Classifications

• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• • H—ELECTRICITY
  • H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
  • H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
  • H05K9/00—Screening of apparatus or components against electric or magnetic fields
  • H05K9/0007—Casings
  • H05K9/002—Casings with localised screening
  • H05K9/0022—Casings with localised screening of components mounted on printed circuit boards [PCB]
  • H05K9/0024—Shield cases mounted on a PCB, e.g. cans or caps or conformal shields
  • H05K9/0026—Shield cases mounted on a PCB, e.g. cans or caps or conformal shields integrally formed from metal sheet

Definitions

• the present invention relates to information security technologies, and in particular, to an information security protection device. Background technique
• Financial payment products often require a higher security physical protection mechanism to provide effective protection when an intruder attempts to invade the internal memory of the chip to detect the key or open the terminal and insert the PIN recording device to prevent data from being captured at the PIN input or the sender. And can modify the modification of the terminal operation.
• Financial payment products also require good security logic to prevent intruders from modifying the card reader and controlling the terminal's operating procedures, preventing intruders from recovering, recording or transmitting P IN codes and other sensitive data.
• Other requirements for financial payment products also include effective protection of magnetic stripe data.
• a "black box" safety island is generally constructed using a single, efficient method, which is isolated from the general general area.
• the processor inside the "black box” provides a dynamic trigger pulse signal or a static trigger signal that instantly destroys the key and PIN code and sensitive data upon detection of a physical attack.
• the current methods for implementing a safe island generally have the following two designs:
• the FPC of the P I material or the PCB inserting method is used to form a fence area of the safety island.
• the upper and lower covers are additionally designed with PCBs and fixed by screws to form a safety island isolation area.
• an information security protection device including: a metal shield, a flexible circuit board, a protected circuit board, and a conductive member, the flexible circuit board covering an outer surface of the metal shield And the extension of the flexible circuit board extends to the inner surface of the metal shield; the metal shield covered with the flexible circuit board is placed on the protected circuit board and covers the circuit to be protected on the protected circuit board;
• the flexible circuit board and the protected circuit board are respectively provided with a first signal trigger line and a second signal trigger line, the first signal trigger line is disposed on the first conductive contact part disposed on the extension, the conductive An element, a second conductive contact member disposed on the protected circuit board is coupled to the second trigger signal line, and the first signal trigger line and the second signal trigger line are received from the security disposed on the protected circuit board a triggering signal of the processor, further, the metal shield has a top surface and a sidewall; the flexible circuit board has a body portion and according to the metal screen a bent portion of the cover outer structure, where
• the extension of the bent portion extends along the corresponding side wall to the inner surface of the metal shield, specifically: the extension of the bent portion along the corresponding side wall
• the bend extends onto the inner surface of the top surface of the metal shield and the conductive element is an elastic conductive element.
• the flexible circuit board has at least two layers, the uppermost layer is a first ground protection layer and the outer surface of the first ground protection layer is coated with a conductive material, and the layer below the first ground protection layer is first Protecting the signal layer and arranging the first trigger signal line in the at least one first protection signal layer; the protected circuit board comprising a second ground protection layer at the bottom, a layer above the second ground protection layer or A plurality of second protection signal layers and at the uppermost element layer, a second trigger signal line is disposed in the at least one second protection signal layer.
• the surface of the first protective layer and the second protective layer are coated with a light-shielding insulating material.
• the first trigger signal line and the second trigger signal line are serpentine trigger signal lines. Wherein one side of the flexible circuit board is glued and bonded to the metal shield according to the shape of the metal shield.
• the metal shield has four side walls, and the flexible circuit board has four bent portions.
• each side wall of the metal shield is provided with a claw or a twisted leg
