JPS6398027A - Method and apparatus for generating random number in data processing system - Google Patents

Abstract

PURPOSE:To improve the security of a system by generating a random number based on a count of an event having random performance so as to always generate a uniform random number without repetition. CONSTITUTION:In loading an IC card 1 to a reader/writer 21, a counter 13 starts count of a clock from a CLK terminal. The counter 13 continues the count until the input of a personal identification data of a cathode 1 is finished, then its count value is latched to a latch 14. The CPU11 inputs the count and generates a random number based on it. Since the count value of the counter 13 is random, no regularity exists in the random member generated based on it. Thus, uniform random numbers without repetition are always generated. In using the random number, the system security is improved.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a method and apparatus for generating random numbers in a data processing system.

The random number generation method and device according to the present invention are applied to systems that require uniform non-repetitive random numbers, for example, when generating random numbers used for data encryption.

[Prior art] In recent years, with the advancement of networking of information systems,
Eavesdropping on communication content has become a major problem. In order to solve such problems, data encryption has traditionally been performed.

Ideally, infinitely long random encryption keys would be used to encrypt data, but in reality pseudorandom numbers generated by microcomputers are used. As a random number generation method, for example, a method of cyclically delaying data in a shift register is used.

[Problems to be solved by the invention] However, in such conventional random number generation methods, random numbers are always generated from the same initial state, so the random numbers generated at the same time are always the same, and it is not possible to repeat completely. It was not possible to generate uniform random numbers without gender. For this reason, for example, regularity occurs in the data encryption key, making it easy for the data to be intercepted, posing a problem in terms of system security.

[Means for Solving the Problems] The present invention attempts to solve the above-mentioned conventional problems, and its purpose is to constantly generate random numbers that are uniform and non-repetitive, thereby improving the security of the system. An object of the present invention is to provide a generation method and device.

The random number generation method according to the present invention is characterized in that, in a data processing system that at least performs data processing using random numbers, the random number is generated based on a measured value of an event having randomness.

A random number generation device according to the present invention is a data processing system that includes at least a random number generation means and a control means for controlling the random number generation means, and that performs at least data processing using random numbers. It is characterized in that it has a measuring means for measuring the quantity, and the random number generating means generates the random number based on the output of the measuring means.

[Effect] In this way, in order to generate random numbers based on the measured values of random events, the initial state of random number generation constantly changes, making it impossible to eliminate the regularity of conventional random number sequences. can.

Events that alleviate randomness include the timing of human key operations and the access time of semiconductor memory.

[Example] Hereinafter, an example of the present invention will be described in detail with reference to the drawings.

FIG. 1 is a schematic diagram of a data processing system using an embodiment of a random number generator according to the present invention. In this embodiment, a case is shown in which data is transmitted between the IC card 1 and the terminal side 2.

In the figure, the surface of an IC card 1 is provided with a terminal for connection to the outside, and inside the card 1 is a CPU II that performs calculations and information management, and a memory 12 that can erase and rewrite information. In this case, an EEFROM) is provided. The CPU II controls the operation of each device in the card, generates random numbers, and sends and receives data via the SIO terminal.The memory 12 stores random numbers in addition to secret data such as personal identification data and normal data. A generation algorithm or random number is stored and read out as required under the control of the CPU II.

Further, a counter 13 and a latch 14 are provided in the card 1. The counter 13 counts the clock applied through the CLK terminal, and the latch 14 latches the count value and outputs it to the CPU II. The counter 13 and latch 14 are reset by a reset pulse from the CPU 11, and the latch timing of the latch 14 is also reset by the reset pulse from the CPU 11.
Based on instructions from U11.

In addition, a reset signal is supplied from the R3T terminal, a power supply voltage Vcc is supplied from the Vcc terminal, a program voltage VPP applied to the memory 12 is supplied from the Vpp terminal, and a ground voltage is supplied from the GND terminal.

On the other hand, the terminal side 2 is provided with a reader/writer 21 (hereinafter referred to as R/W 21) which is connected to the IC card 1 to exchange data, and also supplies reset pulses, clock pulses, and power to the card 1. It is being R/W21
is connected to a computer 22, and the computer 22 is connected to an input key 23 and a display 24.

Next, an embodiment of a random number generation method in a data processing system having such a configuration will be described. Here, as an example, a case will be described in which random numbers are generated by measuring the timing when a user inputs personal identification data.

FIG. 2 is a flowchart for explaining this embodiment.

