Internet of Things encryption and decryption device

Abstract

The utility model discloses an Internet of Things encryption and decryption device, which comprises an integrated circuit board, and a key chip and a signal excitation module which are connected to the integrated circuit board, the key chip comprises a connection terminal, a key acquisition module, a key generation module and a key distribution module, and the signal excitation module is used for inputting excitation to the integrated circuit board. The integrated circuit board outputs a feedback signal under excitation, the connection terminal is used for receiving the feedback signal, the key acquisition module is used for acquiring PUF data according to the feedback signal, and the key generation module is used for generating a key according to the PUF data. According to the scheme, the feedback data, namely the PUF data, with natural randomness and unpredictable fluctuation is obtained by exciting the integrated circuit board to a certain extent, and due to the fact that the PUF data is completely random, the PUF data is applied to the fields of electronic cards, the Internet of Things and the like, and information safety is effectively guaranteed. Through the design of the wiring terminals, feedback signals of the circuit board can be conveniently obtained, and the circuit board has very good practicability.

Description

Technical Field

[0001] The utility model relates to the technical field of data communication security, in particular to an Internet of Things encryption and decryption device. Background Art

[0002] In daily life, with the rapid development of smart homes, smart campuses, and smart cities, IoT hardware such as access cards, campus cards, and electronic cards are widely used. Due to the underlying design technology problems, IoT hardware such as access cards, campus cards, and electronic cards can be easily copied, and encryption cards can also be easily cracked, or easily attacked, monitored, forged, and tampered with. These problems seriously threaten our information security and personal safety, mainly because the key is cracked and copied. The current solution to the above problems is generally to encrypt the data before transmission. However, on the one hand, these encryption applications are inherently unreliable, and are generally commonly used encryption algorithms that are easily cracked; on the other hand, the current encryption algorithms with higher security usually have sufficient key length and complexity, which greatly reduces the decryption speed and improves the hardware algorithm computing power; on the other hand, these encryption applications are not mandatory and are not conducive to unified management. In summary, the current encryption application solutions cannot meet the needs of high-standard confidentiality or confidential scenarios. Utility Model Content

[0003] A brief overview of embodiments of the present invention is given below in order to provide a basic understanding of certain aspects of the present invention. It should be understood that the following overview is not an exhaustive overview of the present invention. It is not intended to identify key or important parts of the present invention, nor is it intended to limit the scope of the present invention. Its purpose is merely to present certain concepts in a simplified form as a prelude to a more detailed description discussed later.

[0004] To solve the above technical problems, the utility model provides an Internet of Things encryption and decryption device, which includes an integrated circuit board and a key chip and a signal excitation module connected to the integrated circuit board, the key chip includes a connection terminal, a key acquisition module, a key generation module and a key distribution module, wherein the signal excitation module is used to input excitation to the integrated circuit board, the integrated circuit board outputs a feedback signal under the excitation, the connection terminal is used to receive the feedback signal, the key acquisition module is used to obtain PUF data (PUF, Physical Unclonable Function) according to the feedback signal, the key generation module is used to generate a key according to the PUF data, and the key distribution module is used to output the key generated by the key generation module.

[0005] As an implementation scheme, the connection terminal has two interfaces, which are respectively connected to different pin positions of the integrated circuit board to receive the feedback signal generated by the integrated circuit board under stimulation.

[0006] As an embodiment, the connecting terminal includes a connecting wire extending out of the key chip and a terminal connected to the connecting wire, and the terminal has at least two interfaces, which are respectively connected to different pin positions of the integrated circuit board to receive feedback signals generated by the integrated circuit board under stimulation.

[0007] As an implementation scheme, the connection terminal includes a plurality of connection wires extending out of the key chip and a plurality of terminals respectively connected to the plurality of connection wires, and the plurality of terminals are respectively connected to different pin positions of the integrated circuit board to receive feedback signals generated by the integrated circuit board under excitation. Furthermore, the connection terminal includes two connection wires extending out of the key chip and two terminals respectively connected to the two connection wires, which are respectively connected to the power supply end and the load end of the integrated circuit board to receive the oscillation frequency generated by the integrated circuit board under excitation.

[0008] Furthermore, the Internet of Things encryption and decryption device also includes a decryption chip arranged corresponding to the key chip, the decryption chip includes a key receiving module, a key decryption module and a key output module connected in sequence, the key receiving module is used to receive the key output by the key chip, the key decryption module decrypts the key into PUF data according to a preset algorithm, and the key output module is used to output the PUF data.

