KR100734168B1 - Secure data storage apparatus with memory card interface - Google Patents

Abstract

A secure data storage device having a memory card interface is disclosed. According to the present invention, a secure data storage device having a memory card interface includes: a memory cell for storing input data according to a memory card control signal; According to the USB interface control signal, a security chip that stores the input data but is accessed through a predetermined authentication process; And a memory card controller configured to transfer data input according to a memory card interface signal specification to the memory cell, and transmit data input according to a USB interface signal specification to the security chip. In this way, by combining a secure data storage unit such as an IC chip with the SD memory card, it is possible to more securely store the data required for authentication certificate, individual account number or credit card data, important ID and password data, and other user authentication.

Description

Secure data storage apparatus with a memory card interface

1 is a view showing the appearance of a MiniSD memory card,

2 shows a system bus topology of a MiniSD memory card,

3 is a general internal configuration diagram of a MiniSD memory card,

4A is a block diagram of a secure data storage device having a memory card interface according to a preferred embodiment of the present invention;

4B is a block diagram of a secure data storage device having a memory card interface according to another embodiment of the present invention;

4C is a block diagram of a secure data storage device having a memory card interface according to another embodiment of the present invention;

5 is a detailed configuration diagram of the security chip 440 of FIGS. 4A to 4C;

6 is a flowchart of a data storage method according to a preferred embodiment of the present invention;

7 is a flowchart of a data reading method according to a preferred embodiment of the present invention.

The present invention relates to the security and storage of data, and more particularly, to a secure data storage device having a memory card interface capable of securely storing data by combining a security chip with a memory card.

The IC card for storing secure data has its own operating system (OS), which is equipped with a chip operating system (CPU), and has a central processing unit (CPU), an encryption module and a memory. IC cards employ encryption technology, which can safely handle various transactions, and store encrypted data, so that they are widely used in fields such as electronic wallets, electronic accounts, and personal authentication.

As a portable storage device, a card type memory such as a Secure Digital (SD) card, a Multimedia Card (MMC), or a Compact Flash (CF) card exists. In particular, there is a miniSD card, which has a smaller size to increase portability and increases the number of input / output terminals of the SD card for further use. These memory cards are a type of portable storage device having a flash memory therein, such as a mobile phone, an e-book, a personal digital assistant (PDA), a smart phone, a digital camera, an MP3 player, a camcorder, a personal computer, and the like. It is widely used as data storage device.

However, the conventional memory card has a flash memory therein as described above, but does not have a security chip such as an IC chip, and thus there is a limit to safely storing data.

Accordingly, an object of the present invention is to provide a secure data storage device capable of safely storing data by mounting an IC chip for secure data storage in a mobile storage device having a memory card interface.

According to the present invention, a memory cell for storing the input data, according to the memory card control signal; According to the USB interface control signal, a security chip that stores the input data but is accessed through a predetermined authentication process; And a memory card controller configured to transfer data input according to a memory card interface signal specification to the memory cell, and transmit data input according to a USB interface signal specification to the security chip. Is achieved by a secure data storage device.

Preferably, the memory card controller uses an input / output terminal not used in the memory card interface as an input / output terminal of the USB interface data.

The memory card interface is preferably a MiniSD card interface.

The security chip preferably encrypts the received data in a memory included in the security chip, or encrypts the received data and transfers the received data to the memory cell.

In addition, according to the present invention, in accordance with the present invention, a memory cell for storing input data in accordance with a memory card control signal; An interface converter which converts the memory card interface signal into a USB interface signal; A security chip storing input data according to the USB interface control signal and accessed through a predetermined authentication process; And a memory card controller configured to transfer data input according to a memory card interface signal standard to the memory cell or to the interface converter.

The memory card interface preferably includes a MiniSD card, MMC card or Compact Flash (CF) card interface.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram showing the appearance of a MiniSD memory card.

Referring to FIG. 1, a standard MiniSD memory card 100 generally has 11 input / output terminals. The part with input and output terminals is inserted into the MiniSD memory card slot to exchange data with the host. The names of the 11 input / output terminals and their functions are shown in Table 1 below.

pin number name Explanation One CD / D3 Card detect / data bit 3 2 CMD Command / Response 3 VSS1 Ground 4 VDD Supply Voltage 5 CLK Clock 6 VSS2 Ground 7 D0 Data bit 0 8 D1 Data bit 1 9 D2 Data bit 2 10 NC For future use 11 NC For future use

Referring to Table 1, it can be seen that data is transmitted / received through data bits 7, 8, 9 and 1 according to the command of terminal 2 (CMD), and terminals 10 and 11 are not used for future use. have. The MiniSD card, on the other hand, works with the SD card, except for the reserved 10 and 11 terminals. That is, the SD card has nine input / output terminals, and terminals 1 to 9 have the same function as terminals 1 to 9 of the MiniSD card.

