TWI655558B - Key confidential data protection system - Google Patents

Abstract

A key confidential data protection system mainly utilizes the mechanism destruction detection function of the hardware password module device as the protection of the first layer of confidential data, and then constructs the second layer of confidential information by using the positioning protection device and the central security monitoring host. Protection, if the hardware password module device is violently destroyed or moved to a designated place by an intruder, the present invention immediately performs the action of clearing the key confidential information to ensure the security of the key confidential information, if the hardware password module The device is moved to the designated place without authorization. The location protection device around the hardware password module device immediately informs the central security monitoring host to immediately execute the standard security operation procedures.

Description

Key confidential data protection system

The invention relates to a technical field of key confidential data protection, in particular to a key confidential data protection system realized by a security protection architecture combined with a positioning protection device and a central security monitoring host.

The confidential data protection of the current hardware password module device only provides the intrusion protection of the organization destruction. When the mechanism detecting the hardware password module device is being destroyed, the confidential data clearing mechanism is immediately activated. Protection may be sufficient for general access control, but for personnel management is not very careful, or for organizations with very high security requirements for confidential information, the hardware damage protection function of this hardware password module device is a bit insufficient.

A similar concept is mentioned in the following prior patents: (1) Taiwan Patent Publication No. 501013, which is a separation mechanism between the use mechanism and the main circuit board, as a protection mechanism for confidential data. This method of detecting protection is a bit weaker. (2) Taiwan Patent Publication No. I450552 is a detection method that uses an inductive switch as a device to be destroyed. If an illegal destruction device is found, the protection mechanism of the confidential data is activated. This sensor switch includes a combination of Micro Switch, Case Winding, Optical Sensor, Vibration Sensor, Proximity Switch and Paint Protection. Although it has a complete intrusion detection capability, it only protects the confidential data when the hardware password module device is destroyed. It is not possible to protect the hardware password module device when it is moved to a designated location. (3) US Patent Publication No. 7945792, a response element is provided in the appearance of the device when the hardware cryptographic module device is invaded, providing a response element that allows the user to perceive the device from being invaded by the eye. Although this method can help the user to understand whether the device has been invaded, but the user is not aware of the device has been destroyed when the user is not near the device, and is even less protected when the hardware password module device is moved to the designated place. ability.

The present invention is directed to the method proposed by the above three patents, the first one is only providing simple The detection of the separation of the organization and the main circuit board is used as a protection mechanism for confidential data; the second is that the protection mechanism of the confidential data is activated only when the mechanism of the hardware password module device is destroyed. The third is that when the mechanism of the hardware cryptographic module device is destroyed, a protection mechanism that can be known by the human eye that the device has been hacked is provided. The inventors found that these three methods can not meet a more demanding confidential data protection site, but they have improved and innovated, and after years of painstaking research, they finally succeeded in research and development of this application in key confidential data protection systems.

It is an object of the present invention to enhance the protection of critical confidential information of equipment. The invention is a positioning protection device for adding a short distance around the hardware cryptographic module device. Under normal use, the positioning protection device transmits a piece of data to the hardware cryptographic module device in a fixed time to make the hardware password. The module device knows that the device is still in an effective place, not far from the place, and the hardware password module device can also receive a set of standard time and location information. And the hardware password module device also transmits a piece of data to the positioning protection device within a fixed time, so that the positioning protection device knows that the hardware password module device is still in the effective place, and if the hardware password module device has been found to have left the designated device The location will initiate emergency information to the central security monitoring host to perform standard security procedures. By The second layer of protection is constructed by the positioning protection device and the central security monitoring host, and the hardware password module device can have a more secure protection function for confidential data.

A key confidential data protection system that achieves the above object of the invention is to use hard body secrets The mechanism destruction detection function of the code module device acts as the protection of the first layer of confidential data, and then constructs the second layer of confidential data protection by the positioning protection device and the central security monitoring host. The protection of the second layer of confidential information is mainly to add some short-distance positioning protection devices around the hardware password module equipment. Under normal use, the positioning protection device will transmit a data to the hardware password module within a fixed time. The device allows the hardware password module device to know that the device is still in an effective place, not far from the place, and the hardware password module device can also receive a set of standard time and location information. And the hardware password module device also transmits a piece of data to the positioning protection device within a fixed time, so that the positioning protection device knows that the hardware password module device is still in the effective place, and if the hardware password module device has been found to have left the designated device The location protection device will activate emergency information to the central security monitoring host to perform standard security procedures. If the location protection device has left the designated location or is faulty, it will be immediately detected by the central security monitoring host, and the central security monitoring host will perform standard security operation procedures. The communication between the hardware password module device and the positioning protection device is a wireless data transmission channel using Bluetooth or a wireless local area network device (Wi-Fi), and data encryption technology is used to ensure communication. The information will not be stolen. The invention comprises:

1. Hardware password module equipment: to provide the system to perform signature, authentication, encryption, confidential data management functions, and to receive positioning and time information sent from the positioning protection device. And at intervals, the device's code is transmitted to let the location protector know that the device is still in the designated location. The device includes: Wi-Fi and Bluetooth wireless module, wired network interface, BNC interface, USB interface, Uart interface, VGA interface, Audio interface, card reader interface, CPU, precision calibration module, signing Chapter algorithm module, encryption and decryption algorithm module, large integer operation module, random number generation module, key storage memory.

