TW510107B - A coding system and method of secure data transmission - Google Patents

Abstract

The coding system includes a passcode generator used to generate a passcode, a hidden key generator that is electrically in connection with the passcode generator to generate a hidden key, a working key generator that is electrically in connection with the hidden key generator and the passcode generator and follows the passcode and the hidden key to generate a working key, and an encrypter/decrypter that is electrically in connection with the working key generator to perform encrypting or decrypting task on message with the working key. The method of secure data transmission forwards secure message from a forwarding end to a receiving end and includes the following procedures: provide a first hidden key to the forwarding end and a second hidden key to the receiving end, and the first and the second hidden key are identical; provide a passcode; generate a first working key in accordance with the first hidden key and the passcode; use the first working key to encrypt a plaintext into a cipher text; forward the cipher text and the pass code from the forwarding end to the receiving end; generate a second working key with the second hidden key and the passcode received by the receiving end, and the second working key equals to the first working key; and decrypt the cipher text into plain text by the second working key.

Description

510107 Case No. 88118019

V. Description of the invention G) [Field of invention] This case is a cryptographic system and its security information. The method of transferring information is to protect the security, information, and passwords of the cattle. The method is about the key of (p_ic key cryptosystem). Fee code system [Background of the invention], the information transmitted in the communication channel is private ^ It is not easy to be stolen, and it can ensure that the information transmitted from the sender to the receiver is from Xiongwei! The designated receiver can restore the received data. Tradition: Mi Ma, first, are two types, one is secret-cryptoSystem, one is pubUc key cryptosystem 0 The first picture shows the conventional key cryptosystem (also known as A basic block diagram of a symmetric cryptosystem. As shown in the figure, the two communication terminals (labeled A and B respectively) have their own ciphers Cl, C2 (cipher) ′, which can encrypt the output data and decrypt the input data. In detail, 'plaintext' ciphertext generated after encryption at one end can be decrypted to generate the original plaintext at the other end. The two communication ends use the same keys K1 and K2 for data encryption / decryption. . The most commonly used symmetric cipher system at present is the DESCData Encryption Standard, which uses a 56-bit key (generally including 8 parity check bits). As for other schemes, such as IDEA (International Data Encryption A1 g r r t h m), it uses a similar architecture but uses a longer cryptographic gold loss.

Page 5 Case No. 8811801¾ 5. Description of the invention (2) _ In the symmetric cryptosystem, the subject of Thai and pseudo-pseudo. Participate in the two-way data transfer; exchange is usually a very important and cannot be known by others. Both parties must have the same key, and record it in a secret way. The situation is that one party generated this common certificate in a secret state. Such as ^. The means of communication here must be secret, so that the dagger can be easily interpreted: dirt or unintentional interception of this material. Owners of symmetric cryptosystems conduct secret communications. Well, the user ca n’t be unspecified. How about the security of the two exchanges when the two must be established in a situation known to both parties? Under the monthly condition of I $ ', how can the first plan be shown is a basic block diagram representing a known public key cryptosystem (also known as “w1G eryptQsystem”) \%: input start code system and general key cryptosystem The biggest difference lies in two points: (/) the key and exchange mechanism; (2) the actual algorithm for encryption. Reference Di Gumu Tongfang has two keys for a set of golden record pairs: public key K6, K3 (public key) and private key K4, K5 (private key), respectively.

Pub and pri said. The public keys K3 and K6 are public key information and can be obtained by anyone; on the other hand, the private keys K4 and K5 are personal key data and they know it. The key exchange mechanism of the public key cryptosystem only needs to exchange the public keys K3 and K6 of the two parties, and this exchange process does not require special confidentiality, but the source must be confirmed, that is, the public records K3 and K 6 Sources cannot be forged (hence the existence of a certification authority is generally required). After completing the public exchange part, the two parties can transfer the data secretly. Party A transmits to party β and Party B transmits to party a in the opposite way. If party A wants to send a copy to party B, party A first uses party B's public key K3 to encrypt the data in the encryptor ------- ___________ --- correction

