JPS60260254A - Ciphering processing system - Google Patents

Abstract

PURPOSE:To prevent degradation of processing capability by using a ciphering device provided externally so as to apply ciphering processing to a data of packet. CONSTITUTION:A processor 1''-1 transmits a data D of ciphering processing object from a line connecting terminal 4-3 to a ciphering device 5-1. The ciphering device 5-1 applies ciphering the data, a modulator-demodulator 2-3 transmits the ciphered data D to a modulator-demodulator 2-4 transmits the received and ciphered data D to a line connecting terminal 4-4 of the processor 1''-1, then the ciphered data D is connected with a header H not ciphered and the result is transmitted to a packet exchange network 6. On the other hand, when a packet reaches the line connecting terminal 4-1, the packet is separated and the ciphered data D is transmitted from the line connecting terminal 4-4 to the ciphering device 5-1, where the data is decoded and the processor 1''-1 receives the decoded data D.

Description

DETAILED DESCRIPTION OF THE INVENTION Technical Field of the Invention The present invention relates to an information processing device, and particularly to a cryptographic processing method that enables encryption and decryption of a part of a message.

(bl) Background of the Technology In order to protect the confidentiality of messages sent and received between processing devices or terminal devices (hereinafter collectively referred to as information processing devices), ordinary messages (hereinafter referred to as plaintext) are encrypted and sent on the sending side. , encryption methods are widely used in which the ciphertext that arrives at the receiving end is decrypted and restored to the original plaintext.

(C1 Conventional technology and problems FIG. 1 is a diagram showing an example of a conventional cryptographic processing method.

In FIG. 1, processing devices 1-1 and 1-2 are variable fj
Line connection terminals 4-1 and 4-2 that connect the communication line 3 via the t-control devices 2-1 and 2-2 to send and receive messages.
Equipped with: In order to encrypt the message transmitted via the communication line 3, an encryption device 5-1 is inserted between the line connection terminal 4-1 and the modem 2-1, and the line connection terminal 4-1 is inserted between the line connection terminal 4-1 and the modem 2-1. 2 and the modem device 2-2.
Insert. When the processing device 1-1 transmits plaintext from the line connection terminal 4-1 in this state, the encryption device 5-1 encrypts the received plaintext into ciphertext and sends it to the communication line 3 via the modem device 2-1. do.

The ciphertext is transmitted to the encryption device 5-2 via the communication line 3 and the modem 2-2. The cryptographic device 5-2 decrypts the received ciphertext into the original plaintext and transmits it to the line connection terminal 4-2 of the processing device 1-2.

The plaintext sent by the processing device 1-2 from the line connection terminal 4-2 is also converted into ciphertext by the encryption device 5-2 and sent to the communication line 3, and the encryption device 5-1 converts the ciphertext that arrives from the communication line 3 The sentence is converted into the original plain text and transmitted to the processing device 1-1.

As is clear from the above explanation, in a conventional cryptographic processing system, the cryptographic device 5-1 or 5-2 converts all plaintext sent by the processing device 1-1 or 1-2, respectively, into ciphertext. All encrypted parts sent to the communication line 3 and received from the communication line 3 via the modulation/demodulation device 2-1 or 2-2 are converted into plaintext and sent to the processing device 1-1 or 1-2, respectively. Send. However, as shown in FIG. 2, when the processing devices 1'-1 and 1'-2 transmit and receive packets as shown in FIG. 3 via the packet switching network 6, the encryption device 5 -1 and 5-2, the processing units 11-1 and 1'-2 are connected to the packet switching network 6.
All packets sent to the header H are encrypted, and the packet switching network 6 is no longer able to identify the control information for setting up the communication path 7 contained in the header H, and cannot transfer the packets. Therefore, processing devices 1'-1 and I'-2 are provided with cryptographic processing mechanisms 8-1 and 8-2, and perform cryptographic processing only on data D that includes plaintext to be sent and received, and only headers that are not subject to cryptographic processing. It is necessary to send and receive packets by combining and separating them with H. However, the cryptographic processing mechanisms 8-1 and 8-2
may occupy a large amount of the processing capacity of processing equipment 1°-■ and 1°-2, and processing equipment 1'-1 and 1'-2
This causes a decrease in processing capacity.

(d) Purpose of the Invention The purpose of the present invention is to eliminate the drawbacks of conventional cryptographic processing methods as described above, and to enable cryptographic processing of a part of a message without reducing the processing capacity of an information processing device. The goal is to realize the means to do so.

(el) Structure of the Invention The object of the present invention is to, in an information processing apparatus equipped with a plurality of line connection terminals for connecting communication lines and transmitting and receiving messages, encrypt plaintext input from a plaintext terminal and output it from a ciphertext terminal; The plaintext terminal of an encryption device that decrypts the ciphertext input from the ciphertext terminal and outputs it from the plaintext terminal is connected to the first line connection terminal, and the ciphertext terminal of the encryption device and the second A means for transferring information to and from the line connection terminal is provided, and the ciphertext corresponding to the plaintext sent to the first line connection terminal is received from the second line connection terminal, and the ciphertext is sent to the second line connection terminal. This is achieved by receiving the plaintext corresponding to the ciphertext from the first line connection terminal.

That is, in the present invention, the information processing device performs cryptographic processing on only the message to be subjected to cryptographic processing using the cryptographic device connected to the first and second line connection terminals, and combines and separates the message that is not to be subjected to cryptographic processing. This makes it possible to do this, and there is almost no risk that the processing capacity will be degraded due to cryptographic processing.

