Security method for transferring shared keys

The present invention relates to a system and procedure for preventing the theft and hacking of a user's computer device at the user's discretion, and more particularly to a security system for preventing the use of a personal computer by an unauthorized person.

To protect your sensitive data or prevent unauthorized persons from using your computer, such as personal computers, portable computers, or other handheld computers, from becoming the target of hackers and thieves. The password is used for. Such passwords are used in conjunction with encryption and authentication keys used to establish secure communication between computers. Today, it is possible to install programs on your computer that encrypt sensitive data so that it cannot be read by anyone without an unlock key. However, the key needs to be memorized somewhere, and if this key is not complicated, it will be detected.

Despite the constant development of new technologies, passwords remain the most popular security tool, and are also the most abused and often the easiest for attackers to crack. Passwords represent some sort of security paradox. The best passwords are the hardest to guess, long and random. Unfortunately, these passwords are also the hardest to remember. Also, most experts strongly recommend that you use different passwords for email, e-commerce, or other accounts and change them on a regular basis. As a result, most people choose a password that is easy to guess, or write it down in a place where it can be copied or stolen.

The answer to this conundrum is to use password safes. These programs provide space to store long, complex, or random passwords, and then encrypt them to prevent them from being stolen. Some password safes even generate random passwords. But those passwords are on disk and also require a password to start the software.

Security in cryptography and transmission by user authentication, device authentication or data authentication can be achieved using Public Key Infrastructure (PKI). In PKI encryption, the user has a pair of keys, a public key and a private key. As their names suggest, private keys are kept privately and public keys are distributed to other users. The owner of the private key does not share the private key with anyone else. Individual users' public and private keys are associated through complex mathematical structures so that one key is tightly linked to the other. This relationship is crucial for the functioning of public / private key-based encryption.

The public key is used as the basis for encrypting the message, while the private key is required by the recipient to decrypt the encrypted message. Only the person who brings the private key can decrypt the message. Even the person who did the encryption may not be able to decrypt the freshly encrypted message because he does not know the private key.

Digital signatures generally use two different keys. One key is to create a digital signature or transform the data into a form that is incomprehensible at first glance. The other is to verify the digital signature or restore the message to its original form. Computer devices and software that utilize these two types of keys are often referred to as "asymmetric cryptosystems."

Asymmetric cryptosystem keys for digital signatures are known only to the signer and are called private keys used to create digital signatures, and public keys commonly known to more people and used to verify digital signatures. It is called. The recipient must have the corresponding public key to verify that the digital signature belongs to the signer. If many people need to verify the signer's digital signature, the public key will be given to all of them, perhaps by publishing it in an online repository or directory where they can easily obtain the key. Must be distributed.

The pair of keys are mathematically associated, but it is computationally impossible to derive the other from one key if the asymmetric cryptosystem is designed and implemented securely for digital signatures. is there.

Many people know the public key of a given signer and use it to verify the signature, but they cannot discover the signer's private key and use it to forge a digital signature.

<p> Therefore, a main object of the present invention is to provide a security system based on a public key infrastructure (PKI) that prevents unauthorized persons from using the main computer device owned by an authorized user. That is.</p>

<p> Accordingly, the present invention relates to a security system that prevents unauthorized persons from using a main computer device, such as a personal computer, owned by an authorized user, the system being a portion of said main computer device. Yes, said authorized person can remove it from it, at least<u style="single">Detachable</u>Main private key and<u style="single">PC public key</u>including<u style="single">Detachable</u>The security part and the computer device<u style="single">removal</u>The impossible part, including at least the PC security area containing the PC private key and the extractable main public key, and this PC private key and the extractable main public key pair, respectively.<u style="single">removal</u>Possible main private key and<u style="single">PC public key</u>Configure Public Key Infrastructure (PKI) with a pair of<u style="single">removal</u>Already removed in both possible security areas and PC security areas<u style="single">Security part</u>Is returned to its correct position,<u style="single">A processing means that allows an authorized user to access the data stored in the computer device by performing mutual authentication between the removable security portion and the PC security area.</u>including.</p>

