TWM449418U - Self-variation type multi-key information transmission security setting device - Google Patents

Description

Autonomous variable multi-group key information transmission security setting device

This author is about a self-changing multi-group key transmission security setting device, especially a key list using a Symmetric Encryption System, especially for multi-units. The keys between the wireless devices and the host itself are available to multiple users.

In recent years, with the development of the Internet and the widespread use of wireless Internet applications, you can encounter resources such as Internet, information, etc. in your life. Based on this, in order to achieve the data integrity, privacy, usability, non-repudiation and access control of a document, it highlights the importance of the security of the file circulation on the network.
Since the emergence of public key cryptography, different public key cryptography methods have been proposed, and their security is based on extremely complex mathematical problems. Nowadays, the common cryptosystem on the network can be divided into symmetric encryption and asymmetric encryption. In view of the fact that the keys used in the cryptosystem (Cryptosystem) are all fixed and fixed, there are concerns about security. If someone is trying to crack, the longer the time, the easier it is to crack the key, so that confidential information flows.
The Symmetric Encryption System (Symmetric Encryption System), as shown in FIG. 16, performs various substitutions and permutations of the plaintext through an encryption algorithm, and the input of the encryption algorithm is a secret key (Secret). Key), the so-called key is a value that is unrelated to plaintext, which is encrypted with a key and plaintext, and can also be used to decrypt the ciphertext. In other words, in the symmetric encryption system, both the encryption and the decryption use the same key (Secret Key), so both sides of the message transmission must have the same key, so in this symmetric encryption system, how to effectively transmit the key Being in the hands of the other party without being intercepted or stolen by the hackers is a very important issue.
As for the Asymmetric Encryption System, as shown in Fig. 17, each of them can generate a pair of keys (keys) called a public key and a private key. The private key must be kept by the individual, and under the asymmetric encryption system, all participants can obtain the public key of each person, and the private key is owned by the individual, so it is not transmitted on the network, and a message To encrypt with the same person's public key, you must use the private key to unlock. Otherwise, the private key encryption must be solved with the public key.
The difference between the above symmetric encryption system and the asymmetric encryption system lies in the transmission of the key and the public key. The symmetric encryption system is established after mutual trust, and the asymmetric encryption system must be transmitted through a trusted third party. Among them, the most common trusted third party is the Certification Authority (CA).
Since the asymmetric encryption system is very common on the network, the process of transmitting the key through the certification center is also a very long-term development, and naturally there is no doubt about its process; however, for the symmetric encryption system, The encryption key and the decryption key are the same key, so how the sender of the information transmits the encryption key to the receiver in a secure manner after encryption, and how to enable the two parties to share the secret The key, in order to facilitate its decryption, is a big problem with this cryptosystem. Therefore, the user can not solve the problem if the user can not use the network of a trusted type in the actual use of the user, with the use of a key list.

