KR20100048705A - Usb hub device for providing datasecurity and method for providing datasecurity using the same - Google Patents

Abstract

PURPOSE: A USB hub device for providing data security and a method for providing data security using the same are provided to give a security function to a portable USB storage device by encoding and decoding input/output data through intrinsic chip ID. CONSTITUTION: A USB(Universal Serial Bus) hub controller(101) outputs input data, which are inputted through a data input port, through an output port. A security controller(103) uses an intrinsic semiconductor chip ID as the encoding or decoding key for the data. A CPU(Central Processing Unit) analyzes the input/output data of the USB hub controller, and controls the security controller.

Description

USB hub security device and data security method using it {USB HUB DEVICE FOR PROVIDING DATASECURITY AND METHOD FOR PROVIDING DATASECURITY USING THE SAME}

The present invention relates to a USB hub security device and a data security method using the same, and adds a security controller having a unique chip ID to a USB hub device to obtain data from all portable USB storage devices. The present invention relates to a security device and a data security method that can easily and easily grant a data security function to a receiving process.

Various types of portable storage devices have been used due to high capacity of semiconductor memory and development of data storage technology using the same. Among portable storage devices, in particular, the use of a USB portable storage device using a USB (Universal Serail Bus) interface of a computer is the mainstream, and a NAND flash memory or a hard disk is used as a medium of the internal storage device.

The USB portable storage device is widely used as a storage medium for important data such as document data and public certificate, as well as storing multimedia files such as music, pictures and video.

Portable USB storage devices are very vulnerable to security features behind their ease-of-use, which can result in the leakage of important personal data by the acquirer's malicious behavior in case of loss, and also in corporate and personal computers. It can also be used as an intermediary for the leakage of sensitive information.

Therefore, if you store important data on a portable USB storage device, you need to protect it from malicious learners and hacks.

Smart card ICs that provide security functions to protect the information stored in the event of loss of the portable USB storage device and to prevent the portable USB storage device from being used as an intermediary for the leakage of important information in institutions and corporations. There is a secure USB memory that adds the same security chip to a portable USB storage device to perform a personal authentication procedure and apply data encryption technology.

The secure USB memory is provided with a separate information storage memory such as EEPROM or NOR Flash memory, which can store small-capacity important information such as personal authentication information or public certificate. Secure USB memory prevents unauthorized use of non-authenticated USB memory, and also prevents unauthorized persons from using secure USB memory by conducting personal authentication procedures by the management server when connecting to a computer. In addition, by performing encryption on the stored data, even if the secure USB memory is lost or leaked to the outside of the user organization and the company, it is possible to block access to the stored important information.

Secure USB memory belongs to a system of client server models that can be used after the management server and personal authentication process and the authentication process of using secure USB memory itself. Although multiple levels of authentication provide excellent security, the client server system for operating the secure USB memory is expensive to build and requires an information expert to operate it. In reality, using a secure USB memory is difficult.

On the other hand, unlike the secure USB memory on the client server model, a personal secure USB memory has been developed that permits use after executing an authentication process by executing an authentication management program on a personal computer, but this also is an essential authentication procedure for use. Can not be avoided.

In the case of a secure USB memory, if the personal authentication information is leaked along with the loss, there is a risk that the data stored therein will be hacked. You may experience discomfort.

In addition, it is practically impossible for individual users to secure a portable USB storage device that they have previously purchased and used, so it is necessary to pay an additional cost to purchase a new secure USB memory device, which is higher than the cost of purchasing a portable USB storage device. Home users are becoming a major reason to avoid using secure USB memory.

As a result, it is easy to use for individuals and small businesses, it is easy to carry, it is inexpensive, and it is possible to add a security function to the data transmitted while reusing the popular USB portable storage device. This is required, and through this, it is necessary to protect personal information and to prevent information leakage in the enterprise.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and omits the complicated personal authentication procedure required for the use of the device and the encryption and decryption of data in a USB device including a conventional security function, and avoids the hardware duplication. Its purpose is to provide a USB hub security device that prevents source and implements simple and secure data security on portable USB storage devices.