With reference to FIG. 1, the main principle of the present invention is<u style="single">Detachable security part</u>10 and PC security area 12 will be used in combination.<u style="single">removal</u>The possible security part 10 is unique in the computer device to which it is connected. this<u style="single">removal</u>Possible security part<u style="single">10</u>Without it, computer devices and all devices contained or connected to them, such as memory, hard disks, and various peripherals, cannot be used. This part can be a keyboard key, or an integrated mouse button, a block containing a small information display area or LED area or a PCMCIA card. In the latter case, one of the PCMCIA slots cannot be used for other purposes. Another feature, PC Security Area 12, is any part of the computer equipment hardware / firmware, including the operating system and installed applications. Generally, this PC security area is contained on the motherboard of the computer device or other required board or card of the computer device and cannot be removed.

<u style="single">removal</u>Possible security part<u style="single">10</u>Can be a microprocessor with an integrated communication port, a processor 14, a memory 16 protected against external reads (which may be an integrated memory within the processor 14), and a PC security area 12. Includes PKI Checker 18, a software application used by Processor 14 to encrypt or authenticate data sent to. Protected memory 16<u style="single">Detachable main private key 20</u>、<u style="single">PC public key (computer device public key) 22</u>, And other keys or passwords 24 are stored.

Similarly, the PC security area 12 has a processor 26 that communicates with the processor 14 via a communication port,<u style="single">removal</u>Sent to possible security part 10<u style="single">Ru</u>It includes a PKI checker 28, a software application used to encrypt or authenticate data, and a protected memory 30 that can also be integrated within the processor 26. Protected memory 30 can be extracted<u style="single">Maine</u>Public key 32 (<u style="single">removal</u>Possible security part<u style="single">10</u>(Public key), PC private key 34, and other keys or passwords 36 are stored.

Previously removed from a computer device by an authorized user<u style="single">removal</u>When the possible security part 10 is repositioned in the correct place in the computer device, the PC security area<u style="single">12</u>Mutual authentication with is done automatically as described below. When this check is complete<u style="single">Processor</u>The 26 can initiate access to the PC system 38 via an I / O bus for the OS or application password that checks application authentication or encryption. At this moment, either processor 14 or 26 can help perform encryption or authentication. Further, the computer apparatus system 38 can open communication to the processor 26 to identify an external user such as a remote user.

<u style="single">removal</u>The protected memory 16 of the possible security portion 10 includes a set of storage, which is illustrated in more detail in FIG. This storage stores either key, which can be the key itself, a complete certificate containing these keys, or a password area.

That is, the storage area stores the following items. <u style="single">removal</u>A unique private key to identify possible security parts 10.<u style="single">Detachable</u>Main private key 40. Similar to sequence numbers, but much more complex and hard to read. This private key<u style="single">40</u>Identifies itself to the connected computer device, which computer device has this private key<u style="single">40</u>To be able to send encrypted messages that can only be decrypted by<u style="single">removal</u>Possible security part<u style="single">10</u>Used by. Compatible with computer devices, security part in this environment<u style="single">10</u>Sent to PC Security Area 12, such as requesting permission to use<u style="single">Ru</u>The main PC public key 42 used to encrypt the message. This key is also used to authenticate messages from PC Security Area 12. A shared private key 44, which is a private key generated by the user and sent to other security parts authorized on this computer device for certain applications, as described below. <u style="single">removal</u>Possible security part<u style="single">10</u>This security part<u style="single">10</u>The local PC public key 46, which is the PC public key used to identify on a computer device that is different from the computer device to which it belongs. <u style="single">removal</u>A unique private key for identifying a possible security part on a computer device that is different from the computer device to which this security part belongs.<u style="single">removal</u>Possible local private key 48. This key, along with the local PC public key, forms a set of keys corresponding to possible guest computers, as described below. These keys can be duplicated so that many computer devices can be connected. · Main password area 50 that stores passwords required for local connection to the main computer unit or for remote connection. As explained below<u style="single">removal</u>Local password area 52 used in guest mode when the possible security part is allowed on other computer equipment. Authorized users are not on the computer device itself<u style="single">removal</u>You can want to keep all its passwords in a possible security area. -Application private key 54, which is a key that can be used for certain applications, such as building a secure IPSec tunnel. This key can also be used to perform PKI procedures for encryption and / or authentication. There are many such fields,<u style="single">removal</u>Available in possible security areas.

