TW200521799A - A security USB digital data process card - Google Patents

Abstract

To utilize the popular USB interface and Intelligent Stick structure, we build up a high security level system as smare card system for reducding the system cost and improving the convenience of operation.

Description

200521799 Description of the invention (1) [Technical field to which the creation belongs] This case uses a commonly used USB interface technology and a structure of a smart stick to establish a data security system with a smart card data security level. [Previous technology] Memory cards or authentication cards that are widely used in financial services are mostly composed of Smart Card systems. However, their overall installation costs are excessive, and they are used to support peripheral computer systems. It is not popular, so there is a so-called USB interface security certification Pei Zhi to improve its shortcomings, but its volume thickness is larger than ordinary memory cards, and it is not easy for users to carry. [Technical content of this case] Therefore, this case reveals a new technology, which is to add a USB memory card, such as a smart stick (11 ^ 611 丨 §6111: 81: 1 (: 10), to the control of computing data to meet And increase the security of the data, to achieve the purpose of data security (Security), and can be applied to the traditional smart card market and meet the characteristics of low system cost and USB universal interface, and the volume is small and easy to store in § For the sake of job, how to improve the above-mentioned shortcomings as a digital data processing equipment, so as to be compatible with the existing computer interface, in order to achieve better ease of use, and at the same time meet our operating habits, It is a topic worthy of my concern.

Page 4 200521799

Ding Ming + Page. In view of this. ”^ Production and marketing experience, careful research, and future performance ::::: Computer product research and development, after repeated experiments, began to create this slaughter, and also processed the USB interface data of Yunxi Card ". Detailed description; the following is the data encryption protection [Implementation]" For detailed description, please refer to Figure-, Figure-shows a block diagram of the i system, including m, is-USB interface controller, responsible for the data The transfer wheel, 102, is a memory unit, which is used as a region for storing digital data, and has a proper circuit connection directly with the USB interface controller. 103, it is a transport management processor, which is connected with the USB interface controller and Memory list ^, # has appropriate circuit connections. f After the data passes through the interface controller, it is processed by the operation field, such as MS, TDES, RC2, RC4, RC5 and other symmetry algorithms.

After that, the data can be encrypted or decrypted, and finally stored in the unit or transmitted to the external operating system. U, and in order to increase its data security level, it can be further encrypted by using asymmetric differentiating methods, such as RSA, DSA, ECC, and other computing methods to comply with and be used in PK I's security authentication system. Application, and further increase the security of data after encryption. As for the calculation of the stray function (Hash), in consideration of cost and security, it can also be planned when necessary, but: the cost of the card needs to be greatly increased. However, in order to facilitate the design and improve the security, a random number generator is added to the system. Using this random number generator,

Page 5 200521799 V. Description of the invention (3)-The parameters (KEE) required for the above operation encryption can be randomly generated, which further strengthens the security of the data. In order to meet the hardware operation shown in Figure 1, in the design of the software, an appropriate application program interface (API, ApplyieQn) must be completed.

Program Interface) to provide system developers to complete the development of security and confidential operating system.

In addition to the ability of hardware calculations, the design of this case also divides the blocks of the memory unit into several blocks, each with different characteristics. Including: general use area, read-only write-protection-(Read 〇nly)

And Reserves. The general use area provides users with general data storage and reading. The read-only and write-protected area only provides users to read data, but cannot write to delete and modify data, unless the user is controlled by an authentication process, such as entering a password. The protected area is that the general user cannot read, write, modify, and delete data, and cannot even format it. This part of the data is reserved only for specific system service providers. Through the above-mentioned application program interface (AP I), the access to the reserved area data is controlled remotely, which can increase the security level of the USB memory card in this case. This method of partitioning is a hardware feature that is not found in ordinary smart cards. Please refer to Figure 2. Figure 2 is a schematic diagram of the division of a memory unit, where 200 is a memory unit, 201 is a general use area, and 202 is a unique memory area.

