KR101105205B1 - An apparatus and a method of processing data for guaranteeing data integrity and confidentiality in real time, and black box system using thereof - Google Patents

Abstract

PURPOSE: A data processing method for guaranteeing integrity and confidentiality of real time data and a black box system using the same are provided to forbid data access through an unauthorized person, thereby preventing a leakage of data saved in the black box. CONSTITUTION: A data Input part(100) comprises an image photographing apparatus(110) which takes a photograph, a sound detection apparatus(120) which detects voice, signal tone, and etc. and an acceleration detection apparatus(130) which detects a change of speed. The data Input part comprises an angular velocity detection apparatus(140) which detects rotation and etc. and an impact detection apparatus(150) detects a collision state. A user input apparatus(300) transfers data saved in a black box to an input interface(210) of a black box system(200). The black box system comprises the input interface, an integrity and confidentiality protection apparatus(250), and a data storage module(240).

Description

An apparatus and a method of processing data for guaranteeing data integrity and confidentiality in real time, and black box system using Technical Field

The present invention relates to a data processing method and data processing apparatus for ensuring the integrity and confidentiality of data collected in real time in a vehicle, and the like, and a black box system using the same.

The black box system is a system that works in conjunction with specific systems and devices such as vehicles, trains, ships (hereinafter, 'vehicles', etc.), and collects and stores information of specific systems and devices. The black box system usually collects and stores information, and when a specific event or event occurs, the user or a third party uses the information to view the background and context of the specific event and event. do.

Common black box systems have been used in aircraft and ships until now. However, in recent years, as a black box system is installed in vehicles such as cars, its use and scope are gradually expanding. Black boxes are known by many names, such as driving recorders, accident recorders, and video accident recorders. However, their purpose is substantially the same in that it stores various information (vehicle information, accident information, video and audio information, etc.) of the vehicle to help analyze the cause of the accident through the stored information when an accident occurs.

There are also systems that differ in name from these black box systems but serve similar purposes. For example, monitoring systems such as CCTV. CCTV also collects and stores the information around, but when the event and event occurs, it is used for the purpose of solving the event by reading the information in it.

However, all of the above-mentioned systems store information in real time, but there is a limit in that it does not guarantee the integrity and confidentiality of the data simply by storing it when collecting and storing the information. Integrity refers to the nature of ensuring that data is retained as it is stored. In other words, it has not been forged, tampered with or deleted since the data was stored. Confidentiality is a property that guarantees that only users with access to the data can access it. That is, even if a user who does not have access to the data browses the data, its contents cannot be identified.

These two properties are very important in the black box system. After an accident, if you want to browse the data in the black box and use that data as evidence of the event and the data is unreliable, the black box becomes useless. Therefore, integrity is very important in direct connection with the reason for the existence of the black box. In addition, since confidentiality is directly related to the privacy of the user, this should also be considered very important for the data stored in the black box. Because the information stored in the black box is closely related to the individual's privacy, a lot of information related to the privacy of the individual, for example, where each person went, who met and what he said, This is because the information in the box can be profiled. For this reason, the data in the black box should not be provided or viewed without permission.

As such, the research related to the data collected and stored by the black box system mainly focuses on the reconstruction of the incident through the collected data, and no research has been conducted to ensure both real-time integrity and confidentiality. Therefore, according to the existing black box system, not only the reliability of data stored in the black box system is deteriorated, but there are also problems in which the user is exposed to risks such as privacy infringement.

As a related art in this regard, Korean Patent Laid-Open No. 10-2011-0023412 (published: 2011.03.08) discloses a configuration for ensuring the integrity of real-time vehicle data in consideration of forgery, tampering, deletion of data, and the like. However, there is a disadvantage in that a third party, not a user, reads the data stored in the black box system and thus does not solve the problem that privacy is damaged. In addition, if all original data and integrity verification data pairs are deleted after a certain point of time, it is not detected. The disadvantage is that you cannot know exactly when the data was created.