Protected memory 30 in PC security area 12<u style="single">removal</u>Possible security part<u style="single">10</u>Includes functions similar to those included in. <u style="single">removal</u>Public key of possible security part 10<u style="single">And remove</u>Possible security<u style="single">part</u>Used by computer equipment to send encrypted messages decrypted by 10.<u style="single">Extractable main public key 56</u>.. The PC public key 60, which is the public key of the computer device used by the computer device to send the encrypted message to another external device. This key is<u style="single">removal</u>Possible security part<u style="single">10</u>Main PC public key<u style="single">42</u>May be the same as. fact,<u style="single">removal</u>Possible security part<u style="single">10</u>Is the same if it corresponds to a computer device (a main computer device with a main security part). · Others, as explained below<u style="single">removal</u>A temporary (TEMP) key area 62 that can store a temporary key used to store a private key when a possible security part is placed on the main computer device. Others placed on the main computer unit as described below<u style="single">removal</u>Shared public key 64, which is the public key sent to the possible security part. <u style="single">removal</u>Possible security part<u style="single">10</u>PC Password Area 66, which contains PC passwords that can be exchanged for or updated with passwords stored in Main Password Area 50.

Computer equipment system 38<u style="single">removal</u>Possible security part<u style="single">10</u>Includes OS Logon 68, which is an operating system logon that confirms the login password by comparison of what is stored in PC Password Area 66 or Main Password Area 50 when is recognized. This is done by the application<u style="single">removal</u>Possible security part<u style="single">10</u>Application logon 70 used when requiring a password in the main password area 50, and also<u style="single">removal</u>Possible security part<u style="single">10</u>Contains a PKI application 72 that uses the application private key 54 in.

In Figure 3,<u style="single">removal</u>Possible<u style="single">Security part 10</u>Instead of the other<u style="single">removal</u>The case where the possible security part is used together with the main computer device is shown. In such cases, the first step is<u style="single">removal</u>The main security part that is possible is to be inserted into the main computer equipment.<u style="single">removal</u>Possible security parts, on the one hand<u style="single">Detachable</u>With main private key 40<u style="single">Extractable</u>Pair with main public key 56, on the other hand main<u style="single">PC</u>Thanks to the pair of public key 42 and PC private key 58, it is authenticated as mentioned above.

next,<u style="single">removal</u>Possible<u style="single">Security part 10</u>The shared private key 44 in the memory 16 of the PC security area is the memory 30 of the PC security area.<u style="single">temporary</u>Key area<u style="single">62</u>Is copied to. afterwards,<u style="single">removal</u>Possible<u style="single">Security part 10</u>From the computer device,<u style="single">removal</u>Can be replaced with a possible guest security part. Of course, the latter<u style="single">The guests·</u>The identity of the security part is checked by a server that stores the corresponding public key using an external sequence number. After that, the key in the temporary key area 62 is<u style="single">removal</u>In memory 76 of the possible guest security part<u style="single">removal</u>Loaded on a possible local private key 74. Therefore,<u style="single">removal</u>The removable local private key 74 of the possible guest security portion matches the shared public key 64 of the computer device and allows them to communicate with each other.

Finally, the computer device uses its PC public key 60 to complete a two-way secure link.<u style="single">removal</u>Store it as the local PC public key 78 in the memory 76 of the possible guest security part. When this link is established,<u style="single">removal</u>The local password area 80 of the possible guest security portion can be used for the OS guest logon 82 of the computer equipment system through the PC password area 66 of the computer equipment.

