KR102404148B1 - Quantum security communication device integrated autonomous moving body identification system and method - Google Patents

Abstract

The present invention relates to an autonomous mobile body identifying system integrated with a quantum security communication device, which comprises: an autonomous moving body identifying unit including (1) a device registration module for generating device registration data, (2) a device identity module (DIM) implemented by a separate independent chipset, inputting a quantum security key in accordance with setting of a manager, and including a quantum security device identification key, (3) a security module for generating quantum security device registration data by performing a quantum security operation for the device registration data using the quantum security device identification key and the quantum security key through the DIM, and (4) a communication interface unit for transmitting the quantum security device registration data for a given communication environment; and a central device identifying unit for receiving the quantum security device registration data to extract a device identification key, determining a quantum security key on the basis of the device identification key to detect the device registration data, and performing quantum key distribution with respect to the DIM in advance to input the quantum security key. Therefore, the security can be improved.

Description

QUANTUM SECURITY COMMUNICATION DEVICE INTEGRATED AUTONOMOUS MOVING BODY IDENTIFICATION SYSTEM AND METHOD

The present invention relates to a technology for registering and identifying autonomous mobile devices such as drones, robots, autonomous vehicles, or unmanned ships, and more particularly, to surrounding facilities and control systems through quantum security communication based on quantum cryptography. It relates to a quantum security communication device-integrated autonomous mobile identification system and method that can safely store and process information for mutual device registration and identification.

Autonomous objects refer to autonomous things that move based on automation programming such as robots, drones, autonomous vehicles, or unmanned ships. Autonomous vehicles are being grafted and used in various industrial fields.

Autonomous vehicles must identify and respond to surrounding facilities and moving objects in order to improve safety during movement.

In the autonomous vehicle identification system, identification and authentication of both devices is essential for safe two-way communication between autonomous vehicles and with surrounding facilities and central systems.

Korean Patent Publication No. 10-2020-0135156 (2020.12.02)

One embodiment of the present invention is a quantum security communication device integrated autonomous mobile identification that can safely store and process information for mutual device registration and identification with surrounding facilities and control systems through quantum security communication based on quantum cryptography It is intended to provide a system and method.

An embodiment of the present invention is to provide a quantum security communication device-integrated autonomous mobile identification system and method for encrypting and decrypting device registration data with a quantum security module to improve security so that information is not exposed during system hacking.

An embodiment of the present invention supports the identification function between the autonomous mobile body and the central system, so that not only the fixed server but also the virtualized cloud environment is applied, the quantum security communication device integrated autonomous mobile device identification capable of secure quantum security communication with the upper system It is intended to provide a system and method.

Among the embodiments, the quantum security communication device integrated autonomous mobile identification system is implemented as (1) a device registration module that generates device registration data, (2) a separate independent chipset, and performs the injection of a quantum security key according to the setting of an administrator. A device identity module (DIM) that can perform and includes a quantum security device identification key, (3) a quantum security operation is performed on the device registration data with the quantum security device identification key and the quantum security key through the DIM. an autonomous mobile identification unit comprising: a security module for generating security device registration data; and (4) a communication interface unit for transmitting the quantum security device registration data for a given communication environment; and receiving the quantum security device registration data to extract a device identification key, determining a quantum security key based on the device identification key to detect the device registration data, and performing quantum key distribution for the DIM in advance and a central device identification processing unit that handles quantum security key injection.

The DIM receives a reset interface for receiving a reset signal, and the quantum security key from the central device identification processing unit based on the reset signal, and performs quantum security on a device unique number with the quantum security key to perform the quantum security device. It may include quantum security firmware that generates an identification key.

The DIM may further include a UART interface that is connected to the device registration module and provides the device registration data to the quantum security firmware and provides quantum security device registration data generated from the quantum security firmware to the communication interface unit. .

The quantum security firmware may receive the device registration data and generate the intermediate quantum security device registration data based on the quantum security key.

The quantum security firmware may generate the quantum security device registration data by merging the quantum security device identification key with the intermediate quantum security device registration data.

