptographic operation means for performing a pre-decoding by software processing by the computer (14 in FIG. 1), and cage
Request for encryption of digital data or decryption of encrypted data
The first and second encryption cards are used by the first and second encryption cards for the first and second encryption card control means based on the request.
An instruction is made to encrypt the original data or to decrypt the encrypted data, and the first and second encryption card control means are instructed.
By the first and second cryptographic cards obtained from the stage
Compare the result data of the encryption or decryption process ,
If they match, the result data is sent to the encryption requestor or decryption
Return to Yorimoto, the said cryptographic calculation means if they do not match
Encryption processing also by the cryptographic computation means instructs the encryption or the condensate <br/> No. of encrypted-data-original data
Is the encryption requestor or decryption of the decryption result data
A program for functioning as encrypted data comparison means (12 in FIG. 1) to be returned to the requestor is recorded.

Further, the recording medium of the present invention, computer instructs the first encryption data to the encryption card or decryption is a dedicated hardware which performs the encryption process and the decryption process of the data at high speed According to the first encryption card
Receive the result data of encryption or decryption processing
First encryption card control means (131 in FIG. 1), the data
Dedicated hardware for high-speed encryption and decryption processing
Data encryption on the second encryption card
Instructs decryption and performs encryption processing using the second encryption card
Alternatively, a second encryption key for receiving data resulting from the decryption processing.
Chromatography (132 of FIG. 1) de control means, our encryption of data
Cryptographic operation means (14 in FIG. 1) for performing decryption and decryption processing by software processing by the computer , and the storage device
Upper original data storage or encrypted data storage
Encryption or Sumide of stored original data to the
Data decryption request and return the returned result data to the
In the issued data storage unit or the original data storage unit
Data encryption processing means (11 in FIG. 1) to be stored , and the original data from the data encryption processing means.
Wherein according to said first and second cryptographic card relative to said first and second encryption card control means in response to the decoding request of the encrypted request or the encrypted-data-in data original
Instructing encryption of the encrypted data or decryption of the encrypted data, and performing encryption processing by the first and second encryption cards.
Comparing the result data of the encryption or decryption processing , if they match , return the result data to the data encryption processing means ,
If they do not match, the original data is stored in the cryptographic operation means.
Data encryption or decryption of the encrypted data
Of encryption or decryption by the cryptographic operation means.
A program for functioning as encrypted data comparison means (12 in FIG. 1) for returning the result data to the data encryption processing means is recorded.

[0015]

In the high reliability scheme of the encryption mechanism according to the present invention, the encrypted data comparison means encrypts and decrypts the same data using a pair of encryption card control means and a pair of encryption cards. , It is possible to detect in advance the injustice of the converted data due to a failure of the encryption card or the like. Furthermore, if a comparison error occurs, encryption / decryption is performed by software processing using cryptographic operation means, and the result data is obtained, thereby enabling the processing to be continued.

[0017]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of a highly reliable encryption mechanism according to the first embodiment of the present invention. The method for increasing the reliability of the encryption mechanism according to the present embodiment includes an information processing device 1 that operates under program control, a storage device 2 that stores information, and a pair of encryption cards 31 that encrypt and decrypt data. 32 constitute the main part.

The storage device 2 includes an original data storage unit 2
1 and an encrypted data storage unit 22.

The original data storage unit 21 stores data to be encrypted or decrypted data.

The encrypted data storage unit 22 stores data obtained by encrypting the data stored in the original data storage unit 21.

The information processing apparatus 1 includes a data encryption processing unit 11, an encrypted data comparison unit 12, a pair of encryption card control units 131 and 132, and an encryption operation unit 14. The information processing device 1 includes a CPU (Centra
l Processing Unit), any computer having a main storage device, etc., such as a host computer, a server, and a client.

The data encryption processing means 11 controls the encryption and decryption of data using the encrypted data comparison means 12 based on the data in the original data storage section 21 or the encrypted data storage section 22.

The cipher data comparing means 12 uses the cipher card control means 131 and 132, the cipher cards 31 and 32, and the cipher operation means 14 in response to a request from the data encryption processing means 11 to encrypt / decrypt the data. Decryption is performed, and the result data is returned to the data encryption processing unit 11.

Encryption card control means 131 and 132
Manages the initial setting and control of the encryption cards 31 and 32, instructs the encryption cards 31 and 32 to perform encryption / decryption, and receives the result data. Encryption card control means 1
31 and 132 are realized by software called a driver.

