Random number generation device and control method of random number generation device

Abstract

To provide a technique for generating a physical random number capable of ensuring occurrence of a random number stably for a long time even if a situation, such as operation failure and malfunction, is encountered.SOLUTION: A random number generation device (10A) includes multiple random number output boards (20A, 20B) generating a physical phenomenon random number string and includes a main board (10B) such that the physical phenomenon random number string outputted by the random number output boards (20A, 20B) can be used as a random number in an external device (40). The main board (10B) includes: a data processing portion (16) mixing or maximizing a physical phenomenon random number outputted by the random number output boards (20A, 20B) as random number data; a distillation treatment device (17) executing distillation via an extractor so as to improve safety of a physical phenomenon random number and use it as an output random number; and an external interface (19) converting a verified output random number into a converted compressed random number that can be used by the external device (40).SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to a technique for a random number generating device that generates random numbers using a physical random number source. [Background technology]

[0002] In the field of information security, technology that utilizes random numbers to protect digital data is widely used. Currently, the most widely used is a "pseudo-random number generator" that uses an algorithm to generate random numbers. However, pseudo-random number generators use an artificially created algorithm to generate random numbers. This means that there is a risk (vulnerability) that over time the seed (the seed put into the algorithm) can be guessed or the algorithm itself can be deciphered.

[0003] On the other hand, at the opposite end of the spectrum to pseudo-random number generators that use algorithms to generate random numbers is a “physical random number generator 20” that uses physical phenomena, as shown in the block diagram of FIG. It is equipped with an entropy source 22 that generates physical random numbers by obtaining electrical energy supplied from a power source 21. This entropy source mainly includes a type equipped with an entropy source that uses thermal noise, a type equipped with an entropy source that uses quantum random numbers, etc. In an environment where security must be ensured over a long period of time, a pseudorandom number generator that retains regularity is unsuitable, and it is preferable to employ a physical random number generator.

[0004] The physical phenomenon random number sequence, such as thermal noise or quantum noise, generated by the entropy source 22 is verified by a first random number verification device 23. If the first random number verification device 23 determines that the sequence is "OK," the physical phenomenon random number sequence is output to an FPGA 24, which is a programmable logic device. If the result is "NG", the output to the FPGA 24 is stopped and a notification is issued that an abnormality has occurred.

[0005] The FPGA 24 is equipped with a distillation treatment device 25 . The "distillation process" performed by the distillation processing device 25 is a process for improving the quality of random numbers (physical phenomenon random numbers) generated by the entropy source 22, and is performed by a circuit that performs matrix operations called an extractor. Since the signal output by the entropy source 22 may be imperfect, a process is performed to compensate for the deterioration caused by the imperfection and to improve the quality.

[0006] The signal (output random number) output from the programmable logic device is applied to a second random number verification device 26. If the second random number verification device 26 judges the signal to be "OK", the converted random number is output to an external device 40 via an output interface 27. If the result is "NG", the output to the output interface 27 is stopped, and a notice is sent to the effect that an abnormality has occurred.

[0007] The physical random number generator described above can generate a sequence of random numbers that is close to ideal random numbers (true random numbers). Therefore, the random numbers generated by a physical random number generator have higher security performance than a pseudorandom number generator. However, it has some drawbacks, such as being expensive due to poor mass production and limitations on reducing the physical size of the device as a whole. For these reasons, pseudorandom number generators are currently more widely used.

[0008] Now, if the random seed is insufficient, the security of the encryption system may be lost or the sampling result may be inaccurate. Patent Document 1 discloses a random number generator that ensures the accuracy of the sampling result without reducing the security.

[0009] It is known that a physical random number generator equipped with an entropy source consumes more power than a pseudorandom number generator. Patent Document 2 discloses a random number generator capable of generating an efficient Bernoulli sequence with less power consumption than conventional devices. [Prior art documents] [Patent documents]

[0010] [Patent Document 1] Patent No. 7006887 [Patent Document 2] Special Publication No. 2016-513313 DISCLOSURE OF THEINVENTION [Problem to be solved by the invention]

[0011] Figure 2(a) shows an overview of the conventional technology and its problems. In other words, a physical random number generator requires a complicated process of securing the power supply required for the entropy source, generating a physical phenomenon in the entropy source, and extracting the physical phenomenon to generate random numbers. Therefore, the possibility of malfunction or failure is higher than that of a pseudorandom number generator. On the other hand, environments requiring physical random number generators often require long-term continuous use, so it is desirable to ensure stable random number generation even in the event of malfunction or breakdown.

[0012] Figure 2(b) shows examples of different types of entropy sources. Here, domestically produced entropy sources that utilize physical phenomena are not very versatile. In addition, coupled with the decline in demand, there are concerns about the continued supply. On the other hand, when it comes to overseas products, it is necessary to take into consideration supply-side risks and reliability (randomness) risks from the perspective of them being strategic products in terms of information security.

[0013] The problem to be solved by the present invention is to provide a physical random number generating device and a control method that can ensure stable random number generation for a long period of time even when the device is subject to operational malfunction or failure. [Means for solving the problem]

[0014] In order to solve the above-mentioned problems, the present invention comprises multiple sub-substrates (20A, 20B, 20C) equipped with entropy sources that generate physical phenomenon random number sequences, as well as a main substrate (10B) that merges the physical phenomenon random number sequences generated by the multiple sub-substrates (20A, 20B, 20C) and integrates the merged random numbers (see Figure 3).

