KR20180062427A - Hardware security module and hardware security device using thereof - Google Patents

Abstract

The present invention relates to a hardware security module with security reinforced by using biometric information and a hardware security device using the same. According to one embodiment of the present invention, the hardware security module comprises: a security key generation unit to randomly generate a security key required for encryption and decryption in accordance with a security key generation request including a private key, an exclusive key, and a public key; a security key storage unit to store the security key generated in the security key generation unit and to transmit the stored security key in accordance with a security key transmission request; a security key management unit to request the security key generation unit to generate the security key, to store the generated security key in the security key storage unit or delete the stored security key, to confirm a location number in which the security key to be requested is stored when a security key use request is received, and to transmit the security key to be requested to an encryption/decryption engine unit; and the encryption/decryption engine unit. The encryption/decryption engine unit includes: a security key buffer unit to temporarily store the security key received from the security key management unit in a volatile buffer; a function selection unit to select encryption and decryption functions for data; a data buffer unit receiving the data for encryption and decryption to transmit the data in a predetermined data buffer space; an encryption block unit to perform encryption in a hardware mode in accordance with encryption function selection of the function selection unit; a decryption block unit to perform decryption in a hardware mode in accordance with decryption function selection of the function selection unit; and a module data output unit including a buffer memory space to temporarily store the data encrypted and decrypted in the encryption and decryption block units.

Description

HARDWARE SECURITY MODULE AND HARDWARE SECURITY DEVICE USING THEREOF FIELD OF THE INVENTION [0001]

The present invention relates to a biometric information hardware security module capable of authenticating a user using biometric information, and a hardware security device using the same.

In the field of information security and authentication technology, the need for development of devices and systems for securely managing hardware authentication information such as personal authentication information and passwords for financial transactions has been raised along with the spread of the Internet.

This confidential information is a means of authenticating an individual and confirming that he or she has performed a specific act. Therefore, if this confidential information is exposed to another person, it is impossible to identify the actor and the entire financial transaction system may collapse. .

In order to provide such high level of security, the concept of a hardware security module (HSM) with a hardware key cryptographically secure key management system is introduced.

The HSM is a device that generates a secret key by itself and handles the derivation of the derived key and the encryption / decryption of the data based on the generated secret key. Therefore, the HSM can not extract the data stored therein by any means, It is a device that can guarantee the security of confidential information by securing safety device such as extinction of data itself if it is to be extracted and obtaining certification of the authorized institution.

Therefore, HSM is widely used in financial transactions and subscriber authentication systems of telecommunication companies, because it is a means to ensure the safety of transactions in a non-confrontational transaction mode such as cyber transactions.

The HSM embedded in the mobile terminal can be regarded as a kind of embedded system that handles security work using hardware resources such as a cryptographic coprocessor based cryptographic engine and memory.

HSM technology is used in various fields such as financial transaction, subscriber authentication of a communication company, program update of a mobile terminal, digital signature, etc. However, all of these technologies have a problem that the security key is not secure from hacking .

An object of the present invention is to provide an HSM module that enhances security using biometric information.

Another object of the present invention is to provide an HSM capable of enhancing security without leakage of encryption / decryption logic and signal processing to the outside.

A hardware security module according to an embodiment of the present invention includes a security key generation unit required for encryption and decryption and randomly generating a security key according to a security key generation request including a private key, a private key, and a public key, A security key storage unit for storing the security key generated by the security key generation unit and transmitting the stored security key in response to the security key transmission request, a security key generation unit for requesting the security key generation unit to generate the security key, The security key storage unit stores the security key in the security key storage unit or deletes the stored security key, and when receiving the security key use request, confirms the location number in which the security key requested for use is stored and transmits the security key to the encryption / decryption engine unit And a security key buffer unit for temporarily storing the security key received from the security key management unit in a volatile buffer, A data buffer unit for receiving data for encryption and decryption and transferring the data to a predetermined data buffer space, an encryption block unit for performing encryption in a hardware manner according to the encryption function selection of the function selection unit, And a buffer memory space for temporarily storing the data encrypted and decrypted by the encryption block unit and the decryption block unit, and a buffer memory space for temporarily storing the data encrypted and decrypted by the encryption block unit and the decryption block unit, And an encryption / decryption engine unit.

