JPH0750663A - Card type cipher communication equipment - Google Patents

Abstract

PURPOSE:To attain high speed cipher communication, and to increase the number of card slots for extending an equipment by integrating a communication equipment with an enciphering device, and providing a switch part which switches three required modes. CONSTITUTION:A computer 1 communicates through a card type enciphering device 8 with a communication equipment 12. The device 8 is equipped with an interface control part 9, switch part 10, and integrated enciphering device 11 and communication equipment 12. The switch part 10 is switched according to the instruction of the computer 1, and one of three modes; communication equipment mode in which normal communication between the computer 1 and the communication equipment 12 is operated, enciphering function mode in which enciphering and decoding by the device 11 is operated, and cipher communication mode at the time of transmission is selected. Those enciphering device and communication equipment are not separated but integrated, so that high speed cipher communication can be attained. Also, the number of the card slots of the equipment is increased, so that the equipment whose card slots are decreased in number can be used together with the other extended equipment.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card type cryptographic communication device used for cryptographic communication between computers.

With the development of computer networks and inter-computer communication in recent years, security problems such as leakage of confidential information and theft of communication have occurred.
In order to prevent this, encryption of secret information and encrypted communication are required.

Therefore, for example, although a single encryption device for encrypting a file is provided, most of the devices that perform computer communication are small personal computers and word processors having a communication function. Is.

Therefore, since these devices have a small number of card slots for connecting expansion devices, there are few devices which can afford to newly connect an encryption device in addition to the communication device, and the encryption device and the communication device. Since the amount of data transferred between and increases the performance of the communication itself, it is necessary to integrate the communication device and the encryption device to speed up the process.

[0005]

2. Description of the Related Art FIG. 5 is an explanatory view of the prior art.
Inside, 1 is a computer, 2 is a CPU (central processing unit),
3 is a memory, 4 is an encryption device, and 5 is a communication device. Further, P1, P2, and P3 indicate the order of processing.

Conventionally, when encrypted communication is performed between computers, the communication device 5 and the encryption device 4 are provided in the computer 1.
Were inserted into separate expansion card slots. And
When encrypted communication is performed by the computer 1, the communication device 5 and the encryption device 4 are combined.

When performing the above-mentioned encrypted communication, the CPU
2 first reads the data from the memory 3 and transfers the data to the encryption device 4 (P1). Next, the data encrypted by the encryption device 4 is returned to the memory 3 again (P2),
Then, it transfers to the communication apparatus 5 (P3).

The communication device 5 processes the transferred data (encrypted data) and sends it out to the communication line to communicate with the partner device. The encryption algorithm used in the encryption device is a DES algorithm or FEA.
L algorithm, ENIGMA algorithm, and the like.

DES (Data Encryption Standard)
The algorithm is 197 from the National Bureau of Standards (NBS).
It is a data encryption standard announced in 1987. Also in Japan, it is defined as a JIS standard.

As the DES JIS standard, the processing protocol is "JIS X5051-1990" and the encryption mode is "JIS X5025-1990". The FEAL (Fast data Encipherment Algorithm) algorithm is a type of conventional key cryptosystem developed in Japan and introduced in 1987 in the credit information data communication system (CAFIS).

The ENIGMA algorithm is based on the ENIGMA cryptographic machine (through World War II,
Cryptographic machine used by the German army) was used. This algorithm is currently used for computer cryptographic communication.

[0012]

SUMMARY OF THE INVENTION The above-mentioned conventional devices have the following problems. : When performing encrypted communication, the number of data transfers (P
1, P2, P3) are increased, and the processing takes several times as long as that in normal communication. That is, the processing time for performing encrypted communication is delayed.

Since the communication device and the encryption device are separate, the number of card slots for expanding the device is increased. Therefore, for devices with few expansion card slots,
It could not be used with other expansion devices.

The present invention solves the above-mentioned conventional problems, speeds up the processing time when performing encrypted communication, and
The object is to enable a device having a small number of expansion card slots to be used together with another expansion device.

