Data checking apparatus and method using same

• US 10,445,510 B2
• Filed: 12/28/2016
• Issued: 10/15/2019
• Est. Priority Date: 04/22/2016
• Status: Active Grant

• Current Assignee: Industry-Academic Cooperation Foundation, Dankook University
• Original Assignee: Industry-Academic Cooperation Foundation, Dankook University
• Inventors: Kim, Joonmo, Choi, Younggeun
• Primary Examiner(s): Dolly, Kendall
• Application Number:
  US15/392,021
• Publication Number:
  US 20170308708A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications

Abstract

A data checking device that is connected to a communication entity includes: a port unit configured to communicate with the communication entity; a key storage unit configured to store predetermined keys; an encryption/decryption unit configured to encrypt or decrypt data transmitted from the communication entity through the port unit by using a first key among the predetermined keys; an output unit configured to output decrypted data; and a connection unit configured to physically connect the data checking device with another device storing keys which are identical to the predetermined keys. The predetermined keys stored in the key storage unit are generated and stored when the data checking device is connected to the another device by the connection unit.

Claims

1. A data checking device connected to a communication entity, the data checking device comprising:

a connection unit;

a port unit configured to communicate with the communication entity;

a key storage unit configured to generate a plurality of predetermined keys when the data checking device is connected to another device through the connection unit and store the plurality of predetermined keys, the plurality of the predetermined keys being shared with the another device;

a random number generation unit configured to generate random numbers; and

an encryption/decryption unit configured to encrypt data received from the communication entity through the port unit by using at least one of the predetermined keys;

wherein the encryption/decryption unit is configured to generate an identifier including a predetermined number of bits, combine the data received from the communication entity through the port unit with the identifier to generate combined data, and encrypt the combined data using a first key selected among the predetermined keys;

wherein the encrypted, combined data is transmitted to the communication entity through the port unit,

wherein values of some of the bits of the identifier generated by the encryption/decryption unit are determined based on at least two keys among the predetermined keys and values of a remainder of the predetermined number of bits of the identifier are determined based on the random numbers generated by the random number generation unit,

wherein the identifier indicates which key is used for encrypting data among the predetermined keys.

2. The data checking device of claim 1, wherein the encryption/decryption unit is connected to the key storage unit through a key bus, and the first key used for the encrypting of the combined data is received from the key storage unit through the key bus.

3. The data checking device of claim 2, wherein the port unit is connected to the encryption/decryption unit through a data bus, and

wherein the data encrypted by the encryption/decryption unit is transferred to the communication entity through the port unit using the data bus.

4. A data checking method performed by a data checking device comprising a connection unit connected to a communication entity, the method comprising:

generating a plurality of predetermined keys when the data checking device is connected to another device through the connection unit, the predetermined keys being shared with the another device;

generating random numbers;

generating an identifier including a predetermined number of bits;

receiving data from the communication entity through the connection unit;

combining the received data with an identifier to generate combined data, wherein values of some of bits of the identifier are determined based on at least two keys among the predetermined keys and values of remainder of bits of the identifier are determined based on the generated random numbers;

encrypting the combined data using a first key selected among the predetermined keys, wherein the identifier indicates which key is used for encrypting data among the predetermined keys; and

transmitting the encrypted, combined data to the communication unit through the port unit.

5. The method of claim 4, further comprising:

recognizing that an abnormal action is made to the data checking device; and

deleting the predetermined keys upon recognizing that the abnormal action is made.