A link encryption machine with key self-destruction function

Abstract

This invention provides a link encryption device with a key self-destruction function to protect the security chip and automatically sense and destroy the key stored in the chip when the link encryption device is disassembled. The link encryption device includes: a chassis, a cover, a first trigger, a link encryption module, a security chip, and a battery. The first trigger is located inside the chassis, and its trigger end abuts against the cover installed at the chassis opening, maintaining an open-circuit state awaiting activation. The security chip is a volatile memory, which, along with the battery and the first trigger, forms a power supply and storage circuit in series within the chassis. The link encryption module is data-connected to the security chip.

Description

Technical Field

[0001] This utility model relates to network encryption security equipment technology, and in particular to a link encryption machine with a key self-destruction function. Background Technology

[0002] In recent years, cloud computing and big data technologies have developed rapidly, leading to the increasingly widespread application of link encryption devices, particularly in data centers and server rooms of enterprises, governments, telecom operators, and the military. When customers transmit sensitive data over the network, they can use link encryption devices to encrypt the transmitted data, effectively preventing unauthorized personnel from stealing confidential and sensitive information. The encryption key is the core security element for data encryption in these devices; if the key is lost or leaked, the security of the entire network encryption system will completely collapse. Therefore, key security is paramount, and it is essential to strictly prevent the illegal export or leakage of encryption device keys.

[0003] To address this, existing link encryption device manufacturers typically incorporate protective designs into their device chassis and store the keys in dedicated security chips. These chips effectively prevent brute-force attacks.

[0004] However, with dedicated security chip solutions, unauthorized personnel may steal the equipment, disassemble the security chip, and perform ultra-thin layer grinding and photography on a high-precision grinding machine. This could lead to the export of key data stored in the FLASH memory, causing leakage. Therefore, there is an urgent need in the field for a new protective solution to address this problem. Utility Model Content

[0005] Therefore, the main objective of this invention is to provide a link encryption device with a key self-destruction function to protect the security chip and automatically sense and destroy the key stored in the chip when the link encryption device is disassembled.

[0006] To achieve the above objectives, according to one aspect of the present invention, a link encryption device with a key self-destruction function is provided, characterized in that it includes: a chassis, a cover, a first trigger, a link encryption module, a security chip, and a battery, wherein the first trigger is distributed inside the chassis, and its trigger end abuts against the cover installed at the opening of the chassis to maintain an open-circuit state for activation; the security chip is a volatile memory, which, together with the battery and the first trigger, forms a power supply and storage circuit in series inside the chassis; and the link encryption module is data-connected to the security chip.

[0007] Preferably, the link encryption device further includes: a second trigger, which is arranged inside the chassis, and the trigger end of the second trigger extends through the chassis to the outside of the chassis and abuts against the chassis connection surface to maintain the open circuit state to be activated; the first trigger, the second trigger, the security chip, and the battery are connected in series inside the chassis to form a power supply and storage circuit.

[0008] Preferably, there are multiple second triggers arranged at the corners of the bottom plate inside the chassis.

[0009] Preferably, there are multiple second triggers, which are arranged at random positions on the bottom plate inside the chassis.

[0010] Preferably, the first trigger is located inside the chassis near the edge of the cover.

[0011] Preferably, the chassis is provided with fixed wings on both sides.

[0012] Preferably, the first trigger is a micro-trigger switch.

[0013] Preferably, the second trigger is a micro-trigger switch.

[0014] The link encryption device with key self-destruction function provided by this utility model can automatically cut off the power supply and storage circuit when the cover is opened, triggering the security key self-destruction to automatically prevent the device from being intruded upon and the key stolen. Furthermore, in the corresponding embodiment, it also supports automatically cutting off the power supply and storage circuit and triggering the security key self-destruction when the encryption device is moved, to automatically prevent the possibility of the key being illegally stolen after the device is stolen and moved. Attached Figure Description

[0015] The accompanying drawings, which form part of this application, are used to provide a further understanding of the present invention. The illustrative embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an undue limitation of the present invention. In the drawings:

[0016] Figure 1 This is a schematic diagram of the overall structure of the link encryption machine with key self-destruction function of this utility model;

[0017] Figure 2 This is a schematic diagram showing the positions of the first and second triggers inside the chassis in the link encryption machine with key self-destruction function of this utility model.

[0018] Figure 3 This is a schematic diagram of the structure of the link encryption machine with key self-destruction function after the cover is sealed.

