Cryptographic communication system and cryptographic communication method

Patent metadata

Field	Value
Publication number	US-9363082-B2
Application number	US-201213495064-A
Country	US
Kind code	B2
Filing date	Jun 13, 2012
Priority date	Jun 20, 2011
Publication date	Jun 7, 2016
Grant date	Jun 7, 2016

Abstract

Provided is a cryptographic communication system including a first semiconductor device and a second semiconductor device. The first semiconductor device includes a common key generation unit that generates a common key CK(a) by using a unique code UC(a) and correction data CD(a), and an encryption unit that encrypts the common key CK(a) generated in the common key generation unit by using a public key PK(b) of the second semiconductor device. The second semiconductor device includes a secret key generation unit that generates a secret key SK(b) by using a unique code UC(b) and correction data CD(b), and a decryption unit that decrypts the common key CK(a) encrypted in the encryption unit by using the secret key SK(b).

First claim

What is claimed is:

1. A cryptographic communication system including a first semiconductor device and a second semiconductor device,
the first semiconductor device comprising:
a common key generation processor unit configured to generate a common key based on a first unique code having a value unique to the first semiconductor device and first correction data for correcting the first unique code, the first unique code including one or more bits with a high error rate and one or more bits with a low error rate, the first correction data including a bit mask for masking the high error rate bits and an error correction code for correcting the low error rate bits, the common key generation unit being further configured to:
mask the first unique code using the bit mask,
eliminate the masked bits from the masked first unique code,
error-correct the masked first unique code using the error correction code, and
create the common key from the error-corrected first unique code; and

an encryption processor unit configured to encrypt the common key generated in the common key generation unit by using a public key of the second semiconductor device, and

the second semiconductor device comprising:
a secret key generation processor unit configured to generate a secret key of the second semiconductor device based on a second unique code having a value unique to the second semiconductor device and second correction data for correcting the second unique code; and
a decryption processor unit configured to decrypt the common key encrypted in the encryption unit by using the secret key,

wherein the first and second semiconductor devices are vehicle-mounted microcomputers, and
one of the first and second semiconductor devices is a car navigation system.

2. The cryptographic communication system according to claim 1 , wherein the first semiconductor device and the second semiconductor device communicate using the common key.

3. The cryptographic communication system according to claim 1 , wherein the first correction data further includes an operation parameter for performing a specified operation on the error-corrected first unique code.

4. The cryptographic communication system according to claim 3 , wherein the common key generation processor unit is further configured to perform the specified operation on the error-corrected first unique code.

5. The cryptographic communication system according to claim 4 , wherein the specified operation is a NOT operation.

6. The cryptographic communication system according to claim 1 , wherein the first and second semiconductor devices are configured using secure microcomputers.

7. The cryptographic communication system according to claim 1 , wherein the first and second semiconductor devices are configured using general-purpose microcomputers.

8. The cryptographic communication system according to claim 1 , wherein one of the first and second semiconductor devices is a fault diagnostic unit.

9. The cryptographic communication system according to claim 1 , wherein the common key generation processor unit is further configured to left-justify the masked first unique code after the masked bits have been eliminated and before the masked first unique code is error-corrected.

10. The cryptographic communication system according to claim 1 ,
wherein the second unique code includes one or more bits with a high error rate and one or more bits with a low error rate,
wherein the second correction data includes a bit mask for masking the high error rate bits and an error correction code for correcting the low error rate bits, and
wherein the secret key generation processor unit is further configured to:
mask the second unique code using the bit mask from the second correction data,
eliminate the masked bits from the masked second unique code,
error-correct the masked second unique code using the error correction code from the second correction data, and
create the secret key from the error-corrected second unique code.

11. The cryptographic communication system according to claim 10 , wherein the secret key generation processor unit is further configured to left-justify the masked second unique code after the masked bits have been eliminated and before the masked second unique code is error-corrected.

12. The cryptographic communication system according to claim 10 , wherein the second correction data further includes an operation parameter for performing a specified operation on the error-corrected second unique code.

13. The cryptographic communication system according to claim 12 , wherein the secret key generation processor unit is further configured to perform the specified operation on the error-corrected second unique code.

14. The cryptographic communication system according to claim 13 , wherein the specified operation is a NOT operation.

15. A cryptographic communication method using a first semiconductor device and a second semiconductor device, comprising:
in the first semiconductor device,
generating a common key based on a first unique code having a value unique to the first semiconductor device and first correction data for correcting the first unique code, the first unique code including one or more bits with a high error rate and one or more bits with a low error rate, the first correction data including a bit mask for masking the high error rate bits and an error correction code for correcting the low error rate bits, said generating including:
masking the first unique code using the bit mask,
eliminating the masked bits from the masked first unique code,
error-correcting the masked first unique code using the error correction code, and
creating the common key from the error-corrected first unique code;

encrypting the common key by using a public key of the second semiconductor device; and in the second semiconductor device,
generating a secret key of the second semiconductor device based on a second unique code having a value unique to the second semiconductor device and second correction data for correcting the second unique code; and
decrypting the encrypted common key by using the secret key

wherein the first and second semiconductor devices are vehicle-mounted microcomputers, and
one of the first and second semiconductor devices is a car navigation system.

16. The cryptographic communication method according to claim 15 , further comprising:
communicating, between the first semiconductor device and the second semiconductor device, using the common key.

17. The cryptographic communication method according to claim 15 , wherein the first correction data further includes an operation parameter for performing a specified operation on the error-corrected first unique code.

18. The cryptographic communication method according to claim 17 , further comprising performing the specified operation on the error-corrected first unique code.

Assignees

• Shiota Shigemasa
• Furuta Shigeru
• Hirokawa Masayuki
• Yamazaki Akira
• Oshida Daisuke
• Renesas Electronics Corp

Inventors

• Shiota Shigemasa
• Furuta Shigeru
• Hirokawa Masayuki
• Yamazaki Akira
• Oshida Daisuke

Classifications

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L2209/84

  Vehicles · CPC title

• H04L2209/04

  Masking or blinding · CPC title

• H04L9/3278

  using physically unclonable functions [PUF] · CPC title

• H04L2209/80

  Wireless · CPC title