2. Positioning protection device: to provide hardware password module device positioning and time information, and to detect whether the hardware password module device is still in the designated place. If the device is away from the designated location, an emergency message is sent to the central security monitoring host to perform standard security procedures. The device includes: Wi-Fi and Bluetooth wireless module, Uart interface, card reader interface, GPS module, signature algorithm module, encryption and decryption algorithm module.

3. Central Security Monitoring Host: To provide a secure protection system. When an emergency notification of the position protection device is received, the standard safety operation procedure is executed immediately.

101‧‧‧Central Security Monitoring Host

102‧‧‧ Positioning protection device

103‧‧‧ hardware password module equipment

104‧‧‧Management Server

201‧‧‧Wi-Fi and Bluetooth wireless modules

202‧‧‧Wired network interface

203‧‧‧BNC interface

204‧‧‧USB interface

205‧‧‧Uart interface

206‧‧‧VGA interface

207‧‧‧Audio interface

208‧‧‧ card reader interface

209‧‧‧Embedded CPU module

210‧‧‧Precise timing module

211‧‧‧Signature Algorithm Module

212‧‧‧Addition and decryption algorithm module

213‧‧‧Large integer arithmetic module

214‧‧‧ Real random number generation module

215‧‧‧Key storage memory

301‧‧ Wi-Fi and Bluetooth wireless modules

302‧‧‧Uart interface

303‧‧‧ card reader interface

304‧‧‧Embedded CPU Module

305‧‧‧GPS module

306‧‧‧Signature Algorithm Module

307‧‧‧Crystal and Decryption Algorithm Module

1 is a schematic diagram of the application of the key confidentiality data protection system of the present invention; FIG. 2 is a schematic diagram of the hardware architecture of the hardware password module device of the present invention; FIG. 3 is a schematic diagram of the hardware structure of the positioning protection device of the present invention; FIG. 5 is a schematic flowchart of the positioning protection device A of the present invention transmitting information to the hardware password module B; FIG. 6 is a schematic diagram of the hardware password module B transmitting information to the positioning according to the present invention; Schematic diagram of the protection device A; and FIG. 7 is a schematic flow chart of the positioning protection device A of the present invention transmitting information to the central security monitoring host C.

The preferred embodiment of the present invention will be described in detail below with reference to the drawings: Please refer to FIG. 1 , which is a schematic diagram of the application of the key confidential data protection system. The schematic diagram illustrates the operational relationship between the hardware password module device 103 , the location protection device 102 and the central security monitoring host 101 . The location protection device 102 transmits a piece of data to the hardware password module device 103 within a fixed time period, so that the hardware password module device 103 knows that the device is still in an effective place, is not far away from the place, and the hardware password module Device 103 can also receive a set of standard time and location location information. And the hardware password module device 103 also transmits a piece of data to the location protection device 102 within a fixed time, so that the location protection device 102 knows that the hardware password module device 103 is still in an effective place, and if the hardware password module is found. The device 103 has left the designated location, and the location protection device 102 activates the emergency information to the central security monitoring host 101 to perform a standard security operation procedure (the system maintainer sets the processing procedure, for example, notifying the relevant personnel and the security personnel for subsequent processing) . If the location protection device 102 has left the designated location or is faulty, it is immediately discovered by the central security monitoring host 101, and the central security monitoring host 101 performs standard security operations. The communication between the hardware code module device 103 and the location protection device 102 is a wireless data transmission channel using Bluetooth or a wireless local area network device (Wi-Fi), plus data encryption technology. Make sure that the communication data is not stolen.

Please refer to FIG. 2, which is a hardware architecture diagram of a hardware password module device, including a Wi-Fi and Bluetooth wireless module 201, a wired network interface 202, a BNC (Bayonet Nut Connector) interface 203, a USB interface 204, Uart (Universal Asynchronous Receiver/Transmitter) interface 205, VGA (Video Graphics Array) interface 206, Audio interface 207, card reader interface 208, embedded CPU module 209 The precision calibration module 210, the signature algorithm module 211, the encryption and decryption algorithm module 212, the large integer operation module 213, the real random number generation module 214, and the key storage memory 215.