[0015] It is now possible to install multiple entropy sources (multiple), and multiple types of entropy sources can be installed simultaneously (mixed). This allows for diversification of entropy source procurement, improving the safety of random numbers and speeding up random number generation.

[0016] (First Invention) The first invention includes a plurality of random number output substrates (20A, 20B) for generating a physical phenomenon random number sequence based on a physical phenomenon, The present invention relates to a random number generator (10A) equipped with a main board (10B) that enables the physical phenomenon random number sequence output by the multiple random number output boards (20A, 20B) to be used as a physical random number in an external device (40). The random number output board (20A, 20B) is An entropy source (12A, 12B) that generates a physical phenomenon random number sequence based on a physical phenomenon; a power regulator (11A, 11B) for adjusting the electrical energy obtained from the power source (11) so that the entropy source (12A, 12B) can output a physical phenomenon random number sequence; an I / F conversion unit (13A, 13B) that outputs the physical phenomenon random number sequence output by the entropy source (12A) as a converted signal so that it can be used on the main board (10B); Equipped with. The main board (10B) is a first random number verification device (15A, 15B) for verifying whether or not the physical phenomenon random number sequence as the converted signal output from the I / F conversion unit (13A, 13B) can be used as a random number; a data processing unit (16) for mixing or maximizing the physical phenomenon random number sequence as the converted signal when the first random number verification device (15A, 15B) verifies that the converted signal can be used as a random number; A distillation processing device (17) for performing a distillation process in an extractor on the physical phenomenon random numbers mixed or maxed by the data processing unit (16) to improve the safety as random numbers for use, thereby generating output random numbers; a second random number verification device (18) for verifying whether the output random number can be used as a random number in the external device (40); an external interface (19) for converting the verified output random numbers verified by the second random number verification device (18) into converted output random numbers that can be used in the external device (40); (See Figures 4, 5, and 6.)

[0017] (Terminology) With regard to the "random number output boards (20A, 20B)," "multiple" means two (see FIG. 4) or more (see FIG. 13). The "I / F conversion section" in the random number output boards (20A, 20B, 20C) serving as sub-boards is a section that converts electrical characteristics, timing, data format, etc. so that they can be used on the main board (10B). The "I / F conversion unit" in the main board (10B) receives a signal that identifies which of the multiple random number output boards (20A, 20B, 20C) it is connected to. In addition, it executes initialization and output control of the entropy source in the random number output boards (20A, 20B) via the "I / F conversion unit" in the random number output boards (20A, 20B, 20C) (see Figure 4).

[0018] An "extractor" is a device (circuit) that performs post-processing to improve the quality of the random number sequence generated by the entropy source, and "distillation processing" is the process of improving the randomness (randomness) of the output random number by reducing the number of bits of the output random number itself. A specific example of the "distillation process" involves extracting some bits from a physical random number and multiplying them by an extractor matrix in which 0s or 1s are arranged in a matrix to generate an output random number. If the Hash-Based DRBG algorithm is used for the signals that the random number output boards (20A, 20B) output to the main board (10B), the process ensures that there is a perfect 50% probability for each output signal.

[0019] "Mixing" refers to increasing security by performing an exclusive OR on multiple converted signals output from multiple random number output boards (20A, 20B) to the main board (10B). This is expected to provide security similar to that of a one-time pad, a cryptographic method that uses a random number sequence only once. For example, even if one of the random number output boards does not function for some reason, as long as the other has randomness, the randomness will not be compromised.

[0020] "Maximization" means maximizing the generation speed of multiple converted signals output from multiple random number output boards (20A, 20B) to the main board (10B). For example, the generation speed is maximized by time division multiplexing.

[0021] "Mixing or maxing" refers to selectively adopting mixing or maxing. Mixing and maxing are never performed at the same time. The selection between mixing and maxing is generally an automatic switching process (see FIG. 12). For example, if all of the multiple conversion signals output from the multiple random number output boards (20A, 20B) to the main board (10B) are normal, it is more beneficial to maximize the generation speed, so maxing is selected.

[0022] The ability to "mix or max" provides the following two advantages. First, the speed at which random numbers are generated can be increased. Second, even if one physical random number chip malfunctions due to a problem (e.g. poor electrical contact), random numbers can still be generated by the other chip. This contributes to increasing the reliability of the physical random number generator according to the present invention.

[0023] (action) The power regulator (11A, 11B) regulates the electric energy obtained from the power supply (11). The entropy source (12A, 12B) obtains the electric energy regulated by the power regulator (11A, 11B) and generates a physical phenomenon random number sequence based on a physical phenomenon. The I / F conversion unit (13A, 13B) outputs the physical phenomenon random number sequence output by the entropy source (12A) as a conversion signal so that it can be used on the main board (10B). A first random number verification device (15A, 15B) verifies whether or not the physical phenomenon random number sequence as the converted signal output from the I / F conversion unit (13A, 13B) can be used as a random number. If the first random number testing device (15A, 15B) tests the converted signal to be usable as a random number, the data processing unit (16) mixes or maxes the physical phenomenon random number sequence as the converted signal to be used as random number data. The distillation processing device (17) performs a distillation process on the physical phenomenon random numbers mixed or maxed by the data processing device (16) via an extractor. This distillation process turns the mixed or maxed physical phenomenon random numbers into output random numbers with improved safety. A second random number verification device (18) verifies whether or not the output random number can be used as a random number in an external device (40). The external interface (19) converts the verified output random numbers verified by the second random number verification device (18) into physical random numbers (converted output random numbers) that can be used in an external device (40).