The main purpose of this creation is to overcome the above problems encountered in the prior art and to provide a key list with a symmetric encryption system so that the keys of the multi-unit wireless facilities and the host itself can be used multiple times. Sexual users.
A secondary object of the present invention is to provide a device that allows for increased security without compromising the computational complexity of the cryptographic system without adding additional computational complexity.
Another object of the present invention is to provide a device that achieves the integrity, privacy, usability, non-repudiation and access control of a document so that the file can be safely circulated on the network.
It is still another object of the present invention to provide an apparatus for saving the time of one-time key transfer using a key list.
For the above purposes, this creation is a self-changing multi-group key transmission security setting device, which includes:
A control mechanism includes a processing unit, a first host connected to the processing unit, a key list transfer unit connected to the processing unit, a ciphertext transfer unit connected to the processing unit, and a process a second host connected to the unit, an update unit connected to the processing unit, and a communication unit connected to the processing unit, the first host generates at least one set of gold through a random number detection (Random Number Testing) The key is compiled into a list of keys. When the data is transmitted, the data is encrypted by the key list to be Ciphertext, and the key list transmission unit is the first host. The key list and the selected encryption algorithm (Encryption algorithm) are transmitted to the second host, the ciphertext transmitting unit transmits the ciphertext of the first host to the second host, and the second host receives the ciphertext After the ciphertext, the decryption is performed using the list of keys received from the first host to make it plaintext (Plaintext), and the update unit performs a key list. The new action, the original through a list of key algorithms, key changes to become the new list;
A receiving/transmitting mechanism communicates with the communication unit; and an operating mechanism communicates with the receiving/transmitting mechanism.
In the above embodiments of the present creation, the processing unit may be a single wafer, a wafer or a logic circuit.
In the above embodiment of the present creation, the receiving/transmitting mechanism communicates with the communication unit in a wired network manner.
In the above embodiment of the present creation, the receiving/transmitting mechanism communicates with the communication unit in a wireless network manner.
In the above embodiment of the present creation, the operating mechanism may be a mobile communication mechanism, a computer or a PDA.
In the above embodiment of the present creation, the operating mechanism communicates with the receiving/transmitting mechanism in a wired network manner.
In the above embodiment of the present creation, the operating mechanism communicates with the receiving/transmitting mechanism in a wireless network manner.
In the above embodiment of the present creation, the operating mechanism includes an input unit and an output unit.
In the above embodiment of the present creation, the input unit is a keyboard.
In the above embodiment of the present creation, the output unit is a display screen.
In the above embodiment of the present creation, the operating mechanism is a touch screen.
In the above embodiment of the present creation, the random number detection of the key list establishing unit is FIPS PUB 140-1 of the Federal Information Processing Standards Publication, which includes the following test subunits:
A single bit test subunit uses a random number generator to generate 20,000 consecutive 0 or 1 bits, and the total number of 20,000 consecutive bits is defined as X. If 9654 < X < 10346, the random number Pass the test;
a Parker test subunit connected to the single bit test subunit, using a random number generator to generate 20,000 consecutive bits, and cutting the 20000 bits into consecutive 5000 4-bit integers, the integer The value range is 0-15, where f(i) is defined as the number of occurrences of the integer i, and the range of i is 0≤i≤15, and the calculation formula is defined as:

If 1.03<X<57.4, the random number test passes;
A one-bit repeat value test sub-unit, which is connected to the Parker test sub-unit, and defines a length of 1 consecutive or 0 consecutive lengths in consecutive 20,000 random numbers, and the value is accumulated, regardless of the number 1 Or the bit of 0, the length of the bit repeat value must be in the range of the cumulative number for the statistical value, a total of 12 tests including 1 and 0, respectively, 1 and 0 bit repeat value 1 time , 2 times, 3 times, 4 times, 5 times and more than 6 times. If one of the items does not match, the random number test fails; and a long bit repeat value test subunit, which is repeated with the bit The value test subunit connection is defined as the continuous length of 1 in the continuous 20,000 random number bits is 34 or more, or the length of the continuous 0 is 34 or more, and the cumulative value of the long bit is accumulated. Contains 2 tests of 1 and 0. If one of the two statistics is not 0, the random test does not pass.
In the above embodiment, the key list update unit may also be a key list encryption unit, which performs an encryption operation of the key list, encrypts and transmits the original key list.
In the above embodiment of the present creation, the encryption algorithm selected by the key list transmission unit is an Advanced Encryption Standard (AES) algorithm.

