JP3551889B2 - Information processing apparatus and private information security method - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to private information management technology, and in particular, uses private programs or data individually based on key information in an environment where a plurality of people can touch with one device, and The present invention relates to an information processing apparatus and a private information security method capable of preventing a program or data managed by a personal computer from being used or quoted by another person.
[0002]
[Prior art]
2. Description of the Related Art In recent years, a flash memory card which includes a PCMCIA interface or the like as an external storage device and is detachably connected to a personal computer main body has been used in a notebook personal computer or the like.
[0003]
However, the data stored in the flash memory card could be easily read regardless of the accessing person by removing the flash memory card from the main body of the personal computer and connecting it to another computer or the like. For this reason, flash memory cards are not suitable for storing confidential data.
[0004]
As a conventional technique for solving such a problem, for example, there is a technique disclosed in Japanese Patent Application Laid-Open No. H11-265318. That is, the prior art aims to provide a mutual authentication system and a mutual authentication method that can authenticate a person who accesses data stored in a removable storage device. And an access unit, wherein the access unit creates first authentication data based on a password supplied by an operation of the operator, creates a delivery key, and supplies the delivery key to the storage unit. First digest creation means for creating a first digest representing a result of converting the first authentication data so that the first authentication data cannot be substantially reverse-converted; and substantially incapable of performing the reverse conversion on the first authentication data. And a second digest creating unit that creates a second digest representing the result of the conversion and supplies the digest to the storage unit. A data storage unit having an area, a unit for storing the encrypted second authentication data, and a unit for decrypting the encrypted second authentication data using the delivery key supplied from the access unit. Generating a third digest representing the second authentication data converted so that the reverse conversion cannot be performed substantially, and supplying the third digest to the access means; A fourth digest creating means for creating a fourth digest representing what has been converted so that the inverse conversion cannot be performed, and obtaining a second digest from the access means so that the second and fourth digests are substantially It is determined whether the authentication data indicates the same authentication data, and if it is determined that the authentication data is indicated, the data supplied from the access means is stored and stored in the storage area in accordance with the instruction of the access means. Means for obtaining data from the area and supplying the data obtained from the storage area to the access means, wherein the access means obtains a third digest from the storage means, and the first and third digests Determining whether to indicate substantially the same authentication data, and when it is determined to indicate, indicates an instruction to request the storage means to acquire data from the storage area, an instruction to request storage of data in the storage area, and There is provided a means for supplying data to the storage means.
[0005]
According to such a mutual authentication system, the storage means and the access means are such that the authentication data stored in the storage means and the authentication data generated from the password supplied to the access means are substantially the same. After confirming the above, the user or the like is permitted to access the storage area of the data storage means. Therefore, if the password is not disclosed to anyone other than the user, the person accessing the data is authenticated.
[0006]
The access means includes means for creating a user key based on the password, encrypting the user key with the delivery key to create an encrypted user key, and supplying the encrypted user key to the storage means. Means having a storage area substantially inaccessible from the access means, and storing in the storage area a system key, encrypted second authentication data, and an encrypted unique key; Means for decrypting the encrypted user key supplied from the access means using the delivery key, and unique key decryption for decrypting the encrypted unique key using the system key and the decrypted user key Means, and authentication data decrypting means for decrypting the encrypted first authentication data using the decrypted unique key to create second authentication data. There. As a result, the secrecy of the second authentication data is enhanced, and the secrecy of the data used for decrypting the second authentication data is also enhanced. The permissible danger is reduced.
[0007]
The storage means, when the access means issues an instruction to request storage of data in the storage area and supplies data to be stored in the storage area, converts the supplied data into a decoded unique data. Means for encrypting using the key and storing the data in the storage area, and obtaining the encrypted data from the storage area when the access means instructs to obtain the data stored in the storage area. And means for decrypting using the decrypted unique key and supplying it to the access means. Thus, the data stored in the storage area of the data storage means is stored in a state where the data is encrypted with the unique key. For this reason, for example, even if the storage area receives an unauthorized access, the contents of the data will not be leaked unless the person who made the unauthorized access knows the unique key. Therefore, data confidentiality is further enhanced.
