TWM569453U - Digital data processing system - Google Patents

Abstract

A digital data processing system includes a mobile device and a server. The mobile device includes a portable electronic device that stores a digital data and an international mobile device identification code, and a user identity module card that stores an international mobile subscriber identity. Transmitting the international mobile device identification code and/or the international mobile subscriber identity to the server to generate a correlation according to the international mobile device identifier and/or the international mobile subscriber identity The hash data of the hash algorithm is transmitted to the portable electronic device, and the portable electronic device generates a corresponding password data according to the hash data and a preset password, and executes the digital data according to the data. An encryption operation in a symmetric encryption algorithm for encryption.

Description

Digital data processing system

The present invention relates to a digital data processing system, and more particularly to a digital data processing system for encrypting digital data.

In recent years, the functions of smart phones have become more and more diversified, which has greatly changed the living habits of modern people. For example, in addition to the existing communication functions, smart phones are often used in many different transaction modes. Among them, electronic payment, third-party payment, online transfer, order placement, and nowadays attention to virtual currency transactions can all be achieved by operating smart phones.

Although the diversified functions of smart phones do bring more convenience, on the other hand, users are also required to store more and more private data in smart phones, such as ID cards and credit card numbers. The account password used to log in to online banking, or the private key used for virtual currency transactions, etc., if the private information of the above-mentioned examples is stolen by a person with a heart, it will pose a great threat to the property and rights owned by the user. Therefore, how to further enhance the information security of private information has become the topic of discussion in this case.

The purpose of the present invention is to provide a digital data processing system that can effectively improve information security.

The novel digital data processing system comprises a mobile device and a server. The mobile device includes a portable electronic device and a user identity module card. The portable electronic device stores a digital data and an international mobile device identification code for the portable electronic device. The user identity module card The portable electronic device is electrically connected and stores an international mobile subscriber identity code corresponding to the user identity module card. The server is for electrically connecting the mobile device. Transmitting the international mobile device identification code and/or the international mobile subscriber identity to the server, the server receiving the international mobile device identifier and/or the international mobile subscriber identity Generating, according to the international mobile device identifier and/or the international mobile subscriber identity, a pair of hash data corresponding to an international mobile device identifier and/or the international mobile subscriber identity and related to a hash algorithm, the server Transmitting the hashed data to the portable electronic device, the portable electronic device generates a pair of cryptographic data corresponding to the hashed data and the preset password according to the hashed data and a preset password when receiving the hashed data And performing an encryption operation in the symmetric encryption algorithm on the digital data with the password data to encrypt the digital data.

In some implementations of the digital data processing system of the present invention, the digital data is a private key, and the portable electronic device first generates and outputs a predetermined password request when receiving the hash data. When receiving the preset password input by the user and corresponding to the preset password request, the password data is generated according to the hash information and the preset password.

In some implementations of the present digital data processing system, when the server receives the international mobile device identification code and/or the international mobile subscriber identity, the server first identifies the international mobile device identification code and/or the The international mobile subscriber identity code performs the hash algorithm to generate a hash value consisting of a plurality of characters, and then the N characters of the characters of the hash value are used as the hash data, wherein N is greater than An integer of 1.

In some implementations of the digital data processing system of the present invention, the portable electronic device generates the cryptographic data by concatenating the hash data with the preset password, and using the result of the concatenation as the cipher data. .

Another digital data processing system of the present invention includes a mobile device and a server. The mobile device includes a portable electronic device and a user identity module card. The portable electronic device stores an encrypted digital data and an international mobile device identification code for the portable electronic device. The module card is electrically connected to the portable electronic device and stores a pair of international mobile subscriber identification codes corresponding to the user identity module card. The server is for electrically connecting the mobile device. Transmitting the international mobile device identification code and/or the international mobile subscriber identity to the server, the server receiving the international mobile device identifier and/or the international mobile subscriber identity Generating, according to the international mobile device identifier and/or the international mobile subscriber identity, a pair of hash data corresponding to an international mobile device identifier and/or the international mobile subscriber identity and related to a hash algorithm, the server Transmitting the hashed data to the portable electronic device, and when the portable electronic device receives the hashed data, generating a pair of cryptographic data corresponding to the hashed data and the decrypted password according to the hashed data and a decrypted password, and The cryptographic data is used to perform a decryption operation on the digital data in a symmetric encryption algorithm to decrypt the digital data.

