TWI526036B - Data securing method, data securing system for encryption or authentication and data carrier - Google Patents

Description

Data security encryption method, data security system and data carrier for encryption or authentication

The present invention relates to a data processing method, a data processing system, and a data carrier, and more particularly to a data security encryption method, a data security system and a data carrier for encryption or authentication.

With the development of technology, various digital materials can be stored in storage devices. People may store or transmit confidential information in storage devices. Once the storage device is lost, confidential information may be stolen.

Information security is becoming more and more important. The storage device can store the encrypted data without storing the original data, thereby ensuring the security of the information being stolen. If someone wants to retrieve the original material, he must decrypt the encrypted data with a key. Once the hacker steals the key, the hacker can easily retrieve the original data. Currently, Internet and mobile software applications are flooded. If the key is hidden in software or non-volatile memory, the hacker or developer can steal the key. So how to ensure that the key is not stolen It is a big challenge for information security technology.

The present invention relates to a data security encryption method, a data security system for encrypting or authenticating, and a data carrier. The personal identification number and key are not stored in the data carrier. Even if the hacker gets the data carrier, he still can't steal the PIN and the key. Therefore, for data security systems and data carriers, the encrypted data will not be decrypted by the hacker. For the data security authentication method, the hacker cannot pass the authentication.

According to a first aspect of the present invention, a data security encryption method is presented. The data security encryption method includes an encryption program for encrypting a material or performing an Authentication Procedure. The encryption program includes the following steps. Obtain a first PIN. Generate a first random number. A first key is obtained based on the personal identification number and the first random number. According to the first key, a first security checksum is obtained. Store the first random number and part of the first security checksum. Encrypt data or perform an authentication procedure based on the first key.

According to a second aspect of the present invention, a data securing system for encryption is provided. The data security system includes an input unit, a random number generating unit, a key generating unit, a crypto unit, and a storage unit. ). Input unit for input A first personal identification number. The random number generating unit is configured to generate a first random number. The key generation unit is configured to obtain a first key according to the first personal identification code and the first random number. The encryption and decryption unit is configured to obtain a first secure checksum according to the first key and to encrypt a data according to the first key. The storage unit is configured to store a portion of the first security checksum, the first random number, and the encrypted data.

According to a third aspect of the present invention, a data carrier (data) is provided Carrier). The data carrier is used to store and encrypt a data. A first secure checksum is obtained based on a first key, and the data is encrypted according to the first key. The data carrier includes a storage unit. The encryption and decryption unit is configured to obtain a first security checksum according to a first key, and to encrypt the data according to the first key. The storage unit is configured to store a first random number, a partial first security check, and an encrypted data. The first key is obtained based on a first personal identification number and a first random number.

According to a fourth aspect of the present invention, a data securing system for authentication is provided. The data security system includes an input unit, a random number generating unit, a key generating unit, a crypto unit, and a storage unit. ). The input unit is configured to input a first personal identification number. Random number generation The element is used to generate a first random number. The key generation unit is configured to obtain a first key according to the first personal identification code and the first random number. The encryption and decryption unit is configured to perform an authentication procedure according to the first key. The storage unit is configured to store the first random number.

In order to better understand the above and other aspects of the present invention, the preferred embodiments are described below, and in conjunction with the drawings, the detailed description is as follows:

110‧‧‧Input unit

120‧‧‧ random number generating unit

130‧‧‧Key Generation Unit

140‧‧‧Addition and decryption unit

150‧‧‧storage unit

200, 200’‧‧‧ host

210‧‧‧Short-range wireless communication security components

300, 300’ ‧ ‧ data carrier

310‧‧‧ Controller

1000, 1000’, 1000” ‧‧‧ data security system

AD‧‧‧ wants to certify information

AD’‧‧‧ Encrypted Certification Information

D‧‧‧ original information

D’‧‧‧Encrypted material

KEY1‧‧‧ first key

KEY2‧‧‧ second key

PIN1‧‧‧first PIN

PIN2‧‧‧Second Personal Identification Number

PIN3‧‧‧ third PIN

PN‧‧‧ booking code

RN1‧‧‧ first random number

RN2‧‧‧Second chaos

S201~S206, S501~S505, S701~S703‧‧‧ process steps

SC1‧‧‧ first safety check and

SC2‧‧‧Second safety check and

TN‧‧‧ temporary storage code

Figure 1A shows a schematic diagram of a data security system.

