Host device and authentication method for host device

Patent metadata

Field	Value
Publication number	US-2015326397-A1
Application number	US-201514802656-A
Country	US
Kind code	A1
Filing date	Jul 17, 2015
Priority date	May 25, 2012
Publication date	Nov 12, 2015
Grant date	—

Abstract

A first data generation unit generates identification key information (FKey) that may be decrypted from the identification key information (IDKey) using key management information (FKB) read from an authenticatee. A decryption unit decrypts encrypted secret identification information (E-SecretID) using the identification key information (FKey) to generate secret identification information (SecretID). A second data generation unit generates a first session key (Skey) using the first key information (Hkey) and a random number. A one-way conversion unit performs a one-way conversion process on the secret identification information (SecretID) using the generated first session key (SKey) to generate first one-way conversion data (Oneway-ID).

First claim

1 . (canceled)

2 . A host device configured to perform an authentication process, the host apparatus comprising:
an interface configured to send data to an external device; a storage configured to store host device key data and host device key certificate; and an authentication unit that performs a key exchange process with an external device via the interface to output medium device key certificate ID; an ID combining unit that combines a public controller unique ID and the medium device key certificate ID to output a unique ID; a random number generator that generates a random number; a one-way converter that generates medium unique key using one-way function to which the unique ID and a medium key is input; a first encryption unit that encrypts a title key using the medium unique key; and a second encryption unit that encrypts content data using the title key.

3 . The host apparatus according to claim 2 , wherein the host device key data is a private key of a public key cryptosystem, and the host device certificate is a public key that forms a pair with the host device key data.

4 . The host apparatus according to claim 2 , wherein the ID combining unit uses one-way function to generate the unique ID.

5 . The host apparatus according to claim 2 , wherein the authentication unit performs the key exchange process based on elliptic curve cryptography.

6 . The host apparatus according to claim 5 , wherein the authentication unit transmits the host device key certificate with an first random number to the external device.

7 . The host apparatus according to claim 6 , wherein the authentication unit verifies signature received from the external device and generates a second random number for the key exchange process based on elliptic curve cryptography.

Assignees

• Toshiba Kk

Inventors

• Nagai Yuji
• Kato Taku
• Matsushita Tatsuyuki
• Matsukawa Shinichi
• Tsumagari Yasufumi

Classifications

• H04L9/0838

  Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061) · CPC title

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/0869 Primary

  involving random numbers or seeds · CPC title

• H04L2209/605

  Copy protection · CPC title