JPH09134124A - Ciphering device and deciphering device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To maintain the security of high level by setting a parameter group corresponding to a specific hierarchy as a ciphering key to enable cipherings and decipherings having hierarchical structures with a simple system structure. SOLUTION: A random number sequence is generated by a random number sequence calculating part 1102 from at least one parameter group inputted from a parameter inputting part 1101 and the cipherings of original data inputted from an original data inputting part 1105 are performed by a ciphering arithemetic processing part 1106 while using the random number sequence. Moreover, a selected parameter group is generated by selecting parameters of numbers corresponding to the hierarchical value inputted from a hierarchical value inputting part 1103 from parameter groups with a parameter selection part 1104. Then, the ciphered data ciphered by the ciphering arithemetic processing part 1106 and the selected parameter group generated by the parameter selection part 1104 are synthesized by a ciphered data synthesizing part 1107 and then the synthesized ciphered data are made to be outputted from a ciphered data output part 1108.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an encryption device and a decryption device, and in particular, it is used in an environment where it is necessary to hierarchically divide users who can access information according to the type and importance of the information. The present invention relates to a hierarchical encryption device and a hierarchical decryption device.

[0002]

2. Description of the Related Art A conventional hierarchical encryption / decryption method is disclosed, for example, in Japanese Patent Laid-Open No. 6-259012.
In the encryption / decryption method disclosed in this publication, first, a key generation right list, which is a list of identification numbers of a storage medium representing a sharer of a file to be written, is generated, and then a master key is generated based on this key generation right list. To generate a data key based on the selected master key and key generation right list. Then, the plaintext file is encrypted using this data key to generate a ciphertext file, and the ciphertext file, the key generation right list, and the file name are written in the storage device.

At the time of decryption, first, the ciphertext file and the key generation right list are read from the storage device according to the designated file name. Next, it is checked whether the identification number of the storage medium is designated in the read key generation right list, or whether the identification number indicates the boss of the person designated in the key generation right list. If you check the hierarchy and pass this check, generate a data key based on the key generation right list and the master key selected from your own card master key list, and use this data key to generate the ciphertext file. Is decrypting. In this way, the hierarchical keys for encryption and decryption are generated based on the key generation right list and the master key list.

[0004]

However, in the encryption method described in Japanese Patent Laid-Open No. 6-259012 described above, the encryption method for encryption or decryption is performed after checking the key generation right list corresponding to the hierarchy. Generating a data key. That is, since the encryption / decryption process and the hierarchical process are performed separately, an extra step is required, resulting in a complicated system configuration. Further, since the layers are hierarchized by the positions of the bits forming the encryption key, there is an insufficient aspect to maintain a higher level of security.

The present invention has been made in view of such a problem, and an object thereof is to provide an encryption device and an encryption device capable of maintaining a higher level of security with a simple system configuration. To provide a method.

[0006]

In order to achieve the above object, the encryption apparatus of the present invention is an original data input means for inputting original data to be encrypted and a parameter input for inputting at least one parameter group. Means, a random number sequence operation means for generating a random number sequence from at least one parameter group input to the parameter input means, and an element input from the original data input means using the random number generated by the random number sequence operation means. An encryption calculation processing means for encrypting data, a hierarchical value input means for inputting a hierarchical value, and a number of parameters corresponding to the hierarchical value input from the hierarchical value input means are selected from the parameter group to select parameters. Parameter selection means for generating a group, encrypted data encrypted by the encryption operation processing means, and a selection parameter generated by the parameter selection means. And the encrypted data combining means for combining the over data group comprises a synthesized encrypted data output means for outputting the encrypted data synthesized in this encrypted data synthesis means.

