TW465213B - Method for performing encryption and decryption via computer and IC card - Google Patents

Abstract

There is provided a method for performing encryption and decryption via computer and IC card. By combining the computer application and IC card technique, i.e., adding password to the user computer, it is able to achieve the purpose of long-distance (or short-distance) user identification. The IC card is stored with specific content. In performing long-distance (or short-distance) communication, the server secretly decodes the specific content in the IC card for being compared with the specific content kept in the server to verify the long-distance (or short-distance) user identification, thereby achieving the purpose of hardware recognition. Also, it is able to encrypt the software in the web site to be downloaded for preventing the software from being intercepted by the unauthorized user.

Description

465213 V. Description of the invention ， [Field of the invention] The present invention is a method of encryption and decryption, especially a method of encryption and decryption through a computer and an IC card. [Background of the Invention] With the continuous development of network technology, server and client (Client) messages are increasingly transmitted, but not all server messages are provided free of charge (for example, developed by manufacturers themselves) , Some teaching software on the website), the server side only needs to identify effective client hardware 'can provide certain services', so it is urgently needed to have a lower cost and a higher degree of encryption' a convenient operation method. The traditional pure, physical σ-dense method is the Interactive Identification method, whose purpose is to identify the user's identity remotely (or at short range). 'This method can be used to solve some important problems, such as Management of employees 'access to buildings, users' access control to remote computers, computers can use it to server on the network, control, and military use can be used as " identity of friends and foes " Traditional user iron identification methods, that is, pass codes (Pssw 〇rd). Because humans are not good at 3C * short, easy to remember "as pass code,% :; therefore-this! Often when you choose to enter the pass code to log in, because the pass code is too remote for the user (or close to it, it is easy to be decrypted) In addition, the number of attacks is limited, and in addition to the upload process, if the passcode is directly used, it will also pose a threat. S is the user: the verifier's secret to the passcode machine, and the verifier must The verifier must share the righteousness in advance and protect the shared secret, so in

_

4652 7 3

There are technical and confidential difficulties in the industry. In the first known technique, a method is used that does not require both parties to share the f secret $ parent interactive user identification—the method ', but it must exist in a so-called secret signing. (Xs ^ Xu Xh i_CLQ ^ Ce n t e r; MC) is responsible for managing all users. Therefore, every user must register at the key signing center, but only if the registration is legal! Person 1 can ^ rabbit ^ some ^ into the recognition, and in the recognition process, the key signing center does not need to be involved. However, in today's encryption method that uses a secret key to sign Shenxin, it is known that using a C card is an ideal choice. Due to its low cost, high encryption, and technical difficulty to read, it is also easy to handle. And the commonly used 1C phone card, 1C electricity bill card, 1C bank card, etc. have never heard of being counterfeited. It can be seen that the degree of encryption is high. [Summary and purpose of the invention] In the context of the above invention, the present invention uses It will also add a password to the user's computer and encrypt the software on the website when it is reached. The purpose of hardware identification between the computer and the IC card is the same as the method proposed by the present invention. When the client accesses the website to request service through the Internet, is the content of the feed code "quote correct? Ask for one more than Laoshan. ---It is necessary to go to the public and use it. In addition, if there are two (or more) phases found on the website, it is not allowed to request fi. The same password, as long as the same password is used when surfing the Internet,

_

The details and technology related to the present invention are described below with reference to the drawings.

465213 V. Description of the invention (3) Below: [Simplified description of the drawing] Fig. 1 is a hardware connection diagram of the present invention; Fig. 2 is a flowchart of the first embodiment of the present invention; and Fig. 3 is a flowchart of the first embodiment of the present invention; A flowchart of a second embodiment of the invention. [Symbol description] 101 1C card 102 i C card reading and writing device 103 RS232 interface 104 Computer-201 Client (Client) 202 Server (Server) Step 2 0 3 Generate private key and send public key Step 2 0 4 Receive the public key 205 1C card Step 2 0 6 Read the IC card password Step 2 0 7 Encrypt to form a ciphertext block Step 2 0 8 Use the private key to decrypt the ciphertext block to obtain the password 1 Step 2 0 9 Read the server information Password 2 in the library Step 2 1 0 Compare whether password 1 and password 2 are the same Step 2 11 Illegal user, refuse to request spring Step 212 Legal user, allow request to step 21 3 Generate DES password Step 2 1 4 Use public key encryption DES password and send it to the server

4 652 1 3

V. Description of the invention ¢ 4) Step 215 Use the private key to solve the DES password Step 21 6 Encrypt the application download software with two DES passwords and pass on the client Step 217 Use the DES password to decrypt the software to get the application ^ Load the software 301 Client Client 302 -f Server Step 3 0 3 Generate random random number Step 3 0 4 Receive and transmit random random number 305 1C card, Step 3 0 6 Logical operation step 3 0 7 Get result 3 Step 3 0 8 Read and transmit the result 3 Step 3 0 9 Logical operation step 3 1 0 Get the result 4 Step 3 1 1 Compare whether the result 3 and the result 4 are the same Step 3 12 Illegal user, refuse the request Step 3 1 3 Legal use Or permission to request [detailed description of invention]

—Combining the application of electric private with IC card technology, it will be determined that the code will be used for the long-distance (or short-range) user identification purpose. Among them, specific content is stored in the IC card. When remote (or near_ #) g-time π 2 is used, it is possible to closely interpret the 1 c card pull through the right, especially compared with the servo: use m to determine the content. " That is, you can verify the test schedule or body knife to achieve the purpose of hardware identification. At the same time, the software on ^ can be encrypted and downloaded again to prevent interception by illegal users. % Net dry

Page 7 465213 V. Description of the invention (5) — " 一 — 丨 · According to the method for encrypting and decrypting through a computer and a 1C card according to the present invention, the hardware connection is as shown in Fig. I. 1 (: Card 101 is inserted into an IC card reading and writing device 102. 'The RS232 interface 103 is connected to the computer 104, so that the Ic card 1 0 1 and the computer 1 0 4 can effectively identify and transmit data.

