經濟部中央標準局負工消费合作社印掣 427076 A7 __B7 五、發明説明（） 5 _ 1發明領域及背景 A. 發明領域： 本發明係為一種密碼核對裝置與方法’尤指一種應用 C R C (Cyclic redundancy checking)技術，以核對所輸入之密瑪的 裝置與方法。 B. 發明背景： 一般之軟體產品為控制其合法的使用權’在使用者 安裝產品時，便要求使用者輸入產品的序列碼（series number )，以判定該使用者是否為合法的使用者，進而控 制其安裝程序。一般之序列碼包含兩部份，即產品本身 的序號及檢查碼。為了判定所輪入的序列碼是否正確1 每個裝載軟體產品的光碟或磁片另儲存一檢査碼*以核 對所輸入之序列碼是否正確。每個序列碼為唯一的號碼， 同樣，其搭配的檢査碼也是唯一的。序列碼的設計除了 必須具有不易破解的特性外’必須容易實現’以降低製 造成本。 5 _ 2發明之目的及概要： 為達成上述之功效，本發明之主要目的在提出一種 簡易的密碼核對裝置與方法，以降低密碼核對的成本。 本發明之另一目的在提出一種不易破解的密碼核對 本紙張尺度適用中國國家標皁（CNS ) A4規枋（210X297兮筇） (請先閱讀背面之注意事項再填寫本頁) 裝 '11 42707 6 A7 B7 __ 五、發明説明（） 裝置與方法’以利用CRC技術的特性核對密瑪’以確保 軟體產品的合法使用權° 基於上述之目的’本發明之裝置主要包含：一分離 裝置，一前字串產生裝置 '一後字串產生裝置’一 CRC 除數運算裝置，及一比較裝置。分離裝置將使用者所輸 入的字串分離出序列瑪及檢查碼。檢查竭直接輸入比較 裝置。序列碼則與前字串產生裝置’及後字串產生裝置' 所輪出之字串合併為—被除數’並輸入CRC除數運算裝 置，以執行除數運算。所產生之餘數輸入比較裝置’以 與檢查碟進行比較。如果比較的結果相符合，便表示使 用者所輸入的為合法的序列瑪，程式便可嫌續安裝。否 則安裝程式便要求使用者輸入正確的序列瑪。 本發明之步騨主要包含：（1)要求使用者輸入一字串 X，該字串 X可為文字或數字。（2)將該輸入之字串中所 代表的序列碼及檢查碼分離出來^ (3)產生一不定長度的 前字串XI及一不定長度的後字串X2。（4)合併X，及前 字串XI與後字串X2，並產生一被除數為χι+χ + χ2。（5) 以一設定之CRC除數除以該被除數’並輸出餘數，（6)比 較該餘數與該檢查瑪，當比較的結果相同時，便表示所 輸入的密碼正確，否則便要求重新輸入密碼。 5 — 3圖示之簡單說明 本紙張尺度適用中國國家標準（CNS丨A4規袼（2丨0X297功垃）Printed by the Central Standards Bureau of the Ministry of Economic Affairs and Consumer Cooperatives 427076 A7 __B7 V. Description of the invention () 5 _ 1 Field of invention and background A. Field of the invention: The present invention is a cryptographic check device and method 'especially an application of CRC (Cyclic Redundancy checking) technology to check the input device and method. B. Background of the Invention: In general, software products are designed to control their legitimate use rights. When a user installs a product, the user is required to enter the product serial number to determine whether the user is a legitimate user. Controlling its installation program. The general serial code consists of two parts, the serial number of the product itself and the check code. In order to determine whether the serial number entered is correct 1 Each disc or disk loaded with the software product stores a check code * to check whether the entered serial number is correct. Each serial code is a unique number, and similarly, its check code is also unique. In addition to the design of the serial code, it must have the characteristics that are not easy to crack, and it must be easy to implement to reduce the manufacturing cost. 5 _ 2 Purpose and summary of the invention: In order to achieve the above-mentioned effects, the main purpose of the present invention is to propose a simple password checking device and method to reduce the cost of password checking. Another object of the present invention is to propose a password that is not easy to crack. The paper size applies Chinese National Standard Soap (CNS) A4 Regulation (210X297). (Please read the precautions on the back before filling this page.) Install '11 42707 6 A7 B7 __ V. Description of the device () Device and method 'check the Mimar using the characteristics of the CRC technology' to ensure the legal use of software products ° Based on