KR20110053030A - Security USB device and access control method using RDF - Google Patents

Abstract

The present invention relates to a secure USB device and an access control method using RFID, and in detail, a registered RFID tag possessed by a legitimate user is embedded in the RFID transmit / receive unit by using a secure USB device and an RFID tag with a built-in RFID transceiver. The present invention relates to a secure USB device and an access control method using RFID which permits the use of the secure USB device when the recognizable area of the secure USB device is present and blocks the use of the secure USB device when the RFID tag leaves the recognizable area. . Through this, it is possible to prevent the risk of data leakage by an unjust person and the damage that may occur due to undesired use of the secure USB device when a legitimate user is allowed to use the secure USB device.

Secure USB Device, Secure USB Memory, USB Security Token, RFID, RFID Tag

Description

Security USB Device and Method for Access Control Using RDF

The present invention relates to a secure USB device and an access control method, and in particular, by using RFID as a secure USB device, data leakage by an unjust person who may occur when a legitimate user is away from a state allowed to use the secure USB device. The present invention relates to a method for preventing damages that may occur due to danger and undesired use of a secure USB device.

USB (Universal Serial Bus) is the most widely used connection between the host computer and peripherals. Various devices connect to the host computer via USB.

USB memory is the most widely used removable storage device with the convenience of use and the large capacity of NAND flash memory. However, since the security function is not implemented, anyone who can use the USB memory can leak important data stored inside if the device is lost. In order to make up for this, a secure USB memory has been developed that requires user authentication through login. Because access to the data stored in the secure USB memory requires user authentication through login, it is more effective in preventing the risk of data leakage due to device loss compared to the USB memory without the security function.

The USB security token is a hardware device that has an independent processor, storage space, and cryptographic device inside the device to enable secure secret key storage, signature key generation, digital signature and verification, and is also called a hardware security module (HSM). The public certificate can be safely stored in the memory space inside the USB security token, and the stored public certificate cannot be leaked to the outside. The use of USB security tokens is gradually increasing as the use of services that require public certificates and electronic signatures, such as Internet banking and online e-commerce, has increased.

When using a secure USB device such as the secure USB memory and the USB secure token, if the right user is away from the state while allowing the use of the secure USB device, access to the secure USB device is possible, There is a risk of data leakage and damage can occur due to the use of a secure USB device by an unauthorized person. For example, while a legitimate user is allowed to use a USB security token, he / she can access a database containing sensitive data by using a USB security token with an invalid self-certified certificate. May spill. As another example, when online e-commerce is used, if a user leaves the office while allowing the use of the USB security token, the USB security token may be utilized by an unjust person, causing financial damage. To compensate for this, if the secure USB device is not used for a certain time while the secure USB device is allowed, the secure USB device may be automatically locked. However, even in this case, data can be leaked before the secure USB device is locked after a legitimate user is left for a certain period of time, and the damage caused by the unwanted use of the secure USB device may occur. In addition, in order to use the secure USB device again, there is an inconvenience that a legitimate user must unlock the secure USB device every time.

In order to solve the above-mentioned problems, the present invention prevents the risk of data leakage by an unjust person who may occur when a legitimate user leaves the state while allowing the use of the secure USB device, and the secure USB device may be unfairly used. It is also to provide a secure USB device and access control method using RFID that can prevent damages and can be used immediately without a separate unlock process when a legitimate user tries to use the secure USB device again. .

In order to achieve the above object, the present invention provides an antenna enabling wireless reception of ID information stored in an RFID tag, and receiving a radio signal including RFID tag ID information from the antenna and transferring the received signal to a controller. Compared with the RFID transmitter / receiver, the received RFID tag ID and the registered RFID tag ID, a control unit for allowing or blocking access to the security function unit, a security function unit for storing the RFID tag ID and performing a security function, and a host computer. It provides a secure USB device, characterized in that it comprises an interface unit for connecting the control unit, and provides an RFID tag is stored with a legitimate user ID.

