JP2018185588A - Information processing device and data protection method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing device with tamper resistance, and to provide a data protection method.SOLUTION: An information processing device 1 comprises: a casing 2; a wiring pattern 3 and a wiring pattern 4 provided on at least one face of the casing 2; and a determination unit 5 which determines conduction of the wiring pattern 3 and conduction of the wiring pattern 4. The wiring pattern 3 includes a series of wirings which runs there and back in a predetermined direction. The wiring pattern 4 includes a series of wirings which runs there and back in a direction crossing the predetermined direction. The wiring pattern 3 and the wiring pattern 4 are provided on the casing 2 so that an area where the wiring pattern 3 is disposed and an area where the wiring pattern 4 is disposed overlap.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing apparatus and a data protection method.

  In order to prevent confidential data from being read by unauthorized means, recent information processing apparatuses are required to have tamper resistance. As a structure for preventing an act of illegally obtaining information (hereinafter referred to as a tamper act), for example, an information processing measure described in Patent Document 1 is known.

  An information processing apparatus described in Patent Document 1 includes a security case that houses an electronic component for performing information processing of security information, a print pattern wiring that can detect this when it is physically opened, and a print Memory processing means for making it impossible to erase or read security information from the memory when it is determined that there is an abnormality in the pattern wiring.

JP 2009-093401 A

  However, in the information processing apparatus described in Patent Document 1, when the security case is opened with a sharp tool so as to cut between the wires, an abnormality cannot be detected.

  In view of the above-described problems, an object of the present invention is to provide an information processing apparatus and a data protection method having tamper resistance.

  An information processing apparatus according to one embodiment of the present invention includes a housing, a first wiring pattern and a second wiring pattern provided on at least one surface of the housing, conduction of the first wiring pattern, and the first wiring pattern. And determining means for determining continuity between the two wiring patterns, wherein the first wiring pattern includes a series of wirings that reciprocate in a predetermined direction, and the second wiring pattern intersects the predetermined direction. A series of wirings that reciprocate in the direction in which the first wiring pattern and the second wiring pattern are disposed so that the region where the first wiring pattern is disposed overlaps the region where the second wiring pattern is disposed. The wiring pattern is provided on the casing.

  In the data protection method according to one aspect of the present invention, when continuity between the first wiring pattern and the second wiring pattern provided on at least one surface of the housing is determined and it is determined that continuity cannot be obtained. The data stored in the housing is erased, and the first wiring pattern includes a series of wirings that reciprocate in a predetermined direction, and the second wiring pattern intersects the predetermined direction. The first wiring pattern and the second wiring are arranged so that a region where the first wiring pattern is arranged overlaps a region where the second wiring pattern is arranged. A pattern is provided on the housing.

  According to the present invention, it is possible to provide an information processing apparatus and a data protection method having tamper resistance.

It is a mimetic diagram showing an example of composition of information processor 1 concerning an outline of an embodiment. 1 is a block diagram illustrating an example of a configuration of an information processing apparatus 10 according to a first embodiment. It is sectional drawing of FPC. 1 is an exploded view showing an example of a physical configuration of an information processing apparatus 10 according to a first embodiment. 3 is a schematic plan view showing a wiring pattern 110. FIG. 3 is a schematic plan view showing a wiring pattern 120. FIG. 3 is a block diagram illustrating an example of a configuration of a control unit 200. FIG. FIG. 3 is a block diagram illustrating an example of a configuration of an information processing apparatus according to a second embodiment. FIG. 10 is an exploded view showing an example of a configuration in which five surfaces of a cover part 320 are covered with an FPC 100G. It is an expanded view of FPC100G.

<Outline of the embodiment>
Prior to detailed description of the embodiment, first, an outline of the embodiment will be described. FIG. 1 is a schematic diagram illustrating an example of the configuration of the information processing apparatus 1 according to the outline of the embodiment. As illustrated in FIG. 1, the information processing apparatus 1 includes a housing 2, a wiring pattern 3, a wiring pattern 4, and a determination unit 5. In FIG. 1, for the housing 2, one surface constituting the housing 2 is schematically illustrated. In FIG. 1, the wiring pattern 3 is indicated by a solid line, and the wiring pattern 4 is indicated by a broken line.

