KR970056187A - Communication security provision method and device - Google Patents

Abstract

A semiconductor device that stores encryption / decryption keys during manufacture in combination with digital authorization to ensure communication security between a semiconductor device and another device, comprising: a nonvolatile memory that stores an encryption / decryption key and at least one digital authorization; Semiconductors consisting of an internal memory for temporarily storing algorithms capable of encryption and decryption algorithms for input of information from a device to a semiconductor device, a processor for processing information completely inside the hardware agent, and an arbitrary number generator for generating encryption / decryption keys. Device.

Description

Communication security provision method and device

Since this is an open matter, no full text was included.

4 is a block diagram of a computer system embodying an embodiment of the invention,

5 is a block diagram of an embodiment of the invention.

Claims (24)

Processing means for processing information in the semiconductor device, first storage means connected to the processing means, for storing a uniquely designated key pair and at least one digital authorization, and at least one connected to the ironing means and processed by the processing means. And second storage means for storing said information, and interface means connected to said processing means and enabling communication between said semiconductor device and a second semiconductor device. The semiconductor device according to claim 1, wherein said storage means comprises a nonvolatile memory which maintains said uniquely designated key pair and said at least one digital application even when no power is supplied. 3. The semiconductor device of claim 2, wherein said at least one digital application comprises device application. 4. The semiconductor device of claim 3, wherein said at least one digital application comprises a second level application. The semiconductor device according to claim 2, wherein said storage means further comprises a random access memory for temporarily storing said information. 6. The semiconductor device according to claim 5, further comprising means connected to said processing means for generating said uniquely designated key pair. 7. The semiconductor device according to claim 6, wherein said generating means comprises an arbitrary number generator. The semiconductor device of claim 7, wherein the interface means decrypts and stores the information transmitted from the second semiconductor device to the semiconductor device, and enables the semiconductor device to encrypt and transmit the information from the semiconductor device to the second semiconductor device. And an interface coupled to a bus to provide a communication link between the semiconductor device and the second semiconductor device. A semiconductor device for encoding and decoding information, comprising: a nonvolatile memory for storing a uniquely designated key pair and at least one digital authorization, a random access memory for storing the information, the nonvolatile memory and the random access memory And a processing unit for processing said information at least internally, and interface means connected to said processing unit and intable said semiconductor device for communicating with at least one second semiconductor device. 10. The semiconductor device according to claim 9, further comprising an arbitrary number generator coupled to said processing unit for generating said uniquely designated key pair. 11. The semiconductor device of claim 10, wherein said nonvolatile memory stores device application. 12. The semiconductor device of claim 11, wherein the nonvolatile memory also stores a second level application. The semiconductor device of claim 10, wherein the interface is configured to decrypt and store information transmitted to the semiconductor device and to intable the semiconductor device to encrypt and transmit information transmitted from the semiconductor device to a second semiconductor device. And providing a communication link between the second semiconductor device and the second semiconductor device. Memory means for storing at least one encryption and decryption program, host processing means for executing the encryption and decryption program, bus means for connecting the host processing means and the memory means, and internally decrypting and outputting input information And an agent means for encrypting information and connected to the bus means, wherein the agent means comprises: processing means for processing the input and output information in the agent means, coupled to the processing means, and decrypting the input information; First storage means for storing at least one digital authorization and uniquely designated key pair used for encrypting said output information, second storage means for temporarily storing at least said input and output information, and coupled to said processing means; To enable communication security between the system and the remote system System comprising a device unit. 15. The system of claim 14, wherein said first storage means comprises a non-volatile memory for storing said unique key pair and said at least one digital grant in the absence of power. 16. The system of claim 15, wherein said at least one digital application comprises device application. 17. The system of claim 16, wherein said at least one digital application further comprises a second level application. 16. The system of claim 15, wherein said second storage means comprises a random access memory for temporarily storing said information and at least one cryptographic decryption algorithm. 19. The system of claim 18, further comprising means for generating said uniquely designated key pair. 20. The system of claim 19, wherein the means for generating is an arbitrary number generator. A memory device that stores at least one encryption and decryption program, a host processor that executes the encryption and decryption program, a bus that connects the host processor and the memory device, and is connected to the bus and internally from a remote device. And a hardware agent that decrypts the input information and encrypts the output information for transmission to the remote device, wherein the hardware agent comprises: a processor for processing the input information and output information in the hardware agent; A nonvolatile storage device coupled to decrypt the input information and storing a unique key and device authorization used to encrypt the output information, a volatile storage device to temporarily store the input and output information, and the unique key pair With a random number generator that generates Coupled to Rigi, the system characterized in that it comprises an interface for enabling the secure communication between the hardware agent and the remote device. A hardware agent manufacturing method used to ensure communication security of another remote device, the method comprising: placing the hardware agent on the authorization system such that the hardware agent establishes an electrical connection with the authorization system; Initially powering the hardware agent to initiate a configuration sequence for generating a device-unique key pair, proving that the device-unique key pair is unique, and converting the device-unique key pair to the hardware Storing in a non-volatile storage element in the agent. 23. The method of claim 22, further comprising generating a unique device authorization and storing the device authorization in the non-volatile storage element of the hardware agent. 24. The method of claim 23, further comprising: generating a unique second level authorization, inputting the second level authorization to the hardware agent, and storing the second level authorization in the non-volatile storage element of the hardware agent. The method further comprises the step of. ※ Note: The disclosure is based on the initial application.