In addition, another object of the present invention is to provide a security function to a general portable USB storage device easily and inexpensively without the burden of purchasing a separate secure USB memory or building a system, while also using USB peripherals such as a USB mouse and a USB keyboard using the USB standard. It is available to preserve the original functionality of the USB hub.

Technical problems to be achieved by the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned above are clearly understood by those skilled in the art from the following description. Could be.

USB hub security device of the present invention for achieving the above object has a USB hub controller for outputting the data input through the data input port through the output port, a unique semiconductor chip ID (chip ID), encryption for the data Or a security controller performing a security function of the data using the chip ID as a decryption key, a central processing unit for analyzing input / output data of the USB hub controller, controlling the security controller, a USB host interface connected to a USB host, And a USB device interface unit connected to the USB device.

In the present invention, the semiconductor chip ID may be a combination of numbers and letters which are individually assigned to each chip during the manufacture of the semiconductor chip.

USB hub security device of the present invention is characterized in that it does not include a memory capable of modifying the repeated authentication information, the encryption or decryption of the data by the key input to the unique semiconductor chip ID given in the semiconductor manufacturing process It is characterized by.

In the data security method using the USB hub security device of the present invention for achieving the above object is a data security method using a USB hub security device for connecting the USB host and the USB device to encrypt or decrypt data between each other, Extracting the data controlled by a USB hub controller, encrypting or decrypting the extracted data after authenticating using a unique semiconductor chip ID inputted as a key for encryption or decryption, and Transferring the encrypted or decrypted data to the USB hub controller.

Before each step, the USB hub controller generates an interrupt to the central processing unit when receiving data transmitted between the USB host and the USB device.

In the present invention, the semiconductor chip ID is input as a key for encrypting or decrypting data in a security controller.

According to the present invention, unlike the method of artificially assigning a personal authentication key required for encrypting and decrypting personal data and data in a USB memory with a built-in security function, it is uniquely provided in hardware when manufacturing a semiconductor chip. The chip ID of the security controller is used as an encryption and decryption key of the security controller, and it can be combined with a USB hub to perform encryption and decryption on input / output data, thereby providing security to all general portable USB storage devices. There is.

In addition, the data security method according to the present invention does not require a separate information storage memory such as an EEPROM or a Nor Flash memory for storing important information such as a personal authentication key and a public certificate. Since the personal authentication process is not required, the personal authentication process can be omitted, so that a simple and convenient security function can be implemented without requiring the development of a separate management server or authentication management program.

In addition, since the unique chip ID used for encrypting and decrypting data in the USB hub security device manufactured by the present invention cannot be artificially copied, there is an advantage of preventing the duplication of a secure USB hub. .

Hereinafter, exemplary embodiments will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing the structure of a USB hub security device according to an embodiment of the present invention.

Referring to FIG. 1, the USB hub security apparatus of the present invention includes a USB hub controller 101, a central processing unit 102, a security controller 103, a USB host interface unit 104, and a USB device interface unit 105. The internal devices are protected by the housing 100.

The USB hub controller 101 performs a function of outputting data input according to the USB signal standard according to the USB signal standard through an output port, and generates an external interrupt to the central processing unit 102 during USB data input / output. The processor 102 may analyze the input and output data.

The USB hub controller 101 may have a plurality of ports that may be connected to the USB device interface unit 105, but the USB hub security apparatus according to the present invention uses one USB device connection port for convenience. It describes how to operate it, and does not limit the number of ports that are connected to a USB device when manufacturing a real secure USB hub.

The central processing unit 102 controls the overall operation of the USB hub security device according to the present invention and detects an interrupt generated by the USB hub controller 101 when USB data is input to the USB hub controller 101. Analyze the data.

If the data input after the analysis is a portable USB storage device data, a unique chip ID (Chip ID) is input to the security controller 103 as an encryption or decryption key to control the data to be encrypted and decrypted, and the input data is portable. If the data is not the USB storage device, the USB hub controller 101 directly outputs the input data without performing an encryption or decryption process.