• the protected circuit board is provided with a first through hole that cooperates with the claw or the twisted leg
• the joint of the claw or the twisting foot of the metal shield with the side wall is provided with a shoulder having a height equal to the thickness of the flexible circuit board.
• each bent portion of the flexible circuit board includes a first bent sub-portion and a second bent sub-portion
• the second bent sub-portion has the extending portion and is disposed on the extended portion and protected a first contact member corresponding to the second contact member on the circuit board
• the second bent portion is provided with a groove at a position corresponding to a claw or a twisted leg of the side wall of the metal shield, first a bent sub-section covering an outer surface of one side wall of the metal shield, the second bent sub-section covering the inner surface of the one side wall through the shoulder and the slit of the protected circuit board structure .
• each of the second bent sub-portions is the same as the number of the second electrically conductive contact members disposed on the protected circuit board.
• a heat conductive element is disposed on top of the heat generating component on the protected circuit board, and a large area of conductive material is coated on the surface near the first via of the protected circuit board.
• the security processor is disposed on the component layer of the protected circuit board, and the trigger signal sent by the security processor is transmitted to the second protection through the second via hole in the protected circuit board
• a second trigger signal line in the signal layer, the second trigger signal line on the second protection signal layer is connected to the second conductive contact part through a third via on the protected circuit board.
• the metal shield is made of a copper-tin-nickel alloy, a copper-tin-phosphorus, a copper-tin-bismuth alloy, and a copper-silver alloy material.
• the conductive element internally includes at least one pair of isolated conductive channels, the number of pairs of conductive channels, the number of first conductive members on the flexible circuit board, and the second conductive contact members on the protected circuit board. The same amount.
• the metal shielding cover correspondingly forms a fin at a position where the conductive element is disposed to support the conductive element.
• the metal shield covered with the flexible circuit board and the protected circuit board together form a three-dimensional protection space; the safety dynamic trigger signal or the static trigger signal provided by the security processor is densely distributed throughout the information security.
• Protective device surface from information security A physical attack in any direction outside the full protection device triggers a safety trigger signal on the serpentine trigger signal line, enabling the protected circuit board on the information security device to initiate a self-destruction program, and instantly erasing the protected circuit board.
• the key, PIN code and sensitive data in the key protect the security of the information security device.
• FIG. 1 is a schematic structural diagram of a conventional payment terminal security protection device
• FIG. 2 is another schematic structural diagram of a conventional payment terminal security protection device
• FIG. 3 is a schematic structural view of an information security device according to an embodiment of the present invention
• FIGS. 4a and 4b are plan views showing a metal shield 20 of an embodiment of the present invention
• FIGS. 5a and 5b are views showing a flexible circuit board 30. Schematic plan view;
• FIG. 6 is a schematic view showing a arrangement of a serpentine trigger signal line of a bottom layer of a flexible circuit board
• FIG. 7 is a circuit diagram showing a serpentine trigger signal line of an embodiment of the present invention
• FIGS. 8a and 8b show an embodiment of the present invention.
• Figure 9 is a top plan view of the protected circuit board
• FIG. 10 is a schematic view showing a heat dissipation structure of a heat generating chip according to an embodiment of the present invention.
• Figure 11 is a schematic cross-sectional view showing the structure of a protected circuit board
• Figure 12 is a schematic illustration of an information security device after assembly in accordance with an embodiment of the present invention
• Figure 13 is a schematic illustration of a conductive material arrangement on a protected circuit board in accordance with an embodiment of the present invention.
• Embodiments of the present invention provide an information security device such as a payment terminal security device that primarily includes a metal shield 20, a flexible circuit board 30, a protected circuit board 10, and conductive elements.
• the information security protection device may be a financial payment terminal or the like.
• the flexible circuit board 30 covers the outer surface of the metal shield 20 and the extension of the flexible circuit board extends into the metal shield On the surface.