According to one embodiment, the security key buffer unit is a volatile memory, and the security key storage unit can be initialized only by an electrical signal.

According to one embodiment, the private key and the private key used in the encryption block unit and the decryption block unit are temporarily received by the security key management unit, and the private key and the private key may not be exposed to the outside.

According to an embodiment, the public key included in the security key generated by the security key management unit may be a key that can be transmitted to the outside of the hardware security module.

According to an embodiment, when a KEY generation command is transmitted from the processor to the function selection unit, a physical random number is generated through a Random Number Generation (RNG) of the secret key generation unit, The security key management unit records the DB space number of the security key storage unit and records the DB space number of the generated security key in the register space of the security key storage unit , And records the type of security key, the private key, the private key, and the public key together with the recorded security key. When the encryption command is transmitted from the processor to the function selection unit, information on an algorithm used for encryption is confirmed, The security key management unit checks the number of the DB space of the security key storage unit, requests the security key confirmed by the security key management unit, And transmits the encrypted temporary security key and the data transmitted to the data buffer unit to the encryption block unit, and transmits the encrypted data to the encryption buffer unit. And the data encrypted by the encryption block is transmitted to the data output unit and the data is transferred to the flash memory of the processor so that the data can be processed to a position requested by the process.

According to an embodiment, when a KEY generation command is transmitted from the processor to the function selection unit, a physical random number is generated through a Random Number Generation (RNG) of the secret key generation unit, The security key management unit records the DB space number of the security key storage unit and records the DB space number of the generated security key in the register space of the security key storage unit , And records the type of security key, the private key, the private key, and the public key of the recorded security key together. When the decryption command is transmitted from the processor to the function selection unit, information on an algorithm used for decryption is checked, The security key management unit checks the number of the DB space of the security key storage unit, requests the security key confirmed by the security key management unit, And transmits the combined temporary security key and the data transmitted to the data buffer unit to the decryption block unit, and transmits the decrypted data to the decryption block unit, And the data decoded by the decoding block is transmitted to the data output unit and the data is transmitted to the flash memory of the processor to process the data to a position requested by the process.

According to another aspect of the present invention, there is provided a hardware security device including a processor including at least one of a CPU, an MPU, and an MCU, a hardware security module for encrypting and decrypting data, A volatile memory for storing the data, a nonvolatile memory for storing the data, and a communication interface for external communication.

According to an embodiment, the hardware security device encrypts and decrypts the data transmitted from an external host processor through the communication interface, and transmits data encrypted and decrypted to the external host processor .

According to one embodiment, the data may be at least one or more biometric data.

According to an embodiment, the hardware security device may receive data through at least one of the biometric sensor and the image recognition sensor through the communication interface.

According to one embodiment, the hardware security device receives data through a communication interface with a first external host processor or a second external host processor, encrypts data transmitted from the first external host processor, The first external host processor automatically transmits the DB number of the security key to the external host processor or the second external host processor when the first external host processor designates or does not specify the DB number of the security key of the encrypted data And transmit the generated data to the second external host processor.

According to one embodiment, when the decryption is to be performed, the hardware security device receives from the second external host processor information on the DB number of the security key of the transmitted data and the algorithm used to encrypt the data .

Alternatively, it may be implemented as a smart car equipped with the hardware security device.

According to the embodiment of the present invention, since the security key does not leak to the outside but operates only in the hardware security module, security can be further enhanced.

Also, according to the embodiment of the present invention, biometric information can be encrypted to enhance security.

Also, according to the embodiment of the present invention, it is possible to prevent the data from being leaked to the outside by storing the encrypted or decrypted data in the volatile memory.

1 is a block diagram illustrating a hardware security module according to an embodiment of the present invention.
FIG. 2 shows an example of the security key generation in FIG.
FIG. 3 illustrates an operation process of a hardware security module according to an embodiment of the present invention.
4 is a block diagram illustrating a hardware security system according to an embodiment of the present invention.
5 is a block diagram illustrating a hardware security system according to another embodiment of the present invention.
6 is a block diagram illustrating a hardware security system according to another embodiment of the present invention.
7 shows an application example of the hardware security module and system of the present invention.
FIG. 8 is a diagram illustrating the overall configuration of a hardware security module according to another embodiment of the present invention.
9 is a diagram showing the overall configuration of a hardware security device according to another embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

Terms including ordinals, such as first, second, etc., may be used to describe various elements, but the elements are not limited to these terms.