The cryptographic operation means 14 performs data encryption / decryption by software processing. Cryptographic operation means 14
Are DES, Triple DES, RSA (Rivest,
Data can be encrypted / decrypted by selectively using a designated one among a plurality of encryption algorithms such as Shamir, Adleman).

The encryption cards 31 and 32 are dedicated hardware for performing high-speed encryption / decryption of the same data as the encryption operation means 14. That is, the encryption cards 31 and 32 can also perform data encryption / decryption by selectively using one designated from among a plurality of encryption algorithms such as DES, triple DES, and RSA.

As shown in FIG. 2, for example, the encryption cards 31 and 32 include an encryption processing unit 33 for processing encryption and decryption, an encryption key storage unit 34 for storing an encryption key, and an encryption processing unit 33 and It is configured to include an input / output control unit 35 that controls input / output between the encryption key storage unit 34 and the information processing device 1. The cryptographic processing unit 33 is an arithmetic LSI (Large) for performing a plurality of encryption / decryption operations such as DES, triple DES, and RSA at high speed in hardware.
Scaled Integration). The encryption key storage unit 34 is a nonvolatile memory backed up by a built-in battery (not shown).

Referring to FIG. 3, encrypted data comparing means 1
The process 2 includes a data encryption / decryption request receiving step A1, an encryption / decryption instruction step A2 to the encryption card control means, an encryption / decryption processing result data receiving step A3, and a result data content matching. Judgment step A
4, a result data returning step A5, an encryption / decryption instruction step A6 to the cryptographic operation means, and an encryption / decryption processing result data receiving step A7.

Next, the operation of the thus-configured encryption mechanism according to the first embodiment of the high reliability system will be described in detail with reference to FIGS.

First, the data encryption processing means 11 takes in data from the original data storage unit 21 in the case of encryption and from the encrypted data storage unit 22 in the case of decryption.
The encryption / decryption of this data is performed by the encrypted data comparing means 12.
To ask. This request includes identification of encryption / decryption, designation of an encryption algorithm, and the like.

The encrypted data comparison means 12 receives the data and the request for encryption / decryption from the data encryption processing means 11 (step A1), and the encryption card control means 131 and 132 encrypt and decrypt the same data. Are respectively instructed (step A2).

Encryption card control means 131 and 132
According to the encryption / decryption instruction from the encrypted data comparison means 12, instructs the subordinate encryption cards 31 and 32 to perform encryption / decryption processing, and waits for the data.

In accordance with the instructions from the encryption card control means 131 and 132, the encryption cards 31 and 32 perform encryption / decryption of the received data by hardware processing, and transmit the converted result data to the requesting encryption card. Returned to control means 131 and 132.

More specifically, in the cryptographic cards 31 and 32, when the cryptographic processing unit 33 receives input data and an instruction including a distinction between encryption / decryption and designation of an encryption algorithm via the input / output control unit 35, The encryption processing unit 33 reads the encryption key from the encryption key storage unit 34, encrypts or decrypts the input data at a high speed using the encryption key, and outputs the data as the output data via the input / output control unit 35.
Output to

Encryption card control means 131 and 132
Returns the result data received from the encryption cards 31 and 32 to the encryption data comparison means 12.

When receiving the result data from the encryption card control means 131 and 132 (step A3), the encryption data comparison means 12 compares the contents of both (step A3).
4) If they match, the result data is returned to the data encryption processing means 11 (step A5).

If the result data does not match as a result of the comparison in step A4, the encrypted data comparison means 12 instructs the encryption operation means 14 to encrypt and decrypt the same data as instructed to the encryption card control means 131 and 132. The process of conversion is instructed (step A6).

When the cryptographic operation means 14 receives an instruction from the encrypted data comparing means 12 including data and encryption / decryption, designation of an encryption algorithm, etc., the encryption / decryption of the received data is designated. The conversion is performed using the software of the encryption algorithm, and the result data after the conversion is returned to the encryption data comparison unit 12 that is the request source. Note that the encryption / decryption process by the cryptographic operation means 14 is performed by software, and thus is slower than the encryption / decryption process performed by hardware in the encryption cards 31 and 32. Alternatively, there is an advantage that the processing can be reliably continued even in the event of a failure of 32. This is because software other than the cryptographic operation means 14 (for example, an application program using an encryption mechanism) also operates on the same information processing apparatus 1, and only the cryptographic operation means 14 rarely causes an error. (If another software also causes an error, it is a failure of the entire information processing apparatus 1 and the interruption of the processing is unavoidable.)

