JP2011221628A - Security adapter - Google Patents

Abstract

A higher security protection function is added to a recording medium.
A lock mechanism 13 constituting a security adapter 1 mechanically locks a recording medium 2 attached to a terminal 11 so that the recording medium 2 cannot be removed from the terminal 11. This lock is released, for example, when the lock release switch 15 is pressed. The MPU 17 erases the data recorded on the recording medium 2 when releasing the lock. Further, when the MPU 17 succeeds in authenticating the user who uses the security adapter 1, the MPU 17 controls the switch controller 16 to relay communication between the recording medium 2 and the user terminal 3 accessing the same.
[Selection] Figure 1

Description

  The present invention relates to a security adapter, and more particularly to an adapter that adds a security protection function to a recording medium.

  In recent years, portable recording media such as a USB (Universal Serial Bus) memory and an SD card can store a large amount of data and can be easily used. However, since such a recording medium is small and often carried, there is a problem that it is easily lost. If it is picked up by a third party, the data recorded on the recording medium may be misused.

  In order to cope with this problem, a method for applying security protection to a recording medium with a built-in security protection function or a recording medium without a security protection function has been proposed.

  For example, Patent Document 1 describes an adapter that adds a security protection function to a USB recording medium (such as a USB memory or a USB hard disk) that does not have a security protection function.

  FIG. 8 shows a configuration of a security adapter 1x described in Patent Document 1. The security adapter 1x connects the USB memory 2 and the USB hard disk 4 to the user terminal 3 that functions as a USB host.

  Specifically, the security adapter 1x includes a USB interface 301 on the user terminal 3 side, a USB interface 302 on the USB memory 2 and the USB hard disk 4 side, and a controller 303 that controls these interfaces 301 and 302. . The USB interfaces 301 and 302 and the controller 303 are interconnected via a bus. In addition, an IC (Integrated Circuit) card 304 such as a UIM (User Identity Module) is mounted on the controller 303.

  In operation, when data is written to the USB recording medium, the controller 303 encrypts the data using the encryption key stored in the IC card 304, and records the encrypted data on the USB recording medium. .

  On the other hand, when reading data from the USB recording medium, the controller 303 decrypts the data using the decryption key stored in the IC card 304 and transfers the decrypted data to the user terminal 3.

  That is, the user terminal 3 can write the encrypted data to the USB recording medium and read the decrypted data from the USB recording medium by accessing the USB recording medium via the security adapter 1x.

  In order to establish high security, the controller 303 uses a PIN (Personal Identification Number) code input by the user prior to relaying communication between the USB recording medium and the user terminal 3 so that the user is an authorized user. It is confirmed whether or not. Further, the user terminal 3 accesses the management server 6 via the network 5 and uses the public key stored in the IC card 304 in order to confirm whether or not the IC card 304 is authentic. Then, CHAP (Challenge Handshake Authentication Protocol) authentication with the management server 6 is performed.

  Patent Document 2 describes a security adapter in which functions related to the above encryption, decryption, and authentication are integrated.

JP 2008-197963 A JP 2009-244502 A JP 2002-9921 A

  However, Patent Documents 1 and 2 have a problem that a sufficient security protection function cannot be added to the recording medium. This is because the user can freely attach and detach the security adapter, and security protection under the condition that the adapter is not used is only one point of encrypting data. Therefore, if the performance of the user terminal is improved in the future, the encrypted data may be decrypted if the recording medium removed from the adapter is directly connected to the user terminal.

  As a reference technique, Patent Document 3 describes a technique for preventing such arbitrary attachment / detachment.

  A security adapter according to an aspect of the present invention connects a recording medium and a device that accesses the recording medium. The security adapter includes a terminal for mounting the recording medium, a lock mechanism for mechanically locking the recording medium so that the recording medium cannot be removed from the terminal, a release mechanism for releasing the lock, And a control circuit for erasing data recorded on the recording medium.