In some implementations of another digital data processing system of the present invention, the digital data is a private key, and the portable electronic device first generates and outputs a decryption password request when receiving the hash data. And when the decryption password input by the user and corresponding to the decryption password request is received, the password data is generated according to the hash data and the decryption password.

In some implementations of another digital data processing system of the present invention, the server receives the international mobile device identification code and/or the international mobile subscriber identity code according to the international mobile device identification code and And/or the international mobile subscriber identity code performs the hash algorithm to generate a hash value consisting of a plurality of characters, and then the N characters of the characters of the hash value are used as the hash data, wherein N is an integer greater than one.

In some implementations of another digital data processing system of the present invention, the portable electronic device generates the cryptographic data by concatenating the hash data with the decrypted password, and using the result of the concatenation as the Password information.

The effect of the novel is that the digital data processing system can cooperate with the international mobile device identification code corresponding to the portable electronic device and/or the international mobile subscriber identity code corresponding to the user identity module card. The decryption password is used to add/decrypt the digital data. In this way, the encrypted digital data needs to be decrypted by the same international mobile device identification code and/or the international mobile subscriber identity, and the decrypted password corresponding to the preset password, and can be effectively Improve the security of information on private data.

Before the present invention is described in detail, it should be noted that the term "electrical connection" as used in this specification refers to a wired electrical connection between a plurality of electronic devices or devices via a physical wire, and via wireless communication. Radio connection for data transmission. Also, it should be noted that in the following description, like elements are denoted by the same reference numerals.

Referring to FIG. 1, a first embodiment of the present digital data processing system 1 includes a mobile device 11 and a server 12 for electrically connecting the mobile device 11.

The mobile device 11 includes a portable electronic device 111 and a user identity module card 112. In this embodiment, the portable electronic device 111 is implemented as a smart phone, for example, the portable electronic device 111 stores a digital data, and a pair of portable electronic devices 111 are unique and unique. International mobile device identifier. In this embodiment, the digital data is, for example, a private key, and can be used for a user of the mobile device 11 to perform an online virtual currency transaction. In addition, in other embodiments, the portable electronic device 111 can also be implemented as a tablet computer, and the digital data can also be, for example, the user's identity card number, credit card number, or login. Personal data such as account passwords used for online banking, and not limited to this embodiment. The international mobile device identification code is also referred to as an IMEI code (IMEI is an abbreviation of International Mobile Equipment Identity), and the international mobile device identification code is bound to the portable electronic device 111 when it is shipped from the factory. The electronic device 111 itself.

The user identity module card 112 is also referred to as a SIM card (SIM is an abbreviation of Subscriber Identity Module). The user identity module card 112 is, for example, pluggably disposed in the portable electronic device 111. The portable electronic device 111 is connected to the portable electronic device 111 to enable the portable electronic device 111 to read the data in the user identity module card 112. The user identity module card 112 stores a pair of international mobile subscriber identity codes that are unique to the subscriber identity module card 112. The international mobile subscriber identity code is also referred to as an IMSI code (IMSI is an abbreviation of International Mobile Subscriber Identity). And the international mobile subscriber identity is bound to the subscriber identity module card 112 itself when the subscriber identity module card 112 is shipped.

The server 12 is, for example, a hash computing server in the present embodiment, and the server 12 can communicate with the mobile device 11 via an internet electrical connection.

Referring to FIG. 1 and FIG. 2 together, the following describes in detail how the first embodiment of the digital data processing system 1 of the present invention implements a digital data encryption method for the digital data.