The quantum security firmware may provide the quantum security device registration data to the communication interface unit through a DUSS (Different Unit Same Security) protocol regardless of the given communication environment.

When the DIM does not operate normally, the security module receives a public key from the central device identification processing unit, performs a security operation on the device registration data with the public key, and converts the quantum security device registration data to a public key security device It can be replaced with registration data.

The central device identification processing unit may detect whether the DIM is operating normally in the autonomous mobile identification unit, and if so, may perform the quantum security key injection.

The central device identification processing unit may provide an RSA or ECC-based public key to the security module when the DIM does not operate normally.

In embodiments, the quantum security communication device integrated autonomous mobile identification method includes: generating device registration data; It is implemented as a separate independent chipset and can perform injection of the quantum security key according to the setting of the administrator, and uses the quantum security device identification key and the quantum security key through the DIM (Device Identity Module) including the quantum security device identification key. generating quantum security device registration data by performing a quantum security operation on the device registration data; transmitting the quantum secure device registration data for a given communication environment; and receiving the quantum security device registration data to extract a device identification key, determining a quantum security key based on the device identification key to detect the device registration data, and performing quantum key distribution for the DIM in advance processing quantum security key injection.

The disclosed technology may have the following effects. However, this does not mean that a specific embodiment should include all of the following effects or only the following effects, so the scope of the disclosed technology should not be understood as being limited thereby.

Quantum security communication device integrated autonomous mobile identification system and method according to an embodiment of the present invention safely stores information for mutual device registration and identification with surrounding facilities and control systems through quantum security communication based on quantum cryptography and can be processed.

The quantum security communication device integrated autonomous mobile identification system and method according to an embodiment of the present invention can improve security so that information is not exposed during system hacking by encrypting and decrypting device registration data with a quantum security module.

The quantum security communication device integrated autonomous mobile identification system and method according to an embodiment of the present invention supports the identification function between the autonomous mobile object and the central system, so that not only a fixed server but a virtualized cloud environment is applied. can communicate.

1 is a diagram illustrating an autonomous mobile identification system integrated with a quantum security communication device according to an embodiment of the present invention.
FIG. 2 is a block diagram illustrating a Device Identity Module (DIM) of the autonomous mobile identification unit shown in FIG. 1 .
3 is a block diagram showing the functional configuration of the quantum security firmware in the DIM (Device Identity Module) shown in FIG.
4 is a flowchart showing a quantum security communication process of an autonomous mobile identification system integrated with a quantum security communication device according to an embodiment.

Since the description of the present invention is merely an embodiment for structural or functional description, the scope of the present invention should not be construed as being limited by the embodiment described in the text. That is, since the embodiment may have various changes and may have various forms, it should be understood that the scope of the present invention includes equivalents capable of realizing the technical idea. In addition, since the object or effect presented in the present invention does not mean that a specific embodiment should include all of them or only such effects, it should not be understood that the scope of the present invention is limited thereby.

On the other hand, the meaning of the terms described in the present application should be understood as follows.

Terms such as “first” and “second” are for distinguishing one component from another, and the scope of rights should not be limited by these terms. For example, a first component may be termed a second component, and similarly, a second component may also be termed a first component.

When a component is referred to as being “connected to” another component, it may be directly connected to the other component, but it should be understood that other components may exist in between. On the other hand, when it is mentioned that a certain element is "directly connected" to another element, it should be understood that the other element does not exist in the middle. Meanwhile, other expressions describing the relationship between elements, that is, "between" and "between" or "neighboring to" and "directly adjacent to", etc., should be interpreted similarly.

The singular expression is to be understood as including the plural expression unless the context clearly dictates otherwise, and terms such as "comprises" or "have" refer to the embodied feature, number, step, action, component, part or these It is intended to indicate that a combination exists, and it should be understood that it does not preclude the possibility of the existence or addition of one or more other features or numbers, steps, operations, components, parts, or combinations thereof.