  The housing 2 can accommodate hardware for realizing the processing of the information processing apparatus 1 inside. The wiring pattern 3 and the wiring pattern 4 are provided on at least one surface of the housing 2. Here, the wiring pattern 3 includes a series of wirings that reciprocate in a predetermined direction, and the wiring pattern 4 includes a series of wirings that reciprocate in a direction crossing the predetermined direction. That is, the wiring pattern 3 and the wiring pattern 4 are provided on the surface of the housing 2 so that the wiring direction of the wiring pattern 3 and the wiring direction of the wiring pattern 4 intersect. Further, as shown in FIG. 1, the wiring pattern 3 and the wiring pattern 4 are provided in the housing 2 so that the area where the wiring pattern 3 is arranged and the area where the wiring pattern 4 is arranged overlap.

  The determination unit 5 determines the continuity of the wiring pattern 3 and the continuity of the wiring pattern 4. The determination unit 5 is also called determination means. The determination unit 5 is mounted inside the housing 2, for example.

  In the information processing apparatus 1, as described above, two types of wiring patterns having different wiring directions are provided on the surface of the housing 2 in an overlapping manner. For this reason, even if, for example, one wiring pattern is scraped and submerged by a sharp tool or the like and the housing 2 is cut, the trouble of the other wiring pattern is unavoidable. That is, when a tampering action is performed, at least one of the wiring patterns cannot be conducted. For this reason, according to the information processing apparatus 1, it is possible to reliably detect the tampering action.

<Embodiment 1>
Embodiments of the present invention will be described below with reference to the drawings. FIG. 2 is a block diagram of an example of the configuration of the information processing apparatus 10 according to the first embodiment. The information processing apparatus 10 that is a tamper resistant apparatus includes FPCs (Flexible Printed Circuits) 100A to 100F, a control unit 200, and a housing 300.

  Each of the FPCs 100A to 100F is a general double-sided FPC, and has a three-layer structure as shown in FIG. That is, each of the FPCs 100A to 100F includes the pattern layer 101, the pattern layer 102, and the insulating layer 103. The pattern layer 101 is provided with a wiring pattern 110, and the pattern layer 102 is provided with a wiring pattern 120.

  Here, the wiring pattern 110 includes a series of wirings that reciprocate in a predetermined direction, and the wiring pattern 120 includes a series of wirings that reciprocate in a direction intersecting the wiring pattern 110 wiring direction. In the present embodiment, the wiring direction of the wiring pattern 110 and the wiring direction of the wiring pattern 120 are orthogonal to each other. Further, as described above, since the wiring patterns are mounted on both sides of the FPCs 100A to 100F, the area of the wiring pattern 110 and the area of the wiring pattern 120 overlap.

  The FPCs 100 </ b> A to 100 </ b> F are respectively attached to the inner surface of the casing 300 of the information processing apparatus 10 and are electrically connected to the control unit 200 mounted in the information processing apparatus 10. In FIG. 2, a solid line connecting FPCs 100A to 100F and control unit 200 represents a connection between wiring pattern 110 and control unit 200, and a broken line connecting FPCs 100A to 100F and control unit 200 represents a control with wiring pattern 120. The connection with the unit 200 is shown. Thus, in this Embodiment, FPC100A-100F is connected with the control part 200 in parallel.

  The control unit 200 is an electronic component that executes various processes. In the present embodiment, the control unit 200 detects the tampering action particularly by confirming the continuity of the wiring pattern 110 and confirming the continuity of the wiring pattern 120. Here, the control unit 200 does not transmit the data stored in the housing 300 to the wiring pattern 110 and the wiring pattern 120. That is, the wiring pattern 110 and the wiring pattern 120 are used only for confirming conduction. Details of the control unit 200 will be described later.

  FIG. 4 is an exploded view illustrating an example of a physical configuration of the information processing apparatus 10. The casing 300 of the information processing apparatus 10 includes a base unit 310 that houses electronic components such as the control unit 200 and a cover unit 320 that is a lid of the base unit 310. In the following description, a rectangular parallelepiped casing 300 will be described as an example, but the casing 300 may have any shape. For example, the housing 300 can have an arbitrary shape having a space for accommodating electronic components and a surface covering the entire periphery of the space.