[0019] Explanation of reference numerals in the attached figures

[0020] Chassis 1, cover 2, first trigger 3, link encryption module 4, security chip 5, battery 6, second trigger 7, network interface 8, fixed wing 9, wire 10. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of the embodiments of this utility model clearer, the technical solutions of the embodiments of this utility model will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this utility model, and not all embodiments. The components of the embodiments of this utility model described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0022] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort are within the scope of protection of the present invention.

[0023] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0024] In the description of this utility model, it should be noted that the terms "center," "upper," "lower," "left," "right," "vertical," "horizontal," "inner," and "outer," etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, or the orientation or positional relationship commonly used when the utility model product is in use. They are used only for the convenience of describing this utility model and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on this utility model. Furthermore, the terms "first," "second," and "third," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance. The terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion.

[0025] Furthermore, terms such as "horizontal," "vertical," and "sag" do not imply that components must be absolutely horizontal or suspended, but rather that they can be slightly tilted. For example, "horizontal" simply means that its direction is more horizontal relative to "vertical," and does not mean that the structure must be completely horizontal, but can be slightly tilted.

[0026] In the description of this utility model, it should also be noted that, unless otherwise explicitly specified and limited, the terms "set up," "lay out," "install," "connect," and "link" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this utility model according to the specific circumstances and in conjunction with existing technology. Furthermore, without conflict, the embodiments and features in the embodiments of this utility model can be combined with each other. One or more of the components shown in the figures may be necessary or not, and the relative positional relationships between the components shown in the figures can be adjusted according to actual needs.

[0027] To protect the security chip 5 and automatically detect and destroy the key stored in the chip when the link encryption device is disassembled. Figures 1 to 3 As shown, this utility model provides a link encryption device with a key self-destruction function. An example includes: a chassis 1, a cover 2, a first trigger 3, a link encryption module 4, a security chip 5, and a battery 6. The first trigger 3 is located inside the chassis 1, with its trigger end abutting against the cover 2 installed at the opening of the chassis 1, maintaining an open-circuit state awaiting activation. The security chip 5 is a volatile memory (RAM) storing keys for link encryption. The link encryption module 4 is connected to a network interface 8 and data-connected to the security chip 5. The security chip 5, battery 6, and first trigger 3 are connected in series within the chassis 1 to form a power supply and storage circuit, permanently storing the key data stored in the security chip 5 until the first trigger 3 is triggered, cutting off the power supply and storage circuit, thus causing the security chip 5 to lose power and lose the stored key, resulting in self-destruction.

[0028] Specifically, such as Figure 1 As shown, in order to facilitate production assembly and create a deceptive disassembly option, the chassis 1 has openings on both sides, and the cover 2 covers the openings on both sides of the chassis 1. At the same time, in order to maximize the trigger sensitivity of the first trigger 3 so that the key self-destruction is triggered immediately when any cover 2 is removed, this example preferably sets at least four first triggers 3, which are distributed inside the chassis 1 near the edge of the cover 2, located on the left and right sides of the front and rear covers, and the four first triggers 3 are connected in series and serve as part of the power supply and storage circuit.

[0029] With this setup, when any cover 2 is opened, the nearby first trigger 3 can be activated and released, causing the power supply storage circuit to open, thus de-energizing the security chip 5 and immediately destroying the key stored in the security chip 5. This destruction process is irreversible; the activation of any first trigger 3 can trigger the destruction procedure to ensure that the key is destroyed within the first moment after the cover 2 is removed.

[0030] Furthermore, in an optional implementation, to further prevent the link encryption device from being stolen and transferred as a whole from the relevant device or connection location in order to steal the key within the chip, such as... Figures 1 to 2 As shown in this example, the link encryption machine further includes: a second trigger 7, which is arranged inside the chassis 1, and the trigger end of the second trigger 7 extends through the chassis 1 to the outside of the chassis 1, abutting against the connection surface of the chassis 1, maintaining the open circuit state to be activated, and the first trigger 3, the second trigger 7, the security chip 5, and the battery 6 are connected in series in the chassis 1 to form a power supply and storage circuit.

