Cryptographic communication path monitoring system and monitoring method

Patent metadata

Field	Value
Publication number	US-12425199-B2
Application number	US-202318445067-A
Country	US
Kind code	B2
Filing date	Mar 29, 2023
Priority date	Mar 29, 2022
Publication date	Sep 23, 2025
Grant date	Sep 23, 2025

Abstract

According to one embodiment, a first key sharing module outputs a common key, a first cryptographic module encrypts plaintext data and outputs encrypted data. A first transmission system transmits the encrypted data. A second transmission system transmits the common key. A monitor device is disposed in the first transmission system, and receives transmission condition data from a first base and reception condition data from a second base, and performs matching of the transmission condition data and the reception condition data.

First claim

What is claimed is:

1. A cryptographic communication path monitoring system, comprising:
a first base comprising a first processor configured to;
output a common key;
encrypt plaintext data using the common key and to output encrypted data;
transmit the encrypted data from the first base to a second base via a first transmission system;
transmit the common key the second base via a second transmission system; and

a monitor device disposed in the first transmission system, and comprising a second processor configured to:
receive, in a predetermined period, at least transmission condition data from the first base and reception condition data from the second base and perform matching of the transmission condition data and the reception condition data;
upon receipt of transmission condition data D 11 from the first base, reception condition data D 12 from the second base, transmission condition data D 13 from the second base, and reception condition data D 14 from a third base, perform matching of at least D 11 =D 12 , and D 13 =D 14 , and “D 11 =D 12 ”=“D 13 =D 14 ”; and
if aforementioned “D 11 =D 12 ”=“D 13 =D 14 ”, transmit a warning to at least the first base.

2. The cryptographic communication path monitoring system of claim 1 , wherein
a hash value is used for the transmission condition data and the reception condition data.

3. The cryptographic communication path monitoring system of claim 1 , wherein
the monitor device is arranged in an Internet cloud.

4. The cryptographic communication path monitoring system of claim 1 , wherein
the monitor device is arranged in an Internet cloud together with a server, and the server stores telephone number information of at least a plurality of bases, where the information is usable for preparation of the common key.

5. The cryptographic communication path monitoring system of claim 1 , wherein
the predetermined period is set to be immediately after setting of a new route for transmission of the encrypted data or a few minutes after start of transmission of the encrypted data through the new route.

6. The cryptographic communication path monitoring system of claim 1 , wherein
the first base is arranged in a first private area, and the second base is arranged in a second private area.

7. A cryptographic communication path monitoring method comprising:
outputting, by a first base, a common key;
encrypting, by the first base, plaintext data using the common key and outputting encrypted data;
transmitting, by the first base, the encrypted data to a second base via a first transmission system;
transmitting, by the first base, the common key from the first base to the second base via a second transmission system;
receiving, by a monitor device in the first transmission system, in a predetermined period, at least transmission condition data from the first base and reception condition data from the second base, and performing matching of the transmission condition data and the reception condition data;
upon receipt of transmission condition data D 11 from the first base, reception condition data D 12 from the second base, transmission condition data D 13 from the second base, and reception condition data D 14 from a third base, performing, by the monitor device, matching of at least D 11 =D 12 , and D 13 =D 14 , and “D 11 =D 12 ”=“D 13 =D 14 ”; and
if “D 11 =D 12 ”=“D 13 =D 14 ”, transmitting, by the monitor device, a warning to at least the first base.

Assignees

• Toshiba Kk
• Toshiba Digital Solutions Corp

Inventors

• Nakazawa Mai
• Matsuo Masakatsu
• Kobayashi Manabu
• Ando Koki

Classifications

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L9/085 Primary

  Secret sharing or secret splitting, e.g. threshold schemes · CPC title

• G06F21/606 Primary

  by securing the transmission between two devices or processes · CPC title