  The base part 310 includes a bottom surface 311 and side surfaces 312 to 314. Note that in this embodiment, the housing 300 has a rectangular parallelepiped shape and the bottom surface 311 has a rectangular shape. In the present embodiment, the side surfaces 312 to 314 are provided so as to surround the three sides of the bottom surface 311, but may be provided so as to surround the entire periphery (that is, four sides) of the bottom surface 311. A control unit 200 is provided on the bottom surface 311 of the base unit 310. Further, the FPC 100 </ b> A is attached to the entire area inside the bottom surface 311 of the base portion 310.

  The cover part 320 includes an upper surface 321 and side surfaces 322 to 325. In the present embodiment, the upper surface 321 has substantially the same shape and size as the bottom surface 311 of the base portion 310. When the accommodation space of the base unit 310 is closed by the cover unit 320, the upper surface 321 covers the upper part of the base unit 310, and the side surfaces 322 to 325 cover the periphery of the base unit 310.

  The FPC 100B is attached to the entire area inside the upper surface 321 of the cover part 320. Further, the FPC 100C is attached to the entire area inside the side surface 322 of the cover part 320. Further, the FPC 100 </ b> D is attached to the entire area inside the side surface 323 of the cover part 320. The FPC 100E is attached to the entire area inside the side surface 324 of the cover part 320. Further, the FPC 100F is attached to the entire area inside the side surface 325 of the cover 320.

  In a state where the accommodation space of the base portion 310 is closed by the cover portion 320, that is, in a state where the housing 300 is assembled, the base portion 310 and the cover portion 320 are fixed to each other by the special screw 330. The special screw 330 is not a general-purpose screw but a screw dedicated to the housing 300. For this reason, the housing 300 cannot be opened with a normal tool such as listed in Japanese Industrial Standard (JIS) B4633. That is, in order to open the housing 300, a dedicated tool corresponding to the special screw 330 is required.

  As described above, the wiring pattern 110 and the wiring pattern 120 are provided inside the entire surface of the assembled case 300 without any gap. And as shown in FIG. 4, the wiring patterns 110 and 120 of each surface are electrically connected by the control part 200 and the lead wire 340, respectively. More specifically, in the present embodiment, both ends of a series of wirings in the wiring pattern 110 are electrically connected to the control unit 200, and both ends of a series of wirings in the wiring pattern 120 are electrically connected to the control unit 200. Connected. Thereby, in the control part 200, the confirmation of conduction of the wiring pattern 110 and the confirmation of conduction of the wiring pattern 120 can be performed.

Here, on each surface of the housing 300, as shown in FIG. 5, the wiring pattern 110 reciprocates in the X-axis direction in the drawing. In FIG. 5, the wiring pattern 120 is not shown. 5 representatively shows the wiring pattern 110 provided on the inner side of the bottom surface 311 of the base portion 310, but the wiring pattern 110 provided on the other surface is the same.
Further, on each surface of the housing 300, the wiring pattern 120 has the wiring reciprocated in the Y-axis direction in the drawing as shown in FIG. In FIG. 6, the wiring pattern 110 is not shown. FIG. 6 shows the wiring pattern 120 provided inside the bottom surface 311 of the base portion 310 as a representative, but the wiring pattern 120 provided on the other surface is the same.
Thus, on each surface of the housing 300, the wiring pattern 110 and the wiring pattern 120 are provided so as to be orthogonal to each other. In other words, the wiring pattern 110 and the wiring pattern 120 are provided in the housing 300 so that the region where the wiring pattern 110 is arranged overlaps the region where the wiring pattern 120 is arranged. In this description, a set of the wiring pattern 110 and the wiring pattern 120 on each surface may be referred to as a pattern pair.

  Next, the control unit 200 will be described. FIG. 7 is a block diagram illustrating an example of the configuration of the control unit 200. The control unit 200 includes a control board 210 on which an electronic circuit is mounted, a determination unit 221 that is an electronic circuit for confirming conduction of the FPCs 100A to 100F, and an erasing unit that is an electronic circuit for erasing data stored in the housing. 222. The determination unit 221 and the erasing unit 222 are electrically connected by a signal line 223.