Please refer to FIG. 3, which is a schematic diagram of a hardware structure of a positioning protection device, including: Wi-Fi and Bluetooth wireless module 301, Uart interface 302, card reader interface 303, embedded CPU module 304, GPS module 305, signature algorithm module 306, encryption and decryption algorithm module 307.

Please refer to FIG. 4, which is a schematic diagram of the booting process of the positioning protection device, including: The first signal transmitted by the location protection device to the hardware password module device is "Client Hello", the type of encryption algorithm, the type of signature authentication algorithm, and the random number. The random number must use the hardware password module device. The public key is used for encryption. The first signal sent back to the location protection device by the hardware password module device is a "Server Hello" message and a previous random random number. The random number must be encrypted using the public key of the location protection device. The second signal transmitted by the location protection device to the hardware password module device is a "Server Hello ACK" message and a previous random random number. The random number must be encrypted using the public key of the hardware password module device. .

Please refer to FIG. 5, which is a schematic diagram of the process of transmitting information to the hardware password module B for the positioning protection device A, wherein: ENC _K1 (Data1) is to perform information (Data1), and performs encryption by using a key (K1); PUK _B (A code, K1) encrypts the A code and the key (K1) using the public key of the hardware code module device B. When the hardware password module device B receives the information, it first uses the key to solve the key (K1), and then performs the decryption of the information (Data1). Finally, the information (Data1) is executed to disassemble and analyze the packet to determine whether it is valid packet data. If it is valid packet data, it will send back a message ACK0 to the location protection device A; if it is not valid packet data, it will send a message ACK1 to the location protection device A.

Please refer to FIG. 6 , which is a schematic diagram of the process of transmitting information to the location protection device A for the hardware password module B, where: ENC _K2 (Data2) is to perform information (Data2) and perform encryption by using a key (K2); PUK _A (B code, K2) encrypts the B code and the key (K2) using the public key of the positioning protection device A. When the location protection device A receives the information, it first uses the key to decrypt the key (K2), and then performs the decryption of the message (Data2). Finally, the information (Data2) will be disassembled and analyzed to determine whether it is valid packet data. If it is valid packet data, it will be sent back to the hardware password module B for a message ACK0; if it is not valid packet data, it will be sent back to the hardware password module B for a message ACK1.

Please refer to FIG. 7 , which is a schematic diagram of the process of transmitting information to the central security monitoring host C for the positioning protection device A, wherein: ENC _K3 (Alive0 or Alive1) is the information (Alive0 or Alive1), using the key (K3). Encryption is performed; PUK _C (A code, K3) is used to encrypt the A code and the key (K3) using the public key of the central security monitoring host C. When the central security monitoring host C receives the information, it will first use the key to decrypt the key (K3), and then perform the decryption of the information (Alive0 or Alive1). Finally, the information (Alive0 or Alive1) will be parsed and analyzed to determine whether it is valid packet data. If it is valid packet data, it will send back a message ACK0 to the location protection device A; if it is not valid packet data, it will send a message ACK1 to the location protection device A.

The various unit embodiments of the present invention are described as follows:

1. Hardware cryptographic module device 103: Function: To perform the system performing signature, authentication, encryption, confidential data management functions, and receiving positioning and time information sent from the positioning protection device 102. And each time interval, the code of the device is transmitted to let the location protection device 102 know that the device is still in the designated location.

Content: The present invention uses the Wi-Fi and Bluetooth wireless modules in the device to communicate with the location protection device 102.

When the hardware password module device 103 is installed at a specified location, the plurality of location protection devices 102 must first be registered with the hardware password module device 103, and the keys are keyed. Exchange, let each other obtain the public key for the signature authentication, the digital certificate and the key used to encrypt the data, so that when the two devices transmit signals, they can have secure communication, and will not allow the hacker to have the opportunity to steal data and counterfeit.

When the installation is completed, the user can place a plurality of positioning protection devices 102 at any position not far from the hardware password module device 103 to protect the confidential data.

2. Positioning protection device 102: Function: to provide location and time information for the hardware password module device 103, and to detect whether the hardware password module device 103 is still at the designated location. If the device is away from the designated location, emergency information is sent to the central security monitoring host 101 to perform standard security procedures. If the location protection device 102 has left the designated location or is faulty, it is immediately discovered by the central security monitoring host 101, and the central security monitoring host 101 performs standard security operations.

Content: This device has the ability of short-range wireless communication, and has the functions of signature authentication, encryption and decryption. And the device can receive GPS signals to obtain location and time information.

3. Central Security Monitoring Host 101: Function: To provide a secure protection system. When an emergency notification by the location protection device 102 is received, a standard security operation procedure is executed immediately.

Content: The central security monitoring host 101 performs the security monitoring function, and has the ability to notify the superior authority and the designated object when the system is invaded, and can perform the related processing of the disaster occurrence according to the administrator's prior setting.