The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the second component may be referred to as a first component, and similarly, the first component may also be referred to as a second component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings, wherein like or corresponding elements are denoted by the same reference numerals, and redundant description thereof will be omitted.

1 is a block diagram of a biometric information hardware security module according to the present invention.

1, a biometric information hardware security module according to the present invention includes a security key generation unit 10, a security key storage unit 20, an arm / decryption engine unit 30, a memory 40, and a processor 50 ).

The security key generator 10 receives a signal requesting encryption from the processor 50 and generates a security key. The security key is generated through a random number generator (RNG) and a plurality of security keys can be generated. The security key can be generated in various ways. For example, it is possible to generate a secret key by using a decimal decryption cryptosystem or an elliptic curve cryptosystem. According to the elliptic curve cryptosystem, the security key generator 10 satisfies the elliptic curve equation y2 = x2 + ax + b (where a and b are real numbers) ) Is calculated. Here, the specific equation may be, for example, an addition equation, an equatorial equation and a combination equation. For example, in the elliptic curve as shown in Fig. 2, the addition definition of the two points A and B is such that when a line connecting A and B is drawn, it comes into contact with another point R on the elliptic curve, C, A + B = C can be defined. The idiomatic formula may mean that there exists a G that satisfies D + G = G + D = D for any element D in the real number group. The coupling equation can mean that A + (B + C) = (A + B) + C is satisfied in the real number group. Thereafter, the key generation unit 10 can generate a security key by an algorithm that satisfies P = f (Q) with respect to P and Q belonging to the real number group as described above. On the other hand, the elliptic curve cryptosystem has an advantage that the key generation time can be remarkably reduced because the generated key length is shorter than that of the prime number decomposition cryptosystem. For example, when generating a 2048-bit key using RSA 2048, which is a typical decimal decryption encryption system in HSM, it takes about 10 to 20 seconds. However, when a key is generated using an elliptic curve cryptosystem in HSM, It takes less than a second. In fact, since a 2048-bit cryptosystem generated by RSA 2048 has a security level equivalent to a 224-bit cryptosystem generated by an elliptic curve cryptosystem, when a key is generated using an elliptic curve cryptosystem, It is possible to remarkably improve the convenience of the user who wishes to perform the digital signature while maintaining the security level at the same level as compared with the case of generating the key using the key.

The security key storage unit 20 stores the security key generated by the security key generation unit. Multiple security keys can be assigned numbers and stored. That is, the security key storage unit may be regarded as a security key database in which a number is allocated to a security key.

When the encryption / decryption request signal is input from the processor 50, the encryption / decryption engine unit 30 receives any one of the plurality of security keys stored in the security key storage unit 20 and encrypts the biometric information according to the security key . Conversely, if there is a decryption request, the decryption unit decrypts the encrypted data according to the security key stored in the security key storage unit. The encryption / decryption engine unit 30 may include an encryption unit for performing encryption, a decryption unit for decryption, and a data output unit for outputting encrypted or decrypted data. The data output unit outputs the encrypted or decrypted data to the memory (40). Various encryption / decryption engines such as SEED, ARIA, RSA, DES, MD5, DSS, SHA, and the like may be used as the encryption / decryption engine unit 30.

The memory 40 is configured to store decrypted data, and stores encrypted or decrypted data transmitted from the data output unit. The memory may be a volatile memory such as a random access memory (RAM) or a static random access memory (SRAM).

The processor 50 is a part for controlling the overall operations and functions of the hardware security module, and processes various information, messages, data, and the like transmitted from an external device.

According to the above configuration, if the hardware security module uses one or more data interfaces and selects encryption or decryption, the DB number of the security key is designated. The security key stored in the designated DB can be transmitted to the encryption / decryption module and the encryption / decryption of data can be performed according to the purpose of encryption or decryption.

FIG. 3 illustrates an operation process of a hardware security module according to the present invention.

 Referring to FIG. 3, when a procedure is started, an input protocol is checked to confirm whether it is an encryption, a decryption, or a general communication, and a procedure according to the protocol is performed.

