KR20230027726A - Quantum security communication device integrated smart instrumentation control system and method - Google Patents

Abstract

The present invention relates to a smart instrumentation control system integrated with a quantum security communication device, which comprises: a smart instrumentation control unit including (1) an instrumentation control module for generating instrumentation control data, (2) a device identity module (DIM) implemented as a separate independent chipset, capable of performing injection of a quantum security key in accordance with settings of a manger, and including a quantum security device identification key, (3) a security module for generating quantum security instrumentation control data by performing a quantum security operation on the instrumentation control data by using the quantum security device identification key and the quantum security key through the DIM, and (4) a communication interface unit for transmitting the quantum security instrumentation control data for a given communication environment; and a central instrumentation control processing unit for receiving the quantum security instrumentation control data to extract a device identification key, determining the quantum security key on the basis of the device identification key to detect the instrumentation control data, and performing quantum key distribution to the DIM in advance to process injection of the quantum security key. Therefore, security can be improved.

Description

Quantum security communication device integrated smart instrumentation control system and method {QUANTUM SECURITY COMMUNICATION DEVICE INTEGRATED SMART INSTRUMENTATION CONTROL SYSTEM AND METHOD}

The present invention relates to a quantum security communication device integrated smart instrumentation control technology, and more particularly, quantum security capable of supporting mutual device identification and transmitting and receiving safe instrumentation control data through quantum security communication between each communication entity in an instrumentation control system. It relates to a communication device integrated smart instrumentation control system and method.

In general, an instrumentation control system processes and analyzes external data such as flow rate, pressure, temperature, humidity, etc. measured from various instruments installed in industrial sites by a central processing unit and internal and external programs, controls external devices connected to it, and controls the central system. Operates and manages the entire system through

Industrial instrumentation facilities such as instrumentation control systems are controlled by control systems, and these control systems control and monitor by supporting transmission of instrumentation control data based on communication.

The instrumentation control communication system related to the instrumentation control system requires a security system that can be applied between components so that reliable instrumentation control data can be transmitted through safe two-way communication between the instrumentation facilities and the upper system and the central system.

Korean Patent Registration No. 10-1575040 (2015.12.01)

An embodiment of the present invention is to provide a quantum security communication device-integrated smart instrumentation control system and method capable of supporting mutual device identification and transmitting and receiving safe instrumentation control data through quantum security communication between each communication entity in the instrumentation control system. .

An embodiment of the present invention is to provide a quantum security communication device integrated smart instrumentation control system and method that encrypts and decrypts instrumentation control data with a quantum security module to improve security so that information is not exposed during system hacking.

An embodiment of the present invention supports an identification function between a mobile instrument control device applied to drones, robots, mobiles, unmanned ships, etc. and a central system to provide secure quantum security with an upper system applying a virtualized cloud environment rather than a fixed server. It is intended to provide a smart instrument control system and method integrated with a quantum security communication device capable of communication.

Among the embodiments, the quantum security communication device integrated smart instrumentation control system is implemented as (1) an instrumentation control module that generates instrumentation control data, (2) is implemented as a separate independent chipset and injects a quantum security key according to the manager's settings. A device identity module (DIM) including a quantum security device identification key, and (3) performing a quantum security operation on the instrumentation control data with the quantum security device identification key and the quantum security key through the DIM. a smart instrumentation control unit including a security module for generating security instrumentation control data and (4) a communication interface unit for transmitting the quantum security instrumentation control data for a given communication environment; And receiving the quantum security instrumentation control data, extracting a device identification key, determining a quantum security key based on the device identification key, detecting the instrumentation control data, and performing quantum key distribution for the DIM in advance to It includes a central instrumentation control processing unit that processes quantum security key injection.

The DIM receives a reset interface for receiving a reset signal, and the quantum security key from the central instrumentation control processing unit based on the reset signal, and performs quantum security for the device identification number with the quantum security key to perform quantum security device It may include quantum security firmware that generates an identification key.

The DIM may further include a UART interface connected to the instrumentation control module, providing the instrumentation control data to the quantum security firmware, and providing quantum security instrumentation control data generated from the quantum security firmware to the communication interface unit. .

The quantum security firmware may receive the instrumentation control data and generate the intermediate quantum security instrumentation control data based on the quantum security key.

