WO2016076487A1

WO2016076487A1 - Usb security device having fingerprint sensor and insertable smart card and memory card, and security method thereof

Info

Publication number: WO2016076487A1
Application number: PCT/KR2015/003820
Authority: WO
Inventors: 김승훈
Original assignee: 김승훈
Priority date: 2014-11-10
Filing date: 2015-04-16
Publication date: 2016-05-19
Also published as: KR101583514B1

Abstract

A security method of a USB security device having a fingerprint sensor for encoding and storing data of an external device and decoding and outputting the encoded data, according to the present invention, comprises the steps of: (a) comparing smart card and memory card IDs, inputted from an external source, with an ID stored in the smart card and an ID stored in the memory card so as to authenticate the same when an external smart card and memory card are inserted into slots by a device controller; (b) enabling the device controller to compare a password inputted from an external device and a password stored in the smart card, so as to authenticate the same; (c) authenticating, by the USB security device, fingerprint information received from the fingerprint sensor and activating the USB security device; (d) transmitting, by the device controller, input data of the external device to the smart card; (e) generating, by the smart card, a key by a key generation module embedded in the smart card; (f) encoding, by the smart card, received data by using the generated key; (g) transmitting, by the device controller, the data encoded by the smart card to the memory card so as to store the encoded data; (h) enabling, by the device controller, the smart card to decode the encoded data stored in the memory card; and (i) transmitting, by the device controller, the decoded data to the external device.

Description

USS Security Device with Fingerprint Sensor, Smart Card and Memory Card and Security Method

The present invention relates to a data security device that can securely store data on a storage medium. Specifically, after connecting a USB security device to a first PC, an ID and password stored in a smart card and a memory card of the USB security device are verified, and a fingerprint sensor. The other functions of the USB security device will not work until the fingerprints of the card are matched. USS security device and its security method that can prevent USB device data from being hacked by encrypting and storing the data of PC in memory inside USB security device and decrypting and outputting encrypted data when reading data from USB device It is about. In addition, the USB security device and the security method of the present invention stores the fingerprint information of the USB holder in the smart card, and if the device controller determines whether the fingerprint information received from the fingerprint sensor and the fingerprint information stored in the smart card, and match the PC When the data received from the data is encrypted and stored in the memory card and the data stored in the memory card to the PC characterized in that to further enhance the security by decrypting the encrypted data from the smart card to output.

In general, if the USB memory device requires security, the data encryption module is stored in the PC to encrypt the data on the PC and then transferred to the USB memory device for use, or by installing the microcomputer (MCU) in the USB device through the firmware inside the microcomputer. Encrypt and store the data.

Data encryption methods of the USB memory device include DES (Data Encryption Standard), AES (Advanced Encryption Standard), SEED, and RSA Public Key Cryptosystem.

This conventional technique is shown in FIG. The method using the software of the existing PC has a kit value for encryption and decryption is embedded in the software module 100 itself or RAM 200 of the PC in which the software module is operated is easily exposed to hacking. In addition, in the method using the microcomputer 300, the firmware of the microcomputer performs the encryption / decryption function, but the key value may be exposed by the hacking method known by the microcomputer itself.

In addition, these USB data devices can be used even if they are not themselves. In addition, Korean Patent Application No. 10-2010-106108 filed by the present applicant discloses a USB security device in which a smart card unit and a memory are embedded in a USB security device. The USB security device stores all security files that can be stored in a secure memory such as a large project file / image / photo / security file, and if the memory capacity is exceeded, the existing USB security memory needs to be repurchased. In the case of purchasing a secure memory, there is a problem that is inconvenient to manage. In addition, the USB security device having a built-in smart card and memory unit as described above has a problem that the security is somewhat low.