First, when the user inserts the card l into the R/W 21 (S
l) Each power supply and reset signal are supplied from the R/W 21 and the card is activated (S2). At this time, a desired initial value is set in the counter 13. Then, the counter 13 starts counting the clock supplied from the CLK terminal (S13).

When the user inserts the card 1 into the R/W 21, the user inputs personal identification data from the input key 23 of the terminal. When this input operation is completed, the computer 22 outputs a personal identification data verification command to the CPU II through the R/W 21 and the SIO terminal (S4).

When the CPU II receives a verification command (Yes in S4), it outputs a latch signal to the latch 14 and holds the count value of the counter 13 at that time (SS). If you look at it, there is some randomness involved. Therefore, if the counter 13 measures the time from when the card 1 is inserted into the R/W 21 until the end of inputting the personal identification data, the count value should change randomly with each operation.

The CPU II inputs this count value and generates a random number based on it (SS). For example, if a random number generation algorithm is stored in the memory 12, the CPU II inputs the count value as seed data to determine the initial state of random number generation. If a random number is stored in the memory 12, the count value can be used to specify the address.As mentioned above, since the count value has randomness, the random number generated based on it does not have the same regularity as in the past, so if it is used as an encryption key, a highly secure system can be constructed.

Desired processing is performed using the random numbers generated in this way (37), and here, the case of collation of personal identification data will be exemplified.

The random numbers generated by CPUII are sent to the SIO terminal and R/
It is output to the computer 22 through W21. The computer 22 encrypts the personal identification data input by the user using the input random number as an encryption key, and converts the ciphertext into C.
Output to PUII.

On the other hand, the CPU II of the card 1 encrypts and encrypts the personal identification data stored in the memory 12 using the same random number as an encryption key. Then, this ciphertext is compared with the ciphertext of the personal identification data input from the terminal side, and if they match, the following normal data processing is performed (Sa), and if they do not match, the ciphertext is converted into plaintext. ↓ and memory 12
may be compared with personal identification data stored in

Secret data is also encrypted in the same way and sent to and from the terminal. Since the random numbers that serve as the encryption keys are uniform random numbers with no regularity as described above, data eavesdropping can be prevented, and security is greatly improved.

In addition, although the case of personal identification data was described as an example in this embodiment, the present invention is not limited to this.
It can be applied to random number generation when determining the authenticity of a card at the time of card insertion, and can also be applied to general data processing that uses the number of copies.

Further, in the above embodiment, the randomness of human operation timing is used, but the present invention is not limited to this, and any physical quantity that has randomness and that randomness can be measured may be used.For example, the memory 12 By taking advantage of the fact that the access time of is irregular depending on the response speed during chip manufacturing, etc., and measuring the change as described above, the measured value can also be used.

[Effects of the Invention] As explained in detail above, the random number generation method and device according to the present invention generate random numbers based on the measured values of events having randomness, so that the initial state of random number generation always changes. Therefore, the regularity of conventional random number sequences can be eliminated, and an ideal random number sequence can be obtained.

As a result, if used as an encryption key, for example, data eavesdropping can be effectively prevented, and the security of information networks can be greatly improved.

[Brief explanation of the drawing]

FIG. 1 is a schematic configuration diagram of a data processing system using an embodiment of a random number generator according to the present invention. FIG. 2 is a flowchart for explaining this embodiment. l...IC card 2...terminal side 11...C
PU 12, fist, memory 13...counter 14...latch 21...reader/writer

Claims (9)

[Claims] (1) A random number generation method in a data processing system that at least performs data processing using random numbers, characterized in that the random number is generated based on a measured value of an event having randomness. (2) The random number generation method according to claim 1, wherein the measured value is a time interval. (3) The random number generation method according to claim 2, wherein the event having randomness is a timing of a human operation. (4) The random number generation method according to claim 2, wherein the random event is an operating speed of a desired semiconductor circuit in the data processing system. (5) In a data processing system that includes at least a random number generation means and a control means for controlling the random number generation means, and performs at least data processing using random numbers, measurement is performed to measure a desired amount of an event having randomness. 1. A random number generation device comprising: means for generating a random number, wherein the random number generation means generates the random number based on an output of the measuring means. (6) The random number generator according to claim 5, wherein the desired amount is a time interval, and the measuring means is a clock counter. (7) The random number generation device according to claim 6, wherein the event having randomness is a timing of a human operation. (8) The random number generator according to claim 6, wherein the random event is an operating speed of a desired semiconductor circuit in the data processing system. (9) The random number generating device according to claim 5, wherein the random number generating means has a memory that stores random numbers, and reads out the random numbers based on the output of the measuring means.