WO2014005385A1 - Information security protection device - Google Patents

Description

 Information security protection device

 The present invention relates to information security technologies, and in particular, to an information security protection device. Background technique

 In recent years, the application of financial payment products has become more and more extensive. Financial payment products often require a higher security physical protection mechanism to provide effective protection when an intruder attempts to invade the internal memory of the chip to detect the key or open the terminal and insert the PIN recording device to prevent data from being captured at the PIN input or the sender. And can modify the modification of the terminal operation. Financial payment products also require good security logic to prevent intruders from modifying the card reader and controlling the terminal's operating procedures, preventing intruders from recovering, recording or transmitting P IN codes and other sensitive data. Other requirements for financial payment products also include effective protection of magnetic stripe data. The safety assessment criteria for financial payment products are set by the International Payment Card Industry Safety Standards Committee, and the safety assessment of the terminal products that can support the global financial settlement function is the responsibility of the designated professional laboratory. At present, manufacturers of such products are provided with products that meet their safety requirements, but the implementation methods are extremely complicated and extremely costly, which is not conducive to the promotion and popularization of these end products, especially for developing countries with low economic development. Therefore, in the prior art, a "black box" safety island is generally constructed using a single, efficient method, which is isolated from the general general area. The processor inside the "black box" provides a dynamic trigger pulse signal or a static trigger signal that instantly destroys the key and PIN code and sensitive data upon detection of a physical attack.

 The current methods for implementing a safe island generally have the following two designs:

 (1) Referring to Figure 1, using the rigid PCB of FR-4 material, design multiple pieces of different structures, the internal use of milling machine hollow pattern, using the method of stacked blocks, stacked into a safe island area, the whole is welded + screw fixed The way is fastened as a whole.

 (2) Referring to Figure 2, the FPC of the P I material or the PCB inserting method is used to form a fence area of the safety island. The upper and lower covers are additionally designed with PCBs and fixed by screws to form a safety island isolation area.

The above two methods are complicated in design and high in implementation cost, but the anti-physical attack capability is not high, and it is unable to resist the detection of electromagnetic signals. The criminals can easily crack them by paying a certain amount of time and money. Low security protection. Summary of the invention

 According to an embodiment of the present invention, an information security protection device is provided, including: a metal shield, a flexible circuit board, a protected circuit board, and a conductive member, the flexible circuit board covering an outer surface of the metal shield And the extension of the flexible circuit board extends to the inner surface of the metal shield; the metal shield covered with the flexible circuit board is placed on the protected circuit board and covers the circuit to be protected on the protected circuit board; The flexible circuit board and the protected circuit board are respectively provided with a first signal trigger line and a second signal trigger line, the first signal trigger line is disposed on the first conductive contact part disposed on the extension, the conductive An element, a second conductive contact member disposed on the protected circuit board is coupled to the second trigger signal line, and the first signal trigger line and the second signal trigger line are received from the security disposed on the protected circuit board a triggering signal of the processor, further, the metal shield has a top surface and a sidewall; the flexible circuit board has a body portion and according to the metal screen a bent portion of the cover outer structure, wherein the bent portion has the extending portion, the main body portion covers an outer surface of a top surface of the metal shield, and the bent portion covers the metal shield Corresponding side wall outer surface and the extension of the bent portion extends along the corresponding side wall to the inner surface of the metal shield; the trigger signal sent by the safety processor is transmitted to the second trigger signal line, In a signal loop composed of two conductive contact members, a conductive member, a first conductive contact member and a first trigger signal line, the trigger signal is returned from the signal loop to the safety processor.

 In the information security device, the extension of the bent portion extends along the corresponding side wall to the inner surface of the metal shield, specifically: the extension of the bent portion along the corresponding side wall The bend extends onto the inner surface of the top surface of the metal shield and the conductive element is an elastic conductive element.