Further, the decryption apparatus of the present invention comprises a synthetic encrypted data input means for inputting synthetic encrypted data obtained by synthesizing a selected parameter group selected from at least one parameter group input at the time of encryption, An encrypted data / parameter separating unit that separates the combined encrypted data input to the combined encrypted data input unit into encrypted data and a selection parameter group, and an encryption key that inputs an encryption key composed of a key parameter group. Input means and the encrypted data
A selection parameter group separated by the parameter separation means,
Parameter combining means for combining the key parameter group input from the encryption key input means to generate a combined parameter group, and random number sequence operation for generating a random number sequence using the combined parameter group generated by the parameter combining means Means, a decryption operation processing means for decrypting the encrypted data separated by the encrypted data / parameter separating means using the random number sequence generated by the random number sequence operation means, and the decryption operation processing means. And decrypted data output means for outputting the decrypted decrypted data.

Further, the encryption apparatus of the present invention comprises an original data input means for inputting original data to be encrypted, and at least 1.
Parameter input means for inputting one parameter group, random number sequence operation means for generating a random number sequence from at least one parameter group input to this parameter input means, and the random number generated by this random number sequence operation means An encryption calculation processing means for encrypting the original data input from the data input means, a hierarchical value input means for inputting a hierarchical value,
Parameter selecting means for selecting a number of parameters corresponding to the hierarchical value input from the hierarchical value input means from the parameter group to generate a selection parameter group, and the at least one of the selection parameter group generated by the parameter selecting means. Location information generating means for generating location information indicating a position in a parameter group, encrypted data encrypted by the encryption operation processing means, selected parameter group generated by the parameter selecting means, and the location information generating means. An encrypted data synthesizing means for synthesizing the generated location information and a synthetic encrypted data output means for outputting the encrypted data synthesized by the encrypted data synthesizing means are provided.

That is, the encryption device of the present invention generates a random number sequence from the at least one parameter group input from the parameter input means by the random number sequence operation means, and uses this random number sequence to input from the original data input means. The encrypted original data is encrypted by the encryption operation processing means. Also,
The number of parameters corresponding to the hierarchical value input from the hierarchical value input means is selected from the parameter group by the parameter selection means to generate a selected parameter group. Then, the encrypted data encrypted by the encryption operation processing means and the selected parameter group generated by the parameter selecting means are combined by the encrypted data combining means, and the combined encrypted data is output from the encrypted data output means. Output it.

Further, the decrypting device of the present invention encrypts the synthetic encrypted data obtained by synthesizing the selected parameter selected from at least one parameter group input at the time of encryption and input to the encrypted data input means. The data and the selected parameter group are separated by the encrypted data / parameter separating means, and the encryption key composed of the key parameter group is input from the encryption key input means. Next, the selected parameter group separated by the encrypted data / parameter separation means and the key parameter group input from the encryption key input means are combined by the parameter combining means to generate a combined parameter group, and a random number sequence A random number sequence is generated using the synthesis parameter group generated by the calculation means. Then, using the random number sequence generated by this random number sequence operation means, the decryption operation processing means performs decryption of the encrypted data separated by the encrypted data / parameter separation means, and outputs the decrypted data to the decrypted data. Output from the means.

In the encryption device of the present invention, the random number sequence is generated from the at least one parameter group input to the parameter input unit by the random number sequence operation unit, and the random number sequence is used to input from the original data input unit. The encrypted original data is encrypted by the encryption operation processing means. Next, the number of parameters corresponding to the hierarchical value input from the hierarchical value input means is selected from the parameter group by the parameter selection means to generate a selected parameter group, and the selected parameter group generated by the parameter selection means is The location information generating means generates location information indicating a position in at least one parameter group. Then, the encrypted data encrypted by the encryption operation processing means, the selected parameter group generated by the parameter selecting means, and the location information generated by the location information generating means are combined by the encrypted data combining means, The combined encrypted data is output from the encrypted data output means.

[0012]

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a diagram showing the configuration of an encryption device 1100 according to the first embodiment of the present invention. In FIG. 1, a random number sequence calculation unit 1102 and a parameter selection unit 1104 are provided at the output stage of the parameter input unit 1101. The parameter selection unit 1104 is provided at a position that also receives the output of the hierarchical value input unit 1103. The encryption operation processing unit 1106 is provided at a position that receives the outputs of the random number sequence operation unit 1102 and the original data input unit 1105. Further, the encrypted data synthesizing unit 1107 is provided at a position for receiving the outputs of the encryption operation processing unit 1106 and the parameter selecting unit 1104, and the synthetic encrypted data output unit 1108 is provided at the subsequent stage.

