JP4678335B2 - Physical random number generator - Google Patents

Description

  The present invention relates to a random number generator suitable for use in encrypted communication, security, statistics, numerical simulation, probability lottery, amusement, and the like.

  In recent years, high-speed and high-quality random numbers are required in the security communication field, etc. in order to process (encrypt) large amounts of data and perform reliable authentication due to advances in communication technology, handling of personal information, electronic transactions, etc. In numerical simulations, it is possible to process a larger amount of data by increasing the CPU speed, advances in parallel processing, and pursuing high precision and efficiency. Random numbers are needed.

  There are two types of random numbers: algorithmic (calculated) pseudo-random numbers and physical random numbers using physical phenomena in nature. Since pseudo-random numbers are calculated using an algorithm that gives initial values, the initial values and algorithms are known. There is a drawback that a random number sequence is predicted. In addition, since the pseudo-random number has periodicity in the random number sequence, it may be unsuitable for use such as security and simulation.

  On the other hand, physical random numbers are generated based on random physical phenomena typified by thermal noise inside the semiconductor, so initial values and algorithms such as pseudo-random numbers are unnecessary, and the random number sequence has no periodicity. Therefore, it is impossible to predict random numbers.

  For these reasons, there is an increasing need for physical random numbers in the security communication field that requires difficulty in prediction and the statistical simulation field that requires true random numbers that do not require reproducibility.

Physical random number data is generally generated by a circuit that filters and amplifies electrical noise generated inside a semiconductor such as a diode or transistor as a random number source, measures A / D conversion, latches, etc., and converts it into data. is there. (See Patent Document 1 and Patent Document 2)
Japanese Patent Laid-Open No. 11-085472 JP 2005-063250 A

By the way, in order to generate a physical random number at a high speed, a high-speed circuit capable of generating and amplifying electrical noise as a random number source at a high speed and converting it into data reliably is necessary. Since cost and advanced circuit technology are required, it is difficult to easily obtain high-speed physical random numbers at low cost.
In addition, by increasing the speed, the random number source may become unstable or the measurement accuracy may decrease, and the quality of the generated physical random number may decrease.
In addition, when a circuit breaks down, not only can random numbers be used, but the cost is inevitably high because the circuit is expensive.

  Further, as a means for accelerating physical random numbers, there is a method of storing low-speed physical random numbers in a recording medium and outputting them at a high speed when necessary (see Patent Document 1). Since the amount of data is limited, there is a drawback that it cannot be used for large-scale simulation, security, communication, etc. that always use random numbers at high speed.

  The present invention has been made in view of such conventional problems, and an object thereof is to provide an inexpensive and highly reliable physical random number generator capable of generating high-quality physical random numbers at high speed.

That is, the invention according to claim 1 is provided with a first random number test circuit that simultaneously generates random data having no correlation in synchronization with each other from a random number generation clock, and tests the quality of the generated random numbers. A plurality of (N) physical random number generation circuits, a control unit to which the random number test status from the first random number test circuit of the physical random number generation circuit is input, and a clock speed N times the random number generation clock. Cell random number acceleration clock generation circuit for generating cell random number acceleration clock, selector to which random number data 1 to N are input from the physical random number generation circuit, and cell random number acceleration clock from the cell random number acceleration clock generation circuit first binding with but counter input, and registers the failure address information is input corresponding to the failed the physical random number generation circuit from the control unit It and a circuit, and the first coupling circuit is sequentially switched select address of the selector by the output of the counter which is operated by the random number faster clock, 1 data the random number data 1~N input Combined within a period and output as a series of random numbers, and when the failure address information is held in the register, the counter does not output the address specified by the failure address information, the next address By outputting only bad random number data from the series of random number data .

  According to a second aspect of the present invention, there is provided the physical random number generation device according to the first aspect, wherein a physical random number generation circuit for improving quality different from the plurality of physical random number generation circuits, and the physical random number for improving the quality An exclusive OR circuit that performs an exclusive OR of the random number output of the generation circuit and the random number output of the plurality of physical random number generation circuits is provided.

According to a third aspect of the present invention, there is provided a plurality of physical random number generation blocks each having the physical random number generation device according to the first or second aspect as one block, and within one data period of the physical random number generation block. And a second combining circuit for combining each random number data generated by the plurality of physical random number generation blocks into a series of random number data.

Further, the present invention described in claim 4 is the physical random number generator according to claim 3 , wherein each of the physical random number generation blocks is provided with a second random number test circuit that verifies the quality of the generated random numbers, And a control unit that invalidates the defective physical random number generation block based on the test result of the second random number test circuit.