[0024] (Variation 1 of the first invention) The main board (10B) is provided with a sub-board I / F conversion unit (14A, 14B) that converts a converted signal output by an I / F conversion unit (13A, 13B) in the random number output board (20A, 20B) so that the converted signal can be used in the main board (10B); The I / F conversion units (13A, 13B) in the random number output boards (20A, 20B) standardize the signals to be output to the sub-board I / F conversion units (14A, 14B).

[0025] (action) The signals output to the sub-board I / F conversion units (14A, 14B) are standardized by the I / F conversion units (13A, 13B) in the random number output boards (20A, 20B). Therefore, even if the types of entropy sources (12A, 12B) used in the random number output boards (20A, 20B) are different, they can be used in the main board (10B). As a result, a highly versatile physical random number generator can be provided.

[0026] (Variation 2 of the first invention) The first aspect of the invention may be formed as follows. That is, a peripheral frame (30) is provided on the outer periphery of the surface of the main board (10B) on which the first random number verification device (15A, 15B) is provided, the peripheral frame (30) being erected in a direction covering the first random number verification device (15A, 15B), the peripheral frame (30) has a height dimension sufficient to cover the random number output boards (20A, 20B) connected to the first random number verification device (15A, 15B); The random number output boards (20A, 20B) are sealed by providing an outer cover material (33) that covers the surface of the peripheral frame (30) facing the main board (10B) (see Figures 19 and 20).

[0027] (action) The surface of the main board (10B) on which the first random number verification devices (15A, 15B) are mounted is sealed by the peripheral frame (30) and the outer cover material (33). Therefore, the random number output boards (20A, 20B) are not exposed and are surrounded by the back surface of the main board (10B), the peripheral surface of the peripheral frame (30), and the top surface of the outer cover material, protecting the entropy sources (12A, 12B).

[0028] (Second Invention) The second invention relates to a random number generator (10A) having a plurality of slots (20M) into which random number output boards (20A, 20B) can be attached, instead of the random number output boards (20A, 20B) in the random number generator (10A) of the first invention. That is, the device is provided with a plurality of slots (20M) into which random number output boards (20A, 20B) that generate a physical phenomenon random number sequence based on a physical phenomenon can be attached, The present invention relates to a random number generator (10A) equipped with a main board (10B) that enables a conversion signal for generating random numbers output by a random number output board (20A, 20B) when the random number output board (20A, 20B) is attached to the slot (20M) to be used as a random number in an external device (40). The random number output board (20A, 20B) includes an entropy source (12A, 12B) that generates a physical phenomenon random number sequence based on a physical phenomenon; a power regulator (11A, 11B) for adjusting the electrical energy obtained from the power source (11) so that the entropy source (12A, 12B) can output a physical phenomenon random number sequence; an I / F conversion unit (13A, 13B) that outputs the physical phenomenon random number sequence output by the entropy source (12A) as a converted signal so that it can be used on the main board (10B); Equipped with. The main board (10B) includes: a first random number verification device (15A, 15B) for verifying whether or not the physical phenomenon random number as the converted signal output from the I / F conversion unit (13A, 13B) can be used as a random number; a data processing unit (16) for mixing or maximizing the physical phenomenon random number as the converted signal when the first random number verification device (15A, 15B) verifies that the converted signal can be used as a random number; a distillation processing device (17) for performing a distillation process via an extractor on the physical phenomenon random numbers mixed or maxed by the data processing device (16) to improve the safety of the random numbers as random numbers for use, thereby generating output random numbers; a second random number verification device (18) for verifying whether the output random number can be used as a random number in an external device (40); an external interface (19) for converting the output random number verified by the second random number verification device (18) into a converted output random number that can be used in the external device (40); (See FIG. 9.)

[0029] (action) When the random number output boards (20A, 20B) are inserted into the slots (20M), the random number generator (10A) operates in the same manner as the random number generator (10A) of the first invention. If any of the random number output boards (20A, 20B) stops functioning, the non-functioning random number output board (20A, 20B) can be removed and replaced to return it to normal use.

[0030] (Variation 1 of the second invention) The main board (10B) is provided with a sub-board I / F conversion unit (14A, 14B) that converts a converted signal output by an I / F conversion unit (13A, 13B) in the random number output board (20A, 20B) so that the converted signal can be used in the main board (10B); The I / F conversion units (13A, 13B) in the random number output boards (20A, 20B) mounted in the slots (20M) standardize the output to the sub-board I / F conversion units (14A, 14B).

[0031] (action) Random number output boards (20A, 20B) mounted in a plurality of slots (20M) can be mixed with different types of random number output boards.

[0032] (Variation 2 of the second invention) The second invention may also be formed as follows, similarly to the first invention. That is, a peripheral frame (30) is provided on the outer periphery of the surface of the main board (10B) on which the first random number verification device (15A, 15B) is provided, the peripheral frame (30) being erected in a direction covering the first random number verification device (15A, 15B), The peripheral frame (30) has a height dimension sufficient to cover the random number output boards (20A, 20B) connected to the random number verification devices (15A, 15B), The random number output boards (20A, 20B) are sealed by providing an outer cover material (33) that covers the surface of the peripheral frame (30) facing the main board (10B) (see Figures 16 and 17).

