Communication apparatus and cryptographic processing system

Patent metadata

Field	Value
Publication number	US-11012230-B2
Application number	US-201715815550-A
Country	US
Kind code	B2
Filing date	Nov 16, 2017
Priority date	Dec 13, 2016
Publication date	May 18, 2021
Grant date	May 18, 2021

Abstract

A cryptographic communication method using a dynamically-generated private key is provided. A signal generation unit outputs a second signal obtained by giving an error in a predetermined range to a signal obtained based on a first signal. An error correction generation unit outputs a third signal obtained based on the second signal and auxiliary information for correcting an error included in the second signal. A private-key generation unit generates a first private key based on the third signal. An encryption calculation unit outputs an encrypted signal obtained by encrypting a fourth signal based on the first private key.

First claim

What is claimed is:

1. A communication apparatus comprising:
a memory storing program instructions; and
a processor executing the stored program instructions, and configured to provide:
output a second signal obtained by giving an error in a predetermined range to a signal obtained based on a first signal;
output a third signal obtained based on the second signal and auxiliary information for correcting an error included in the second signal;
generate a first private key based on the third signal;

output an encrypted signal obtained by encrypting a fourth signal based on the first private key; and
decrypt the encrypted signal based on a fourth private key and thereby generate a decrypted signal.

2. The communication apparatus according to claim 1 , wherein the generate the first private key further comprises:
to generate a fifth signal from the third signal, the fifth signal having a value that cannot be distinguished from a truly random number; and
to separate the first private key from the fifth signal and output the separated first private key.

3. The communication apparatus according to claim 2 , further comprising to generate authentication information based on a private key different from the first private key and the encrypted signal and output the generated authentication information; and
to separate the private key from the fifth signal and

output the separated private key.

4. The communication apparatus according to claim 3 , wherein
to separate the first private key includes separate second and third private keys from the fifth signal and outputs the separated second and third private keys, and
the generate authentication information comprises:
a multiplier configured to generate a sixth signal by multiplying the encrypted signal by the second private key; and
an adder configured to generate the authentication information by adding the third private key and the sixth signal.

5. The communication apparatus according to claim 1 , wherein the output the encrypted signal includes output an exclusive-OR of the fourth signal and the first private key as the encrypted signal.

6. The communication apparatus according to claim 1 , wherein the first signal is input from outside of the communication apparatus.

7. The communication apparatus according to claim 1 , further comprising a storage memory storing the first signal, wherein
the first signal is input from the storage memory.

8. The communication apparatus according to claim 4 , wherein
when the fourth signal is input to the multiplier,
the multiplier generates the sixth signal by multiplying the fourth signal by the second private key, and
the adder generates the authentication information by adding the third private key and the sixth signal.

9. The communication apparatus according to claim 4 , wherein
when the communication apparatus is a first communication apparatus,
the first communication apparatus further comprises executing the stored program instructions, and configured to provide:
upon receiving auxiliary information and an encrypted signal from a second communication apparatus having the same configuration as that of the communication apparatus according to claim 4 , generate an eighth signal by correcting an error in a seventh signal based on the auxiliary information received from the second communication apparatus, the seventh signal being generated in advance by supplying the first signal to a signal generation unit of the second communication apparatus; and

generate a decrypted signal by decrypting the encrypted signal received from the second communication apparatus,
generate a fourth private key based on the eighth signal, and
generate the decrypted signal by decrypting the encrypted signal received from the second communication apparatus based on the fourth private key.

10. The communication apparatus according to claim 1 , wherein the output the second signal generates the second signal by supplying the first signal to a physically unclonable function and thereby giving the error in the predetermined range to the first signal.

11. The communication apparatus according to claim 1 , wherein the output a second signal comprises:
to generate a noise in a predetermined range; and
to generate the second signal by giving the noise generated by the noise generator to the first signal.

12. The communication apparatus according to claim 11 , wherein the to generate the second signal outputs an exclusive-OR of the noise generated and the first signal as the second signal.

13. A communication apparatus comprising:
a memory storing program instructions; and
a processor executing the stored program instructions, and configured to:
correct an error in a seventh signal based on auxiliary information for correcting an error in a second signal and thereby generate an eighth signal, the second signal being obtained by giving an error in a predetermined range to a signal obtained based on a first signal, the seventh signal being generated in advance by giving an error in a predetermined range to a signal obtained based on the first signal;
generate a fourth private key based on the eighth signal; and
decrypt an encrypted signal based on the fourth private key and thereby generate a decrypted signal, the encrypted signal being generated by encrypting a fourth signal by a first private key generated based on the second signal.

14. The communication apparatus according to claim 13 , wherein the generate the fourth private key comprises:
to generate a ninth signal from the eighth signal output from the error correction decryptor, the ninth signal having a value that cannot be distinguished from a truly random number; and
to separate the fourth private key from the ninth signal and output the separated fourth private key.

15. The communication apparatus according to claim 14 , further comprising:
generate a comparison signal based on a private key different from the fourth private key and the encrypted signal; and
compare authentication information with the comparison signal, the authentication information being generated based on a private key different from the first private key and the encrypted signal, wherein
generate the decrypted signal when the comparison signal matches the authentication information in the comparator.

16. The communication apparatus according to claim 15 , wherein
the separate the fourth private key includes separate fifth and sixth private keys from the ninth signal and outputs the separated fifth and sixth private keys, and
the generate a comparison signal comprises:
a multiplier configured to generate a tenth signal by multiplying the encrypted signal by the fifth private key; and
an adder configured to generate the comparison signal by adding the sixth private key and the tenth signal.

17. The communication apparatus according to claim 13 , further comprising output wherein the decryption calculator outputs an exclusive-OR of the encrypted signal and the fourth private key as the decrypted signal.

18. A cryptographic processing system comprising a first communication apparatus configured to encrypt a signal, and a second communication apparatus configured to decrypt a signal, wherein
the first communication apparatus comprises:
a circuit configured to provide:
a signal generation unit configured to output a second signal obtained by giving an error in a predetermined range to a signal obtained based on a first signal;
an error correction generation unit configured to output a third signal obtai

Assignees

• Renesas Electronics Corp

Inventors

• Moriyama Daisuke

Classifications

• G09C1/00 Primary

  Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00) · CPC title

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title

• H04L9/3278

  using physically unclonable functions [PUF] · CPC title

• H04L2209/24

  Key scheduling, i.e. generating round keys or sub-keys for block encryption · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title