Please refer to the "Figure 1 to Figure 7" for the basic architecture diagram of the creation, the schematic diagram of the creation of the random number detection unit, the schematic diagram of the key list of the creation, and the key list transmission of the creation. The schematic diagram, the ciphertext transmission diagram of the creation, the ciphertext decryption diagram of the creation, and the update diagram of the key list of the creation. As shown in the figure: This creation is a self-changing multi-group key transmission security setting device, which uses a Key List with a Symmetric Encryption System to enable multi-unit wireless facilities. The one-time use key between the user and the host itself can be converted into multiple users. The device comprises at least a control mechanism 1, a receiving/transmitting mechanism 2 and an operating mechanism 3.
The control mechanism 1 mentioned above comprises a processing unit 10, a first host 11 connected to the processing unit 10, a key list transfer unit 12 connected to the processing unit 10, and a processing unit 10 connected thereto. The ciphertext transmitting unit 13, a second host 14 connected to the processing unit 10, a key list updating unit 15 connected to the processing unit 10, and a communication unit 16 connected to the processing unit 10. The processing unit 10 can be a single chip, a wafer or a logic circuit. The first host 11 generates at least one set of keys through a random number testing unit 111 and compiles a set of gold. Key list 4, as shown in Figure 2. When transmitting a data, the data is encrypted using the key list 4 to make it a Ciphertext; the key list transmitting unit 12 is to select the key list 4 of the first host 11 and select The encryption algorithm (Encryption algorithm) is transmitted to the second host 14, as shown in FIG. 3; the ciphertext transmitting unit 13 transmits the ciphertext of the first host 11 to the second host 14, such as the fourth The second host 14 receives the ciphertext and decrypts it using the key list 4 received from the first host 11 to make it plaintext (Plaintext), as shown in FIG. The key list update unit 15 performs an update operation of the key list, and changes the original key list 4 to a new key list 4a by an algorithm, as shown in FIG.
The receiving/transmitting mechanism 2 communicates with the communication unit 16 in the form of a wired network or a wireless network (the present invention uses a wireless network as an embodiment).
The operating mechanism 3 communicates with the receiving/transmitting mechanism 2 in the form of a wired network or a wireless network (the present invention uses a wireless network as an embodiment), and the operating mechanism 3 includes at least one input unit. And an output unit 32, wherein the input unit 31 is a keyboard, and the output unit 32 is a display screen. The operating mechanism 2 can also be a touch screen (not shown). In a specific embodiment, the operating mechanism 2 can be a mobile communication device, a computer or a PDA. If so, a new self-changing multi-group key information transmission security setting device is constructed by the above device.
The above-mentioned random number detecting unit 111 is FIPS PUB 140-1, which is a Security Information for Standards Publications (Security Information for Cryptographic Modules), which includes a single bit tester. The unit 1111, a hack test subunit 1112, a one-bit repeat value test sub-unit 1113, and a long-bit repeat value test sub-unit 1114, wherein:
The single bit test subunit 1111 uses a random number generator to generate 20,000 consecutive 0 or 1 bits, and defines the total number of 20,000 consecutive bits to be X. If 9654 < X < 10346, the random number The test passed.
The Parker test sub-unit 1112 uses a random number generator to generate 20,000 consecutive bits, and cuts the 20,000 bits into consecutive 5000 4-bit integers, the integer value ranging from 0 to 15, wherein f is defined (i) is the number of occurrences of the integer i, and the range of i is 0 ≤ i ≤ 15, and the calculation formula is defined as:

If 1.03 < X < 57.4, the random number test passes.
The bit repeat value test sub-unit 113 defines a length of 1 consecutive or 0 consecutive lengths in consecutive 20,000 random number bits, and the value is accumulated statistically, regardless of the bit of the system 1 or the system 0, the bit thereof The length of the repeated value must be in accordance with the range of the cumulative number shown in Table 1 (using the study of the chaotic stream cipher using logical mapping), which includes 12 tests of 1 and 0, respectively. The 1 and 0 bit bits are repeated once, twice, 3 times, 4 times, 5 times, and 6 times. If one of them is not met, the random number test will not pass.