[0033] (Third Invention) The third invention includes a plurality of random number output substrates (20A, 20B) that generate a physical phenomenon random number sequence based on a physical phenomenon, The present invention relates to a method for controlling a random number generator (10A) equipped with a main board (10B) that enables the physical phenomenon random number sequence output by the multiple random number output boards (20A, 20B) to be used as a random number in an external device (40). The random number output board (20A, 20B) is An entropy source (12A, 12B) that generates a physical phenomenon random number sequence based on a physical phenomenon; a power regulator (11A, 11B) for adjusting the electrical energy obtained from the power source (11) so that the entropy source (12A, 12B) can output a physical phenomenon random number sequence; and an I / F conversion unit (13A, 13B) that outputs the physical phenomenon random number sequence output by the entropy source (12A) as a converted signal so that it can be used on the main board (10B). The main board (10B) is a first random number verification device (15A, 15B) for verifying whether or not the physical phenomenon random number sequence as the converted signal output from the I / F conversion unit (13A, 13B) can be used as a random number; a data processing unit (16) for mixing or maximizing the physical phenomenon random number sequence as the converted signal when the first random number verification device (15A, 15B) verifies that the converted signal can be used as a random number; a distillation processing device (17) for performing a distillation process via an extractor on the physical phenomenon random numbers mixed or maxed by the data processing device (16) to improve the safety of the random numbers as random numbers for use, thereby generating output random numbers; a second random number verification device (18) for verifying whether the output random number can be used as a random number in the external device (40); and an external interface (19) for converting the verified output random numbers verified by the second random number verification device (18) into converted output random numbers that can be used in the external device (40). The method of controlling the random number generator (10A) is as follows: When the first random number verification device (15A, 15B) verifies that the converted signal for the I / F conversion unit (13A, 13B) in any of the random number output boards (20A, 20B) is a normal output, the data processing unit (16) selects a maxing process, When the first random number verification device (15A, 15B) verifies that any of the outputs is abnormal, the data processing unit (16) selects mixing processing.

[0034] (Variation of the third invention) In the third aspect of the present invention, the following may be done. In other words, in the random number verification device, if the output of a conversion signal to the I / F conversion unit by any of the random number output boards is delayed within a predetermined time, the data processing unit may select maxing processing. Effect of the Invention

[0035] According to the first invention, it is possible to provide a physical random number generator that can ensure stable random number generation for a long period of time even if it is subject to operational malfunction or failure. According to the second invention, it is possible to provide a physical random number generator in which a malfunctioning or broken random number output board can be easily replaced. According to the third invention, it is possible to provide a method for controlling a physical random number generator that can ensure stable random number generation for a long period of time even if the device is subject to operational malfunction or failure. [Brief description of the drawings]

[0036] [Figure 1] FIG. 1 is a block diagram showing a basic structure of a conventional physical random number generator. [Diagram 2] (a) is an overview of the conventional technology and its problems, and (b) is a comparison table showing the types, manufacturers, etc. of entropy sources and their performance. [Diagram 3] FIG. 1 is a block diagram showing an outline of the present invention. [Figure 4] FIG. 1 is a block diagram showing a physical random number generator (basic form) according to the present application. [Diagram 5] FIG. 1 is a block diagram illustrating a physical random number generator with detailed internal details of the entropy source. [Figure 6] FIG. 1 is a block diagram showing a physical random number generator (variation 1) according to the present application. [Figure 7] FIG. 1 is a block diagram showing a physical random number generator (variation 2) according to the present application. [Figure 8] The following shows examples of maxing output by the data processing unit: (a) shows automatic switching, and (b) shows an increase in the amount of data. [Figure 9] 1 shows examples of mixed output by the data processing unit, where (a) shows a case where one of the output boards does not function and (b) shows a case where one of the outputs is delayed. [Figure 10] 13 are examples of outputs from the data processing unit, where (a) shows mixing when one of the output boards does not function, and (b) shows maxing when one of the output boards is delayed. [Figure 11] 1 is a flowchart showing a process from random number generation to output. [Figure 12] A block diagram showing a physical random number generator, showing that it has a slot in which the random number output board can be replaced. [Figure 13] FIG. 1 is a block diagram showing an embodiment of a physical random number generator according to the present application, the embodiment including three physical random number output boards. [Figure 14] This is a conceptual diagram to show that a physical random number generator equipped with three physical random number output boards can function even if the boards are from different vendors or are mixed. (a) shows an example of a multi-vendor entropy source, and (b) shows an example of a mixed-vendor entropy source. [Figure 15] 1 is a block diagram showing a random number generating device according to the present application, in which only the entropy source in the random number output board can be replaced. [Figure 16] FIG. 2 is an assembled perspective view showing the main components of the physical random number generator according to the present application. [Figure 17] FIG. 1 is a perspective view showing a physical random number generator according to the present application in an assembled state. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0037] Hereinafter, the present invention will be described based on the embodiments. The drawings used in this description are Fig. 3 to Fig. 17. Fig. 1 and Fig. 2 will be referred to as necessary.

