RU2541901C2 - Method for guaranteed protection of information transmitted via radio link from unauthorised access using special information encoding (conversion) with open storage of encoding parameters - Google Patents

Abstract

FIELD: physics, computer engineering.

SUBSTANCE: invention relates to information security. The method for guaranteed protection of information transmitted via a radio link from unauthorised access using information encoding with open storage of encoding parameters comprises setting up a workstation for operation with PLD and/or VLSI, which meets information security requirements, equipment of which includes a personal computer, a random number sensor, an electronic switching device, and performing on said workstation: hardware recording of a separate encoding parameter on at least a portion of one-time-programmable memory of the means of protecting the transmitted information located in the PLD or VLSI, wherein the separate encoding parameter remains in said memory as an unknown random value; generating in the PLD or VLSI a working encoding parameter allocated for open transmission and/or storage, wherein the working encoding parameter is generated using said separate encoding parameter and the encoding parameter coming from the equipment of said workstation, using an information conversion algorithm according to GOST 28147-89 for generating the working parameter and for encoding information.

EFFECT: guaranteed protection of information transmitted via a radio link without using limited access means.

3 dwg

Description

The present invention relates to the field of information security, and in particular to applications of information security technologies in radio communication, navigation and monitoring systems.

There are known technologies for protecting transmitted information, based on the use of a unique individual encryption key and public encryption key and providing for hardware modification of the integrated circuit - equipping the circuit with a random number generator (see, for example, patent for invention RU 2147790, Intel, published on 04/20/2000). The present invention represents a further development of the technologies described above and will allow us to offer a method of guaranteed protection of transmitted information without the use of limited access means, which will expand the scope of integrated circuits as means of information protection and ensure their use in the equipment of satellite navigation systems, monitoring systems for moving objects and etc.

The above technical result is achieved by using the proposed method of guaranteed protection of information transmitted via a radio channel from unauthorized access using special encoding (conversion) of information during open storage of encoding operating parameters.

The proposed method provides for the organization of a workplace with FPGA or VLSI that meets the information security requirements in accordance with the FSTEC of Russia “Automated Systems. Protection against unauthorized access to information. Classification of automated systems and information protection requirements. ”

Organized taking into account the information security requirements of the workplace (Fig. 1), hardware recording of an individual encoding parameter is performed on at least a section of 256-bit programmable memory of the transmitted data protection means located in the FPGA or VLSI (Fig. 2). The recorded individual encoding parameter remains in the indicated memory as an unknown random variable.

At the workplace, the main encoding parameter used to encode information transmitted over the air (Fig. 3) is converted (encoded) using the GOST 28147-89 algorithm (hereinafter referred to as the algorithm) hardware implemented in FPGA or VLSI, and an individual encoding parameter. As a result of this conversion, an encoding operating parameter is created that is allocated for open storage.

Similarly, using a single main encoding parameter and various individual encoding parameters, encoding (decoding) operating parameters are formed for the transmitted information consumers, which are transmitted to them in an open way along with VLSI or FPGA.

To transmit encoded information over the air to VLSI or FPGA hardware using an algorithm and an individual encoding parameter, the working encoding parameter is converted into the main encoding parameter, with which the transmitted information is encoded by the algorithm.

The information source disseminates the encoded information over the air, and consumers using VLSI or FPGA with individual encoding parameters in their equipment and encoding operating parameters acquire the ability to automatically decode the information addressed to it without owning the main encoding parameter. In this case, when decoding, operations of the inverse transformation of information are carried out, similar to those that were carried out during encoding.

To implement the proposed method, a workstation 1 is organized (Fig. 1) for working with FPGAs and / or VLSIs that meet the information security requirements. The equipment 2 of the secure workstation 1 includes a personal computer, a random number sensor, an electronic switching device. Using equipment 2 of the protected workstation 1, hardware recording of an individual encoding parameter is performed on a portion of a once programmable memory of a means of protecting transmitted information located on logical cells in an FPGA or VLSI chip developed by the system-on-chip technology 3. Recorded individual encoding parameter represents a random variable generated using a random number sensor, which is part of the equipment 2 of the secure workstation 1. At the same time, the hardware record of the individual encoding parameter is a burn or build-up of conductive jumpers FPGA or VLSI 3 and remains in memory as an unknown value. Using the recorded individual encoding parameter and the main encoding parameter received from the equipment 2 of the workstation 1 in the FPGA or VLSI 3, using the algorithm, the working encoding parameter is formed (Fig. 2), allocated for open transmission and / or storage.

Thus, due to the fact that the stored working encoding parameter is used for encoding and the encoding parameter is not directly contained in the memory of the microcircuit, the transmitted information protection tool, which is part of the FPGA or VLSI 3, can be used without restricting access to it, which will allow using the FPGA or VLSI 3 in the equipment of satellite navigation systems and monitoring systems for moving objects without restrictions. Since all information conversion operations will be performed using encoding parameters automatically and hardware in the chip chip (Fig. 3), access to any data obtained during their execution will be excluded. Thus, a method of guaranteed protection against unlawful access to information transmitted over the air in satellite navigation systems and monitoring systems for moving objects has been proposed.

Claims (1)

A method of guaranteed protection of information transmitted over a radio channel from unauthorized access by encoding information during open storage of encoding parameters, which provides for the organization of a workplace with FPGA and / or VLSI that meets the information security requirements, the equipment of which includes a personal computer, a random number sensor, an electronic switching device , and execution at such a workplace:
- hardware recording of an individual encoding parameter in at least a portion of a once programmable memory of the transmitted information protection means located in the FPGA or VLSI, and the individual encoding parameter remains in the indicated memory as an unknown random variable;
- forming in the FPGA or VLSI the working encoding parameter allocated for open transmission and / or storage, and the working encoding parameter is formed using the specified individual encoding parameter and the encoding parameter received from the equipment of the said workstation, when used to generate the working parameter and for encoding information transformation algorithm information in accordance with GOST 28147-89.

Images