In each step, identification numbers (eg, a, b, c, etc.) are used for convenience of description, and identification numbers do not describe the order of each step, and each step clearly indicates a specific order in context. Unless otherwise specified, it may occur in a different order from the specified order. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

The present invention can be embodied as computer-readable codes on a computer-readable recording medium, and the computer-readable recording medium includes all types of recording devices in which data readable by a computer system is stored. . Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like. In addition, the computer-readable recording medium is distributed in a computer system connected to a network, so that the computer-readable code can be stored and executed in a distributed manner.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs, unless otherwise defined. Terms defined in general used in the dictionary should be interpreted as having the meaning consistent with the context of the related art, and cannot be interpreted as having an ideal or excessively formal meaning unless explicitly defined in the present application.

1 is a view showing a quantum security communication device integrated autonomous mobile identification system according to an embodiment of the present invention.

Referring to FIG. 1 , an autonomous mobile identification system 10 integrated with a quantum security communication device may include an autonomous mobile identification unit 100 and a central device identification processing unit 200 . Here, the autonomous mobile identification unit 100 and the central device identification processing unit 200 are wireless communication such as satellite communication, 4G, 5G, 6G, WiFi, TVWS, or wired such as Ethernet and serial communication. It can be connected through communication.

The autonomous moving object identification unit 100 may be mounted on an autonomous moving object such as a drone, a robot, an autonomous driving vehicle, or an unmanned ship, and a device registration module 110, a device identity module (DIM) 130, a security module 150 and a communication interface unit 170 .

The device registration module 110 may generate device registration data. Here, the device registration data may include information for mutual identification of surrounding autonomous vehicles or central autonomous vehicle management systems.

The Device Identity Module (DIM) 130 is implemented as a separate and independent chipset, and may perform injection of a quantum security key according to a setting of an administrator, and may include a quantum security device identification key. The DIM 130 may receive the quantum security key from the central device identification processing unit 200, and perform quantum security on the device unique number with the quantum security key to generate a quantum security device identification key.

Quantum-Safe Security refers to a security technology that cannot be penetrated even by the computational power of a quantum computer using the principles of quantum mechanics. Quantum security is currently divided into hardware-based Quantum Key Distribution (QKD) and software-based Post-Quantum Cryptography (PQC). QKD (Quantum Cryptographic Key Distribution) is a key (a kind of random password) required for cryptographic communication between two users by using the no-cloning theorem and the collapse of the wave function in quantum mechanics. It refers to a technology that allows users to share information secretly with each other. Quantum resistant cryptography (PQC) can provide all the necessary functions for not only key distribution but also complete cryptographic communication. That is, generating a key that is a password at random through a pseudo random number generator (PRNG) or quantum random number generator (QRNG), user authentication, key distribution (or sharing) ) step and encryption with a shared key through a secret key (symmetric key) encryption algorithm such as AES or SEED. Encrypted communication is possible without

Here, the DIM 130 performs quantum security by generating a random number through a quantum random number.

The security module 150 may generate quantum security device registration data by performing a quantum security operation on the device registration data with the quantum security device identification key and the quantum security key through the DIM 130 . When the DIM 130 does not operate normally, the security module 150 receives the public key from the central device identification processing unit 200 and performs a security operation on the device registration data with the public key to disclose the quantum security device registration data. It can be replaced with key security device registration data. The security module 150 may perform encryption and decryption of device registration data, and in this process, a key such as a quantum security key or a public key may be used.

Public key cryptography is an asymmetric key method in which the keys used for encryption and decryption are different. It is a method of generating a key pair consisting of a public key and a private key using a specific algorithm, then encrypting it with the public key and decrypting it with the private key.

The communication interface unit 170 may transmit quantum secure device registration data for a given communication environment. Here, the communication environment refers to a communication method that can be integrated into satellite communication, wireless communication such as 4G, 5G, 6G, WiFi, TVWS, LoRa, and wired communication methods such as Ethernet, Serial 232, and 485. , there is no need to rely on the security of individual communications.

The central device identification processing unit 200 receives the quantum security device registration data, extracts the device identification key, determines the quantum security key based on the device identification key, and detects the device registration data, in advance for the DIM 130 . Quantum key distribution can be performed to handle quantum security key injection. In an embodiment, the central device identification processing unit 200 is a higher system of the autonomous moving object identification unit 100 and may correspond to a control server that remotely controls and manages the autonomous moving objects. In this case, the central device identification processing unit 200 may correspond to a higher system to which a virtualized cloud environment is applied, not just a fixed server.