2 is a prior art related to the present invention is disclosed in Republic of Korea Patent No. 10-1256373 (2013. 04. 25. announcement). In FIG. 2, a USB device equipped with a conventional smart card and a memory card is operated in conjunction with a PC 400 that inputs or outputs data and displays data. A memory card slot 319 for mounting a card type memory card 330 for storing data, a SIM type smart card 340 for encryption and decryption, and a smart card SIM slot 320 for attaching and detaching the smart card. And it is configured to include a device controller 310 responsible for data interface control between the components. The card type memory card 330 is composed of an SD memory (Serial Data Memory) or a flash memory (Flash Memory) to receive, store and output encrypted data, and is divided into a general memory area and a secure memory area. It can be. In addition, in the general memory area, the ID assigned by the developer and a simple program for activating the secure memory area are stored. When the program is executed, a screen for inputting a password is displayed on the PC 400 and the input password and After verifying and comparing with the password stored in the smart card 340, if the security memory area 332 is activated and can be used on the PC as a conventional general memory, and also to read or write data on the memory card Will be. In addition, if the user can save the password change screen and the password is exposed, the password can be changed.The password input screen and the change screen can be configured with a simple UI (User Interface). Detailed description will be omitted. In addition, the encrypted data is stored in the secure memory area, and the stored data is stored after being encrypted through the smart card 340. Also, the stored data is decrypted by the smart card 340 and then an external device PC. Will be sent to (400). In addition, the smart card 340 is configured to provide encrypted data to the memory card 330, receive the encrypted data and decrypt and output it again, and to activate the secure memory area so that the USB security device 300 can be used. It is configured to store a password for doing so. To this end, the smart card 340 encrypts and decrypts data using a user authentication unit embedded with an ID and password, an application unit for executing an encryption algorithm, a key generator for generating an encryption key, and an encryption and decryption key. It can be configured to include a wealth.

The conventional technology as shown in FIG. 1 is a USB security device having a built-in smart card and a memory unit, which has a problem of low security. The conventional technology as shown in FIG. 2 separates the smart card and the memory card from the USB security device. It is configured, but there is a problem that can not determine whether the owner of the USB security device is using. In order to solve this problem, the present invention is attached to or detached from the USB security device to enhance the security of the smart card that is connected to a USB device that people can generally carry in order to prevent the use and hacking of others in the encryption and decryption of data. After the authentication process between the smart card and the memory card can be performed, the data generated by the key generation function of the smart card module can be encrypted or decrypted and stored, and by attaching a fingerprint sensor for user authentication. By confirming that the user is himself, the data security of the memory card is further enhanced.

In order to achieve the above object, the USB security device of the present invention receives IDs of a smart card and a memory card and transmits them to the device controller for authentication, and receives a password of the smart card to be transmitted to the device controller to verify the data. After verifying the ID given from the developer by installing a smart card in the smart card slot and an external device that transmits and receives data from the device controller, the received data is encrypted and output or the received encrypted data is decrypted. A SIM type card that outputs a smart card that can store fingerprint information, and when a memory card is inserted into the memory card slot, the ID assigned by the developer is verified and then encrypted data is received from the smart card and stored. Note A fingerprint sensor that generates a card, fingerprint information of the holder, converts the digital signal into a digital signal, and outputs the data, receives data input from an external device, transmits the data to the smart card, and transmits encrypted data received from the smart card to the memory card. Receive the encrypted data stored in the memory card, transmit the data to the smart card, decrypt the data, and transmit the decrypted data to the external device, and authenticate the ID of the smart card and the memory card. And a device controller for verifying the password stored in the smart card, verifying the fingerprint information received from the fingerprint sensor and controlling the smart card and the memory card according to the verification result. ID assignment of the smart card or memory card in the above can be issued through the homepage of the developer.

The device controller stores an ID and a password in an external smart card and stores the ID in a memory card. After the ID authentication of the smart card and the memory card is performed, the device controller stores the ID and password in the smart card and the external device. USB security can be verified by verifying whether the password matches the input password, and again determining whether the fingerprint information input from the fingerprint sensor matches the fingerprint information stored in the smart card, and then enabling other functions of the smart card to encrypt and decrypt the data. The device is not available to others, and if you forget your USB security device, there is no risk of the data stored on the memory card being stolen.