First, in step S11, the portable electronic device 111 transmits the international mobile device identification code and the international mobile subscriber identity to the server 12. Next, step S12 is performed.

In step S12, when receiving the international mobile device identification code and the international mobile subscriber identity, the server 12 generates an international mobile device identity based on the international mobile device identifier and the international mobile subscriber identity. And the combined string of the international mobile subscriber identity. More specifically, for example, the server 12 combines the international mobile device identifier and the international mobile subscriber identity in a tandem manner to generate the merged string, but not limited thereto. . Next, step S13 is performed.

In step S13, the server 12 performs a hash algorithm on the merged string to generate a pair of hash values corresponding to the international mobile device identification code and the international mobile subscriber identity and consisting of a plurality of characters. In this embodiment, the hash algorithm performed by the server 12 is, for example, a SHA256 algorithm, but in other embodiments, the hash algorithm may also be, for example, SHA-384, SHA-512, or SHA-3. The hash algorithm of the SHA (Secure Hash Algorithm) series, or the hash algorithm of the MD (Message-Digest Algorithm) series such as MD5 and MD4, is not limited to this embodiment. Next, step S14 is performed.

In step S14, the server 12 generates a pair of hash data that should be a hash value based on the hash value. The manner in which the server 12 generates the hash data is, for example, the N characters of the characters of the hash value as the hash data, and N is an integer greater than one. More specifically, in the present embodiment, the server 12 uses, for example, the first 28 characters of the hash value as the hash data (ie, N=28). However, in other embodiments, N is only An integer greater than 1 may be implemented. Alternatively, the server 12 may directly use the hash value as the hash data, and is not limited to the embodiment. Next, step S15 is performed.

In step S15, the server 12 transmits the hash data to the portable electronic device 111. Next, step S16 is performed.

In step S16, the portable electronic device 111 generates and outputs a preset password request when receiving the hash data, and the portable electronic device 111 outputs the preset password request, for example, by using a preset password. The setting screen is displayed on a screen that it has, but not limited to this. Next, step S17 is performed.

In step S17, when the portable electronic device 111 receives a preset password that is input by the user and corresponds to the preset password request, the portable electronic device 111 generates a pair of supposed hash data according to the hash data and the preset password. Password information for the default password. More specifically, in the embodiment, the portable electronic device 111 generates the password data, for example, the hash data is merged with the preset password in tandem, and the string is combined. The result of the joining is used as the password information, but not limited thereto. For example, if the hash data is "ABCDE" and the default password is "12345", the password data is, for example, "ABCDE12345", but not limited thereto. Next, step S18 is performed.

In step S18, the portable electronic device 111 uses the cryptographic data as an encryption key, and performs an encryption operation in the symmetric metric algorithm (Symmetric-key Algorithm) on the digital data with the encryption key. To encrypt the digital data, the portable electronic device 111 stores the encrypted digital data for later use. In this embodiment, the symmetric encryption algorithm performed by the portable electronic device 111 is, for example, an AES-128 algorithm. However, in other embodiments, the symmetry performed by the portable electronic device 111 The encryption algorithm may be, for example, AES-192, AES-256, or other series of symmetric encryption algorithms such as DES, 3DES, Blowfish, IDEA, etc., and is not limited to this embodiment.

The above is the description of the digital data encryption method. Next, referring to FIG. 1 and FIG. 3, the following describes in detail how the first embodiment of the digital data processing system 1 of the present invention implements a digital data on the encrypted digital data after implementing the digital data decryption method. Decryption method.

First, in step S21, the portable electronic device 111 transmits the international mobile device identification code and the international mobile subscriber identity to the server 12. Next, step S12 is performed.

In step S22, when receiving the international mobile device identification code and the international mobile subscriber identity, the server 12 generates the international mobile device identifier according to the international mobile device identifier and the international mobile subscriber identity. The merged string of the international mobile subscriber identity, the manner in which the server 12 generates the merged string in this step is the same as the foregoing step S12 (shown in FIG. 2), and therefore will not be repeated here. Next, step S23 is performed.