[0031] Furthermore, to maximize the trigger sensitivity of the second trigger 7 and ensure immediate key self-destruction upon the theft or relocation of the chassis 1, this example preferably includes at least four second triggers 7, distributed within the chassis 1 near the four corners of the chassis 1's base plate. The four first triggers 3 are connected in series and form part of the power supply and storage circuit. Alternatively, in an optional embodiment, the second triggers 7 can be randomly arranged at multiple locations on the chassis 1's base plate to prevent circumvention of their activation.

[0032] As part of the security measures, the link encryption device is usually installed in a designated location that cannot be moved. For example, it is fixed to the network equipment by setting fixed wings 9 on both sides of the chassis 1 and fixing it with bolts. Therefore, under normal working conditions, the chassis 1 will be installed on a flat connection surface, and the front and rear covers 2 are both fixed to the chassis 1. At this time, the security chip 5 can obtain a continuous power input through the closed power supply storage circuit, and the link encryption module 4 can normally access the security chip 5 to obtain the key. At this time, even if the entire link encryption device is turned off, the key storage can be maintained because the battery 6 always provides power to the security chip 5.

[0033] When chassis 1 is illegally stolen or moved, at least one of the second triggers 7 at the bottom of chassis 1 will be released due to the increased contact distance. At this time, the series wire 10 that supplies power to security chip 5 will form an open circuit, automatically cutting off the power supply storage circuit, so that all data in the RAM of security chip 5 will disappear immediately, thereby realizing the automatic destruction of the key.

[0034] Furthermore, the first trigger 3 and the second trigger 7 described in the above example can be exemplified as micro-trigger switches, but this example is not limited. Those skilled in the art can also use other existing trigger sensors to replace them. Therefore, other embodiments that do not exceed the scope of the present invention are all within the scope of this example.

[0035] In summary, the link encryption device with key self-destruction function provided by this utility model can automatically cut off the power supply and storage circuit and trigger the security key self-destruction when the cover 2 is opened, through the first trigger 3, thus automatically preventing the device from being intruded upon and the key stolen. Simultaneously, when the link encryption device is moved, the second trigger 7 will also automatically cut off the power supply and storage circuit and trigger the security key self-destruction. Therefore, whether the link encryption device is disassembled or moved, it can automatically initiate a defensive destruction procedure to resist the possibility of illegal key theft.

[0036] The preferred embodiments of this utility model disclosed above are merely illustrative of the present utility model. These preferred embodiments do not exhaustively describe all details, nor do they limit the utility model to the specific implementations described. Clearly, many modifications and variations can be made based on the content of this specification. This specification selects and specifically describes these embodiments to better explain the principles and practical applications of this utility model, thereby enabling those skilled in the art to better understand and utilize it. This utility model is limited only by the claims and their full scope and equivalents. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this utility model should be included within the protection scope of this utility model.

[0037] Furthermore, various different implementation methods of this utility model can be arbitrarily combined, as long as they do not violate the spirit of this utility model, they should also be regarded as the content disclosed by this utility model.

Claims

1. A link encryption machine with key self-destruction function, characterized in that... include: The system comprises a chassis, a cover, a first trigger, a link encryption module, a security chip, and a battery. The first trigger is located inside the chassis, with its trigger end abutting against the cover installed at the chassis opening to maintain an open-circuit state awaiting activation. The security chip is a volatile memory, which, along with the battery and the first trigger, forms a power supply and storage circuit in series within the chassis. The link encryption module is connected to the security chip for data transmission.

2. The link encryption machine according to claim 1, characterized in that, Also includes: The second trigger is arranged inside the chassis, and the trigger end of the second trigger extends through the chassis to the outside of the chassis, abutting against the chassis connection surface to maintain the open circuit state to be activated. The first trigger, the second trigger, the security chip, and the battery are connected in series inside the chassis to form a power supply and storage circuit.

3. The link encryption machine according to claim 2, characterized in that, The second trigger is multiple and is arranged at the corner of the bottom plate inside the chassis.

4. The link encryption machine according to claim 2, characterized in that, The second trigger is multiple and arranged at random positions on the bottom plate inside the chassis.

5. The link encryption machine according to any one of claims 1 to 4, characterized in that, The first trigger is located inside the chassis near the edge of the cover.

6. The link encryption machine according to any one of claims 1 to 4, characterized in that, The chassis has fixed wings on both sides.

7. The link encryption machine according to claim 1, characterized in that, The first trigger is a micro-trigger switch.

8. The link encryption machine according to claim 2, characterized in that, The second trigger is a micro-trigger switch.

Images