In addition, as a related prior art, Korean Laid-Open Patent Publication No. 10-2011-0022960 (published: 2011.03.08) discloses an anti-counterfeiting and tamper-proof apparatus for black box data storing encrypted data by encrypting driving information. . But. The password-based encryption method disclosed in the prior art 2 is just one of the well-known encryption techniques, and there is no disclosure about a specific algorithm for encrypting driving information. In addition, the prior art 2 has the disadvantage that the user must enter a password every time the data is stored.

Prior Art 1: Korean Patent Publication No. 10-2011-0023412 (Published: 2011.03.08) Prior Art 2: Korean Patent Publication No. 10-2011-0022960 (published: 2011.03.08)

The present invention has been made to solve the problems of the prior art as described above, the present invention is to provide a data processing method and apparatus for ensuring both the integrity and confidentiality of data input in real time without complex operation processing The purpose.

Another object of the present invention is to provide a data processing method and apparatus capable of non-repudiation and error recovery.

In addition, the present invention is to provide a black box system for ensuring both the integrity and confidentiality of data input in real time without complicated computational processing.

The present invention provides a data processing method for guaranteeing the integrity and confidentiality of data input in real time, dividing the data into blocks having a predetermined size to generate a data block, and a seed value generated based on a password input from a user. Encrypting the data block with a random sequence value generated using the same; initial authentication data by performing a signature with a signature key on a combination of an initial data block value of the data, a time stamp value of the initial data block, and an index value Generating Initial Authentication Data (IAD), generating integrity verification data for each partitioned block; And updating the integrity verification data.

The encryption step of the present invention may include generating a random number sequence having the same size as the data block from the seed value for each data block; And generating encrypted data by calculating the random number sequence and the data block value.

In addition, generating the integrity verification data of the present invention may include generating a first hash value for each of the data blocks; Regenerating the first hash value to generate a second hash value for the data block; And outputting a value obtained by combining a time stamp with the second hash value as integrity verification data, and using the initial authentication data as a first hash value for the first block.

The generating of the first hash value of the present invention may include combining the first hash value of the previous data block, the time stamp value of the current data block, and the index value of the current data block with the current data block value. And hashing the combined value to produce a first hash value.

The present invention further includes the step of deleting the first hash value for the immediately preceding data block and the current data block value when the first hash value for the current data block is generated.

The integrity verification data updating step may include: hashing by combining the first hash value of the current data block and the second hash value of the previous data block; And outputting a value obtained by adding a time stamp of a previous data block to the hashing value as an integrity verification data update value for the previous data block.

On the other hand, the present invention provides a data processing apparatus for ensuring the integrity and confidentiality of data input in real time, comprising: a data block generation module for dividing an input data stream into data blocks having a predetermined size; A seed value is generated based on a password input from a user, and the initial authentication data is signed by signing a combination of an initial data block value of the data, a time stamp value of the initial data block, and an index value. A secure storage module for generating; A data encryption processing module for encrypting the data block by using the random number value generated through the seed value; And an integrity verification data processing module for generating and updating integrity verification data for each of the data blocks.

The secure storage module of the present invention is characterized by storing the initial authentication data, the signature key and the seed value.

The data encryption processing module of the present invention generates a random number sequence having the same size as the data block based on the seed value, and generates encrypted data by calculating the random number sequence and the data block value.

The integrity verification data processing module of the present invention combines and hashes a first hash value for the previous data block, a time stamp value for the current data block, and an index value for the current data block to the current data block with the current data block value. A first hash module for generating a first hash value relating to the first hash value; A first hash value storage module for storing the first hash value; A second hash module for regenerating the first hash value to generate a second hash value; A second hash value storage module for storing the second hash value; And an integrity verification data generation module for generating integrity verification data for the current data block by combining the second hash value with a time stamp value for the current data block.

The integrity verification data processing module of the present invention combines and hashes the first hash value for the current data block and the second hash value for the previous data block, and adds the time stamp value of the immediately preceding data block to the previous data. The module may further include an integrity verification data update module configured to output an integrity verification data update value for the block.

The secure storage module of the present invention is characterized by being a secure storage such as a smart card.

On the other hand, the present invention is a black box system for collecting and storing data input in real time, a data processing device having the above characteristics; An input interface for receiving data and receiving user input from a user input medium; And a data storage module for storing encrypted data and the integrity verification data.

