JPS63136743A - Token ring lan cryptographic system - Google Patents

Abstract

PURPOSE:To provide security to a LAN by providing a destination address (DA) of logic link control section (LLC) of physical layer of the LAN and a function ciphering a sender address (SA) and information (INFO). CONSTITUTION:A station 4 inputs its own address (SA) 7 and a sent data to a cryptographic unit 26. The cryptographic unit 26 consist of cryptographic units 29, 28, 27 of SA, DA, INFO. The cryptographic processing and the management of cryptographic key of the unit 26 are executed by a cryptographic control unit 30. The ciphered information is sent together with an FC 15 while forming a frame format. A cryptographic unit 44 has as SA encryption unit 45 in a station 5 and subject to the control of a cryptographic control unit 60. The DA 16 in the inputted format is compared with the DA 49 being the result of chiphering its own address by an address comparison unit 41 and in case of DA16=DA49, a gate 42 is opened, the FC15, DA16, SA17, INFO18 and FS21 are inputted to a reception buffer 48 and sent to the DTE 2 as a reception data 12.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a local area network (LAN) using a token ring access method, and particularly to providing means suitable for encryption. 15 [Prior Art] Regarding the conventional token ring access method LAN.

I Niss O/Tsii 97/Nisssii.

I6・N3244')-Kun Ring Access
Mae.

Soto and physical rare spacefaction. ,y (ISO/I'C97/SC6N 3244
Token Ring Access'Method
and Physical Layer 8pe
cificatioh).

[Problem that the invention seeks to solve]

The local area 5 network standard for the token ring access method mentioned above concerns security.

No consideration was given to this, and wiretapping occurred because the transmission path was common.

There was a problem.

The object of the present invention is a token ring access method.

The goal is to provide 10 security to local area networks.

[Means for solving problems]

The above purpose is to provide a logical link in the physical layer of a local area network using a token ring access method.

control (LLC) Q frame format DA, 8A
This is achieved by encrypting the O1 and INK areas.

It will be done.

[Effect]

Encrypted destination address (DA), destination address.

The SA is the logical link control unit (LLC) and its own address.

An encrypted DA with a table that encrypts the data.

In order to compare with 8A, special encryption and decryption time.

do not need. For this reason, it is sent by encrypting it.

Data delay time does not increase.　　　.

〔Example〕

An embodiment of the present invention will be described below using the drawings.

Explain in detail.

In Figure 1, 1.2.3 is data transmission using the field.

4.5.6 is a LAN station; 7. .

8.9 indicates a medium for carrying data. Figure 2 shows lO
The frame format of the token ring access method local area network is shown. Figure 3 shows the physical layer of a Token Ring access local area network. Figure 4 shows 15 cryptographic functions (indicated by dotted lines) in a local area network with Token Ring access method.
Function block when added.

A diagram is shown.

Token ring access method local area network.

The operation of the network is explained in the literature;

ng access methods and physical.

・Layer specification: Detailed information is given in I.E.S.P.O./T.C.97/Niss.C.6.N.3244°. Added cryptographic functions and functions to the original secret.

Explaining the case where data is sent from the additional DTEl to the DTE 2.

do. DA16 and INFO18 are transmitted from DTEL to station 4 as transmission data 510. In the station 4, the self-address BA7° and this transmission data 10 are input into the encryption unit 26, and the encryption unit 26 is converted into the S-symbol unit 29. D.A.
Cipher unit 28. lN11i'O cryptographic unit 2
Consists of 7. A cryptographic control unit 50 performs encryption processing and cryptographic key management for the cryptographic unit 26.

The encrypted output is transmitted in frame format along with FCl5.

Input to Knit 33 and frame format shown in Figure 2.

and is sent to the medium 7 via the sending interface unit 34. Station 5 receives the signal from medium 7 and receives the frame via 5-channel interface unit 39.

- input to the system format unit 40; The encryption unit 44 has an SA encryption unit 45. The encryption control unit 60 performs encryption processing and encryption key management.

The input frame format is DA16.

, 3.

Address comparison with DA49 which encrypted its own address.

When compared with the unit 41, if DAl 6 =DA49, the gate 42 is opened.

FCl 5 , DAl 6 , 8A17 , INF
8 and F821 are input to the reception buffer 48 and sent to the DTE 2 as reception data 12.

Send. On the other hand, the transmission data 11 is transmitted by the transmission face unit 47. Media 81 stations 6. Via Medium 9.

Return to station 4. Station 4 has 22 receiving interfaces.

38 color reception frame format 22/ ) 37K
'input. Received frame format 8A17 and self.

Address comparison Uni 1 of SA39 which encrypted own address
If they are the same, it is determined that the transmitted data 11 has returned, and the received data 11 is discarded. This example・
According to the Token Ring access method, it is effective to easily encrypt local area networks.6
I5 [Effects of the Invention] According to the present invention, a talk ring access method is provided.

In the physical layer of a local area network, physical.

(PHY) and Medium Access Control (MAC).

PHY
2°, 4.

and MAC can be constructed from standard products or general-purpose LSIs.

Therefore, there is an effect that can be realized economically.

[Brief explanation of the drawing]

FIG. 1 shows a system configuration showing an embodiment of the present invention. Figure 2 shows the frame format of a local area network using the token ring access method. Figure 3 shows the token ring access method. FIG. 4 is a block diagram illustrating the operations of station 4 and station 5 in one embodiment of the present invention. 101.2.3・
...Terminal device, 4.5.6... Station, 16... Destination address (DA), 17... Source address (
SA), 18...ff report (INFO), 26,
44,,,cipher unit, 27. INFO encryption unit, 28...DA encryption unit,
, 29, 45...8A encryption unit), 30.60
...Cryptographic control, 5 units. Figure l ``-1 154, ', 'F., 17 [[Guan 4 4 C! 8] ■, - 21 -----J''・2〒・
・2- Yu. 6? -55 AC, 2? XHY, 2~R

Claims (1)

[Claims] In a local area network using the token ring access method, the destination address (DA) and source address (SA) in the transmitted data are sent to the logical link control unit (LLC).
An encryption method for a token ring LAN characterized by having a function of encrypting information (INFO).