[0015]

FIG. 1 is a diagram for explaining the principle of the present invention. In FIG. 1, the same parts as those in FIG. 5 are designated by the same reference numerals. Further, 8 is a card type cryptographic communication device, 9 is an interface control unit, 10 is a switch unit, 11 is a cryptographic device, 12 is a communication device, and 18 is a cryptographic parameter memory.

In order to solve the above problems, the present invention has the following configuration. : A card-type cryptographic communication device that is connected to the computer 1 to perform cryptographic communication, and uses a communication device 12 that communicates with an external device via a communication line, and encrypts data using cryptographic parameters. , And an encryption device 11 that performs each process of decryption, an interface control unit 9 that performs interface control with the computer 1, and a switch unit 10 that switches a switch in accordance with a command input via the interface control unit 9. A card-type cryptographic communication device in which these are integrated.

In the configuration, the interface controller 9 is changed to the communication device 1 by switching the switch unit 10.
2, a communication function mode in which only communication is performed and an interface control unit 9 is connected to the encryption device 11 to perform only data encryption and decryption processing, and an interface control unit 9 Is connected to the encryption device 11 and the communication device 12 to enable selection of three modes of a cryptographic communication function mode for performing cryptographic communication.

In the configuration, the encryption device 11 is provided with the encryption parameter memory 18, and the encryption parameter memory 18 can set the encryption parameter sent from the computer 1 every time.

In the configuration, the encryption device 11 is provided with a rewritable nonvolatile memory, and encryption parameters are set in advance in the nonvolatile memory.

[0020]

The operation of the present invention based on the above configuration will be described with reference to FIG. : Description of communication function mode When the communication function mode is selected, first, the switch unit 10
The interface controller 9 and the communication device 12 are directly connected by switching.

At the time of transmission, the data from the computer 1 is sent from the interface control section 9 to the communication device 12 and is transmitted from the communication device 12 to the communication line, as in a normal communication device.

At the time of reception, the communication device 12 receives data from the communication line and sends the data to the computer 1 through the interface controller 9. : Description of encryption function mode If you select encryption function mode,
Data on the computer side is encrypted or decrypted. In this case, first, by switching the switch unit 10, the interface control unit 9 and the encryption device 11 are directly connected.

Next, the switch section 10 includes the encryption device 11
To the encryption parameter setting mode, and the encryption parameters sent from the computer 1 are transferred from the interface controller 9 to the encryption parameter memory 1 of the encryption device 11.
Set to 8.

When the interface controller 9 receives the data from the computer 1, the interface controller 9 sends the data to the encryption device 11. The encryption device 11 uses the encryption parameter to encrypt or decrypt the data sent from the computer 1.

After that, the encryption device 12 transmits again to the computer 1 via the interface control section 9. : Description of encrypted communication function mode (during transmission) When the encrypted communication function mode (during transmission) is selected, the interface unit 9 and the encryption device 11 are temporarily connected by switching the switch unit 10.

Next, the switch unit 10 sets the encryption device 11 to the encryption parameter setting mode, sends the input data from the computer 1 side to the encryption device 11, and sets it in the encryption parameter memory 18.

When the interface controller 9 receives the data from the computer 1, the interface controller 9 sends the data to the encryption device 11. When the encryption device 11 receives this data, it encrypts it using the encryption parameter.

When the data is encrypted, the switch unit 10
Includes a switch unit 10, an encryption device 11, and a communication device 12
Switch to the connection between. Then, the data encrypted by the encryption device 11 is sent to the communication device 12 and transmitted from the communication device 12 to the communication line.

Description of the cryptographic communication function mode (when receiving) When the cryptographic communication function mode (when receiving) is selected, first, the switch device 10 is switched to connect the cryptographic device 11 and the communication device 12.

Next, the switch section 10 includes the encryption device 11
Is set to the encryption parameter setting mode, and the encryption parameter sent from the computer 1 side is set in the encryption parameter memory 18 of the encryption device 11.

When the communication device 12 receives the data from the communication line, the data is sent to the encryption device 11. The encryption device 11 decrypts the received data using the encryption parameter.

When the data is decrypted, the switch unit 10
Switches the switch unit 10 to the connection between the encryption device 11 and the interface control unit 9, and transmits the decrypted data to the computer 1 side.