[0038] (Figure 3) FIG. 3 shows the structure and function as follows. That is, physical phenomenon random numbers are generated from entropy sources A, B, and C on the three sub-boards, and are sent to the main board in a converted signal state via I / F conversion units A, B, and C (omitted from this diagram). They are sent to the data processing unit in a random number data state via the I / F conversion unit (omitted from this diagram) of the main board, where they are mixed or maxed, become output random numbers through a distillation process, and are output as converted output random numbers to an external device via an external interface (not shown in the diagram, etc.) (shown in Figure 4, etc.).

[0039] There are multiple random number output boards (sub-boards 20A, 20B, 20C) connected to the main board ("10B" in Figure 4), and they are multi- and mixed so that they can function with multiple types of entropy sources.

[0040] By using multiple or mixed sources, it becomes possible to solve the problem of difficulty in obtaining entropy sources and absorb ELC, etc. Also, by installing multiple entropy sources, it is possible to improve security by using exclusive OR, and it is also possible to increase speed by multiplexing. These points will be discussed later.

[0041] (Figure 4) FIG. 4 shows a physical random number generator according to an embodiment of the present invention. Shown here is a random number generator 10A that generates random numbers based on an entropy source, a power source 11 that provides electrical energy to the random number generator 10A, and an external device 40 that uses the random numbers generated by the random number generator 10A.

[0042] The random number generator 10A is made up of a main board 10B and two random number output boards 20A and 20B connected to the main board 10B. The random number output boards 20A and 20B are formed to be detachable from the random number generator 10A (described in detail in FIG. 15).

[0043] The random number output board 20A is equipped with an entropy source 12A (e.g., random number generation based on thermal noise), a power supply regulator 11A that adjusts the electrical energy supplied from the power supply 11 so that it can be used by the entropy source 12A to provide electrical energy to the entropy source 12A, and a main board I / F conversion unit 13A that converts the electrical energy into a standard signal required by the main board 10B. How the physical phenomenon random number sequence generated by the entropy source 12A is processed will be described in detail with reference to FIG.

[0044] The random number output board 20B has the same configuration as the random number output board 20A, and includes an entropy source 12B, a power regulator 11B, and a main board I / F conversion unit 13B. The power regulator 11B is adapted to receive electrical energy directly from the power source 11, and the random number output boards 20A and 20B are independent of each other.

[0045] The random number output boards 20A and 20B and the main board 10B are designed on the assumption that the entropy source 12B will function in a manner different from that of the entropy source 12A, for example by performing random number generation based on quantum noise.

[0046] The main board 10B is equipped with sub-board I / F units 14A, 14B that receive standard signals from the main board I / F conversion units 13A, 13B of the random number output boards 20A, 20B, a first random number verification device 15A, 15B that verifies the standard signals received by the sub-board I / F units 14A, 14B, a data processing unit 16 that processes the standard signals after verification, an extractor 17 that improves the security of data processed by the data processing unit 16, a second random number verification device 18 that verifies the data processed by the extractor 17, and an external interface 19 that adjusts the verified data so that it can be used in an external device 40.

[0047] The data processing unit 16 is a device (circuit) that mixes or maxes the physical phenomenon random number sequence as the converted signal as data for random numbers when the converted signal can be verified and used as a random number. Mixing and maxing will be described in detail with reference to Figs. 5 to 7. The data processing unit 16 shown in this embodiment automatically selects between mixing and maxing.

[0048] The distillation processing device (extractor) 17 is a device (circuit) that executes the distillation process. The distillation process is a post-processing to improve the quality of the random number sequence generated by the entropy source. The signals output from the random number output boards 20A and 20B to the main board 10B may be imperfect, so a process is executed to compensate for the deterioration caused by the imperfection and to improve the quality.

[0049] (Figure 5) FIG. 5 is a block diagram showing the order in which a physical phenomenon random number sequence generated by an entropy source is processed before being used by an external device, together with the device, and details the entropy source 12B.

[0050] In the entropy source 12B, a laser light generating device (abbreviated as "laser" in the figure) irradiates a laser light to a beam splitter, and extracts quantum noise as a physical random number sequence via an optical balanced receiver. The extracted quantum noise is converted into a converted signal usable in the main board 10B via an I / F conversion unit 13B. The converted signal is sent to the data processing unit 16 as a verified converted signal via an I / F conversion unit 14B and a first random number verification device 15B on the main board 10B side.

[0051] Thermal noise is extracted from the entropy source 12A and converted into a converted signal usable by the main board 10B via the I / F conversion unit 13A. The converted signal is sent to the data processing unit 16 as a verified converted signal via the I / F conversion unit 14A and the first random number verification device 15A on the main board 10B side.

[0052] The data processing unit 16, which has received the two verified conversion signals, creates random number data by performing a mixing process or a maxing process as described in detail with reference to Figures 8 to 10. The created random number data passes through a distillation processing device 17 to become output random numbers, which are verified by a second random number verification device 18. The verified output random numbers are then output to an external device 40 via an external interface 19 as converted output random numbers.

[0053] (Figure 6) FIG. 6 shows a first variation of the physical random number generator shown in FIG. The only difference from the physical random number generator shown in FIG.

[0054] If both entropy sources 12A, 12B are normal, either mixing or maxing can provide safe random numbers to the external device 40. Maxing allows the data processing unit 16 to generate random numbers faster than mixing. Therefore, in the data processing unit 16 of the physical random number generator shown in FIG. 6, it is indicated that the maxing process is selected when it is confirmed that both entropy sources 12A, 12B are normal.