In addition, according to another object of the present invention, the step of registering the ID of the RFID tag possessed by a legitimate user in a secure USB device with a built-in RFID transmitter and receiver; Determining whether a registered RFID tag exists in a recognizable area by a secure USB device incorporating an RFID transmitter / receiver;

The control unit permits access to the security function unit when the RFID tag registered in the secure USB device with the RFID transmitter and receiver is recognized and the control unit is secured if the RFID tag registered in the secure USB device with the RFID transmitter and receiver is not recognized. It provides a secure USB device access control method using RFID, characterized in that it comprises the step of blocking access to the functional unit.

As described above, according to the secure USB device and the access control method using RFID, the risk of data leakage by an unjust person and an undesired secure USB device that may occur when a legitimate user leaves the state while allowing the use of the secure USB device are allowed. There is an effect to prevent the damage that can be caused by use. In addition, when a legitimate user tries to use the secure USB device again, there is an effect that can be used immediately without a separate unlocking process.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the accompanying drawings. 1 is a block diagram showing an embodiment of the present invention, which is composed of a host computer 300, a secure USB device 100, and an RFID tag 200. As shown in FIG. The host computer 300 supplies power to the secure USB device 100 through the interface unit 110 and transmits and receives data. The RFID tag 200 stores a user ID in an internal memory space. The secure USB device 100 is composed of an interface unit 110, a control unit 120, an RFID transmission and reception unit 130, an antenna 140, and a security function unit 150. The antenna 140 wirelessly receives data from the RFID tag 200. The RFID transmitter / receiver 130 transmits the radio signal data received from the antenna 140 to the controller 120. The interface unit 110 connects the control unit 120 and the host computer 300. The secure USB device 100 receives power from the host computer 300 through the interface unit 110 and transmits and receives data. The security function unit 150 is a part that performs various security functions of the secure USB device.

Specifically, in the case of the secure USB memory, the security function unit 150 is configured as a nonvolatile memory, and the user's data and the RFID tag 200 ID possessed by the legitimate user are stored in the nonvolatile memory space, and the control unit 120 ) To control access. In order to access a nonvolatile memory space in which important data of a user is stored, access must be granted by the controller 120.

In the case of a USB security token, the security function consists of a cryptographic device and a storage memory space, and consists of a hardware device with a built-in independent processor that can generate digital signature keys and verify digital signatures. Can be stored, so that services such as Internet banking and online e-commerce can be used safely. In the case of the USB security token, the security function unit 150 is also controlled by the control unit 120, and the RFID tag 200 ID possessed by a legitimate user is stored in the internal memory space. In order for a user to use an accredited certificate stored in the USB security token, or to use the electronic signature function provided by the USB security token, the user must receive permission to access the security function unit 150 by the control unit 120.

The control unit 120 compares the received RFID tag 200 ID and the ID of the RFID tag 200 possessed by a legitimate user registered in the storage space of the security function unit 150, and when the comparison result is identical, Allow access to the security function unit 150, and if it does not match, blocks the access to the security function unit 150.

2 is a flowchart illustrating an embodiment of the present invention. The user registers the first RFID tag 200 ID possessed in order to use the secure USB device 100. (410) The registered RFID tag 200 ID is stored in a storage space of the security function unit 150. do. The controller 120 receives the RFID tag 200 ID values at predetermined time intervals through the RFID transmitter and receiver 130 and the antenna 140, and stores the received RFID tag 200 ID and the security function unit 150. The registered RFID tag 200 IDs stored in the space are compared. (420) In general, the ID identification of the RFID tag 200 is preferably performed at intervals of a relatively short time within several seconds. If the comparison value matches, the control unit 120 allows access to the security function unit 150. If the comparison value does not match or the RFID tag 200 ID is not received, the control unit 120. Blocks access to the security function unit 150. (440) Checking whether the registered RFID tag 200 is recognized (420) and thus allowing access to the security function unit 150 (430) The process of blocking and blocking 440 is continuously repeated while using the secure USB device.