  That is, according to the present invention, a recording medium in which data is recorded cannot be removed from the security adapter. For this reason, no data is recorded on the recording medium removed from the security adapter, so that it is possible to prevent data decoding on the user terminal.

  According to the present invention, it is possible to add a higher security protection function to the recording medium as compared with Patent Documents 1 and 2 described above.

It is the block diagram which showed the structural example of the security adapter which concerns on embodiment of this invention. It is the flowchart figure which showed the example of a mounting process of the recording medium to the security adapter which concerns on embodiment of this invention. It is the flowchart figure which showed the example of the removal process of the recording medium from the security adapter which concerns on embodiment of this invention. It is the flowchart figure which showed the example of a communication relay process in the security adapter which concerns on embodiment of this invention. It is the upper surface perspective view showing the example of composition of the lock mechanism used for the security adapter concerning an embodiment of the invention. It is the side view which showed the structural example of the locking mechanism used for the security adapter which concerns on embodiment of this invention. It is the block diagram which showed the alternative structural example of the lock release switch used for the security adapter which concerns on embodiment of this invention. It is the block diagram which showed the structural example of the security adapter which concerns on related technology.

  Embodiments of a security adapter according to the present invention will be described below with reference to FIGS. In the drawings, the same elements are denoted by the same reference numerals, and redundant description is omitted as necessary for the sake of clarity.

  As shown in FIG. 1, a security adapter 1 according to the present embodiment connects a USB memory 2 as an example of a recording medium and a user terminal 3 that functions as a USB host. The security adapter 1 can be applied not only to the USB memory 2 but also to various recording media such as an SD card.

  Specifically, the security adapter 1 includes terminals 11 and 12, a lock mechanism 13, a lock controller 14, a lock release switch 15, a switch controller 16, an MPU (Micro Processing Unit) 17, and a RAM (Random Access). (Memory) 18, ROM (Read Only Memory) 19, biometric sensor 20, sensor controller 21, authentication information storage memory 22, battery circuit 23, LCD (Liquid Crystal Display) 24, LCD controller 25, It has.

  Among these, the terminal 11 is a socket for inserting a plug of the USB memory 2. On the other hand, the terminal 12 is a plug for insertion into a socket provided in the user terminal 3. These terminals 11 and 12 are connected via a switch controller 16. That is, whether or not communication between the USB memory 2 and the user terminal 3 is possible is controlled by the switch controller 16.

  The lock mechanism 13 mechanically locks the USB memory 2 so that it cannot be removed from the terminal 11 as will be described later. The lock mechanism 13 operates in accordance with a control signal (hereinafter referred to as a lock control signal) from the lock controller 14, and is in a state in which the USB memory 2 is locked (hereinafter referred to as a lock state) and a state in which the lock is released. (Hereinafter referred to as the unlocked state).

  Moreover, the lock release switch 15 is installed in the hole provided in the housing | casing of the security adapter 1, as shown in the figure. When the lock release switch 15 is pressed by the user using the security adapter 1, the battery circuit 23 and the MPU 17 are electrically connected to each other, so that a supply voltage from a battery (not shown) is released from the lock release by the user. A signal indicating a request (hereinafter referred to as a lock release signal) is output to the MPU 17. Although illustration is omitted, the output voltage of the battery is supplied to each block in the security adapter 1. Further, each block in the security adapter 1 may use a voltage supplied from the user terminal 3 toward the USB memory 2 as an operating voltage.

  Further, the MPU 17 uses the RAM 18 as a work area and executes various programs stored in the ROM 19. The MPU 17 detects the attachment of the USB memory 2 to the terminal 11 via the switch controller 16. At this time, the MPU 17 instructs the lock controller 14 to place the lock mechanism 13 in the locked state. Thereafter, the MPU 17 controls the switch controller 16 to cause the switch controller 16 to relay communication between the USB memory 2 and the user terminal 3. Note that the switch controller 16 branches and outputs the supply voltage from the user terminal 3 to the battery circuit 23, thereby charging the battery. Therefore, each block in the security adapter 1 can operate even when the security adapter 1 is not connected to the user terminal 3.