• a metal shield 20 covered with a flexible circuit board 30 is placed over the protected circuit board 10 and covers the circuit to be protected on the protected circuit board 10.
• the flexible circuit board 30 and the protected circuit board 10 are respectively provided with a first signal trigger line and a second signal trigger line, the first signal trigger line passing through the first conductive contact member disposed on the extension, the conductive An element, a second conductive contact member disposed on the protected circuit board is coupled to the second trigger signal line, and the first signal trigger line and the second signal trigger line are received from the security disposed on the protected circuit board The trigger signal of the processor.
• the metal shield 20 has a top surface and side walls.
• the flexible circuit board 30 has a main body portion and a bent portion configured according to the outer shape of the metal shield, the bent portion having an extension portion on which a first conductive contact member is disposed, the main body portion covering the The outer surface of the top surface of the metal shield, the bent portion covers the outer surface of the corresponding side wall of the metal shield 20 and the extension of the bent portion extends along the corresponding side wall to extend into the metal shield 20 On the surface.
• a metal shield covered with a flexible circuit board 30 is placed on the protected circuit board and covers the circuit to be protected on the protected circuit board 10, and is disposed on the protected circuit board with the extension of the flexible circuit board 30.
• the first conductive contact member corresponds to the second conductive contact member.
• a first trigger signal line connected to the first conductive contact part is disposed on the flexible circuit board, and the second circuit board connected to the second conductive contact part is disposed on the protected circuit board, the first conductive touch
• the point component and the second conductive contact component are electrically connected via the conductive element.
• the protected circuit board 10 is provided with a security processor, and the trigger signal sent by the security processor is transmitted to the second trigger signal line, the second conductive contact component, the conductive component, the first conductive contact component and the first trigger signal. In the signal loop formed by the line, the trigger signal is returned from the signal loop to the security processor.
• the safety processor detects the interruption of the trigger signal, it will cause the trigger information security device to start the self-destruction program, and instantaneously erase the key, PIN code and sensitive data in the information security protection device, which greatly protects the information security protection device. Security.
• the extension of the bent portion extends along the corresponding side wall to extend onto the inner surface of the metal shield: the extension of the bent portion extends along the corresponding side wall to extend to the metal On the inner surface of the top surface of the shield.
• the first and second trigger signal lines are serpentine signal trigger lines.
• the wiring in the flexible circuit board and the protected circuit board can be made denser. Better protection.
• the conductive element is an elastic conductive element such as a conductive rubber.
• FIG. 3 is a schematic structural diagram of an information security protection device according to an embodiment of the present invention.
• the information security device includes a protected circuit board 10, an electromagnetic shield 20, and a flexible circuit board 30.
• the flexible circuit board 30 covers the electromagnetic shield 20.
• the electromagnetic shield 20 includes a top surface 201 and side walls 202.
• Figure 4a shows a plan view of a metal shield 20 in accordance with an embodiment of the present invention.
• the metal shield 20 is square.
• the metal shield is not limited to a square shape, and may be cylindrical, or such as a 5-sided cylinder, a hexahedral cylinder, or other irregular shapes.
• each side wall 202 has two jaws 2021. It is apparent that in the present invention, the number of the claws 2021 on each of the side walls 202 is not limited to two. Depending on the application, the claws 2021 on each side wall 202 may be one or more than three. At the junction with the side wall 202, the jaw 2021 has a shoulder 2022 having a height hi that is the same as the thickness of the flexible circuit board 30.
• each of the side walls 202 may be provided with two twisting legs 2023.
• Fig. 4b a schematic view of the side wall of the electromagnetic shield 1 is shown.
• the number of the twisting legs 2023 on each of the side walls 202 is not limited to two. Depending on the application, the number of twisting legs 2023 on each side wall 202 may be one or more than three.
• the twist leg 2023 has a shoulder 2024 having a height hi that is the same as the thickness of the flexible circuit board 30.
• the claw 2021 or the twisted foot 2023 has a "" groove portion above the shoulder, the height h2 of which is the same as the thickness of the protected circuit board 10.