The quantum security firmware may generate the quantum security instrumentation data by merging the quantum security device identification key with the intermediate quantum security instrumentation control data.

The quantum security firmware may provide the quantum security instrumentation data to the communication interface unit through a Different Unit Same Security (DUSS) protocol regardless of the given communication environment.

When the DIM does not operate normally, the security module receives a public key from the central instrumentation control processing unit, performs a security operation on the instrumentation control data with the public key, and converts the quantum security instrumentation control data to public key security instrumentation. It can be replaced with control data.

The central instrumentation control processing unit may detect whether the DIM is normally operating in the smart instrumentation control unit and, if so, perform the quantum security key injection.

The central instrument control processing unit may provide an RSA or ECC-based public key to the security module when the DIM does not normally operate.

Among the embodiments, a quantum security communication device integrated smart instrumentation control method includes generating instrumentation control data; It is implemented as a separate independent chipset, can perform injection of a quantum security key according to the manager's settings, and is a quantum security device identification key and the quantum security key through a DIM (Device Identity Module) containing a quantum security device identification key. generating quantum security instrumentation control data by performing a quantum security operation on the instrumentation control data; transmitting the quantum security instrumentation and control data for a given communication environment; And receiving the quantum security instrumentation control data, extracting a device identification key, determining a quantum security key based on the device identification key, detecting the instrumentation control data, and performing quantum key distribution for the DIM in advance to and processing quantum security key injection.

The disclosed technology may have the following effects. However, it does not mean that a specific embodiment must include all of the following effects or only the following effects, so it should not be understood that the scope of rights of the disclosed technology is limited thereby.

The quantum security communication device integrated smart instrumentation control system and method according to an embodiment of the present invention supports mutual device identification and transmits and receives safe instrumentation control data through quantum security communication between each communication entity in the instrumentation control system.

The quantum security communication device integrated smart instrumentation control system and method according to an embodiment of the present invention encrypts instrumentation control data with a quantum security module to improve security so that information is not exposed during system hacking.

Quantum security communication device integrated smart instrumentation control system and method according to an embodiment of the present invention supports the identification function between the mobile instrumentation control device applied to drones, robots, mobiles, unmanned ships, etc. and the central system, so that it is not only a fixed server Secure quantum security communication with the upper system to which a virtualized cloud environment is applied is possible.

1 is a diagram showing a quantum security communication device integrated smart instrumentation control system according to an embodiment of the present invention.
FIG. 2 is a block diagram showing a device identity module (DIM) of the smart instrumentation control unit in FIG. 1 .
FIG. 3 is a block diagram showing the functional configuration of quantum security firmware in the Device Identity Module (DIM) of FIG. 2 .
4 is a flowchart showing a quantum security communication process of a quantum security communication device integrated smart instrument control system according to an embodiment.

Since the description of the present invention is only an embodiment for structural or functional description, the scope of the present invention should not be construed as being limited by the embodiments described in the text. That is, since the embodiment can be changed in various ways and can have various forms, it should be understood that the scope of the present invention includes equivalents capable of realizing the technical idea. In addition, since the object or effect presented in the present invention does not mean that a specific embodiment should include all of them or only such effects, the scope of the present invention should not be construed as being limited thereto.

Meanwhile, the meaning of terms described in this application should be understood as follows.

Terms such as "first" and "second" are used to distinguish one component from another, and the scope of rights should not be limited by these terms. For example, a first element may be termed a second element, and similarly, a second element may be termed a first element.

It should be understood that when an element is referred to as being “connected” to another element, it may be directly connected to the other element, but other elements may exist in the middle. On the other hand, when an element is referred to as being "directly connected" to another element, it should be understood that no intervening elements exist. Meanwhile, other expressions describing the relationship between components, such as “between” and “immediately between” or “adjacent to” and “directly adjacent to” should be interpreted similarly.

Expressions in the singular number should be understood to include plural expressions unless the context clearly dictates otherwise, and terms such as “comprise” or “having” refer to an embodied feature, number, step, operation, component, part, or these. It should be understood that it is intended to indicate that a combination exists, and does not preclude the possibility of the presence or addition of one or more other features, numbers, steps, operations, components, parts, or combinations thereof.

