Information processing device and information processing system

Patent metadata

Field	Value
Publication number	US-12494903-B2
Application number	US-202218729287-A
Country	US
Kind code	B2
Filing date	Nov 29, 2022
Priority date	Jan 27, 2022
Publication date	Dec 9, 2025
Grant date	Dec 9, 2025

Abstract

In response to a request from a first device ( 100 ), a management unit ( 300 ) transmits a data encryption key to the first device ( 100 ) through a secure environment between the management unit ( 300 ) and the first device ( 100 ) when integrity of a first application running in an isolated calculation area is verified. The first device ( 100 ) encrypts target data using the data encryption key and transmits encrypted target data to a second device ( 200 ) through the first application. In response to a request from the second device ( 200 ), the management unit ( 300 ) transmits a data encryption key to the second device ( 200 ) through a secure environment between the management unit ( 300 ) and the second device ( 200 ) when integrity of a second application running in an isolated calculation area is verified. The second device ( 200 ) decrypts the encrypted target data using the data encryption key through the second application.

First claim

The invention claimed is:

1 . An information processing system, comprising:
a management device; a first information processing device that includes an isolated calculation area in which a first application is running; and a second information processing device that includes an isolated calculation area in which a second application is running, wherein the management device includes processing circuitry configured to:
perform communication with each of the first application and the second application; and
generate and store a data key for encrypting target data transmitted and received between the first application and the second application,
wherein when the processing circuitry receives a data encryption key use request from the first application or the second application,
the processing circuitry encrypts the data key by using a public key included in the data encryption key use request, to generate an encrypted data key, and
the processing circuitry sends the encrypted data key to either application sending the data encryption key use request,
wherein each of the first application and the second application is configured to:
send the data encryption key use request to the management device when an encrypted target data is received from the other application; and
decrypt the encrypted data key received from the management device to obtain a decrypted data key, and decrypts the encrypted target data by using the decrypted data key.

2 . An information processing device, comprising:
processing circuitry configured to communicate with each of a first application running in an isolated calculation area formed in a first information processing device and a second application running in an isolated calculation area formed in a second information processing device; and generate and store a data key for encrypting target data transmitted and received between the first application and the second application, wherein when a first data encryption key use request is received from the first application, the processing circuitry encrypts the data key by using a public key included in the first data encryption key use request, to generate a first encrypted data key, and the processing circuitry sends the first encrypted data key to the first application, and wherein when a second data encryption key use request is received from the second application after the first application sends the second application an encrypted target data which the first application encrypted the target data by using the data key, the processing circuitry encrypts the data key by using a public key included in the second data encryption key use request, to generate a second encrypted data key, and the processing circuitry sends the second encrypted data key to the second application.

Assignees

• Ntt Docomo Inc

Inventors

• Hasegawa Keita
• NOZAWA Kazuma
• DOUMEN Takuya
• Nakagawa Tomohiro
• Aono Hiroshi
• Terada Masayuki

Classifications

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L9/0822

  using key encryption key · CPC title

• H04L9/0827

  involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18) · CPC title

• G06F21/6236

  between heterogeneous systems · CPC title

• H04L63/1433

  Vulnerability analysis · CPC title