KR20070066835A - System and method for selecting and executing specific information security formula in information security communication systems - Google Patents

Abstract

A system and a method for selecting and executing specific information security formula in information security communication systems are provided to perform an information protection process by selecting an algorithm according to a communication channel and a communication environment. A method for selecting and executing specific information security formula in information security communication systems includes the steps of: starting a system(S10); receiving signal connecting data prior to information security communication(S11); selecting one of a plurality of algorithm(S12); in an automatic operation, analyzing the signal access data(S13); driving an information protection processor(S14-S17); and performing a security communication between communication systems(S18); in a manual operation, displaying recognizable signal access data(S19); controlling a selection switch or a button by a user based on the recognizable signal access data(S20); and selecting and executing one algorithm(S14-S18).

Description

SYSTEM AND METHOD FOR PROCESSING SPECIFIC INFORMATION PROTECTION IN INFORMATION SECURITY COMMUNICATION SYSTEM {SYSTEM AND METHOD FOR SELECTING AND EXECUTING SPECIFIC INFORMATION SECURITY IN INFORMATION SECURITY COMMUNICATION SYSTEMS}

1 is a control block diagram of an information security communication system according to an embodiment of the present invention;

2 is a control block diagram of an automatic operation information protection method determination unit according to an embodiment of the present invention;

3 is a control block diagram of a manual operation information protection method determination unit according to an embodiment of the present invention;

4 is a control flow diagram in which one specific information protection algorithm is selected and executed as an embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

10, 120, 220: control unit

20: Information protection method decision unit

130: data analysis unit

140, 240: information protection algorithm selection and setting unit

150, 250: information protection algorithm storage unit

270: selector switch / button

30, 230: display unit

40, 160, 260: Information Security Processing Unit

50: communication processing unit

The present invention relates to a specific information protection method processing system and method in an information security communication system, and more particularly, a plurality of information protection algorithms preloaded in a communication system requiring information protection functions for voice, video, data, and facsimile. The present invention relates to a specific information protection method processing system and method in an information protection communication system that performs an information protection function by selecting and executing one specific algorithm.

A general information security communication system encrypts and transmits communication data on one side, and receives and decrypts it on the other side. On the other side, the communication data is received and decrypted on the other side. A system capable of simultaneously performing bidirectional communication is called a bidirectional communication system. In this bidirectional communication system, since transmission and reception are performed together, encryption / decoding operations occur simultaneously independently of each other.

An information security communication system has been proposed to prevent a third party from recognizing important communication data between communication parties. A typical example is a method that generates a cryptographic algorithm of multiple channels with one cryptographic algorithm chip and an algorithm according to the CPU load. A low load algorithm is selected when the CPU usage rate is high, and a high load algorithm is selected when the CPU usage rate is low.

Meanwhile, in a general information security communication system, when performing a data protection function using a software resource such as a digital signal processor (DSP) or a microprocessor, a specific algorithm suitable for a communication environment and a channel is first implemented, and then in a communication system. Mount it in the algorithm store. Thereafter, encryption is performed on the transmission data using an algorithm installed in the algorithm storage unit and transmitted to the counterpart communication system through the transmit data processing unit, and the encrypted data transmitted from the counterpart communication system is received through the reception data processor. By performing the decryption using the secure communication between the communication systems.

However, when the necessity to mount a new information protection algorithm for the same communication system occurs, there is a disadvantage that causes inconvenience in use and management.

Accordingly, the present invention has been made to solve the above problems of the prior art, an object of the present invention is an automatic operation method through the interpretation of the communication call connection data for the communication connection between the communication system, the display unit in charge of the user interface function Among the plurality of information protection algorithms mounted in the information protection algorithm storage unit of the bidirectional information protection communication system, using a manual operation method, such as a user directly selecting by operating a selection switch or a button based on the communication call connection data displayed on the By selecting and executing one specific algorithm appropriate to the channel environment and characteristics, it provides specific confidentiality for important communication data transmitted / received between communication systems, and at the same time, it provides specific information security communication system that provides users with efficiency of use and management. Information Security Processing System and Room To provide for.

In the information protection communication system of the present invention for achieving the above object, a specific information protection system processing system, Communication processing unit for processing communication call connection data transmitted and received; A controller for requesting interpretation of communication call connection data, instructing selection and setting of an information protection algorithm in response to the analysis result, and instructing encryption and decryption; Corresponding to the communication call connection data among the plurality of information protection algorithms preloaded in response to the selection and setting instruction of the information protection algorithm of the control unit, the analysis of the communication call connection data in response to the analysis request of the control unit An information protection method determination unit for selecting and setting an information protection algorithm; And an information protection processor that performs encryption and decryption in response to an encryption and decryption instruction of the controller.

