JPH11103290A - Enciphered information communication equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an equipment, with which information is exchanged for partially transmitting enciphered data through different routes and the data generated by enciphering are deciphered from key information, by theoretically or physically sending the divided enciphered information through the plural routes. SOLUTION: The information from an information input part 2-11 of a transmission side/communicating person 1 is enciphered by the operation of an enciphering part 2-13 for communication data and separately outputted to an information part 2-15 and a key part 2-16. A communication part 2-18 connected to the information part 2-15 outputs the enciphered information part through an ordinary information route k1 to a target communicating person 2, and the data of a communication part 2-19 connected to the key part 2-16 having the different route/communication means are delivered through a server to the target communicating person 2. Enciphered information part 2-25 and key part 2-26 are respectively temporarily stored in an information storage part 2-27, decoded by a decoding part 2-24 and outputted from an information output part 2-22.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention relates to the Internet,
The present invention relates to an encrypted information exchange apparatus capable of expanding the range of use by enhancing confidentiality in information exchange in wired / wireless communication (public network) using an intranet and a general public line.

[0002]

2. Description of the Related Art Conventionally, JP-A-3-131139 discloses a management technique for concealing an encryption key.
Japanese Patent Application Laid-Open No. Hei 7-66803 discloses an unspecified encryption communication between a plurality of users and encryption key management. Information could not be defended against reverse analysis of information.

Conventionally, various types of encryption have been implemented in order to keep the contents of information exchange secret from outsiders. However, in the case of advanced encryption, complicated encryption / decryption procedures are required.
Even if the speed of communication channels and the speed of encryption / decryption equipment have increased,
It was a heavy burden.

Until now, large-scale networks have mainly used closed networks such as dedicated lines, but as the use of the Internet and intranets has expanded, the use of open networks has progressed, but it is difficult to ensure security. Therefore, the use of important items has been delayed, and it is necessary to increase the security and increase the use of information by dividing the information. It is also desired to provide a server and provide an information path in order to realize information exchange by a plurality of paths of divided information with high security with less equipment and at low cost.

Therefore, the present invention is to solve the above-mentioned problem, and as an encryption method having high confidentiality even with simple encryption, information is divided and information exchange through a plurality of paths is performed. The purpose of the present invention is to provide an encrypted information exchange device for performing information exchange in which encrypted data is partially changed to another path and separating key data and data generated by encryption. And

Until now, large-scale networks have mainly used closed networks such as dedicated lines, but as the use of the Internet and intranets has expanded, the use of open networks has progressed, but it is difficult to ensure security. Therefore, the use of important items has been delayed, and the aim is to increase security and increase security by dividing information. In addition, a server is installed and an information path is provided in order to realize information exchange by a plurality of paths of divided information with high security with less equipment and at low cost.

[0007]

According to a first aspect of the present invention, there is provided an encrypted information exchange apparatus comprising: a dividing unit for dividing data of encrypted information; and a logically or physically dividing the divided encrypted information through a plurality of paths. An encrypted information communication device comprising: a transmitting unit.

According to a second aspect of the present invention, in the encrypted information exchange apparatus, the encrypted information transmits encryption key information for decrypting the encrypted information through a route different from a data portion generated by the encryption. I do.

According to a third aspect of the present invention, there is provided an encrypted information communication apparatus, comprising: a dividing unit for dividing data of the encrypted information; a transmitting unit for logically or physically transmitting the divided encrypted information through a plurality of paths; The communication means is an encrypted information communication apparatus characterized in that relay server means serving as an information path is installed, and a communicator exchanges information with a target communicator via the relay server.

According to the first aspect of the present invention, there is provided a device for preventing information leakage by an eavesdropper of information for the purpose of information decryption and information infringement. All the information content is sent out, but by dividing the data of the encrypted information and sending it logically or physically through multiple routes, the information held by the information interceptor is made partial and the interception of the information is meaningless I do.