 Further, the flexible circuit board has at least two layers, the uppermost layer is a first ground protection layer and the outer surface of the first ground protection layer is coated with a conductive material, and the layer below the first ground protection layer is first Protecting the signal layer and arranging the first trigger signal line in the at least one first protection signal layer; the protected circuit board comprising a second ground protection layer at the bottom, a layer above the second ground protection layer or A plurality of second protection signal layers and at the uppermost element layer, a second trigger signal line is disposed in the at least one second protection signal layer.

 Wherein, the surface of the first protective layer and the second protective layer are coated with a light-shielding insulating material.

The first trigger signal line and the second trigger signal line are serpentine trigger signal lines. Wherein one side of the flexible circuit board is glued and bonded to the metal shield according to the shape of the metal shield.

 Preferably, the metal shield has four side walls, and the flexible circuit board has four bent portions.

 Preferably, each side wall of the metal shield is provided with a claw or a twisted leg, and the protected circuit board is provided with a first through hole that cooperates with the claw or the twisted leg, The joint of the claw or the twisting foot of the metal shield with the side wall is provided with a shoulder having a height equal to the thickness of the flexible circuit board.

 Wherein each bent portion of the flexible circuit board includes a first bent sub-portion and a second bent sub-portion, the second bent sub-portion has the extending portion and is disposed on the extended portion and protected a first contact member corresponding to the second contact member on the circuit board, the second bent portion is provided with a groove at a position corresponding to a claw or a twisted leg of the side wall of the metal shield, first a bent sub-section covering an outer surface of one side wall of the metal shield, the second bent sub-section covering the inner surface of the one side wall through the shoulder and the slit of the protected circuit board structure .

 Wherein, the extension of each of the second bent sub-portions is the same as the number of the second electrically conductive contact members disposed on the protected circuit board.

 Optionally, a heat conductive element is disposed on top of the heat generating component on the protected circuit board, and a large area of conductive material is coated on the surface near the first via of the protected circuit board.

 Wherein the security processor is disposed on the component layer of the protected circuit board, and the trigger signal sent by the security processor is transmitted to the second protection through the second via hole in the protected circuit board A second trigger signal line in the signal layer, the second trigger signal line on the second protection signal layer is connected to the second conductive contact part through a third via on the protected circuit board.

 Wherein, the metal shield is made of a copper-tin-nickel alloy, a copper-tin-phosphorus, a copper-tin-bismuth alloy, and a copper-silver alloy material.

 Further, the conductive element internally includes at least one pair of isolated conductive channels, the number of pairs of conductive channels, the number of first conductive members on the flexible circuit board, and the second conductive contact members on the protected circuit board. The same amount.

 Wherein, the metal shielding cover correspondingly forms a fin at a position where the conductive element is disposed to support the conductive element.

It can be seen from the above technical solution that, in the present invention, the metal shield covered with the flexible circuit board and the protected circuit board together form a three-dimensional protection space; the safety dynamic trigger signal or the static trigger signal provided by the security processor is densely distributed throughout the information security. Protective device surface, from information security A physical attack in any direction outside the full protection device triggers a safety trigger signal on the serpentine trigger signal line, enabling the protected circuit board on the information security device to initiate a self-destruction program, and instantly erasing the protected circuit board. The key, PIN code and sensitive data in the key protect the security of the information security device. DRAWINGS

 In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings to be used in the embodiments or the description of the prior art will be briefly described below. It is apparent that the drawings in the following description are only some embodiments of the present invention, and other embodiments and drawings thereof may be obtained by those skilled in the art from the embodiments shown in the drawings.

 1 is a schematic structural diagram of a conventional payment terminal security protection device;

 2 is another schematic structural diagram of a conventional payment terminal security protection device;

 3 is a schematic structural view of an information security device according to an embodiment of the present invention; FIGS. 4a and 4b are plan views showing a metal shield 20 of an embodiment of the present invention; and FIGS. 5a and 5b are views showing a flexible circuit board 30. Schematic plan view;

 6 is a schematic view showing a arrangement of a serpentine trigger signal line of a bottom layer of a flexible circuit board; FIG. 7 is a circuit diagram showing a serpentine trigger signal line of an embodiment of the present invention; and FIGS. 8a and 8b show an embodiment of the present invention. A schematic cross-sectional view of the flexible circuit board after covering the metal shield;

 Figure 9 is a top plan view of the protected circuit board;

 FIG. 10 is a schematic view showing a heat dissipation structure of a heat generating chip according to an embodiment of the present invention; FIG.