In addition, the security method of the USB security device having a fingerprint sensor for encrypting, storing, decrypting and outputting the data of the external device of the present invention for achieving the above object is (a) the device controller uses an external smart card and memory card Inserting into the slot and comparing the smart card and memory card ID input from the external device with the ID stored in the smart card and the ID stored in the memory card, (b) the device controller is a password input from the external device and the smart card (C) authenticating fingerprint information received from the fingerprint sensor and activating the USB security device; and (d) the device controller using the smart card to input data from the external device. (E) key generation module mounted on the smart card Generating a key by (f) encrypting the data received by the smart card by the generated key, (g) the device controller transferring the data encrypted by the smart card to a memory card Storing the encrypted data stored in the memory card in the smart card; and (i) transmitting the decrypted data to an external device. Can be.

As described above, according to the USB security device and the security method including the fingerprint sensor of the present invention, the encryption module is directly mounted in the external smart card of the USB device, and the data is encrypted, stored, decrypted and outputted, thereby completely protecting from hacking. You can do this,

In addition, by utilizing the method of authenticating the fingerprint information of the holder and verifying the password, it is impossible for others to use the USB security device, and the use of the pluggable memory card prevents the data from being stolen even if the USB security device is lost. It works.

1 is a view illustrating a USB security device with a built-in encryption module of the prior art,

2 is a block diagram of the USS security device having a conventional smart card and a memory card,

3 is a block diagram of a USB security device having a fingerprint sensor of the present invention;

Figure 4a is a smart card configuration applied to the present invention,

4B is a configuration diagram of a memory card applied to the present invention;

5 is a flowchart for changing an ID stored in a smart card and a memory card of the present invention;

6 is a flowchart for changing a password embedded in the USB security device of the present invention;

And,

7 is a flowchart illustrating a method of transmitting / receiving data with an external device by a USB security device having a fingerprint sensor according to the present invention.

The USS security device having a fingerprint sensor, a smart card, and a memory card of the present invention having the above object and a security method thereof will be described with reference to FIGS. 3 to 7.

3 is a block diagram of a USB security device with a fingerprint sensor according to an embodiment of the present invention, as shown in the US (USB; Universal Serial Bus) security device with a fingerprint sensor of the present invention ( 300 is a PC 400 that receives the ID of the smart card and the memory card and transmits to the device controller and receives the password of the smart card to the device controller and inputs or outputs the data to the device controller, and is linked with the PC A memory card slot 319 for operating a card type memory card 330 for storing encrypted data, and a SIM type smart card 340 that is responsible for decrypting data and storing ID, password, and fingerprint information. ), A memory card 330 that stores an ID, receives and stores encrypted data, and outputs encrypted data, and generates fingerprint information. The fingerprint sensor 500 converts the signal to a device controller and transmits it to the device controller, and the smart card SIM slot 320 for attaching and detaching the smart card and the device controller 310 for data interface control between the components. Will be.

The card type memory card 330 is composed of an SD memory (Serial Data Memory) or a flash memory (Flash Memory) to receive, store and output encrypted data, and is divided into a general memory area and a secure memory area. Can be.

In the general memory area, an ID assigned by a developer and a simple program for activating the secure memory area are stored. When the program is executed, the screen for inputting the password is displayed on the PC 400, and the input password is compared with the password stored in the smart card 340. After verification and matching, the screen for inputting the fingerprint information is again displayed on the PC 400. If the fingerprint information received from the fingerprint sensor 500 and the fingerprint information stored in the smart card are matched with each other, the secure memory area 332 can be activated to be used on a PC as a conventional general memory. Can read or write data

In addition, the screen for changing the password can be stored, and the password can be configured to be changed if it is determined that the password has been exposed.

Since the password input screen and the change screen can be configured with a simple UI (User Interface), detailed description thereof will be omitted.

In the secure memory area, the encrypted data is stored, and the stored data is stored after being encrypted through the smart card 340. Also, the stored data is decrypted by the smart card 340 and then the external device PC 400 Will be sent).

The smart card 340 is configured to provide encrypted data to the memory card 330, receive the encrypted data, and decrypt and output the encrypted data again. The smart card 340 enables the USB security device 300 to be used by activating a secure memory area. Configured to store password and fingerprint information.