According to the first aspect of the present invention, when a plurality of mounted physical random number generation circuits are operated simultaneously, the amount of random number data obtained is multiplied by the number of mounted random numbers. The speed will be doubled. Even if the random number quality of individual physical random number generation circuits is slightly biased, the quality of random numbers is improved by combining them together.
Therefore, it is possible to realize an inexpensive physical random number generation device that can easily generate high-quality physical random numbers at high speed.

  According to the second aspect of the invention, by performing an exclusive OR of the random number output of each physical random number generation circuit and the random number output of another physical random number generation circuit, a random number with further improved quality can be obtained. it can.

In addition, according to the first or second aspect of the present invention, since a defective physical random number circuit can be found by the random number test circuit, efficient and accurate repair can be performed by replacing only the defective physical random number circuit. . In addition, it is possible to invalidate the physical random number generation circuit that became defective during repair work and continue generating random numbers with a normal physical random number generation circuit, thus minimizing the effects of failure. .

According to the third aspect of the present invention, when a plurality of mounted random number generation blocks are simultaneously operated, the amount of random number data obtained is multiplied by the number of blocks, and when this is combined with a series of random numbers, the random number generation speed is the number of mounted random numbers. The speed will be doubled. Moreover, even if there is a slight bias in the random number quality of individual random number generation blocks, the quality of random numbers is improved by combining them together.
Therefore, it is possible to realize an inexpensive physical random number generator that can generate higher-quality physical random numbers at higher speed.

Further, according to the invention of claim 4 , since the physical random number generation block that has become defective can be found by the random number test circuit, efficient and accurate repair can be performed by replacing only the defective physical random number generation block. Can be done. In addition, it is possible to invalidate a physical random number generation block that has become defective during repair work and continue generating random numbers with a normal physical random number generation block, thus minimizing the impact of failure. .

  Hereinafter, an embodiment of a physical random number generation device according to the present invention will be described with reference to FIGS.

1 and 3 show a configuration of the physical random number generation device 10 according to the first embodiment of the present embodiment.
As shown in FIG. 1, a physical random number generation device 10 according to the present embodiment includes a random number generation clock generation circuit 1 that generates a random number generation clock from a basic clock, and a cell random number acceleration that generates a cell random number acceleration clock from the basic clock. The clock generation circuit 2, a plurality (N) of physical random number generation cells 4 (physical random number generation circuit 4) that generate random number (physical random number) data in synchronization with the random number generation clock, and the plurality of physical random number generation cells 4 Are connected to the output side of the first combination circuit 5 and the first combination circuit 5 for combining the random number data 1 to N generated in step 1 to obtain a series of random number outputs synchronized with the cell random number acceleration clock. And a second test circuit 6. The plurality of physical random number generation cells 4 are not correlated with each other.

  The random number generation clock generation circuit 1 and the cell random number acceleration clock generation circuit 2 are both basic clock frequency dividing circuits, and the cell random number acceleration clock is N times the random number generation clock (the number of physical random number generation cells 4 mounted). The frequency dividing ratios of the frequency dividing circuits 1 and 2 are set so as to achieve a clock speed of (times). Therefore, a plurality of random number data strings from a plurality of physical random number generation cells 4 are generated by the first combining circuit 5. By combining them in synchronism with the cell random number acceleration clock, a random number of N times the original random number can be obtained, and the random number generation speed can be increased.

FIG. 2 shows the operation of the physical random number generation device 10 when three physical random number generation cells 4 are mounted.
As shown in “normal time” in FIG. 2, the random number data An, the random number data Bn, and the random number data Cn generated from the random number generation cells A, B, and C in synchronization with the random number generation clock are supplied to the first combination circuit 5. Are coupled to a series of random number data An, Bn, Cn in synchronization with a random number acceleration clock (cell random number acceleration clock) and output as a triple speed random number.

  As shown in FIG. 4, the first coupling circuit 5 includes a counter 12 and a selector 11. A random number acceleration clock (cell random number acceleration clock) is input to the clock input terminal CK of the counter 12, and a random number generation clock is input to the reset terminal RESET1. On the other hand, random number data 1 to N are input to the input terminals IN (1) to (N) of the selector 11, and a count output (selector address data) of the counter 12 is input to the select address terminal S.