If the encryption parameter is set in the rewritable nonvolatile memory, the encryption device 11 performs the encryption process using the encryption parameter of the nonvolatile memory. Therefore, in this case, it is not necessary to set the encryption parameter by the computer 1. However, if it is desired to change the encryption parameter, the non-volatile memory can be rewritten.

By performing the mode switching as described above, a plurality of functions can be realized by one card type cryptographic communication device, and the number of data transfer in the cryptographic communication is smaller than that of the conventional device. Therefore, the processing time can be shortened.

Since the conventional encryption device and the communication device are integrated, even a device having a small number of expansion card slots can be used together with other expansion devices.

[0036]

Embodiments of the present invention will be described below with reference to the drawings. 2 to 4 are views showing an embodiment of the present invention. In FIGS. 2 to 4, the same parts as those in FIGS. 1 and 5 are designated by the same reference numerals. Further, 15 is a switching unit, 16 is a control unit, 17 is a modem, 19 is a DES encryption processing unit, and 20 is a DES encryption device.

In this embodiment, the communication device is composed of a modem, and DES (Data Encrypt) is used as an encryption algorithm.
(ion Standard) algorithm is used, and the encryption parameter is sent from the computer every time.

§1: Description of configuration of card-type cryptographic communication device--see FIG. 2 FIG. 2 is a block diagram of the card-type cryptographic communication device. As shown, the card-type cryptographic communication device 8 includes an interface control unit 9, a switch unit 10, and a DES cryptographic device 20.
And a modem (communication device) 17.

The switch section 10 is composed of a switching section 15 and a control section 16, and the DES encryption device 20 has an encryption parameter memory (RAM) 18.
And the DES encryption processing unit 19. Functions and the like of the above-mentioned respective parts are as follows.

The interface control section 9 exchanges commands and data (interface control) with the computer 1 and performs various controls inside the card type cryptographic communication device.

Under the control of the computer 1, the switch unit 10 sends the data input from the interface control unit 9 to the modem 17 or the DES encryption device 2.
Various switch switching processes such as switching whether to send to the modem 17 through 0 are performed.

A modem (a type of communication device) 17 performs data modulation and demodulation when performing data communication. The control unit 16 controls the switching unit 15, the encryption device 11, and the modem 17 according to the data sent from the computer 1 through the interface control unit 9.
Is to control.

The switching unit 15 controls the interface control unit 9 and the DE under the control of the control unit 16.
The switching between the S-encryption device 20 and the modem 17 is performed, and the connection of each functional mode is switched.

In this case, the function of the card type encryption communication device is changed to the "modem communication function mode" by the above switching.
(Communication function mode), "Cryptographic function mode", "Cryptographic communication function mode" (when sending / receiving).

The encryption device 11 is a device for encrypting the input plaintext into a ciphertext or decrypting the ciphertext into a plaintext by using the encryption parameter of the encryption parameter memory 18.

The encryption parameter memory 18 is a DE
A memory for storing “encryption parameters” used when performing encryption and decryption according to the S algorithm (R
AM). The "encryption parameter" is composed of "encryption key", "initial value 4", and "encryption mode" defined in the JIS standard.

The DES encryption device 20 performs encryption and decryption according to the DES algorithm. §2: Description of operation of card-type cryptographic communication device ... FIG.
Refer to FIG. 4. FIG. 3 and FIG. 4 are processing flow charts of the card type cryptographic communication device. FIG. 3A is a modem communication function mode, FIG. 3B is a cryptographic function mode, FIG. It is each processing flow chart of encryption communication function mode (at the time of reception).

In the card type cryptographic communication device having the above-mentioned configuration, the switch section 10 switches under the control of the computer 1, whereby the "modem communication function mode" (communication function mode), "encryption function mode", " Each mode of “encryption communication function mode” (during transmission / reception) is selected, and operation is performed in each selected mode.

The "modem communication function mode" is as follows.
Normal communication mode without encryption, "encryption function mode" is a mode that only performs encryption processing without communication, "encryption communication function mode" is a mode that uses encryption to communicate is there.