  In addition, when the unlock signal is input, the MPU 17 transmits a command (for example, ERASE command) for erasing data to the USB memory 2 via the switch controller 16 and the terminal 11. Thereafter, the MPU 17 instructs the lock controller 14 to place the lock mechanism 13 in the unlocked state.

  Further, the MPU 17 controls the sensor controller 21, and therefore, prior to communication relay between the USB memory 2 and the user terminal 3, authentication information acquisition processing from the user using the biometric sensor 20, and authentication information Execute user authentication processing using. Here, the authentication information storage memory 22 is used as a registration area for authentication information. The authentication information storage memory 22 may use a partial area in the RAM 18. The authentication process is not limited to biometric authentication, and a password or other authentication method may be used.

  Further, the MPU 17 controls the LCD controller 25, thereby displaying the display for prompting the user to input authentication information, the display for notifying the user of unlocking, and the result of the authentication process. The display is shown.

  Although not shown, the MPU 17 includes an interrupt controller and the like.

  Hereinafter, the operation of the present embodiment will be described in detail. First, an example of processing when the USB memory 2 is attached to the security adapter 1 (hereinafter referred to as attachment processing) will be described with reference to FIG. Next, an example of processing when the USB memory 2 is removed from the security adapter 1 (hereinafter referred to as “removal processing”) will be described with reference to FIG. An example of processing (hereinafter referred to as communication relay processing) when relaying communication between the USB memory 2 and the user terminal 3 via the security adapter 1 will be described with reference to FIG.

[Installation example]
As shown in FIG. 2, when the user attaches the USB memory 2 to the terminal 11, the MPU 17 detects that via the switch controller 16 (step S1).

  At this time, the MPU 17 controls the LCD controller 25, thereby causing the LCD 24 to display to prompt the user to input authentication information (for example, fingerprint data) (step S2). Accordingly, when the user inputs authentication information using the biometric authentication sensor 20, the sensor controller 21 places the authentication information transferred from the biometric authentication sensor 20 in the RAM 18, and the authentication information is sent to the MPU 17. Notify that it has been entered. The MPU 17 acquires authentication information from the RAM 18 (step S3), and stores (registers) the acquired authentication information in the authentication information storage memory 22 (step S4).

  Then, the MPU 17 instructs the lock controller 14 to place the lock mechanism 13 in the locked state. In response to this, the lock controller 14 generates a lock control signal, thereby causing the lock mechanism 13 to lock the user so that the user cannot remove the USB memory 2 from the terminal 11 (step S5).

  Here, as described with reference to FIG. 1, the security adapter 1 is configured such that once locked, the USB memory 2 cannot be removed unless the unlock switch 15 is used.

  In addition, as long as the terminal 12 is in the state connected to the user terminal 3, the supply voltage from the user terminal 3 can be used for the operating voltage required for execution of the above mounting process. On the other hand, if the terminal 12 is not connected to the user terminal 3, the supply voltage from the battery can be used as the operating voltage.

[Example of removal processing]
As shown in FIG. 3, when the unlock switch 15 is pressed by a pin or the like, an unlock signal is input to the MPU 17, and the MPU 17 detects the press of the unlock switch 15 (step S11).

  At this time, the MPU 17 reads from the ROM 19 a data erasure program corresponding to the mass storage for deleting the data recorded in the USB memory 2, and arranges it in the RAM 18 (step S12).

  Then, the MPU 17 executes a data erasing program and issues a command (for example, ERASE command) for erasing all data recorded in the USB memory 2 (step S13). This command is transmitted to the USB memory 2 via the switch controller 16 and the terminal 11.

  When the MPU 17 confirms that all data in the USB memory 2 has been erased by calling a callback function from the USB memory 2 (USB function) side, the MPU 17 unlocks the lock mechanism 13 with respect to the lock controller 14. Instruct the state to enter. In response to this, the lock controller 14 generates a lock control signal, thereby causing the lock mechanism 13 to release the lock (step S14).