The security controller 103 is responsible for encrypting and decrypting data, and all security controllers have different chip IDs therein, and also store important information such as a personal authentication key or a certificate. It is characterized in that only the repetitive encryption or decryption function is performed by the input encryption or decryption key without embedding a separate information storage memory that can be repeatedly modified such as EEPROM or NOR flash memory.

The chip ID embedded in the security controller 103 is a unique ID assigned to each chip at the time of manufacturing the semiconductor chip, and is stored in the fuse box inside the chip, and has a capacity of several bytes to several tens of bytes. It consists of a serial number or a serial number and a letter that can be expressed as.

Chip ID is programmed to express unique number by flowing current through a series of fuses in the fuse box inside the chip during semiconductor chip manufacturing. Therefore, the chip ID is read after chip manufacturing. It is only possible to modify it, but it is impossible to modify it, which makes it impossible to manufacture a semiconductor chip having the same ChipID. Since the USB hub security device of the present invention uses this original unique chip ID as an authentication key, simple and convenient data security that can omit a personal authentication procedure is possible.

The USB host interface unit 104 is connected to a port of the USB host 110 to form a physical distortion of the standard plug that is connected to the USB host in the USB transmission standard as a part of sending and receiving data. The USB host 110 may be a personal computer or an electronic device having a built-in USB host function.

The USB device interface unit 105 is connected to the USB device 120 to exchange data. The USB device interface unit 105 may be configured as an input socket capable of varying the difference according to the plug type of the USB device connection unit, and also using an extension cable. It can also be configured in the form of a plug that can be integratedly connected to the input and output connectors of the USB device.

The USB device 120 may be a portable USB storage device or a device such as a mouse, keyboard, printer, scanner, or the like using a USB.

2 is a flowchart illustrating a data security method using a USB hub security device according to an embodiment of the present invention when data is received from a USB host.

That is, when data is received from the USB host in the operation of the USB hub security device according to an embodiment of the present invention, it shows a data encryption process and a bypass transmission process.

As shown, the USB hub security apparatus according to the present invention generates the USB host data reception interrupt to the central processing unit 102 after the USB hub controller 101 receives the data input from the USB host (step S1). Start the data encryption process.

After the interrupt is generated, the central processing unit 102 checks whether the USB device to receive the input data is a USB removable disk (USB MSC) (step S2), and checks whether the USB data is a bulk transmission data in the USB transmission standard. A step (step S3) and a step (step S4) of checking whether data is recorded on the USB removable disk (USB MSC) are sequentially performed.

If there is no error in all the checking steps, the input data is encrypted.

If there is an error in any of the above steps, the input data is regarded as data that is not recorded on the USB removable disk (USB MSC), bypasses the encryption process, and immediately transfers the data to the USB device by the USB hub controller 101. Output (step S10).

The encryption process performed when there is no error in all the above checking steps is as follows. That is, the central processing unit 102 extracts only the data portion recorded on the USB removable disk (USB MSC) from the bulk transmission data input to the USB hub controller (step S5), and the security controller 103. In order to encrypt the extracted data, a unique Chip ID embedded in the security controller 103 is input as an encryption key (step S6), and the extracted data for encryption is input to the security controller 103 (step S7).

Next, using the chip ID (Chip ID) input by the central processing unit 102 as an encryption key, the security controller 103 performs an encryption process (step S8) of the data. After the encryption process is completed, the encrypted data is input to the USB hub controller 101 by the central processing unit 102 (step S9), and the encrypted data at this time is bulk recorded on the USB removable disk (USB MSC). ) May be input in the form of transmission data.

When the above data encryption process is completed, the encrypted data is output by the USB hub controller 101 to a USB device, that is, a portable USB storage device according to an embodiment (step S10).

3 is a flowchart illustrating a data security method using a USB hub security device according to an embodiment of the present invention when data is received from a USB device. That is, in the operation of the USB hub security device of the present invention, when data is received from the USB device, a data decryption process and a bypass transmission process are shown.

Referring to FIG. 3, the USB hub security apparatus according to the present invention generates a USB device data reception interrupt to the central processing unit 102 after the USB hub controller 101 receives data input from the USB device (step S11). Start the data decryption process.