At this time, the information protection method determination unit, a data analysis unit for analyzing the communication call connection data; An information protection algorithm selection and setting unit for searching for and setting one information protection algorithm among the plurality of preloaded information protection algorithms; And an information protection algorithm storage unit for storing the plurality of information protection algorithms.

The information protection method determination unit may include: a selection switch / button for supporting a user to select an information protection algorithm pre-mapped in correspondence with the communication call connection data; An information protection algorithm selection and setting unit for searching for and setting one information protection algorithm among the plurality of preloaded information protection algorithms; And an information protection algorithm storage unit for storing the plurality of information protection algorithms.

On the other hand, in response to the reception of the communication call connection data, the specific information protection scheme processing method in the information protection communication system of the present invention comprises the steps of: receiving communication call connection data; Interpreting the communication call connection data; Selecting and setting an information protection algorithm corresponding to the communication call connection data among a plurality of information protection algorithms preloaded corresponding to the analysis result; Decrypting using the information protection algorithm; And performing secure communication between communication systems.

In addition, in response to the transmission of the communication call connection data, the specific information protection scheme processing method in the information protection communication system of the present invention comprises the steps of: analyzing communication call connection data to be transmitted; Selecting and setting an information protection algorithm corresponding to the communication call connection data among a plurality of information protection algorithms preloaded corresponding to the analysis result; Encrypting communication call connection data using the information protection algorithm; And transmitting the encrypted communication call connection data.

At this time, in the information protection algorithm selection and setting step, a pre-mapped information protection algorithm corresponding to the communication call connection data may be selected in response to the user selection.

Hereinafter, a specific information protection method processing system and method in the information protection communication system of the present invention will be described in detail with reference to the accompanying drawings.

1 is a control block diagram of an information security communication system according to an embodiment of the present invention.

Here, in the reference numerals of the drawings it will be given a separate reference number for each component for the components that actually perform the same function.

As shown in FIG. 1, after receiving communication call connection data transmitted from the counterpart communication system through the communication processing unit 50, the control unit 10 and the information protection method determination unit 20 interpret this. On the basis of the analyzed information, one of a plurality of pre-loaded information protection algorithms is selected and the information protection processor 40 is operated using this. After performing the communication call connection process as described above, a substantial secure communication is performed between communication systems. That is, the transmission / reception data is controlled through the control unit 10 and the communication processing unit 50 and the encryption / decryption is performed through the information protection processing unit 40 to perform secure communication through the communication channel. do. In addition, the display unit 30 displays the communication call connection data as data that can be recognized by the user. Meanwhile, since the encryption / decryption used in the present invention uses a known technique, a detailed description thereof will be omitted.

2 is a control block diagram of an automatic operation information protection method determination unit according to an embodiment of the present invention.

As shown in FIG. 2, there is shown a configuration block of the automatic operation information protection method determination unit through automatic analysis of communication call connection data applied to the present invention. The communication channel / environment information is received through the reception data processing unit 100. After receiving the communication call connection data including the data through the data analysis unit 130 under the control of the control unit 120. Based on the analyzed communication call connection data, the information protection algorithm storage unit 150 is searched through the information protection algorithm selection and setting unit 140 to select a pre-mapped algorithm in advance. The pre-communication call connection process is completed by operating the information protection processor 160 using the selected algorithm. After the communication call connection process, the communication data received through the reception data processing unit 100 is decrypted using the information protection processing unit 160, and the data to be transmitted is encrypted using the information protection processing unit 160. After that, the transmission data processing unit 110 transmits the data to the counterpart communication system.

3 is a control block diagram of a manual operation information protection method determination unit according to an embodiment of the present invention.

As shown in FIG. 3, there is shown a configuration block of a manual operation information protection method determination unit through user recognition and selection of communication call connection data displayed on a display unit according to the present invention. After receiving the communication call connection data including the communication environment and the channel information through the display unit 230 under the control of the control unit 220 to display in a form that the user can recognize. Based on the displayed communication call connection data, the user operates the selection switch / button 270 to search the information protection algorithm storage unit 250 through the information protection algorithm selection and setting unit 240 to perform a pre-mapped algorithm. Choose. The pre-communication call connection process is completed by operating the information protection processor 260 using the selected algorithm. After the communication call connection process, the communication data received through the reception data processing unit 200 is decrypted using the information protection processing unit 260, and the data protection to be transmitted is performed using the information protection processing unit 260. Afterwards, the transmission data processor 210 transmits the data to the counterpart communication system.