  Then, after deleting the authentication data in the authentication information storage memory 22 (step S15), the MPU 17 controls the LCD controller 25, thereby notifying the LCD 24 that the USB memory 2 can be removed. Display is performed (step S16).

  As described above, in the present embodiment, the recording medium is mechanically locked and the recording medium cannot be removed from the security adapter 1 unless data is erased. That is, in a state where data remains in the recording medium, the recording medium cannot be removed from the security adapter 1 security adapter. For this reason, it is possible to prevent a recording medium in which data is recorded from being directly connected to a third party user terminal. Since the authorized user uses the security adapter 1 to enhance security protection for the recording medium, the recording medium is not normally removed from the security adapter 1 security adapter.

  Further, this embodiment has an advantage that the authentication equipment such as the management server 6 shown in FIG. 8 and the mechanism (hardware) for encrypting and decrypting data are not required. . Furthermore, there is an advantage that a recording medium (recording medium on which no data is recorded) removed from the security adapter 1 can be reused for various purposes.

  In addition, as long as the terminal 12 is in the state connected to the user terminal 3, the supply voltage from the user terminal 3 can be used for the operating voltage required for execution of said removal process. On the other hand, if the terminal 12 is not connected to the user terminal 3, the supply voltage from the battery can be used as the operating voltage.

[Example of communication relay processing]
In a state where the USB memory 2 is attached to the security adapter 1 by the above mounting process, the function of the switch controller 16 blocks the communication port between the USB memory 2 and the user terminal 3 (between terminals 11-12). Non-conducting).

  For this reason, as shown in FIG. 4, the MPU 17 controls the LCD controller 25 in the same manner as in the above step S2 before accessing the USB memory 2 from the user terminal 3, so that the LCD 24 gives the user Display for prompting the user to input authentication information (step S21). Also, the MPU 17 acquires authentication information input by the user via the biometric sensor 20 and the RAM 18 as in step S3 (step S22).

  Then, the MPU 17 collates the authentication information acquired in step S22 with the authentication information registered in the authentication information storage memory 22 in step S4 (step S23).

  As a result, when it is determined that the user is an authorized user (when both authentication information matches), the MPU 17 instructs the switch controller 16 to open the communication port between the USB memory 2 and the user terminal 3. . In response to this, the switch controller 16 conducts between the terminals 11-12 (step S25). Further, the MPU 17 controls the LCD controller 25 to cause the LCD 24 to display to notify the user that the authentication has been successful (step S26).

  Accordingly, the user (user terminal 3) can perform data writing to the USB memory 2 and data reading from the USB memory 2 via the security adapter 1.

  On the other hand, if it is determined in step S24 that the user is not an authorized user, the MPU 17 does not give an instruction to the switch controller 16. For this reason, the communication port between the USB memory 2 and the user terminal 3 remains blocked. Therefore, access to the USB memory 2 by a third party user terminal can be prevented. Although not shown in the figure, the MPU 17 may cause the LCD 24 to display to notify the user that the authentication has failed.

  The security adapter 1 charges the battery using the supply voltage from the user terminal while being connected to the user terminal 3.

  Hereinafter, a specific configuration example of the lock control mechanism 13 and an alternative configuration example of the lock release switch 15 will be described in order with reference to FIGS.

[Configuration example of locking mechanism]
The lock mechanism 13 can be simply configured as shown in FIGS. Here, FIGS. 5 and 6 respectively show a top perspective view and a side view of the lock mechanism 13 when the terminal 200 of the USB memory 2 is a plug corresponding to an A terminal defined by the USB standard.

  Specifically, the lock mechanism 13 includes a metal fitting (conductor) 131 and a motor 132. The motor 132 moves the bracket 131 up and down in accordance with the lock control signal 101 from the lock controller 14 described above. When the lock control signal 101 instructs to lock, the motor 132 moves the metal fitting 131 downward to fit into the hole 201 provided in the terminal 200, so that the USB memory 2 cannot be removed from the security adapter 1. On the other hand, when the lock control signal 101 instructs unlocking, the motor 132 moves the metal fitting 131 upward and pulls it out from the hole 201, so that the USB memory 2 can be removed from the security adapter 1.