[0055] (Figure 7) FIG. 7 shows a second variation of the physical random number generator shown in FIG. The difference from the physical random number generator shown in Figure 4 is the random number verification device. That is, in Fig. 4, the random number verification device is divided into first random number verification devices 15A, 15B and second random number verification device 18. On the other hand, in Fig. 7, only the output random numbers output from the distillation processing device 17 are applied to the second random number verification device 18. This has the advantage of saving on implementation capacity.

[0056] As shown in Figure 4, the parallel type is a type in which the compressed random numbers output from the sub-board I / F units 14A and 14B are tested and also tested. As shown in Figure 7, the serial type is a type in which only the output random numbers output from the distillation processing device 17 are tested (one test circuit is used in multiple locations).

[0057] (Figure 8) In FIG. 8(a), when the converted signal obtained through the I / F conversion unit 14A and the first random number verification device 15A is "0x1537", and the converted signal obtained through the I / F conversion unit 14B and the first random number verification device 15B is "0x4291", when the data processing unit mixes them, the random number data output is "0x1537 XOR 0x4291", i.e., "0x57A6".

[0058] Mixing refers to increasing security by performing an exclusive OR on a plurality of conversion signals output from a plurality of random number output boards 20A and 20B to the main board 10B.

[0059] Figure 8(b) also shows a specific example of maxing by the data processing unit when the converted signal obtained through the I / F conversion unit 14A and the random number testing device 15A is "0x1537" and the converted signal obtained through the I / F conversion unit 14B and the random number testing device 15B is "0x4291".

[0060] Maximization means maximizing the generation speed of multiple conversion signals output from the multiple random number output boards 20A and 20B to the main board 10B. For example, the generation speed is maximized by time division multiplexing. In addition to "0x15374291" or "0x42911537" which are simply concatenated with "0x1537" and "0x4291", there are also cases where "0x14223971" is generated randomly.

[0061] Furthermore, it is possible to generate random numbers in units required by the external device 40, such as 2-bit units, 4-bit units, 8-bit units, etc.

[0062] (Fig. 9) FIG. 9 shows an example of the mixing process when one output board does not function or the output is delayed.

[0063] 9(a) shows a case where the I / F conversion unit 14A and the first random number verification device 15A do not function (outputting ALL "0" or ALL "1"). In other words, if the converted signal obtained through the I / F conversion unit 14B and the first random number verification device 15B outputs "0x4291", the data processing unit 16 outputs random number data of "0x4291" or "0xBS6E".

[0064] In Fig. 15(b), the converted signal obtained through the I / F conversion unit 14A and the first random number verification device 15A is "0x1537". However, the converted signal obtained through the I / F conversion unit 14B and the first random number verification device 15B is "0x4291", which is output later than "1537". When the delayed converted signal becomes "0xA429", mixing results in "0x1537 XOR 0xA429", that is, random number data "0xB112" being output.

[0065] (Figure 10) FIG. 10 shows an example of the maxing process when one output board does not function or when the output is delayed.

[0066] 10(a) shows a case where the I / F conversion unit 14A and the random number verification device 15A do not function (outputting ALL "0" or ALL "1"). In this case, even if the data processing unit 16 performs maxing, it will output "0x00004291" or "0xFFFF4291", which will not be the data for random numbers. Therefore, an algorithm is set up that does not perform maxing if one output board does not function.

[0067] 10(b) shows a case where the converted signal obtained through the I / F conversion unit 14A and the first random number verification device 15A is "0x1537", but the converted signal obtained through the I / F conversion unit 14B and the first random number verification device 15B is "0x4291", which is output later than "0x1537". When the delayed converted signal becomes "0xA429", maxing results in the output of a random number data string of "0x1537A429" or "0xA4291537".

[0068] 15 and 16, a case has been described in which, in the random number generator 10A having two random number output boards 20A, 20B, one does not function and the output of one is delayed. If a random number generator 10C is provided with three random number output boards 20A, 20B, and 20C as shown in FIG. 22 described later, mixing and maxing are possible even if one of the three boards does not function or the output is delayed.

[0069] (Fig. 11) FIG. 11 is a flowchart showing a simple processing procedure for executing the first random number test and the second random number test, and corresponds to FIG. 4 in terms of the hardware configuration.

[0070] When the power is turned on, electrical energy is supplied from power regulators A and B to entropy sources A and B. That is, a random number generation command is issued (S1, S1'). The first random number verification device verifies whether the random number sequences generated by entropy sources A and B are normal or not (S2, S2'). If an abnormality is detected, the output of random numbers is stopped (S7).

[0071] (Fig. 12) FIG. 12 shows that the multiple random number output substrates that the physical random number generator 10A should have are formed to be replaceable. That is, before the random number output board 20B is incorporated, the physical random number generator 10A has a slot 20M prepared, and the random number output board 20B can be incorporated into that slot 20M.

[0072] When the random number output board 20B is inserted into the slot 20M, the power supply regulator 11B is electrically connected to the power supply 11. At the same time, the main board I / F unit 13B is electrically connected to the sub-board I / F unit 14B in the main board 10B.