In each step, the identification code (eg, a, b, c, etc.) is used for convenience of explanation, and the identification code does not describe the order of each step, and each step clearly follows a specific order in context. Unless otherwise specified, it may occur in a different order than specified. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

The present invention can be implemented as computer readable code on a computer readable recording medium, and the computer readable recording medium includes all types of recording devices storing data that can be read by a computer system. . Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, and optical data storage devices. In addition, the computer-readable recording medium may be distributed to computer systems connected through a network, so that computer-readable codes may be stored and executed in a distributed manner.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs, unless defined otherwise. Terms defined in commonly used dictionaries should be interpreted as consistent with meanings in the context of the related art, and cannot be interpreted as having ideal or excessively formal meanings unless explicitly defined in the present application.

1 is a diagram showing a quantum security communication device integrated smart instrumentation control system according to an embodiment of the present invention.

Referring to FIG. 1 , the quantum security communication device integrated smart instrumentation control system 10 may include a smart instrumentation control unit 100 and a central instrumentation control processing unit 200 . Here, the smart instrumentation control unit 100 and the central instrumentation control processing unit 200 use wireless communication such as satellite communication, 4G, 5G, 6G, WiFi, and TVWS, or wired communication such as Ethernet and serial communication. They can be connected through communication.

The smart instrumentation control unit 100 may correspond to a field control panel in which each instrumentation facility is installed, and includes an instrumentation control module 110, a device identity module (DIM) 130, a security module 150, and a communication interface unit 170. can include

Instrumentation facilities are various instruments installed in industrial sites, such as transmitters, receivers, control units, control units, pneumatic sources, hydraulic sources, temperature indicating transmitters, pressure gauges, ultrasonic multi-line flow meters, ultrasonic open flow meters, and ultrasonic water level meters. , PH Meter, SS Meter, COD, BOD, TN, TP, level switch, etc. can be included.

The instrumentation control module 110 may generate instrumentation control data. Here, the instrumentation control data may include data representing various physical quantities such as temperature, pressure, and flow rate.

The DIM (Device Identity Module) 130 is implemented as a separate and independent chipset, can perform injection of a quantum security key according to the manager's setting, and can include a quantum security device identification key. The DIM 130 may receive a quantum security key from the central instrumentation control processing unit 200, and may generate a quantum security device identification key by performing quantum security on the device identification number with the quantum security key.

Quantum-Safe Security refers to a security technology that cannot be penetrated even with the computational power of a quantum computer using the principle of quantum mechanics. Quantum security is currently divided into hardware-based Quantum Key Distribution (QKD) and software-based Quantum Cryptography (PQC). QKD (Quantum Cryptographic Key Distribution) is a key (a kind of random password) required for cryptographic communication between two users using the no-cloning theorem and collapse of the wave function in quantum mechanics. It refers to a technology that allows users to secretly share information with each other. PQC (quantum resistant cryptography) can provide all the functions necessary for intact cryptographic communication as well as key distribution. That is, the step of randomly generating a key that is a password through a pseudo random number generator (PRNG) or a quantum random number generator (QRNG), a step of user authentication, key distribution (or sharing) ) and encryption with a shared key through a secret key (symmetric key) encryption algorithm such as AES or SEED. In the case of public key encryption, PQC, a secret key (symmetric key) encryption algorithm is used Encrypted communication is possible without

Here, the DIM 130 performs quantum security by generating random numbers through quantum random numbers.

The security module 150 may generate quantum security instrumentation control data by performing a quantum security operation on the instrumentation control data using the quantum security device identification key and the quantum security key through the DIM 130 . When the DIM 130 does not operate normally, the security module 150 receives a public key from the central instrumentation control processing unit 200 and performs a security operation on the instrumentation control data with the public key to disclose quantum security instrumentation control data. It can be replaced with key security instrumentation control data. The security module 150 may proceed with encryption and decryption of instrumentation control data, and in this process, a key such as a quantum security key or a public key may be used.

Public key cryptography is an asymmetric key method in which keys used for encryption and decryption are different from each other. A key pair (KeyPair) consisting of a public key and a private key is generated using a specific algorithm, then encrypted with the public key and decrypted with the private key.