  However, the configuration shown in FIGS. 5 and 6 is an example, and the lock mechanism 13 may have any configuration as long as it can mechanically (physically) lock the terminal 200 of the USB memory 2 under the control of the microcomputer. A mechanism may be adopted. As another mechanism, for example, there is a mechanism in which a square metal fitting covering the terminal 200 is pressed against the terminal 200 to be crimped and fixed.

[Alternative configuration example of unlock switch]
7A includes two terminals 151 and 152. The lock release switch 15a shown in FIG. Among these, the output voltage of the battery circuit 23 (battery) is supplied to the terminal 151. The terminal 152 terminates a signal line to the MPU 17 shown in FIG. Further, the metal fitting (conductor) 131 shown in FIGS. 5 and 6 is of a slide type capable of coming into contact with both the terminals 151 and 152.

  In a state in which the USB memory 2 is normally attached to the security adapter 1, the terminal 151 and the terminal 152 are non-conductive, and the lock release signal 102 output from the lock release switch 15a is “0 (low level). ) ". Therefore, the USB memory 2 is locked by the lock mechanism 13.

  On the other hand, as shown in FIG. 7B, when the USB memory 2 is forcibly pulled out, the metal fitting 131 comes into contact with the terminals 151 and 152, and the terminals 151 and 152 are electrically connected. For this reason, the supply voltage from the battery becomes the lock release signal 102, and the lock release signal 102 changes to “1 (high level)”. The MPU 17 that has detected this by interrupt or the like erases the data in the USB memory 2 and then releases the lock by the lock mechanism 13 via the lock controller 14.

  Thereby, the same effect as the case where the lock release switch 15 is used will be acquired. In addition, when the lock release switch 15a is used, there is a further effect that unauthorized or forced removal of the USB memory 2 by a third party can be prevented.

  Note that the present invention is not limited to the above-described embodiments, and it is apparent that various modifications can be made by those skilled in the art based on the description of the scope of the claims.

  For example, as another mechanism related to unlocking, when a copper wire stretched around the inside of the security adapter casing becomes non-conductive due to an unauthorized action such as disassembly of the security adapter, the recording medium is automatically For example, a mechanism for releasing the lock by deleting the data inside.

DESCRIPTION OF SYMBOLS 1 Security adapter 2 USB memory 3 User terminal 11, 12, 151, 152, 200 terminal 13 Lock mechanism 14 Lock controller 15, 15a Lock release switch 16 Switch controller 17 MPU
18 RAM
19 ROM
20 Biometric Sensor 21 Sensor Controller 22 Authentication Information Storage Memory 23 Battery Circuit 24 LCD
25 LCD controller 101 Lock control signal 102 Unlock signal 131 Metal (conductor)
132 Motor 201 hole

Claims (5)

A security adapter that connects a recording medium and a device that accesses the recording medium,
A terminal for mounting the recording medium;
A locking mechanism for mechanically locking the recording medium so that it cannot be removed from the terminal;
A release mechanism for releasing the lock;
A control circuit for erasing data recorded on the recording medium upon the release;
Security adapter with In claim 1,
The control circuit relays communication between the recording medium and the device when authentication of a user who uses the adapter is successful. In claim 1 or 2,
The release mechanism includes a switch that generates a signal in response to a predetermined operation by a user using the own adapter,
The security adapter, wherein the control circuit erases the data with the generation of the signal as a trigger. In claim 3,
The switch causes the battery and the control circuit to conduct in response to a pressing operation by the user, and outputs a supply voltage from the battery as the signal to the control circuit. In claim 3,
The switch is configured to connect a battery and the control circuit in response to an operation of removing the recording medium by the user, and output a supply voltage from the battery to the control circuit as the signal.

Images