the above purpose 'The device of the present invention mainly includes: a separation device, a A pre-string generating device 'a post-string generating device', a CRC divisor computing device, and a comparison device. The separating device separates the string entered by the user into a sequence code and a check code. After checking, enter the comparison device directly. The serial code is combined with the strings rounded out by the preceding string generating device ′ and the succeeding string generating device ′ into the —dividend ’and input into the CRC divisor operation device to perform the divisor operation. The generated remainder is input to a comparison device 'for comparison with the inspection disc. If the comparison results match, it means that the user input is a valid serial number, and the program can be installed. Otherwise, the installer asks the user to enter the correct serial number. The steps of the present invention mainly include: (1) The user is required to input a character string X, and the character string X may be a character or a number. (2) Separate the serial code and check code represented in the input string ^ (3) Generate a variable length front string XI and a variable length back string X2. (4) Combine X, the preceding string XI and the succeeding string X2, and generate a dividend which is χι + χ + χ2. (5) Divide a set CRC divisor by the dividend and output the remainder. (6) Compare the remainder with the check mark. When the result of the comparison is the same, it means that the password entered is correct, otherwise it is required. Please re-enter password. A simple description of the 5 — 3 icon This paper size applies to Chinese national standards (CNS 丨 A4 regulations (2 丨 0X297)
----------^------1T------ • 〆 (請先閲讀背面之注意事項再填寫本頁) - V 經濟部中央樣準局負工消費合作社印製 4270 7 6 A7 ------------ B7 五、發明説明（） ~ —-- 圖1為本發明之裝置的功能方塊困。 圖2為本發明之方法流程圊= 5 — 4本發明之詳細說明 依據上述之目的’本發明主要將CRC除數運算的特 性’應用在密瑪的產生及核對上。CRC的技術原本是用 在網路傳遞時的錯誤檢查。當資料框（franie)在網路上傳 遞時’其中便包含一檢查碼（check digit)。這些檢查竭是 依據可能預期的錯誤型態而挑選出來的，並依照每—個 資料框的内容經過運算而產生，通常為16或32位元β 當接收者收到該資料框時，便可對所收到的資料框執行 同樣的運算，以比較所得到的結果是否與檢查瑪—樣。 CRC技術之所以可以找出錯誤的地方是因為它利用 具偵錯能力的特殊的除數設定來執行除數的運算。傳送 者及接收者必須預先約定好一多項忐r ^ { generator 經濟部中央標挛局K工消费合作社印製 一 ; 裳 II I 訂 '- f靖先閱讀背面之注意事項再填寫本頁} polynomial ) G(X)，當作除數。傳送者所傳送的資料框 必須在後面補足零，以可被該除數運算。計算好後便連 同核對碼（checksum )傳送到接收端β當接收端收到資 料框後’便以該除數對所接收到的資料框執行除數運算， 如果所得到的餘數為零，便表示傳送無誤。否則，便表 示傳送中發生錯誤。 其原理可以下列例子說明：假設應該傳送的是 本紙張家ϋ CNS ) Λ4规梢（210x297^iT ----- 4 270 7 6 經濟部中央標準局負工消費合作社印策 A7 B7 五、發明説明（） Τ(Χ) ’但接收到的是Τ(Χ) + Ε(Χ)。E(X)表示發生錯誤的 碼。而E(X)中的每一位元便相當於被反向（inverted ) 的位元。也就是，如果E(X)中有免個”1”的位元便表示有 Λ：個單一位元的錯誤發生。而接收者以除數G(x)除以 T(X) + E(X)，即[T(X) + E(X)]/G(X)。如果 T(X)完全正確， 則T(X)/G(X) = 0，但由於有錯誤Ε(Χ)的存在，因此所得 之結果便是E(X)/G(X)，這便是為何利用CRC的除數可 將錯誤E(X)找出的原因。即使E(X)為單一位元的錯誤。 此方法仍然可以將錯誤找出。而且，多項式中有一些重 要的特性，例如：如果多項式的項數是奇數，該多項式 皆無法被 （X+1)整除。因此，將（X+1)當作G(X)的因數 (factor )必然可以將所有由奇數個反向（錯誤）位元所組 成的錯誤找出來。此外，一具有r檢查位元的多項式碼， 將可偵測所有位元長度小於等於r的突發錯誤。所謂的 突發錯誤（burst errors )，其第一個位元及最後一個位元 必然是’’ 1 ”，中間的位元則為”0”或’’ 1 ” 的錯誤。而（X+1) 的因數則可偵測所有奇數位元的突發錯誤。 