Case No. 8811801Q V. Description of the invention (3) Li Er „The encrypted data is sent to w, so that β can use its own :: decryption to decrypt. Anyone who uses B ’s public encryption to encrypt H ’s private contribution 4 can decrypt it. Therefore, even the party A and the party cannot add the original data from the encrypted data. On the other hand, the party LI needs to pass on it, and Λ expects that the party A 'needs to use the party's public key K6 to increase through == added fee. Encrypted data must use the private touch of Party A. Another feature is the encryption and decryption algorithm. It is constructed at the level of solving mathematical problems. • Encryption =: Gezhe 疋 Decryption algorithms often require some complexity. Mathematical operation: such as calling or log. In other words, 'no matter using software;: =, it takes a considerable amount of execution time to complete it ^ This is also the second material :! The biggest disadvantage of the code system. The public key cryptosystem is in -General information = application has its advantages, but in some applications that require real-time transmission, such as mobile phone, video transmission, etc. The disadvantages of the conventional technology are as follows: Level one, in the conventional key cryptosystem, how to During the key exchange process Sex is a very important subject. To be more specific, the ambiguity of the way that you ^ ^ change the parent of the key, so it is impossible to guarantee the privacy of the actual exchange of keys during the process of gold = parent exchange. Because of this It is almost impossible to have such a transmission channel or scheme in the present. In addition, the combined key cryptosystem cannot be applied to the parties who have never met (that is, did not establish a common balance) to conduct secret communications. Situation

Page 7 MU107

! Data interpretation; the algorithm is too complicated,-generally contains quite a few deniers: the first order mathematical operation difference. To implement these higher-order mathematical operations, either in software or hardware, # inevitably introduces "疋 ... 人 (processing delay). This is for general information but for: the application of time management may be quite serious Question Ϊ :: Still; / · 2 The key used by the code system 'is a poor source of access for its users. In other words, the user = wins or deals with gold loss. In other words This also provides the hacker "King: [Inventive] disadvantages" to propose a new secret-secret channel. This new type of protection for real passwords prevents the purpose of this case, which is to build a password system between two communicating parties based on the customary code system described above. The password system is based on the use of Mimar hidden technology to prevent crackers from directly cracking the real password. [Brief description] In order to achieve the above purpose, this case proposes a cryptographic system, including: a pass code generator, by which a pass code is generated

A built-in key generator is electrically connected to the password generator to generate a hidden key; σ: a working key generator is electrically connected to the built-in key generator and Generating the ML line code and generating a working key based on the pass code and the built-in key; and

510107 Case No. 8811819 Rev. 5. Description of the invention (5) Use the working key to decrypt the message ° As described in the cryptographic system circuit (IC), and the cryptographic system variable generator cannot be described as . As described in the cryptographic system hash function (cryptographic system safer κ-64, blowfish) In addition, this case also proposes to transmit security from a sender: Provide a first built-in gold receiver, the The first and second provide a passcode; perform encryption ing or decryption, which is accessed by the outside world, in which the built-in key system is built in ~ to directly access. The passcode generator is a product random Among them, the working key generator is, among them, etc. A password-encrypted message is sent to the built-in gold as a hybrid. The encryption and decryption system includes DES and a secure data transmission method of the system to a receiving end, including the following steps. The end and a second built-in key are the same; a X-th gold is generated according to the first built-in key and the pass code, and the essence is sent from the sending end by the first working money. Brother ^ a built-in Jinsheng a second work key, the key; and the ciphertext and the remainder encrypted by the second work record and the plaintext is decrypted as a ciphertext by the second work key; the pass code to the The receiving end; , $ / Passcode Heights yield from human inflammatory as key lines equal to the work of the garment brother a ciphertext back to the plaintext.

Page 9 88118mci V. Description of the invention (6) [Brief description of the diagram] Amendment

The first figure, the second figure, the third figure, and the fourth figure. The conventional public key cryptosystem; the public key cryptosystem; and the architecture of the key encoder. [Illustration of drawing number] C1, C 2: Encryptor KK3, Κ6: Public 鍮 A, Β: Communication end 3 · Codec 7: One-way function U, 21: First and second K1, K2: Jinyu K4 , K5: Private key 1, 2: Both parties to communication 5: Built-in key 9: Passcode Built-in gold record codec 1 9 9 · π 13, 23: One-way function 14 2 .f Passcode Ί r nr 24 · Working key 15, Μ: Encoder / decoder [Detailed description] The third figure shows the basic built-in key-encoder / decoder frame ^ IH (c〇dec) key generation circuit (key- generating circuitry is implemented, and the working keys that actually perform the encoding and decoding actions are determined according to the built-in key 5 (hidden key) and the randomly generated passcodes' 9 (passcode). The one-way function 7 used by the key generation circuit must have the following conditions. When the working keys and pass codes 9 and the one-way function 7 algorithm are known, the probability of the built-in key 5 being reversed must be guaranteed. For computationally impossible. Calculations that meet this condition