As described above, according to the present invention, both integrity and confidentiality may be guaranteed together with data stored in the black box system in real time. That is, it is possible to verify the authenticity of the data source stored in the black box system (including the creation time of the original data), and to detect whether the data is damaged (forgery, tampering, deletion (including all deletion after a certain point in time), etc.). have. In addition, it is possible to prohibit the viewing of data by an unauthorized third party, thereby preventing the user's privacy infringement due to data leakage stored in the black box.

1 is a block diagram schematically illustrating a black box system according to an embodiment of the present invention.
2 is a block diagram showing the detailed configuration of the integrity and confidentiality protection device in the black box system according to an embodiment of the present invention.
3 is a flowchart showing the operation of data encryption processing to ensure confidentiality according to a preferred embodiment of the present invention.
4 is a flowchart showing a data encryption processing operation according to a preferred embodiment of the present invention.
5 is a table showing a relationship between block data and encrypted data generated by random numbers according to an embodiment of the present invention.
6 is a flowchart illustrating a data operation process for ensuring the integrity according to an embodiment of the present invention.
7 is a table showing correlations between data used in arithmetic processing to ensure integrity according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. These examples are only for illustrating the present invention in more detail, it will be apparent to those skilled in the art that the scope of the present invention is not limited by these examples.

1 schematically illustrates a black box system according to an embodiment of the present invention. Referring to FIG. 1, the black box system includes a data input unit 100 for inputting various information, a black box system 200 for collecting and storing information input by the data input unit 100, and control related to the black box from a user. And a user input device 300 for receiving a command or the like.

The data input unit 100 includes various devices for detecting various information such as voice and video. For example, the data input unit 100 may include an image photographing apparatus 110 for capturing an image, an acoustic detecting apparatus 120 for detecting a voice, a signal sound, and the like, an acceleration detecting apparatus 130 for detecting a speed change, and a rotation. It may include an angular velocity detection device 140 for detecting and a shock detection device 150 for detecting the collision.

The user input device 300 receives information for setting a password for data encryption in the black box system, reading data stored in the black box, integrity verification, etc. from the user, and input the interface 210 of the black box system 200. As an apparatus for transmitting to a computer, for example, a personal computer, a mobile phone, a PDA, etc., the user may input a control command.

The black box system 200 is a device in which data processing and storage is performed to protect the integrity and confidentiality of data collected in real time. The black box system 200 includes an input interface 210, an integrity and confidentiality protection device 250, and a data storage module 240. It includes.

The input interface 210 transmits the data signal input from the data input unit 100 to the integrity and confidentiality protection device 250. If the data signal input from the data input unit is in an analog form, the input interface 210 converts the data signal into a digital input data stream and transfers the converted input data signal to the integrity and confidentiality protection device 250. . In addition, the input interface 210 transmits a signal input from the user input device 300 to the integrity and confidentiality protection device 250.

The integrity and confidentiality protection device 250 executes an integrity and confidentiality protection algorithm to process input data received from the input interface 210. The integrity and confidentiality protection device 250 may be configured to include the secure storage module 220 and the integrity and confidentiality calculation processing module 230. Include. The integrity and confidentiality protection device 250 will be described in more detail with reference to FIG. 2 below.

On the other hand, the data storage module 240 is a memory for storing the encrypted data and the integrity verification data generated by the integrity and confidentiality protection device 250, unlike the memory in the secure storage module 220 is guaranteed security It can also be implemented with this vulnerable generic memory.

2 is a block diagram showing the detailed configuration of the integrity and confidentiality protection device 250 according to an embodiment of the present invention.

Referring to FIG. 2, the integrity and confidentiality protection device 250 includes a secure storage module 220 and an integrity and confidentiality operation processing module 230 for executing data processing by executing an integrity and confidentiality protection algorithm on an input data stream. It includes.

The secure storage module 220 includes a processor 222 that executes data encryption and security key generation algorithms, and a memory 224 for storing data. For example, a smart card having an integrated circuit (IC) chip is included. It can be implemented as.