Each operation mode of the card type cryptographic communication device will be described below. In addition, S1-S38 shows each process number. Description of "modem communication function mode" ... See FIG. 3A. The processing when "modem communication function mode" is selected is as follows. First, under the control of the control unit 16,
The switching unit 15 includes an interface control unit 9 and
The modem 17 is directly connected (S1).

At the time of transmission (S2), the data from the computer 1 is sent from the interface control section 9 to the modem 17 (S3), and is modulated by the modem 17 (S4) as in a normal modem. Then, the modulated data is transmitted from the modem 17 to the communication line.

When receiving (S2), the data from the communication line is input to the modem 17 (S6).
To demodulate (S7). Then, the data is sent from the modem 17 to the computer 1 through the interface controller 9 (S
8).

Description of "encryption function mode" ... FIG. 3
Refer to B. The process when "encryption function mode" is selected is as follows. This encryption function mode is a function of encrypting or decrypting data on the computer side by the DES algorithm without performing communication.

In this case, first, under the control of the control unit 16, the switching unit 15 directly connects the interface control unit 9 and the encryption device 11 (S11). Next, the control unit 16 puts the DES encryption device 20 in the encryption parameter setting mode and sets the encryption parameter sent from the computer 1 side to the interface control unit 9
To the encryption parameter memory 18 of the DES encryption device 20
(S12).

The encryption parameter is composed of "encryption key", "initial value 4", and "encryption mode" defined in JIS standard. Then, when the interface control unit 9 receives the data from the computer 1, the interface control unit 9 sends the data to the DES encryption device 20. In the DES cryptographic device 20, the DES cryptographic processing unit 19 uses the cryptographic parameters of the cryptographic parameter memory 18 to encrypt or decrypt the data sent from the computer 1 (processing according to instructions from the computer). ) (S14).

After that, the DES encryption device 20 transmits again to the computer 1 via the interface control unit 9 (S15). In this mode, only data encryption and decryption are performed, and the card type encrypted communication device is used only as an encryption device.

In this case, for example, by encrypting the data,
It is stored in a flexible disk (floppy disk) or the like, and is used when another computer takes out encrypted data from the flexible disk and performs communication (when encryption and communication are performed separately).

Description of "encryption communication function mode" (during transmission) ... See FIG. 4C. When transmission is performed when "encryption communication function mode" is selected,
The processing is performed as follows. First, when transmitting in this mode, the switching unit 15 temporarily connects the interface control unit 9 and the DES encryption device 20 under the control of the control unit 16 (S21).

Next, the control section 16 puts the DES encryption device 20 in the encryption parameter setting mode, sends the input data from the computer 1 side to the DES encryption device 20, and sets it in the encryption parameter memory 18 (S2).
2).

When the interface control section 9 receives the data from the computer 1, this data is transferred to D
Send to the ES encryption device 20. When the DES encryption device 20 receives this data (S23), the DES encryption processing unit 1
9 encrypts using the encryption parameter of the encryption parameter memory 18 (S24).

When the data encryption is completed, the control unit 16 switches the switch unit 10 to the DES encryption device 20.
And switch to connect the modem 17 (S2
5). Then, the data encrypted by the DES encryption device 20 is sent to the modem 17 (S26) and modulated by the modem 17 (S27). The modulated data is transmitted from the modem 17 to the communication line (S28).

Description of "encryption communication function mode" (when receiving) ... See FIG. 4D When receiving when "encryption communication function mode" is selected,
The processing is performed as follows. First, in this mode, the switching unit 15 controls the D
The ES encryption device 20 and the modem 17 are connected (S31).

Next, the control unit 16 sets the DES encryption device 20 to the encryption parameter setting mode, and sets the encryption parameters sent from the computer 1 side in the encryption parameter memory 18 of the DES encryption device 20 (S32). ).

Then, the data from the communication line is transferred to the modem 1
7 is input (S33), demodulated (S34), and sent to the DES encryption device 20 (S35). In the DES encryption device 20,
The received data is decrypted using the encryption parameter of the encryption parameter memory 18 (S36).

When the data decryption is completed, the control unit 16 causes the switch unit 10 to move to the DES encryption device 20.
Switch to the connection of the interface control unit 9 (S3
7) Then, the decrypted data is transmitted to the computer 1 side (S38).