• the number of the claws or the twisting legs is not limited to two, and may be three or more.
• a schematic plan view of a flexible circuit board 30 is shown.
• the number and shape of the bent portions of the flexible circuit board 30 are adapted to the number and shape of the metal shield.
• An extension is provided on the bend and a first electrically conductive contact member is disposed on the extension.
• the bend covers the respective side walls of the metal shield and the extension extends onto the inner surface of the metal shield.
• the extension extends onto the inner surface of the top surface of the metal shield.
• the flexible circuit board 30 has a main body portion 301 and four bent portions 302. Obviously, in the present invention, the flexible circuit board is not limited to the case of having four bent portions.
• the flexible circuit board accordingly has six bends; if the metal shield The number of side walls is eight, and the flexible circuit board has eight bent portions correspondingly.
• the body portion 301 can cover the upper surface of the top surface 201 of the metal shield 20.
• Each of the bent portions 302 includes a first bent portion 3021, a second bent portion 3022, and an extended portion 3023.
• the first bent portion 3021 can be bent along a crease line between it and the body portion 301 to cover the outer surface of the corresponding side wall 202 of the metal shield 20.
• the second bent portion 3022 can be bent along the crease line between it and the first bent portion 3021 to cover the inner side surface of the corresponding side wall 202 of the metal shield 20.
• the extension 3023 can be bent along a crease line between it and the second bent subsection 3022 to cover the lower surface of the top surface 201 of the metal shield 20.
• a first conductive contact member 3024 is disposed on each of the extensions 3023.
• a first electrically conductive contact member 3024 includes at least one pair of metal contacts.
• each of the second bent sub-sections 3022 is provided with an extension 3023 at one end thereof, and the extensions 3023 on the adjacent second bent sub-sections 3022 are not adjacent, as shown in Fig. 5a.
• the present invention is not limited to having only one extension 3023 on each of the bent sub-sections 3022, but may have more than two extensions 3023.
• the extending portion 3023 is not limited to the case where it is provided only at the non-adjacent positions of the adjacent bent portions 302.
• the extension may be disposed on the second bent subsection 3022 of the bend 302 on the opposite side, as shown in Figure 5b.
• an extension portion may be provided at both ends of the second bent portion 3022.
• the extensions may also be disposed at other locations than the ends of the second bend 3022.
• a recess 3025 is provided at a position corresponding to the catch 3021 or the twisted leg 3023 on the side wall of the metal shield to accommodate the claw 3021 or the twisted leg 3023.
• the flexible circuit board 30 may have a two-layer structure or a multi-layer structure.
• the uppermost layer (i.e., the top layer) of the flexible circuit board is a first protective layer whose surface is coated with a full area of conductive material such as copper.
• the layer under the first ground protection layer is at least one first protection signal layer and a first trigger signal line is disposed on the bottom layer of the at least one first protection signal layer, that is, the BOTTOM layer, as shown in FIG.
• the first trigger signal line is a serpentine trigger signal line.
• the first trigger signal line disposed on the BOTTOM layer adopts a wiring pattern with a small trace width and a small trace pitch.
• the top layer of the flexible circuit board 30 may be made of a polyimide material and coated with a conductive material on the top layer as a GND plane.
• the surface of the conductive material and the surface of the bottom layer of the top layer of the flexible circuit board 30 are covered with a light-shielding insulating material, so that an intruder cannot optically detect the wiring shape of the first trigger signal line on the bottom layer.
• the structure of the flexible circuit board of the embodiment of the invention has an extremely high resistance to physical attack.
• the first trigger signal line on the flexible circuit board may be disposed on multiple layers in the at least one first protection signal layer. In this case, the first trigger signal lines on the respective layers are staggered on the respective layers through via holes (not shown), using a smaller trace width and a smaller line pitch, thereby improving the physical attack resistance.
• the security processor disposed on the protected circuit board provides a two-way dynamic trigger signal to the first trigger signal line on the flexible circuit board, as shown in FIG.
• the security processor disposed on the protected circuit board provides a two-way dynamic trigger signal to the first trigger signal line on the flexible circuit board, as shown in FIG.