According to the encrypted information communication device of the present invention, the encrypted information sends encryption key information for decrypting the encrypted information through a different route from a data portion generated by the encryption. In the process of encrypting data by the common key method, encryption key information is generated together with data encryption. If the encrypted data and the encryption key information are intercepted, accumulated, and analyzed, the possibility of information decryption increases.

In order to prevent this, only the encrypted data is passed through the normal path, and the encryption key information is sent through another path, thereby effectively dispersing the information for decryption from the eavesdropper, Make decryption difficult.

According to the encrypted information communication apparatus of the third aspect, the separation information is communicated via the server, and when the communication paths are plural and the communication parties have mutual paths, the communication paths are individually set. It is necessary to install a large number (see FIG. 6). On the other hand, the information path to be added to the normal information path is not directly drawn between the communicating parties, but a relay server is installed, and the communicating party exchanges information with the intended communicating party via the server. According to the method of claim 3, the communication person can realize communication by a plurality of paths only by setting an information path to the server in addition to the normal information path, and the number of paths to be set individually for each communication person becomes the minimum path, and The larger the value is, the higher the effect is and the required number of paths can be reduced.

[0014]

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram showing an embodiment of the present invention; FIG. 1 shows a diagram of the interrelationship between a correspondent and an information path according to an embodiment of the present invention.

FIG. 2 shows a diagram of the interaction between the correspondent and the information path of FIG. (1-6) represents a group of encrypted communication parties, and in the example, three communication parties from communication party 1 (1-7) to communication party 3 (1-9)
Location.

(1-1) represents a normal information route, and (1)
-17) indicates the path of the information divided by encryption.
Correspondent 1 (1-7) has information path 1 (1-10),
Correspondent 2 (1-8) has information path 1 (1-11) and information path 2 (1-12), and correspondent 3 (1-9) has information path 3 (1-13).

In the information path 1, comrades can communicate with each other.
The same applies to the information paths 2 and 3. The communicator exchanges the information section divided by encryption via a common shared communication path, and the key section exchanges information via a server.

The server may be used for wireless communication, PHS, optical communication, satellite communication,
It has an information path based on various media and communication procedures such as the use of a cable television network, and provides an information path to a registered user. When public communication is used as a communication channel, even if information is sent from different telephone numbers, the information actually flows through the same telephone line, and it is easy to observe. Therefore,
By using different media for communication, hearing can be prevented. The following are assumed as different communication paths.

Public communication using a public line metal cable,
Leased line communication Wireless public communication by mobile phones and PHS Dedicated line communication by electric and railway companies' metal cables and optical fibers Wireless communication using terrestrial waves and communication satellites.

The key part generated by the encryption is searched by the communication part for a server that provides an information path to a target communicator. If the connected server cannot directly provide the information path to the target communication person, the information path via another server is also searched. As a result, the information output to the key portion is sent to the intended communicator via another server by another route / communication means.

As an example of connection using a server,
(1-7) and communicator 2 (1-8) communicate with communication channel 1 (1-1).
0, 1-14, 1-18, 1-15, 1-11) and the server 1 (1-25). The communication party 1 (1-7) and the communication party 3 (1-9) are connected to the communication path 1 (1-10, 1-1).
4, 1-18) and server 1 (1-25, 1-24) / server 2 (1-26) and communication path 3 (1-20, 1-26).
16, 1-13).

FIG. 2 is a block diagram showing an embodiment of the encryption / decryption device.

The communicator 1 in the upper part of FIG. 2 is the communicator 1 in FIG.
(1-7), which uses the encryption device (A1), and the lower communicator 2 represents the communicator 2 (1-8) in FIG. 1 and uses the encryption device (A2). The flow of information from the correspondent 1 to the correspondent 2 will be described.

The information from the information input section (2-11) of the transmitting side / communicator 1 (A1) is transmitted to the communication data encrypting section (2-11).
The information is encrypted by the operation of 13), and is separated into an information part (2-15) and a key part (2-16) and output (1-C, 1-D).