The encrypted data comparison means 12 receives the result data from the encryption operation means 14 (step A7),
Return to the data encryption processing means 11 (step A
5).

The data encryption processing unit 11 stores the result data received from the encrypted data comparison unit 12 in the encrypted data storage unit 22 in the case of encryption, and in the original data storage unit 21 in the case of decryption.

Next, a second embodiment of the present invention will be described with reference to the drawings.

Referring to FIG. 4, the method for increasing the reliability of the encryption mechanism according to the second embodiment of the present invention is the same as the method for increasing the reliability of the encryption mechanism according to the first embodiment shown in FIG. On the other hand, a recording medium 4 on which an encryption processing program is recorded is provided. The recording medium 4 may be a magnetic disk, a semiconductor memory, or another recording medium.

The encryption processing program is read from the recording medium 4 into the information processing apparatus 1, and controls the operation of the information processing apparatus 1.
Data encryption processing means 11, encrypted data comparison means 12,
Control is performed as the encryption card control means 131 and 132 and the encryption operation means 14. Since the operation of the information processing apparatus 1 under the control of the encryption processing program is exactly the same as that of the information processing apparatus 1 in the first embodiment,
I omit the detailed explanation.

[0045]

The first effect is that the present invention is not limited to a specific cipher, but can be applied to all ciphers in general. The reason is not to compare the output contents of each stage of the encryption / decryption process, but to detect the failure of the encryption card by comparing the result data of the encryption / decryption process with a pair of encryption cards. Because there is.

The second effect is that the processing can be continued even if a comparison error of the result data occurs due to a failure of the encryption card or the like. The reason is that, when a failure occurs in the encryption card, encryption / decryption processing is continued by software by the encryption operation means. In particular, there is an advantage that the encryption / decryption processing can be continued even if any one of the pair of encryption cards fails.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a highly reliable encryption mechanism according to a first embodiment of the present invention.

FIG. 2 is a diagram showing an example of an encryption card in FIG.

FIG. 3 is a flowchart showing a process of an encrypted data comparing unit in FIG. 1;

FIG. 4 is a block diagram showing a configuration of a high reliability scheme of an encryption mechanism according to a second embodiment of the present invention.

[Explanation of symbols]

REFERENCE SIGNS LIST 1 information processing device 2 storage device 4 recording medium 11 data encryption processing unit 12 encrypted data comparison unit 14 encryption operation unit 21 original data storage unit 22 encrypted data storage unit 31, 32 encryption card 33 encryption processing unit 34 encryption key storage unit 35 input / output control units 131, 132 encryption card control means A1 data encryption / decryption request receiving step A2 encryption / decryption instruction step to encryption card control means A3 encryption / decryption processing result data receiving step A4 result data Content match determination step A5 Result data return step A6 Encryption / decryption instruction step to cryptographic operation means A7 Encryption / decryption processing result data reception step

Continuation of the front page (58) Field surveyed (Int.Cl. ⁷ , DB name) H09C 1/00-5/00 H04K 1/00-3/00 H04L 9/00 G06F 11/16-11/20 310 Z JICST file (JOIS)

Claims (5)