2 is a diagram illustrating a system bus topology of a MiniSD memory card.

Referring to FIG. 2, the MiniSD memory card 220 is connected to the host 210 through terminals 1 to 9 shown in FIG. 1. In other words, the CLK, Vdd and Vss, D0-D3, and CMD terminals of the host 210 are connected to the CLK, VDD and VSS1, VSS2, D0-D3, and CMD terminals of the MiniSD memory card 220, respectively, to form a D0-. Send and receive data via the D3 bus.

3 is a general internal configuration diagram of a MiniSD memory card.

The MiniSD memory card includes an interface unit 310, a control unit 320, a power detector 330, a memory core interface unit 340, and a memory core 350. The interface unit 310 generates and outputs a signal input from the host according to the MiniSD card interface standard as a control signal for storing in the memory core 350 via the control unit 320 and the memory core interface unit 340. The interface unit 310 is equipped with an interface driver to transmit a CLK, data signal, etc. required for the control unit 320. The controller 320 may include a card ID (CID), a relative card address (RCA), a driver state register (DSR), card specific data (CSD), a SD configuration register (SCR), and an OCR stored in a register inside a MiniSD memory card. The data signal is converted to store the data received from the interface unit 310 in the memory core 350 with reference to an operation condition register or the like. The memory core interface unit 340 generates an address for storing data in the memory core 350 having a matrix structure and transfers the input data received from the controller 320 to the memory core 350. The power detector 330 detects that the MiniSD memory card is inserted into the host to supply power and applies a reset signal to the controller 320 and the memory core interface 340.

4A is a block diagram of a secure data storage device having a memory card interface according to a preferred embodiment of the present invention.

The secure data storage device includes a connector 400, a memory card controller 410-1, a memory cell 420, an interface converter 430, and a security chip 440.

The connector 400 provides a physical connection interface for inputting and outputting signals according to the memory card interface. Memory card interfaces include SD card interfaces, MiniSD card interfaces, multimedia card (MMC) interfaces, compact flash (CF) card interfaces, and the like. The memory card controller 410-1 transfers data to the memory cell 420 according to the card interface or to the interface converter 430 according to the location where the input data is to be stored. The memory cell 420 includes logic related to the writing of data with the memory core 350 of FIG. 3. The interface converter 430 converts data based on a memory card interface into a USB interface signal as a USB controller and provides serial data to the security chip 440. Since the input / output interface of the security chip 440 is a serial interface and the input / output interface between the memory card controller 410-1 and the security chip 440 is different from each other, mutual conversion is necessary. That is, when the D + and D- signals, which are USB data, are input through the 10 and 11 terminals, which are not used by the memory card controller 410-1, the interface converter 430 converts the serial data into serial data to provide a secure chip ( 440). The security chip 440 encrypts and stores the input data, or encrypts the data and outputs the encrypted data again to the memory cell 420. The security chip 440 may be a SIM module that encrypts and records data.

4B is a block diagram of a secure data storage device having a memory card interface according to another embodiment of the present invention.

In FIG. 4B, when the memory card controller 410-2 is a MiniSD card interface, the USB interface signal may be received using an input / output terminal that is not used among the MiniSD card interface signals. For example, the terminals 10 and 11, which are reserved terminals in the MiniSD card interface signal standard, are used to bypass the D + and D- signals of the USB signal and transfer them to the security chip 440. Since the security chip 440 has a USB interface, the data input through the memory card controller 410-2 may be stored as it is.

According to the data storage method according to the present invention, data received through the connector 400 from the host is stored in the memory cell 420 or the security chip 440 via the memory card controllers 410-1 and 410-2. Is stored in the memory provided in the In this case, the received data may be stored in the security chip 440 without performing encryption, or the received data may be stored in the security chip 440 by encrypting the received data, or the received data may be stored in the security chip 440. The data may be encrypted and stored in the memory cell 420 according to an encryption algorithm embedded therein.

In more detail with respect to encryption and decryption of data, the encryption is performed by the secret key of the security chip 440, the decryption may be performed by the public key of the host. Encryption algorithms that may be used include both the Data Encryption Standard (DES) and the Rivest-Shamir-Adleman (RSA) algorithm, as well as the general encryption algorithm.

4C is a block diagram of a secure data storage device having a memory card interface according to another embodiment of the present invention.

Referring to FIG. 4C, it can be seen that the interface converter of FIG. 4A is included in the memory card controller 410-3, so that the security chip 440 is directly connected with the serial data received from the memory card controller 410-3. have.

5 is a detailed configuration diagram of the security chip 440 of FIGS. 4A to 4C.