  FPCs 100 </ b> A to 100 </ b> F are electrically connected to the determination unit 221 through lead wires 340. In the present embodiment, the FPCs 100A to 100F are connected in parallel with the determination unit 221. For this reason, in more detail, the wiring pattern 110 of the FPC 100A is connected to the determination unit 221 and the wiring pattern 120 of the FPC 100A is connected to the determination unit 221. Similarly, for the FPCs 100 </ b> B to 100 </ b> F, the wiring pattern 110 and the wiring pattern 120 are respectively connected to the determination unit 221. The determination unit 221 determines whether or not the wiring pattern 110 is conductive and whether or not the wiring pattern 120 is conductive. The determination unit 221 notifies the erasure unit 222 of the determination result through signal transmission via the signal line 223.

  The erasing unit 222 is stored in the housing 300 when the determination unit 221 determines that the FPCs 100A to 100F are not conductive, that is, when any of the wiring patterns 110 or 120 is disconnected. Erase the data that is stored. This data is stored in a storage device (not shown) such as a memory in the housing 300. This storage device may be provided on the control board 210.

  In any of the FPCs 100A to 100F, when the wiring pattern 110 or the wiring pattern 120 is cut, the determination unit 221 detects that the continuity is lost. In this case, the erasing unit 222 erases data. Thus, in this embodiment, the data protection method for determining the continuity of the wiring pattern 110 and the wiring pattern 120 and erasing the data stored in the housing 300 when it is determined that the continuity cannot be obtained. Is also provided.

  The configuration of the first embodiment has been described above. As described above, the housing 300 cannot be opened unless a dedicated tool is used. Therefore, it is necessary to forcibly open the housing 300 or make a hole in the housing 300 in order to perform a tampering action. is there. However, since the FPCs 100A to 100F are connected to the control unit 200 inside the casing 300, when the casing 300 is forcibly opened, the electrical connection between the FPCs 100A to 100F and the control unit 200 is cut off. For this reason, the disconnection is detected by the determination unit 221 and the data is erased by the erasing unit 222. When a tampering action is performed by opening a hole in the housing 300, a hole is opened in the wiring pattern 110 or the wiring pattern 120. As a result, disconnection occurs. Also in this case, the disconnection is detected by the determination unit 221 and the data is erased by the erasure unit 222.

  Further, in this embodiment, since the FPC is attached to the entire surface of the housing 300, it has resistance to tampering from any direction. Note that the wiring patterns 110 and 120 are preferably provided on the entire surface of the housing 300 as described above, but the wiring patterns 110 and 120 may be provided on only one surface or a plurality of the housing 300 may be provided. May be provided on each of the surfaces.

  In the present embodiment, in each of the FPCs 100A to 100F, the wiring pattern 110 and the wiring pattern 120 intersect with each other in the wiring direction, and the areas to be arranged overlap. For this reason, even if an opening parallel to one of the wiring pattern 110 and the wiring pattern 120 is opened (that is, the housing 300 is cut so as not to cut one wiring pattern). ), The wiring of the other wiring pattern is cut. For this reason, also in this case, the determination unit 221 detects a disconnection, and the erasing unit 222 erases the data.

  The FPCs 100 </ b> A to 100 </ b> F are provided on the inner surface of the housing 300. For this reason, the person who performs the tampering action cannot visually recognize the FPCs 100 to 100F. For this reason, it becomes difficult for this person to consider a countermeasure for how to perform the tampering action. Therefore, the information processing apparatus 10 has higher tamper resistance.

  Further, the wiring pattern 110 and the wiring pattern 120 are used only for confirming continuity, and data stored in the housing 300 does not flow through them. For this reason, even if the wiring pattern is exposed without damaging the FPCs 100A to 100F by tampering, data is not extracted from the FPCs 100A to 100F.

<Embodiment 2>
Next, a second embodiment will be described. In Embodiment 1, although FPC100A-100F was connected with the control part 200 in parallel, you may be connected with the control part 200 in series. FIG. 8 is a block diagram of an example of the configuration of the information processing apparatus 10 according to the second embodiment. In FIG. 8, the solid line indicates the electrical connection relationship of the wiring pattern 110, and the broken line indicates the electrical connection relationship of the wiring pattern 120.

As shown in FIG. 8, in the present embodiment, is connected to the control unit 200 in series. In other words, in the present embodiment, pattern pairs provided on a plurality of surfaces of the housing 300 are connected in series. More specifically, the wiring patterns 110 of the FPCs 100A to 100F are electrically connected to the control unit 200 in series. That is, both ends of the wiring of the wiring pattern 110 connected in series are connected to the control unit 200. Further, the wiring patterns 120 of the FPCs 100A to 100F are electrically connected to the control unit 200 in series. That is, both ends of the wiring of the wiring pattern 120 connected in series are connected to the control unit 200.