In step S23, the server 12 performs the hash algorithm as described in the foregoing step S13 (shown in FIG. 2) on the merged string to generate an corresponding international mobile device identifier and the international mobile subscriber identity. The hash value of the code. Next, step S24 is performed.

In step S24, the server 12 generates the hash data corresponding to the hash value according to the hash value, and the server 12 generates the hash data in this step in the same manner as the foregoing step S14 (shown in FIG. 2). Therefore, it will not be repeated here. Next, step S25 is performed.

In step S25, the server 12 transmits the hash data to the portable electronic device 111. Next, step S26 is performed.

In step S26, the portable electronic device 111 generates and outputs a decryption password request when receiving the hash data, and the portable electronic device 111 outputs the decryption password request, for example, by displaying a decryption password into the screen. On its own screen, but not limited to it. Next, step S27 is performed.

In step S27, when the portable electronic device 111 receives a decryption password input by the user and corresponding to the decryption password request, the portable electronic device 111 compares the hash data with the decryption password. The subsequent concatenations are combined to generate a pair of cryptographic data that should be hashed and decrypted. Next, step S28 is performed.

In step S28, the portable electronic device 111 uses the cryptographic data generated in step S27 as a decryption key, and performs the symmetric encryption algorithm on the encrypted digital data with the decryption key. A decryption operation corresponding to the encryption operation is performed to decrypt the digital data.

The above is the description of the digital data decryption method.

Referring to FIG. 1 to FIG. 3, in addition, in the above description of the embodiment, the mobile device 11 in the digital data encryption method is the same as the mobile device 11 in the digital data decryption method. That is, the international mobile device identification code and the international mobile subscriber identity received by the server 12 in step S22 are consistent with the international mobile device identification code received in step S12 and the international mobile subscriber. The identification code, under this premise, the hash data generated by the server 12 in step S24 will also coincide with the hash data generated in step S14. Therefore, if the decrypted password received by the portable electronic device 111 in step S27 matches the preset password received in step S17, the portable electronic device 111 generates the generated in step S27. The cipher data is matched with the cipher data generated in step S17 (that is, the decryption key in step S28 is consistent with the cipher key in step S18), so that the portable electronic device 111 The digital data can be successfully decrypted in step S28. In other words, if the international mobile device identification code and the international mobile subscriber identity received by the server 12 in step S22 are any of the international mobile device identifications received in step S12, If the code does not match the international mobile subscriber identity, or if the decrypted password received by the portable electronic device 111 in step S27 does not match the preset password received in step S17, the portable The cipher data generated by the electronic device 111 in step S27 does not match the cipher data generated in step S17 (ie, the decryption key in step S28 does not match the cipher key in step S18). In this case, the portable electronic device 111 cannot successfully decrypt the digital data in step S28.

That is, in the digital data decryption method of the embodiment, the digital data processing system 1 needs to use the same IMEI code and IMSI code as the digital data encryption method, and the same as the preset password. The decryption password can successfully decrypt the digital data. Therefore, in this embodiment, the digital data is not only bound to the smart phone and the SIM card at the same time, but is further protected by the preset password. In this way, even if the digital data encrypted by the digital data encryption method is leaked to other mobile devices or electronic devices, the other mobile devices or electronic devices cannot provide the same IMEI code and IMSI code. The server 12, so the server 12 is also unable to generate the hash data corresponding to the step S14, in which case the other mobile device or the electronic device receives the corresponding password in step S27. The decryption key cannot be generated, and the decryption key corresponding to the encryption key cannot be generated, and the digital data cannot be decrypted. Therefore, when the portable electronic device 111 of the embodiment receives the decryption password in step S27, It is not necessary to specifically judge whether the decryption password matches the preset password in step S17.