The memory 224 of the secure storage module stores in advance a seed value generated from a password set by an authorized user of the black box system and a randomly generated signature key when the black box is set up. That is, in the setup phase of the black box, if a password is input from the user through the input interface 210, the processor 222 of the secure storage module 220 executes a preset algorithm to generate a seed value. The seed value generated here is a value used for generating a random number sequence for data encryption processing and is stored in the memory 224 in the secure storage module to ensure security. In addition, the secure storage module 220 randomly generates a signature key / signature verification key pair, so that the signature key is stored in the memory 224 in the secure storage module 220, and the signature verification key is the data storage module 240. Store in The signature verification key can be used for future integrity verification.

In addition, when the processor 222 of the secure storage module 220 receives the first data block of the input data from the data block generation module 231, the processor 222 connects the time stamp value and the index value of the first block to the first data block value. The digital signature is generated using a signature key stored in the memory 224 of the secure storage module 220 to generate initial authentication data (hereinafter, 'IAD'). The generated IAD is stored in the memory 224 in the secure storage module 220 and then used as the first hash value for the first block in generating integrity verification data.

The integrity and confidentiality operation processing module 230 may include a data block generation module 231, a data encryption processing module 232, a first hash module 233, a first hash value storage module 235, and a second hash module 234. ), The second hash value storage module 236, the integrity verification data generation module 237, and the integrity verification data update module 239 may be further included.

The data block generation module 231 generates a plurality of data blocks by dividing the digital input data streams received from the input interface 210 into blocks having a predetermined size.

The data encryption processing module 232 generates a random number sequence having the same size as that of the data block for each data block by using the seed value stored in the memory 224 of the secure storage module 220. The data is encrypted by performing an operation on each of the data blocks received from the data block module 231 using a random number sequence. Data encryption may be performed by, for example, an XOR operation of a value of a data block and a random number sequence, but various methods may be used without being limited thereto. The data encrypted by the data encryption operation is stored in the data storage module 240.

The first hash module 233 performs a hash operation on the data block received from the data block module 231. The first hash module 233 generates a first hash value for the current data block by combining and hashing the first hash value of the previous data block, the time stamp value for the current data block, and the index value to the current data block value. do. However, in the case of the first block, the first hash value for the current data block cannot be generated because there is no previous data block. The present invention solves this problem by using the initial authentication data IAD stored in the secure storage module 220 as the first hash value of the first block.

The first hash value storage module 235 stores the first hash value of the current data block generated by the first hash module 233.

The second hash module 234 hashes the first hash value to generate a second hash value of the current data block, and the second hash value storage module 236 generates a second hash generated by the second hash module 234. Save the value.

The integrity verification data generation module 237 combines the second hash value of the current block with the time stamp of the current data block to generate integrity verification data of the current data block, and generates the generated integrity verification data to the data storage module 240. send.

The integrity verification data update module 239 is an apparatus for updating the integrity verification data stored in the data storage module 240. When the first hash value for the current data block is generated, the integrity verification data update module 239 is immediately before the first hash value for the current data block. The value obtained by combining the hash value by combining the second hash value of the data block and the time stamp of the previous data block is output as the integrity verification data of the previous data block and transmitted to the data storage module 240. Accordingly, the integrity verification data of the immediately preceding data block is converted (updated) to a new value and stored.

A data processing method for guaranteeing real-time integrity and confidentiality according to an exemplary embodiment of the present invention will be described below with reference to FIGS. 3 to 6.

3 illustrates an input data block and encrypted data and integrity verification data and integrity verification data update values generated in accordance with one preferred embodiment of the present invention.

Referring to FIG. 3, data input from a data input module, that is, an input data stream in a digital form is divided into blocks of a predetermined size so that a total of N data blocks BD ₁ , BD ₂ , BD ₃ , BD ₄ , ... , BD _N is generated.

When encryption processing is performed on the _N data blocks BD ₁ , BD ₂ , BD ₃ , BD ₄ , ..., BD _N , the encrypted data ED ₁ , ED ₂ , ED ₃ , ..., ED _N is generated. . In addition, when integrity verification data processing is performed on the N data blocks BD ₁ , BD ₂ , BD ₃ , BD ₄ , ..., BD _N , the N integrity verification data IVD ₁ , IVD ₂ , IVD ₃ , ... , IVD _N is generated. In the process of data integrity verification, the data blocks BD ₁ , BD ₂ , BD ₃ , BD ₄ , ..., BD _N are sequentially deleted and do not exist in the data storage module. The value is not immediately exposed. Therefore, it is possible to ensure the confidentiality of the data stored in the black box system.