Figure 1B depicts another schematic of a data security system.

Figure 1C depicts another schematic diagram of a data security system.

Figure 2 is a flow chart showing the encryption procedure of the data security encryption method.

Figure 3 is a diagram showing the logic of Figure 2.

Fig. 4 is a view showing another embodiment of Fig. 3.

Figure 5 is a flow chart showing the decryption procedure of the data security encryption method.

Figure 6 is a diagram showing the logic diagram of Figure 5.

Figure 7 shows the flow of the personal identification code change procedure of the data security encryption method. Figure

Figure 8 is a diagram showing the logic diagram of Figure 7.

The following is a detailed description of various embodiments, personal identification code (personal identification number) and key (key) are not stored in the information body. Even if the hacker obtains the data carrier, the PIN or key cannot be known. Therefore, the encrypted data will not be decrypted by the hacker. However, the examples are for illustrative purposes only and are not intended to limit the scope of the invention. Further, the drawings in the embodiments are omitted to partially illustrate the technical features of the present invention.

Please refer to Figure 1A, which shows the data security system. System) 1000 schematic diagram. The data security system 1000 is used to encrypt a data or decrypt the encrypted data. The data security system 1000 includes an input unit 110, a random number generating unit 120, a key generating unit 130, a crypto unit 140, and a A storage unit 150.

The input unit 110 is configured to input various materials or information by the user. For example, the input unit 110 can be a touch panel, a keyboard, a scanner, a transmission line connected to one of the input devices, or a circuit having a function of inputting various materials.

The random number generating unit 120 is configured to generate a random number. For example, the random number generating unit 120 may be a chip, a circuit board having a firmware, a storage medium storing one of the array codes, or a circuit having a function of generating random numbers.

The key generation unit 130 is configured to obtain a key by an algorithm. For example, the key generation unit 130 may be a chip, a board with a firmware, a storage medium storing one of the array codes, or having a function of obtaining a key. Circuit.

The encryption and decryption unit 140 is used to encrypt, decrypt or verify data. The encryption/decryption unit 140 performs an authentication procedure using the first key KEY1, such as the terminal and the user end, or the mobile APP and the NFC SE end to perform authentication to confirm whether the first key KEY1 is correct. For example, the encryption and decryption unit 140 can be a chip, a circuit board having a firmware, a storage medium storing one of the array codes, or a circuit having the functions of encrypting, decrypting, or verifying data.

The storage unit 150 is configured to store various materials. For example, the storage unit 150 can be a memory, a scratchpad, or a hard disk.

In FIG. 1A, the input unit 110 and the random number generating unit 120 may be disposed in a host 200 or in a controller 310 of a data carrier 300. The key generation unit 130 and the encryption and decryption unit 140 may be disposed in the controller 310 of the data carrier 300, and the storage unit 150 may be stored in the data carrier 300. For example, the host 200 can be a smart phone, a tablet, a desktop computer, or a server computer. The data carrier 300 can be a USB flash drive, a portable hard drive, or a memory card.

Please refer to FIG. 1B, which shows another schematic diagram of the data security system 1000'. In another embodiment, the input unit 110, the random number generating unit 120, the key generating unit 130, and the encryption and decryption unit 140 may be disposed in the host 200'. The storage unit 150 is disposed within the data carrier 300'. That is, the input unit 110, the random number generating unit 120, the key generating unit 130, and the encryption and decryption unit 140 may be disposed on a host (such as the host 200 in FIG. 1A) or a data carrier (such as the first FIG. Material carrier 300').