[0009] Through the above scheme, the present application obtains feedback data with natural randomness and unpredictable fluctuations, namely PUF data, by giving certain incentives to the integrated circuit board. Since PUF data is completely random, it is applied to fields such as electronic cards and the Internet of Things, effectively ensuring information security. In addition, the present invention can conveniently obtain the feedback signal of the circuit board through the design of the wiring terminal, which has very good practicality. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] The present invention can be better understood by referring to the following description in conjunction with the accompanying drawings, wherein the same or similar reference numerals are used in all drawings to represent the same or similar components. The accompanying drawings together with the following detailed description are included in and form a part of this specification, and are used to further illustrate the preferred embodiments of the present invention and explain the principles and advantages of the present invention. In the accompanying drawings:

[0011] Figure 1 This is a principle block diagram of the encryption and decryption device of the utility model;

[0012] Figure 2This is a schematic diagram of the key chip of the encryption and decryption device in Example 1;

[0013] Figure 3 This is a schematic diagram of the key chip of the encryption and decryption device in Example 2;

[0014] Figure 4 This is a schematic diagram of the key chip of the encryption and decryption device in Example 3. DETAILED DESCRIPTION

[0015] Embodiments of the present invention will be described below with reference to the accompanying drawings. Elements and features described in one drawing or one embodiment of the present invention may be combined with elements and features shown in one or more other drawings or embodiments. It should be noted that for the purpose of clarity, the representation and description of components and processes that are not related to the present invention and are known to those of ordinary skill in the art are omitted in the drawings and descriptions.

[0016] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installation", "connection" and "connection" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0017] The mainstream hardware of the Internet of Things (IoT) is generally composed of integrated circuit boards (ICs), and most communications need to go through wireless channels with broadcast characteristics, which are vulnerable to threats such as monitoring, forgery, and tampering. At present, it is mainly achieved technically by using encryption algorithms, and security mainly depends on the security of keys. Smart hardware and IoT devices have simple structures and are vulnerable to invasive and non-invasive attacks, which can lead to the leakage of keys and cause the collapse of the entire security system. To this end, the utility model provides an IoT encryption and decryption device that uses PUF data as the basis for key generation.

[0018] For details, see Figure 1The Internet of Things encryption and decryption device of the utility model includes: an integrated circuit board, a key chip and a signal excitation module connected to the integrated circuit board, and a decryption chip arranged corresponding to the key chip. The key chip includes a connection terminal, a key acquisition module, a key generation module and a key distribution module. Among them, the signal excitation module is used to input excitation to the integrated circuit board, and the integrated circuit board outputs a feedback signal under the excitation. The connection terminal is used to receive the feedback signal. The key acquisition module is used to obtain PUF data (PUF, Physical Unclonable Function) according to the feedback signal. The key generation module is used to generate a key according to the PUF data. The key distribution module is used to output the key generated by the key generation module.

[0019] The decryption chip includes a key receiving module, a key decryption module and a key output module connected in sequence. The key receiving module is used to receive the key output by the key chip, the key decryption module decrypts the key into PUF data according to a preset algorithm, and the key output module is used to output the PUF data. The algorithm preset in the key decryption module corresponds to the encryption algorithm of the key generation module of the key chip, which can be operations such as point multiplication, point addition, point multiplication, etc., or combined with other encryption algorithms. It is a prior art and will not be described in detail here.

[0020] As a specific embodiment, for the scenario where the chips of the integrated circuit board to be tested are of the same specification, see Figure 2 The connection terminal of the key chip 1 has two interfaces 10, the interval between the two interfaces is an integral multiple of the interval between the chip pins, and the two interfaces are respectively plugged into or contacted with the corresponding pin positions of the chip of the integrated circuit board to receive the feedback signal generated by the integrated circuit board under excitation. For example, they can be respectively connected to the power supply end and the load end of the integrated circuit board to receive the oscillation frequency generated by the integrated circuit board under excitation.

[0021] like Figure 3 As shown, to facilitate testing in actual applications, in this embodiment, the connection terminal of the key chip 1 includes a connection wire 11 extending outside the key chip and a terminal 12 connected to the connection wire. The terminal has at least two interfaces, and the setting of the connection wire can facilitate testing of different chip pins.

[0022] like Figure 4 As shown, to facilitate testing in actual applications, in this embodiment, the connection terminals of the key chip 1 include multiple connection wires 11 extending out of the key chip and multiple terminals 12 respectively connected to the multiple connection wires. The terminal can be one interface or multiple interfaces.