FIG. 2 is a diagram showing the configuration of a decryption device 1200 corresponding to the encryption device 1100 shown in FIG. FIG.
In the above, an encrypted data / parameter separation unit 1202 is provided after the combined encrypted data input unit 1201,
A parameter synthesizing unit 1204 is provided at a position for receiving the outputs of the encrypted data / parameter separating unit 1202 and the encryption key input unit 1203. This parameter synthesizer 12
A random number sequence operation unit 1208 is provided in the subsequent stage of 04, and a decryption operation processing unit 1205 is provided in both output stages of the random number sequence operation unit 1208 and the encrypted data / parameter separating unit 1202, and a decryption operation processing unit 1205 is provided in the subsequent stage. A data output unit 1206 is provided.

Below, the encryption device 110 having the above-mentioned configuration
Fig. 1 shows the procedure in which the original data 1109 is encrypted by 0.
This will be described with reference to FIG. 1 in the parameter input section 1101
Two parameter groups A (1), A (2), ..., A (z) are input. The random number sequence calculation unit 1102 converts the input parameter group A (1), A (2), ..., A (z) into an initial value group S.
(1), S (2), ..., S (m) and parameter group P
(1), P (2), ..., P (n), and then these initial value groups S (1), S (2), ..., S (m) and parameter groups P (1), P (n). Using (2), ..., P (n),
The chaos generation operation described below is performed to calculate a random number sequence, and the random number sequence is delivered to the encryption operation processing unit 1106.

Here, in the first embodiment, three sets of non-linear differential equations (Equation (1), Equation (2), Equation (3)) shown below are included in the chaos generation operation for generating a random number sequence. To use.

Dx / dt = A (y−z) (1) dy / dt = x (B−z) −y (2) dz / dt = xy−Cz (3) where A, B, C is, for example, a parameter group P (1),
P (2) and P (3) correspond, and x, y, and z correspond to initial value groups S (1), S (2), and S (3), for example. Of course, it is not limited to this, but A, B,
Parameter group P (5), P (6), P (7) may correspond to C, or parameter group P as A may be used.
(1), P (2), P (3), P (4) correspond to each other, and as B, parameter groups P (5), P (6), P (7), P
(8) corresponds, and as C, parameter groups P (9), P
(10), P (11), and P (12) may correspond.
Furthermore, many parameter groups may correspond to A, B, and C. Similarly, the initial value group corresponding to x, y, z is S
It is not limited to (1), S (2) and S (3). However, the parameter group used as A, B, C at the time of encryption and the initial value group used as x, y, z must use the same parameter group and initial value group at the time of decryption.

The encryption operation processing unit 1106 performs the operation of multiplying the input random number sequence and the original data 1109 delivered from the original data input unit 1105 to encrypt the original data.

On the other hand, the hierarchical value input unit 1103 inputs the hierarchical value according to the confidentiality and supplies it to the parameter selection unit 1104. The hierarchical value in this case is the above-mentioned Japanese Patent Laid-Open No. 6-
As described in Japanese Patent No. 259012, it is determined in consideration of an environment in which users need to be hierarchically divided according to the type and importance of accessible information, such as a company organization. Parameter selection unit 1104
Is a parameter group P (1), P (2), ..., P (n)
Has a definition file in which the hierarchical value groups K (1), K (2), ..., K (k) are associated with each other, and the hierarchical value K (g) input from the hierarchical value input unit 1103. (Where 1 ≦
g ≦ k) is associated with the parameter P (i) (here, 1 ≦ i ≦ n) by the parameter selection unit 1104, and the parameter groups P (i) and P (i) and P (i) and above are set.
(J), ..., P (n) are selected as a selection parameter group.