CRC常用的除數通常會綜合多項式上述及其他的特 性，而最常用的通常是ITU所提出的偵錯能力較完整的 幾種，若以多項式表示一二進位的數字，其位元為”1”的 數，列舉如下： CRC-16 = X1<s + X,5 + X2+1 本紙張尺度適用中國國家標準{ CNS > Μ说格（2ΙΟΧ 297杳兑） I^------η------ *- (請先閣讀背面之注意事項再填寫本頁) 427076 A7 _ B7 五、發明説明（） CRC-12 = X12 + X'1+X3 + X2 + Xl + l crc-ccitt=x16+x12+x5 + i CRC-32=X32 + X26 + X23 + X,6 + X12 + Xu+X10 + X8 + X7 + X5 + X4 + X2 + X+1 其中，CRC-16的二進位表示方式便為： 1 1000 0000 0000 0 101 其餘依此類推。 利用這個特性，本發明所應用之CRC的除數，可由 CRC-16，CRC-12，或CRC-3 2標準的幾種中，依密碼的 特性選取一個或數個除數來產生密碼》 經濟部中央標嗥局貝工消费合作社印製 (請先閱讀背面之注意事項再填寫本頁) 圖1顯示本發明之最佳實施例。使用者在一輸入介 面101輸入一字串，字_可為文字及數字的混合。分離 裝置102便讀取所輸入的字串並將其中的序列碼及檢查 碼分離出來。檢查碼直接輸入一比較裝置106，序列碼 則輸入一編碼裝置103，以依據一位元轉換的規則，將 所輸入之位元作線性的轉換，以增加破解的困難度。例 如，以8個位元為單位，將原本之序列碼中為’’ 1 ”的位元 作編碼。轉換後的序列碼，以X表示，再輸入一 CRC運 算模組104。 CRC運算模組104同時接收前字串產生裝置109, 本紙張尺度適用中國圉家標隼（CNS ) Λ4规格（' 一 427076 A7 ______B7 五、發明説明（） 及後字串產生裝置110的輸出，分別以X!及Χ2表示。 XI’ Χ2的長度不定’可為文字與數字的淚合，並分別與 X合併為一被除數’輸入一 CRC除數運算裝置t 〇4令。 所輸出之餘數’以 Y表示，可再經由一編碼裝置1〇5， 執行位元的轉換11編碼後的餘數輸入一比較裝置1〇6以 與檢查碼比較。如果比較的結果相符合，比較裝置1〇6 便輸出一判定以表示使用者所輸入的為合法的序列瑪， 程式便可繼續安裝。否則便輸出一非法的判定，要求使 用者輸入正確的序列碼。 如此，軟體產品製造商先給使用者一序列碼X，並 設定一 CRC所制定的碼於該軟體的安裝程式中，當作除 數。當使用者在安裝時，安裝程式便要求使用者輸入序 列碼。安裝程式便以原先設定的CRC除數除以所輸入的 序列碼，所得到的餘數便可當作檢查碼（check code )， 以比對該序列碼的正確性。 經濟部中央標準局負工消资合作社印製 I .%衣-- (請先閩讀背面之注意事項吞填艿本頁) 本發明之方法如圖2所示： 步驟 201:使用者輸入一表示序列碼的字串，該字 串可為文字或數字。 步驟202 :將該輸入之字串中所代表的序列碼及檢 查碼分離出來。 步驟203 :依照一設定之編碼規則，執行該序列碼 的編碼程序，並輸出編碼後的結果，以X表示。 本紙乐尺度適用中國國家標準（CNS ) Λ4現拮（210X297夺兑） Z1270 7 6 Λ7 B7 五、發明説明（ ^驟2〇4:產i不定長度的前字串χι及一不定長 度的後字串X2。 ---------¾衣------1T - - (諳先閲讀背面之注意事項再填寫本頁) 步螺205 :合併該编碼後的結果X ’及前字串χι與 後字串X2’並產4 —被除數’其排列方式為X1+X + X2。 驟 以—設定之CRC除數除以該被除數 X4X + X2’並產生〜餘數，以γ表示。 步驟207:故照一設定之編瑪規則，執行該餘數γ 的編碼程序，並私, t ^ i输出編碼後的結果β 步嫌 9 f) 0 ♦ , 此較該編碼後的結果與該檢査瑪，當比 較的結果相同時，便表示所輸入的序列瑪正確，否則便 要求重新輸入密崎。 如此，由於CRc除數可達到近乎一對一配對的功 能’因此可準球地列定所輸入之序列碼是否正確β而且， 本發明之方法與裝置更利用前字串產生裝置及後字串產 生裝置’合併原本之序列碼以當作被除數，如此，被除 經濟部中央標嗥局肩工消费合作社印製 數的產生將無法剛知，即使是程式設計者本身，也無法 找出其規律。 本發明之裝置與方法除了可應用在序列碼的產生及 核對外’也可廣泛應用於一般須設定密碼的網路應用軟 體，甚至銀行帳戶或信用卡等。即使銀行的人員看到儲 存的檢査碼’也無法倒推使用者原來的密碼為何。 本紙張尺度適用中國國家標導（CNS )从坑格（2i〇x2们'％筇） 427076 A7 B7 五、發明説明（） 專 明發月 發本發 本依本 為凡屬 僅，仍 述效皆 所功， 上用飾 以實修 之與 泛化 廣變 達等 已均 且之 ’ 作 已所 而圍 例範 施利 實專 佳請 較申 之明 内 圍 範 之 蓋 I------------^-- (請先閱讀背面之注意事項再填寫本頁)---------- ^ ------ 1T ------ • 〆 (Please read the notes on the back before filling out this page)-V Central Procurement Bureau, Ministry of Economic Affairs Printed by the cooperative 4270 7 6 A7 ------------ B7 V. Description of the invention () ~ --- Figure 1 shows the functional block of the device of the present invention. Fig. 2 is the method flow of the present invention. 圊 = 5-4 Detailed description of the present invention. According to the above-mentioned purpose, the present invention mainly applies the characteristics of the CRC divisor operation to the generation and verification of the DMA. The technology of CRC was originally used for error checking during network transmission. When the data frame (franie) is uploaded online, it contains a check digit. These checks are selected based on the type of error that may be expected, and are generated according to the content of each data