Device, method, and system for encrypted communication by using encryption key

Patent metadata

Field	Value
Publication number	US-9356780-B2
Application number	US-201414189032-A
Country	US
Kind code	B2
Filing date	Feb 25, 2014
Priority date	Jun 11, 2013
Publication date	May 31, 2016
Grant date	May 31, 2016

Abstract

A communication device assigns a key taking the degree of priority of applications into account in a case where a key generation/sharing system in which a plurality of applications are connected to a node is not able to realize key assignment that satisfies the key rates requested by the plurality of applications. For example, the device realizes a method of assigning an application key that takes the degree of priority into account according to which control is performed in such a way that the key rate requested by an important application is preferentially satisfied.

First claim

What is claimed is:

1. A communication device, comprising:
a memory configured to store therein a degree of priority and a first requested volume for each of a plurality of applications that use an application key, the plurality of applications connected to one or more external devices, the degree of priority being determined in advance based on a user's authority or the type of application, the first requested volume indicating a volume of the application key requested by each of the plurality of applications, the application key being shared with the one or more external devices over one or more links that are encrypted with a link key, the link key being shared by using a quantum key distribution technique;
circuitry configured to determine a volume of the application key to be assigned to each application in such a way
that a first total value that is a total of the volume of the application key to be assigned to the application is equal to or smaller than a second total value that is a total value of a volume of the application key assignable,
that the application key of the first requested volume is preferentially assigned to the application whose degree of priority is higher, and
that the application key of the first requested volume or less is assigned to the application whose degree of priority is lower; and
the circuitry further configured to assign the application key to the plurality of applications accordingly, wherein two or more of the applications are connected to a single one of the one or more external devices.

2. The device according to claim 1 , wherein
the memory further stores therein a second requested volume that indicates the volume of the application key requested by the application and that is smaller than the first requested volume, and
the circuitry determines the volume of the application key to be assigned to each application when a total of the second requested volume is smaller than the second total value in such a way
that the first total value is equal to or smaller than the second total value,
that the application key of the second requested volume is preferentially assigned to the application whose degree of priority is higher, and
that the application key of the second requested volume or less is assigned to the application whose degree of priority is lower.

3. The device according to claim 1 , wherein
the memory further stores therein a second requested volume that is a requested volume of the application key requested by the application and that is smaller than the first requested volume, and
the circuitry determines the volume of the application key to be assigned to each application in such a way
that the first total value is equal to or smaller than the second total value,
that the application key of the first requested volume is preferentially assigned to the application whose degree of priority is higher, and
that the application key of the second requested volume or less is assigned to the application whose degree of priority is lower.

4. The device according to claim 1 , wherein the circuitry is further configured to notify the application whose volume of the application key has been changed of the volume of the application key being changed.

5. The device according to claim 1 , wherein the memory stores therein the degree of priority and the first requested volume received from the application.

6. The device according to claim 1 , wherein the circuitry determines the volume of the application key to be assigned to each application, at least one of when the application is connected, when the first requested volume requested by the application is changed, and when the second total value is changed.

7. A communication method implemented in a communication device, comprising:
storing, by a memory of the communication device, a degree of priority and a first requested volume for each of a plurality of applications that use an application key, the plurality of applications connected to one or more external devices, the degree of priority being determined in advance based on a user's authority or the type of application, the first requested volume indicating a volume of the application key requested by each of the plurality of applications, the application key being shared with the one or more external devices over one or more links that are encrypted with a link key, the link key being shared by using a quantum key distribution technique;
determining, by at least one processor of the communication device, a volume of the application key to be assigned to each application in such a way
that a first total value that is a total of the volume of the application key to be assigned to the application is equal to or smaller than a second total value that is a total value of a volume of the application key assignable,
that the application key of the first requested volume is preferentially assigned to the application whose degree of priority is higher, and
that the application key of the first requested volume or less is assigned to the application whose degree of priority is lower; and
the circuitry further configured to assign the application key to the plurality of applications accordingly, wherein two or more of the applications are connected to a single one of the one or more external devices.

8. A communication system, comprising:
a plurality of applications that use an application key, the plurality of applications connected to one or more external devices, the application key being shared with the one or more external devices over one or more links that are encrypted with a link key, the link key being shared by using a quantum key distribution technique;
a communication device for providing the application key to the one or more applications, wherein
the communication device includes
a memory that stores therein a degree of priority and a first requested volume for each of the plurality of applications, the degree of priority being determined in advance based on a user's authority or the type of application, the first requested volume indicating a volume of the application key requested by each of the plurality of applications; and
circuitry configured to determine a volume of the application key to be assigned to each application in such a way
that a first total value that is a total of the volume of the application key to be assigned to the application is equal to or smaller than a second total value that is a total value of a volume of the application key assignable,
that the application key of the first requested volume is preferentially assigned to the application whose degree of priority is higher, and
that the application key of the first requested volume or less is assigned to the application whose degree of priority is lower; and
the circuitry further configured to assign the application key to the plurality of applications accordingly, wherein two or more of the applications are connected to a single one of the one or more external devices.

Assignees

• Toshiba Kk

Inventors

• Tanizawa Yoshimichi
• Sato Hideaki
• Takahashi Ririka
• Kawamura Shinichi
• Murai Shinya

Classifications

• H04L9/0852 Primary

  Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03) · CPC title

• H04L63/06 Primary

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title