The central device identification processing unit 200 detects whether the DIM 130 is operating normally, and can perform quantum security key injection when the DIM 130 operates normally, and when the DIM 130 does not operate normally. may provide the RSA or ECC-based public key to the security module 150 .

RAS (Rivest, Shamir, Adleman) is one of the public key encryption algorithms, and it consists of a public key and a private key. Used for decryption. ECC (Elliptic Curve Cryptosystem) is one of the public key cryptographic algorithms that use the mathematical properties of elliptic curves, and provides stronger security compared to RAS for the same key length.

FIG. 2 is a block diagram illustrating a Device Identity Module (DIM) of the autonomous mobile identification unit of FIG. 1 .

Referring to FIG. 2 , the DIM 130 of the autonomous vehicle identification unit 100 includes a power interface 210 , a reset interface 220 , a SWD interface 230 , a UART interface 240 , a quantum security firmware 250 and It is implemented as a single chipset including a quantum entropy chip (QEC) 260, and may perform injection of a quantum security key according to the setting of an administrator, and may include a quantum security device identification key.

The power interface 210 may provide external input power as power required for the operation of the DIM 130 . In an embodiment, the power interface 210 may receive a power input of approximately 3.3V.

The reset interface 220 may receive a reset signal for resetting the quantum security firmware 250 . Here, the reset signal may be provided to the reset interface 220 according to a setting of an administrator. In an embodiment, the reset signal may be set to be provided to the reset interface 220 whenever device registration data is generated in the device registration module 110 and provided to the DIM 130 .

The SWD (Serial Wire Debug) interface 230 may provide programming and debugging to the MCU from which the quantum security firmware 250 is downloaded.

The UART interface 240 is connected to the device registration module 110 , provides device registration data to the quantum security firmware 250 , and provides quantum security device registration data generated from the quantum security firmware 250 to the communication interface unit 170 . can provide

The quantum security firmware 250 may receive the quantum security key from the central device identification processing unit 200 based on the reset signal and perform quantum security on the device unique number with the quantum security key to generate a quantum security device identification key. . The quantum security firmware 250 may receive device registration data and generate intermediate quantum security device registration data based on the quantum security key. The quantum security firmware 250 may receive device registration data in a UART (Universal Asynchronous Receiver/Transmitter) communication environment. The quantum security firmware 250 may generate quantum security device data by merging the quantum security device identification key with the intermediate quantum security device registration data. The quantum security firmware 250 may provide quantum security device data to the communication interface unit 170 through a DUSS (Different Unit Same Security) protocol regardless of a given communication environment.

The quantum entropy chip (hereinafter, referred to as QEC) 260 may generate a quantum random number entropy source (noise source) to provide analog noise to the quantum security firmware 250 . At this time, analog noise may be generated to have sufficient entropy to generate an unpredictable encryption seed. In an embodiment, the QEC 260 may correspond to a noise source operating system implemented in software such as Android, Linux, or Windows. In one embodiment, the QEC 260 may be implemented in hardware by using non-deterministic phenomena in electronic circuits, such as shot noise of Zener diodes, intrinsic thermal noise of semiconductor circuits, or by using physical phenomena such as radiation decay. can In an embodiment, the QEC 260 may be implemented by combining software and hardware.

3 is a block diagram showing the functional configuration of the quantum security firmware in the DIM (Device Identity Module) shown in FIG.

Referring to FIG. 3 , the quantum security firmware 250 of the DIM 130 includes a security function processing unit 310 , a cryptographic algorithm processing unit 320 , an important security parameter processing unit 330 , a finite state processing unit 340 , and a command set. By including the base security agent protocol processing unit 350 and the input/output data processing unit 360, it is possible to perform quantum security and generate a quantum security device identification key and quantum security device data.