4 is a control flow diagram in which one specific information protection algorithm is selected and executed as an embodiment of the present invention.

As shown in Figure 4, when the start is made (S10) receives the communication call connection data before performing the secure communication between the communication system (S11) and the operating state of the information protection method determination of the current communication system-automatic operation or manual operation Based on-select one of the plurality of algorithms (S12).

That is, in the case of automatic operation, the communication call connection data is analyzed (S13), and one of the plurality of preloaded information protection algorithms is selected based on the analyzed information, and the information protection processing unit is operated using the information protection operation (S14 to S17). ). Thereafter, secure communication between communication systems is performed (S18).

In the case of manual operation (S19), the user selects and executes an algorithm by operating a selection switch or a button based on communication call connection data of a type that can be recognized by the user (S19) (S14 to S18). . The information protection processing unit is operated using the selected information protection algorithm to perform actual communication between communication systems.

Meanwhile, in the present exemplary embodiment, the communication call connection data is received and decrypted. However, in order to transmit arbitrary data to the outside, it is linked with the control unit 10 to select an information protection algorithm matching the arbitrary data. Will be encrypted, and the encrypted data can be transmitted to the outside.

Although the present invention has been described in more detail with reference to some embodiments, the present invention is not necessarily limited to these embodiments, and various modifications can be made without departing from the spirit of the present invention.

As described above, according to the present invention, it can be effectively applied to a bidirectional information security communication system requiring an information protection function. In addition, it is equipped with one information protection algorithm, so that the user can use it more conveniently and efficiently than the operation of a communication system in which the necessity of newly mounting the algorithm according to the change of the communication environment and the channel occurs. In addition, by providing a user interface function that can manually or automatically set the operation of the algorithm selection unit according to the user's needs, it can provide a more convenient operation and management convenience to the user.

Claims (7)

A communication processor for processing communication call connection data to be transmitted and received; A controller for requesting interpretation of communication call connection data, instructing selection and setting of an information protection algorithm in response to the analysis result, and instructing encryption and decryption; Corresponding to the communication call connection data among the plurality of information protection algorithms preloaded in response to the selection and setting instruction of the information protection algorithm of the control unit, the analysis of the communication call connection data in response to the analysis request of the control unit An information protection method determination unit for selecting and setting an information protection algorithm; And An information protection processor that performs encryption and decryption in response to an encryption and decryption instruction of the controller. Specific information protection method processing system in the information security communication system comprising a. The method of claim 1, wherein the information protection method determination unit, A data analyzer for analyzing the communication call connection data; An information protection algorithm selection and setting unit for searching for and setting one information protection algorithm among the plurality of preloaded information protection algorithms; And Information protection algorithm storage unit for storing the plurality of information protection algorithms Specific information protection method processing system in the information security communication system, characterized in that consisting of. The method of claim 1, wherein the information protection method determination unit, A selection switch / button for allowing a user to select a pre-mapped information protection algorithm corresponding to the communication call connection data; An information protection algorithm selection and setting unit for searching for and setting one information protection algorithm among the plurality of preloaded information protection algorithms; And Information protection algorithm storage unit for storing the plurality of information protection algorithms Specific information protection method processing system in the information security communication system, characterized in that consisting of. The system of claim 3, further comprising a display unit for displaying in a recognizable form to support a user's operation under the control of the controller. Receiving communication call connection data; Interpreting the communication call connection data; Selecting and setting an information protection algorithm corresponding to the communication call connection data among a plurality of information protection algorithms preloaded corresponding to the analysis result; Decrypting using the information protection algorithm; And Secure communication between communication systems Specific information protection method processing method in an information security communication system comprising a. Interpreting communication call connection data to be transmitted; Selecting and setting an information protection algorithm corresponding to the communication call connection data among a plurality of information protection algorithms preloaded corresponding to the analysis result; Encrypting communication call connection data using the information protection algorithm; And Transmitting the encrypted communication call connection data Specific information protection method processing method in an information security communication system comprising a. 7. The method of claim 5 or 6, wherein in the selecting and setting of the information protection algorithm, And a pre-mapped information protection algorithm corresponding to the communication call connection data is selected in response to a user selection.

Images