[0073] 12 shows that random number output board 20B can be easily replaced if it is malfunctioning. Also, as long as the random number output board to be replaced can output a conversion signal that can be received by sub-board I / F unit 14B (main board I / F unit 13B is provided), there is no need to use the same type of entropy source as the original board.

[0074] (Fig. 13) A random number generator 10C shown in FIG. 13 differs from the embodiments shown in FIG. 4 and FIG. 7 in that it includes three random number output boards 20A, 20B, and 20C (triple entropy source). In the present invention, the number of random number output boards to be provided is multiple, and although two and three have been exemplified, it is also possible to provide a random number generator equipped with four or more random number output boards.

[0075] (Fig. 14) In Figure 14(a), it is shown that the three slots can be "multi-vendorized" by using the same entropy source from the same manufacturer. In other words, if an entropy source from any manufacturer is easily available, it can be used uniformly.

[0076] Figure 14(b) shows that the three slots can be "mixed vendors," which means that different entropy sources from multiple manufacturers can be used. In other words, instead of standardizing on the entropy source from one manufacturer, it is possible to mix and use entropy sources from manufacturers that are easy to obtain.

[0077] (Fig. 15) FIG. 15 shows an embodiment with an entropy source slot 12M where only a malfunctioning entropy source can be replaced. This entropy source slot 12M can only accommodate the same type of entropy source B as the entropy source B before replacement. This is because the power supply regulator 11B and main board I / F conversion unit 13B are not to be replaced and will continue to be used after replacement.

[0078] (Fig. 16) FIG. 16 is an assembled perspective view of the parts that make up the physical random number generator 1 according to this embodiment. An electronic circuit (not shown) is built into the upper surface of the main board 10B described above, and a large number of pin headers 20N are provided for connection to the electronic circuit.

[0079] As described above, the peripheral frame 30 is a rectangular frame fixed upright inside the outer periphery of the upper surface of the main board 10B, and its height is higher than the above-mentioned pin header 20N. The peripheral frame 30 and the main board 10B are fixed all around by soldering so that they cannot be easily separated.

[0080] The break plate 31 is bent eight times, with both ends being the outermost horizontal parts that are placed on the upper end of the short side of the peripheral frame 30. It is equipped with a header support that supports the pin header 20N while passing through it, and is located above the main board 10B when assembled.

[0081] The random number output boards 20A and 20B are located in two spaces formed by separating them by the break plate 31. Both the random number output boards 20A and 20B have a rectangular shape in plan view, and are provided with a through hole in the long side direction through which the pin header 20N passes and is electrically connected. The pin header 20N passes through the through hole, so that although they are separated by the break plate 31, the random number output boards 20A and 20B are electrically connected to the main board 10B.

[0082] The present invention provides the following effects by providing a plurality of random number output boards 20A and 20B. First, by installing two of the same type of physical random number chips (entropy sources), it is possible to process random numbers in parallel, roughly doubling the generation speed. Also, even if one entropy source breaks down, random numbers can still be generated as long as the other entropy source is normal.

[0083] Secondly, by incorporating different types of physical random number chips (entropy sources), the reliability of the generated random numbers can be improved. Even if one entropy source is tampered with by an unauthorized person, the random numbers generated can be erased by parallel processing with the other entropy source, ensuring safety.

[0084] In this embodiment, it is assumed that the random number output boards 20A and 20B are installed, but it can be made to function even if only one physical random number chip is installed. Even if physical random number chips become difficult to obtain, this will contribute to stabilizing the supply to meet the demand for physical random number generators.

[0085] (Fig. 17) After the random number output boards 20A and 20B are assembled into the break plate 31, the inner cover material 32 is fixed onto the break plate 31. Then, after pouring in resin (not shown), the outer cover material 33 is fixed. The completed product is shown in FIG.

[0086] According to the random number generator of the embodiment described above, even if it is subject to malfunction or failure, random number generation can be ensured stably for a long period of time. In addition, if it becomes difficult to obtain entropy sources, random number generators can be manufactured by standardizing on entropy sources from manufacturers that are easy to obtain, or random number generators can be manufactured by mixing entropy sources from multiple manufacturers. [Industrial Applicability]

[0087] The present invention has applicability in the information and communication device manufacturing industry, the information and communication service industry including the information and communication device installation service industry, the software industry that creates computer software for information and communication services, and the like. [Explanation of symbols]

[0088] 10; Random number generator 10A; Random number generator (double entropy source) 10B; Main board 10C; Random number generator (triple entropy source) 11;Power supply 11A;Power regulator A 11B;Power regulator B 12 ;Entropy source 12A;Entropy source A 12B; Entropy source B 12M; Entropy source slot 13A: Main board I / F conversion section A 13B: Main board I / F conversion section B 14A: Sub-board I / F conversion section A 14B: Sub-board I / F conversion section B 15A; First random number verification device 1 15B; First random number verification device 1 16 ;Multi / Mix Device 17 : Distillation equipment (extractor) 18 : Second random number verification device 19 ;External interface 20A; Random number output board 20B; Random number output board 20C; Random number output board 20M; Slot 20N; pin header 21; power supply 22 ;Entropy source 23 : First random number verification device 24 ;FPGA 25 ;Distillation treatment equipment 26 : Second random number verification device 27 ;Output interface 30 ; Periphery frame 31 ;Break plate 32 ; Inner cover material 33 : Outer cover material 40; External equipment