Therefore, the encrypted data synthesizing unit 1107
, S (m) and the initial value groups S (1), S (2), ..., S (m) input from the parameter input unit 1101 and the parameter groups P (i), P (j), P (i) and above. ..., only P (n) is delivered. In the encrypted data synthesizing unit 1107, the encrypted data encrypted in the encryption operation processing unit 1106,
Initial value groups S (1), S (2), ..., S (m) and P
(I) Parameter group P (i), P (j), ..., P above
(N) and (n) are combined, and the combined result is delivered to the encrypted data output unit 1108. Therefore, the parameter groups P (1), P (2), ..., P (h) that have not been synthesized here are used.
(Here, 1 ≦ h <i ≦ n and i = h + 1) becomes the encryption key, and the encryption is performed at the level corresponding to h. The combined encrypted data output unit 1108 outputs the output result of the encrypted data combining unit 1107 as combined encrypted data in an arbitrary data format.

The procedure for decrypting the original data encrypted by the above method will be described below with reference to FIG. The combined encrypted data input unit 1201 receives the combined encrypted data and transfers it to the encrypted data / parameter separating unit 1202. The encrypted data / parameter separation unit 1202 converts the combined encrypted data into encrypted data and initial value groups S (1), S
(2), ..., S (m) and P (i) or more parameter groups P (i), P (j) ,. To initial value group S
Parameter groups P (i), P (j), ..., P (n) above (1), S (2), ..., S (m) and P (i) are delivered to the parameter composition unit 1204.

In order to perform the decryption here, it is necessary to calculate the same random number sequence as the random number sequence calculation at the time of encryption, and for that purpose, the initial value groups S (1), S (2), ..., S. (M) and the parameter groups P (1), P (2), ..., P (n) may be aligned. That is, here, an encryption key of h level or higher is required. Therefore, the parameter groups P (1), P (2), ..., P (h) not selected at the time of encryption may be input from the encryption key input unit 1203 as encryption keys. That is, the parameter synthesizing unit 1204 receives the initial value group S from the encrypted data / parameter separating unit 1202.
Parameter groups P (i), P (j), ..., P (n) above (1), S (2), ..., S (m) and P (i) are input from the encryption key input unit 1203. Parameter group P
(1), P (2), ..., P (h) are combined and delivered to the random number sequence calculation unit 1208.

The random number sequence calculation unit 1208 has an initial value group S.
(1), S (2), ..., S (m) and parameter group P
Using (1), P (2), ..., P (n), the above-described chaos generation operation is performed to generate a random number sequence for decoding, and the random number sequence is delivered to the decoding operation processing unit 1205. The decryption operation processing unit 1205 decrypts the data by performing an operation of multiplying the random number sequence and the encrypted data delivered from the encrypted data / parameter separating unit 1202. The decrypted data is the decrypted data output unit 1206.
And is output as decrypted data 2208 in the same data format as the original data.

As described above, in the first embodiment, the layer to be encrypted is associated with the parameter group by selecting only a specific parameter group according to the layer value, and the layer below the layer to be encrypted is supported. The parameter group is added to the encrypted data together with the initial value group.

Further, at the time of decryption, the parameter group and the initial value group corresponding to the hierarchy and below are read, and the decryption is performed using the parameter group corresponding to the hierarchy and above inputted as the encryption key.

Since the parameter group corresponding to a specific layer is set as an encryption key in this way, it is possible to perform encryption and decryption having a hierarchical structure with a simple system configuration, and to provide a higher level of security. Can be maintained.

The second embodiment of the present invention will be described below.
In the above-described first embodiment, the encryption key input unit 120 is used for decryption.
The parameter group as the encryption key to be input from 3 is
The selected parameter group (Pi, Pj, ..., Pn) is subtracted from the parameter group (P1, P2, ... Pn) input from the parameter input unit 1101 during encryption, that is, the parameter group (P1, P2 ,. , Ph) and its length is fixed.