  Even when the FPCs 100A to 100F are connected in series as in the present embodiment, it can be determined whether the FPCs 100A to 100F are conducting or not conducting. For this reason, also in the present embodiment, a tampering action can be prevented as in the first embodiment. Furthermore, the number of wiring patterns to be confirmed by the control unit 200 when connected in series is smaller than when connected in parallel. For this reason, according to the present embodiment, compared to the first embodiment, there are advantages that the burden on the control unit 200 is reduced and the outer shape of the control board 210 can be reduced. Note that the series order shown in FIG. 8 is an example, and the connection may be realized in another order. 8 shows an example in which the wiring pattern 110 and the wiring pattern 120 are separately connected to the control unit 200, but the wiring pattern 110 and the wiring pattern 120 may be connected in series. Good.

<Modification of Embodiment>
Next, a modification of the embodiment will be described. In the first embodiment and the second embodiment, six FPCs FPCs 100 </ b> A to 100 </ b> F are used to attach FPCs to all six surfaces of the housing 300. However, any number of FPCs may be used to attach the FPC to all six surfaces of the housing 300.

  For example, in the above embodiment, five FPCs 100B to 100F are used to attach the FPC to the five surfaces of the cover part 320. However, the cover part 320 is formed by one FPC 100G (see FIGS. 9 and 10). May be covered. FIG. 9 is an exploded view showing an example of a configuration in which the FPC 100G covers five surfaces of the cover portion 320, and FIG. 10 is an exploded view of the FPC 100G.

  Needless to say, various modifications of the shape and number of FPCs are possible. For example, when the base part 310 has four side surfaces, there is one FPC for the bottom surface and the five side surfaces of the base part 310 and one FPC for the top surface of the cover part 320. May be used.

  Further, in the embodiment, the hexahedral case 300 is shown, but any type of case such as a tetrahedron or an octahedron may be used.

  Note that the present invention is not limited to the above-described embodiment, and can be changed as appropriate without departing from the spirit of the present invention. For example, in the above embodiment, the housing is a hexahedron, but any shape of housing such as a tetrahedron or an octahedron may be used.

1, 10 Information processing device 2, 300 Housing 3, 4, 110, 120 Wiring pattern 5 Determination unit 200 Control unit 221 Determination unit 222 Erasing unit 310 Base unit 320 Cover unit

Claims (8)

A housing,
A first wiring pattern and a second wiring pattern provided on at least one surface of the housing;
Determining means for determining conduction of the first wiring pattern and conduction of the second wiring pattern;
The first wiring pattern includes a series of wirings reciprocating in a predetermined direction,
The second wiring pattern includes a series of wirings that reciprocate in a direction intersecting the predetermined direction,
The first wiring pattern and the second wiring pattern are provided on the casing so that an area where the first wiring pattern is arranged overlaps an area where the second wiring pattern is arranged. Information processing device. The information processing apparatus according to claim 1, wherein the first wiring pattern and the second wiring pattern are provided on an inner surface of the housing. The information processing apparatus according to claim 1, wherein a pattern pair that is a set of the first wiring pattern and the second wiring pattern is provided on each of a plurality of surfaces of the casing. The information processing apparatus according to claim 3, wherein the pattern pairs provided on the plurality of surfaces are connected in series. The information processing apparatus according to claim 3, wherein the pattern pair is provided on the entire surface of the housing. The information processing apparatus according to claim 1, further comprising: an erasing unit that erases data stored in the housing when it is determined by the determination unit that electrical continuity cannot be obtained. The information processing apparatus according to any one of claims 1 to 6, wherein the first wiring pattern and the second wiring pattern are used only for confirming conduction. Determining the continuity of the first wiring pattern and the second wiring pattern provided on at least one surface of the housing;
When it is determined that continuity cannot be obtained, the data stored in the housing is erased,
The first wiring pattern includes a series of wirings reciprocating in a predetermined direction,
The second wiring pattern includes a series of wirings that reciprocate in a direction intersecting the predetermined direction,
The first wiring pattern and the second wiring pattern are provided on the casing so that an area where the first wiring pattern is arranged overlaps an area where the second wiring pattern is arranged. Data protection method.

Images