The security chip 440 includes a USB interface unit 510, a security chip control unit 520, an encryption processing unit 530, and a security data storage unit 540. In addition, an RF interface unit 550 may be further included to communicate with an external RF device through the RF transceiver 560.

The USB interface unit 510 is connected to the interface converter 430 or the memory card controller 410-2 to perform data communication. The security chip controller 520 controls to store the data received through the USB interface unit 510 as it is in the secure data storage unit 540 without an encryption process according to a user's security data storage command, or stores the encryption command in the encryption processing unit. Pass to 530 to encrypt the data. In addition, the data stored in the secure data storage unit 540 is transferred to the RF transceiver 560 through the RF interface unit 550.

The encryption processing unit 530 encrypts the received data or decrypts the encrypted data according to a predetermined encryption algorithm and outputs the encrypted data. The secure data storage unit 540 receives and stores the unencrypted data through the USB interface unit 510 and the security chip control unit 520, or receives and stores the encrypted data by the encryption processing unit 530. An example of the data stored in the secure data storage unit 540 may be a public certificate, account information, credit card information, and the like. The RF interface unit 550 transmits the data stored in the secure data storage unit 540 through the RF transceiver 560 according to a command from an external RF reader for functions such as a traffic card or an electronic wallet.

6 is a flowchart of a data storage method according to a preferred embodiment of the present invention.

When the application program of the host is executed, a user interface screen for storing data is provided, and through this, a user inputs data to be stored, information on whether to store the data and whether to store it in an encrypted state (S610). ). If it is determined whether or not to encrypt and store the data (S620), if the data to be stored receives the command to be stored by encrypting as important data, a security algorithm is performed to encrypt the data to be stored (S630). . If no encryption is to be performed, the encryption process is omitted. Next, it is determined whether the encrypted data or the general data is stored in the secure area (S640), and according to the result, the data is stored in the secure area (S650) or stored in the general area (S660). The security area becomes the memory inside the security chip, and the general area becomes the memory cell.

7 is a flowchart of a data reading method according to a preferred embodiment of the present invention.

When the application program is executed, a user interface for reading data is provided to the user, and the user receives input of data to be read by selecting one (S710). For example, the data to be read may be information such as a file name to be read. And. Check the storage area in which the read data is stored (S720). If the data to be read is stored in the security area, authentication is performed (S730). If the authentication is successful, the data stored in the security area is read (S740). . On the other hand, if the data to be read is data stored in the general area, the data is read from the general area (S750). It is determined whether the data stored in the read security area or the general area is encrypted data (S760). If the data is encrypted, decryption is performed (S770). On the other hand, in performing the authentication in step S730, if the authentication fails more than a certain number of times, for example three or more times, it can be locked (lock) so that no more data can be read.

On the other hand, the above-described security data storage method can be created by a computer program. Codes and code segments constituting the program can be easily inferred by a computer programmer in the art. In addition, the program is stored in a computer readable media, and read and executed by a computer to implement a secure data storage method. The information storage medium includes a magnetic recording medium, an optical recording medium, and a carrier wave medium.

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

As described above, according to the present invention, by combining a secure data storage unit such as an IC chip with an SD card or a MiniSD memory card, it requires a public certificate, an individual account number or credit card data, important ID and password data, and other user authentication. Data can be stored more securely, and further provided with an RF transceiver to perform the function of an electronic wallet or transportation card together.

Claims (8)

A memory cell for storing input data according to a memory card control signal including a MiniSD; According to the USB interface control signal, a security chip that stores the input data but is accessed through a predetermined authentication process; And And a memory card controller configured to transfer data input according to the interface signal specification of the memory card to the memory cell, and transmit data input according to the USB interface signal specification to the security chip. One secure data storage device. The memory card controller of claim 1, wherein the memory card controller comprises: And an input / output terminal which is not used in the memory card interface is used as an input / output terminal of the USB interface data. delete The method of claim 1, wherein the security chip And encrypting the received data in a memory included in the security chip, or encrypting the received data and transferring the received data to the memory cell. A memory cell for storing input data according to a memory card control signal including a MiniSD card, an MMC card, or a Compact Flash (CF) card interface; An interface converter for converting the interface signal of the memory card into a USB interface signal; A security chip storing input data according to the USB interface control signal and accessed through a predetermined authentication process; And And a memory card controller configured to transfer data input according to an interface signal standard of the memory card to the memory cell or to the interface converter. delete The method of claim 5, wherein the security chip And encrypting the received data in a memory included in the security chip, or encrypting the received data and transferring the received data to the memory cell. The method of claim 5, wherein the security chip A USB interface unit for inputting and outputting data from any one of the output ports; A security chip controller for controlling the transfer of the received data; An encryption processing unit for encrypting the received data according to a predetermined encryption algorithm; And And a secure data storage unit for storing the received data as it is or storing data encrypted by the encryption processing unit.

Images