 Figure 11 is a schematic cross-sectional view showing the structure of a protected circuit board;

 Figure 12 is a schematic illustration of an information security device after assembly in accordance with an embodiment of the present invention; Figure 13 is a schematic illustration of a conductive material arrangement on a protected circuit board in accordance with an embodiment of the present invention. detailed description

 The present invention will be further described in detail below with reference to the accompanying drawings.

Embodiments of the present invention provide an information security device such as a payment terminal security device that primarily includes a metal shield 20, a flexible circuit board 30, a protected circuit board 10, and conductive elements. The information security protection device may be a financial payment terminal or the like. The flexible circuit board 30 covers the outer surface of the metal shield 20 and the extension of the flexible circuit board extends into the metal shield On the surface. A metal shield 20 covered with a flexible circuit board 30 is placed over the protected circuit board 10 and covers the circuit to be protected on the protected circuit board 10. The flexible circuit board 30 and the protected circuit board 10 are respectively provided with a first signal trigger line and a second signal trigger line, the first signal trigger line passing through the first conductive contact member disposed on the extension, the conductive An element, a second conductive contact member disposed on the protected circuit board is coupled to the second trigger signal line, and the first signal trigger line and the second signal trigger line are received from the security disposed on the protected circuit board The trigger signal of the processor.

 In an embodiment of the invention, the metal shield 20 has a top surface and side walls. The flexible circuit board 30 has a main body portion and a bent portion configured according to the outer shape of the metal shield, the bent portion having an extension portion on which a first conductive contact member is disposed, the main body portion covering the The outer surface of the top surface of the metal shield, the bent portion covers the outer surface of the corresponding side wall of the metal shield 20 and the extension of the bent portion extends along the corresponding side wall to extend into the metal shield 20 On the surface. A metal shield covered with a flexible circuit board 30 is placed on the protected circuit board and covers the circuit to be protected on the protected circuit board 10, and is disposed on the protected circuit board with the extension of the flexible circuit board 30. The first conductive contact member corresponds to the second conductive contact member. a first trigger signal line connected to the first conductive contact part is disposed on the flexible circuit board, and the second circuit board connected to the second conductive contact part is disposed on the protected circuit board, the first conductive touch The point component and the second conductive contact component are electrically connected via the conductive element. The protected circuit board 10 is provided with a security processor, and the trigger signal sent by the security processor is transmitted to the second trigger signal line, the second conductive contact component, the conductive component, the first conductive contact component and the first trigger signal. In the signal loop formed by the line, the trigger signal is returned from the signal loop to the security processor.

 When the information security device is physically attacked, such as disassembling, splitting, etc., the contacts between the conductive contact members are broken, loose or poorly contacted, resulting in the flexible circuit board 30 or the protected circuit board 10. The trigger signal on the trigger signal line is interrupted. When the safety processor detects the interruption of the trigger signal, it will cause the trigger information security device to start the self-destruction program, and instantaneously erase the key, PIN code and sensitive data in the information security protection device, which greatly protects the information security protection device. Security.

 Preferably, the extension of the bent portion extends along the corresponding side wall to extend onto the inner surface of the metal shield: the extension of the bent portion extends along the corresponding side wall to extend to the metal On the inner surface of the top surface of the shield.

Preferably, the first and second trigger signal lines are serpentine signal trigger lines. Using a serpentine signal trigger line, the wiring in the flexible circuit board and the protected circuit board can be made denser. Better protection.

 Preferably, the conductive element is an elastic conductive element such as a conductive rubber.