The long bit repeat value test sub-unit 114 defines that the length of consecutive 1s in consecutive 20,000 random numbers is 34 or more, or the length of continuous 0 is 34 or more, and the long bit is statistically accumulated. The duplicate value contains a total of 1 and 0 of the test. If one of the two statistics is not 0, the random test does not pass.
In total, the FIPS PUB 140-1 has a total of 16 random numbers, and 16 items are all passed.
In view of the long-standing problems in the key management and transmission of cryptosystems, two unit solutions are provided in this creation. One is the key list encryption unit; the other is the key list update unit, which is shown in Figure 1.
The former unit is used to encrypt the original key list and transmit it. The unit performs two encryption and decryption of the cryptosystem, based on the act of encrypting. Therefore, when a third party steals the ciphertext, the information must be obtained by cracking. Among them, because this method uses two cryptosystems to calculate, so that its complex computing power can be upgraded to a higher level, it is more suitable for the computing processor with stronger computing power, and there is a limitation of the scope of use.
The latter unit is used to change the key list algorithm so that it is different from the original key list, and the new key list is used for encryption and decryption. Suppose, in the same situation today, the conditions of both parties are the same, with the same algorithm, the same encryption and decryption method and the same key list, and then assume that the algorithm used today is the input value of the output value plus 1, The change caused by the key is shown in Table 2. In this way, the list of stolen keys can be made an invalid list.




Please refer to the figure "8th to 10th", which is a schematic diagram of the random number detection for the single bit test subunit of the creation, the random number detection of the Parker test subunit of the creation, and the creation of the present The bit repeat value test subunit performs a random number detection diagram. As shown in the figure: In a preferred embodiment, the experiment of random number detection is performed using Matlab mathematical software.
As shown in Fig. 8, a comparison experiment of random number detection is performed by a single bit test subunit of the key list creation unit, and the result is 9856, showing the condition of passing 9654 < X < 10346.
As shown in Fig. 9, the comparison experiment of random number detection is performed by the Parker test subunit of the key list creation unit, and the result is 11.4048, which shows the condition of passing 1.03 < X < 57.4.
As shown in Fig. 10, the comparison test of the random number detection by the bit repeating test subunit of the key list building unit is performed, and the data indicates that the first and second columns are duplicates of 1-bit and 0-bit bits, respectively. Value, first behavior repeated value 1 time, second behavior repeated value 2 times, third behavior repeated value 3 times, fourth behavior repeated value 4 times, fifth behavior repeated value 5 times, and sixth behavior repeated value 6 times or more . According to the results, the conditions in Table 1 are met.
Please refer to the "11th to 15th" diagrams, which are the schematic diagrams for clear text selection of AES encryption for this creation, the key list of AES encryption for this creation, and the ciphertext acquisition for AES encryption. This creation is a schematic diagram of the clear text acquisition of AES decryption and the new key list of the creation of the key list change. As shown in the figure: This embodiment then enters the encryption and decryption phase, and the encryption algorithm used is based on the Advanced Encryption Standard (AES) algorithm. First, the plaintext is selected as "YDU", as shown in Fig. 11; then, the key list is generated. In this embodiment, 10 random numbers are randomly selected from 0 to 255, thereby composing a list of keys, and randomly from 10 random numbers. Select one as the encryption key, as shown in Figure 12; encrypt the plaintext "YDU" to obtain the ciphertext, as shown in Figure 13; use the ciphertext and key list to perform the decryption action to obtain the plain text "YDU", as shown in Figure 14; finally perform the action of changing the key list, and assign the original key list to the algorithm to get a new key list, as shown in Figure 15.
The self-changing multi-group key information transmission security setting device of the creation is confirmed by the above test, and the data integrity, privacy, usability, non-repudiation and access control of a document can be achieved, so that the file can be safely Circulated on the Internet.
Accordingly, the author proposes a device that allows security to be improved without damaging the original architecture of the cryptosystem without adding additional computational complexity. Mainly, the key list is matched with the algorithm so that the original used key can be actively changed on the server, and multiple groups can be generated at one time, so that the service life of the key list is further extended on the cryptosystem, so the gold is used. The key list can save the time of one-time key transfer, in addition to saving the original time, or destroying the architecture of the original symmetric encryption system. Whenever you want to transfer data, you only need to update the algorithm, you can use the algorithm to make the key change and update the key list, so as to increase the difficulty of each crack.
In this article, the term "key list" will use a set of keys to generate more than one set of keys in advance, and make a list, which means that the key must be transmitted once every time you need to use it. If you use the concept of the key list, it can be used once for a long time or even for a lifetime. However, it is necessary to pass the random number detection before the key list is generated.
In summary, this creation is a self-changing multi-group key transmission security setting device, which can effectively improve various shortcomings of the application. The key list is matched with the algorithm so that the original used key can be on the server. Actively change, and can generate multiple groups at a time, so that the service life of the key list is further extended on the cryptosystem. Each time data transmission is performed, only the algorithm is updated, and the algorithm can be used to make the key change and update. The list of keys, in order to increase the difficulty of each crack, to achieve a document of data integrity, privacy, usability, non-repudiation and access control, so that documents can be safely circulated on the network, thereby enabling The creation of this creation can be more progressive, more practical, and more in line with the needs of the user. It has indeed met the requirements of the new patent application, and has filed a patent application according to law.
However, the above descriptions are only preferred embodiments of the present invention, and the scope of the present invention cannot be limited by this; therefore, the simple equivalent changes and modifications made by the scope of the patent application and the contents of the new manual are All should remain within the scope of this creation patent.