For example, in the case of the encryption protocol, the encryption engine is checked, the plain text data is requested by confirming the designated security key, the data is encrypted, the encrypted data is transmitted, and the next process is awaited.

Next, in the case of general communication, the protocol is confirmed and it is confirmed whether or not a corresponding security key can be generated. If security key generation is possible, the security key generation unit 10 generates a security key by generating a random number and stores the security key in the security key storage unit 20. When the security key storage is completed, a save complete return message is generated / transmitted and the next process is awaited.

Next, when the protocol is decryption, the secure key storage unit 20 confirms the security key and requests the encrypted data. When the encrypted data is received, the encrypted data is decrypted using the secret key, the decrypted data is transmitted, and then the next process is awaited.

So far, we have covered the basic configuration and operation process of the hardware security module. Hereinafter, a security system to which the hardware security module of FIG. 1 is applied will be described.

The basic configuration of the hardware security module referred to below includes the hardware security module of FIG. 1, and some interfaces or configurations may be added depending on the characteristics of the system.

The following security systems include various systems of ECUs of mobile terminals, notebook computers, and automobiles.

FIG. 4 is a block diagram of a system to which the hardware security module of FIG. 1 is applied.

Referring to FIG. 4, the system according to the present embodiment may include a host processor 100, a hardware security module 200, and a biometric information recognizer 300.

The host processor 100 is a main process of the system, and controls various operations and functions necessary for system operation, and can transmit an encryption scheme to the hardware security module 200. In addition, if necessary, the hardware security module 200 requests decryption.

The hardware security module 200 receives biometric information from the biometric information recognition unit 300 and encrypts or decrypts the biometric information according to a protection method designated by the host processor 100.

More specifically, the hardware security module 200 includes a function selection interface 210, first to third communication interfaces 220, 230 and 240, a security key storage unit 250, an arm / A processor 260, a memory 270, and a processor 280.

The function selection interface 210 receives information on the performance of the function from the host processor 100. As described above, the host processor 100 requests the hardware security module 200 for encryption or decryption. The function selection interface 210 receives these signals and allows them to perform encryption or decryption.

The first communication interface 220 is an interface for exchanging data with the host processor, and various interfaces such as USB, UART, SPI, and I2C may be used.

The second communication interface 220 is an interface for exchanging data with the biometric information recognition unit 300. Various interfaces such as USB, UART, SPI, and I2C may be used. That is, biometric information is received from the biometric information recognizing unit 300 in the form of raw data through the second communication interface 230.

A wireless interface may be used as the third communication interface 240. For example, the third communication interface 240 may include a wireless Internet module and a short range communication module.

The wireless Internet module refers to a module for wireless Internet access, and transmits and receives wireless signals in a communication network according to wireless Internet technologies. Wireless Internet technologies include, for example, wireless LAN (WLAN), wireless fidelity (Wi-Fi), wireless fidelity (Wi-Fi) Direct, DLNA (Digital Living Network Alliance), WiBro Interoperability for Microwave Access, High Speed Downlink Packet Access (HSDPA), High Speed Uplink Packet Access (HSUPA), Long Term Evolution (LTE) and Long Term Evolution-Advanced (LTE-A) 7113 transmit and receive data according to at least one wireless Internet technology, including Internet technologies not listed above. In view of wireless Internet access by WiBro, HSDPA, HSUPA, GSM, CDMA, WCDMA, LTE, LTE-A, etc. through a mobile communication network, the wireless Internet module 7113 May be understood as a kind of the mobile communication module 7112.

The short-range communication module is for short-range communication. The short-range communication module includes Bluetooth, Radio Frequency Identification (RFID), Infrared Data Association (IrDA), Ultra Wideband (UWB), ZigBee, Communication, Wi-Fi (Wireless-Fidelity), Wi-Fi Direct, and Wireless USB (Wireless Universal Serial Bus) technology. The short-range wireless communication network may be a Wireless Personal Area Network.

The security key storage unit 250 allocates and stores a designated number to the secret key as previously described with reference to FIG.

The encryption / decryption engine 260 performs encryption or decryption using a security key stored in the security key storage unit when a request for encryption or decryption is received from the host processor.

The basic configuration of the security key storage unit, the encryption / decryption engine unit, the memory, and the processor are the same as those of the hardware security module shown in FIG. 1, and thus a detailed description thereof will be omitted.