(57) [Claims] 1. A high-reliability encryption mechanism in an information processing apparatus, wherein a first encryption card is mounted on the information processing apparatus and is dedicated hardware that performs high-speed data encryption and decryption processing. A second encryption card which is mounted on the information processing apparatus and is dedicated hardware for performing data encryption and decryption at high speed; and encrypting or decrypting data in the first encryption card. And a first encryption card control means for receiving data obtained as a result of encryption or decryption processing by the first encryption card; and instructing the second encryption card to encrypt or decrypt data, A second encryption card control means for receiving data obtained as a result of encryption or decryption processing by the second encryption card; and an information processing unit for encrypting and decrypting data. An encryption operation unit that performs software processing by the device; and the first and second encryption units that control the first and second encryption card control units based on an original data encryption request or an encrypted data decryption request. Instructs the card to encrypt the original data or decrypt the encrypted data, and performs the encryption or decryption by the first and second encryption cards obtained from the first and second encryption card control means. The result data of the encryption processing is compared, and if they match, the result data is returned to the encryption requestor or decryption requestor, and if they do not match, the encryption of the original data or the encrypted data is transmitted to the cryptographic operation means. And the result data of the encryption or decryption processing by the cryptographic operation means is returned to the encryption requestor or decryption requester. Reliable methods of encryption mechanism for encrypting the data comparing means, characterized by having that. 2. A high-reliability scheme of an encryption mechanism in an information processing apparatus including a storage device, wherein the hardware is a dedicated hardware that is mounted on the information processing apparatus and performs high-speed data encryption and decryption processing. A second encryption card which is mounted on the information processing apparatus and is dedicated hardware for performing data encryption and decryption at high speed; and encrypting data in the first encryption card. First encryption card control means for instructing encryption or decryption and receiving the data of the result of encryption or decryption by the first encryption card; and encrypting or decrypting data in the second encryption card. Second encryption card control means for instructing and receiving data resulting from the encryption or decryption processing by the second encryption card, and data encryption and decryption Requesting encryption of original data or decryption of encrypted data stored in an original data storage unit or an encrypted data storage unit on the storage device. A data encryption processing unit for storing the returned result data in the encrypted data storage unit or the original data storage unit; and an encryption request for the original data from the data encryption processing unit or a request for the encrypted data. In response to the decryption request, the first and second cryptographic card control means are instructed to encrypt the original data by the first and second cryptographic cards or to decrypt the encrypted data. The result data of the encryption process or the decryption process by the first and second encryption cards are compared, and if they match, the result is determined. The data is returned to the data encryption processing means, and if they do not match, the encryption operation means is instructed to encrypt the original data or to decrypt the encrypted data, and the encryption processing or decryption by the encryption operation means is performed. Cipher data comparing means for returning data obtained as a result of encryption processing to the data encryption processing means. 3. The method according to claim 1, wherein the first and second encryption cards and the encryption operation means can selectively execute one of a plurality of types of encryption and decryption. 2. A high reliability method of the encryption mechanism according to 2. 4. A computer instructs a first encryption card, which is hardware dedicated to high-speed data encryption and decryption processing, to encrypt or decrypt data and to use the first encryption card to perform data encryption and decryption. The first encryption card control means for receiving data obtained as a result of encryption or decryption processing, and the second encryption card, which is dedicated hardware for performing high-speed data encryption and decryption processing, encrypts or stores data in the second encryption card. A second encryption card control means for instructing decryption and receiving data obtained as a result of the encryption or decryption processing by the second encryption card, and an encryption system for performing data encryption and decryption by software processing by the computer; Computing means and the first and second ciphers based on a request to encrypt the original data or a request to decrypt the encrypted data. The first to the card control means
And an instruction for encrypting the original data or decrypting the encrypted data with the second encryption card, and using the first and second encryption cards obtained from the first and second encryption card control means. The result data of the encryption process or the decryption process is compared, and if they match, the result data is returned to the encryption requestor or the decryption requester, and if they do not match, the encryption operation means encrypts the original data. Alternatively, a program for instructing decryption of the encrypted data and functioning as encrypted data comparing means for returning data resulting from encryption or decryption processing by the encryption operation means to an encryption requestor or a decryption requester Recording medium on which is recorded. 5. A computer instructs a first encryption card, which is hardware dedicated to high-speed data encryption and decryption processing, to encrypt or decrypt data, and uses the first encryption card to perform data encryption and decryption. The first encryption card control means for receiving data obtained as a result of encryption or decryption processing, and the second encryption card, which is dedicated hardware for performing high-speed data encryption and decryption processing, encrypts or stores data in the second encryption card. A second encryption card control means for instructing decryption and receiving data obtained as a result of the encryption or decryption processing by the second encryption card, and an encryption system for performing data encryption and decryption by software processing by the computer; Calculation means for encrypting the original data stored in the original data storage unit or the encrypted data storage unit on the storage device; Or data encryption processing means for requesting decryption of encrypted data and storing the returned result data in the encrypted data storage unit or the original data storage unit, and the original data from the data encryption processing means. Encrypting the original data or encrypting the original data with the first and second encryption cards to the first and second encryption card control means in response to a data encryption request or a request to decrypt the encrypted data. Instructed to decrypt the encrypted data, compares the result data of the encryption processing or decryption processing by the first and second encryption cards, and if they match, returns the result data to the data encryption processing means. If they do not match, the encryption operation means is instructed to encrypt the original data or decrypt the encrypted data, and the encryption operation means is instructed. A recording medium recording a program for functioning that the result data encryption or decryption processing as the encrypted data comparison means for returning to said data encryption processor.