To this end, the smart card 340 encrypts and decrypts data using a user authentication unit embedded with ID, password, and fingerprint information, an application unit for executing an encryption algorithm, a key generator for generating an encryption key, and an encryption / decryption key. It may be configured to include an encryption and decryption unit.

4 (a) is a configuration diagram of a smart card of the SIM type applied to the present invention and Figure 4 (b) is a configuration diagram of a memory card applied to the present invention. In FIG. 4A, the smart card 340 includes a user authentication unit 341 having an ID, a password, and fingerprint information, an application unit 342 for executing an encryption algorithm, and a key generation unit for generating an encryption / decryption key. 344, which may be configured to include an encryption / decryption unit 343 that encrypts and decrypts data using an encryption / decryption key. The memory card 330 is divided into a general memory 331 and a secure memory 332. It shows what you can do. The user authentication unit 341 is configured to perform user authentication, credit card, password authentication and fingerprint information authentication of electronic money, and is particularly configured to store password and fingerprint information for activating a secure memory area.

The application unit 342 is configured to generate a key by the encryption module mounted therein, encrypt the data input from the PC 400 through the device controller 310, and transmit the data to the memory card 330 for storage. When outputting data, the encrypted data stored in the memory card 330 is loaded, decrypted, and transmitted to the device controller 310 by the device controller 310 as a path and outputted to the PC 400.

The encryption algorithm installed in the application unit 342 includes 128-bit block encryption algorithm (SEED), a national standard, DES (Data Encryption Standard), AES (Advanced Encryption Standard), ARIA, and RSA (Rivest Shamir Adleman). Algorithms such as encryption and challenge / response authentication mechanism (CRAM) are installed, and these algorithms can be selectively supported, and since they generate and store keys by encryption algorithms themselves, Not only does not have to be hacked, it is possible to ensure the security of the data input and output to the USB security device 300 and the PC 400 by the built-in encryption algorithm and key generation. The data security as described above is based on the application and the application can be updated wirelessly using the wireless function of the smart card itself and the method of updating through the device device in the USB port.

DES, ARIA, and SEED are symmetric key secret key ciphers with the same encryption key and decryption key, and RSA is an asymmetric key public key cipher with different encryption key and decryption key.

The key generation unit 344 generates a key to be decrypted by an algorithm performed by the application unit 342 so as to be used to generate a key value for decrypting a file, and generates the data received by the encryption / decryption unit 343. Configured to encrypt or decrypt.

In addition, the smart card 340 may be operated only after the authentication is performed through the ID in the controller 318 and after the authentication of the user is performed through verification of the password and fingerprint information again.

The device controller 310 drives the system to communicate with the external device PC 400 to encrypt and store the input data, and decrypts and outputs the data stored in the memory card. After the ID is stored in the smart card 340 and the memory card 330, the password input screen is displayed on the PC 400, the password is matched, and the fingerprint information is input and checked for a match. Through the USB security device 300 is configured to be activated. The smart card and memory card ID authentication is to authenticate by applying a challenge response method (Challenge / Response) to generate a random number and mutual authentication, the algorithm of challenge response authentication to authenticate the ID of the smart card is an application The challenge response authentication algorithm of the memory card is stored in the secure memory 332 and then activated.

To this end, the device controller 310 may include a USB interface 312 for USB communication with the PC 400, a smart card interface 314 for interfacing with the smart card 340, and a memory card 330 for data interface. A memory interface 316, a USB interface 312, a smart card interface 314, and a control unit 318 for controlling the memory card interface 316. The communication with the smart card 340 is performed by USB communication or ISO. Communication can be made by the 7816.