The security function processing unit 310 is divided into an important security parameter management function, a setting function of the encryption algorithm, and a function of performing the encryption algorithm (data input) in order to provide an encryption algorithm service to the administrator. The list of security parameters and supported cryptographic algorithms can be exemplified in Tables 1 and 2 below.

[Table 1]

[Table 2]

The cryptographic algorithm processing unit 320 supports block ciphers such as ARIS, SEED, LEA, and HIGHT as well as AES cryptographic algorithms and block cipher operation modes for confidentiality and authentication services such as GMAC, CMAC, CCM, and GCM. The cryptographic algorithm processing unit 320 supports the ECDSA algorithm for digital signature and the ECDH algorithm for key setting, so that 4G LTE, 5G, 6G, satellite , to be applicable to wireless communication such as TVWS and IoST environments such as WiFi, LTE Cat.m1, NB-IoT, and LoRa.

The important security parameter processing unit 330 is a layer that processes core security parameters and public security parameters, and is responsible for generating, setting, injecting, outputting, storing, and zeroing security parameters.

The finite state processing unit 340 is responsible for mapping states and inputs to outputs for a finite input event set, a finite output event set, and a finite state set.

The command set-based security agent protocol processing unit 350 processes the CMDSAP.

The input/output data processing unit 360 provides a cryptographic algorithm service to the administrator through a cryptographic function, and other version display functions, status display functions, initialization functions, termination functions, information management functions, authentication functions, test functions, security parameter management functions , to provide services through cryptographic algorithm functions.

4 is a flowchart showing a quantum security communication process of an autonomous mobile identification system integrated with a quantum security communication device according to an embodiment.

In FIG. 4 , the quantum security communication device integrated autonomous mobile identification system 10 may generate device registration data through the autonomous mobile identification unit 100 (step S410 ). In an embodiment, the autonomous mobile identification unit 100 may generate device registration data through the device registration module 110 .

The quantum security communication device integrated autonomous mobile identification system 10 may generate quantum security device registration data by performing a quantum security operation on the device registration data through the autonomous mobile identification unit 100 (step S420). In an embodiment, the autonomous mobile identification unit 100 may perform a quantum security operation on the device registration data with the quantum security device identification key and the quantum security key through the Device Identity Module (DIM) 130 . Here, the DIM 130 may be implemented as a separate independent chipset, may perform injection of the quantum security key according to the settings of the administrator, and may include a quantum security device identification key.

The quantum security communication device integrated autonomous mobile identification system 10 may transmit quantum security device identification data for a given communication environment through the autonomous mobile identification unit 100 (step S430). In one embodiment, the autonomous mobile identification unit 100 provides quantum security device registration data to the communication interface unit 170 through a DUSS (Different Unit Same Security) protocol regardless of a given communication environment to the communication interface unit 170 Quantum security device registration data can be transmitted through

The quantum security communication device integrated autonomous mobile identification system 10 receives quantum security device registration data through the central device identification processing unit 200, extracts the device identification key, and determines the quantum security key based on the device identification key to determine the device Registration data can be detected (step S440). In one embodiment, the central device identification processing unit 200 may perform quantum key distribution in advance with respect to the DIM 130 of the autonomous mobile identification unit 100 to process quantum security key injection. Here, when the DIM 130 does not operate normally, the central device identification processing unit 200 provides the RSA or ECC-based public key to the security module 150 of the autonomous mobile identification unit 100 to provide the device with the public key. A secure operation may be performed on registration data. In conclusion, the quantum security communication device integrated autonomous mobile identification system can provide an integrated security system in various communication environments.

Although the above has been described with reference to preferred embodiments of the present invention, those skilled in the art can variously modify and change the present invention within the scope without departing from the spirit and scope of the present invention as set forth in the claims below. You will understand that it can be done.