Please refer to FIG. 1C, which illustrates another schematic diagram of the data security system 1000. In another embodiment, the random number generating unit 120, the key generating unit 130, the encryption and decryption unit 140, and the storage unit 150 may be disposed in one. Near Field Communication (NCF) Secure Element (SE) 210.

The present invention is not limited to the first to third embodiments. For example, the encryption and decryption unit 140 can be disposed on the data carrier 300, 300' or the host 200, 200'. The algorithm executed by the encryption/decryption unit 140 is not limited to the device stored in the encryption/decryption unit 140. The algorithm executed by the encryption and decryption unit 140 can be stored in the host 200, 200' or the data carrier 300, 300'.

On the other hand, the algorithm executed by the key generation unit 130 is not limited to the device in which the key generation unit 130 is located. The algorithm executed by the key generation unit 130 can be stored in the host 200, 200' or the data carrier 300, 300'.

The above components of the data security system 1000, 1000', 1000" can be described in detail by a data security encryption method. The data security encryption method includes an encryption procedure, a decryption procedure, and a person identification code change. Personal identification number changing procedure.

Please refer to FIG. 2 and FIG. 3, FIG. 2 is a flow chart showing an encryption program of the data security encryption method, and FIG. 3 is a logic diagram of FIG. In step S201, the input unit 110 obtains a first personal identification code (personal) from the user. Identification number) PIN1. The first personal identification number PIN1 can be input by means of key input, clicking a dynamic virtual keyboard on the screen, scanning a one-dimensional barcode or a two-dimensional barcode. For example, the first personal identification number PIN1 is, for example, "0x3132333435363738393a3b3c3d3e3f30".

In step S202, the random number generating unit 120 generates a first random number RN1. The first random number RN1 may be stored in the storage unit 150 of the data carrier 300, 300' or the non-volatile record stored in the host 200, 200'. For example, the first random number RN1 is, for example, "0xC4F87A6290AEE1ACFC1F26083974CE94". In step S202, the first random number RN1 can be generated by the host 200 of FIG. 1A or the data carrier 300.

In step S203, the key generation unit 130 obtains the first key KEY1 based on the first personal identification code PIN1 and the first random number RN1. In step S203, the first key KEY1 can be obtained by a many-to-one algorithm or a one-to-one algorithm. The many-to-one algorithm can be a mutually exclusive or exclusive-OR. The one-to-one algorithm can be a linear function algorithm. Taking a mutually exclusive or logical operation as an example, the first key KEY1 can be obtained by the following equation (1). After calculation, the first key KEY1 is "0xF5CA4956A598D694C5251D34044AF1A4".

PIN1⊕RN1=KEY1..............................(1)

In step S204, the encryption and decryption unit 140 is based on the first key. KEY1 obtains a first secure checksum (SC1). In step S204, the first security check and SC1 may be obtained according to the first key KEY1 and a predetermined number PN (for example, "0X00...00"). The first security check and SC1 can be obtained by a many-to-one algorithm or a one-to-one algorithm. For example, the first security check and SC1 can be obtained by a hash algorithm, a symmetric encryption algorithm, an asymmetric encryption algorithm, or a CRC32 algorithm. For example, the first security check and SC1 can be obtained by the AES128 encryption algorithm of equation (2). After calculation, the first security check and SC1 are "0xED56716F3B78D8741758ED0B34E3A2DD".

SC1=AES_ENC(KEY1, PN)........................(2)

In step S205, the first random number RN1 and a part of the first security check and SC1 are stored in the storage unit 150. In step S205, the first security check and a predetermined number of bytes of SC1 may be stored. For example, the first security check and the first eight characters "ED56716F3B78D874" of SC1 are stored in the storage unit 150.

In step S206, the encryption/decryption unit 140 encrypts the data D into the encrypted data D' according to the first key KEY1, or the encryption/decryption unit 140 encrypts an authentication data AD (Authentication Data) AD according to the first key KEY1. Authentiation Data AD'.

Referring to FIG. 3, the first personal identification code PIN1 and the first key KEY1 are not stored in the storage unit 150. Even if the hacker obtains the data carrier 300, 300', he cannot steal the first personal identification number PIN1 and the first key KEY1. Therefore, the encrypted material D' is not decrypted by the hacker.

