KR20020086444A - Combination type usb drive having storage and operation function - Google Patents

Abstract

The present invention relates to a hybrid USB drive having a storage and arithmetic function. Specifically, a program for a security token, data for a security token, and general file data are stored, and a separate storage space for the data for the security token is provided. And a USB controller configured to control transmission and reception of the security token data and the general file data to the flash memory, and to record, change, and delete the general file data in the flash memory. The stored data is divided into security token data and general file data, and the general file data is transmitted to the USB controller so that a designated command is executed, and the security token data is thereby signed, verified, encrypted, and decrypted. Hash, random value generation, record, change, delete It characterized in that it comprises a controller ripto.

Therefore, according to the present invention configured as described above by combining the USB-type token with a calculation function in a USB-type flash memory drive as one can easily and widely utilize the encryption function to provide a complete security and convenience.

Description

Combination type USB DRIVE HAVING STORAGE AND OPERATION FUNCTION}

The present invention relates to a USB type storage and arithmetic device, and more particularly, having a storage and arithmetic function to combine a USB type flash memory storage device which is a portable mobile storage device and a USB token for performing a calculation. It relates to a hybrid USB drive.

In general, like a hard disk installed in a PC, a USB-type flash memory drive functions as a disk that can be arbitrarily accessed by a user, but has a portability feature. In other words, it is not a fixed disk such as a hard disk, but can be disconnected as needed and used immediately without shutting down the computer from another PC.

As shown in FIG. 1, the USB type flash memory drive 10 includes a USB controller 11 for connecting and exchanging data with a device (eg, a PC) having a USB port, and a flash memory as a data storage space. (Flash Memory) 12.

In order to use such a drive, it is possible to use it immediately without any additional setting in Windows ME and Windows 2000 series, which are currently released, and a drive installation is required in versions before Windows 98. Once connected, users can easily access and save files, delete, change files, save, delete, and change files in the same way as other fixed disks. The flash memory used here varies from 4MB, 8MB, 16MB, 32MB, 64MB, 128MB to more than 2GB, while USB type tokens or smart cards do not perform operations on the PC's memory for maximum security. It has a function to protect data from hackers or third parties with impure intent to perform key acquisition, data tampering, etc. by performing operations such as encryption and signature inside the token or smart card.

As shown in FIG. 2, the USB token 20 having the arithmetic function has a universal serial bus controller 21 for connection and data exchange with a USB device, and performs encryption, signature, and verification. Crypto controller 22 and storage 23, which is a space for storing certificates, keys, and data. To use these USB tokens, the drive provided by the manufacturer must be installed. This token's storage can only be accessed through the library or program provided, and the user's random access belongs to secure storage. Storage currently uses 8KB, 16KB, 32KB, etc.

However, such a conventional USB type flash memory drive is used only as a storage space for data, so there is a problem that security is not considered.

In addition, USB type tokens with arithmetic functions must be installed on a PC that wants to use a drive provided by the manufacturer, and there is a problem that a smart card reader can be carried with a smart card reader or a preinstalled PC. Doing. That is, because it provides a small and strong encryption and digital signature function, it has a lot of inconvenience in the installation and utilization, despite having many ways to use in the future.

Therefore, an object of the present invention is to solve the above problems, by combining a USB type token having a calculation function into a USB type flash memory drive as one, and easily and widely utilizes the encryption function to provide complete security while providing convenience can do.

1 is a block diagram schematically showing the configuration of a typical USB flash memory drive

Figure 2 is a block diagram schematically showing the configuration of a general USB token type

3 is a block diagram schematically illustrating a configuration of a hybrid USB drive having a storage and arithmetic function according to an embodiment of the present invention.

4 is a block diagram schematically illustrating a configuration of a hybrid USB drive having a storage and arithmetic function according to another embodiment of the present invention.

<Explanation of symbols for main parts of the drawings>

110: flash memory 120: USB controller

130: Crypto Controller 140: Storage

Features of the present invention for achieving the above object,

A flash memory having a security token program, data for security token and general file data, and having a separate storage space for the security token data;

A USB controller which controls transmission and reception of the security token data and general file data to the flash memory, and writes, modifies and deletes the general file data to the flash memory;

The security token data and the normal file data are divided into data previously stored in the flash memory, and the general file data is transmitted to the USB controller so that a designated command is executed, and the security token data is signed through this. And a crypto controller that performs verification, encryption, decryption, hashing, random value generation, recording, modification, and deletion.

Here, the storage space of the flash memory for data, keys, certificates, and the like necessary for performing encryption cannot be arbitrarily accessed by the user, but only through a provided program.

Here, the flash memory can be used by the user as needed after the user stores any application program.