The biometric information recognizing unit 300 may be configured to acquire biometric information in a configuration for acquiring and recognizing biometric information. The biometric information recognizing unit 300 recognizes various biometric information and transmits it to the hardware security module. The biometric information is information indicating a body attribute or an action attribute of a living body. For example, the biometric information may be a facial image, a finger print, a friction ridge, a blood vessel, an iris, a retina, an electrocardiogram (ECG) (EEG, electroencephalogram), pulse, blood pressure, heart sound, chest or abdominal motion, and conductivity of human body.

In addition, the bio-information recognition unit 300 may collect bio-signals in various forms such as an electric signal, a sound signal, a force signal, an electromagnetic signal, an image / motion picture signal, and an optical signal. In addition, various kinds of sensors can be used as the sensors used for collecting the biological signals.

For example, a color image sensor may be used to capture a human face image, a fingerprint image, a long image, a thumbnail image, and the like. In another example, an infrared image sensor can be used to acquire an image of a biological feature sensitive to an infrared light source, such as a blood vessel image. As another example, a vibration sensor may be used to acquire a signal having a vibration attribute, such as a chest or abdominal motion signal. In addition, for example, a pressure sensor can be used to collect blood pressure signals, and bio-signals associated with pressure, such as chest or abdominal motion signals. Various kinds of bio-signals can be simultaneously collected from a plurality of different sensors or can be simultaneously collected through a single integrated sensor capable of collecting various kinds of bio-signals. For example, a color image sensor and a photoelectric sensor can respectively collect a human face image and a PPG signal at the same time, or an integrated sensor to have the functions of a color image sensor and a photoelectric sensor can simultaneously capture a human face image and a PPG The signal can be collected.

According to one embodiment, in order to acquire a plurality of distributed data points having continuous bio-signals or biochemical features having temporal correlation with time, collection of various bio-signals may be performed at a predetermined time (for example, , Collecting electrocardiogram signal waveforms within 1 minute, or collecting several human face images for 10 seconds, etc.).

The collected bio-signals can be transmitted to the processor after performing the following processing through the signal switching circuit. The biometric authentication apparatus according to one embodiment converts a continuous analog signal (e.g., electrocardiogram signal, PPG signal, etc.) into a digital signal, processes the noise contained in the signal (e.g., To remove image noise such as eyelids, eyebrows, etc.), intensity of signal, distribution, change, and the like.

The biometric information acquired by the biometric information recognition unit is transmitted to the hardware security module. The hardware security module decrypts the biometric information and the encrypted data according to the request of the host processor, decrypts the encrypted data, And user authentication.

At this time, the data transmitted to the host processor 100 must be stored in the volatile memory of the host processor 100. That is, the host processor 100 does not have decrypted data of the biometric information after the data processing. Therefore, there is no fear that the decrypted data will be leaked and the security can be enhanced.

FIG. 5 is a block diagram illustrating another embodiment of a security system to which the hardware security module of FIG. 1 is applied.

Referring to FIG. 5, the security system includes a first host processor 100, a second host processor 120, a biometric information recognizer 300, and a hardware security module 400.

Compared with FIG. 4, it can be seen that two host processors are used. The hardware security module 400 includes a first function selection interface 410 for receiving function selection data from the first host processor 100 and a second function selection interface 410 for receiving function selection data from the second host processor 120. [ (420).

The biometric information recognizing unit 300 may be transmitted through the first host processor 100.

The other configurations, the first and second communication interfaces, the security key storage unit, the encryption / decryption engine unit, the memory, and the processor are the same as those shown in FIG. 1 and FIG. Although the third communication interface is omitted in this embodiment, it goes without saying that the third communication interface can be additionally used as needed.

The first host processor 100 can exchange data with the hardware security module 400 through the first communication interface 430 and the second host processor 120 can communicate with the hardware security module 400 via the second communication interface 440. [ Data can be exchanged with the security module 400.

According to the above configuration, the biometric information is transmitted to the security hardware security module 400 by the first host processor, and the hardware security module 400 encrypts or decrypts the biometric information.

In order to decode the biometric information of the first host processor in the first host processor, the first host processor communicates with the first host processor to newly connect and use the encryption or decryption method whenever necessary. Therefore, security can be further enhanced.