  In the above configuration, the counter 12 is operated by the random number speed-up clock, and the select address of the selector 11 is sequentially switched by the count output, thereby combining the plurality of input random number data 1 to N within one data period. Can be output at high speed as a random number. When the combination of the random number data 1 to N in one data period is completed, the counter 12 is reset by the random number generation clock, so that a new combination operation of the random number data 1 to N in the next one data period is performed. The operation is repeated every random number generation clock. Thereby, high-speed output of random numbers is continuously performed.

  The second random number test circuit 6 in FIG. 1 tests the quality (randomness uniformity) of the random numbers output from the first combination circuit 5, for example, “Monobit Test” of the random number test standard FIPS140-2, Known methods such as “Porker Test”, “Runs Test”, and “Long Runs Test” can also be employed. The random number test result is output as the random number test status, and if the test fails, it is regarded as a failure.

Further, a circuit similar to the random number test circuit 6 is also mounted as a first test circuit (not shown) in each physical random number generation cell 4 so that each random number test circuit can be used when the apparatus is started up or when necessary during operation. The random quality test is performed by
When a failure of the physical random number generation cell 4 is found by the random number verification processing by the first verification circuit, the failed physical random number generation cell 4 is disconnected (invalidated) to another normal physical random number generation cell 4. Thus, random number generation continues.

For example, “at the time of failure” in FIG. 2 shows two processes (A) and (B) in the case where a failure of the random number generation cell B is found by the random number test process.
In the case of (a), when the random number data of each random number generation cell 4 is combined with the random number acceleration clock (cell random number acceleration clock) in the first combination circuit 5, the failed random number cell B is separated and the normal This is a method of reducing the speed of the random number acceleration clock so as to synchronize with the random number generation cell 4, and in the case of (b), the random number acceleration clock that is the timing for outputting the random number data from the failed random number generation cell 4 is In this method, only the generated random numbers of the normal random number generation cell 4 are thinned out and output in synchronization with the random number acceleration clock.

The first coupling circuit 5 shown in FIG. 4 includes a register 13 for performing the above-described operation at the time of failure.
The failure address information from the control unit 30 is input to the input terminal IN of the register 13, and the output (failure address data) is input to the counter 12 described above to control the counting operation of the counter 12. .
The control unit 30 is a circuit that controls the physical random number generator 10 in an integrated manner. The control unit 30 receives the random number test status from each random number test circuit, and grasps all the failure occurrence locations based on the random number test status. It can be done.

When a failure occurs, failure address information indicating which random number data is to be separated from the control unit 30 is input to the coupling circuit 5 and held in the register 13 in the coupling circuit 5. This failure address information designates a select address corresponding to defective random number data among a plurality of random number data 1 to N inputted to the selector 11 described above.
The counter 12 performs a counting operation in synchronization with the random number acceleration clock and sequentially updates the selector address. When the failure address information is held in the register 13, the address specified by the failure address information is Control is performed so that only normal random number data is output by outputting the next address without outputting. By this control, only the defective random number data can be separated from the series of random number data.

As described above, in the physical random number generation device 10 according to the first embodiment, when a plurality of mounted physical random number generation cells 4 are operated simultaneously, the amount of random number data obtained is multiplied by the number of mounted numbers, and when this is combined with a series of random numbers, The generation speed of will be increased by a factor of the number mounted.
Further, even if there is a slight deviation (uniformity in uniformity) in the random number quality of individual physical random number generation cells, these are combined into one, thereby improving the quality of the random number. Therefore, high-quality physical random numbers can be generated at high speed by using inexpensive physical random number generation cells with a random number generation speed lower than the target random number generation speed without using a high-speed random number source or high-speed circuit as in the past. An inexpensive physical random number generator that can generate a large amount can be realized.

In addition, each physical random number generation cell 4 is monitored by the first random number test circuit, and when a failure occurs, it can be repaired by replacing only the defective physical random number generation circuit 4, so that it is efficient and accurate. Repair is possible. Further, since the defective physical random number generation cell 4 can be disconnected and the generation of random numbers can be continued in the normal physical random number generation cell 4 even during the repair work, the influence of the failure can be minimized.
Further, the second random number test circuit 6 outputs a final random number due to a failure factor other than the plurality of physical random number generation cells 4 described above (cell random number acceleration clock generation circuit 2, first coupling circuit 5, wiring system between each circuit). It is possible to find defects. In this case, it is necessary to stop the physical random number generation device 10 (physical random number generation block 10 described later) and replace it with a normal one.