 The exemplary structure and operation principle of the information security device of the present invention will be described in detail below with reference to specific embodiments.

 FIG. 3 is a schematic structural diagram of an information security protection device according to an embodiment of the present invention. As shown in FIG. 1, the information security device includes a protected circuit board 10, an electromagnetic shield 20, and a flexible circuit board 30. The flexible circuit board 30 covers the electromagnetic shield 20.

 The electromagnetic shield 20 includes a top surface 201 and side walls 202. Figure 4a shows a plan view of a metal shield 20 in accordance with an embodiment of the present invention. In Figure 4a, the metal shield 20 is square. In the present invention, the metal shield is not limited to a square shape, and may be cylindrical, or such as a 5-sided cylinder, a hexahedral cylinder, or other irregular shapes.

 As shown in Figure 4a, each side wall 202 has two jaws 2021. It is apparent that in the present invention, the number of the claws 2021 on each of the side walls 202 is not limited to two. Depending on the application, the claws 2021 on each side wall 202 may be one or more than three. At the junction with the side wall 202, the jaw 2021 has a shoulder 2022 having a height hi that is the same as the thickness of the flexible circuit board 30.

 Alternatively, each of the side walls 202 may be provided with two twisting legs 2023. As shown in Fig. 4b, a schematic view of the side wall of the electromagnetic shield 1 is shown. Similarly, the number of the twisting legs 2023 on each of the side walls 202 is not limited to two. Depending on the application, the number of twisting legs 2023 on each side wall 202 may be one or more than three. At the junction with the side wall 202, the twist leg 2023 has a shoulder 2024 having a height hi that is the same as the thickness of the flexible circuit board 30. The claw 2021 or the twisted foot 2023 has a "" groove portion above the shoulder, the height h2 of which is the same as the thickness of the protected circuit board 10.

 In the present invention, the number of the claws or the twisting legs is not limited to two, and may be three or more.

Referring to Figure 5a, a schematic plan view of a flexible circuit board 30 is shown. In the present invention, the number and shape of the bent portions of the flexible circuit board 30 are adapted to the number and shape of the metal shield. An extension is provided on the bend and a first electrically conductive contact member is disposed on the extension. The bend covers the respective side walls of the metal shield and the extension extends onto the inner surface of the metal shield. Preferably, the extension extends onto the inner surface of the top surface of the metal shield. In the example shown in FIG. 5a, the flexible circuit board 30 has a main body portion 301 and four bent portions 302. Obviously, in the present invention, the flexible circuit board is not limited to the case of having four bent portions. For example, if the metal shield has six side walls, the flexible circuit board accordingly has six bends; if the metal shield The number of side walls is eight, and the flexible circuit board has eight bent portions correspondingly. Referring to Figures 3 and 5a, the body portion 301 can cover the upper surface of the top surface 201 of the metal shield 20. Each of the bent portions 302 includes a first bent portion 3021, a second bent portion 3022, and an extended portion 3023. The first bent portion 3021 can be bent along a crease line between it and the body portion 301 to cover the outer surface of the corresponding side wall 202 of the metal shield 20. The second bent portion 3022 can be bent along the crease line between it and the first bent portion 3021 to cover the inner side surface of the corresponding side wall 202 of the metal shield 20. The extension 3023 can be bent along a crease line between it and the second bent subsection 3022 to cover the lower surface of the top surface 201 of the metal shield 20. A first conductive contact member 3024 is disposed on each of the extensions 3023. A first electrically conductive contact member 3024 includes at least one pair of metal contacts.

 Preferably, each of the second bent sub-sections 3022 is provided with an extension 3023 at one end thereof, and the extensions 3023 on the adjacent second bent sub-sections 3022 are not adjacent, as shown in Fig. 5a. However, the present invention is not limited to having only one extension 3023 on each of the bent sub-sections 3022, but may have more than two extensions 3023. In the present invention, the extending portion 3023 is not limited to the case where it is provided only at the non-adjacent positions of the adjacent bent portions 302. Alternatively, the extension may be disposed on the second bent subsection 3022 of the bend 302 on the opposite side, as shown in Figure 5b. Alternatively, an extension portion may be provided at both ends of the second bent portion 3022. As another example, the extensions may also be disposed at other locations than the ends of the second bend 3022.