Here, the data for the security token is used by specifying a field, a specific flag, or a specific format that is not used in general input and output file data, and encrypting data transmitted and received between the provided program and the crypto controller to have original protection. And a personalized character string is received upon initial connection with the provided program and the crypto controller.

Another feature of the invention,

A flash memory having a security token program, data for security token and general file data, and having a separate storage space for the security token data;

Controls the transmission and reception of the security token data and the general file data in the flash memory, classifies the security token data and the general file data with respect to the data previously stored in the flash memory, and transfers the security token data to the other side. A USB controller that executes a designated command and writes, changes, or deletes the general file data in the flash memory;

When the data for the security token is transmitted from the USB controller, it includes a crypto controller to perform signature, verification, encryption, decryption, hash, random value generation, recording, changing, deleting. The storage space of the flash memory for data, keys, certificates, etc. required for the user cannot be arbitrarily accessed by the user, but only through a provided program.

Here, the flash memory can be used by the user as needed after the user stores any application program.

Here, the data for the security token is used by specifying a field, a specific flag, or a specific format that is not used in general input and output file data, and encrypting data transmitted and received between the provided program and the crypto controller to have original protection. And a personalized character string is received upon initial connection with the provided program and the crypto controller.

Another feature of the invention,

A program for security tokens, flash memory where general file data is stored,

Storage that stores data for security tokens,

A USB controller which controls the transmission and reception of the security token data and the general file data to the storage and the flash memory, and writes, changes and deletes the general file data to the flash memory;

The security token data and the general file data are divided into data previously stored in the storage and flash memory, and the general file data is transmitted to the USB controller so that a designated command is executed. It includes a crypto controller that performs signature, verification, encryption, decryption, hash, random value generation, recording, modification, deletion.

Here, the storage for data, keys, certificates, and the like necessary for performing encryption cannot be arbitrarily accessed by a user, but only through a provided program.

Here, the flash memory can be used by the user as needed after the user stores any application program.

Here, the data for the security token is used by specifying a field, a specific flag, or a specific format that is not used in general input and output file data, and encrypting data transmitted and received between the provided program and the crypto controller to have original protection. And a personalized character string is received upon initial connection with the provided program and the crypto controller.

Another feature of the invention,

A program for security tokens, flash memory where general file data is stored,

Storage that stores data for security tokens,

Controls the transmission and reception of the security token data and the general file data in the storage and flash memory, and classifies the security token data and the general file data into the data previously stored in the storage and flash memory, and stores the data for the security token data. A USB controller which transmits to the other side to execute a designated command and writes, changes, and deletes the general file data to the flash memory;

When the data for the security token is transmitted from the USB controller, characterized in that it comprises a crypto controller to perform the signature, verification, encryption, decryption, hash, random value generation, recording, modification, deletion.

Here, the storage for data, keys, certificates, and the like necessary for performing encryption cannot be arbitrarily accessed by a user, but only through a provided program.

Here, the flash memory can be used by the user as needed after the user stores any application program.

Here, the data for the security token is used by specifying a field, a specific flag, or a specific format that is not used in general input and output file data, and encrypting data transmitted and received between the provided program and the crypto controller to have original protection. And a personalized character string is received upon initial connection with the provided program and the crypto controller.

Hereinafter, a configuration of a hybrid USB drive having a storage and arithmetic function according to embodiments of the present invention will be described in detail with reference to FIGS. 3 and 4.

First Embodiment

3 is a block diagram schematically illustrating a configuration of a hybrid USB drive having a storage and arithmetic function according to an embodiment of the present invention.

Referring to FIG. 3, a hybrid USB drive 100 having a storage and arithmetic function according to an embodiment of the present invention includes a flash memory 110, a USB controller 120, and a crypto controller 130. do.

The flash memory 110 stores a program for a security token, data for a security token, and general file data, and has a separate storage space 111 for data for the security token. Here, the storage space of the flash memory 110 for data, keys, and certificates necessary for performing encryption cannot be arbitrarily accessed by the user, but only through a provided program. In addition, the flash memory 110 may store any application program and then use it when necessary.

The USB controller 120 controls transmission and reception of security token data and general file data to the flash memory 110, and writes, changes, and deletes the general file data to the flash memory 110. Here, the USB controller 120 controls the transmission and reception of the data for the security token and the general file data in the flash memory 110, and distinguishes between the data for the security token and the general file data for the data previously stored in the flash memory 110. For example, the security token data may be transferred to the other side to perform a designated command, and the general file data may be written, changed, or deleted in the flash memory 110. The data stored in the security token is divided into the data for the security token and the general file data, and the general file data is transmitted to the USB controller 120 so that a designated command is performed. Decode, Hash, Random Value Generation, Record, Change, Delete. Here, when the data for the security token is transmitted from the USB controller 120, the crypto controller 130 may perform signature, verification, encryption, decryption, hash, random value generation, recording, changing, and deleting.