The communication section (2-18) connected to the information section (2-15) outputs the encrypted information section to the target communicator through the normal information path (k1) (1-G), The data of the communication unit (2-18) connected to the key unit (2-16) having a separate route / communication means is sent to the intended communication party 2 (1-8) via the server (k1).

Since the input (2-G, 2-H) of the information of the receiving side / communicator 2 (A2) arrives by different routes and communication means, the encrypted information part (2-25) The key portions (2-26) are temporarily stored (2-27), respectively.
After both are prepared, the information becomes normal information by the decoding unit (2-24) and is output (2-A) from the information output unit (2-22).

FIG. 3 shows a diagram of the structure and transition of the encrypted communication information, and FIG. 4 shows a processing flow of the encryption device.

In FIG. 3 and FIG. 4, the data flow and function of the encrypting device are shown as the communication information (today is fine weather) is encrypted from the transmitting side and received and decrypted at the receiving side. Show.

In ordinary encrypted information, the information portion converted and encrypted by the encryption key and the encrypted information (encryption key portion) generated by the information and the encryption key are integrated and separated. Output.

(4-4) When the information input section (2-11) receives the communication information of (Today is fine weather) (3-2),
The header is separated into a header having information such as a destination and a body having communication contents of (Today is fine weather), and the body is transferred to the encryption section (2-13) (2-1B).

(4-5) The encryption section (2-13) encrypts the information (X5 key Y) by using the information ("Today is fine weather") in the body section and the encryption key (4-6) separately stored. #
3s) (3-5) and an information key (: JV) (3-7) are generated. (4-7) The encryption unit adds a header part of the input information to the generated encryption information and transfers the information to the information part and the key part.

(4-13, 4-18) Information section (2-2)
5) and the key unit (2-26) are formed by the communication unit (2-18, 2-1).
9) Output the information. (4-14) Information section (2-2)
The communication unit (2-18) connected to 5) outputs information (X5Y # 3s) (3-5) according to the destination of the header.

(4-23) Communication unit (2) connected to key unit
-19) outputs information (: JV) (3-7) via the server (1-25) connected to the information path (K2) which is separately provided from the normal information path. On the receiving side, the information from the communication units (2-28, 2-29) is passed through the information unit (2-25) and the key unit (2-26), and the decryption unit (2-2).
-24).

In the decryption process, a time difference occurs between the information in the information part and the information in the key part due to the difference in the information path.
27) The information is stored, and decryption is performed after both are prepared. Decrypted information in clear text (Today is sunny) (3
−15) is output to the information output unit (2-22) (2).
-B).

As the data output destination of the encryption processing (4-1), there are an information section (4-8) and a key section (4-9), where data is stored. The stored data is sequentially read out by information processing (4-10) and key processing (4-15), and output to each communication path.

FIG. 5 shows a processing flow of the server device for providing the information route. The server device receives an inquiry as to whether or not connection is possible from the correspondent described in FIG. 4 (4-21), and receives information on the key part (4-23). (5-5) In response to the inquiry about connection availability (4-21), the server device connects to a user who can be registered in the device itself or (5-6) or another server connected by another information route. (1-26)
(5-7), and informs the correspondent whether connection is possible (5-12, 518).

(5-7) When the information of the key part arrives,
The connection possibility is confirmed in the same procedure as the inquiry about the connection possibility, and if the connection is possible, the information of the key part is output to the target communication person (5-13), and if the connection is not possible, the connection failure notification is output (5). -18).

FIG. 6 is a comparison diagram of the merits of the number of paths when a communication path is directly installed between communicators and when a server is installed and the communicator installs a communication path only in the server.

When a plurality of information paths are used and communication parties have mutual paths, when N communication parties draw A information paths, the number of paths to be set individually for each communication party is ((N-1) × A )
And the total number of paths is ((N−1) × A × N / 2).

On the other hand, the information path to be added to the normal information path is not directly drawn between the communicating parties, but a relay server is installed, and the communicating party exchanges information with the intended communicating party via the server.