• circuit number trigger signals can also be provided to the first trigger signal line of the flexible circuit board.
• Fig. 8a shows a schematic cross-sectional view of the flexible circuit board 30 after covering the metal shield 20
• Fig. 8b shows a partial enlarged view of Fig. 6a.
• one side of the flexible circuit board 30 is glued and bonded to the metal shield 20 after being bent according to the shape of the metal shield.
• Figure 9 shows a schematic diagram of the protected circuit board 10.
• the protected circuit board 10 includes a first via 101 and a second conductive contact member 102.
• a second electrically conductive contact member includes a pair of metal contacts that are identical in number to the metal contacts of the first electrically conductive contact member.
• the first via 101 is disposed on the protected circuit board 10 at a position corresponding to the claw 3021 or the twisted leg 3023.
• the second conductive contact member 102 is disposed on the protected circuit board 10 at a position corresponding to the position of the first conductive contact member 3024 on the lower surface of the top surface of the metal shield.
• only one extension 3023 is provided at one end of each of the second bent sub-sections 3022 as shown in FIG.
• the first conductive contact member 3024 is located after the flexible circuit board 30 is assembled with the metal shield 20
• the second conductive contact member 102 is disposed at a corresponding region of the corner portion of the protected circuit board 10, as shown in FIG.
• the protected circuit board 10 is provided with a circuit to be protected surrounded by the first via. When the metal shield 20 is placed over the protected circuit board 10, the circuit to be protected will be in a protected state.
• the protected circuit board 10 further includes a heat generating chip 103 such as a CPU or the like.
• a heat conducting element 60 is disposed on top of each of the heat generating chips, as shown in FIG.
• the thermally conductive element 60 can be a thermally conductive silicone.
• the heat conducting member 60 can quickly introduce the heat generated by the heat generating chip 70 to the metal shield 20 and finally to the outside.
• a conductive member 50 is disposed between the metal shield 20 and the protected circuit board 10.
• the conductive element 50 is an elastic conductive element such as a conductive rubber.
• Conductive element 50 electrically connects first conductive contact member 3024 and second conductive contact member 102.
• a protected processor (not shown) is disposed on the protected circuit board 10.
• the conductive member 50 is placed on the metal shield 20 at a position corresponding to the stamping of the fin 112 to support the conductive member 50.
• the protected circuit board 10 has a multi-layered structure including a second underlying protective layer 106 at the bottom, and one or more layers of a second protective signal layer 107 over the second protective layer 106. And at the topmost component layer 111, a second trigger signal line is disposed in at least one of the second protection signal layers 107. Further, a signal layer 108 is disposed over at least one of the second protective layers 107. Optionally, a third ground protection layer 109 connected to the second ground protection layer 106 and a power layer 110 above the third ground protection layer 109 may also be disposed on the signal layer 108. Similar to the flexible circuit board 30, a second trigger signal line is disposed on the second protection signal layer of the protected circuit board.
• the second trigger signal line is a serpentine trigger signal line.
• the wiring pattern of the second trigger signal line disposed on the second protection signal layer of the protected circuit board is the same as the wiring of the first trigger signal line on the flexible circuit board.
• the uppermost layer that is, a part of the element layer is provided with an element, and other parts of the element layer which are not provided with the element are laid over a large area, such as copper.
• the second protection signal layer is disposed next to the second ground protection layer.
• the second protection signal layer is not limited to one layer, and multiple layers may be employed.
• the second trigger signal on each layer triggers the line staggered arrangement, and each layer uses a smaller trace width and a smaller line spacing to improve the intruder The difficulty of the attack.
• the second guard signal layer is coupled to the second conductive contact member 102 through the third via 104.
• the security processor generates a dynamic or static trigger signal and transmits it through the second via 105 to the second trigger signal line.
• the trigger signal is transmitted to the first trigger signal line via the second metal contact member 102, the conductive member 50, and the first conductive contact member 3024.
• a trigger signal is disposed on both the first signal trigger line and the second signal trigger line.
• the trigger signal is returned to the security processor via the other first conductive contact member, the conductive member, the second conductive contact member, and the second trigger signal line.