10: Quantum security communication device integrated autonomous mobile identification system
100: autonomous vehicle identification unit
110: device registration module 130: DIM (Device Identity Module)
150: security module 170: communication interface unit
200: central device identification processing unit
210: power interface 220: reset interface
230: SWD interface 240: UART interface
250: Quantum Security Firmware 260: Quantum Entropy Chip (QEC)
310: security function processing unit 320: encryption algorithm processing unit
330: important security parameter processing unit 340: finite state processing unit
350: command set-based security agent protocol processing unit
360: input/output data processing unit

Claims (10)

(1) Device registration module that generates device registration data, (2) DIM (Device) that is implemented as a separate, independent chipset, can perform quantum security key injection according to the administrator's settings, and includes a quantum security device identification key Identity Module), (3) a security module for generating quantum security device registration data by performing a quantum security operation on the device registration data with the quantum security device identification key and the quantum security key through the DIM, and (4) a given communication an autonomous mobile identification unit including a communication interface unit for transmitting the quantum security device registration data to an environment; and
Receive the quantum security device registration data, extract a device identification key, determine the quantum security key based on the device identification key to detect the device registration data, and perform quantum key distribution for the DIM in advance a central device identification processing unit that handles security key injection;
The DIM is
a reset interface for receiving a reset signal whenever device registration data is generated and provided by the device registration module according to the setting of the administrator; and
Receive the quantum security key from the central device identification processing unit based on the reset signal, perform quantum security on a device unique number with the quantum security key to generate the quantum security device identification key, and receive the device registration data and a quantum security firmware for generating intermediate quantum security device registration data based on the quantum security key, and merging the quantum security device identification key with the intermediate quantum security device registration data to generate the quantum security device registration data, ,
The quantum security firmware is
It supports block cipher operation mode and supports ECDSA algorithm for digital signature and ECDH algorithm for key setting. Quantum security communication device integrated autonomous mobile identification system, characterized in that it comprises.
delete The method of claim 1, wherein the DIM is
Quantum further comprising a UART interface connected to the device registration module, providing the device registration data to the quantum security firmware, and providing quantum security device registration data generated from the quantum security firmware to the communication interface unit Security communication device integrated autonomous vehicle identification system.
delete delete According to claim 1, wherein the quantum security firmware is
Quantum security communication device integrated autonomous mobile identification system, characterized in that providing the quantum security device registration data to the communication interface unit through a DUSS (Different Unit Same Security) protocol regardless of the given communication environment.
The method of claim 1, wherein the security module is
When the DIM does not operate normally, a public key is received from the central device identification processing unit, a security operation is performed on the device registration data with the public key, and the quantum security device registration data is replaced with public key security device registration data. Quantum security communication device integrated autonomous mobile identification system, characterized in that.
According to claim 1, wherein the central device identification processing unit
Quantum security communication device-integrated autonomous mobile identification system, characterized in that the autonomous mobile identification unit detects whether the DIM operates normally, and if so, performs the quantum security key injection.
The method of claim 8, wherein the central device identification processing unit
Quantum security communication device integrated autonomous mobile identification system, characterized in that when the DIM does not operate normally, a public key based on RSA or ECC is provided to the security module.
generating device registration data in a device registration module of an autonomous mobile identification unit;
It is implemented as a separate, independent chipset and can perform injection of the quantum security key according to the setting of the administrator, and the quantum security key in the security module of the autonomous mobile identification unit through the DIM (Device Identity Module) including the quantum security device identification key. generating quantum security device registration data by performing a quantum security operation on the device registration data with the security device identification key and the quantum security key;
transmitting the quantum security device registration data for a given communication environment in a communication interface unit of the autonomous mobile identification unit; and
The central device identification processing unit receives the quantum security device registration data, extracts the device identification key, determines the quantum security key based on the device identification key, and detects the device registration data, and the quantum key in advance for the DIM. Comprising the step of processing the injection of the quantum security key by performing distribution,
The device registration data generation step is
receiving a reset signal whenever device registration data is generated and provided by the device registration module according to the settings of the administrator;
generating the quantum security device identification key by receiving the quantum security key from the central device identification processing unit based on the reset signal and performing quantum security on a device unique number with the quantum security key;
receiving the device registration data and generating intermediate quantum security device registration data based on the quantum security key; and
Quantum security communication device integrated autonomous mobile identification method comprising the step of merging the quantum security device identification key with the intermediate quantum security device registration data to generate the quantum security device registration data.

Images