 On the second bent portion 3022 of the flexible circuit board, a recess 3025 is provided at a position corresponding to the catch 3021 or the twisted leg 3023 on the side wall of the metal shield to accommodate the claw 3021 or the twisted leg 3023.

The flexible circuit board 30 may have a two-layer structure or a multi-layer structure. The uppermost layer (i.e., the top layer) of the flexible circuit board is a first protective layer whose surface is coated with a full area of conductive material such as copper. The layer under the first ground protection layer is at least one first protection signal layer and a first trigger signal line is disposed on the bottom layer of the at least one first protection signal layer, that is, the BOTTOM layer, as shown in FIG. Preferably, the first trigger signal line is a serpentine trigger signal line. In the present invention, the first trigger signal line disposed on the BOTTOM layer adopts a wiring pattern with a small trace width and a small trace pitch. The top layer of the flexible circuit board 30 may be made of a polyimide material and coated with a conductive material on the top layer as a GND plane. The surface of the conductive material and the surface of the bottom layer of the top layer of the flexible circuit board 30 are covered with a light-shielding insulating material, so that an intruder cannot optically detect the wiring shape of the first trigger signal line on the bottom layer. The structure of the flexible circuit board of the embodiment of the invention has an extremely high resistance to physical attack. Alternatively, the first trigger signal line on the flexible circuit board may be disposed on multiple layers in the at least one first protection signal layer. In this case, the first trigger signal lines on the respective layers are staggered on the respective layers through via holes (not shown), using a smaller trace width and a smaller line pitch, thereby improving the physical attack resistance.

 In an exemplary embodiment of the invention, the security processor disposed on the protected circuit board provides a two-way dynamic trigger signal to the first trigger signal line on the flexible circuit board, as shown in FIG. Those skilled in the art will appreciate that other circuit number trigger signals can also be provided to the first trigger signal line of the flexible circuit board.

 Fig. 8a shows a schematic cross-sectional view of the flexible circuit board 30 after covering the metal shield 20, and Fig. 8b shows a partial enlarged view of Fig. 6a. As shown in Figs. 8a and 8b, one side of the flexible circuit board 30 is glued and bonded to the metal shield 20 after being bent according to the shape of the metal shield.

 Figure 9 shows a schematic diagram of the protected circuit board 10. The protected circuit board 10 includes a first via 101 and a second conductive contact member 102. A second electrically conductive contact member includes a pair of metal contacts that are identical in number to the metal contacts of the first electrically conductive contact member. The first via 101 is disposed on the protected circuit board 10 at a position corresponding to the claw 3021 or the twisted leg 3023. The second conductive contact member 102 is disposed on the protected circuit board 10 at a position corresponding to the position of the first conductive contact member 3024 on the lower surface of the top surface of the metal shield. In the case where only one extension 3023 is provided at one end of each of the second bent sub-sections 3022 as shown in FIG. 3a, the first conductive contact member 3024 is located after the flexible circuit board 30 is assembled with the metal shield 20 On the corner region of the lower surface of the top surface of the metal shield 20, at this time, the second conductive contact member 102 is disposed at a corresponding region of the corner portion of the protected circuit board 10, as shown in FIG. The protected circuit board 10 is provided with a circuit to be protected surrounded by the first via. When the metal shield 20 is placed over the protected circuit board 10, the circuit to be protected will be in a protected state.

 The protected circuit board 10 further includes a heat generating chip 103 such as a CPU or the like. In order to meet the heat dissipation requirements of the internal chip of the information security device, a heat conducting element 60 is disposed on top of each of the heat generating chips, as shown in FIG. The thermally conductive element 60 can be a thermally conductive silicone. The heat conducting member 60 can quickly introduce the heat generated by the heat generating chip 70 to the metal shield 20 and finally to the outside.