In addition, the integrity verification data IVD ₁ , IVD ₂ , IVD ₃ , ..., IVD _N is the integrity verification data update value IVD ' ₁ , IVD' ₂ , IVD ' ₃ , ..., IVD ' _{Replaced by N-1} , the integrity verification data values IVD ₁ , IVD ₂ , IVD ₃ , ..., IVD _N-1 are not present in the data storage module. As described above, according to the present invention, since the updated value of the integrity verification data is stored instead of the integrity verification data value, security can be further enhanced compared to the prior art 1. Accordingly, it is possible to detect the deletion of all original data and integrity verification data pairs after a specific time point that could not be detected in the prior art 1.

4 is a flowchart showing a data encryption processing operation in the black box system 200 according to an exemplary embodiment of the present invention, and FIG. 5 is a table showing a relationship between block data and encrypted data generated by random numbers.

Referring to FIG. 4, when input data streams are input through the input interface 210 of the black box system 200, the input data streams are divided into blocks having a predetermined size to form a plurality of input data blocks (S400).

The random number sequence having the same size as that of the first data block is generated using the seed value stored in the secure storage module for the first data block BD ₁ (S420).

는 XOR 연산의 논리 연산자 부호로서, 첫 번째 난수 수열(R₁)과 첫번째 데이터 블록(BD₁)을 XOR 연산하여 첫번째 데이터 블록의 암호화 데이터(ED₁)를 생성한다(S440). 이에 따라 생성된 생성된 암호화 데이터(ED₁)는 데이터 저장 모듈에 저장된다(S460).5,

X is a logical operator code of the XOR operation, and generates an encrypted data ED ₁ of the first data block by performing an XOR operation on the first random number sequence R ₁ and the first data block BD ₁ (S440). The generated encrypted data ED ₁ is stored in the data storage module (S460).

Then, it is determined whether the next block to be encrypted exists (S480), and if the next block exists, the process returns to S420, in which a random number sequence is generated. However, if no block to encrypt exists, the encryption process ends.

6 is a flowchart illustrating data processing for guaranteeing integrity according to a preferred embodiment of the present invention.

Referring to FIG. 6, the first data block value BD ₁ of the plurality of data blocks generated by the data block generation module 231 is converted into a time stamp value ts ₁ of the first block and an index value 1 representing the first block. Combine, and sign with a signature key (SK) stored in the secure storage module, and generates the initial authentication data (IAD) of the result value (S700). Then, the IAD is stored in the security enhanced security storage module (S710).

Then, it is determined whether the data block is the first block data, that is, the first data block (S720). If the data block is the first data block, the current block data value is stored after storing the IAD as the first hash value for the first data block. Delete from memory (S735).

However, if the data block is not the first data block, the first hash value of the current block is hashed by combining the current data block value, the time stamp value of the current block, and the index value of the current block with the first hash value of the previous block. To generate (S730).

When the first hash value of the current data block is generated, the current data block value stored in the data storage module and the first hash value of the previous block are deleted (S740).

In operation S750, the second hash module regenerates the first hash value of the current block to generate a second hash value of the current block.

In operation S760, a value obtained by connecting the second hash value with the time stamp value of the current block is stored in the data storage module as integrity verification data regarding the current block.

 When the first hash value of the current block is generated, the second hash value of the previous block stored in the second hash value storage module and the first hash value of the current block are combined to update the integrity verification data for the previous block. The value is hashed, and the integrity verification data for the previous block is converted (updated) to a value obtained by combining the time stamps of the previous block (S770). The update value of the integrity verification data is stored in the data storage module. The integrity verification data update operation may be performed before obtaining the second hash value of the current block, that is, before step S750.

After performing the operation, it is determined whether there is a next block (S780), and if there is a next block, the process returns to step S730 and repeats the steps up to S770. If there is no next block, the process ends.

7 is a table showing correlations between data used in arithmetic processing to ensure integrity. In FIG. 7, h () means hash operation, and ∥ means join operation.