However, in this embodiment, a user of a hierarchy that is capable of decrypting all encrypted data, represented by a system administrator or a president, has a key of any length corresponding to the selected parameter group to be used. Must own the parameter. Therefore, in the second embodiment, as shown in FIG. 3, the location information generation unit 2111 is arranged after the parameter selection unit 2104, and the parameter input unit 210 is provided.
Parameter groups input from 1 (P1, P2, ... P
n) and the selected parameter group (Pi, Pj, ..., Pn) output from the parameter selection unit 2104, and information indicating up to which level the parameter has been selected,
That is, information indicating the position of the selected parameter group (Pi, Pj, ..., Pn) in the parameter group (P1, P2, ... Pn) is supplied to the encrypted data synthesizing unit 2107 as location information. Therefore, the synthetic encrypted data output unit 2108 outputs the synthetic encrypted data 2110 in which the location information is added to the synthetic encrypted data in the first embodiment.

The parameter input unit 210 shown in FIG.
1, random number sequence operation unit 2102, encryption operation processing unit 210
6, original data input unit 2105, hierarchical value input unit 2103,
The operation of the parameter selection unit 2104 is the same as that of the first embodiment, and thus the description thereof is omitted here.

At the time of decryption, the parameter / location information separating unit 2202 shown in FIG. 4 separates the parameter group and the location information from the combined encrypted data and inputs them to the parameter combining unit 2204, and the encrypted data is subjected to a decryption operation Input to the unit 2205.

At this time, the position of the selected parameter group (Pi, Pj, ..., Pn) in the parameter group (P1, P2, ... Parameter group P (i), P (j), ..., P (n)
Longer parameters (P1, P2, ..., Pi, ...,
(Pn, ..., Pt) is input from the encryption key input unit 2203, the parameter synthesizing unit 2204 uses the parameter groups (P1, P2, ..., Pi ,.
, Pt), the parameter group required for decoding can be completed. After that, the random number sequence calculation unit 2207 calculates the random number sequence as in the first embodiment, and then the decryption calculation processing unit 2205 calculates the random number sequence and the encrypted data delivered from the parameter / location information separation unit 2202. Data is decrypted by performing a multiplication operation. The decrypted data is delivered to the decrypted data output unit 2206 and output in the same data format as the original data.

According to the above-described second embodiment, there is an effect that the encrypted data of the level up to the hierarchical value possessed by the user can be decrypted with one encryption key. Note that the above-described encryption devices 1100 and 2100 and decryption device 120
0 and 2200 may be composed of ordinary computers.
Further, the internal processing units other than the input / output unit may be configured by either hardware or software. Further, in this embodiment, the encryption device and the decryption device are configured separately, but the random number sequence operation unit has the same configuration, so it can be shared. Further, since the decryption operation processing section only performs the inverse operation with respect to the encryption operation processing section, it can be shared if the operation direction can be changed. Therefore, the sharable part may be provided with the other functions of the encryption device and the decryption device so as to be integrated.

Further, in the above-mentioned embodiment, the equations (1), (2) and (3) are used as the nonlinear differential equations used in the chaos generation operation for encryption and decryption. Other differential equations including a function may be used.

Further, in the above-described embodiment, one parameter group is input from the parameter input section and separated into an initial value group and a parameter group. However, the initial value group is the first parameter group and the parameter group is the second parameter group. As a parameter group of
The parameter input unit 1101 stores these two parameter groups.
May be input.

In the above embodiment, only the parameter group is used as the encryption key, but the initial value group and the parameter group may be combined to form the encryption key. Further, in the above-described embodiment, a non-linear operation such as a chaos generation operation is used in order to maintain a higher level of security, but if an appropriate operation is performed using at least one parameter group, a random number is generated using a linear operation. Even if it occurs, it is possible to maintain the same security level as the conventional one.