The communication interface unit 170 may transmit quantum security instrumentation and control data for a given communication environment. Here, the communication environment refers to a communication method that can be integrated and linked to satellite communication, wireless communication such as 4G, 5G, 6G, WiFi, TVWS, and LoRa, and wired communication methods such as Ethernet, Serial 232, and 485. In other words, there is no need to rely on the security of individual communications.

The central instrumentation control processing unit 200 receives the quantum security instrumentation control data, extracts the device identification key, determines the quantum security key based on the device identification key, detects the instrumentation control data, and detects the instrumentation control data in advance for the DIM 130. Quantum security key injection can be handled by performing quantum key distribution. In one embodiment, the central instrumentation control processing unit 200 is a superordinate system of the smart instrumentation control unit 100 and may correspond to a management server that controls and monitors instrumentation facilities from a remote location. At this time, the central instrumentation control processing unit 200 may correspond to an upper system to which a virtualized cloud environment is applied rather than a fixed server.

The central instrumentation control processing unit 200 detects whether the DIM 130 is normally operating, and if the DIM 130 is normally operating, it can perform quantum security key injection, and if the DIM 130 is not operating normally. , an RSA or ECC-based public key may be provided to the security module 150.

RAS (Rivest, Shamir, Adleman) is one of the public key encryption algorithms. It consists of a public key and a private key. The public key is used to encrypt the message, and the private key is used to encrypt the message. Used when decrypting. ECC (Elliptic Curve Cryptosystem) is one of the public key cryptographic algorithms that uses the mathematical properties of an elliptic curve, and provides stronger security compared to RAS for the same key length.

FIG. 2 is a block diagram illustrating a device identity module (DIM) of the smart instrumentation control unit of FIG. 1 .

Referring to FIG. 2, the DIM 130 of the smart instrumentation control unit 100 includes a power interface 210, a reset interface 220, a SWD interface 230, a UART interface 240, quantum security firmware 250, and It is implemented as a single chipset including a quantum entropy chip (QEC) 260, can perform injection of a quantum security key according to the administrator's setting, and can include a quantum security device identification key.

The power interface 210 may provide external input power as power necessary for the operation of the DIM 130 . In one embodiment, the power interface 210 may receive a power input of approximately 3.3V.

The reset interface 220 may receive a reset signal for resetting the quantum security firmware 250 . Here, the reset signal may be provided to the reset interface 220 according to a manager's setting. In one embodiment, the reset signal may be set to be provided to the reset interface 220 whenever instrumentation control data is generated by the instrumentation control module 110 and provided to the DIM 130 .

A SWD (Serial Wire Debug) interface 230 may provide programming and debugging to the MCU from which the quantum security firmware 250 is downloaded.

The UART interface 240 is connected to the instrumentation control module 110, provides instrumentation control data to the quantum security firmware 250, and provides quantum security instrumentation control data generated from the quantum security firmware 250 to the communication interface unit 170. can provide

The quantum security firmware 250 receives a quantum security key from the central instrumentation control processing unit 200 based on the reset signal and performs quantum security on the device identification number with the quantum security key to generate a quantum security device identification key. . The quantum security firmware 250 may receive the instrumentation control data and generate intermediate quantum security instrumentation control data based on the quantum security key. The quantum security firmware 250 may receive instrumentation control data in a UART (Universal Asynchronous Receiver/Transmitter) communication environment. The quantum security firmware 250 may generate quantum security instrumentation data by merging the quantum security device identification key with intermediate quantum security instrumentation control data. The quantum security firmware 250 may provide quantum security instrumentation data to the communication interface unit 170 through a Different Unit Same Security (DUSS) protocol regardless of a given communication environment.

The quantum entropy chip (hereinafter referred to as QEC) 260 may generate a quantum random number entropy source (noise source) and provide analog noise to the quantum security firmware 250 . In this case, the analog noise may be generated to have sufficient entropy to generate an unpredictable encryption seed. In one embodiment, the QEC 260 may correspond to a noise source operating system implemented in software such as Android, Linux, or Windows. In one embodiment, the QEC 260 may be implemented in hardware using nondeterministic phenomena on electronic circuits, such as shot noise of Zener diodes and inherent thermal noise of semiconductor circuits, or by using radiation decay, which is a physical phenomenon. can In one embodiment, QEC 260 may be implemented in a combination of software and hardware.