[0008]
The unique key decryption means comprises means for substantially preventing data generated for decrypting the encrypted unique key and the decrypted unique key from being supplied to the access means. The authentication data decrypting means may be configured to substantially provide that the data generated for decrypting the encrypted first authentication data and the second authentication data are supplied to the access means. A means for blocking may be provided. Accordingly, the data generated in the process of restoring the unique key and the authentication data is also kept secret, so that the danger that the data leaks to the outside and that the unique key and the authentication data are back calculated is reduced.
[0009]
Access means for generating a first random number; means for obtaining first delivery key information from the storage means; and means for creating a first delivery key based on the first delivery key information and the first random number. Means for acquiring a second random number from the storage means, generating second delivery key information based on the second random number and the first random number, and supplying the second delivery key information to the storage means. The storage means includes means for generating a second random number and a third random number, and creates first delivery key information based on the second and third random numbers, and stores the first delivery key information and the second delivery key information. And a second delivery key substantially identical to the first delivery key based on the third random number and the second delivery key information supplied from the access means. And means for performing the operation. As a result, the delivery key is also sent from the access means to the storage means while keeping the confidentiality. Therefore, the delivery key is illegally acquired, and the data exchanged between the access means and the storage means is illegally decrypted. Dangers such as
[0010]
The first to fourth digests include, for example, the access unit includes a unit that generates a fourth random number and supplies the generated random number to the storage unit, and the first digest creation unit includes the first authentication data and the fourth authentication data. Means for generating a first digest by obtaining a value of a one-way function having a random number as a variable, wherein the second digest generating means converts the first authentication data and the third random number into variables Means for generating a second digest by determining the value of the one-way function to be performed, wherein the third digest generating means comprises a one-way function using the second authentication data and the fourth random number as variables. Means for generating a third digest by calculating the value of the second digest data, wherein the fourth digest generating means obtains the value of the one-way function using the second authentication data and the third random number as variables. By the fourth die It generated by providing a means for creating a Esuto.
[0011]
The access means converts the identification information for identifying the operator, which is supplied in accordance with the operation of the operator, so that the inverse conversion cannot be substantially performed, creates signature information for identifying the operator, and stores the signature information. Means for supplying signature information to the means, and the storage means determines whether the signature information is stored in the storage area and the means for acquiring the signature information supplied from the access means, and determines that the signature information is not stored. When the signature information supplied from the access unit is stored in the storage area and it is determined that the signature information is stored, the stored signature information and the signature information supplied from the access unit are substantially the same. And means for refusing to follow the instruction given by the access means when it is determined whether or not to indicate the operator. In this way, if a person who has already accessed the storage area of the data storage means is substantially prevented from accessing the storage area by another person, the data in the storage area can be obtained by another person. The risk of being reduced.
[0012]
[Problems to be solved by the invention]
However, in the prior art, it is difficult for each person to independently use private programs or data based on key information in an environment where a plurality of people can touch with one device. There was a problem that it was not possible to prevent others from using or citing the program or data to be managed.
[0013]
The present invention has been made in view of such a problem, and an object of the present invention is to convert a private program or data based on key information in an environment where a plurality of people can touch with one device. Another object of the present invention is to provide an information processing apparatus and a private information security method that can be used independently by each individual and can prevent programs or data managed by the individual from being used or cited by others.
[0014]
[Means for Solving the Problems]
The gist of the invention according to claim 1 is that a plurality of detachable semiconductor storage units each including a program storage area and a key information storage area, and a system bus which selects one of the plurality of semiconductor storage units. Selector, a key information input means that allows key information to be input from the outside, and a selector determination circuit that determines which semiconductor storage unit is to be selected by the selector, the selector determination circuit, A function of comparing the key information stored in the key information storage area of the semiconductor storage unit with the key information input from the key information input unit and allowing the selector to select the semiconductor storage unit even if the key information matches. An information processing apparatus characterized by the following.