After the interrupt is generated, the central processing unit 102 checks whether the USB device transmitting the input data is a USB removable disk (USB MSC) (step S12), and checks whether it is a bulk transmission data of the USB transmission standard. Step (step S13) and step (step S14) of checking whether or not data is read from the USB removable disk (USB MSC) are sequentially performed.

If there is no error in all the checking steps, the process of decoding the input data is performed.

If there is an error in any of the above steps, the input data is considered not to be read from the USB removable disk (USB MSC), bypasses the decryption process, and immediately passes the data to the USB host by the USB hub controller 101. Is transmitted (step S20).

If there is no error in all the above test steps, the central processing unit 102 extracts only the data portion read from the USB removable disk (USB MSC) from the bulk transmission data input to the USB hub controller (step S15). To perform.

In order to decrypt the data extracted in the security controller 103, a unique chip ID embedded in the security controller 103 is input as a decryption key (step S16), and the extracted data for decryption is input to the security controller 103. ) (Step S17).

Using the chip ID input by the central processing unit 102 as a decryption key, the security controller 103 performs a data decryption process (step S18), and after the decryption process is completed, the decrypted data is decoded by the central processing unit ( 102 is input to the USB hub controller 101 (step S19). In this case, the decrypted data may be input in the form of bulk transmission data read from the USB removable disk (USB MSC).

When the above data decryption process is completed, the decrypted data is transmitted to the USB host by the USB hub controller 101 (step S20).

4 is a schematic diagram illustrating the use of a USB hub security connector manufactured using a USB hub security device according to an embodiment of the present invention.

In particular, referring to FIG. 4, it can be seen that the USB hub security connector including the USB hub security module and the portable USB flash memory are combined and used.

As shown in FIG. 4, the USB hub security connector 400 having a built-in security function includes a USB hub security module 401 according to the present invention inside the body, and includes a front plug 402 and a rear socket ( 403).

Since the specific configuration of the USB hub security module 401 has been described in the description of the USB hub security device, it will be omitted.

The front plug 402 is coupled to a connection socket of a USB host such as a personal computer, and the rear socket 403 is coupled to a small USB flash memory 410 manufactured using Nand Flash Memory. . Data stored in the USB flash memory 410 is encrypted and stored by the USB hub security connector 400, and data transmitted to the USB host is decrypted and transmitted by the secure USB hub connector 400.

As described above, the input key used to encrypt or decrypt the data in the USB hub security connector 400 is a unique chip ID of the security controller.

5 is a simplified diagram showing the use of a USB hub security cable using a USB hub security device according to an embodiment of the present invention.

Referring to FIG. 5, it can be seen that a USB hub security cable and a portable USB removable disk are used in combination.

As shown in FIG. 5, the USB hub security cable 500 having a built-in security function includes a USB hub security module 501 according to the present invention inside the front body, and includes a front plug 502 and a rear plug ( 503).

The front plug 402 is coupled to a connection socket of a USB host such as a personal computer, and the rear plug 503 is coupled to a connection socket of a USB removable disk 510 manufactured using a hard disk. Data stored in the USB removable disk 510 is encrypted and stored by the USB hub security cable 500, and data transmitted to the USB host is decrypted and transmitted by the USB hub security cable 500.

The USB hub security device according to an embodiment of the present invention uses a chip ID unique to the security controller as an encryption or decryption key necessary for encrypting and decrypting input / output data, thereby obtaining a USB host to obtain an encryption or decryption key. It does not proceed with any kind of authentication process, and the operation of encrypting or decrypting input / output data can also be independently performed without any control through a USB host or a USB device.

In addition, the USB hub security device according to the present invention from the viewpoint of a USB host can be used in the same way as a general USB hub because it looks and functionally meets all the general USB hub specifications and functions.

Therefore, by using the USB hub security device according to an embodiment of the present invention, it is possible to simply grant and use a security function to all conventional portable USB storage devices. The portable USB storage device that stores data using the USB hub security device is malicious even if the portable USB storage device is lost because the data cannot be decrypted without using the same USB hub security device that encrypts the data. It can protect the data stored inside from the learner.