Page 10

The method is like line code 9 in the password signing system, which can be used with the library ',', hash function. The common information is transmitted to the receiving # while the reference code changes ^ and will be changed along with (including the built-in gold key and the single-way letter / receiver can be decoded through the same mechanism working key.) Algorithm) to generate the same golden 钤 as encrypted image data, = 〇: klng keys) are the actual r ·, 〇dec), for example, general block = two-like DES, SAFER κ-64, B1〇wf Combinations of block ciphers are also possible. Wang Xixi In other words, the cryptographic system proposed in this case is composed of a passcode: a built-in key generator, a working key generator, and an encryption and decryption device. The pass code generator is used to generate a pass code 9 (passcode), and the built-in key generator is used to generate a built-in key 5 (hidden). The work key generator is based on the pass code 9 and the built-in key. The key 5 is used to generate a working key, and the encryption and decryption of the codec 3 is performed. The device uses the working key (w 0 rkingkey S) to encrypt or encrypt the message. Decrypting action. Of course, the built-in key system is built in an integrated circuit (1C) and cannot be accessed directly by the outside world. The pass code generator is a random variable generator. The The working key generator is a hash function. The encryption and decryption device includes DES, SAFER K-64, BL0WFISH, etc. The premise of using the double-layer encryption structure of this case is that both parties of the communication must have the same Built-in password, which can be achieved in several ways: (1) Communication dual

Fang's 1C built a sealed electronic device between the two through an enclosed electronic device at the beginning of manufacture. In this enclosed electronic device, the IC

Month amendment on page 11: 88118019 V. Invention description (8) =: However, it cannot be rotated out directly, but the built-in golden road that needs to be exchanged must be completed through translation and password mechanism (the probability of cracking is the lowest) ) Of the public key cipher circuit, this call :, once used when building the built-in gold coin :. This circuit (or simulative simulation) uses ㈣mathematical operation :: Key cipher circuit; the built-in key in the line will take a considerable amount of time ^ The length is very long, so you do n’t need to use this when encrypting and decrypting data. 'But because it is in the real codec (codec) part, so 3 knives', but the use of fast requirements. The real-time password structure can still be achieved in this case. The pass code can be added to the pass code, and the frequency of pass code generation can be added to the required function to allow the actual responsibility for encoding and decoding. Passcode: The way to crack the block encoder is enough :: = sex. Because-crack the corresponding Jinyu. In the above-mentioned ciphertext, the gun will change accordingly, which makes the cracking more difficult :: sleepy; ^, the cracked work key is also difficult to cooperate with the library. In addition, the key 1 system is still secure as a whole. The built-in 4th system shows the architecture diagram of the entire cryptographic transmission system. Γ Solution 2 has / a built-in gold codec 11 and a second built-in. Quan / ί, Jiang L ', which contains—consistent built-in keys. Dang Chuan U ?: plain text input to the first built-in, (appropriate labor distribution page 12 510107

The required working key 14 is generated by the one-way function 1 3, and the plaintext data piaintext is encrypted into the ciphertext data Cipher text using the codec calculus 15 (codec) 15. The output section also includes the corresponding passcode. When the receiving end (right end) receives the ciphertext data Ciphertext and the passcode, the passcode 22 will be sent to the one-way function 23, and the built-in gold key 21 will be used to restore the original working key 24, and then A codec (codec) 25 is used to restore the Cipher text to Plaintext.