On the other hand, it is desirable to use security token data by specifying fields, specific flags, or specific formats that are not used in general input and output file data.

In addition, the data for the security token uses a field or a specific flag or a specific format that is not used in general input and output file data, and encrypts data transmitted and received between the program and the crypto controller 130 provided to have original protection. And received and transmitted, and receives a personal identification string (PIN) upon initial connection with the provided program and the crypto controller 130 to perform a subsequent command through the authentication process.

Second Embodiment

4 is a block diagram schematically illustrating a configuration of a hybrid USB drive having a storage and arithmetic function according to another embodiment of the present invention.

Referring to FIG. 4, a hybrid USB drive 100 having a storage and arithmetic function according to an embodiment of the present invention may include a flash memory 110, a storage 140, a USB controller 120, and cryptography. The controller 130 includes a controller 130. The flash memory 110 stores a security token program and general file data. Here, the flash memory 110 may store any application program and use it when necessary.

The storage 140 stores data for security tokens. Here, the storage 140 for data, keys, certificates, etc. necessary for performing encryption cannot be arbitrarily accessed by the user, but can only be accessed through a provided program.

The USB controller 120 controls the transmission and reception of the security token data and the general file data to the storage 140 and the flash memory 110, and writes, changes and deletes the general file data to the flash memory 110. Here, the USB controller 120 controls the transmission and reception of the data for the security token and the general file data in the storage 140 and the flash memory 110, and secures the data previously stored in the storage 140 and the flash memory 110. The token data and the general file data may be divided, the security token data may be transferred to the other side, and the designated command may be executed, and the general file data may be recorded, changed, or deleted in the flash memory 110.

The crypto controller 130 separates the data for the security token from the data stored in the storage 140 and the flash memory 110 and the general file data, and transfers the general file data to the USB controller 120 for execution of a specified command. The data for the security token is signed, verified, encrypted, decrypted, hashed, randomly generated, recorded, changed and deleted. Here, the crypto controller 130 performs signature, verification, encryption, decryption, hash, random value generation, recording, modification, and deletion through the data for the security token from the USB controller 120.

On the other hand, it is desirable to use security token data by specifying fields, specific flags, or specific formats that are not used in general input and output file data.

In addition, the data for the security token uses a field or a specific flag or a specific format that is not used in general input and output file data, and encrypts data transmitted and received between the program and the crypto controller 130 provided to have original protection. And received and transmitted, and receives a personal identification string (PIN) upon initial connection with the provided program and the crypto controller 130 to perform a subsequent command through the authentication process.

Hereinafter, an operation of a hybrid USB drive having a storage and operation function according to embodiments of the present invention will be described in detail with reference to FIGS. 3 and 4.

First, a process of connecting a hybrid USB drive having a storage and arithmetic function to a PC will be described. First, the user connects the hybrid USB drive 100 having a storage and arithmetic function to a USB port of a PC (not shown). A hybrid USB drive that automatically saves and computes is set up as a removable disk like a regular USB flash memory drive.

In addition, referring to the program installation process for the security token, when the hybrid USB drive 100 having the storage and operation function as described above is set in the PC as a removable disk, the user has the storage and operation function using the explorer program and the like. Moving to the USB drive 100 to install a program for the security token pre-stored in the flash memory 110 so that the hybrid USB drive 100 having a storage and operation functions as a security token.

At this time, for the data for the security token, using the key exchange algorithm defined in the standard or a predetermined key between the provided program and the crypto controller 130, the original data is encrypted, transmitted, decrypted, and used. Protect data from hackers or third parties with impure intent to acquire data.

In addition, the security token data is transmitted through the cryptographic controller 130 through the provided program through the personal verification string obtained from the user during the connection start process to confirm whether the connection is valid, and then performs the subsequent command only for the legitimate connection.

Meanwhile, referring to a process of transmitting / receiving data, transmission and reception of data for a security token and general file data for use as a security token are controlled through the USB controller 120 such that the general file data is stored in the flash memory 110 by the USB controller 120. ) Are recorded, changed and deleted. On the other hand, for the data for the security token USB controller 120 to pass it to the crypto controller 130 to be performed therein.

In addition, the process of distinguishing the transmitted and received general file data and the data for the security token, the crypto controller 130 is the data for the security token with respect to the data previously stored in the flash memory 110 or storage 140 and flash memory 110 And normal file data are separated and transferred to USB controller 120 for general file data, and for the data for security token, signature, verification, password, decryption, hash, random value generation, recording, change, and deletion are performed. do. Here, the data for the security token and the general file data may be distinguished from the USB controller 120. In this case, the data for the security token is passed to the crypto controller 130 to perform a designated command, and the flash memory for the general file data. Write, change, delete to 110.