• the assembly process of the information security device is as follows. First, the flexible circuit board 30 is bent and formed according to the crease line, and bonded to the metal shield 20. Next, the conductive elements are mounted to the inner surface of the top surface of the metal shield 20, such as to the four corner regions of the inner surface of the top surface of the metal shield, and aligned with the first pair of conductive contacts. Next, the claw or the twisted leg of the metal shield cover 20 covered with the flexible circuit board 30 is inserted into the first through hole of the protected circuit board. Aligning the conductive element with the second conductive contact member on the protected circuit board and testing the contact of the conductive element with the first and second conductive contact members. Finally, if the conductive element is in good contact with the first and second conductive contact members, the jaws or pins of the metal shield are soldered to the protected circuit board.
• Fig. 12 is a view showing an information security device after assembly according to an embodiment of the present invention. As shown, the respective claws or twist pins of the metal shield covered with the flexible circuit board are inserted into the first through holes of the protected circuit board. Further, the claw or the twisted foot may be soldered to the protected circuit board after being inserted into the first through hole.
• a large area of the conductive material is coated in the vicinity of the first through hole 101 on the protected circuit board 10.
• the heat generated by the heat generating chip is transmitted to the metal shield 20 through the heat conducting member 60, and then transmitted to the large-area covering conductive material near the first through hole through the claw or the twisted leg of the metal shield 20, thereby being radiated to the outside.
• the physical attack resistance can be improved; by increasing the wiring complexity of the first trigger signal line of the flexible circuit board 30, the physical attack resistance can also be improved.
• the electromagnetic shield 20 can be made of copper-tin-nickel alloy to provide good electromagnetic shielding. If the electromagnetic shielding cover 20 has elastic requirements, copper-tin-phosphorus or copper-tin-bismuth alloy materials can be selected, and the shape of the information security protection device has excellent elasticity. If the information security device has high heat dissipation requirements inside, copper-silver alloy materials can be used. Silicon steel materials can also be used if magnetic shielding is required. At the same time, the selection of the above materials has no effect on safety, weldability and electromagnetic shielding effect.
• the secure dynamic trigger signal or the static trigger signal provided by the security processor is densely attached to the entire surface of the information security device.
• the flexible circuit board covers the outer surface of the metal shield and forms a three-dimensional protective space together with the outermost second protective layer of the protected circuit board.
• the information security protection device of the present invention can guard against physical attacks from any one direction.
• the invention adopts the metal shield of the integral structure, it not only has good electromagnetic shielding effect, but also has strong anti-physical attack capability, and can effectively resist physical damage such as high temperature and punching.
• the information security device when the information security device is subjected to other physical attacks, such as disassembly and splitting, it also triggers a security trigger signal on the trigger circuit of the flexible circuit board or the protected circuit board.
• the security processor detects the attack. Therefore, the protected circuit board on the information security protection device initiates a self-destruction program, instantaneously erasing the key, the PIN code and the sensitive data in the protected circuit board, thereby greatly protecting the security of the information security protection device.

Landscapes

• Engineering & Computer Science (AREA)
• Microelectronics & Electronic Packaging (AREA)
• Theoretical Computer Science (AREA)
• Computer Hardware Design (AREA)
• Computer Security & Cryptography (AREA)
• Software Systems (AREA)
• Physics & Mathematics (AREA)
• General Engineering & Computer Science (AREA)
• General Physics & Mathematics (AREA)
• Shielding Devices Or Components To Electric Or Magnetic Fields (AREA)
• Structure Of Printed Boards (AREA)

Applications Claiming Priority (4)

Publications (1)

Family

ID=47645436

Family Applications (1)

Country Status (2)

Cited By (6)

Families Citing this family (7)

Citations (4)

Family Cites Families (5)

• 2012
  • 2012-10-09 CN CN201210381106.1A patent/CN102930648B/zh active Active
  • 2012-10-26 WO PCT/CN2012/083624 patent/WO2014005385A1/fr not_active Ceased

Patent Citations (4)

Also Published As

Similar Documents

Legal Events