Referring to FIG. 3, a conductive member 50 is disposed between the metal shield 20 and the protected circuit board 10. Preferably, the conductive element 50 is an elastic conductive element such as a conductive rubber. Conductive element 50 electrically connects first conductive contact member 3024 and second conductive contact member 102. A protected processor (not shown) is disposed on the protected circuit board 10. Those skilled in the art understand that the guide shown in Figure 3 The manner in which the electrical components are mounted is merely exemplary, with the extension extending to the side first conductive contact member and the second conductive contact, member of the metal shield. , , ^V

 From Fig. 8b and 9, the conductive member 50 is placed on the metal shield 20 at a position corresponding to the stamping of the fin 112 to support the conductive member 50.

 As shown in FIG. 11, the protected circuit board 10 has a multi-layered structure including a second underlying protective layer 106 at the bottom, and one or more layers of a second protective signal layer 107 over the second protective layer 106. And at the topmost component layer 111, a second trigger signal line is disposed in at least one of the second protection signal layers 107. Further, a signal layer 108 is disposed over at least one of the second protective layers 107. Optionally, a third ground protection layer 109 connected to the second ground protection layer 106 and a power layer 110 above the third ground protection layer 109 may also be disposed on the signal layer 108. Similar to the flexible circuit board 30, a second trigger signal line is disposed on the second protection signal layer of the protected circuit board. Preferably, the second trigger signal line is a serpentine trigger signal line. The wiring pattern of the second trigger signal line disposed on the second protection signal layer of the protected circuit board is the same as the wiring of the first trigger signal line on the flexible circuit board. As shown in Fig. 11, the uppermost layer, that is, a part of the element layer is provided with an element, and other parts of the element layer which are not provided with the element are laid over a large area, such as copper. The second protection signal layer is disposed next to the second ground protection layer. The second protection signal layer is not limited to one layer, and multiple layers may be employed. In the case of a multi-layer second protection signal layer such as three layers, the second trigger signal on each layer triggers the line staggered arrangement, and each layer uses a smaller trace width and a smaller line spacing to improve the intruder The difficulty of the attack. The second guard signal layer is coupled to the second conductive contact member 102 through the third via 104.

 Referring to Figures 3 and 11, the security processor generates a dynamic or static trigger signal and transmits it through the second via 105 to the second trigger signal line. The trigger signal is transmitted to the first trigger signal line via the second metal contact member 102, the conductive member 50, and the first conductive contact member 3024. Thus, a trigger signal is disposed on both the first signal trigger line and the second signal trigger line. Then, the trigger signal is returned to the security processor via the other first conductive contact member, the conductive member, the second conductive contact member, and the second trigger signal line.

In the present invention, the assembly process of the information security device is as follows. First, the flexible circuit board 30 is bent and formed according to the crease line, and bonded to the metal shield 20. Next, the conductive elements are mounted to the inner surface of the top surface of the metal shield 20, such as to the four corner regions of the inner surface of the top surface of the metal shield, and aligned with the first pair of conductive contacts. Next, the claw or the twisted leg of the metal shield cover 20 covered with the flexible circuit board 30 is inserted into the first through hole of the protected circuit board. Aligning the conductive element with the second conductive contact member on the protected circuit board and testing the contact of the conductive element with the first and second conductive contact members. Finally, if the conductive element is in good contact with the first and second conductive contact members, the jaws or pins of the metal shield are soldered to the protected circuit board.

 Fig. 12 is a view showing an information security device after assembly according to an embodiment of the present invention. As shown, the respective claws or twist pins of the metal shield covered with the flexible circuit board are inserted into the first through holes of the protected circuit board. Further, the claw or the twisted foot may be soldered to the protected circuit board after being inserted into the first through hole.