First, referring to the first data block, a signature key (SK) pre-stored in the secure storage module is signed for the combination of the first data block value, the time stamp (ts ₁ ) and the index value (1) of the first data block. The value IAD is used as the first hash value for the first data block.

The second hash value h ' ₁ of the first block is a hashed value of the first hash value h ₁ of the first block.

Meanwhile, the integrity verification data value IVD ₁ of the first block is a value obtained by combining the second hash value h ′ ₁ of the first block and the time stamp ts ₁ of the first block.

Next, referring to the second block, the first hash value h ₂ for the second block is the timestamp value ts ₂ of the second block to the first hash value h ₁ of the first block that is the previous data block. And a hashed value of the combination of the index values (2) of the second block. The second hash value h ' ₂ of the second block is a hash of the first hash value h _{2 of the} second block, and the integrity verification data IVD ₂ of the second block is of the second block. The second hash value h ' ₂ is a value obtained by combining the time stamp value ts ₂ of the second block.

When the first hash value h ₂ for the second block is generated, the integrity verification data IVD ₁ for the first block can be updated. The update is a value obtained by combining the first hash value h _{2 of} the second block with the second hash value h ' ₁ of the first block and the time stamp ts ₁ of the first block. Is performed by converting the integrity verification data IVD ₁ for the first block.

 The third and subsequent data blocks also generate the first hash value, the second hash value, the integrity verification data, and the integrity verification data update value through the above-described operations, and the generated values are stored in the data storage module.

The data encryption and integrity verification data processing can be performed integrally for each block.

On the other hand, the process of reading the data stored in the black box by the present invention is as follows.

If you want to read the data in the black box, the user must enter a password to the black box 200 through the user input device (300). When the password is input, the black box 200 generates a seed value from the password according to the same algorithm used in the data encryption process, compares the seed value stored in the black box with the newly generated seed value and if the data do not match, Reading fails.

If they match, a random number sequence is generated from the seed value in the same manner as used in the operation step, and the XOR operation of the encrypted data and the random number sequence stored in the data storage module in the black box is performed. The result of the XOR operation becomes the original data value generated by the black box system. Therefore, only a user who knows the correct password can read the original data stored in the black box system.

 In addition, data integrity verification for checking whether a user has forged / modulated or deleted data is performed as follows.

The original data value obtained through the data viewing process is used as an input of the integrity verification step together with the integrity verification data values stored in the data storage module.

First, the user performs signature verification with a signature verification key on an initial authentication data value (IAD) stored in a secure storage module. In this case, the inputs are the first block value (BD1) of the original data, the timestamp value (ts1) and the index value (1) of the first data block included in the first integrity verification data. Integrity verification becomes "failure".

If the signature verification passes, the result value calculated by using the initial authentication data IAD as the first hash value h1 of the first block and rehashing the first hash value h ₁ of the first block. Is stored as the second hash value h ' ₁ of the first block.

A second hash value of the first blocks (h _'1) a first integrity check data (IVD ₁₎ the time stamp value included in (ts ₁₎ and the integrity verification data of the combined value of the first block comparison value (IVD' ₁ ) Into memory.

On the other hand, the second block of the original data (BD ₂₎ is the time stamp value included in the first hash value of the first blocks (h _1), and the second integrity check data (IVD ₂₎ (ts ₂₎ and an index value (2) Combined with hashing. The calculated result value is used as the first hash value h ₂ of the second block.

The rehashed value of the first hash value h ₂ of the second block is used as the second hash value h ' ₂ of the second block, and the second hash value of the second block is used as the second integrity verification data IVD. 'is combined with the time stamp value (ts ₂₎ included in the _second) two integrity verification data compared value (IVD of the second block, is stored in the memory in _2).

In addition, the integrity verification data comparison value IVD ' ₁ of the first block is hashed by combining the second hash value h' ₁ of the first block with the first hash value h _{2 of the second} block. The time stamp values ts ₁ included in the integrity verification data IVD ₁ are combined to be converted (updated).

The block values of the original data after the second block are processed through a series of methods described for the second block to generate integrity verification data prime values, and the generated values are stored in memory.