Please refer to FIG. 4, which illustrates another embodiment of FIG. In another embodiment, the first key KEY1 can be obtained according to a temporary number TN and a first random number RN1. The temporary storage code TN is obtained based on the first personal identification code PIN1 by a many-to-one algorithm or a one-to-one algorithm. For example, the temporary storage code TN can be obtained by a hash algorithm, or the temporary storage code TN can also be directly equal to the first personal identification code PIN1 (ie, the embodiment of FIG. 3).

Please refer to FIG. 5 and FIG. 6 , FIG. 5 is a flowchart of a decryption program of the data security encryption method, and FIG. 6 is a logic diagram of FIG. 5 . In step S501, the input unit 110 obtains the second personal identification code PIN2 from the user.

In step S502, the key generation unit 130 obtains a second key KEY2 according to the second personal identification code PIN2 and the first random number RN1. In step S503, the second key KEY2 can be obtained by a many-to-one algorithm or a one-to-one algorithm. The many-to-one algorithm is, for example, a mutual exclusion or an exclusive-OR. The one-to-one algorithm is, for example, a linear function algorithm. Taking a mutually exclusive or logical operation as an example, the second key KEY2 can be obtained by equation (3).

KEY2=PIN2⊕RN1..............................(3)

In step S503, the encryption and decryption unit 140 obtains a second security check and SC2 according to the second key KEY2. In step S503, the second security check and SC2 may be obtained according to the second key KEY2 and the predetermined code PN of step S204 (such as "0X00...00"). The second security check and SC2 can be played by many-to-one Algorithm or one-to-many algorithm to get. For example, the second security check and SC2 can be obtained by a hash algorithm, a symmetric encryption algorithm, an asymmetric encryption algorithm, or a CRC32 algorithm. For example, the second security check and SC2 can be obtained by equation (4).

AES_ENC(KEY2,PN)=SC2........................(4)

In step S504, the encryption/decryption unit 140 determines whether part of the second security check and SC2 are the same as the stored partial first security check and SC1. If part of the second security check and SC2 are the same as the stored first security check and SC1, proceed to step S505; if part of the second security check and SC2 are different from the stored first secure check And SC1, then proceeds to step S501.

In step S505, the encryption/decryption unit 140 decrypts the encrypted material D' as the original material D based on the second key KEY2.

Referring to FIG. 6, even if the first personal identification code PIN1 and the first key KEY1 are not stored in the storage unit 150, the user can still retrieve the original data D by inputting the second personal identification number PIN2.

Please refer to FIG. 7 and FIG. 8 , FIG. 7 is a flowchart of a personal identification code change procedure of the data security encryption method, and FIG. 8 is a logic diagram of FIG. 7 . In step S701, the input unit 110 obtains a third personal identification number PIN3 from the user.

In step S702, the key generation unit 130 obtains a second random number RN2 according to the first personal identification code PIN1, the third personal identification number PIN3, and the first random number RN1. In step S203, please refer to equation (5), by a logic operation Or an algorithm, the first key KEY1 can be obtained according to the first personal identification code PIN1 and the first random number RN1. In equation (5), the symbol "@" represents a logical operation or an algorithm. Referring to equation (5), the first key KEY1 can also be obtained according to the third personal identification code PIN3 and the second random number RN2 by the same logical operation or algorithm.

KEY1=PIN1@RN1=PIN3@RN2..................(5)

According to equation (5), the second random number RN2 can be obtained by equation (6).

RN2=PIN1@RN1@PIN3........................(6)

In step S703, the second random number RN2 is stored in the storage unit 150 instead of the first random number RN1. Then, the user can input the third personal identification number PIN3 to retrieve the original data D.

Referring to FIG. 8, when the user changes the first personal identification number PIN1 to the third personal identification number PIN3, the first key KEY1 is not changed. Therefore, the encrypted material D' does not need to be decrypted and encrypted once.