Specifically, the control unit 318 when the USB security device 300 of the present invention is mounted on the PC 400 activates the challenge response authentication algorithm stored in the smart card 340 application unit 332 to authenticate the ID, and also general After activation of the challenge response authentication algorithm stored in the secure memory 332 by activating the program stored in the memory 331 to go through the ID authentication process of the memory card 330, the secure memory 332 stored in the general memory 331 When the program for activating the area is executed, the screen for inputting the password is controlled to be displayed on the PC 400, and the password input from the PC 400 and the password stored in the user authentication unit 341 of the smart card 340. Compared with the control, if the match is found, the control unit displays the fingerprint information input message on the PC 400 again, and the fingerprint information and the smart card 340 input to the device controller 310 are controlled. When the fingerprint information stored in the user authentication unit 341 is compared and matched, the secure memory area 332 is activated to use the same as the existing general memory.

Thereafter, the key generation unit 344 executes an encryption program to encrypt the data input by the automatically generated key in the encryption unit 343, and the encrypted data is secured through the smart card interface 314 and the memory interface 316. To be stored in the memory area 332. In addition, even when the encrypted data stored in the secure memory area 332 is outputted, the key generation unit 334 generates a key for decryption by decrypting the data through the memory interface 316 and the smart card interface 314. After the output to the PC 400 through the USB interface 312 is to ensure the security of the data input and output to the PC 400 and the USB security device 300.

The key value generated by the key generation unit 344 is modified and stored through the unique ID recorded at the time of manufacturing the smart card. This series of processes takes place only within the smart card.

The key generation unit 344 is operated to delete all existing data stored in the memory card 330 when a new key is generated. That is, since the key value is different when decrypting the encrypted data, it cannot be recovered to the data before encryption.

On the other hand, if the encryption and decryption is performed in this manner to perform the PIN authentication, password authentication, fingerprint authentication, etc. of the credit card, the key value is never leaked to the outside, so it is possible to maintain secure security.

In addition, the encryption and decryption of the data may be able to encrypt and decrypt only some data that may be impossible when attempting to restore the data through hacking to improve processing speed.

In addition, the device controller 310, the memory card slot 320 and the smart card slot 319 may be integrated to form a USB token.

Hereinafter, with reference to the drawings will be described a security method of the USB security device of the present invention composed of such a device.

5 is a flowchart for changing an ID of a smart card or a memory card embedded in the security device of the present invention.

i) When ID authentication of a memory card is described, when the USB security device 300 is mounted on the PC 400, the device controller 310 is a manager that is a program for activating the general memory 331 of the memory card 330. The program is executed (S200) to display an ID input screen on the PC 400, which is an external device, and to input an ID on the ID input screen displayed on the PC 400 (S210).

ID is an ID that can be issued from the homepage of the development project and can be changed arbitrarily by the user.

In step S210, it is determined whether the input ID matches the ID stored in the general memory 331 of the memory card 330 (S220), and if it matches, the ID change screen is displayed (S230).

If the ID is changed in step S230, the device controller 110 stores the changed ID in the general memory 331 of the memory card 330 (S240).

ii). Smart card ID authentication

When the USB security device 300 is mounted on the PC 400, the device controller 310 executes an administrator program (S200), displays an ID input screen on the PC 400, which is an external device, and displays the ID displayed on the PC 400. The smart card ID is input to the input screen (S210).

The ID is a smart card ID that can be issued from the homepage of the development Epsom and is set to be arbitrarily changed by the user.

In step S210, it is determined whether the input smart card ID matches the ID stored in the user authentication unit 341 (S220), and if it matches, the ID change screen is displayed (S230).

If the smart card ID is changed in step S230, the device controller 110 stores the changed ID in the user authentication unit 341 (S240).

This step is intended to make it impossible to write or view the data stored in the memory, if the user loses the ID. In other words, if someone learns the same effect. In addition, all the functions that can be used after ID and password verification have been performed are disabled.

Since the password authentication is performed after the ID authentication as described above, password authentication will be described.

6 is a flow chart for changing the password embedded in the security device of the present invention. When the USB security device 300 is mounted on the PC 400, the device controller 310 is a general memory 331 of the memory card unit 330. In step S310, an administrator program, which is a program for activating the secure memory area 332 stored in the control unit, is executed to display the password input screen on the PC 400, which is an external device.

In operation S310, an initial password is input on the input screen of the password displayed on the PC 400 (S311).