According to another aspect of the present invention, each of the plurality of semiconductor storage units is connected to a predetermined bus, and the bus is selectively connected to the system bus by the selector. A boot loader, a program storage area, a main storage unit, a control circuit including a CPU, and the selector determination circuit are connected to each other, and the key information input unit has a function of acquiring key information from the outside, and the selector determination circuit Connected to transmit the key information to the selector determination circuit, wherein the selector determination circuit is configured to output an instruction to the selector to connect to the selector and connect any of the buses to the system bus. An information processing apparatus according to claim 1 characterized by the above-mentioned.
The gist of the invention described in claim 3 is that the selector has means for acquiring key information of each of the plurality of semiconductor storage units and transmitting the key information to the selector determination circuit. Information processing device.
According to a fourth aspect of the present invention, there is provided the information processing apparatus according to any one of the first to third aspects, wherein the semiconductor storage unit is configured by an IC card.
The gist of the invention described in claim 5 is that, by setting the IC card in a device and providing key information from the outside, a program owned by the individual is executed, and processing is performed using private data. An information processing apparatus according to a fourth aspect is provided.
The gist of the invention according to claim 6 is that a plurality of detachable semiconductor storage units each including a program storage area and a key information storage area and one of the plurality of semiconductor storage units are selected. A selector connected to a system bus, key information input means for enabling external input of key information, and a selector determination circuit for determining which of the semiconductor storage units is to be selected by the selector; Has a function of comparing the key information stored in the key information storage area of the semiconductor storage unit with the key information input from the key information input unit and allowing the selector to select the semiconductor storage unit even if the key information matches. In the information processing device having: a step of storing different specific key information in each of the key information storage areas of the plurality of semiconductor storage units; and The selector determining circuit issues a request to the selector to collect key information stored in the semiconductor storage unit, and the key information input unit acquires key information from outside. Sending the key information obtained by the key information input means to the selector determination circuit; and determining that the key information of the semiconductor storage unit matches the key information obtained from the key information input means, If recognized, the selector controls the selector to connect the bus to the system bus, notifies the control circuit that the selector has connected the bus to the system bus, and based on the notification from the selector. The control circuit activates a boot loader and connects a program from a program storage area of the semiconductor storage unit to the system bus. Transferring the program to the program storage area, executing the transferred program using the CPU of the control circuit, and based on the key information newly obtained from the key information input means, the selector determination circuit A private information security method comprising the step of interrupting the control circuit through the system bus and stopping a program being executed.
[0015]
BEST MODE FOR CARRYING OUT THE INVENTION
(First Embodiment)
FIG. 1 is a functional block diagram for explaining an information processing apparatus 10 according to one embodiment of the present invention. In FIG. 1, 1, 2 and 3 are semiconductor storage units, 1A, 2A and 3A are program storage areas, 1B, 2B and 3B are key information storage areas, 10 is an information processing apparatus, 12 is key information input means, and 14 is A selector determination circuit, 16 is a control circuit, 18 is a selector, 20 is a boot loader, 22 is a program storage area, 24 is a main storage unit, 26 is a system bus, and 31, 32, and 33 are buses.
[0016]
The information processing apparatus 10 according to the present embodiment includes a detachable semiconductor storage unit 1 including a program storage area 1A and a key information storage area 1B, and a plurality of detachable semiconductor memories including a program storage area 2A and a key information storage area 2B. A storage section 2, a plurality of detachable semiconductor storage sections 3 each having a program storage area 3A and a key information storage area 3B, and selecting one of the semiconductor storage sections 1, 2, 3 by selecting a system bus 26, a key information input means 12 for inputting key information from the outside, and a selector determination circuit 14 for determining which semiconductor storage unit 1, 2, 3 is to be selected by the selector 18. Then, the selector determination circuit 14 compares the key information stored in the key information storage areas 1B, 2B, 3B of the semiconductor storage units 1, 2, 3 with the key information input from the key information input means 12, and compares the key information. I It has a feature of a semiconductor memory unit 2, 3 in that it has a function to select the selector 18.
[0017]
The semiconductor storage units 1, 2, and 3 are connected to buses 31, 32, and 33, respectively. The buses 31, 32, and 33 are selectively connected to the system bus 26 by the selector 18.
[0018]
The boot loader 20, the program storage area 22, the main storage unit 24, the control circuit 16 including the CPU, and the selector determination circuit 14 are connected to the system bus 26, respectively.