frame, usually 16 or 32 bits. When the receiver receives the data frame, it can Perform the same operation on the received data frame to compare whether the result obtained is the same as the check mark. The reason why CRC technology can find the error is because it uses the special divisor setting with error detection capability to perform the divisor operation. The sender and receiver must agree in advance on one or more 忐 r ^ {generator printed by the Central Government Bureau of the Ministry of Economic Affairs, K-Consumer Cooperative Co., Ltd .; order II- I order '-f Jing first read the precautions on the back before filling in this page} polynomial) G (X) as a divisor. The data frame sent by the sender must be filled with zeros in order to be operable by the divisor. After the calculation is completed, it is sent to the receiving end together with the checksum (checksum). When the receiving end receives the data frame, 'the divisor is used to perform the divisor operation on the received data frame. If the obtained remainder is zero, then Indicates that the transmission was correct. Otherwise, it indicates that an error occurred during transmission. The principle can be illustrated by the following example: Suppose that the paper furniture should be transmitted. CNS) Λ4 gauge (210x297 ^ iT ----- 4 270 7 6 Central Bureau of Standards, Ministry of Economic Affairs, Consumer Cooperatives, India, Policy A7 B7 V. Invention Explanation () T (χ) 'but received T (χ) + Ε (χ). E (X) represents the code where the error occurred. Each bit in E (X) is equivalent to being reversed (Inverted) bits. That is, if there are no "1" bits in E (X), it means that Λ: a single bit error occurred. The receiver divides the divisor G (x) by T (X) + E (X), which is [T (X) + E (X)] / G (X). If T (X) is completely correct, then T (X) / G (X) = 0, but Because there is an error E (X), the result is E (X) / G (X), which is why the error E (X) can be found by using the CRC divisor. Even if E (X) X) is a single-bit error. This method can still find the error. Moreover, there are some important characteristics in the polynomial, for example: if the number of polynomial terms is odd, the polynomial cannot be divided by (X + 1). Therefore, taking (X + 1) as the factor of G (X) will inevitably make all An error consisting of an odd number of reverse (error) bits is found. In addition, a polynomial code with r check bits can detect all burst errors with a bit length less than or equal to r. The so-called burst errors ( burst errors), the first bit and the last bit must be `` 1 '', and the middle bit is an error of `` 0 '' or `` 1 ''. The factor of (X + 1) can be detected Detect burst errors of all odd-numbered bits. The common divisors of CRC usually combine the above and other characteristics of polynomials, and the most commonly used ones are the ones with more complete error detection capabilities proposed by ITU. Carryed numbers, whose bit is "1", are listed as follows: CRC-16 = X1 < s + X, 5 + X2 + 1 This paper size is