The initial password refers to a password that is set up so that the user can change the password of the USB security device at the factory.

In the next step S312, it is determined whether the input password and the initial setting number stored in the smart card 330 match and display the password change screen if they match (S313).

If the password is changed in step S313, the device controller 310 stores the changed password in the user authentication unit 341 of the smart card 340 (S314).

This step is intended to prevent users from writing or viewing data stored in memory if they forget their password. In other words, if someone learns the same effect. In addition, all functions that can be used after password verification is disabled are also disabled.

Thereafter, in the next step S315, a key for encrypting and decrypting data stored and read in the memory card 330 is generated. In this case, all keys related to the encryption function supported by the smart card 340 are automatically generated by the key generation unit 344. Is generated. This may be determined through an application program embedded in the application unit 342. For example, a 16-byte random key is automatically generated for DES, AES, and ARIA, and 128 or 256 bytes for RSA. The generated key value is modified and stored through a unique ID recorded when the smart card is manufactured. This series of steps is performed only within the smart card 340. That is, since no data is displayed to the outside, the user may not know which key value is generated, and the key values stored for each USB security device 300 are all generated differently to connect another USB security device 300. Even if you can't read or write the contents of the memory. For reference, this function is basically possible only if the password verification step is done in the previous step.

As described above, a method for transmitting and receiving data between the PC 400 and the USB security device 300 after the encryption / decryption key is generated will be described with reference to the drawings.

7 is a flowchart illustrating a method of transmitting / receiving data with an external device by a USB security device equipped with a fingerprint sensor, a smart card, and a memory card according to the present invention, when the USB security device 300 is connected to the PC 400. In operation S400, the device controller 310 receives an ID (S410), and determines whether the ID matches the ID stored in the smart card (S420). If the determination result is a failure, the device controller 310 terminates. Receiving an ID stored in the general memory 331 of the (S430), and determines whether the ID of the memory card match (S440), if the result of the determination is terminated and if successful, to activate the secure memory area 332 By executing a program for displaying a password input screen on the PC 400, which is an external device, and receives a password (S450).

It is determined whether the input password and the password stored in the smart card 340 match (S460) and if it matches, the fingerprint information is input (S470), and whether the input fingerprint information matches the fingerprint information stored in the smart card is determined (S460). In operation S480, the USB security device 300 is activated so that the USB security device 300 operates as a general USB memory, and it is determined whether to store data from the PC 400 to the USB security device 300 (S490).

If it is determined in step S490 to save the data to the USB security device 300, the device controller 310 controls to encrypt the data transmitted from the PC 400 in the smart card 340 to be stored in the memory card 330. (S510)

On the other hand, if it is determined that the data stored in the memory card 330 is a process of reading the data stored in the step S490 (S500), if it is determined that the data is read the encrypted stored in the memory card 330 The devices are operated to read the data, decrypt the data in the smart card 340, and output the data to the PC 400 (S520).

If it is determined in step S500 that the data is not read, the process is repeated again from step S450 to wait for data transmission and reception between the USB security device 300 and the PC 400.

While the invention has been described in detail with respect to the embodiments described, it will be apparent to those skilled in the art that various modifications and variations are possible within the spirit of the invention, and such modifications and variations belong to the appended claims.

According to the present invention configured as described above, when a user accesses a homepage of a financial institution and logs in or uses a user's biometric information when authenticating himself in the process of transferring a bank account after logging in, it is fundamental to illegal hacking or illegal transactions of others. It can be used as a substantially secure authentication means.