3 is an external view of the secure USB device 100 and the RFID tag 200. The antenna 140 is implemented on an internal circuit board of the secure USB device 100. Rather than implementing the antenna 140 in a separate folding form outside the secure USB device 100, the secure USB device 100 can be manufactured in a small and portable form by implementing the antenna 140 on the internal circuit board. . The RFID tag 200 may be manufactured in various forms. For example, the RFID tag 200 may be manufactured in various forms such as a bracelet, a necklace, a key ring, and a card.

Although the above has been described as being limited to the preferred embodiment of the present invention, the present invention is not limited thereto and various changes, modifications, and equivalents may be used. Therefore, the present invention can be applied by appropriately modifying the above embodiments, it will be obvious that such application also belongs to the scope of the present invention based on the technical idea described in the claims below.

1 is a block diagram according to an embodiment of the present invention.

2 is a flowchart illustrating operations according to an embodiment of the present invention.

Figure 3 Appearance of secure USB device and RFID tag according to an embodiment of the present invention

100: secure USB device

110: interface unit

120: control unit

130: RFID transmitter and receiver

140: antenna

150: security function

200: RFID tag

300: host computer

Claims (7)

In the secure USB device 100 using the RFID, An RFID tag 200 which stores an ID for determining that the user is a legitimate user; An antenna (140) for enabling wireless reception of ID information stored in the RFID tag (200); An RFID transmitter / receiver 130 for receiving a radio signal including ID information of the RFID tag 200 from the antenna 140 and transferring the received signal to the controller 120; An interface unit 110 connecting the host computer 300 and the control unit 120; A security function unit 150 that performs a security function and stores an RFID tag 200 ID possessed by a legitimate user; Compare the received RFID tag 200 ID with the ID of the registered RFID tag 200 in the storage of the security function unit 150, and if the comparison result is matched, the access to the security function unit 150 is allowed. If it does not match the control unit 120 to block access to the security function unit 150; Security USB device using the RFID, characterized in that it comprises a. The method of claim 1, The interface unit 110 is a secure USB device, characterized in that produced in the form of USB (Universal Serial Bus). The method of claim 1, The security function unit 150 is composed of a non-volatile memory, the user's data and the RFID tag 200 ID possessed by a legitimate user is stored in the non-volatile memory space is controlled by the control unit 120 Secure USB device, characterized in that. The method of claim 1, The security function unit 150 is composed of a hardware device having a cryptographic operation device and a storage memory space, a built-in independent processor capable of digital signature key generation and digital signature verification, possessed by a legitimate user in the storage memory space An RFID tag (200) ID is stored, secure USB device characterized in that the access control by the control unit (120). In the access control method of the secure USB device 100 using RFID, Registering an ID of the RFID tag 200 possessed by a legitimate user in the secure USB device 100 having the RFID transmitter / receiver 130 embedded therein (410); Determining whether the RFID tag 200 registered in the secure USB device 100 having the RFID transmitter / receiver 130 exists in the recognizable area (420); When the RFID tag 200 registered in the secure USB device 100 having the RFID transmitter / receiver 130 is recognized, allowing the control unit 120 to access the security function unit 150 (430); If the RFID tag 200 registered in the secure USB device 100 having the RFID transmitter / receiver 130 is not recognized, the control unit 120 blocking access to the security function unit 150 (440); Security USB device access control method using RFID, characterized in that it comprises a. The method of claim 5, Registering an ID of the RFID tag 200 possessed by a legitimate user in the secure USB device 100 having the RFID transmitter / receiver 130 embedded therein (410); Receiving the ID of the RFID tag 200 to be registered, characterized in that for storing the ID of the received RFID tag 200 in the storage space of the security function unit 150 The method of claim 5, Determining whether the RFID tag 200 registered in the secure USB device 100 having the RFID transmitter / receiver 130 exists in the recognizable area (420); The RFID transmitter / receiver 130 receives a radio signal at regular intervals to receive an ID of the RFID tag 200 and is registered in the received RFID tag 200 ID and a storage space of the security function unit 150. If the comparison result is matched by comparing the ID of the RFID tag 200 possessed by a legitimate user, it is determined that the registered RFID tag 200 is recognized, and if it does not match, the registered RFID tag 200 is not recognized. Judging.

Images