To the integrity check data comparison value generated in this way _{(IVD '1, IVD' 2} , IVD '3, .., IVD' N) , the integrity verification data update value that is stored in the data storage module (IVD _1, IVD _2, IVD ₃ , ..., IVD _N ), and the comparison result shows that the data integrity is guaranteed if both match, whereas the data is not matched if any one of the blocks does not match. The user will be able to see that is corrupted or removed.

On the other hand, while the present invention has been described by the specific embodiment, it is obvious that various modifications and changes can be made without departing from the scope of the present invention. Therefore, the technical scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

100: data input unit 110: video recording device
120: sound detection device 130: acceleration detection device
140: angular velocity detection device 150: impact detection device
200: black box system 210: input interface
220: secure storage module
230: integrity and confidentiality processing module 240: data storage module
250: integrity and confidentiality protection device 300: user input device

Claims (13)

A method of processing data by a data processing device that guarantees the integrity and confidentiality of data input in real time,
Dividing the data into blocks of a predetermined size to generate a data block;
Encrypting the data block using a seed value generated based on a password input from a user;
Generating initial authentication data (IAD) by performing a signature with a signature key on a value obtained by combining an initial data block value of the data, a time stamp value of the initial data block, and an index value;
Generating integrity verification data for each partitioned data block; And
Updating the integrity verification data of each data block using the second hash value of the immediately preceding data block,
Generating the integrity verification data,
Combines a first hash value of a previous data block, a time stamp value for a current data block, and an index value for a current data block, and hashes the combined value to a first hash for each data block. Generating a value;
Regenerating the first hash value to generate a second hash value for the data block; And
Outputting a value obtained by combining a time stamp with the second hash value as integrity verification data,
And the initial authentication data is used as a first hash value for the first block. The method of claim 1,
The encryption step,
Generating a random number sequence having the same size as the data block from the seed value for each data block; And
Generating encrypted data by calculating the random number sequence and a data block value. delete delete The method of claim 1,
If a first hash value for the current data block is generated, deleting the first hash value for the immediately preceding data block and the current data block value. The method of claim 1,
The integrity verification data update step,
Combining and hashing the first hash value of the current data block and the second hash value of the previous data block; And
And outputting a value obtained by adding a time stamp of a previous data block to the hashing value as an integrity verification data update value for the previous data block. As a data processing device that guarantees the integrity and confidentiality of data input in real time,
A data block generation module for dividing an input data stream of data into data blocks of a predetermined size;
A seed value is generated based on a password input from a user, and the initial authentication data is signed by signing a combination of an initial data block value of the data, a time stamp value of the initial data block, and an index value. A secure storage module for generating;
A data encryption processing module for encrypting the data block using the seed value; And
An integrity verification data processing module for generating integrity verification data for each of the data blocks, and updating the integrity verification data of each data block using a second hash value of the immediately preceding data block,
The integrity verification data processing module is:
A first hash value for the current data block by combining and hashing a first hash value for the previous data block, a time stamp value for the current data block, and an index value for the current data block to the current data block value; Hash module;
A first hash value storage module for storing the first hash value;
A second hash module for regenerating the first hash value to generate a second hash value;
A second hash value storage module for storing the second hash value;
An integrity verification data generation module for generating integrity verification data for a current data block by combining the second hash value with a time stamp value for a current data block; And
Combining and hashing the first hash value for the current data block and the second hash value for the previous data block, and outputting the value obtained by adding the time stamp value of the previous data block as an integrity verification data update value for the previous data block. And an integrity verification data update module. The method of claim 7, wherein
The initial authentication data, the signature key and the seed value are stored in the secure storage module. The method of claim 7, wherein
And the data encryption processing module generates a random number sequence having the same size as the data block based on the seed value, and generates encrypted data by calculating the random number sequence and the data block value. delete delete The method of claim 7, wherein
The secure storage module is characterized in that the secure storage (Secure Storage), such as a smart card. It is a black box system that collects and stores data input in real time.
A data processing device according to any one of claims 7 to 9 or 12;
An input interface for receiving the data and receiving user input from a user input medium; And
And a data storage module for storing the encrypted data and the integrity verification data.

Images