In addition, since the USB hub security device according to the present invention does not require a separate authentication process to perform a security function, an information storage memory such as EEPROM or Nor Flash Memory used for storing authentication information is used. It does not require it and prevents the system from being duplicated by copying authentication information that may occur in a secure USB device, which requires an authentication process.

USB hub security device according to an embodiment of the present invention allows to use a PC peripheral device such as a USB keyboard, USB mouse, USB scanner, USB printer using a USB transmission standard in the same way as a conventional general USB hub.

The above USB peripheral devices that use the USB transfer standard by the USB device type and data inspection process inside the USB hub security device are not considered to be USB removable disks (USB MSCs), so the input and output data of the USB peripheral devices are not encrypted or decrypted. Will be sent bypassing.

By using a USB hub security device according to an embodiment of the present invention and only changing the physical form of the interface unit connected to the USB host and the USB device, a compact USB hub security connector 400 that is easy to carry is provided with a security function. USB hub security cable (500), the security USB hub bracket that can be mounted inside the PC can be produced and used in various types of security USB hub. The USB hub security connector 400 may provide a security function by accessing a medium such as a USB flash memory that may be directly connected to a USB host, and the USB hub security cable 500 may not directly connect with a USB host. Can be used in place of a USB extension cable on media such as a USB removable disk using a USB extension cable.

The present invention has been described above in connection with specific embodiments of the present invention, but this is only an example and the present invention is not limited thereto. Those skilled in the art can change or modify the described embodiments without departing from the scope of the present invention, and such changes or modifications are within the scope of the present invention. In addition, each component described herein can be easily selected and replaced from a variety of elements known to those skilled in the art. Those skilled in the art will also appreciate that some of the components described herein can be omitted without degrading performance or adding components to improve performance. In addition, those skilled in the art may change the order of the method steps described herein according to the implementation environment or the equipment. Therefore, the scope of the present invention should be determined by the appended claims and equivalents thereof, not by the embodiments described.

 1 is a block diagram illustrating a structure of a USB hub security device according to an embodiment of the present invention.

2 is a flowchart illustrating a data security method using a USB hub security device according to an embodiment of the present invention when data is received from a USB host.

3 is a flowchart illustrating a data security method using a USB hub security device according to an embodiment of the present invention when data is received from a USB device.

Figure 4 is a simplified diagram showing the use of the USB hub security connector using a USB hub security device according to an embodiment of the present invention.

Figure 5 is a simplified diagram showing the use of the USB hub security cable using a USB hub security device according to an embodiment of the present invention.

{Description of major symbols in the drawing}

100: USB hub security device housing 101: USB hub controller

102: central processing unit 103: security controller

104: USB host interface unit 105: USB device interface unit

110: USB host 120: USB device

Claims (6)

A USB hub controller for outputting data input through the data input port through the output port; A security controller having a unique semiconductor chip ID and performing a security function of the data using the chip ID as a key for encryption or decryption of the data; A central processing unit for analyzing input / output data of the USB hub controller and controlling the security controller; A USB host interface connected to the USB host; And USB hub security device comprising a USB device interface unit connected to the USB device. The method of claim 1, The semiconductor chip ID is a USB hub security device, characterized in that a combination of numbers and letters given individually for each chip in the manufacture of a semiconductor chip. The method of claim 1, The USB hub security device is a USB hub security device, characterized in that the encryption or decryption of the data by the key input to the semiconductor chip ID without the memory capable of modifying the repeated authentication information. In the data security method using a USB hub security device that connects a USB host and a USB device to encrypt or decrypt data between the USB host and the USB device, Extracting the data controlled by a USB hub controller; Encrypting or decrypting the extracted data after authenticating using a unique semiconductor chip ID input as an encryption or decryption key; And And transmitting the encrypted or decrypted data to the USB hub controller. The method of claim 4, wherein Before each step, the USB hub controller generates an interrupt in the central processing unit when receiving data transmitted between the USB host and the USB device. The method of claim 4, wherein The semiconductor chip ID is a data security method using a USB hub security device, characterized in that is input as a key for encrypting or decrypting data from the security controller.

Images