Other application examples of the present invention include<u style="single">removal</u>It is time to insert a possible main security part into a remote computer or guest computer device instead of inserting it into the main computer device. Figure 4 shows the process performed in such a case. In the figure, double-headed arrows represent relationships between entities, and buses represent data transfers. The reference items used in Figure 2 are:<u style="single">removal</u>Note that they remain the same when representing the same entity, such as possible main security parts or different areas of the PC security area of the main computer unit.

fundamentally,<u style="single">removal</u>The connection between the possible security part and the guest computer device security area is on the security part side.<u style="single">removal</u>This is done by using the possible main private key 40 and sending the corresponding public key to the remote temporary key area 90 that stores the then extractable main public key 56'. A private key and a public key are generated at the same time. The public key can be provided to an external device without risk, and even if the remote computer device is not a well-known computer device, it is okay to give it a public key. In addition, each user can define certain rules to change both the private and public keys on a regular basis, and to change the previous public key, a new device on the other side. It can be updated with the key.

All updates or key transmissions between different entities can be done using a certificate containing the device ID and public key. These certificates are certified by a trusted entity, the Certificate Authority (CA) server. Therefore, such a CA server can be used as an authentication server. These servers, for example, know all the public keys of all the equipment of the customer, and thus can allow those keys to build secure communications with each other. It can be said that the common rule is to trust only the certificate issued by this CA.

Using this method, after cross authentication has taken place between the user security part and the remote computer device, the remote computer device will eventually accept any logon execution within this system. , You can check if the public key actually corresponds to this user. The security part of the user needs to receive the PC public key in order to communicate securely with the remote computer device. The remote computer device transfers its remote PC public key 86 (matching the remote PC private key 88) to the field in memory 16 of security portion 10, the local PC public key 46. At this stage, secure communication can be established between the guest computer device and the security part. The user can then log on as a guest to a remote computer device in the profile that allows remote connections.

One type of connection is to connect to the CA to verify the identity of the remote computer device and then do more in this environment. In that case, the remote PC public key 86 is confirmed.

The main purpose of such an interconnect is to allow the user to access the main computer device in a secure manner. Connecting to the main PC security area<u style="single">Figure 2</u>The main set of keys shown in, that is, on the security part side<u style="single">removal</u>It is established using the possible main private key 40 and main public key 42, and the extractable main public key 56 and PC private key 58 on the main computer device side. The remote computer device deciphers the data communication between the extractable main security part and the main computer device, even if it does not know the respective public key, as it is the basic principle of PKI. It is impossible.

Finally, over this secure channel, use all passwords stored in main password area 50 and securely transfer it to PC password area 66 on the security area of the main computer unit. And you can use it as an application logon 70 for normal logon. In this case, the remote computer device is considered a local device. At this stage, a shared secret key can be exchanged to establish a secure communication channel between the main and remote computer devices, using less computational resources than PKI communication. it can.

In addition, the application can behave as already described in Figure 1. That is, the PKI application 72 can use the key stored in the application private key 54 with the help of PKI checkers existing in each security part and each security area, although not shown in FIG.

<figref num="1"><u style="single">removal</u>FIG. 6 is a block diagram showing a security system according to the invention with possible security parts, a PC security area, and links to computer equipment systems.</figref><figref num="2">On the main computer device<u style="single">removal</u>It is a schematic diagram which shows the dialogue between the security part which can be extracted when the possible security part is connected, the PC security area, and a computer apparatus system.</figref><figref num="3">On the main computer device<u style="single">removal</u>If you connect a possible guest security part,<u style="single">removal</u>Possible main security part, PC security area,<u style="single">removal</u>It is a schematic diagram showing a possible guest security part and a dialogue between computer equipment systems.</figref><figref num="4">On a remote computer device<u style="single">removal</u>If you connect a possible main security part,<u style="single">removal</u>It is a schematic diagram showing a dialogue between a possible security part, a main PC security area, a guest PC security area, a main computer equipment system, and a guest computer equipment system.</figref>

Code description

10 <u style="single">removal</u>Possible security parts 14 Processor 16 Protected memory 18 PKI checker 20 <u style="single">Detachable main</u>Private key 22 PC public key 24 Other key or password 26 Processor 28 PKI checker 30 Protected memory 32 Extractable<u style="single">Maine</u>Public key 34 PC private key 36 Other key or password 38 PC system