In addition, according to another application, please refer to FIG. 1C. When the mobile APP calls NFC SE or other hardware, the first key KEY1 generated by the method can be used as a key to NFC SE or other hardware authentication.

In conclusion, the present invention has been disclosed in the above preferred embodiments, and is not intended to limit the present invention. Those skilled in the art to which the invention pertains can make various changes and changes without departing from the spirit and scope of the invention. Decoration. Therefore, the scope of protection of the present invention is defined by the scope of the appended claims. Prevail.

S201~S206‧‧‧ Process steps

Claims (40)

A data security encryption method, comprising an encryption procedure for encrypting a data or performing an authentication procedure, the encryption program comprising: obtaining a first personal identification number; generating a first a random number; according to the personal identification number and the first random number, obtaining a first key; according to the first key, obtaining a first security checksum (secure checksum); storing The first random number and the portion of the first security checksum; and encrypting the data or performing the authentication procedure according to the first key. The data security encryption method of claim 1, wherein in the step of generating the first random number, the first random number is generated by a host. The data security encryption method according to claim 1, wherein in the step of generating the first random number, the first random number is generated by a data carrier. The data security encryption method according to claim 1, wherein in the step of obtaining the first key, the first key is performed by a many-to-one algorithm or Obtained by a one-to-one algorithm. For example, the data security encryption method described in claim 1 of the patent scope, wherein In the step of obtaining the first key, the first key is obtained by a mutual exclusion or an exclusive-OR or a linear function algorithm. The data security encryption method of claim 1, wherein in the step of obtaining the first security check, the first security check is based on the first key and a predetermined number (predetermined number) obtain. The data security encryption method according to claim 1, wherein in the step of obtaining the first security check, the first security check is performed by a many-to-one algorithm or a one-to-one algorithm. Obtained. The data security encryption method of claim 1, wherein in the step of storing the first random number and the first security checksum, the first security of a predetermined number of bytes Check and store. The data security encryption method of claim 1, wherein in the step of obtaining the first key, the first key is obtained according to a temporary number and the first random number. The temporary storage code is obtained based on the first personal identification number. The data security encryption method according to claim 1, further comprising a decryption procedure for decrypting the encrypted data, the decrypting program comprising: obtaining a second personal identification number; a second personal identification code and the first random number, obtaining a second key; according to the second key, obtaining a second security checksum; Determining whether the second security check is identical to the first security checksum of the stored portion; and if the portion of the second security check is the same as the first secure check of the stored portion And, the encrypted data is decrypted according to the second key. The data security encryption method according to claim 1, further comprising a personal identification number changing procedure, the personal identification code changing procedure comprising: obtaining a third personal identification number; according to the first individual The identification code, the third personal identification number and the first random number obtain a second random number; and store the second random number to replace the first random number. A data securing system for encrypting, comprising: an inputting unit for inputting a first personal identification number; a random number generating unit; For generating a first random number; a key generating unit for obtaining a first key according to the first personal identification number and the first random number; a crypto unit for obtaining a first secure checksum according to the first key and for encrypting a data according to the first key; a storage unit for storing a portion of the first security checksum, the first random number, and the encrypted data. The data security system for encrypting according to claim 12, wherein the random number generating unit is disposed in a host. The data security system for encrypting as described in claim 12, wherein the random number generating unit is disposed in a data carrier. The data security system for encrypting according to claim 12, wherein the key generation unit is by a many-to-one algorithm or a one-to-one algorithm (one -to-one algorithm) Obtain the first key. The data security system for encrypting according to claim 12, wherein the key generation unit obtains the first according to an exclusive or OR operation or a linear function algorithm. A key. The data security system for encrypting according to claim 12, wherein the encryption and decryption unit obtains the first security checksum according to the first key and a predetermined number. The data security system for encrypting according to claim 12, wherein the encryption and decryption unit obtains the first security checksum by a many-to-one algorithm or a one-to-one algorithm. The data security system for encrypting according to claim 12, wherein the storage unit stores the first security checksum of a predetermined number of bytes. The data security system for encrypting according to claim 12, wherein the key generation unit obtains the first key according to a temporary number and the first