(f) Examples of the invention An embodiment of the present invention will be described below with reference to the drawings.

FIG. 4 is a diagram showing a cryptographic processing method according to an embodiment of the present invention. Note that the same reference numerals indicate the same objects throughout the figures. Further, in FIG. 4, only one processing device 1''-1 is shown, and the other processing device (I in FIG.
'-2 equivalent) has been omitted. In FIG. 4, the processing device 1''-1 has a first line connection terminal 4-3 and a The first line connection terminal 4-3 is connected to a terminal (hereinafter referred to as a plaintext terminal) for transmitting and receiving plaintext of the encryption device 5-1, which is equivalent to that shown in FIG. The terminal for transmitting and receiving ciphertext of the encryption device 5-1 (hereinafter referred to as the ciphertext terminal) and the second line connection terminal 4-4 of the processing device 1''-1 are connected to the modem device 2. -1, and are connected by two sets of modulation/demodulation devices 2-3 and 2-4, each of which has a communication line terminal connected to each other.In this state, processing device 1"-1 is connected to In order to transmit a packet consisting of an unencrypted header H and encrypted data D from the line connection terminal 4-1 to the packet switching network 6 via the modem 2-1, the first line Connection terminal 4
-3 sends data D to be cryptographically processed to the cryptographic device 5-1. The encryption device 5-1 encrypts the data D received from the plaintext terminal, and sends the data D from the ciphertext terminal to the modem device 2-.
3. The modem M2-3 transmits the encrypted data D transmitted from the encryption device 5-1 to the modem 2-4 via the communication line accommodation terminal. Modem/demodulator 2-
4, the received encrypted data D is processed by the processing device 1.
-1 to the second line connection terminal 4-4. The processing device 1''-1 combines the unencrypted header H with the encrypted data D received from the second line connection terminal 4-4, and transmits the data from the line connection terminal 4-1 to the modem device 2-1. On the other hand, a packet having an unencrypted header H and encrypted data D is transmitted from the packet switching network 6 to the line connection terminal 4-1 via the modem 2-1. , the processing bag r゛°--1 separates the packet received from the line connection terminal 4-1 into an unencrypted header H and encrypted data D, and the encrypted data D is The signal is sent from the second line connection terminal 4-4 to the fjE modulator 2-4.

The modem 2-4 transmits the received encrypted data D to the modem 2-3 via the communication line accommodation terminal. The modem 2-3 receives the received encrypted data D.
is transmitted to the ciphertext terminal of the cryptographic device 5-1. Encryption device 5
-1 is the encrypted data D received from the ciphertext terminal
is decrypted to create plaintext data D, which is transmitted from the plaintext terminal to the first line connection terminal 4-3 of the processing device IIT1.

From the above i, the processing device 1''-1 receives the data D in plain text.

As is clear from the above description, according to the present embodiment, the processing device 1 ``-1 cryptographically processes the packet data D using the externally provided encryption device 5-1.
There is almost no possibility that the processing capacity of -1 will be compressed by cryptographic processing.

Note that FIG. 4 is only one embodiment of the present invention, and for example, the ciphertext terminal of the encryption device 5-1 and the processing device 1''-1
The means for transferring the encrypted data D to the second line connection terminal 4-4 of the standard modem devices 2-3 and 2
-4, and it is also possible to configure a dedicated interface conversion circuit having a similar function, but the effects of the present invention remain unchanged even in such a case. Furthermore, the object of the present invention is not limited to processing devices, and the effects of the present invention remain the same for information processing devices including terminal devices and the like. Furthermore, it goes without saying that the object of the present invention is not limited to packet switching networks.

(&1 Effects of the Invention As described above, according to the present invention, in the information processing apparatus, a part of the message can be encrypted without reducing the processing capacity.

[Brief explanation of the drawing]

FIG. 1 is a diagram showing an example of a conventional cryptographic processing method, FIG. 2 is a diagram showing another example of a conventional cryptographic processing method, FIG. 3 is a diagram showing an example of the packet in FIG. 2, and FIG. 4 is a diagram showing an example of a conventional cryptographic processing method. FIG. 1 is a diagram showing a cryptographic processing method according to an embodiment of the present invention. In the figure, 1-1.1-2.11-1.1', -2 and 1"-1 are processing units, 2-1 to 2-4 are modem devices, 3 is a communication line, and 4-1 to 4 -4 is the line connection terminal,
5-1 and 5-2 are encryption devices, 6 is a packet switching network,
7 is a communication path, 8-1 and 8-2 are cryptographic processing mechanisms, H is a header, and D is data.

Claims (1)

[Claims] In an information processing device equipped with a plurality of line connection terminals for connecting communication lines and transmitting and receiving messages, the plaintext input from the plaintext terminal is encrypted and output from the ciphertext terminal, and the cipher text input from the ciphertext terminal is encrypted. The plaintext terminal of an encryption device that decrypts a text and outputs it from the plaintext terminal is connected to the first line connection terminal, and information is transmitted between the ciphertext terminal of the encryption device and the second line connection terminal. Provide a means to transfer
Receiving ciphertext corresponding to the plaintext sent to the first line connection terminal from the second line connection terminal, and receiving plaintext corresponding to the ciphertext sent to the second line connection terminal from the first line connection terminal. A cryptographic processing method characterized by: