JPH096232A - Encryption system, decryption system, information confidential processing system and information confidential communication system - Google Patents

Abstract

(57) [Abstract] [Purpose] To provide a system capable of efficiently performing encryption / decryption without tampering with the program. [Structure] When the password matches with the initial program IP, the encrypted dark / decryption processing program Pr1, Pr2, ... Is transmitted from the information processing device to the IC card, and the IC program decrypts this program by a legitimate user. Decrypt with key and send back. The information processing apparatus arranges this program in the work memory area PA and activates it to perform data encryption / decryption processing. Therefore, the program is usually encrypted and cannot be tampered with without being analyzed by a third party. Since the plaintext program is erased after the legitimate user completes the processing of the data, the plaintext program remains after the processing, and the security of the program is secured. Therefore, it is not necessary to take out the storage medium of the program from the storage location and set it in the information processing apparatus for each encryption / decryption process, and the encryption work can be performed efficiently.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an encryption system for encrypting data by a program-based encryption process, a decryption system for decrypting encrypted data by a program-based decryption process, and further these functions. The present invention relates to an information security processing system and an information security communication system.

[0002]

2. Description of the Related Art Conventionally, as a method for concealing the content of information (also referred to as "data"), a process of encrypting information to be concealed using an encryption key is known. Once the information is encrypted, it cannot be returned to a human-readable state without the same encryption key or a specific decryption key. The contents of the information can be kept secret to others who do not.

However, if an encryption key or a decryption key (hereinafter, referred to as "encryption / decryption key") leaks, the information will be immediately decrypted by another person. On the other hand, there has been proposed a file security system that enhances safety by encrypting with another encryption key and storing it (JP-A-6-102822).

[0004]

However, even in such a system, there are the following problems. That is, the information encryption process or the decryption process for decrypting the information is generally performed by an information processing device that uses a computer system by using an encryption program or a decryption program (hereinafter, “encryption / decryption”). "Represented as a program").

Information is encrypted by this encryption / decryption program, and in order to further enhance security,
When the decryption key is encrypted, the information itself seems to be extremely safe at first glance. However, the encryption / decryption program itself that performs this encryption / decryption is often more vulnerable than the information itself. If the algorithm of this encryption / decryption program is analyzed by a third party, it may be used to decrypt the encrypted information.

Further, a third party falsifies the encryption / decryption program itself so as not to be understood by a legitimate user,
By adding the function of encrypting with the encryption key known to the third party, there is a possibility that the third party may subsequently decrypt all the encrypted information. Furthermore, there is a risk that the encryption / decryption program will have a function to copy the plaintext information (that is, not encrypted) before encryption to an area managed by a third party. There was also.

Of course, if the encryption / decryption program is not used, it may be possible to store the encryption / decryption program strictly, but each time it is used, a floppy disk or the like is taken out from the storage location to process information. It is necessary to set the device and load the encryption / decryption program, and the encryption / decryption process cannot be performed efficiently.

The present invention, without being tampered with by a third party,
Moreover, it is an object of the present invention to provide an encryption system, a decryption system, an information concealment processing system, and an information concealment communication system that can efficiently perform encryption / decryption.

[0009]

According to the first aspect of the present invention,
In an encryption system for encrypting data by a program-based encryption process, program encryption storage means for storing the program in a state encrypted by a first encryption key corresponding to a user, and the program encryption Program reading means for reading the program encrypted by the first encryption key corresponding to the user from the storage means, and decrypting the program read by the program reading means for the user A program for enciphering data to be enciphered by the second enciphering key into enciphered data by activating a program deciphering means for enciphering with a key and a program deciphered by the program deciphering means When the encryption of the data to be encrypted is completed by the activation means and the program activation means, it is decrypted and started. Program deleting means for deleting the program as the object, an encryption system, comprising the.

According to a second aspect of the invention, there is further provided a key encryption means for encrypting the second encryption key with a third encryption key and the first encryption means encrypted with the key encryption means. The encryption system according to claim 1, further comprising: a key addition unit that adds a two-encryption key to the encrypted data.

The invention according to claim 3 is the encryption system according to claim 2, wherein the key addition means is realized as a function of the program. The invention according to claim 4 is the encryption system according to any one of claims 1 to 3, wherein the program obtains the second encryption key by calculation.

According to a fifth aspect of the present invention, there is provided a main body device and an accessory device which is formed separately from the main body device and which can be arbitrarily connected to or disconnected from the main body device in a signal manner. The main body device includes the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores a decryption key corresponding to the user. Along with, the program decoding means is provided.
It is the described encryption system.

According to a sixth aspect of the present invention, there is provided a main body device and an accessory device which is formed separately from the main body device and which can be arbitrarily connected to or disconnected from the main body device in a signal manner. The main device comprises the program encryption storage device, the program reading device, the program decrypting device, the program starting device, and the program erasing device, and the auxiliary device comprises the third encryption key. The encryption system according to claim 3, further comprising:

According to a seventh aspect of the present invention, there is provided a main body device and an auxiliary device which is formed separately from the main body device and which can be arbitrarily connected or disconnected in signal with respect to the main body device. The main body device comprises the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device comprises a decryption key corresponding to the user and the first program. 4. The encryption system according to claim 3, wherein the encryption system stores three encryption keys, and further comprises the program decryption means and the key encryption means.

In the invention according to claim 8, the accessory device is
8. The encryption system according to claim 6, wherein the third encryption key is stored as a list corresponding to a management code of a person who permits decryption. The invention according to claim 9 corresponds to a case where the auxiliary device does not directly store the decryption key or the third encryption key and the decryption key or the third encryption key is required. The encryption system according to any one of claims 5 to 7, wherein the decryption key or the third encryption key is generated by an operation using a management code.

According to a tenth aspect of the present invention, when the program does not carry out the next input operation by the user within a predetermined time, the program terminates its own processing and causes the program erasing means to execute the processing. It is an encryption system of Claims 1-9 which has a function.

According to an eleventh aspect of the present invention, in a decryption system for decrypting encrypted data by a decryption process based on a program, the program is encrypted with a first encryption key corresponding to a user. Program encryption storage means for storing, program read means for reading the program encrypted from the program encryption storage means with a first encryption key corresponding to the user, and read by the program read means By activating the program decrypted by the decryption key corresponding to the user, and the program decrypted by the program decryption means,
Program activation means for decrypting the encrypted data with the second decryption key to obtain decrypted data, and when the decryption of the encrypted data by the program activation means is completed, it is decrypted and becomes the activation target. And a program erasing means for erasing the program.

The invention according to claim 12 further comprises key decryption means for decrypting the encrypted second decryption key contained in the encrypted data with the decryption key corresponding to the user. The decoding system according to claim 11.

According to a thirteenth aspect of the present invention, there is provided a main body device and an accessory device which is formed separately from the main body device and which can be arbitrarily connected to or disconnected from the main body device in a signal manner. The main body device includes the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores a decryption key corresponding to the user. The decoding system according to claim 11, further comprising the program decoding means.

According to a fourteenth aspect of the present invention, there is provided a main body device and an auxiliary device which is formed separately from the main body device and which can be arbitrarily connected to or disconnected from the main body device in a signal manner. And the main device includes the program encryption storage device, the program reading device, the program decrypting device, the program starting device, and the program erasing device, and the auxiliary device corresponds to the user. 13. The decryption system according to claim 12, wherein the decryption key is stored and the key decryption means is provided.

According to a fifteenth aspect of the present invention, there is provided a main body device and an accessory device which is formed separately from the main body device and which can be arbitrarily connected to or disconnected from the main body device in a signal manner. The main body device includes the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores a decryption key corresponding to the user. The decryption system according to claim 12, further comprising the program decryption means and the key decryption means.

According to a sixteenth aspect of the present invention, the auxiliary device does not directly store the decryption key, and when the decryption key is required, the auxiliary device calculates by using the corresponding management code. The decryption system according to any one of claims 13 to 15, which generates a decryption key.

In a seventeenth aspect of the present invention, the program stops its own processing and causes the program erasing means to execute the processing when the user does not perform the next input operation within a predetermined time. Claims 11 to 1 having a function
6 is a decoding system described in 6.

The invention according to claim 18 is the invention according to claims 1 to 10.
An information confidential processing system in which the encryption system according to any one of claims 1 to 13 and the decryption system according to claims 11 to 17 are combined. The invention according to claim 19 is the encryption system according to any one of claims 1 to 10, further comprising a transmitting means for transmitting the encrypted data to the other party via a communication line.

The twentieth aspect of the present invention is the decryption system according to any one of the eleventh to seventeenth aspects, further comprising receiving means for receiving the encrypted data via a communication line. The invention according to claim 21 is an information confidential communication system in which the encryption system according to claim 19 and the decryption system according to claim 20 are combined.

[0026]

The operation and effect of the invention are as follows.
A program encryption storage means, a program reading means, a program decryption means, a program starting means, and a program erasing means are provided, and the program encryption storage means stores a program for encryption processing in a first encryption key corresponding to a user. It is stored in an encrypted state by. The program reading means reads the program encrypted with the first encryption key corresponding to the user from the program encryption storage means. The program decrypting means decrypts the program read by the program reading means with a decryption key corresponding to a user. The program activation means activates the program decrypted by the program decryption means to encrypt the data to be encrypted with the second encryption key to obtain encrypted data.
When the program activating means completes the encryption of the data to be encrypted, the program erasing means erases the program that has been decrypted and is to be activated.

As described above, the program for encryption processing activated by the encryption system of the present invention is stored in the encrypted state by the program encryption storage means when it is not used for the encryption processing. Has been done. Therefore,
If it remains encrypted, it cannot be parsed by a third party and cannot be tampered with because it cannot be parsed. Also,
Since the user possesses the decryption key, the program for encryption cannot be decrypted even if the program decryption means is known to a third party.

When the authorized user encrypts the data, the program reading means reads the program encrypted by the first encryption key corresponding to the user from the program encryption storage means. The program decryption means decrypts the program with the decryption key corresponding to the user, and the program activation means activates the decrypted program. By the function of the program that has been started, the data to be encrypted is encrypted with the second encryption key and becomes encrypted data.

Moreover, after the data encryption is completed,
The program erasing means erases the activated plaintext program. Therefore, even after encryption processing,
The plaintext encryption program does not remain, the security of the encryption program is secured, and as a result, the security of the encrypted data is also secured. Therefore, it is not necessary to take out the storage medium storing the encryption processing program from the storage location, set it in the computer, and load it for each encryption processing.
Efficient encryption work can be performed.

In addition to the above construction, a key encryption means and a key addition means may be added. This key encryption means is the second
The encryption key is encrypted with the third encryption key. Then, the key addition means adds the second encryption key encrypted by the key encryption means to the encrypted data.

As described above, since the second encryption key for encrypting the data is further encrypted by the third encryption key, the key addition means adds the second encryption key to the encrypted data. The safety can be secured by adding. In addition, since the second encryption key is added to the encrypted data, even if the storage medium is carried as it is or the encrypted data is transmitted to the other party by communication, 3 If only the encryption key is stored, the encrypted data can be decrypted. That is, the encrypted second encryption key added to the encrypted data is decrypted by the third encryption key, and then by the decrypted second encryption key,
The encrypted data can be decrypted. The key addition means may be realized as a function of the encryption program.

Further, in this case, the second encryption key may be obtained by calculation by the encryption program. Since the encryption key calculated in this way is a temporary key and is not continuously used, the data security is further ensured. Also, since this temporary key is also calculated by the encryption program, only the encrypted program exists for generating the second encryption key except during the encryption process. As such, it cannot be tampered with to generate a key known to a third party.

Further, the present encryption system comprises a main unit,
It may be configured separately from the main body device and an auxiliary device that can be arbitrarily connected to or disconnected from the main body device in a signal manner. For example, the main device may be a computer device and the auxiliary device may be an IC card.

In this case, the main body device includes the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores the decryption key corresponding to the user. In addition, the program decoding means may be provided.

With this configuration, when the encryption process is not performed, the auxiliary device can be separated from the main device and stored in a safe storage place. Since the auxiliary device has a decryption key and a program decryption unit corresponding to the user, the decryption key and the program of the program decryption unit are both secured, and the data safety is further improved. Secured.

Similarly, when the main body device and the auxiliary device are separately configured, the main body device has the program encryption storage means, the program reading means, the program decryption means, the program starting means, The auxiliary device may be configured to include the program erasing unit, the auxiliary device storing the third encryption key, and the key encryption unit.

With this configuration, the accessory device side has
Since the third encryption key and the key encryption means are present, the security of both the third encryption key and the program of the key encryption means is ensured, and the security of the data is further ensured. Also, when configured separately for the main device and the auxiliary device,
A configuration in which both of the above are taken into consideration, that is, the main body device is configured such that
The auxiliary device stores the decryption key and the third encryption key corresponding to the user and includes the program decryption unit and the key encryption unit. The configuration may be provided.

With this configuration, the accessory device side has
Since there is a decryption key corresponding to the user, a third encryption key, a program decryption means, and a key encryption means, the decryption key corresponding to the user, the third encryption key, and the program decryption means. The security of all programs and the program of the key encryption means are secured, and the safety of data is further secured.

Further, the attached device sends the third encryption key,
It may be stored as a list corresponding to the management code of the person who permits the decryption. With this configuration,
If a person who permits the decryption is designated by the management code, for example, the ID, the key encryption means of the attached device can encrypt the second encryption key by the third encryption key corresponding to the ID. .

Further, when the auxiliary device does not directly store the decryption key or the third encryption key and the decryption key or the third encryption key is required, the operation using the corresponding management code is performed. Alternatively, the decryption key or the third encryption key may be generated. In particular, when a large number of third encryption keys must be stored, only an arithmetic expression is needed, which saves memory.

Further, the program may have a function of stopping its own process and executing the process of the program erasing means when the user does not perform the next input operation within a predetermined time. . In this way, even if the legitimate user once leaves the system unit, the plaintext program itself disappears after a while, so that it will not be analyzed or tampered with by a third party.

A decryption system according to claim 11 comprises a program encryption storage means, a program reading means, a program decryption means, a program starting means and a program erasing means, and the program encryption storage means uses the program. The program is stored in an encrypted state by a first encryption key corresponding to a user, and the program reading means stores the program encrypted from the program encryption storage means with a first encryption key corresponding to a user. And the program decrypting means decrypts the program read by the program reading means with a decryption key corresponding to a user, and the program starting means decrypts the program by the program decrypting means. By starting the program, the encrypted data can be decrypted with the second decryption key. And over data, program erasing means,
When the decryption of the encrypted data is completed by the program activation means, the decrypted program to be activated is erased.

As described above, the program for the decryption process activated by the decryption system of the present invention is stored in the encrypted state by the program encryption storage means when it is not used for the decryption process. Has been done. Therefore,
If it remains encrypted, it cannot be parsed by a third party and cannot be tampered with because it cannot be parsed. Also,
Since the user possesses the decryption key, the program for decryption cannot be decrypted even if the program decryption means is known to a third party.

When a legitimate user decrypts the encrypted data, the program reading means uses the program encrypted from the program encryption storage means with the first encryption key corresponding to the user. Is read, the program decryption means decrypts the program with the decryption key corresponding to the user, and the program activation means activates the decrypted program. By the function of the activated program, the encrypted data can be decrypted with the second decryption key to be decrypted data, that is, plaintext data.

Moreover, after the decryption of the encrypted data is completed, the program erasing means erases the activated program in the plaintext state. Therefore, even after the decryption process, there is no program for decryption in the plaintext state, and the safety of the decryption program is secured.
As a result, the safety of the data is ensured. Therefore, it is not necessary to take out the storage medium storing the program for the decryption processing from the storage location, set it in the computer and load it for each decryption processing, and the decryption operation can be performed efficiently. .

A key decryption means may be added to the above configuration. The key decryption means decrypts the encrypted second decryption key included in the encrypted data with the decryption key corresponding to the user. By doing so, the second decryption key for decrypting the encrypted data can be obtained, and only the authorized user can appropriately decrypt the encrypted data to obtain the plaintext data.

The decoding system includes a main unit,
It may be configured separately from the main body device and an auxiliary device that can be arbitrarily connected to or disconnected from the main body device in a signal manner. For example, the main device may be a computer device and the auxiliary device may be an IC card.

In this case, the main body device includes the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores the decryption key corresponding to the user. In addition, the program decoding means may be provided.

With this configuration, when the decryption process is not performed, the auxiliary device can be separated from the main device and stored in a safe storage place. Since the auxiliary device has a decryption key and a program decryption unit corresponding to the user, the decryption key and the program of the program decryption unit are both secured, and the data safety is further improved. Secured.

Similarly, when the main body device and the auxiliary device are separately configured, the main body device has the program encryption storage means, the program reading means, the program decryption means, the program starting means, Also, the program deleting means may be provided, and the auxiliary device may store the decryption key corresponding to the user and the key decrypting means.

With this configuration, the accessory device side has
Since the decryption key and the key decryption means corresponding to the user exist, both the decryption key and the program of the key decryption means are secured, and the safety of the data is further secured. Further, in the case where the main body device and the auxiliary device are separately configured, a configuration in which the both are added, that is, the main body device includes the program encryption storage means, the program reading means, the program starting means, and the program. A configuration may be adopted in which the deletion device is provided, the auxiliary device stores the decryption key corresponding to the user, and the program decryption unit and the key decryption unit are provided.

With this configuration, the accessory device side has
Since there is a decryption key corresponding to the user, a program decryption means, and a key decryption means, the security of the decryption key corresponding to the user, the program of the program decryption means, and the program of the key decryption means Are all secured,
The safety of data is further secured.

Further, the auxiliary device may not directly store the decryption key and, when the decryption key is required, generate the decryption key by an operation using the corresponding management code. good. Further, the program may have a function of stopping its own processing and executing the processing of the program erasing means when the user does not perform the next input operation within a predetermined time. If you do this,
Even if a legitimate user leaves the system unit,
After a while, the plaintext program itself disappears, so it will not be analyzed or tampered with by a third party.

Further, the encryption system having any one of the configurations described above and any one of the decryption systems described above may be combined to form an information confidentiality processing system. As a result, one information confidential processing system can have both the functions of the encryption system and the decryption system, which makes the processing of the user efficient and ensures the safety of the program and data. To be done.

The above-described encryption system can be configured as a data communication system such as a facsimile machine having an encryption function by including a transmitting means for transmitting the encrypted data to the other party via the communication line. . Also, in the decoding system described above,
A data communication system such as a facsimile machine having a decryption function for encrypted data can be configured by including a receiving unit that receives encrypted data via a communication line.

Of course, the encryption system having the above-mentioned transmission means and the decryption system having the above-mentioned reception means are combined to constitute an information confidential communication system such as a facsimile machine having an encryption function and an encrypted data decryption function. can do.

[0057]

1 and 2 show an embodiment of an information confidentiality processing system of the present invention. Among these, FIG. 1 shows a block diagram of the information processing apparatus 2. The information processing device 2 is C
PU4, ROM6, RAM8, backup RAM1
0, keyboard 12, magneto-optical disk (MOD) drive 14, CRT display 16, hard disk (H
D) Device 18, floppy disk (FD) drive 2
0 and an input / output interface (I / O) 22. These components are signal-connected by a bus 24, and an IC card reader 26 is connected to the I / O 22.

As described above, the information processing device 2 is configured as a computer, and the ROM 6, the magneto-optical disk inserted in the magneto-optical disk drive 14, the hard disk device 18, the floppy disk inserted in the floppy disk drive 20, or the IC card reader. Necessary processing is executed based on the program and data read from the IC card 30 (FIG. 2) inserted in the disk 26, and the resulting data is stored in the magneto-optical disk drive 14
Magneto-optical disk, hard disk drive 1 inserted in
8. The data is stored in the floppy disk inserted in the floppy disk drive 20 or the IC card 30 inserted in the IC card reader 26. The information processing device 2
Other than this, a CD-ROM drive device, a magnetic tape storage device, or the like may be provided.

FIG. 2 shows a block diagram of the IC card 30. The IC card 30 includes a CPU 32, ROM 34, RA
An M36, a backup RAM 38 and an input / output interface (I / O) 40 are provided. These components are signal-connected by a bus 42. I / O40
Is an interface provided with a connector for the IC card reader 26 of the information processing apparatus 2.

When the information processing device 2 is powered on, the program area of the RAM 8 is displayed as shown in FIG.
The initial program IP for encrypting and decrypting data is loaded from the hard disk device 18 and activated. The hard disk device 18 has
As shown in (b), in addition to the initial program IP, a plurality of encrypted "second encryption / decryption processing programs" Pr1 to Prn are stored. These “second encryption / decryption processing programs” Pr1 to Prn are encrypted with the encryption key (first encryption key) of the user of the information processing apparatus 2 and It is a program that exists in the same number and basically has the same function when decrypted.
However, it is also possible to give different functions to each user as described later. Figure 3 shows the correspondence between the user and the program.
User ID in the hard disk device 18 shown in (b)-
This is done by referring to the program address table. These “second encryption / decryption processing programs” P
The r1 to Prn and the user ID-program address table are installed in the hard disk device 18 in advance together with the initial program IP.

A backup RA for the IC card 30
In M38, as shown in FIG. 4, a program such as a password verification program Pr11, an encryption processing program Pr12, a decryption processing program Pr13, a key encryption processing program Pr14, and a key decryption processing program Pr15, and a valid user's program. Password, ID of authorized user, encryption / decryption key of authorized user (corresponding to the first encryption key and decryption key), and ID of the authorized user who is allowed to decrypt data ( , IDn) and the counterpart encryption keys K1, K2, ..., Kn corresponding to the IDs are stored.

5 and 6 when the user turns on the information processing apparatus 2 to encrypt the data.
The initial program IP shown in the flowchart of FIG. First, initialization processing is performed in step S100, and processing such as setting initial states of various configurations existing in the information processing apparatus 2 and determining initial values of data used for a program is performed.

Next, it is determined whether or not the IC card 30 is attached to the IC card reader 26 (S11).
0). If not mounted, a negative determination is made in step S110, a display requesting mounting of the IC card 30 is displayed on the CRT display 16 (S120), and the process of executing step S110 is repeated.

The IC card 30 is the IC card reader 2
If it is attached to No. 6, an affirmative decision is made in step S110, and the next password request is displayed on the CRT display 16 (S130). This password seeks the password of a valid user of the IC card 30 shown in FIG.

It is determined whether or not the password is input from the keyboard 12 (S140), and if there is no input, the processes of steps S140 and S150 are repeated until the timeout is determined in step S150. If the password is not input even after the elapse of the predetermined time corresponding to the time-out, an affirmative decision is made in step S150, and the processing of this initial program ends. If a password is input before the time-out, a positive determination is made in step S140, and the input password is transmitted to the IC card 30 side. And next, IC
It waits for the password collation result and the user's ID to be transmitted from the card 30 side (S170).

The processes on the IC card 30 side are shown in the flow charts of FIGS. This process is a process started when the IC card 30 is attached to the IC card reader 26. First, it waits for a password to be received from the information processing device 2 (S500). If the password is transmitted by the processing in step S160 described above, step S50
A positive determination is made at 0, and the password verification program Pr
11, the password of the authorized user of the IC card 30 stored in the backup RAM 38 shown in FIG. 4 is compared with the password sent from the information processing device 2 (S520).

Then, the result of the collation and the ID of the valid user are transmitted to the information processing apparatus 2 side (S530).
Next, if the collation result is “match”, that is, if the password from the information processing device 2 and the password of the legitimate user stored in the backup RAM 38 match, the legitimate user uses the IC card 30. Then, the encryption / decryption key of the authorized user is read from the backup RAM 38 (S550). If the password verification results do not match, a negative determination is made in step S540 and the process returns to step S500.

When step S550 has been processed, the system waits for transmission from the information processing device 2 (S560).
When the collation result and the ID are transmitted to the information processing device 2 in the process of step 530, the information processing device 2 side makes an affirmative decision in step 170 and then decides whether or not they match. (S180). If they do not match, the user is not an authorized user, so a negative determination is made in step 180, and it is displayed on the CRT display 16 that there is a mismatch and that the processing is to be stopped (S190), and step S190 is performed.
Returning to the processing of 110. Therefore, the IC card 30
If it is attached to the C card reader 26, the password is requested again in step 130, and step 14
0, in S150, the password input waits. Even if you make a mistake in entering the password, you will be prompted to enter it again, so you can correct it if you are a valid user. However, if the password is used improperly, it is highly likely that the password will be repeatedly input. Therefore, the password can be entered incorrectly, for example, up to three times. Ends the initial program without returning to step S110.

If it is determined in step S180 that they match, a message indicating that they match is displayed on the CRT display 16 (S200), and then encryption corresponding to the ID received together with the collation result from the IC card 30 is performed. The second done
The encryption / decryption processing program of the hard disk device 18
It is searched from the storage file of and is transmitted to the IC card 30 side (S210). Finding a program by ID is
As shown in FIG. 3B, the address on the disk of the encrypted second encryption / decryption processing program corresponding to the ID is calculated from the user ID-program address table stored in the hard disk device 18. This is done by reading the corresponding encrypted second encryption / decryption processing program from the address. For example, if the user's ID is IDb, the encrypted second
It is found from the user ID-program address table that the encryption / decryption processing program Pr2 of No. 2 corresponds to, and the encrypted second encryption / decryption processing program Pr2 is read from the disk address.

Next, the IC card 30 waits for transmission (S220). On the IC card 30 side, the second encryption / decryption processing program P encrypted from the information processing device 2
When r2 is transmitted, an affirmative decision is made in step S560, and then the program Pr2 is received and the received program Pr2 is decrypted (S57).
0). That is, the decryption processing program Pr13 existing in the backup RAM 38 is activated to activate the information processing device 2
Decrypt the program Pr2 transmitted from the. still,
If the program Pr2 is long and cannot be transmitted or decrypted at once due to the buffer or working memory capacity, it may be divided and transmitted or decrypted.

Next, the decrypted second encryption / decryption processing program Pr2 is transmitted to the information processing apparatus 2 (S58).
0). Next, it is determined whether or not the unencrypted temporary key and the decryption target person ID have been received (S590), and if not received, it is determined whether or not the encrypted temporary key has been received. (S595). If this has not been received either, it is determined whether or not the second encryption / decryption processing program that has not been encrypted has been received (S600). If neither is received, the determinations of step S590, step S595, and step S600 are repeated.

On the information processing device 2 side, when the decrypted or plaintext second encryption / decryption processing program Pr2 is received from the IC card 30 side, an affirmative decision is made in step S220, and the plaintext The second encryption / decryption processing program Pr2 is transferred to the working memory area PA of the RAM 8 as shown in FIG. 2A (S230).

Next, the plaintext second encryption / decryption processing program Pr2 is started from the initial program (S240). The second encryption / decryption processing program P
Flow charts of r2 are shown in FIGS. This process is executed by the activation process of step S240.

When the processing of the second encryption / decryption processing program Pr2 is started, first, a processing menu is displayed on the CRT display 16 (S1010). The menu is
Encryption process (S1100), decryption process (S120)
0), change processing of the second encryption / decryption processing program (S
1300) and other processing (S1400).

Here, the encryption process (S11
00) is selected, the processing shown in FIG. 10 is started. First, the encryption target data name and the decryption target person ID
Is requested (S1102). The name of the data to be encrypted is specified by designating a magneto-optical disk set in the magneto-optical disk drive 14 or a file in a floppy disk set in the hard disk device 18 or the floppy disk drive 20. Here, since the encrypted data is stored in the magneto-optical disk, the data to be encrypted is assumed to exist in the floppy disk.

As the decryption target person ID, the ID of the person who is permitted to decrypt is input. If there are a plurality of parties to which decryption is permitted, enter a plurality of IDs. If the IDs of the groups registered in advance are input, it means that the IDs of a plurality of parties belonging to the group are designated, and a plurality of people can be decrypted with one ID.

Here, the timeout process (S1106)
The input waits until the predetermined time-out time has elapsed (S1104). If there is no input until the timeout, an affirmative decision is made in step S1106, and the process immediately returns to the initial program. However, if the data name to be encrypted and the decryption target person ID have been input, then the temporary key (second encryption (Step S1108).

Here, it is preferable that the temporary key is generated by a different key (value or character string) for each generation. For example, a method using an M-series random number generation program, a method of measuring the time interval of key operation in about 1 / 100,000 second, and extracting only the lower required digits can be cited. The temporary key and the decryption target person ID thus generated are transmitted to the IC card 30 side (S
1110), and the system waits for reception of the encrypted temporary key transmitted from the IC card 30 side (S1120).

Since the IC card 30 has received the temporary key and the decryption target person ID, an affirmative decision is made in step S590 of FIG. 8, and the temporary key encryption processing program Pr14 causes the decryption target to be decrypted. The temporary key is encrypted with the counterparty encryption key corresponding to the person ID (S610). In the backup RAM 38 of the IC card 30, as shown in FIG. 4, ID1, ID2, ..., IDn of the other party to which the legitimate user permits the decryption of the data and the other party encryption keys K1 and K2 corresponding to the ID. , ..., Kn are stored, for example, if the decryption target person ID is ID2, the corresponding counterparty encryption key K2 is selected, and the temporary key is encrypted by the counterparty encryption key K2. Also, I of the group
If D is input, the other party encryption key may be selected from the ID of the person who is the representative of the group, and the temporary key may be encrypted with the other party encryption key. The temporary key may be encrypted at.

Next, the temporary key encrypted in this way is transmitted to the information processing device 2 side (S620), and the process in the IC card 30 returns to the process of step S500. Since the information processing device 2 receives the encrypted temporary key, an affirmative decision is made in step S1120, and the encrypted temporary key is stored as a file in the storage medium together with the ID (S1130). This storage medium is a storage medium specified by the user, but here, the magneto-optical disk drive 1
4 is a magneto-optical disk set in No. 4. Of course, a floppy disk, hard disk device 18, or other storage medium may be used.

Next, the data to be encrypted which has already been input in step S1102 is read (S1140),
Non-encrypted temporary key, ie step S110
The data to be encrypted is encrypted with the temporary key that was generated in step 8 (S1150). As a program for encrypting such data using a key, DES, which is a standard algorithm in the United States, FEEL developed by NTT, and the like are known.

Next, the encrypted data is stored in the file in which the ID and the encrypted temporary key are stored (S1160). That is, as shown in FIG. 13, the ID of the decryption person (the person who permits the decryption) as the header
(1), ID (2), ..., ID (n) and a list of encrypted temporary keys K (1), K (2), ... The encrypted data encrypted with the temporary key is stored as a file.

In this way, the encryption process (S1100) is completed in the information processing device 2, and next, in the RAM 8, for example,
If there is unencrypted data such as the data to be encrypted that has been read in the work memory area of the RAM 8 in the process of step S1140, a process of clearing the data (S1500) is performed.

In this way, the second encryption / decryption process ends, and the process returns to the initial program. In the initial program, the process of step S250 shown in FIG. 6 is performed to clear the second encryption / decryption process program existing on the RAM 8, and the process returns to step S110.

In this way, the data encryption is completed. As described above, the encryption processing program (FIGS. 9 and 10) activated by the information processing apparatus 2 of the present embodiment is
When it is not used in the encryption process, it is stored in an encrypted state by the hard disk device 18.
Therefore, it cannot be analyzed by a third party and cannot be tampered with because it cannot be analyzed.

When a legitimate user encrypts data, the hard disk drive 18 is used to store the password of the legitimate user.
Read the program encrypted with the decryption key,
The program is decrypted with the encryption / decryption key of a valid user, and the decrypted program is started to encrypt the data to be encrypted as a temporary key (second encryption key).
The encrypted data can be encrypted by.

Moreover, after the data encryption is completed,
Erase the launched program. Therefore, even after the encryption process, the program for encryption in the plaintext state does not remain, and the security of the program for encryption is secured, and as a result, the security of the encrypted data Is also secured. Therefore, it is not necessary to take out the storage medium storing the program for encryption processing from the storage location, set it in the information processing device 2 and load it for each encryption processing, and the encryption can be performed efficiently. I can work.

If the unencrypted data also remains in the working memory area, it is cleared.
Higher safety. Furthermore, the temporary key (second encryption key) is
It is encrypted with the other party's encryption key (third encryption key). Then, the encrypted temporary key is stored in one file together with the encrypted data together with the ID of the person who permits the decryption.

As described above, since the temporary key (second encryption key) for encrypting the data is further encrypted by the other party encryption key (third encryption key), the encrypted data is temporarily encrypted. Even if a key (second encryption key) is added, safety can be secured. Also, since a temporary key (second encryption key) is added to the encrypted data, even if the storage medium (here, a magneto-optical disk) is carried as it is or the encrypted data is transmitted to the other party by communication. The encrypted data can be decrypted if the other party's encryption key (third encryption key) is stored at the carrying destination or the communication partner.

The temporary key (second encryption key) is obtained by calculation by the encryption program. In this way, the encryption key for encrypting the data is a temporary key only for the encryption at that time and is not used continuously, so the security of the data is further secured. . Since this temporary key is also calculated in the encryption program, only the encrypted program exists at the time of encryption processing, so a third party may Cannot be tampered with to generate a key known to.

The information concealment processing system according to the present embodiment is constructed separately from the information processing apparatus 2 as a main body apparatus and is connected to the information processing apparatus 2 in a signal manner arbitrarily. The information processing apparatus 2 is configured separately from an IC card 30 as an accessory device that can be turned on and off, and the information processing apparatus 2 can perform a program encryption storage process, a program read process, a program start process, and a program erase process. IC card 30 with each program
However, the encryption / decryption key of the authorized user and the counterpart encryption key (third encryption key) are stored, and each program for the program decryption process and the key encryption process is provided. That is, on the IC card 30 side, since the encryption / decryption key of the legitimate user, the counterpart encryption key (third encryption key), the program decryption processing program, and the key encryption processing program are present, The security of the authorized user's encryption / decryption key, the other party's encryption key (third encryption key), the program of the program decryption process, and the program of the key encryption process are secured, and the data safety is further enhanced. Reserved.

Next, the process of decrypting the data when the magneto-optical disk storing the encrypted data file shown in FIG. 13 is received will be described. First, the user turns on the power of the information processing apparatus 2, sets the received magneto-optical disk in the magneto-optical disk drive 14, and sets his / her IC card 30 in the IC card reader 26.

In the information processing device 2, the initial program is activated. The process in this case is step S100.
From step S240 to step S240 are as described in the data encryption. The same applies to the IC card 30. Of course, since different users have different IC cards 30, the IDs received in step S170 also differ, and the encrypted second encryption / decryption processing program transmitted to the IC card 30 in step S210. Is also different.

For example, if the user's ID is IDa,
Since the encrypted second encryption / decryption processing program Pr1 corresponds to the encrypted second encryption / decryption processing program Pr1, the encrypted second encryption / decryption processing program Pr1 is transmitted to the IC card 30. As a result, step S240 The second encryption / decryption processing program Pr1 is executed as the program started by. Incidentally, here, the second encryption / decryption processing program P
It is assumed that r1 has the same contents as the second encryption / decryption processing program Pr2.

When the second encryption / decryption processing program Pr1 is started in step S240, first, in step S1010 of the flowchart shown in FIG. 9, the processing menu is displayed. Here, when the user selects the decryption process, the process of step S1200 is started. This decoding process is shown in the flowchart of FIG.

First, a request for inputting a decryption target data name is displayed (S1202). Next, in step S1206, the input waits until the timeout is determined (S120
4). If no input is made and time-out occurs, an affirmative decision is made in step S1206, the second encryption / decryption processing ends, and the processing returns to the initial program.

When one data file in the magneto-optical disk set in the magneto-optical disk drive 14 is specified (all files in the magneto-optical disk may be specified, or all files in a specific directory may be specified). A positive determination is made in step S1204, and the decryption target person ID (1), ID (2), ... And the corresponding encrypted data are decrypted from the header of the encrypted data to be decrypted. The temporary keys K (1), K (2), ... Are read (S120).
8).

Next, the decryption target person ID (1), ID (2),
It is determined whether or not the user's ID is present in ... (S1210). That is, it is determined whether the ID of the user described in the IC card 30 set in the IC card reader 26 is designated as the decryption target person. If it does not exist, the valid user of the IC card 30 that is currently set is not permitted to decrypt, and thus a negative determination is made in step S1210,
It is displayed on the CRT display 16 that the decryption is not permitted (S1220), the second encryption / decryption process is terminated, and the process returns to the initial program. In addition, when a plurality of files are designated as the decryption target, if there is at least one file in which the ID of the user described in the IC card 30 is designated as the decryption target in the header section, The processing from step S1230 is performed only on the included file. Further, when the group ID is specified in the header part, the IC card 3
If 0 legal users are included in the group, it is assumed that the legal users are specified in the header section.

When the ID of the legitimate user written on the IC card 30 is included in the decryption target person ID (1), ID (2), ..., For example, if ID (1) is applicable. An affirmative decision is made in step S1210, and the encrypted temporary key K (1) read from the header part of the decryption target file.
Is transmitted to the IC card 30 side (S1230), and next, it stands by to receive the decrypted temporary key (S1240).

On the IC card 30 side, step S59
0, S595 and S600 are repeated,
When the encrypted temporary key K (1) is received, step S5
When a positive determination is made in 95, the temporary key decryption processing program Pr15 decrypts the encrypted temporary key K (1) with the encryption / decryption key of the authorized user stored in the backup RAM 38. (S630).

Next, the decrypted temporary key is transferred to the information processing device 2
To (S640), and the process returns to step S500. Since the information processing device 2 has received the decrypted temporary key, an affirmative decision is made in step S1240, and the data part of the data to be decrypted is decrypted with the decrypted temporary key and stored in the storage medium. (S1250).

When the decryption process (S1200) is completed in this way, in step S1500 described above, if unencrypted data, that is, decrypted data exists in the RAM 8, a process of clearing the data is performed. Is done. In this way, the second encryption / decryption process ends, and the process returns to the initial program. In the initial program, the process of step S250 shown in FIG. 6 is performed to clear the second encryption / decryption process program existing on the RAM 8, and the process returns to step S110.

In this way, the data decoding is completed. As described above, the decryption processing program (FIGS. 9 and 11) activated by the information processing apparatus 2 of the present embodiment is
When it is not used in the decryption process, it is stored in the encrypted state by the hard disk device 18.
Therefore, it cannot be analyzed by a third party and cannot be tampered with because it cannot be analyzed.

When the authorized user decrypts the decrypted data, the program encrypted by the encryption / decryption key of the authorized user is read from the hard disk device 18, and the program is authorized. The encrypted data is decrypted by a different user's encryption / decryption key, and the decrypted program is activated to convert the encrypted data into a temporary key (corresponding to the second decryption key. That is, the temporary key is the second encryption key. But yes,
It is also the second decryption key. ) Can be decrypted to obtain decrypted data, that is, plaintext data.

Moreover, after the decryption of the encrypted data is completed, the activated program is erased. Therefore, even after the decryption process, there is no program for decryption in the plaintext state, the security of the decryption program is secured, and as a result, the safety of data is also secured. . Therefore, it is not necessary to take out the storage medium storing the program for the decryption processing from the storage location, set it in the information processing device 2 and load it for each decryption processing, and the decryption can be performed efficiently. I can work.

Further, when the decrypted data also remains in the working memory area, it is cleared, so that the safety is higher. Further, the encrypted temporary key (second decryption key) included in the encrypted data is decrypted by the encryption / decryption key of the authorized user.

By doing so, a temporary key (second decryption key) for decrypting the encrypted data is obtained,
Only a legitimate user can properly decrypt the encrypted data and obtain plaintext data. Further, in the present embodiment, the information processing device 2 as the main body device, and the information processing device 2
And an IC card 30 as an auxiliary device that is separately configured and that can be arbitrarily connected to and disconnected from the information processing device 2 in a signal manner. The program includes a program encryption storage process, a program read process, a program starting process, and a program erasing process. The IC card 30 stores the encryption / decryption key of a valid user, and the program decryption process and the key. It is configured to include a decryption processing program.

With this configuration, the IC card 30 side has a valid user encryption / decryption key, program decryption processing, and key decryption processing program. The security of the encryption / decryption key, the program of the program decryption process, and the program of the key decryption process corresponding to the person is secured, and the safety of the data is further secured.

Next, the changing process of the encrypted second encryption / decryption processing program stored in the hard disk device 18 will be described. First, the user turns on the power supply of the information processing device 2, and then sets the received magneto-optical disk in the magneto-optical disk drive 14 to set his own IC.
The card 30 is set in the IC card reader 26.

In the information processing device 2, the initial program is activated. The process in this case is step S100.
The steps from step S240 to step S240 are as described in the data encryption or decryption. The same applies to the IC card 30. Of course, since different users have different IC cards 30, the IDs received in step S170 also differ, and the encrypted second encryption / decryption processing program transmitted to the IC card 30 in step S210. Is also different.

For example, if the user's ID is IDc,
Since the encrypted second encryption / decryption processing program Pr3 is compatible, the encrypted second encryption / decryption processing program Pr3 is transmitted to the IC card 30, and as a result, step S240. The second encryption / decryption processing program Pr3 is executed as the program started by When the second encryption / decryption processing program Pr3 is started in step S240, first, the processing menu is displayed in step S1010 of the flowchart shown in FIG.

When the user selects the program change process here, the process of step S1300 is started. The program change process is shown in the flowchart of FIG. First, the edit processing of the second encryption / decryption processing program is performed (S1302). For example, the second encryption / decryption processing program expressed in hexadecimal is disassembled, expressed in assembly language, and made editable by the keyboard 12. When the editing is completed, the edited contents are assembled and converted into an executable program.

The editing process includes a process of simply replacing with another program that has already been changed. Therefore, a program created by another device can be newly loaded as the second encryption / decryption processing program. In addition, this editing process includes simply changing the data such as numerical values and character strings set in the program.

Next, the edited second encryption / decryption processing program is transmitted to the IC card 30 side (S1304), and the reception of the encrypted second encryption / decryption processing program is waited (S1306). Become. When the IC card 30 receives the second unencrypted encryption / decryption processing program while repeating steps S590, S595, and S600 on the IC card 30 side, an affirmative decision is made in step S600, and the program encryption processing is executed. By the program Pr12, I
2nd by the encryption / decryption key of the authorized user of the C card 30
Encrypts the encryption / decryption processing program of (S65
0).

Next, the encrypted second encryption / decryption processing program is transmitted to the information processing device 2 (S66).
0), the process returns to step S500. Information processing device 2
On the side, since the encrypted second encryption / decryption processing program is received, an affirmative decision is made in step S1306, and the encrypted second encryption / decryption processing program is stored in the hard disk device 18. Then, the disk address is entered in the program address Pr3 corresponding to IDc in the user ID-program address table (S1308).

Thus, the program changing process is completed. After that, the process of step S1500 is performed, and the process returns to the initial program. In the initial program, the process of step S250 is performed to clear the second encryption / decryption process program existing in the RAM 8 and the process returns to step S110.

As described above, the program changing process started by the information processing apparatus 2 of this embodiment (FIGS. 9 and 12).
Allows the authorized user to change the contents of the encrypted second encryption / decryption processing program dedicated to that user, so that different algorithms and different set values (data in the program can be changed for each user). If it is changed), it becomes possible to perform encryption / decryption.

Therefore, if the program is changed for each user, even when the encryption / decryption algorithm of one person is analyzed by a third party, the programs of all the persons are not simultaneously analyzed. Further, when the information is analyzed, the program changing process allows the authorized user to change the program, so that the security of the subsequent information can be secured.

In this embodiment, if no input operation is performed, a time-out process (S1106, S120).
6) ends the second encryption / decryption processing program,
Since the processing of step S250 is performed to clear the second encryption / decryption processing program existing in the RAM 8, even if the user leaves the information processing device 2 during the processing, It is possible to prevent analysis and falsification by the three parties. If no operation is performed in the middle of editing even in step S1302, the second encryption / decryption processing program may be terminated.

Further, the information processing device 2 side performs encryption or decryption processing of data to be encrypted having a large data amount, and the IC card 30 side encrypts or decrypts a program or temporary key having a small data amount. Since the conversion processing is performed, the overall processing can be performed at high speed. Further, the IC card 30 can be made small and inexpensive.

Further, as shown in FIG. 13, since only the temporary key is encrypted corresponding to the number of persons who are permitted to decrypt, and only one actual encrypted data exists, The amount of data to be stored, transported, or communicated does not become an enormous amount of data even if the number of persons who are permitted to decrypt is large, and the memory, storage medium, or communication time can be saved.

In this embodiment, the hard disk device 1
8 corresponds to the program encryption storage means, and step S2
10 corresponds to the processing as the program reading means, step S570 corresponds to the processing as the program decoding means, step S240 corresponds to the processing as the program starting means, and step S250 corresponds to the processing as the program erasing means. Then, step S610 corresponds to the processing as the key encryption means, step S1160 corresponds to the processing as the key addition means, and step S630 corresponds to the processing as the key decryption means.

[Others] In the above-described embodiment, the information concealment processing system encrypts data or decrypts the encrypted data to return it to plaintext data. By providing a modem and a modem, a legitimate user encrypts the data as in the above embodiment and transmits it to the other party via the communication line, and the encrypted data transmitted by the other party via the communication line,
As in the above-described embodiment, the information confidential communication system may be configured such that a legitimate user (decryption target person) decrypts and obtains it as plaintext data.

Furthermore, the information confidential communication system is provided with a document image reading device and an image recording device to constitute a facsimile device, and the image data of the document is encrypted or decrypted as in the above embodiment. It may be the target of conversion. In the above embodiment, the authorized user and the decryption target person are designated by the ID, but the target person name may be used instead of the ID, or both the ID and the target person name may be used.

In the above embodiment, the encryption / decryption key of the legitimate user stored in the IC card 30 was used for both encryption and decryption. At the time of encryption, the public key was used for decryption. A private key may be used at the time of conversion. Therefore, the other party's encryption keys K1 and K that allow the authorized user to decrypt the data.
2, ..., Kn may be public keys.

A backup RAM for the IC card 30
38, ID1, ID2, ...
, And the encryption keys K1, K2, ... Corresponding thereto are stored, but instead of directly storing such an ID and the encryption key K, the following may be performed.

That is, a secret algorithm is built in the backup RAM 38 and I
When D is input, the corresponding encryption key K may be generated by arithmetic processing according to the algorithm. With this configuration, it is possible to obtain an encryption key from a large number of IDs with only one algorithm without storing a plurality of encryption keys. Saves money.