applicable to the Chinese national standard {CNS > Μ 说 格 (2ΙΟΧ 297 杳) Vs.) I ^ ------ η ------ *-(Please read the notes on the back before filling out this page) 427076 A7 _ B7 V. Description of the invention () CRC-12 = X12 + X '1 + X3 + X2 + Xl + l crc-ccitt = x16 + x12 + x5 + i CRC-32 = X32 + X26 + X23 + X, 6 + X12 + Xu + X10 + X8 + X7 + X5 + X4 + X2 + X + 1 Binary bits, CRC-16 representation will be: 1 1,000,000,000,000,101 rest and so on. Using this feature, the CRC divisor applied by the present invention can be selected from several types of CRC-16, CRC-12, or CRC-3 2 standards, and one or more divisors are selected according to the characteristics of the password to generate the password. Printed by the Ministry of Standards and Technology Bureau Shellfish Consumer Cooperative (please read the notes on the back before filling out this page) Figure 1 shows the preferred embodiment of the present invention. The user inputs a character string on an input interface 101, and the character _ can be a mixture of text and numbers. The separating device 102 reads the input string and separates the serial code and the check code therein. The check code is directly input to a comparison device 106, and the serial code is input to an encoding device 103 to linearly convert the input bits according to the rule of one-bit conversion to increase the difficulty of cracking. For example, the 8-bit unit is used to encode the bit that is "1" in the original serial code. The converted serial code is represented by X, and then input to a CRC operation module 104. CRC operation module 104 Simultaneously receives the front string generation device 109, this paper size is applicable to the Chinese family standard (CNS) Λ4 specification ('one 427076 A7 ______B7 5. The description of the invention () and the output of the rear string generation device 110 are X, respectively! And χ2. XI 'The indefinite length of χ2' can be a combination of words and numbers, which are combined with X to form a dividend. Input a CRC divisor operation device t 〇4 order. It means that, through an encoding device 105, bit conversion 11 is performed, and the remainder after encoding is input to a comparison device 106 for comparison with the check code. If the comparison result matches, the comparison device 106 outputs a The judgment is to indicate that the user's input is a valid serial number, and the program can continue to be installed. Otherwise, an illegal determination is output, and the user is required to enter the correct serial code. Therefore, the software product manufacturer first gives the user a serial code. X, Set a CRC code in the software's installer as a divisor. When the user is installing, the installer asks the user to enter the serial code. The installer divides the CRC divisor originally set by the Enter the serial code, and the remainder can be used as a check code to verify the correctness of the serial code. The Central Standards Bureau of the Ministry of Economic Affairs printed I.