Further, in the physical random number generation device 10 of the present embodiment, as shown in FIG. 3, in addition to the plurality of physical random number generation cells 4 described above, a new physical random number generation cell 7 that generates random numbers in synchronization with the random number generation clock. (Quality improving physical random number generation cell 7) is provided.
By performing an exclusive OR operation between the random number output of the plurality of physical random number generation cells 4 (random number output of the first combination circuit 5) and the random number output of the physical random number generation cell 7 for improving quality, The quality is improved.

  Next, the physical random number generation device 20 according to the second embodiment of the present invention will be described with reference to FIGS.

The physical random number generation device 20 according to the second embodiment is illustrated using a plurality of (M) physical random number generation blocks 10 and the second combination circuit 15 each having the physical random number generation device 10 according to the first embodiment described above as one block. 1, and the combination of a plurality of random number data in the physical random number generation device 20 is performed in the same control form as in the first embodiment described above.
However, in this configuration, the random number generation clock generation circuit 1 and the cell random number acceleration clock generation circuit 2 in each physical random number generation block 10 are deleted, and instead of these, a random number generation clock generation circuit for generating a random number generation clock 1, three frequency dividing circuits, a cell random number acceleration clock generation circuit 2 for generating a cell random number acceleration clock, and a block random number acceleration clock generation circuit 3 for generating a block random number acceleration clock are newly added. Is provided.

Here, the cell random number acceleration clock has a clock speed that is N times the random number generation clock (multiple times the number of physical random number generation cells 4 mounted), and the block random number acceleration clock is M times the cell random number acceleration clock ( The frequency dividing ratios of the frequency dividing circuits 1 to 3 are set so that the clock speed of the physical random number generation block 10 is multiplied). Therefore, by combining the random number data 1 to M from the physical random number generation block 10 by the second combining circuit 15, an M-times random number can be obtained, and the random number generation can be speeded up.
That is, in this configuration, a random number can be finally obtained at a speed N × M times the random number generation speed of the physical random number generation cell 4, and a high-quality random number can be generated in a large amount at a higher speed. Can be realized.

Further, in this configuration, it is possible to cope with a request for further speedup by combining the required number of physical random number generation blocks 10 by the same method.
The control unit 30 automatically recognizes the numbers of the physical random number generation cell 4 and the physical random number generation block 10 at the time of activation, the condition of the random number generation clock for the physical random number generation cell 4 and the speed-up clock of the cell random number output, the physical random number generation block 10 Block random number output speed-up clock conditions, that is, the frequency division ratios of the random number generation clock generation circuit 1, the cell random number speed-up clock generation circuit 2, and the block random number speed-up clock generation circuit 3 are automatically set.

Next, the random number quality verification process in the physical random number generator 20 will be described.
The physical random number generation device 20 is composed of a plurality of random number generation units (random number generation cell 4, physical random number generation block 10, physical random number generation device 20), each of which is provided with a random number test circuit, When necessary, random number quality test processing is performed by a random number test circuit for each random number generation unit.

  The test process of the physical random number generation cell 4 is performed by the first random number test circuit (not shown) in the physical random number generation cell 4 described above, and the test process of the physical random number generation block 10 is performed by the second random number test circuit 6 (FIG. 1 and FIG. 3), and the verification process of the physical random number generator 20 which is the final output stage is performed by the third random number test circuit 16 shown in FIG.

  The identification information of the physical random number generation cell 4 in which a failure has occurred is transmitted and recorded to the physical random number generation block 10 on which the failure is detected and recorded in the control unit 30 according to the random number test status. Further, the identification information of the physical random number generation block 10 in which the failure has occurred is transmitted and recorded in the control unit 30 according to the random number test status.

In this way, the failure location in each random number generation unit is accurately grasped by the control unit 30, and the following controls (1) to (3) are performed according to the failure occurrence location.
(1) In the case of a failure of the physical random number generation cell 4, the failed physical random number generation cell 4 is disconnected, and random number generation is continued in another normal physical random number generation cell 4.
(2) In the case of a failure of the physical random number generation block 10, the failed physical random number generation block 10 is disconnected, and random number generation is continued in another normal physical random number generation block 10.
(3) In the case of a failure of the physical random number generation device 20 (defective final random number output to the outside), the entire device is stopped.

  Processing at the time of failure is performed in the corresponding first coupling circuit 5 or second coupling circuit 15. It should be noted that the processing at the time of failure by the second coupling circuit 15 (separation of the failed portion, change of random number speed-up clock, etc.) is performed in the same control form as the processing form by the first coupling circuit 5 described above.