FIG. 6 is a block diagram illustrating another embodiment of a security system to which the hardware security module of FIG. 1 is applied.

Referring to FIG. 6, the security system may include a host interface 100, a biometric information recognition unit 300, and a hardware security module 500.

The biometric information recognition unit 300 may transmit the biometric information to the hardware security module 500 through the host processor 100 as in the embodiment of FIG.

The hardware security module 500 may include a function selection interface 510, a communication interface 520, a security key storage unit 530, an encryption / decryption engine unit 540, a memory 550, and a process.

The host processor 100 receives the biometric information from the biometric information recognizing unit 300 and requests the hardware security module 500 to encrypt the biometric information, and the encrypted data is stored in the storage space of the host processor 100 In a situation where authentication is required after storing, the decryption is requested to the hardware security module 500 and used. At this time, data is stored in the volatile memory and the data is compared and deleted, so there is no possibility of data leakage.

FIG. 7 shows an application example of a hardware security module and system according to the present invention.

As shown in FIG. 7, the hardware security module and system can be applied to various parts of an automobile such as an engine ECU, an airbag actuator, and a central gateway. That is, a hardware simulation module may be used in the form of an intermediate data processing processor for each processing device of the vehicle.

When encryption data is transmitted for each device, the hardware security module proceeds encryption or decryption in the middle.

Therefore, even if one of the plurality of devices is hacked, the other device is safe from hacking. For example, in the conventional case, even if a hardware security module is applied to enhance security, if the ECU is hacked, the entire automobile is taken over by the hacker. However, according to the present invention, a hardware security module is applied to individual devices, Even if the ECU is hacked, other devices are safe from hacking. Therefore, security can be further enhanced.

FIG. 8 is a diagram illustrating the overall configuration of a hardware security module 1000 according to another embodiment of the present invention.

In this case, the hardware security module 1000 is required for encryption and decryption and includes a security key generation unit 1100 for randomly generating a security key according to a security key generation request including a private key, a private key, and a public key, A security key storage unit 1200 for storing the security key generated by the key generation unit and transmitting the stored security key in response to the security key transmission request, a security key generation unit 1200 for requesting the security key generation unit to generate the security key, The secure key storage unit stores the security key in the security key storage unit or deletes the stored security key, and when receiving the security key use request, confirms the location number in which the security key requested for use is stored, A security key management unit 1300 for transmitting the security key to the security key management unit 1400, a security key buffer unit 1410 for temporarily storing the security key received from the security key management unit in the volatile buffer, A data buffer 1430 for transferring data for encryption and decryption to a predetermined data buffer space, a data buffer 1430 for encrypting and decrypting data according to a selection of an encryption function of the function selector, A decryption block 1450 for performing decryption in a hardware manner in accordance with the decryption function selection of the function selection unit, and a decryption unit 1450 for temporarily storing the data encrypted and decrypted in the decryption block unit and the decryption block unit And a module data output unit 1460 including a buffer memory space for storing the buffer memory space.

According to one embodiment, the security key buffer unit 1410 is a volatile memory, and the security key storage unit 1200 can be initialized only by an electrical signal.

According to an exemplary embodiment, the private key and the private key used in the encryption block unit 1440 and the decryption block unit 450 are temporarily received by the security key management unit 1300, It may not be exposed to the outside.

According to an exemplary embodiment, the public key included in the secret key generated by the secret key management unit 1300 may be a key that can be transmitted to the outside of the hardware security module 1000.

According to an embodiment, when a KEY generation command is transmitted from the processor (not shown) to the function selection unit 1420, a random number generation (RNG) (not shown) of the secret key generation unit 1100 The security key management unit 1300 generates a random number for the security key in the security key storage unit 1200 and stores the generated security key in the DB space of the security key storage unit 1200, Records the number of the DB space of the generated security key in a register space of the security key storage unit 1200, and stores the recorded security key as a private key, a private key, and a public key together When an encryption command is transmitted from the processor (not shown) to the function selection unit 1420, information on an algorithm used for encryption is checked, and the number of the DB space of the security key storage unit 1200 is checked Thus, Requests the management unit 1300 to verify the security key, copies the security key to the temporary buffer, transmits data for encryption to the data buffer unit 1430, The encryption unit 1440 encrypts the data transmitted to the encryption block unit 1430 to the encryption block unit 1440 and encrypts the data corresponding to the size of the data for encryption, 1460 and the data is transferred to the flash memory of the processor (not shown) to process the data to a location requested by the process.