Page 6 200521799 V. Description of the invention (4) Read-write protection area, 2003 is protection area. Please refer to Figure 3 'Figure 3 shows the soft layer architecture of this case, of which 30 1. The physical layer' uses the Intelligent Stick structure of a USB memory card in the hardware design, 3 0 2 The driver layer is responsible for cooperating with the data interaction operation between the caller host and the physical layer and processing the upper-layer application's access request to the device 'which meets the design specifications fc of Microsoft's pc / sc', and 303, the user interface layer, which meets The pKCS # n standard interface and MS CryptoAPI interface operating specifications, 304, application layer, this case = Wu Chengzhi South-level application interface (Ap 丨), using this high-level application " face 'developers can pinpoint搿 Already familiar programming interface for system development. — ≫ Therefore, with the system block diagram in Figure 1, and the implementation of the software layer architecture in Figure 3, a low-cost, lightweight, thin and short encryption USB interface can be completed. You can think about it, and you can use the smart stick shown in Figure 4 to commercialize it into an encrypted intelligent stick (Security Intelligent stick). ^ With the design of the secure operating system of the USB interface in this case, users do not need to install expensive smart card readers (Smart Card Reader), which greatly reduces costs, while reducing the size of cards and increasing convenience. USB; | The $ in 'on the side further improves the usability available everywhere. The unified design of this case is not to be regarded as an important creation, but

200521799 V. Description of the invention (5) The one disclosed in this case is one of the preferred embodiments. It is easy for anyone who is familiar with the technology to derive the local changes or modifications from the technical ideas of this case. The scope of patent rights in this case. To sum up, regardless of the purpose, means and effect, this case is showing its technical characteristics that are quite different from the conventional ones. The first creation is practical and practical. It is also in line with the requirements of the patent application. I urge your reviewing committee to check and pray. The patent was granted as early as possible.

200521799 Brief description of diagrams Diagram description: Figure 1. System block diagram of the device in this case. Figure 2. Schematic diagram of memory cell segmentation. Figure 3. Schematic diagram of software layer architecture in this case. Figure 4 shows the appearance of the encrypted smart stick in this case. Explanation of drawing numbers: 101, USB interface controller, 102, memory unit, 103, operation processor, 104, random number generator. 2 0 0, memory unit, 2 0, general use area, 2 0, read-only write-protection area, 2 3, protection area.

Claims (1)

200521799 Sixth, the scope of patent application 1. A USB interface data processing card, which is characterized by ... to Xiaowei and Z 丨 Thinking early, the interface controller is to write ^ 海 圮 忆 体 早 7C after processing the interface data, or After processing the data in the memory unit, it is transmitted to "f." The base has an arithmetic unit, which provides the computing power of the USB interface controller mentioned above to provide the function of data encryption protection. Engineering 2. If you apply for a patent The memory unit of the USB interface data processing card described in item 1 of the scope is composed of at least one memory. 3. The USB interface data processing card described in item 1 of the patent application scope, wherein the USB interface controller It is integrated with a computing chip in a semiconductor chip. 4. The USB interface data processing card as described in item 1 of the scope of patent application, wherein the USB interface controller and the memory unit are integrated in a semiconductor chip. 6. If applying The USB interface data processing card described in item 1 of the patent scope, which further includes a random number generator as a parameter required for generating data encryption processing. 7. If the scope of patent application is item 1 The USB interface of said data processing card, wherein the calculating unit may provide a symmetry-based algorithms, asymmetric algorithms or stray function (the Hash) by computing the capacity calculation. 200521799 VI. Application for Patent Scope 8. The USB interface data processing card described in item 1 of the scope of patent application, in which the memory unit is further divided into several sections, including a protection section, users cannot be inside this section. Read, write, delete, modify, and format data. S 9. The USB interface data processing card described in item 8 of the scope of patent application, which further provides with appropriate programs to enable specific users to read, write, and delete data in the protected section. , Modify, or format. 10. The USB interface data processing card described in item 1 of the scope of patent application, wherein the data processing card is a structure designer using a smart stick (I n t e 1 1 i g e n t S t i c k). Page 11