The configuration for generating a key from this ID by arithmetic processing is also applied to the encryption / decryption key of the legitimate user of the IC card 30 so that the encryption / decryption key is derived from the legitimate user's ID. May be generated. In addition, IC card 30
Stores programs and keys in the backup RAM 38, the switch that is turned off when the exterior is opened in conjunction with the exterior is equipped with a backup power supply and a backup RAM 3.
It is more preferable from the viewpoint of safety that the program, the key and the like will be erased when the outer case is opened, if it is used between No. 8 and 7. Also,
Instead of the backup RAM 38, an EEPROM may store programs, keys, and the like. In this case, the switch that turns on when the exterior is opened in conjunction with the exterior is connected to the power supply and the EEP.
If it is provided between the ROM and the ROM, a current flows when the exterior is opened, and the programs, keys, etc. are erased.

In the above embodiment, the initial program may be stored in the ROM 6 instead of the hard disk device 18.

[Brief description of drawings]

FIG. 1 is a block diagram of an information processing apparatus that constitutes an embodiment of the present invention.

FIG. 2 is a block diagram of an IC card that constitutes an embodiment of the present invention.

FIG. 3 is an explanatory diagram of a storage arrangement of programs and data in the information processing device.

FIG. 4 is an explanatory diagram of storage arrangement of programs and data in an IC card.

FIG. 5 is a flowchart of an initial program in the information processing device.

FIG. 6 is a flowchart of an initial program in the information processing device.

FIG. 7 is a flowchart of processing on the IC card side.

FIG. 8 is a flowchart of processing on the IC card side.

FIG. 9 is a flowchart of second encryption / decryption processing.

FIG. 10 is a flowchart of an encryption process in the second encryption / decryption process.

FIG. 11 is a flowchart of a decoding process in the second dark / decoding process.

FIG. 12 is a flowchart of a program changing process in the second encryption / decryption process.

FIG. 13 is an explanatory diagram of a configuration of encrypted data.

[Explanation of symbols]

2 ... Information processing device 4 ... CPU 6 ... ROM
8 ... RAM 10 ... Backup RAM 12 ... Keyboard 14 ... Magneto-optical disk drive 16 ... CRT display 18 ... Hard disk device 20 ... Floppy disk drive 22 ... I / O 24 ... Bus 26 ... IC card reader 30 ... IC card 32 ... CPU 34 ... ROM
36 ... RAM 38 ... Backup RAM 40 ... I / O 42 ...
bus

Claims (21)

[Claims] 1. An encryption system for encrypting data by a program-based encryption process, and a program encryption storage means for storing the program in a state of being encrypted by a first encryption key corresponding to a user. A program reading unit that reads the program encrypted by the first encryption key corresponding to the user from the program encryption storage unit; and a user who reads the program read by the program reading unit. The program decryption means for decrypting with the decryption key corresponding to, and the program decrypted by the program decrypting means are activated to encrypt the data to be encrypted with the second encryption key. The program starting means to be the encrypted data, and the encryption of the data to be encrypted is completed by the program starting means. , Encryption system, characterized by comprising a program erase means for erasing the program of the activating object is decoded. 2. A key encryption means for encrypting the second encryption key with a third encryption key, and the second encryption key encrypted with the key encryption means, The encryption system according to claim 1, further comprising a key addition unit that adds the encrypted data to the encrypted data. 3. The encryption system according to claim 2, wherein the key addition means is realized as a function of the program. 4. The encryption system according to claim 1, wherein the program obtains the second encryption key by calculation. 5. A main body device and an auxiliary device which is formed separately from the main body device and can be arbitrarily connected to or disconnected from the main body device in a signal manner. Is provided with the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores a decryption key corresponding to the user and the program decryption. The encryption system according to claim 1, further comprising means. 6. A main body device and an auxiliary device which is formed separately from the main body device and which can be arbitrarily connected to or disconnected from the main body device by a signal. Includes the program encryption storage means, the program reading means, the program decryption means, the program starting means, and the program erasing means, and the auxiliary device stores the third encryption key, and The encryption system according to claim 3, further comprising a key encryption means. 7. A main body device and an auxiliary device which is formed separately from the main body device and can be arbitrarily connected to or disconnected from the main body device in a signal manner. Includes the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores the decryption key and the third encryption key corresponding to the user. The encryption system according to claim 3, further comprising the program decryption means and the key encryption means. 8. The encryption system according to claim 6, wherein the attached device stores the third encryption key as a list corresponding to a management code of a person who permits decryption. 9. The management code corresponding to the case where the auxiliary device does not directly store the decryption key or the third encryption key and the decryption key or the third encryption key is required. The encryption system according to claim 5, wherein the decryption key or the third encryption key is generated by a calculation using. 10. The program has a function of stopping its own processing and executing the processing of the program erasing means when the user does not perform the next input operation within a predetermined time. ~ 9 encryption system. 11. A decryption system for decrypting encrypted data by a decryption process based on a program, wherein the program encryption storage stores the program in a state encrypted by a first encryption key corresponding to a user. Means for reading the program encrypted by the first encryption key corresponding to the user from the program encryption storage means; and the program read by the program read means, A program decryption unit that decrypts with the decryption key corresponding to the user, and the program decrypted by the program decryption unit is activated to decrypt the encrypted data with the second decryption key. And program decryption of the encrypted data is completed by the program activation means. That the decoding system characterized by comprising a program erase means for erasing the program of the activating object is decoded. 12. The key decryption means for decrypting the encrypted second decryption key contained in the encrypted data with a decryption key corresponding to a user. Decryption system. 13. A main body device and an auxiliary device which is formed separately from the main body device and can be arbitrarily connected or disconnected in signal with respect to the main body device. Is provided with the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores a decryption key corresponding to the user and the program decryption. The decoding system according to claim 11, comprising means. 14. A main body device, and an auxiliary device which is formed separately from the main body device and can be arbitrarily connected to or disconnected from the main body device in a signal manner. Is provided with the program encryption storage means, the program reading means, the program decryption means, the program starting means, and the program erasing means, and the auxiliary device stores a decryption key corresponding to the user. The decryption system according to claim 12, further comprising the key decryption means. 15. A main body device and an auxiliary device which is formed separately from the main body device and can be arbitrarily connected to or disconnected from the main body device in a signal manner. Is provided with the program encryption storage means, the program reading means, the program starting means, and the program erasing means, and the auxiliary device stores a decryption key corresponding to the user and the program decryption. A decryption system according to claim 12, comprising means and said key decryption means. 16. The auxiliary device does not directly store the decryption key, and when the decryption key is required, the decryption key is generated by an operation using a corresponding management code. The decoding system according to any one of claims 13 to 15. 17. The program has a function of stopping its own processing and executing the processing of the program erasing means when the user does not perform the next input operation within a predetermined time. Decoding system according to any one of 16 to 16. 18. An information security processing system in which the encryption system according to any one of claims 1 to 10 and the decryption system according to any one of claims 11 to 17 are combined. 19. The encryption system according to claim 1, further comprising a transmission means for transmitting the encrypted data to the other party via a communication line. 20. The decryption system according to claim 11, further comprising receiving means for receiving the encrypted data via a communication line. 21. An information secret communication system in which the encryption system according to claim 19 and the decryption system according to claim 20 are combined.