4. Secure transmission and communication method: Function: Perform secure data transmission.

Content: The secure transmission protocol used in the present invention is as follows: 4.1 At the time of power-on, the location protection device 102 must first perform a secure connection to the hardware password module device 103. The connection method is as follows: 4.1.1 First, the positioning protection device 102 must transmit a "Client Hello" message, an encryption algorithm to be used, a signature authentication algorithm, and a set of random random numbers to the hardware password module device 103. . This random random number must be encrypted using the public key of the hardware cryptographic module device 103.

4.1.2 After receiving the "Client Hello" message, the encryption algorithm to be used, the signature authentication algorithm and a set of random random numbers, etc., the hardware password module device 103 performs random operation with the private key of the device. The random number is decrypted, and finally the "Server Hello" message is sent back to the location protection device 102 with a previous random set of random values. This random random number must be encrypted using the public key of the location protection device 102.

4.1.3 If the location protection device 102 has not received the response message of "Server Hello" transmitted from the hardware password module device 103 and the previous group of random random values for a period of time, it will be retransmitted once until The hardware password module device 103 responds successfully.

4.1.4 When the hardware password module device 103 responds successfully, the location protection device 102 will resend the "Server Hello ACK" message and the previous set of random hash values to the hardware password module device 103 for notifying the hardware. The cryptographic module device 103 has successfully received a response from the device. This random random number must be encrypted using the public key of the hardware cryptographic module device 103.

4.2 After the booting is completed, the communication between the positioning protection device 102 and the hardware password module device 103 will use the currently negotiated encryption algorithm and the signature authentication algorithm to perform transmission data encryption and signature authentication.

4.3 The location protection device 102 and the hardware password module device 103 will transmit information to each other after each interval.

By integrating the hardware password module device 103, the location protection device 102 and the central security monitoring host 101, a more secure confidential data protection system can be constructed. Since the data transmission between the three is transmitted by encrypted data, the data will not be stolen by the third party; and the device will perform the device authentication of the transmitting end before receiving the encrypted data. Continue to analyze the received encrypted data. If the authentication fails, the received encrypted data will not be analyzed. Therefore, the third party cannot forge the sending data of the device to attempt to steal confidential information.

From the above, the present invention provides a key confidential data protection system, which utilizes the operational relationship between the hardware password module device 103, the location protection device 102 and the central security monitoring host 101 to construct a more secure confidential data. Protection ability. Under normal use, the hardware code module device 103 can receive the standard time and location information transmitted from the location protection device 102 to let the device know that it is still in an effective location. When the hardware password module device 103 finds that it has been away from the effective place, it will perform the clearing of the key confidential information to avoid leakage of confidential information. However, when the location protection device 102 finds that the hardware password module device 103 has moved away from the effective location, the emergency information is activated to the central security monitoring host 101 to perform a standard security operation procedure.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

Claims (4)

A key confidential data protection system, which mainly comprises: a hardware password module device for timing transmission of code to a positioning protection device, and providing a key confidential data protection system for performing signature, authentication, encryption and confidential data management; positioning protection device It is used to provide hardware password module device positioning and time information, and to detect whether the hardware password module device is still in the designated place. If the hardware password module device is away from the designated place, the emergency information is activated to the central security. Monitoring the host; the central security monitoring host performs a standard security operation procedure when receiving the emergency information of the positioning protection device, wherein the positioning protection device respectively uses the wireless data transmission channel with the hardware password module device and the central The security monitoring host is connected to enable the positioning protection device as a signal transmission medium between the hardware password module device and the central security monitoring host, and wherein the standard security operation program is included in the hardware password module device. When it is found that it is far away from the effective place, it will perform the clearing of the key confidential information by itself. Avoid the leakage of confidential information. The key confidential data protection system as claimed in claim 1, wherein the hardware password module device comprises a Wi-Fi and Bluetooth wireless module, a wired network interface, a BNC (Bayonet Nut Connector) interface, a USB interface, and a Uart (Universal Asynchronous). Receiver/Transmitter_Universal asynchronous transceiver interface, VGA (Video Graphics Array) interface, Audio interface, card reader interface, embedded CPU module, precision timing module, signature Algorithm module, encryption and decryption algorithm module, large integer operation module, real random number generation module and key storage memory. The key confidential data protection system as claimed in claim 1, wherein the positioning protection device comprises a Wi-Fi and Bluetooth wireless module, a Uart interface, a card reader interface, an embedded CPU module, a GPS module, and a signature algorithm. Group and encryption and decryption algorithm modules. The key confidential data protection system according to claim 1, wherein the hardware password transmission device and the positioning protection device adopt a wireless data transmission channel of a Bluetooth or a wireless local area network device (Wi-Fi). .