FIG. 2 is a flowchart of a first embodiment of the present invention. First, a client 201 sends a service request to a server 202, and a private key is generated on the server 202. And transmit the public key (step 203); at this time, after the client (c 1 ient) 2 0 1 receives the public key (step 204), 'read the 1C card password from the 1C card 20 5 (step 20 6), and encrypt to form a ciphertext block (step 207); and use the private key to decrypt the ciphertext block to obtain a password 1 (step 2 0 8) ', and then read out the password 2 in the server database (step 20 9) after 'Compare whether password 1 and password 2 are the same (step 21〇), if they are not the same, it is an illegal user' to reject the request (if the comparison result in step 2 1 1 is a legitimate user, allow the request ( Step 2 1 2). After 'encrypting to form a ciphertext block in step 2 07, DES (Data

Encryption Standard) cipher (step 213). The DES cipher is a block encryption method, that is, a certain size plaintext block or ciphertext block is encrypted or decrypted. And use the public secret to encrypt the DES cipher and send it to the feeder (step 214); at this time on the ceremonial server (Server) 2 02, use the private key to extract the DES cipher (step 215), Then use the DES password to encrypt the application download software and send it to the client (step 2 16). At this time, the user can use the des password to decrypt the software to obtain the application download software (step 2 1 7). The flowchart of the second embodiment of the present invention is shown in FIG. 3. Similarly, the client 301 sends a service request to the server 30

Page 8 465213 V. Description of the invention (6) Random random numbers (+ tablet qfjq) are generated on the server ^ (Server) 202, and the volume label is received on the client (⑴㈣301 receives and transmits random / number = 0) 4) then: The 1C card 305 executes the logical operation (step 306) and obtains the result 3 (step 307). The client (ciient) 301 reads the result 3 and sends it to the server (Se): ver) 202 (step 308) ); When a random random number is generated on the server (Server) 202 (step 303), a logical operation (step 3009) is performed, and a result 4 is obtained (step 3 1 0); then the result 3 is compared with the result 4 is the same (step 3 11), if not, it is an illegal user and the request is rejected (step 3 1 2); if it is the same, then it is a legal user and the request is allowed (step 3 1 3). In addition, if two (or more) same passwords 3 or 4 are found online at the same time, the request cannot be allowed. Although the present invention is disclosed in the above-mentioned preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art can make some changes and decorations without departing from the spirit and scope of the present invention. The scope of protection of this patent shall be determined by the scope of the attached patent application. " of

Page 9

Claims (1)

465213 6. Scope of patent application 1. A method of encryption and freshness through a computer and a 1C card | Fang Lian. The method includes at least the following steps: the client (C1 i en t) to the feeder (Ser ve r) Send a service request j to generate a private secret record on the server side (Server) and send a public key to the client (Cl ient); use the public key to encrypt the $ card password to form a ciphertext peak; use The private key decrypts the ciphertext block to obtain the password 1; reads the server side (Server) _f the secret stone horse in the database; confirms that the password 1 and _ the secret 2 are phase isl: The server end (Ser ν er) responds to the service request;-one generates a DES (Data Encryption Standard) password at each client; at the server, (Server) uses the private key to decrypt The DES secret stone j -----Use the DES password to encrypt the application download & body and pass it to the client (Client); and, use the 忒 DES fork code to decrypt the application download body to get the application The first item in the scope of patent application for Lt describes the method of encrypting and / or gifting through a computer and a 1C card. The above-mentioned IC card is coupled to a 1C card reading and writing device. 465213 VI. Scope of application for patents 4 Scope of solution 4 Encryption through computer and ic card as described in item 1 * 5::: ΐ, the above DES is a one-line encryption algorithm, and the encirclement of item 1 through computer and ic is described. Encrypting the card with = 1 includes the step of finding multiple passwords 13 and rejecting the request. 6. The method of encrypting and deciphering through a computer and a κ card as described in item} of the scope of patent application, where the above is done on the feeder side 〇 Before ^ 〇 responding to the service request step, you can complete the following identification method: "The client (Client) sends the service request to the server, and a random random number is generated on the server (Server) ; The client (Client) receives and sends the random random number to the ic; executes logical operations with the 1C card and obtains result 3; the client (Cl ien〇 reads and sends the knot to the server Server (Server); by the client (Client) to perform the logical operation and get 咭 4; and confirm that the password 3 and the password 4 are the same ^ 7. as described in the scope of patent application 6-through the computer Encryption and decryption with κ card @ 1 Among them, the above 1C card is transferred to an IC card reading and writing device. 8. The method of decrypting an encrypted disk through a computer and an IC card as described in item 7 of the scope of patent application, which makes the above IC card read and write accessible. Through M2 32 interface, Page 11 465213 6. Scope of patent application Connect with the client (C1 i e n t) computer. 9. The method of encrypting and decrypting through a computer and an iC card as described in item 6 of the scope of patent application, further includes the step of rejecting the request when a plurality of passwords 3 are found. 10. The method of encrypting and decrypting through a computer and an iC card as described in item 6 of the scope of the patent application, further includes the step of rejecting the request when a plurality of passwords 4 are found. _ Page 12