FIG. 3 is a block diagram showing the functional configuration of quantum security firmware in the Device Identity Module (DIM) of FIG. 2 .

Referring to FIG. 3, the quantum security firmware 250 of the DIM 130 includes a security function processing unit 310, a cryptographic algorithm processing unit 320, an important security parameter processing unit 330, a finite state processing unit 340, and a command set. Including the base security agent protocol processing unit 350 and the input/output data processing unit 360, quantum security may be performed and quantum security device identification keys and quantum security instrumentation data may be generated.

The security function processing unit 310 is divided into an important security parameter management function, an encryption algorithm setting function, and an encryption algorithm execution (data input) function in order to provide an encryption algorithm service to the manager. A list of security parameters and supported cryptographic algorithms may be exemplified as shown in Tables 1 and 2 below.

[Table 1]

[Table 2]

The encryption algorithm processing unit 320 supports block ciphers such as ARIS, SEED, LEA, and HIGHT as well as AES encryption algorithms and block cipher operation modes for confidentiality and authentication services such as GMAC, CMAC, CCM, and GCM. The cryptographic algorithm processing unit 320 supports the ECDSA algorithm for electronic signature and the ECDH algorithm for key setting, so that 4G LTE, 5G, 6G, satellite It can also be applied to wireless communication such as , TVWS, WiFi, LTE Cat.m1, NB-IoT, and IoST environments such as LoRa.

The critical security parameter processing unit 330 is a layer that processes core security parameters and public security parameters, and is responsible for generating, setting, injecting, outputting, storing, and zeroing security parameters.

The finite state processing unit 340 is responsible for mapping a state and an input to an output for a finite set of input events, a finite set of output events, and a finite set of states.

The command set based security agent protocol processing unit 350 processes CMDSAP.

The input/output data processing unit 360 provides an encryption algorithm service to the administrator through a password function, and other version display function, status display function, initialization function, termination function, information management function, authentication function, test function, and security parameter management function. , provides services through cryptographic algorithm function.

4 is a flowchart showing a quantum security communication process of a quantum security communication device integrated smart instrument control system according to an embodiment.

In FIG. 4 , the quantum security communication device integrated smart instrumentation control system 10 may generate instrumentation control data through the smart instrumentation control unit 100 (step S410). In one embodiment, the smart instrumentation control unit 100 may generate instrumentation control data through the instrumentation control module 110 .

The quantum security communication device integrated smart instrumentation control system 10 may generate quantum security instrumentation control data by performing a quantum security operation on instrumentation control data through the smart instrumentation control unit 100 (step S420). In one embodiment, the smart instrumentation control unit 100 may perform a quantum security operation on instrumentation control data using a quantum security device identification key and a quantum security key through a device identity module (DIM) 130 . Here, the DIM 130 is implemented as a separate independent chipset, can perform injection of a quantum security key according to a manager's setting, and can include a quantum security device identification key.

The quantum security communication device integrated smart instrumentation control system 10 may transmit quantum security instrumentation control data for a given communication environment through the smart instrumentation control unit 100 (step S430). In one embodiment, the smart instrumentation control unit 100 provides quantum security instrumentation control data to the communication interface unit 170 through a DUSS (Different Unit Same Security) protocol independent of a given communication environment, so that the communication interface unit 170 Quantum security instrumentation control data can be transmitted through.

The quantum security communication device integrated smart instrumentation control system 10 receives quantum security instrumentation control data through the central instrumentation control processing unit 200, extracts a device identification key, and determines a quantum security key based on the device identification key to perform instrumentation Control data may be detected (step S440). In one embodiment, the central instrumentation control processing unit 200 may process quantum security key injection by performing quantum key distribution in advance with respect to the DIM 130 of the smart instrumentation control unit 100. Here, the central instrumentation control processing unit 200 provides the RSA or ECC-based public key to the security module 150 of the smart instrumentation control unit 100 when the DIM 130 does not operate normally, and instruments the public key Security operations can be performed on control data. In conclusion, the quantum security communication device integrated smart instrument control system can provide an integrated security system in various communication environments.