Claims

A smart card (340) of the SIM type for storing ID, password and fingerprint information and encrypting and outputting the received data or decrypting and outputting the received encrypted data;

A smart card slot 320 for attaching and detaching the SIM type smart card;

A memory card 330 configured to store an ID, receive and store encrypted data from the smart card, and output the received data;

A fingerprint sensor 500 which generates fingerprint information, converts it into a digital signal, and transmits the fingerprint information to the device controller;

A memory card slot (319) for attaching and detaching the memory card;

And verifying the smart card ID received from the external device and the ID of the memory card, verifying the password of the smart card received from the external device, authenticating fingerprint information, receiving data input from the external device, and transmitting the received data to the smart card. The encrypted data received from the smart card is transmitted to and stored in a memory card, and the encrypted data stored in the memory card is received, transmitted to the smart card for decryption, and the decrypted data is transmitted to the external device. USS security device having a fingerprint sensor, a smart card and a memory card, characterized in that the device controller configured to control to.
The method of claim 1,

USBI security device with fingerprint sensor, smart card and memory card,

The ID stored in the smart card and the ID stored in the memory card match the ID input from the external device, the password is stored in the smart card and matches the password input from the external device, and the fingerprint received from the fingerprint sensor. And a fingerprint sensor, a smart card, and a memory card, wherein the memory card is activated when the information matches the fingerprint information stored in the smart card.
The method of claim 2,

The smart card,

A user authentication unit 341 containing ID, password, and fingerprint information;

An application unit 342 for executing an encryption algorithm;

A key generator 344 for generating an encryption / decryption key;

And an encryption / decryption unit (343) for encrypting and decrypting the data received using the encryption / decryption key. The USB security apparatus having a fingerprint sensor, a smart card, and a memory card.
The method of claim 2,

The memory card,

USS security device having a fingerprint sensor, a smart card and a memory card, characterized by being divided into a general memory area and a secure memory area.
The method of claim 3,

The encryption algorithm mounted on the application unit 342,

128-bit Block Encryption Algorithm (SEED), a national standard, or DES (Advanced Encryption Standard) or AES (Advanced Encryption Standard) or ARIA or Rivet Shamir Adleman (RSA) encryption, or challenge / response authentication mechanism (CRAM). USS security device with a fingerprint sensor, smart card and memory card, characterized in that supporting one.
The method of claim 3,

USS security device provided with the fingerprint sensor, smart card and memory card,

Data security is based on the application, and the application is provided with a fingerprint sensor, a smart card and a memory card, which can be updated wirelessly using a wireless function of the smart card itself and the method of updating through a device device in a USB port. One USS security device.
In the security method of the USB security device that encrypts, stores, decrypts and outputs data of an external device,

A security method of a USB security device that encrypts, stores, decrypts, and outputs data of the external device,

(a) when the device controller inserts the external smart card and the memory card into the slot, comparing the smart card ID and the memory card ID input from the external device with the ID stored in the smart card and the ID stored in the memory card;

(b) the device controller comparing the password input from the external device with the password stored in the smart card to authenticate the device;

(c) the device controller comparing fingerprint information received from the fingerprint sensor with fingerprint information stored in the smart card and activating the memory card;

(d) a device controller transmitting input data of the external device to a smart card;

(e) generating a key by the key generation module mounted on the smart card by the smart card;

(f) encrypting data received by the smart card with the generated key;

And (g) allowing the device controller to transmit and store the data encrypted by the smart card to a memory card, thereby encrypting, storing, decrypting, and outputting data of the external device. Way.
The method of claim 7, wherein

The step (e) of generating a key by the key generation module mounted on the smart card by the smart card,

And a method for encrypting, storing, decrypting, and outputting data of an external device, wherein the existing data stored in the memory card 330 is deleted when a key is newly generated.
The method of claim 7, wherein

(a) authenticating the ID of the smart card and the memory card,

And encrypting, storing, decrypting, and outputting data of an external device, wherein the authentication is performed using an algorithm of a challenge response authentication method.
The method of claim 7, wherein

A security method of a USB security device that encrypts, stores, decrypts, and outputs data of the external device,

It is based on the application and the application is encrypted via the USB device to update the device or wirelessly using the wireless function of the smart card itself to encrypt, store, decrypt and output the data of the external device How to secure USBI security devices.
The method of claim 7, wherein

A security method of a USB security device that encrypts, stores, decrypts, and outputs data of the external device,

(h) causing the device controller to decrypt the encrypted data stored in the memory card in the smart card; and (i) the device controller transmitting the decrypted data to an external device. A security method of a USB security device that encrypts, stores, decrypts, and outputs data of an external device.