According to an embodiment, when a KEY generation command is transmitted from the processor (not shown) to the function selection units 1420 and 1420, the random number generation (RNG) of the secret key generation unit 1100 The security key management unit 1300 generates a random number for the security key in the security key storage unit 1200 and stores the generated security key in the DB space of the security key storage unit 1200, Records the number of the DB space of the generated security key in a register space of the security key storage unit 1200, and stores the recorded security key as a private key, a private key, and a public key together If the decryption command is transmitted from the processor to the function selector 1420, the controller checks the information about the algorithm used for decryption, verifies the number of the DB space of the secure key storage 1200, The key management unit 1300 And transmits the decrypted data to the data buffer unit 1430. The combined temporary security key and the data buffer unit 1430 transmit the decrypted security key to the data buffer unit 1430, The decoding unit 1450 decodes the data transmitted to the decoding unit 1450 by the size of the data for decoding and outputs the decoded data to the module data output unit 1460 And the data is transferred to the flash memory of the processor to process the data to a location requested by the process.

9 shows an overall configuration of a hardware secure device 2000 according to another embodiment of the present invention. The hardware secure device 2000 includes a processor 2100 including at least one of a CPU, an MPU, and an MCU A hardware security module 1000 for encrypting and decrypting data, a data bus 2500 for data transmission, a volatile memory 2200 for storing data, a nonvolatile memory 2300 for storing data, And a communication interface 2400 for external communication.

According to one embodiment, the hardware security device 2000 encrypts and decrypts the data transmitted from an external host processor (not shown) via the communication interface 2400, (Not shown) can be transmitted.

According to one embodiment, the data may be at least one or more biometric data.

According to one embodiment, the hardware security device 2000 can receive data through the communication interface 2400 with at least one of a biometric sensor and an image recognition sensor (not shown).

According to one embodiment, the hardware secure device 2000 receives data via a communication interface 2400 with a first external host processor (not shown) or a second external host processor (not shown) 1 encrypts data received from an external host processor (not shown) and transmits the data to the first external host processor (not shown) or a second external host processor (not shown). In this case, May specify the DB number of the security key of the encrypted data or may automatically generate the DB number of the security key and transmit the DB number to the second external host processor (not shown).

According to one embodiment, the hardware secure device 2000 receives data via a communication interface 2400 with a first external host processor (not shown) or a second external host processor (not shown) 1 encrypts data received from an external host processor (not shown) and transmits the data to the first external host processor (not shown) or a second external host processor (not shown). In this case, May specify the DB number of the security key of the encrypted data or may automatically generate the DB number of the security key and transmit the DB number to the second external host processor (not shown).

According to one embodiment, when proceeding with the decryption, the hardware security device 2000 receives the DB number of the security key of the transmitted data from the second external host processor (not shown) Information about the algorithm can be received.

7, a smart car on which the hardware security device 2000 is mounted may be implemented.

While the invention has been shown and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention as defined by the appended claims. Accordingly, the true scope of the present invention should be determined by the following claims.

100: Host processor
200, 400, 500, 1000: Hardware security module
300: Biometric information recognition unit
1100: Security key generation unit
1200: Security key storage unit
1300: Security key management unit
1400: an encryption / decryption engine section
1410: Security key buffer unit 1420: Function selection unit
1430: Data buffer unit 1440: Encryption block unit
1450: decryption block unit 1460: module data output unit
2000: Hardware security device
2100: Processor
2200: Volatile memory
2300: Nonvolatile memory
2400: Communication interface
2500: Data bus

Claims (13)