The differences between the second embodiment of the novel digital data processing system 1 and the first embodiment will be described below. First, referring to FIG. 1 and FIG. 4, in the second embodiment, in step S11' of the digital data encryption method, the portable electronic device 111 only uses the international mobile device identification code (ie, IMEI code). The server 12 is transferred to the server 12 without transmitting the International Mobile Subscriber Identity (i.e., IMSI code). Therefore, in step S12', the server 12 directly performs a hash algorithm on the international mobile device identification code to generate the hash value, and omits the step of generating the merged string. Further, the steps S13' to 17' of the second embodiment are respectively similar to the steps S14 to 18 of the first embodiment, and therefore will not be described again. Next, referring to FIG. 1 and FIG. 5, correspondingly, in step S21' of the digital data decryption method of the second embodiment, the portable electronic device 111 only uses the international mobile device identification code (ie, IMEI code). The server 12 is transferred to the server 12, so in step S22', the server 12 also directly performs a hash algorithm on the international mobile device identification code to generate the hash value, omitting the step of generating the merged string. Further, the steps S23' to 27' of the second embodiment are respectively similar to the steps S24 to 28 of the first embodiment, and therefore will not be described again. That is to say, in the second embodiment, the digital data encrypted by the digital data encryption method is only bound to the portable electronic device 111, and the user identity module card 112 is not bound.

The differences between the third embodiment of the novel digital data processing system 1 and the first embodiment will be described below. First, referring to FIG. 1 and FIG. 6, in the third embodiment, in step S11" of the digital data encryption method, the portable electronic device 111 only uses the international mobile subscriber identity (ie, IMSI code). Transferred to the server 12 without transmitting the international mobile device identification code (i.e., IMEI code) to the server 12. Therefore, in step S12", the server 12 is directly executing the international mobile subscriber identity code. The hash algorithm is used to generate the hash value, and the step of generating the merge string is omitted. In addition, the steps S13 to 17 of the second embodiment are respectively similar to the steps S14 to 18 of the first embodiment, and thus are not described herein again. Next, referring to FIG. 1 and FIG. 7, correspondingly, in step S21" of the digital data decryption method of the third embodiment, the portable electronic device 111 only uses the international mobile subscriber identity (ie, IMSI code). The server 12 is transferred to the server 12, so in step S22", the server 12 also directly performs a hash algorithm on the international mobile subscriber identity to generate the hash value, omitting the step of generating the merge string. In addition, the steps S23 ′′ to S ′′ of the third embodiment are respectively similar to the steps S24 to 28 of the first embodiment, and thus are not described herein again. That is to say, in the third embodiment, the digital data encrypted by the digital data encryption method is only bound to the user identity module card 112, and is not bound to the portable electronic device 111.

In summary, the digital data processing system 1 of the present invention can cooperate with the international mobile device identification code corresponding to the portable electronic device 111 and/or the international mobile subscriber identification code corresponding to the user identity module card 112. Set the password/decryption password to add/decrypt the digital data. In this way, the encrypted digital data needs to be decrypted by the same international mobile device identification code and/or the international mobile subscriber identity, and the decrypted password corresponding to the preset password, and can be effectively Enhance the information security of private data, so it can achieve the purpose of this new type.

However, the above is only the embodiment of the present invention, and when it is not possible to limit the scope of the present invention, all the simple equivalent changes and modifications according to the scope of the patent application and the contents of the patent specification are still This new patent covers the scope.

1‧‧‧Digital Data Processing System

11‧‧‧Mobile equipment

111‧‧‧Portable electronic device

112‧‧‧User identity module card

12‧‧‧Server

S11~S18‧‧‧Steps

S21~S28‧‧‧Steps

S11’~S17’‧‧‧ steps

S21’~S27’‧‧‧ steps

S11"~S17"‧‧‧ steps

S21”~S27”‧‧‧ steps

Other features and effects of the present invention will be apparent from the following description of the drawings, wherein: Figure 1 is a block diagram of a first embodiment of the present digital data processing system; Figure 2 is a flow chart Illustratively, how the first embodiment implements a digital data encryption method; FIG. 3 is a flowchart exemplarily showing how the first embodiment implements a digital data decryption method; FIG. 4 is a flowchart, an example Illustratively, how a second embodiment of the digital data processing system of the present invention implements the digital data encryption method; FIG. 5 is a flow chart exemplarily illustrating how the second embodiment implements the digital data decryption method; A flow chart exemplarily illustrates how a third embodiment of the digital data processing system of the present invention implements the digital data encryption method; and FIG. 7 is a flowchart exemplarily illustrating how the third embodiment implements the digital data Decryption method.