1‧‧‧Control agency 10‧‧‧Processing unit 11‧‧‧First host 111‧‧‧ Random number detection unit 1111‧‧‧ Single bit test subunit 1112‧‧‧Puque test subunit 1113‧‧ Bit Repeat Value Test Subunit 1114‧‧‧Long Bit Repeat Value Test Subunit 12.‧‧ Key Key Transfer Unit 13‧‧‧Cipher Transfer Unit 14‧‧‧Second Host 15‧‧‧ Key List Update unit 16‧‧‧Communication unit 2‧‧‧Receiving/transporting mechanism 3‧‧‧Operating mechanism 31‧‧‧ Input unit 32‧‧‧ Output unit 4, 4a‧‧‧ key list

Figure 1 is a schematic diagram of the basic structure of this creation.
Figure 2 is a schematic diagram of the architecture of the random number detection unit.
Figure 3 is a schematic diagram of the creation of a key list for this creation.
Figure 4 is a schematic diagram of the key list transfer of this creation.
Figure 5 is a schematic diagram of the ciphertext transmission of the present invention, which is a schematic diagram of the ciphertext decryption of the present creation.
Figure 7 is a schematic diagram of the update of the key list of the creation.
Figure 8 is a schematic diagram of random number detection by a single bit test subunit of the present creation.
Figure 9 is a schematic diagram of random number detection by the Parker test subunit of the present creation.
Figure 10 is a schematic diagram of the random number detection subunit of the present invention for random number detection.
Figure 11 is a schematic diagram of the plain text selection for AES encryption in this creation.
Figure 12 is a schematic diagram of the key list of AES encryption in this creation.
Figure 13 is a schematic diagram of the ciphertext obtained by AES encryption in this creation.
Figure 14 is a schematic diagram of the plaintext obtained by AES decryption.
Figure 15 is a schematic diagram of the new key list for the change of the key list in this creation.
Figure 16 is a schematic diagram of a conventional symmetric encryption system.
Figure 17, is a schematic diagram of a conventional asymmetric encryption system.

1‧‧‧Control agency

10‧‧‧Processing unit

11‧‧‧First host

111‧‧‧ Random number detection unit

12‧‧‧Key List Transfer Unit

13‧‧‧ ciphertext transmission unit

14‧‧‧Second host

15‧‧‧Key List Update Unit

16‧‧‧Communication unit

2‧‧‧Receiving/transporting agency

3‧‧‧Operator

31‧‧‧ Input unit

32‧‧‧Output unit

Claims (14)