FIG. 6 shows an operation in the case where a failure occurs in the above-described (2) physical random number generation block 10 in the random number quality verification process.
According to FIG. 6, random number test abnormality information (random number test status) is transmitted from the failed physical random number generation block 1, and the control unit 30 that has detected this information sends a connection condition change command (failure address information) to the second connection circuit 15. ) And the random number acceleration clock condition of the block random number acceleration clock generation circuit 3 are changed. In the second coupling circuit 15, the failed physical random number generation block 1 is disconnected based on the failed address information, and the final random number is continuously output in synchronization with the reset random number acceleration clock.
At the same time, the status of each failure is output from the control unit 30 to the outside as alarm information.

  In this way, each physical random number generation block 10 is monitored by the second random number test circuit, and if a failure is found, it can be repaired by replacing only the defective physical random number generation block 10. This makes it possible to restore the target accurately. In addition, since it is possible to continue generation of random numbers in the normal physical random number generation block 10 by separating the defective physical random number generation block during repair work, it is possible to minimize the influence of failure. .

FIG. 7 shows a high-speed physical random number generation module manufactured using the random number acceleration technology of the present invention.
The high-speed physical random number module 40 uses a mounting printed board 42 on which a plurality of physical random number generation ICs 41 are mounted as a random number generation block 42, and a plurality of physical random number generation ICs 41 mounted in a random number combining unit 43 including a combining circuit and a control unit. Random number data and a random number output of a physical random number generation IC provided for improving the quality are exclusive-ORed and output as a high-speed random number.

  This random number generation block 42 is prepared in the number corresponding to the target random number generation speed, and all random numbers are combined by the random number combination control unit 45 (equipped with CPU) of the control unit 44, and the I / O is passed through the FIFO memory 46. The interface is controlled by the O controller 47, for example, USB, PCI or the like, and is output as a final high-speed random number output at a constant speed by an external I / O bus.

The figure which shows the structure of the physical random number generator by 1st Embodiment of this invention. 3 is a timing chart showing the operation of the physical random number generation device according to the first embodiment. The figure which shows the structure different from FIG. 1 of the physical random number generator by 1st Embodiment. The figure which shows the structure of a coupling circuit. The figure which shows the structure of the physical random number generator by 2nd Embodiment of this invention. The figure which shows the operation | movement of a random number test abnormal process. The figure which shows the structure of the high-speed physical random number generation module shown as an Example of this invention.

Explanation of symbols

4 Physical random number generation circuit (physical random number generation cell)
5 First coupling circuit 6 Second random number test circuit 7 Quality improvement physical random number generation circuit (quality improvement physical random number generation cell)
8 Exclusive OR circuit 10 Physical random number generator (physical random number generation block)
15 Second coupling circuit 20 Physical random number generator 30 Control unit

Claims (4)

A plurality of (N) physical random number generation circuits provided with a first random number test circuit that simultaneously generates non-correlated random number data from a random number generation clock and that tests the quality of the generated random numbers. And a control unit to which the random number test status from the first random number test circuit of the physical random number generation circuit is input, and a cell random number high-speed clock that generates a cell random number acceleration clock at a clock speed N times the random number generation clock The random number data 1 to N from the physical random number generation circuit, the counter to which the cell random number acceleration clock from the cell random number clock generation circuit is input, and the control unit A first coupling circuit having a register to which failure address information corresponding to the failed physical random number generation circuit is input ,
The first combining circuit sequentially switches the select addresses of the selectors according to the output of the counter operated by the random number acceleration clock, and combines the input random number data 1 to N within one data period. When the failure address information is held in the register, the counter outputs the next address without outputting the address specified by the failure address information. A physical random number generator characterized in that only defective random number data is separated from a series of random number data .   Exclusive physical OR generator for quality improvement separate from the plurality of physical random number generators, exclusive OR for random output of the physical random number generator for quality improvement and random output of the plurality of physical random number generators The physical random number generation device according to claim 1, further comprising a logical OR circuit. A plurality of physical random number generation blocks each having the physical random number generation device according to claim 1 as one block, and each of the physical random number generation blocks generated by the plurality of physical random number generation blocks within one data period of the physical random number generation block physical random number generation device thing you anda second coupling circuit for coupling the random number data to a series of random number data. A second random number test circuit which is provided in each of the physical random number generation blocks and verifies the quality of the generated random numbers; and a control unit which invalidates the defective physical random number generation block based on the test result of the second random number test circuit ; The physical random number generation device according to claim 3, further comprising:

Images