A security key generation unit required for encryption and decryption and randomly generating a security key according to a security key generation request including a private key, a private key, and a public key;
A security key storage unit for storing the security key generated by the security key generation unit and transmitting the stored security key in response to a security key transmission request;
The secure key generation unit transmits the generated security key to the security key generation unit, stores the generated security key in the security key storage unit or deletes the stored security key, and upon receipt of the security key use request, A security key management unit for confirming the stored location number and transmitting the security key requested to use to the encryption / decryption engine unit; And
A security key buffer unit for temporarily storing the security key received from the security key management unit in a volatile buffer;
A function selection unit for selecting an encryption and decryption function for data;
A data buffer unit for receiving data for encryption and decryption and transferring the data to a predetermined data buffer space;
An encryption block for performing encryption in a hardware manner in accordance with a selection of an encryption function of the function selection unit;
A decoding block for performing decoding in a hardware manner in accordance with selection of a decoding function of the function selecting unit; And
A module data output unit including a buffer memory space for temporarily storing the encrypted and decrypted data in the encryption block unit and the decryption block unit;
An encryption / decryption engine unit;
A hardware security module. The method according to claim 1,
Wherein the security key buffer unit is a volatile memory,
Wherein the security key storage unit is initialized only by an electrical signal,
Hardware security module .. The method according to claim 1,
Wherein the private key and the private key used in the encryption block unit and the decryption block unit are temporarily received by the security key management unit and the private key and the private key are not exposed to the outside,
Hardware security module. The method according to claim 1,
Wherein the public key included in the security key generated by the security key management unit is a key that can be transmitted to the outside of the hardware security module,
Hardware security module. The method according to claim 1,
The security key generation unit generates a physical random number through a Random Number Generation (RNG) of the security key generation unit when the KEY generation command is transmitted from the processor to the function selection unit, The security key management unit records the number of the DB space of the security key storage unit, records the number of the DB space of the generated security key in the register space of the security key storage unit, Records the type of the private key, the private key, and the public key together,
When the encryption command is transmitted from the processor to the function selection unit, information on the algorithm used for encryption is checked, the number of the DB space of the security key storage unit is confirmed, the security key is requested to the security key management unit And transmits the encryption data to the data buffer unit, transmits the combined temporary security key and the data transmitted to the data buffer unit to the encryption block unit, Wherein the encrypted data is transmitted to the module data output unit and the data is transmitted to the flash memory of the processor to process the data to a position requested by the process.
Hardware security module. The method according to claim 1,
The security key generation unit generates a physical random number through a Random Number Generation (RNG) of the security key generation unit when the KEY generation command is transmitted from the processor to the function selection unit, The security key management unit records the number of the DB space of the security key storage unit, records the number of the DB space of the generated security key in the register space of the security key storage unit, Records the type of the private key, the private key, and the public key together,
When the decryption instruction word is transmitted from the processor to the function selection unit, information on the algorithm used for decryption is checked, the number of the DB space of the security key storage unit is confirmed, the security key is requested to the security key management unit And transmits the decrypted data to the data buffer unit, transmits the combined temporary security key and the data transmitted to the data buffer unit to the decryption block unit, decrypts the encrypted data, Wherein the data decoded by the decoding block is transmitted to the module data output unit and the data is transmitted to the flash memory of the processor to process the data to a position requested by the process.
Hardware security module. A processor including at least one of a CPU, an MPU, and an MCU;
A hardware security module for encrypting and decrypting data;
A data bus for data transfer;
A volatile memory for storing the data;
A nonvolatile memory for storing the data; And
A communication interface for external communication;
Lt; / RTI > 8. The method of claim 7,
The hardware security device comprising:
Wherein the encryption / decryption unit encrypts and decrypts the data transmitted from the external host processor through the communication interface, and transmits data encrypted and decrypted to the external host processor,
Hardware secure device. 9. The method of claim 8,
Wherein the data is at least one or more biometric data,
Hardware secure device. 8. The method of claim 7,
The hardware security device comprising:
A biometric sensor, and an image recognition sensor and receives data through the communication interface,
Hardware secure device. 11. The method of claim 10,
The hardware security device comprising:
A first external host processor and a second external host processor,
Encrypts data received from the first external host processor and transmits the encrypted data to the first external host processor or the second external host processor,
In this case, if the first external host processor designates or does not designate the DB number of the security key of the encrypted data, the first external host processor automatically generates the DB number of the security key and transmits the DB number to the second external host processor.
Hardware secure device 12. The method of claim 11,
The hardware security device comprising:
Receiving a DB number of a security key of the transmitted data from the second external host processor and information on an algorithm used for encrypting the data,
Hardware secure device. 13. The method according to any one of claims 7 to 12,
A smart car on which said hardware security device is mounted.

Images