Cryptographic key, encryption device, encryption/decryption device, cryptographic key management device, and decryption device

• US 7,269,258 B2
• Filed: 11/15/2002
• Issued: 09/11/2007
• Est. Priority Date: 11/16/2001
• Status: Active Grant

• Current Assignee: Yazaki Corporation
• Original Assignee: Yazaki Corporation
• Inventors: Ueno, Osamu, Suzuki, Takumi, Ishihara, Tetsuya, Nishino, Yoshikazu, Nishiyama, Fumiaki, Isogai, Rei
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Lipman; Jacob
• Application Number:
  US10/294,776
• Publication Number:
  US 20030095659A1
• Time in Patent Office: 1,761 Days
• Field of Search: 380/263, 380/46, 708250-252
• US Class Current: 380/263
• CPC Class Codes: H04L 9/001 using chaotic signals
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]

Abstract

A cryptographic key 1 constituted to be freely attachable and detachable to/from a personal computer 2 encrypting and decrypting data by use of a cipher key includes: a pseudo random number generator 14 for generating a pseudo random number of a chaotic time series based on a data size of the data, a chaotic function and an initial value of the chaotic function; and a USB controller 12 for receiving the data size of the data from the personal computer 2 and transmitting the pseudo random number of the chaotic time series as the cipher key to the personal computer 2, the pseudo random number being generated in the pseudo random number generator 14, when the cryptographic key 1 is attached to the personal computer 2.

Claims

1. A cryptographic key constituted to be freely attachable and detachable to/from an external device encrypting and decrypting data by use of a cipher key, the cryptographic key comprising:

a pseudo random number generator for generating a pseudo random number of a chaotic time series based on a data size of the data, a chaotic function and an initial value of the chaotic function; and

a transmission/reception control unit for receiving the data size of the data from the external device and transmitting the pseudo random number of the chaotic time series as the cipher key to the external device, the pseudo random number being generated in the pseudo random number generator, when the cryptographic key is attached to the external device,

wherein the pseudo random number generator includes;

a chaos generation loop constituted by including a pair of one-dimensional map circuits for generating the chaotic function, each having non-linear input/output characteristics, a pair of CMOS switches for alternately performing opening and closing actions for paths on output sides of the respective one-dimensional map circuits in synchronization with an external clock, and a pair of feedback loops for feedbacking analog outputs of the respective one-dimensional map circuits through the respective CMOS switches to input sides of the respective one-dimensional map circuits in a crossing manner; and

a pair of AD converters for converting, into digital signals, the analog outputs of the respective one-dimensional map circuits, the analog outputs being taken out through the respective CMOS switches, and

the respective one-dimensional map circuits iterate mapping alternately with the elapse of a discrete time defined by the external clock in the chaos generation loop to allow the pseudo random number generator to output binary sequences as chaotic time series through the respective AD converters.

2. The cryptographic key according to claim 1,

wherein the pseudo random number generator further includes:

a DA converter for converting an initial value given in a digital signal mode into an analog signal; and

a CMOS switch for performing opening and closing actions for a path on an output side of the DA converter in synchronization with the external clock.

3. The cryptographic key according to claim 1,

wherein at least any one of the pair of one-dimensional map circuits is constituted to be capable of adjusting the input/output characteristics of its own in accordance with an external adjustment voltage.

4. An encryption device for encrypting plaintext data by use of a cipher key, the encryption device comprising:

a cryptographic key having a pseudo random number generator for generating a pseudo random number of a chaotic time series based on a data size of the plaintext data, a chaotic function and an initial value of the chaotic function; and

an external device for transmitting the data size of the plaintext data to the cryptographic key upon being equipped with the cryptographic key, and for encrypting the plaintext data by use of the pseudo random number of the chaotic time series as the cipher key, the pseudo random number being sent from the cryptographic key,

wherein the pseudo random number generator includes;

a chaos generation loop constituted by including a pair of one-dimensional map circuits for generating the chaotic function, each having non-linear input/output characteristics, a pair of CMOS switches for alternately performing opening and closing actions for paths on output sides of the respective one-dimensional map circuits in synchronization with an external clock, and a pair of feedback loops for feed backing analog outputs of the respective one-dimensional map circuits through the respective CMOS switches to input sides of the respective one-dimensional map circuits in a crossing manner; and

a pair of AD converters for converting, into digital signals, the analog outputs of the respective one-dimensional map circuits, the analog outputs being taken out through the respective CMOS switches, and

the respective one-dimensional map circuits iterate mapping alternately with the elapse of a discrete time defined by the external clock in the chaos generation loop to allow the pseudo random number generator to output binary sequences as chaotic time series through the respective AD converters.