In other words, this case also proposes a secure data transmission method for the cryptographic system, whereby a secure message is transmitted from the sending end 1 (also the receiving end) to the receiving end 2 (also the sending end). The key decoder 丨 丨 and the second built-in key decoder 21 provide the first built-in key to the sending end 1 and the first built-in key to the receiving end 2 'The first and second built-in key systems are The same. A pass code 12 is then provided, and a first work key 14 is generated based on the first built-in key and the pass code 12, and then a plain text Plain text is encrypted into a cipher text Cipher by the first work key record 14. text. After that, the ciphertext (: 01161 ^ 6 \ 1: and the passcode? 33%) is sent from the sending end 1 to the receiving end 2. The second built-in key and the receiving end The received Passcode generates a second work key 24, which is equal to the first work key 14. Finally, the second work key 24 is used to decrypt the password. The text Ciphertext is restored to the plain text ρ! Aintext. To crack the password system of the fourth picture, it can be divided into two levels: (1) crack the work key, and (2) crack the built-in password. To break the ^ work key 'You must collect enough plaintext-ciphertext pairs, and then cooperate with the algorithms in the codec to be able to crack them. However, in this paper, page 13 510107 case number 88118019 5. In the description of the invention (10), The cracking of the work key is not as good as < ^ Both aa and e will not affect the overall security of the system. First, the industry "★ 疋 θ varies with the pass code, as long as the pass code is 1 'Variability', which is generated using random variables; cracking the single-working key does not affect other encrypted data Security, if the rate of change of the work key is very fast, it becomes very difficult to collect enough clear pairs. Third, even if several work codes and relative pass codes are successfully cracked, according to the characteristics of the one-way function The real built-in key can not be reversed, so the system is still secure. The real password can be established in a hardware circuit, that is, inside the IC (hereafter referred to as the built-in key). key) .. The built-in poor code is processed with a one-way function & a variable pass code, which generates a working key. The work key is the key that is actually responsible for encoding and decoding data. The key points of the patented password system are: (1) the built-in password is built in ic 'and there is no preset path to read the built-in password, ( 2) The built-in key is a work key that can be used for encoding and decoding by using a variable passcode. That is to say, changing the passcode can change the corresponding work record to increase the variability of the work key. (3) One-way function has irreversibility The characteristics, that is, the real built-in key cannot be pushed back by the work key and the corresponding passcode. According to the above characteristics, a cryptosystem with considerable security can be established. The advantages of this case are as follows: 1. The built-in hidden key protected by hardware can ensure that no one can directly access this built-in key, eliminating the threat of human factors to the security of the system. Μ '

Five inner = keys are produced using a one-way function

8811801Q Description of the invention (ii) Second cropping gold, because Λ is actually negative for the built-in Jinsheng] III. Actually responsible for resolving; sex is more secure, j basic transposition and substitution processing party = 马 = (C.— 于Real-time transmission application. Established, so the processing is fast. Miaobi can be protected by those skilled in the art who are familiar with the art, as well as those who want to protect the scope of patent application. Encrypted and decrypted t 〇) is Use the applicable modification,

Claims (1)

510107-Case No. 88118019 _ year month day amendment __ 6. Patent application scope 1 · A cryptographic system includes: a pass code generator, which is generated by a random variable as' to generate a pass code (Passc〇de); a built-in key generator, which is electrically connected to the working key generator and generates a built-in hidden key, wherein the built-in key is built in a product Inside the body circuit (IC) and cannot be accessed directly by the outside world; a working key generator, which is a hash function, which is electrically connected to the built-in key generator and The passcode generator generates a working key based on the passcode and the built-in key; and an encryption and decryption device, which is electrically connected to the working input and uses the working key to pair messages Encryption (e-machi yptinf) = encryption (decrypting) action, the encryption and decryption system contains des K-64, BL0WFISH and so on. 2-A secure data transmission side of a cryptographic system transmits the flood information of the women's college to a receiving end, including the following steps: Providing a first built-in key to the sending end and the receiving end Built-in key system: The built-in key is built into an integrated circuit (1C), and the built-in key is retrieved from 1550; ",, method is directly stored by the outside to provide a pass code, the The pass code is generated by a lifetime; ^ The machine variable generator is based on the first built-in key and the passer wheel. Page 16 510107 _ Case No. 88Π8019_ Year Month Date __ Sixth, the scope of the patent application is encrypted by the first working key as a ciphertext; the ciphertext and the passcode are sent from the sender to the receiver A second working key generated by the second built-in key and the passcode received by the receiving end, the second working key being equal to the first working key; and by the first The two working keys decrypt the ciphertext and restore it to the plaintext. Page 17