(Other Embodiments) The embodiments have been described above, but the present invention can also be implemented as follows. : The encryption algorithm used in the encryption device is not limited to the DES algorithm of the above-described embodiment, and the "FEAL algorithm", "ENIGMA algorithm" or the like can be used.

The communication device is not limited to the modem of the above-mentioned embodiment, but can be implemented by using other communication devices such as a transceiver for LAN and a digital communication device for ISDN.

It is also possible to use, for example, an EEPROM (rewritable non-volatile memory) as the encryption parameter memory provided in the encryption device, and to set the encryption parameter in advance in this EEPROM.

In this case, it is not necessary to send the encryption parameter from the computer every time. Further, when it is necessary to rewrite the encryption parameter (encryption key etc.), it is possible to rewrite it under the control of the computer.

The card-type cryptographic communication device of the present invention is inserted into a card slot of a computer for connection, but the invention is not limited to this, and it can be implemented by being incorporated in a computer, for example, and RS232C. It can also be implemented as an external encryption communication device connected to a port or the like.

: The interface control unit uses the JEID
A (Japan Electronic Industry Development Association) Interface Ver
4.1 (PCMCIA interface Ver2.0)
May be used.

The interface controller is RS23.
A 2C interface may be used.

[0073]

As described above, the present invention has the following effects. : The functions of the two expansion devices that have been conventionally used, that is, the communication device and the encryption device, can be realized by one expansion card.

A plurality of functions can be realized by one card type cryptographic communication device, and the number of times of data transfer when performing cryptographic communication is reduced as compared with the conventional device, and the processing time can be shortened.

Since the conventional encryption device and the communication device are integrated, even a device having a small number of expansion card slots can be used together with another expansion device. Each mode setting of "communication function mode", "encryption function mode" and "encryption communication function mode" can be performed with one card type cipher communication device. Therefore, a multifunctional, compact, and high-performance expansion card is realized.

[Brief description of drawings]

FIG. 1 is a diagram illustrating the principle of the present invention.

FIG. 2 is a block diagram of a card-type cryptographic communication device according to an embodiment.

FIG. 3 is a processing flowchart (A is a modem communication function mode, B is an encryption function mode) of a card-type cryptographic communication device according to an embodiment.

FIG. 4 is a processing flowchart of the card-type cryptographic communication device in the embodiment {C is a cryptographic communication function mode (during transmission), D
Is the encryption communication function mode (at the time of reception)}.

FIG. 5 is an explanatory diagram of a conventional technique.

[Explanation of symbols]

 1 computer 8 card type encryption device 9 interface control unit 10 switch unit 11 encryption device 12 communication device

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI Technical display location G06K 19/00 G09C 1/00 8837-5L

Claims (4)

[Claims] 1. A card type cryptographic communication device for performing cryptographic communication by connecting to a computer (1), comprising: a communication device (12) for communicating with an external device via a communication line; By using an encryption device (11) that performs each process of data encryption and decryption, an interface control unit (9) that performs interface control between the computer (1), and an interface control unit (9). A card type cryptographic communication device characterized in that a switch section (10) for switching a switch in accordance with a command inputted via the switch section (10) is provided and integrated. 2. The card type cryptographic communication device according to claim 1, wherein the interface control unit (9) is connected to the communication device (12) by switching the switch unit (10) to perform only communication. And an encryption function mode in which the interface control unit (9) is connected to the encryption device (11) to perform only data encryption and decryption processes, and the interface control unit (9) is connected to the encryption device (11). ,
And a card-type cryptographic communication device, wherein three modes of a cryptographic communication function mode for performing cryptographic communication by connecting to the communication device (12) are selectable. 3. The card type cryptographic communication device according to claim 1, wherein the cryptographic device (11) includes a cryptographic parameter memory (18).
A card-type cryptographic communication device characterized in that a cryptographic parameter sent from the computer (1) can be set in the cryptographic parameter memory (18) every time. 4. The card type cryptographic communication device according to claim 1, wherein the cryptographic device (11) is provided with a rewritable non-volatile memory, and the cryptographic parameters are set in advance in the non-volatile memory. Card-type cryptographic communication device characterized by.