5. The encryption device according to claim 4,

wherein the external device executes an exclusive-OR operation for the pseudo random number obtained by the pseudo random number generator and the plaintext data to encrypt the plaintext data.

6. The encryption device according to claim 4,

wherein the cryptographic key stores a first password in advance, and

the external device collates a password inputted from an input unit and the first password stored in the cryptographic key, and permits an encryption processing when both of the passwords coincide with each other.

7. A cryptographic key management device for managing a cryptographic key constituted to be freely attachable and detachable to/from an external device,

wherein the cryptographic key includes:

a pseudo random number generator for generating a pseudo random number of a chaotic time series based on a data size of data, a chaotic function and an initial value of the chaotic function;

a transmission/reception control unit for receiving the data size of the data from the external device upon being attached to the external device, and for transmitting the pseudo random number of the chaotic time series as the cipher key to the external device, the pseudo random number being generated in the pseudo random number generator; and

a memory having a program area for storing a program, an update password for indicating permission and refusal of update of the program of the program area, and a program update area for storing the update program,

the external device includes;

a password deletion unit for sending out a delete command to the cryptographic key to delete the update password therefrom when updating the program of the program area in the memory; and

a transmission unit for transmitting the update program in a unit of a predetermined length to the cryptographic key after deleting the update password, and

the cryptographic key turns into an update mode by the deletion of the update password, and stores the update program from the external device in the unit of the predetermined length in the program update area, then transports the update program in the unit of the predetermined length to the program area, the update program being stored in the program update area.

8. The cryptographic key management device according to claim 7,

wherein the transmission unit of the external device transmits the update program and the update password to the cryptographic key, and

the cryptographic key stores the update password in the memory when storing the update program in the program update area.

9. The cryptographic key management device according to claim 8,

wherein the cryptographic key activates the program of the program area when the update password is stored in the memory when a power source is turned on.

13. The decryption device according to claim 9,

wherein the external device further includes:

a determination unit for determining whether or not group mode information for indicating that the plurality of users can use the cryptographic data is in the cryptographic file; and

a request unit for requesting input of the password when the group mode information is in the cryptographic file.

10. A cryptographic key management device for managing a cryptographic key constituted to be freely attachable and detachable to/from an external device,

wherein the external device includes:

an initial value table storing a cryptographic key number and an initial value of a chaotic function for each cryptographic key, the cryptographic key number and the initial value being made to correspond to each other; and

a transmission unit for reading out the initial value corresponding to the cryptographic key number from the initial value table to transmit the initial value to the cryptographic key when the cryptographic key is attached to the external device, and

the cryptographic key includes;

a memory for storing the initial value from the external device; and

a pseudo random number generator for generating a pseudo random number of a chaotic time series based on the initial value stored in the memory, a data size of data and the chaotic function.

11. The cryptographic key management device according to claim 10,

wherein the external device includes:

an input unit for receiving the cryptographic key number and the initial value for each cryptographic key; and

a storage control unit for allowing the initial value table to store the cryptographic key number and the initial value for each cryptographic key, the cryptographic key number and the initial value being inputted from the input unit.

12. A decryption device for decrypting cryptographic data by use of a cryptographic key constituted to be freely attachable and detachable to/from an external device,

wherein the external device includes:

a cryptographic file storing the cryptographic data and a group password inherent in a plurality of users capable of using the cryptographic data;

a transmission unit for transmitting the group password and a data size of the cryptographic data to the cryptographic key when an inputted password coincides with the group password stored in the cryptographic file; and

a decryption unit for decrypting the cryptographic data in the cryptographic file by use of a cipher key from the cryptographic key, and

the cryptographic key includes;

a pseudo random number generator for generating a pseudo random number of a chaotic time series based on the data size of the cryptographic data from the external device, a chaotic function and the group password as an initial value of the chaotic function; and

a transmission/reception control unit for receiving the group password and the data size of the cryptographic data from the external device, and for transmitting the pseudo random number of the chaotic time series as the cipher key to the external device, the pseudo random number being generated in the pseudo random number generator.