[0019]
The key information input means 12 has a function of acquiring key information from the outside, and is connected to the selector determination circuit 14 and transmits the key information to the selector determination circuit 14.
[0020]
The selector determination circuit 14 instructs the selector 18 to connect to the selector 18 and connect any of the buses 31, 32, 33 to the system bus 26.
[0021]
Further, the selector 18 has means for acquiring the key information of the semiconductor storage units 1, 2, 3 and transmitting the key information to the selector determination circuit 14.
[0022]
Next, the operation of the information processing apparatus 10 (private information security method) will be described. Referring to FIG. 1, in the present embodiment, different specific key information is stored in key information storage areas 1B, 2B, and 3B of a plurality of semiconductor storage units 1, 2, and 3, respectively.
[0023]
The selector 18 can recognize this key information through the buses 31, 32, and 33. The selector determination circuit 14 issues a request to the selector 18 and collects each key information stored in the semiconductor storage units 1, 2, and 3.
[0024]
The key information input means 12 has means for obtaining key information from outside. For example, this includes inputting a password from a keyboard or inputting fingerprint information from a scanner. The concept of the key is palm print information, iris information, and a wide variety of other concepts. Here, a password is assumed as the key information. That is, the key may be read as a password. The key information obtained by the key information input means 12 is sent to the selector determination circuit 14.
[0025]
Here, when the selector determination circuit 14 recognizes that the key information of the semiconductor storage unit 1 and the key information obtained from the key information input unit 12 match, the selector 18 is controlled to connect the bus 31 to the system bus 26. The selector 18 notifies the control circuit 16 that the bus 31 has been connected to the system bus 26. This notification is not limited to the bus 31, and the selector 18 notifies the control circuit 16 if one of the buses 32 and 33 is connected to the system bus 26.
[0026]
The control circuit 16 activates the boot loader 20 based on the notification from the selector 18 and transfers the program from the program storage area 1A of the semiconductor storage unit 1 to the program storage area 22 connected to the system bus 26. Then, the transferred program is executed by using the CPU of the control circuit 16.
[0027]
Based on the key information newly obtained from the key information input means 12, the selector determination circuit 14 interrupts the control circuit 16 through the system bus 26 and stops the program being executed.
[0028]
In the present embodiment, three examples of the semiconductor storage units 1, 2, 3 are shown. However, the present invention is not limited to this example, and an extension from one to a finite n (natural number) is considered. Is easy.
[0029]
Since the present embodiment is configured as described above, the following effects can be obtained. First, the first effect is that the key information can be input and the corresponding programs in the semiconductor storage units 1, 2, and 3 can be executed. It can be operated.
[0030]
The second effect is that it is possible to prohibit the use of programs and data by mistake or obvious intention since it cannot be executed by other people.
[0031]
A third effect is that a necessary program can be selectively selected by connecting a plurality of semiconductor storage units 1, 2, 3 to each other. For example, when it is assumed that the information processing apparatus 10 is used as a video game, an effect is provided in which a user can select and use a necessary program (game).
[0032]
The fourth effect is that a program can be easily changed or extended by attaching and detaching the semiconductor storage units 1, 2, and 3. For example, in the case where data of a digital camera and digital data of music are stored in the semiconductor storage units 1, 2, 3 simultaneously with a program, the data can be easily exchanged as needed.
[0033]
(Second embodiment)
In the present embodiment, the semiconductor storage units 1, 2, and 3 are configured by IC cards, and are set in the information processing apparatus 10 and provided with key information from the outside, thereby executing a personally owned program and transmitting private data. The feature is that the processing is performed by using.
[0034]
It should be noted that the present invention is not limited to the above embodiments, and it is clear that each embodiment can be appropriately modified within the scope of the technical idea of the present invention. In addition, the number, position, shape, and the like of the above-mentioned constituent members are not limited to the above-described embodiment, and can be set to numbers, positions, shapes, and the like suitable for carrying out the present invention. In each drawing, the same components are denoted by the same reference numerals.