According to the method of the present invention, a communication person can realize communication by a plurality of paths only by setting up an information path with a server in addition to a normal information path. The maximum number is (A × N), and the larger the size of the network, the higher the effect and the number of necessary routes can be reduced.

In the configuration without the server, if there are five communicators, ten communication paths are required, but in the configuration using the server, only five communication paths are required.

In addition, the present invention is not limited to the embodiment described above and shown in the drawings, and it is needless to say that the present invention can be appropriately modified and implemented without departing from the scope of the invention.

[0044]

According to the first aspect of the present invention, there is provided a device for preventing information leakage by an eavesdropper of information for the purpose of deciphering information and infringing information. All mutual information contents are sent out, but by dividing the data of the encrypted information and sending it logically or physically through multiple routes, the information held by the information interceptor is made partial,
Interception of information is meaningless.

According to the encrypted information communication apparatus of the present invention, the encrypted information transmits encryption key information for decrypting the encrypted information through a different path from the data portion generated by the encryption. In the process of encrypting data by the common key method, encryption key information is generated together with data encryption. If the encrypted data and the encryption key information are intercepted, accumulated, and analyzed, the possibility of information decryption increases.

In order to prevent this, only the encrypted data is passed through the normal path, and the encryption key information is sent through another path, thereby effectively dispersing the information for decryption from the eavesdropper, Make decryption difficult.

According to the encrypted information communication apparatus of the third aspect, the separation information is communicated via the server, and when the communication paths are plural and the communication parties have a mutual path, the communication path is set individually for the communication parties. It is necessary to install a large number (see FIG. 6). On the other hand, the information path to be added to the normal information path is not directly drawn between the communicating parties, but a relay server is installed, and the communicating party exchanges information with the intended communicating party via the server. According to the method of claim 3, the communication person can realize communication by a plurality of paths only by setting an information path to the server in addition to the normal information path, and the number of paths to be set individually for each communication person becomes the minimum path, and The larger the value is, the higher the effect is and the required number of paths can be reduced.

[Brief description of the drawings]

FIG. 1 is a conceptual diagram illustrating a relationship between a communication person and two types of information paths according to an embodiment of the present invention.

FIG. 2 is a diagram showing a flow of communication information in the encrypted information communication device of the present invention.

FIG. 3 is a structure and transition diagram of communication information by the encrypted information communication device of the present invention.

FIG. 4 is a processing flow by the encrypted information communication device of the present invention.

FIG. 5 is a processing flow of the server device of the present invention.

FIG. 6 is a diagram showing a comparison of facilities and advantages of using a server according to the present invention.

[Explanation of symbols]

 (A1) Encryption device (2-11) Information input unit (2-12) Information output unit (2-13) Encryption unit (2-14) Decryption unit (2-15) Information unit (2-16) Key unit (2-17) Information storage unit (2-18) Communication unit 0 (2-19) Communication unit 1 (2-110) Communication unit 2 (1-A) Communication information input (1-B) Output to encryption unit (1-C) Output to information section (1-D) Output to key section (1-E) Output to communication section 0 (1-F) Output to communication section 1 (1-G) Normal information Output to path (1-H) Output of division information to information path (K1) Normal information path (K2) Information path of division information (A2) Encryption device

Claims (3)

[Claims] 1. Encrypted information communication comprising: a dividing unit for dividing data of encrypted information; and a transmitting unit for logically or physically transmitting the divided encrypted information through a plurality of paths. apparatus. 2. The encrypted information communication according to claim 1, wherein the encrypted information is transmitted by transmitting encryption key information for decrypting the encrypted information through a path different from a data portion generated by the encryption. apparatus. 3. Dividing means for dividing data of encrypted information, transmitting means for logically or physically transmitting the divided encrypted information through a plurality of paths, and relay server means serving as an information path And an exchanging device for exchanging information with a target communicating person via a relay server.