random number, and the key is generated. The unit obtains the temporary storage code according to the first personal identification code. The data security system for encrypting, as described in claim 12, is further used for decrypting the encrypted data, wherein the input unit is further used to obtain a second personal identification number; the key generating unit is further used. Obtaining a second key according to the second personal identification code and the first random number; and the encrypting and decrypting unit is further configured to obtain a second security checksum according to the second key, and determine the second part Whether the security check is the same as the stored first security checksum, and if part of the second security check and the first security checksum that is the same as the stored part, decrypt the second key according to the second key The data has been encrypted. The data security system for encrypting as described in claim 12, further for changing the first personal identification number, wherein the input unit is further used to obtain a third personal identification number; and the random number generating unit is further And a second random number is obtained according to the first personal identification code, the third personal identification number, and the first random number to replace the first random number. A data carrier for storing and encrypting a data, the data carrier comprising: an inputting unit for inputting a first personal identification number; a random number generating unit for generating a first random number; a key generating unit for using the first personal identification code and the first random number Obtaining a first key; a crypto unit for obtaining a first secure checksum according to the first key and for encrypting according to the first key (encrypting) And the storage unit; and the storage unit for storing the first random number, the portion of the first security check, and the encrypted data. The data carrier of claim 23, wherein the first random number is generated by a host. The data carrier of claim 23, wherein the first random number is generated by the data carrier. The data carrier of claim 23, wherein the first key is by a many-to-one algorithm or a one-to-one algorithm ) obtained. The data carrier of claim 23, wherein the first key is obtained by a mutual exclusion or an exclusive-OR or a linear function algorithm. The data carrier of claim 23, wherein the encryption and decryption unit obtains the first security checksum by the first key and a predetermined number. The data carrier of claim 23, wherein the encryption and decryption unit obtains the first security checksum by a many-to-one algorithm or a one-to-one algorithm. The data carrier of claim 23, wherein the storage unit stores the first security checksum of a predetermined number of bytes. The data carrier of claim 23, wherein the first key is obtained according to a temporary number and a first random number, the temporary code is according to the first personal identification code obtain. The data carrier as described in claim 23, further for decrypting the encrypted data, wherein the encryption and decryption unit is further configured to obtain a second security checksum according to a second key, and determine the portion Whether the second security check is the same as the stored first security checksum, and if the second security check and the first secure checksum of the stored portion are the same, according to the second gold Key, decrypting the encrypted data; and the second key is obtained according to a second personal identification number and the first random number. The data carrier according to claim 23, wherein the first personal identification code is further used, wherein the random number generating unit is further configured to use the first personal identification code, a third personal identification number, and the first mess. And obtaining a second random number; and the storage unit is further configured to store the second random number to replace the first random number. A data securing system for authentication, The method includes: an input unit (inputting unit) for inputting a first personal identification number; a random number generating unit for generating a first random number; a key generating unit, configured to obtain a first key according to the first personal identification number and the first random number; a crypto unit for receiving the first key The key performs an authentication process; and a storage unit for storing the first random number; wherein the input unit is further used to obtain a third personal identification number; and the random number generating unit is further used And according to the first personal identification code, the third personal identification number, and the first random number, a second random number is obtained to replace the first random number. The data security system for authentication according to claim 34, wherein the random number generating unit is disposed in a host. The data security system for authentication as described in claim 34, wherein the random number generating unit is disposed in a data carrier. A data security system for authentication as described in claim 34, wherein the key generation unit is by a many-to-one algorithm or a one-to-one algorithm (one -to-one algorithm) Obtain the first key. The data security system for certification as described in claim 34 The key generation unit obtains the first key according to a mutual exclusion or an exclusive-OR or a linear function algorithm. The data security system for authentication according to claim 34, wherein the key generation unit obtains the first key according to a temporary number and the first random number, and the key is generated. The unit obtains the temporary storage code according to the first personal identification code. The data security system for authentication as described in claim 34, wherein the first key is used for authentication or encryption and decryption.