Claims

1. A random number generator including a plurality of random number output boards for generating a physical phenomenon random number sequence based on a physical phenomenon, and a main board for enabling the physical phenomenon random number sequence output by the plurality of random number output boards to be used as a physical random number in an external device, comprising: The random number output board is an entropy source that generates a physical phenomenon random number sequence based on a physical phenomenon; a power regulator for adjusting the electrical energy obtained from the power source so that the entropy source can output a physical phenomenon random number sequence; an I / F conversion unit that converts the physical phenomenon random number sequence output by the entropy source into a converted signal so that the converted signal can be used on the main board; Equipped with The main board is a first random number verification device that verifies whether or not the physical phenomenon random number sequence output as a converted signal from the I / F conversion unit can be used as a random number; a data processing unit that mixes or maxes the physical phenomenon random number sequence as the converted signal when the first random number testing device tests the converted signal and finds that the converted signal can be used as a random number; a distillation processing device which performs a distillation process via an extractor on the physical phenomenon random numbers mixed or maxed by the data processing unit to improve the safety as random numbers for use, thereby generating output random numbers; a second random number verification device that verifies whether the output random number can be used as a random number in the external device; an external interface for converting the verified output random numbers verified by the second random number verification device into converted output random numbers that can be used in the external device; A random number generator equipped with

2. the main board is provided with a sub-board I / F conversion unit that converts a converted signal output by an I / F conversion unit in the random number output board so that the converted signal can be used in the main board; 2. The random number generator according to claim 1, wherein the I / F conversion section in the random number output board standardizes a signal to be output to the sub-board I / F conversion section.

3. a peripheral frame is provided on the outer periphery of the surface of the main board on the side where the first random number verification device is provided, the peripheral frame being erected in a direction covering the first random number verification device; the peripheral frame has a height dimension sufficient to cover the random number output board connected to the random number verification device; The random number output board is sealed by providing an outer cover material that covers the surface facing the main board and sandwiches the outer frame.

3. The random number generator according to claim 1 or 2.

4. The device has a plurality of slots for mounting random number output boards that generate a physical phenomenon random number sequence based on a physical phenomenon, A random number generator including a main board that enables a conversion signal for generating random numbers output by a random number output board when the random number output board is inserted into the slot to be used as a physical random number in an external device, The random number output board includes an entropy source that generates a physical phenomenon random number sequence based on a physical phenomenon; a power regulator for adjusting the electrical energy obtained from the power source so that the entropy source can output a physical phenomenon random number sequence; an I / F conversion unit that converts the physical phenomenon random number sequence output by the entropy source into a converted signal so that the converted signal can be used on the main board; Equipped with The main board is a first random number verification device that verifies whether the physical phenomenon random number output as a converted signal from the I / F conversion unit can be used as a random number; a data processing unit that mixes or maxes the physical phenomenon random number as the converted signal when the first random number testing device tests the converted signal and the converted signal is usable as a random number; a distillation processing device which performs a distillation process via an extractor on the physical phenomenon random numbers mixed or maxed by the data processing unit to improve the safety as random numbers for use, thereby generating output random numbers; a second random number verification device that verifies whether the output random number can be used as a random number in an external device; an external interface for converting the output random numbers verified by the second random number verification device into converted output random numbers that can be used in the external device; A random number generator equipped with

5. the main board is provided with a sub-board I / F conversion unit that converts a converted signal output by an I / F conversion unit in the random number output board so that the converted signal can be used in the main board; The I / F conversion unit in the random number output board mounted in the slot standardizes the output to the sub-board I / F conversion unit.

5. The random number generator according to claim 4.

6. A method for controlling a random number generator having a plurality of random number output boards that generate a physical phenomenon random number sequence based on a physical phenomenon, and a main board that enables the physical phenomenon random number sequence output by the plurality of random number output boards to be used as a physical random number in an external device, comprising: The random number output board is an entropy source that generates a physical phenomenon random number sequence based on a physical phenomenon; a power regulator for adjusting the electrical energy obtained from the power source so that the entropy source can output a physical phenomenon random number sequence; an I / F conversion unit that outputs the physical phenomenon random number sequence output by the entropy source as a converted signal so that the physical phenomenon random number sequence can be used on the main board; The main board is a first random number verification device that verifies whether or not the physical phenomenon random number sequence output as a converted signal from the I / F conversion unit can be used as a random number; a data processing unit that mixes or maxes the physical phenomenon random number sequence as the converted signal when the first random number testing device tests the converted signal and finds that the converted signal can be used as a random number; a distillation processing device which performs a distillation process via an extractor on the physical phenomenon random numbers mixed or maxed by the data processing unit to improve the safety as random numbers for use, thereby generating output random numbers; a second random number verification device that verifies whether the output random number can be used as a random number in the external device; and an external interface for converting the verified output random numbers verified by the second random number verification device into converted output random numbers that can be used in the external device. The method for controlling the random number generator is as follows: When the random number verification device verifies that the converted signal for the I / F conversion unit in any of the random number output boards is a normal output, the data processing unit selects a maxing process; When the random number verification device verifies that any of the outputs is abnormal, the data processing unit selects a mixing process. A method for controlling a random number generator.

7. In the random number verification device, when the output of the conversion signal to the I / F conversion unit by any of the random number output boards is delayed within a predetermined time, the data processing is selected to be a maxing process. A method for controlling the random number generator according to claim 6.

Images