 As shown in Fig. 13, in order to quickly transfer the heat of the heat generating chip on the protected circuit board 10 to the outside, a large area of the conductive material is coated in the vicinity of the first through hole 101 on the protected circuit board 10. Thus, the heat generated by the heat generating chip is transmitted to the metal shield 20 through the heat conducting member 60, and then transmitted to the large-area covering conductive material near the first through hole through the claw or the twisted leg of the metal shield 20, thereby being radiated to the outside.

 In the present invention, by increasing the number of layers of the flexible circuit board 30, the physical attack resistance can be improved; by increasing the wiring complexity of the first trigger signal line of the flexible circuit board 30, the physical attack resistance can also be improved.

 The electromagnetic shield 20 can be made of copper-tin-nickel alloy to provide good electromagnetic shielding. If the electromagnetic shielding cover 20 has elastic requirements, copper-tin-phosphorus or copper-tin-bismuth alloy materials can be selected, and the shape of the information security protection device has excellent elasticity. If the information security device has high heat dissipation requirements inside, copper-silver alloy materials can be used. Silicon steel materials can also be used if magnetic shielding is required. At the same time, the selection of the above materials has no effect on safety, weldability and electromagnetic shielding effect.

In the present invention, the secure dynamic trigger signal or the static trigger signal provided by the security processor is densely attached to the entire surface of the information security device. The flexible circuit board covers the outer surface of the metal shield and forms a three-dimensional protective space together with the outermost second protective layer of the protected circuit board. When an intruder invades a safety information protection device from the top or side of the metal shield, the conductive component is loosened, triggering the protected circuit board to initiate a self-destruction process, and instantaneously erasing the key in the protected circuit board. , P IN code and sensitive data. When an intruder uses a probe to detect information on the information security device from the top or side of the metal shield, the probe will pierce the trigger signal line, such as a serpentine trigger signal line, which the security processor will detect. The intrusion thus triggers the protected board to initiate a self-destruction routine that instantaneously erases the key, P IN code, and sensitive data in the protected board. Similarly, when an intruder invades information from the outside of the protected board In the case of the safety protection device, since the trigger signal line is also arranged in the protected circuit board, the safety processor also detects the intrusion, and also triggers the signal on the trigger signal line of the protected circuit board to start the self-destruction program. Instantly erase the key, PIN code, and sensitive data in the protected board. Therefore, the information security protection device of the present invention can guard against physical attacks from any one direction.

 In addition, since the invention adopts the metal shield of the integral structure, it not only has good electromagnetic shielding effect, but also has strong anti-physical attack capability, and can effectively resist physical damage such as high temperature and punching.

 Of course, when the information security device is subjected to other physical attacks, such as disassembly and splitting, it also triggers a security trigger signal on the trigger circuit of the flexible circuit board or the protected circuit board. The security processor detects the attack. Therefore, the protected circuit board on the information security protection device initiates a self-destruction program, instantaneously erasing the key, the PIN code and the sensitive data in the protected circuit board, thereby greatly protecting the security of the information security protection device.