[0035]
【The invention's effect】
Since the present invention is configured as described above, the following effects can be obtained. First, the first effect is that the key information can be input and the corresponding program of the semiconductor storage unit can be executed, so that the key holder can operate using the necessary programs and data. It is.
[0036]
The second effect is that it is possible to prohibit the use of programs and data by mistake or obvious intention since it cannot be executed by other people.
[0037]
A third effect is that a necessary program can be selectively selected by connecting a plurality of semiconductor storage units. For example, when the information processing apparatus is assumed to be used as a video game, an effect is provided in which a user can select and use a necessary program (game).
[0038]
The fourth effect is that the program can be easily changed or expanded by attaching and detaching the semiconductor storage unit. For example, when data of a digital camera and digital data of music are stored in a semiconductor storage unit at the same time as a program, the data can be easily exchanged as needed.
[Brief description of the drawings]
FIG. 1 is a functional block diagram for explaining an information processing apparatus according to an embodiment of the present invention.
[Explanation of symbols]
1, 2, 3 ... semiconductor storage sections 1A, 2A, 3A ... program storage areas 1B, 2B, 3B ... key information storage area 10 ... information processing device 12 ... key information input means 14 ... selector determination circuit 16 ... control circuit 18 ... Selector 20 boot loader 22 program storage area 24 main storage unit 26 system buses 31, 32, 33 bus

Claims (6)

A plurality of detachable semiconductor storage units having a program storage area and a key information storage area,
A selector for selecting any one of the plurality of semiconductor storage units and connecting to the system bus;
Key information input means for inputting key information from outside;
A selector determination circuit that determines which of the semiconductor storage units is to be selected by the selector,
The selector determination circuit compares the key information stored in the key information storage area of the semiconductor storage unit with the key information input from the key information input unit, and matches the key information, but determines the semiconductor storage unit as the selector. An information processing apparatus having a function of making a selection. Each of the plurality of semiconductor storage units is connected to a predetermined bus,
The bus is selectively connected to the system bus by the selector;
A boot loader, a program storage area, a main storage unit, a control circuit including a CPU, and the selector determination circuit are connected to the system bus, respectively.
The key information input means has a function of acquiring key information from the outside, is connected to the selector determination circuit and transmits key information to the selector determination circuit,
2. The information processing apparatus according to claim 1, wherein the selector determination circuit is configured to output an instruction to the selector to connect to the selector and connect one of the buses to the system bus. 3. The information processing apparatus according to claim 2, wherein the selector has means for acquiring key information of each of the plurality of semiconductor storage units and transmitting the key information to the selector determination circuit. The information processing device according to claim 1, wherein the semiconductor storage unit is configured by an IC card. 5. The information processing device according to claim 4, wherein the IC card is set in the device and key information is given from the outside to execute a personally owned program and perform processing using private data. A plurality of detachable semiconductor storage units each including a program storage area and a key information storage area, a selector for selecting any one of the plurality of semiconductor storage units and connecting to a system bus; Key information input means for enabling input, and a selector determination circuit for determining which semiconductor storage unit is to be selected by the selector, wherein the selector determination circuit is provided in the key information storage area of the semiconductor storage unit. In an information processing apparatus having a function of causing the selector to select the semiconductor storage unit, although the key information entered and the key information input from the key information input unit are compared and matched.
A step of storing different specific key information in the key information storage area of each of the plurality of semiconductor storage units,
A step in which the selector recognizes the key information through a bus;
A step in which the selector determination circuit collects each key information stored in the semiconductor storage unit by issuing a request to the selector;
A step in which the key information input means acquires key information from outside,
Sending the key information obtained by the key information input unit to the selector determination circuit; and when the selector determination circuit recognizes that the key information of the semiconductor storage unit matches the key information obtained from the key information input unit. Controlling the selector to connect the bus to the system bus, and notifying the control circuit that the selector has connected the bus to the system bus;
The control circuit, based on the notification from the selector, activates a boot loader and transfers a program from a program storage area of the semiconductor storage unit to the program storage area connected to the system bus;
Executing the transferred program using the CPU of the control circuit, and based on the key information newly obtained from the key information input means, the selector determination circuit interrupts the control circuit through the system bus, A private information security method comprising a step of stopping a running program.

Images