% clothing-(Please (Please read the note on the back first and fill in this page) The method of the present invention is shown in Figure 2: Step 201: The user enters a string representing a serial code, which can be a text or a number. Step 202: The serial code and check code represented in the input string are separated. Step 203: According to a set encoding rule, execute the encoding procedure of the serial code, and output the encoded result, which is represented by X. The paper scale is applicable Chinese National Standard (CNS) Λ4 is now scarce (210X297 wins) Z1270 7 6 Λ7 B7 V. Description of the invention (^ Step 204: The first string of indefinite length χι and the second string of indefinite length X2.- -------- ¾ Clothing ------ 1T--(谙(Please read the notes on the back and fill in this page again.) Step 205: Combine the encoded result X 'and the previous string χι and the rear string X2' to produce 4 —divideee '. The arrangement is X1 + X + X2. Step-divide the set CRC divisor by the dividend X4X + X2 'and generate ~ remainder, which is represented by γ. Step 207: Perform the encoding procedure of the remainder γ according to a set editing rule, and Privately, t ^ i outputs the coded result β step 9 f) 0 ♦, which compares the coded result with the check mark. When the comparison result is the same, it means that the input sequence mark is correct, otherwise it is required. Re-enter Misaki. In this way, since the CRc divisor can achieve a nearly one-to-one pairing function, it is possible to determine whether the input serial code is correct β. Moreover, the method and device of the present invention use a front string generation device and a back string The generating device 'merges the original serial code as the dividend. In this way, the generation of the printed number of the shoulder labor consumer cooperative of the Central Bureau of Standards of the Ministry of Economic Affairs will not be known. Even the programmer itself cannot find out. Its regularity. The device and method of the present invention can be widely used in the generation and verification of serial codes, and can also be widely used in network application software that generally requires setting a password, even bank accounts or credit cards. Even if bank personnel see the stored check code ’, they cannot reverse the user ’s original password. This paper size applies Chinese National Standards (CNS) from the pit (2i0x2men '% 筇) 427076 A7 B7 V. Description of the invention () All work is good. I ’ve used the practice and the generalization and change, and I ’ve already done the same thing. I ’ve done a good job. Fan Shi Lishi is better. Please cover the cover of the inner Wai Fan I -------- ---- ^-(Please read the notes on the back before filling this page)
ktT -. 經濟部中央橾隼局負工消资合作杜印製 本紙张尺度適用中國國家標準（CNS )八4規格（210Χ29^«Ϊ )ktT-. Du printed by the Central Government Bureau of the Ministry of Economic Affairs, labor and capital cooperation This paper size is applicable to China National Standard (CNS) 8-4 specifications (210 × 29 ^ «Ϊ)