Although the above has been described with reference to preferred embodiments of the present invention, those skilled in the art will variously modify and change the present invention within the scope not departing from the spirit and scope of the present invention described in the claims below. You will understand that it can be done.

10: Quantum security communication device integrated smart instrumentation control system
100: smart instrumentation control unit
110: instrumentation control module 130: DIM (Device Identity Module)
150: security module 170: communication interface unit
200: central instrumentation control processing unit
210: power interface 220: reset interface
230: SWD interface 240: UART interface
250: quantum security firmware 260: quantum entropy chip (QEC)
310: security function processing unit 320: encryption algorithm processing unit
330: important security parameter processing unit 340: finite state processing unit
350: command set-based security agent protocol processing unit
360: input/output data processing unit

Claims (10)

(1) an instrumentation control module that generates instrumentation control data, (2) a DIM (Device that is implemented as a separate and independent chipset, capable of performing quantum security key injection according to the administrator's setting, and containing a quantum security device identification key Identity Module), (3) a security module for generating quantum security instrumentation control data by performing a quantum security operation on the instrumentation control data with the quantum security device identification key and the quantum security key through the DIM, and (4) given communication a smart instrumentation control unit including a communication interface unit to transmit the quantum security instrumented control data to an environment; and
The quantum security instrumentation control data is received, a device identification key is extracted, a quantum security key is determined based on the device identification key, and the instrumentation control data is detected, and quantum key distribution is performed for the DIM in advance to obtain the quantum security key. A smart instrument control system integrated with a quantum security communication device including a central instrument control processing unit that processes security key injection.
The method of claim 1, wherein the DIM is
a reset interface receiving a reset signal; and
Including a quantum security firmware that receives the quantum security key from the central instrumentation control processing unit based on the reset signal and performs quantum security for the device identification number with the quantum security key to generate the quantum security device identification key Quantum security communication device integrated smart instrumentation control system characterized by.
3. The method of claim 2, wherein the DIM is
A UART interface connected to the instrumentation control module, providing the instrumentation control data to the quantum security firmware, and providing quantum security instrumentation control data generated from the quantum security firmware to the communication interface unit. Security communication device integrated smart instrument control system.
The method of claim 2, wherein the quantum security firmware
A quantum security communication device integrated smart instrumentation control system, characterized in that for receiving the instrumentation control data and generating the intermediate quantum security instrumentation control data based on the quantum security key.
The method of claim 4, wherein the quantum security firmware
The quantum security communication device integrated smart instrumentation control system, characterized in that for generating the quantum security instrumentation data by merging the quantum security device identification key with the intermediate quantum security instrumentation control data.
The method of claim 5, wherein the quantum security firmware
A quantum security communication device integrated smart instrumentation control system, characterized in that for providing the quantum security instrumentation data to the communication interface unit through a DUSS (Different Unit Same Security) protocol independent of the given communication environment.
The method of claim 1, wherein the security module
When the DIM does not operate normally, a public key is received from the central instrumentation control processing unit, and a security operation is performed on the instrumentation control data using the public key to replace the quantum security instrumentation control data with public key security instrumentation control data. Quantum security communication device integrated smart instrumentation control system, characterized in that.
The method of claim 1, wherein the central instrumentation control processing unit
A smart instrumentation control system integrated with a quantum security communication device, characterized in that the smart instrumentation control unit detects whether the DIM is normally operating, and if so, performs the quantum security key injection.
The method of claim 8, wherein the central instrumentation control processing unit
When the DIM does not operate normally, a quantum security communication device integrated smart instrument control system, characterized in that for providing an RSA or ECC-based public key to the security module.
generating instrumentation control data;
It is implemented as a separate independent chipset, can perform injection of a quantum security key according to the manager's settings, and is a quantum security device identification key and the quantum security key through a DIM (Device Identity Module) containing a quantum security device identification key. generating quantum security instrumentation control data by performing a quantum security operation on the instrumentation control data;
transmitting the quantum security instrumentation control data for a given communication environment; and
The quantum security instrumentation control data is received, a device identification key is extracted, a quantum security key is determined based on the device identification key, the instrumentation control data is detected, and quantum key distribution is performed in advance with respect to the DIM to obtain the quantum security key. A smart instrument control method integrated with a quantum security communication device comprising the step of processing security key injection.

Images