The invention relates to a self-changing multi-group key information transmission security setting device, which provides a multi-unit wireless facility and a key to the host itself for multiple users, including:
A control mechanism includes a processing unit, a first host connected to the processing unit, a key list transfer unit connected to the processing unit, a ciphertext transfer unit connected to the processing unit, and a process a second host connected to the unit, a key list update unit connected to the processing unit, and a communication unit connected to the processing unit, wherein the first host generates at least one group through a random number detection (Random Number Testing) The above key is compiled into a list of keys. When transmitting a data, the data is encrypted using the key list to make it a ciphertext, and the key list transmission unit The first host key list and the selected encryption algorithm are transmitted to the second host, and the ciphertext transmitting unit transmits the ciphertext of the first host to the second host, and the second host After receiving the ciphertext, the system uses the list of keys received from the first host to decrypt it, so that it becomes plaintext, and the key list update unit Updated list of the key action, the original through a list of key algorithms, key changes to become the new list;
A receiving/transmitting mechanism communicates with the communication unit; and an operating mechanism communicates with the receiving/transmitting mechanism. The self-changing multi-group key information transmission security setting device according to claim 1, wherein the processing unit can be a single chip, a wafer or a logic circuit. The self-changing multi-group key information transmission security setting device according to the first aspect of the patent application scope, wherein the receiving/transmitting mechanism communicates with the communication unit by means of a wired network. The self-changing multi-group key information transmission security setting device according to the first aspect of the patent application scope, wherein the receiving/transmitting mechanism communicates with the communication unit by means of a wireless network. The self-changing multi-group key information transmission security setting device according to the first aspect of the patent application scope, wherein the operation mechanism can be a mobile communication mechanism, a computer or a PDA. According to the scope of claim 1, the self-changing multi-group key information transmission security setting device, wherein the operating mechanism communicates with the receiving/transmitting mechanism by means of a wired network. The self-changing multi-group key information transmission security setting device according to claim 1, wherein the operating mechanism communicates with the receiving/transmitting mechanism in a wireless network manner. The self-changing multi-group key information transmission security setting device according to claim 1, wherein the operating mechanism comprises an input unit and an output unit. The self-changing multi-group key information transmission security setting device according to Item 8 of the patent application scope, wherein the input unit is a keyboard. The self-changing multi-group key information transmission security setting device according to Item 8 of the patent application scope, wherein the output unit is a display screen. The self-changing multi-group key information transmission security setting device according to the first aspect of the patent application scope, wherein the operation mechanism is a touch screen. The self-changing multi-group key information transmission security setting device according to claim 1 of the patent application scope, wherein the random number detection system is FIPS PUB 140-1 of the Federal Information Processing Standards Publication (Federal Information Processing Standards Publication). , which includes the following test subunits:
A single bit test subunit uses a random number generator to generate 20,000 consecutive 0 or 1 bits, and the total number of 20,000 consecutive bits is defined as X. If 9654 < X < 10346, the random number Pass the test;
A Parker test subunit uses a random number generator to generate 20,000 consecutive bits, and the 20,000 bits are cut into contiguous 5000 4-bit integers, the integer value ranging from 0 to 15, wherein f (i) is the number of occurrences of the integer i, and the range of i is 0 ≤ i ≤ 15, and the calculation formula is defined as:
,
If 1.03<X<57.4, the random number test passes;
A one-bit repeat value test sub-unit defines the length of consecutive 1s or consecutive 0s in consecutive 20,000 random numbers, and the value is accumulated by statistics, regardless of the bit of system 1 or system 0. The length of the repeated value must be in the range of the cumulative number for the statistical value. The total number of tests including 1 and 0 is 12, and the repeat value of the 1 and 0 bits is 1 time, 2 times, 3 times, 4 times. 5 times and more than 6 times, if this one is not met, the random number test does not pass; and a long bit repeat value test subunit defines the length of consecutive 1 in consecutive 20,000 random numbers. If the length is 34 or more, or the length of the continuous 0 is 34 or more, the cumulative value of the long bit is cumulatively accumulated, and the total of 1 and 0 are tested. If one of the two statistics is not 0, Then the random number test does not pass. The self-changing multi-group key information transmission security setting device according to the first aspect of the patent application scope, wherein the key list update unit may also be a key list encryption unit, which performs an encryption operation of the key list, and The original key list is encrypted and transmitted. The self-changing multi-group key information transmission security setting device according to the first aspect of the patent application scope, wherein the encryption algorithm is an Advanced Encryption Standard (AES) algorithm.