In this case, when the data for the security token is transmitted from the USB controller 120, the crypto controller 130 may perform signature, verification, encryption, decryption, hash, random value generation, recording, modification, and deletion. On the other hand, the data for the security token is preferably used by specifying a field, a specific flag, or a specific format that are not used in general input and output file data.

In addition, the USB controller 120 is responsible for the process of recording, changing, and deleting general file data, and performing operation (signature, verification, password, decryption, hash, random value generation, etc.) on the data for the security token. It is in charge of the controller 130.

Therefore, by combining the USB type token having a calculation function with the USB type flash memory 110 drive to provide a single drive can be maximized only the advantages of each device.

As described above, according to the hybrid USB drive having a storage and arithmetic function according to the present invention, a USB type flash memory drive can be combined into a USB type token having arithmetic function as one to easily and widely utilize the encryption function for security. It can provide convenience while performing.

Claims (10)

A flash memory having a security token program, data for security token and general file data, and having a separate storage space for the security token data; A USB controller which controls transmission and reception of the security token data and general file data to the flash memory, and writes, modifies and deletes the general file data to the flash memory; The security token data and the normal file data are divided into data previously stored in the flash memory, and the general file data is transmitted to the USB controller so that a designated command is executed, and the security token data is signed through this. A hybrid USB drive with storage and arithmetic functions, comprising a crypto controller that performs verification, encryption, decryption, hashing, random value generation, recording, alteration, and deletion. A flash memory having a security token program, data for security token and general file data, and having a separate storage space for the security token data; Controls the transmission and reception of the security token data and the general file data in the flash memory, classifies the security token data and the general file data with respect to the data previously stored in the flash memory, and transfers the security token data to the other side. A USB controller that executes a designated command and writes, changes, or deletes the general file data in the flash memory; When the data for the security token is transmitted from the USB controller, the cryptographic controller for performing the signature, verification, encryption, decryption, hash, random value generation, recording, change, deletion through the storage and operation function, characterized in that Hybrid USB drive to have. A program for security tokens, flash memory for storing general file data, storage for data for security tokens, A USB controller which controls the transmission and reception of the security token data and the general file data to the storage and the flash memory, and writes, changes and deletes the general file data to the flash memory; The security token data and the general file data are divided into data previously stored in the storage and flash memory, and the general file data is transmitted to the USB controller so that a designated command is executed. A hybrid USB drive with storage and arithmetic functions, comprising a crypto controller that performs signing, verification, encryption, decryption, hashing, random value generation, recording, alteration, and deletion. A program for security tokens, flash memory where general file data is stored, Storage that stores data for security tokens, Controls the transmission and reception of the security token data and the general file data in the storage and flash memory, and classifies the security token data and the general file data into the data previously stored in the storage and flash memory, and stores the data for the security token data. A USB controller which transmits to the other side to execute a designated command and writes, changes, and deletes the general file data to the flash memory; When the data for the security token is transmitted from the USB controller, the cryptographic controller for performing the signature, verification, encryption, decryption, hash, random value generation, recording, change, deletion through the storage and operation function, characterized in that Hybrid USB drive to have. The method according to claim 1 or 2, Regarding the storage space of the flash memory for data, keys, certificates, etc. necessary for performing encryption, A hybrid USB drive having a storage and arithmetic function, which can not be arbitrarily accessed by a user and can only be accessed through a provided program. The method according to claim 3 or 4, Regarding the storage for data, keys, certificates, etc. necessary for performing encryption, A hybrid USB drive having a storage and arithmetic function, which can not be arbitrarily accessed by a user and can only be accessed through a provided program. The method according to any one of claims 1 to 4, In the flash memory, A hybrid USB drive having a storage and arithmetic function, wherein the user can save an application program and then use the program when needed. The method according to any one of claims 1 to 4, The data for the security token, A hybrid USB drive with storage and arithmetic functions, characterized by the use of fields, specific flags, or specific formats that are not used for general input and output file data. The method according to any one of claims 1 to 4, The data for the security token, A hybrid USB drive having a storage and arithmetic function, wherein data transmitted and received between a program provided to have an original protection function and the crypto controller are transmitted and received in an encrypted state. The method according to any one of claims 1 to 4, The data for the security token, A hybrid USB drive having a storage and arithmetic function, characterized in that a user receives a personal recognition string upon initial connection with a provided program and the Crypto controller and performs a subsequent command through an authentication process.