The embodiments described above include inventions having the following configurations. (1) Original data input means for inputting original data to be encrypted, parameter input means for inputting at least one parameter group, and random numbers for generating a random number sequence from at least one parameter group input to this parameter input means Column operation means, encryption operation processing means for encrypting the original data input from the original data input means by using the random number generated by the random number sequence operation means, and hierarchical value input means for inputting a hierarchical value Parameter selection means for selecting a number of parameters corresponding to the hierarchical value input from the hierarchical value input means from the parameter group to generate a selected parameter group; and encrypted data encrypted by the encryption operation processing means. , The encrypted data combining means for combining the selected parameter group generated by the parameter selecting means, and the encrypted data combining means. An encrypted device, comprising: a combined encrypted data output unit that outputs the generated encrypted data. (2) Synthetic encrypted data input means for inputting synthetic encrypted data obtained by synthesizing a selected parameter group selected from at least one parameter group input at the time of encryption, and input to the synthetic encrypted data input means. Encrypted data / parameter separating means for separating the combined encrypted data into encrypted data and a selected parameter group, encryption key input means for inputting an encryption key composed of a key parameter group, and the encrypted data parameter Parameter combining means for combining the selected parameter group separated by the separating means and the key parameter group input from the encryption key input means to generate a combined parameter group, and a combined parameter group generated by the parameter combining means Using the random number sequence calculating means for generating a random number sequence using the random number sequence generating means and the encryption using the random number sequence generated by the random number sequence calculating means. Decryption operation processing means for decrypting the encrypted data separated by the data / parameter separation means, and decryption data output means for outputting the decrypted data decrypted by the decryption operation processing means are provided. A decoding device characterized by: (3) Original data input means for inputting original data to be encrypted, parameter input means for inputting at least one parameter group, and random numbers for generating a random number sequence from at least one parameter group input to this parameter input means Column operation means, encryption operation processing means for encrypting the original data input from the original data input means by using the random number generated by the random number sequence operation means, and hierarchical value input means for inputting a hierarchical value Parameter selecting means for generating a selection parameter group by selecting from the parameter group a number of parameters corresponding to the hierarchy value input from the hierarchy value inputting means, and the at least one selection parameter group generated by the parameter selecting means. Location information generating means for generating location information representing a position in one parameter group, and the encryption Encryption data combining means for combining the encrypted data encrypted by the encryption operation processing means, the selected parameter group generated by the parameter selecting means, and the location information generated by the location information generating means, and this encrypted data An encrypted device, comprising: combined encrypted data output means for outputting the encrypted data combined by the combining means. (4) Synthetic encryption for inputting synthetic encrypted data obtained by synthesizing a selected parameter group selected from at least one parameter group input at the time of encryption and location information indicating the position of the selected parameter group in the parameter group From the encrypted data input means, the parameter / location information separating means for separating the synthetic encrypted data input to the synthetic encrypted data input means into the encrypted data, the selection parameter group, and the location information, and the key parameter group. Parameters other than the selected parameter group are selected from the encryption key input from the encryption key input means by using the encryption key input means for inputting the configured encryption key and the location information separated by the parameter / location information separation means. A group is extracted, and the extracted parameter group and the parameter And a random number sequence calculating means for generating a random number sequence by using the synthetic parameter group generated by the parameter synthesizing means. A decryption operation processing means for decrypting the encrypted data separated by the parameter / location information separation means using the random number sequence generated by the random number sequence operation means, and a decryption operation processing means for decryption by the decryption operation processing means. And a decoded data output means for outputting the decoded data. (5) The configuration (1) or (3), wherein the random number sequence calculation means generates a random number sequence by chaos generation calculation.
The encryption device according to any one of 1. (6) The configuration (2) or (4), wherein the random number sequence calculation means generates a random number sequence by chaos generation calculation.
The decoding device according to any one of 1. (7) The chaotic generation operation is the following three sets of non-linear differential equations (equation (1), equation (2), and equation (3)) dx / dt = A (yz) (1) dy / dt = x (B-z) -y (2) dz / dt = xy-Cz (3) (A, B, C are parameters, and x, y, z are initial values) are used. The encryption device according to the configuration (5). (8) The chaotic generation operation is the following three sets of non-linear differential equations (Equation (1), Equation (2), Equation (3)) dx / dt = A (yz) (1) dy / dt = x (B-z) -y (2) dz / dt = xy-Cz (3) (A, B, C are parameters, and x, y, z are initial values) are used. The decoding device according to the configuration (6). (9) The encryption device according to any one of the configurations (1) and (3), wherein the at least one parameter group is separable into an initial value group and a parameter group. (10) The decoding device according to any one of the configurations (2) and (4), wherein the at least one parameter group is separable into an initial value group and a parameter group.