[0023] Among them, the connecting wire is used for signal transmission, and its material includes copper, aluminum or silver, etc., and can be implemented using existing data cables.

[0024] The integrated circuit board is a PCB board used to realize the Internet of Things function, which can be a whole integrated circuit board or the integration of several integrated circuit boards. It is a prior art and will not be described in detail here. The connection terminal is used to realize electrical connection, which can be plug-in type or fence type.

[0025] In addition, the connection terminal on the key chip 1 can be fixed or detachable. In the detachable scenario, an interface is set on the key chip, and the interface can include a female head or a male head, the male head includes a pin, and the female head includes a jack corresponding to the male head pin, which is set in conjunction with the connecting line.

[0026] In addition, the number of connection lines and the number of interfaces can be set according to actual needs. In this embodiment, there are 2. In fact, more can be set as needed to meet the needs of different integrated circuits. No specific limitation is made here.

[0027] The present application has the following advantages through the above scheme: PUF is a hardware function implementation circuit that depends on chip characteristics and has uniqueness and randomness. By extracting the process parameter deviation introduced in the chip manufacturing process, the function function that uniquely corresponds to the excitation signal and the response signal is realized. By inputting the excitation, the uncontrollable random process deviation in the integrated circuit production process is used to generate a key that uniquely corresponds to the hardware. Compared with the traditional key storage method, the PUF-based key storage method has the advantages of on-demand generation, no need to save, and difficult to copy. It can provide low-cost, high-security hardware keys for various embedded devices. In addition, through the setting of the connection terminal, the feedback signal can be quickly obtained in real time, which has the advantages of timeliness and convenience.

[0028] In the above description of specific embodiments of the present invention, the features described and / or shown for one embodiment may be used in the same or similar manner in one or more other embodiments, combined with features in other embodiments, or replace features in other embodiments.

[0029] Although the utility model has been disclosed above through the description of the specific embodiments of the utility model, it should be understood that all the above embodiments and examples are exemplary rather than restrictive. Those skilled in the art can design various modifications, improvements or equivalents of the utility model within the spirit and scope of the attached claims. These modifications, improvements or equivalents should also be considered to be included in the protection scope of the utility model.

Claims

1. An Internet of Things encryption and decryption device, characterized in that: It includes an integrated circuit board and a key chip and a signal excitation module connected to the integrated circuit board, wherein the key chip includes a connecting terminal, a key acquisition module, a key generation module and a key distribution module, wherein the signal excitation module is used to input excitation to the integrated circuit board, and the integrated circuit board outputs a feedback signal under the excitation, the connecting terminal is used to receive the feedback signal, the key acquisition module is used to obtain PUF data according to the feedback signal, the key generation module is used to generate a key according to the PUF data, and the key distribution module is used to output the key generated by the key generation module.

2. The Internet of Things encryption and decryption device according to claim 1, characterized in that: The connection terminal has two interfaces, which are respectively connected to different pin positions of the integrated circuit board to receive feedback signals generated by the integrated circuit board under excitation.

3. The Internet of Things encryption and decryption device according to claim 1, characterized in that: The connecting terminal includes a connecting wire extending out of the key chip and a terminal connected to the connecting wire. The terminal has at least two interfaces, which are respectively connected to different pin positions of the integrated circuit board to receive feedback signals generated by the integrated circuit board under stimulation.

4. The Internet of Things encryption and decryption device according to claim 1, characterized in that: The connection terminals include a plurality of connection wires extending out of the key chip and a plurality of terminals respectively connected to the plurality of connection wires. The plurality of terminals are respectively connected to different pin positions of the integrated circuit board to receive feedback signals generated by the integrated circuit board under excitation.

5. The Internet of Things encryption and decryption device according to claim 4, characterized in that: The connection terminal includes two connection wires extending out of the key chip and two terminals respectively connected to the two connection wires, which are respectively connected to the power supply end and the load end of the integrated circuit board to receive the oscillation frequency generated by the integrated circuit board under excitation.

6. The Internet of Things encryption and decryption device according to claim 1, characterized in that: The Internet of Things encryption and decryption device also includes a decryption chip arranged corresponding to the key chip, the decryption chip includes a key receiving module, a key decryption module and a key output module connected in sequence, the key receiving module is used to receive the key output by the key chip, the key decryption module decrypts the key into PUF data according to a preset algorithm, and the key output module is used to output the PUF data.

Images