Claims (8)

A digital data processing system comprising: a mobile device comprising a portable electronic device and a user identity module card, the portable electronic device storing a digital data and a pair of international mobile devices that should be portable electronic devices An identification code, the user identity module card is electrically connected to the portable electronic device and stores a pair of international mobile subscriber identification codes corresponding to the user identity module card; and a server for electrically connecting the mobile device; wherein The portable electronic device transmits the international mobile device identifier and/or the international mobile subscriber identity to the server, and when the server receives the international mobile device identifier and/or the international mobile subscriber identity, Generating a pair of hash data corresponding to an international mobile device identifier and/or the international mobile subscriber identity and related to a hash algorithm based on the international mobile device identifier and/or the international mobile subscriber identity, the server The hashed data is transmitted to the portable electronic device, and the portable electronic device receives the hashed material according to the hashed data and The preset password generates a pair of cryptographic data that should be hashed and the preset password, and performs an encryption operation in the symmetric encryption algorithm on the digital data to encrypt the digital data. The digital data processing system of claim 1, wherein the digital data is a private key, and the portable electronic device first generates and outputs a predetermined password request when receiving the hash data, and When receiving the preset password input by the user and corresponding to the preset password request, the password data is generated according to the hash information and the preset password. The digital data processing system of claim 1, wherein the server receives the international mobile device identification code and/or the international mobile subscriber identity code according to the international mobile device identification code and/or the The international mobile subscriber identity code performs the hash algorithm to generate a hash value consisting of a plurality of characters, and then the N characters of the characters of the hash value are used as the hash data, wherein N is greater than An integer of 1. The digital data processing system of claim 1, wherein the portable electronic device generates the password data by concatenating the hash data with the preset password, and using the result of the concatenation as the password data. . A digital data processing system comprising: a mobile device, comprising a portable electronic device and a user identity module card, the portable electronic device storing an encrypted digital data and a pair of portable electronic devices An international mobile device identification code, the user identity module card is electrically connected to the portable electronic device and stores a pair of international mobile subscriber identification codes corresponding to the user identity module card; and a server for electrically connecting the mobile device; The portable electronic device transmits the international mobile device identification code and/or the international mobile subscriber identity to the server, and the server receives the international mobile device identifier and/or the international mobile subscriber identity. And generating, by the international mobile device identifier and/or the international mobile subscriber identity, a pair of hash data corresponding to an international mobile device identifier and/or the international mobile subscriber identity and related to a hash algorithm, the servo Transmitting the hash data to the portable electronic device, and the portable electronic device receives the hashed material according to the The data and a decryption password generate a pair of cryptographic data corresponding to the hashed data and the decrypted password, and perform a decryption operation in the symmetric encryption algorithm on the digital data to decrypt the digital data. The digital data processing system of claim 5, wherein the digital data is a private key, and the portable electronic device first generates and outputs a decryption password request and receives the hash data. When the decryption password is input by the user and corresponds to the decryption password request, the password data is generated based on the hash data and the decryption password. The digital data processing system of claim 5, wherein the server receives the international mobile device identification code and/or the international mobile subscriber identity code according to the international mobile device identification code and/or the The international mobile subscriber identity code performs the hash algorithm to generate a hash value consisting of a plurality of characters, and then the N characters of the characters of the hash value are used as the hash data, wherein N is greater than An integer of 1. The digital data processing system of claim 5, wherein the portable electronic device generates the cryptographic data by concatenating the hash data with the decrypted password and using the result of the concatenation as the cipher data.