[0036]

According to the present invention, it is possible to perform encryption and decryption having a hierarchical structure with a simple system configuration and to maintain a higher level of security.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an encryption device according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of a decoding device according to the first embodiment of the present invention.

FIG. 3 is a diagram showing a configuration of an encryption device according to a second exemplary embodiment of the present invention.

FIG. 4 is a diagram showing a configuration of a decoding device according to a second embodiment of the present invention.

[Explanation of symbols]

1100 ... Encryption device, 1101 ... Parameter input unit,
1102 ... Random number sequence operation unit 1103 ... Hierarchical value input unit, 1
104 ... Parameter selection unit, 1105 ... Original data input unit, 1106 ... Encrypted arithmetic processing unit, 1107 ... Encrypted data synthesizing unit, 1108 ... Synthetic encrypted data output unit, 12
00 ... Decryption device, 1201 ... Synthetic encrypted data input unit, 1202 ... Encrypted data / parameter separating unit, 12
03 ... Encryption key input unit, 1204 ... Parameter synthesizing unit, 1
Decoding operation processing unit 205 ... Decoded data output unit 1206 ... Random number sequence operation unit.

Claims (3)

[Claims] 1. An original data input means for inputting original data to be encrypted, a parameter input means for inputting at least one parameter group, and a random number sequence generated from at least one parameter group input to this parameter input means. Random number sequence calculating means, encryption operation processing means for encrypting the original data input from the original data inputting means by using the random number generated by the random number sequence calculating means, and hierarchical value input for inputting a hierarchical value Means, parameter selecting means for selecting a number of parameters corresponding to the hierarchical value input from the hierarchical value input means from the parameter group to generate a selected parameter group, and encryption encrypted by the encryption operation processing means. Data and
An encrypted data synthesizing means for synthesizing the selected parameter group generated by the parameter selecting means, and a synthetic encrypted data output means for outputting the encrypted data synthesized by the encrypted data synthesizing means. And that the encryption device. 2. A combined encrypted data input means for inputting combined encrypted data obtained by combining selected parameter groups selected from at least one parameter group input at the time of encryption, and the combined encrypted data input means. Encrypted data / parameter separating means for separating the input synthetic encrypted data into encrypted data and a selection parameter group, encryption key input means for inputting an encryption key composed of a key parameter group, and the encrypted data Parameter combining means for combining the selected parameter group separated by the parameter separating means and the key parameter group input from the encryption key input means to generate a combined parameter group, and the combining generated by this parameter combining means By using the random number sequence calculation means for generating a random number sequence using the parameter group and the random number sequence generated by this random number sequence calculation means Decoding operation processing means for decrypting the encrypted data separated by the encrypted data / parameter separating means, and decryption data output means for outputting the decrypted data decrypted by the decryption operation processing means A decoding device comprising: 3. An original data input means for inputting original data to be encrypted, a parameter input means for inputting at least one parameter group, and a random number sequence generated from at least one parameter group input to this parameter input means. Random number sequence calculating means, encryption operation processing means for encrypting the original data input from the original data inputting means by using the random number generated by the random number sequence calculating means, and hierarchical value input for inputting a hierarchical value Means for selecting a number of parameters corresponding to the hierarchical value input from the hierarchical value input means from the parameter group to generate a selection parameter group; and the selection parameter group generated by the parameter selection means. Location information generating means for generating location information representing a position in at least one parameter group; And encrypted data encrypted by the encryption operation processing means,
Encrypted data synthesizing means for synthesizing the selected parameter group generated by the parameter selecting means and the location information generated by the location information generating means, and a synthetic cipher for outputting the encrypted data synthesized by the encrypted data synthesizing means. An encrypted device comprising: encrypted data output means;