 The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

Claim  An information security device comprising: a metal shield, a flexible circuit board, a protected circuit board, and a conductive element, characterized by:  The flexible circuit board covers an outer surface of the metal shield and the extension of the flexible circuit board extends onto an inner surface of the metal shield;  A metal shield covered with a flexible circuit board is placed on the protected circuit board and covers the circuit to be protected on the protected circuit board;  a first signal trigger line and a second signal trigger line are respectively disposed in the flexible circuit board and the protected circuit board, the first signal trigger line is disposed on the first conductive contact part disposed on the extension portion, a conductive element, a second conductive contact member disposed on the protected circuit board is coupled to the second trigger signal line, and the first signal trigger line and the second signal trigger line are received from the circuit board disposed on the protected circuit board The trigger signal of the security processor. 2. The information security device according to claim 1, wherein the metal shield has a top surface and a side wall;  The flexible circuit board has a main body portion and a bent portion according to the outer shape of the metal shield cover, the bent portion has the extending portion, and the main body portion covers the outer surface of the metal shield cover a surface, the bent portion covers a corresponding side wall outer surface of the metal shield and the extension of the bent portion extends along a corresponding side wall to an inner surface of the metal shield; the safety treatment The trigger signal sent by the device is transmitted to a signal loop composed of the second trigger signal line, the second conductive contact member, the conductive element, the first conductive contact member and the first trigger signal line, and the trigger signal is returned from the signal loop The security processor. The information security protection device according to claim 2, wherein the extension portion of the bent portion extends along the corresponding side wall to extend onto the inner surface of the metal shield, specifically: the bent portion The extensions are bent along the respective side walls to extend onto the inner surface of the top surface of the metal shield, and the conductive elements are resilient conductive elements. The information security protection device according to claim 2 or 3, wherein the flexible circuit board has at least two layers, and the uppermost layer is a first protective layer and is coated on the outer surface of the first protective layer. Covering the conductive material, the layer under the first protective layer is the first protection signal layer and at least one Arranging a first trigger signal line in the first protection signal layer;  The protected circuit board includes a second ground protection layer at the bottom, one or more layers of a second protection signal layer over the second ground protection layer, and an uppermost component layer, at least one layer A second trigger signal line is disposed in the second protection signal layer. The information security device according to claim 4, wherein the first protective layer and the second protective layer are coated with a light-shielding insulating material. The information security protection device according to claim 1, 2 or 3, wherein the first trigger signal line and the second trigger signal line are serpentine trigger signal lines. 7. The information security device according to claim 2, wherein one side of the flexible circuit board is glued and bonded to the metal shield according to the shape of the metal shield. The information security device according to any one of claims 1 to 3, wherein the metal shield has four side walls, and the flexible circuit board has four bent portions. The information security device according to any one of claims 1 to 3, wherein each side wall of the metal shield is provided with a claw or a twisted leg, and the protected circuit board is provided with The first through hole of the claw or the twisting leg, the joint of the claw or the twisting leg of the metal shield and the side wall is provided with a shoulder, the height of the shoulder is the same as the thickness of the flexible circuit board . 10. The information security device according to claim 9, wherein each of the bent portions of the flexible circuit board includes a first bent portion and a second bent portion, and the second bent portion has the extension And a first conductive contact member corresponding to the second contact member on the protected circuit board, the second bent portion being on the side wall of the metal shield Or a corresponding position at the position of the twisting foot, the first bent portion covering the outer surface of one side wall of the metal shield, the second bent portion passing through the shoulder and the protected circuit A slit of the plate structure covers the inner surface of the one side wall. 11. The information security device of claim 10, wherein the extension of each of the second bent sub-portions is the same as the number of the second electrically conductive contact members disposed on the protected circuit board. 12. The information security device according to claim 9, wherein a heat conductive element is disposed on a top of the heat generating component on the protected circuit board, and is coated on a surface near the first via hole of the protected circuit board. Large area conductive material. The information security protection device according to claim 4, wherein the security processor is disposed on an element layer of the protected circuit board, and a trigger signal sent by the security processor passes through the The second via in the protected circuit board is transmitted to the second trigger signal line in the second protection signal layer, and the second trigger signal line on the second protection signal layer is connected through the third via on the protected circuit board To the second conductive contact member. 14. The information security device according to claim 1, wherein the metal shield is made of a copper-tin-nickel alloy, a copper-tin-phosphorus, a copper-tin-bismuth alloy, and a copper-silver alloy material. The information security protection device according to any one of claims 1 to 3, wherein the conductive element internally comprises at least one pair of isolated conductive channels, the number of the pair of conductive channels, and the first conductive member on the flexible circuit board. The number is the same as the number of second conductive contact members on the protected circuit board. The information security protection device according to claim 1 or 3, wherein the metal shield covers the fins at a position where the conductive elements are disposed, and supports the conductive elements.