Encryption key generating apparatus and computer program product

Patent metadata

Field	Value
Publication number	US-9537653-B2
Application number	US-201213710694-A
Country	US
Kind code	B2
Filing date	Dec 11, 2012
Priority date	Dec 16, 2011
Publication date	Jan 3, 2017
Grant date	Jan 3, 2017

Abstract

According to an embodiment, an encryption key generating apparatus includes a converting unit to convert input data using a physically unclonable function and outputs output data; a memory to store a plurality of pattern data, each of which is a partial data in the output data indicated by one of a plurality of index data; a generating unit to generates an encryption key on the basis of the plural of index data; and a comparing unit to compare the output data with the plural of pattern data to detect plural of locations in the output data at which partial data similar to the plural of pattern data is present. The generating unit reproduces, as the plural of index data, the plural of locations detected by the comparing unit and reproduces the encryption key on the basis of the plural of index data that have been reproduced.

First claim

What is claimed is:

1. An encryption key generating apparatus that generates an encryption key during an encryption key setting operation and reproduces the encryption key during an encryption key reproducing operation, the apparatus comprising:
a converting circuit configured to convert input data with the use of a physically unclonable function and output data;
a confidential data generating circuit configured to generate confidential data that indicates an amount of cyclic shift applied to the output data;
an output shifting circuit configured to cyclically shift the output data by the amount of cyclic shift indicated by the confidential data;
a memory control circuit to store the cyclically shifted output data as pattern data in a memory;
a comparing circuit configured to, while cyclically shifting the output data, compare reference data, which is obtained in a sequential manner by cyclically bit-shifting the output data by one bit each time, with the pattern data and determine whether or not the reference data is similar to the pattern data so as to detect an amount of cyclic shift at the time when the reference data is similar to the pattern data, wherein
on the basis of the amount of cyclic shift detected by the comparing circuit, the confidential data is reproduced;
during the encryption key setting operation using the converting circuit, the confidential data generating circuit, the output shifting circuit, and the memory control circuit, the apparatus generates one encryption key by using a total round number, R, of confidential data that are generated through R times of round operations and stores R number of pattern data in the memory, and

during the encryption key reproducing operation using the converting circuit and the comparing circuit, the apparatus reproduces the one encryption key by using the R number of confidential data that are reproduced through the R times of round operations.

2. A computer program product comprising a non-transitory computer-readable medium containing a computer program for generating an encryption key during an encryption key setting operation and reproducing the encryption key during an encryption key reproducing operation, the computer program causes a computer to execute:
converting input data with the use of a physically unclonable function and outputting output data;
generating confidential data that indicates an amount of cyclic shift applied to the output data;
cyclically shifting the output data by the amount of cyclic shift indicated by the confidential data;
storing the cyclically shifted output data as pattern data in a memory; and
comparing, while cyclically shifting the output data, reference data, which is obtained in a sequential manner by cyclically bit-shifting the output data by one bit each time, with the pattern data and determining whether or not the reference data is similar to the pattern data so as to detect an amount of cyclic shift at the time when the output data is similar to the pattern data, wherein
on the basis of the amount of cyclic shift detected at the comparing, the confidential data is reproduced;
during the encryption key setting operation including the converting, the generating of the confidential data, the cyclically shifting, and the storing, the computer program causes the computer to execute generating one encryption key by using a total round number, R, of confidential data that are generated through R times of round operations and storing R number of pattern data in the memory, and
during the encryption key reproducing operation including the converting and the comparing, the computer program causes the computer to execute reproducing the one encryption key by using the R number of confidential data that are reproduced through the R times of round operations.

3. An encryption key generating apparatus that generates an encryption key during an encryption key setting operation and reproduces the encryption key during an encryption key reproducing operation, the apparatus comprising:
processing circuitry configured to operate as:
a converting unit configured to convert input data with the use of a physically unclonable function and output data;
a confidential data generating unit configured to generate confidential data that indicates an amount of cyclic shift applied to the output data;
an output shifting unit configured to cyclically shift the output data by the amount of cyclic shift indicated by the confidential data;
a memory controller to store the cyclically shifted output data as pattern data in a memory; and
a comparing unit configured to, while cyclically shifting the output data, compare reference data, which is obtained in a sequential manner by cyclically bit-shifting the output data by one bit each time, with the pattern data and determine whether or not the reference data is similar to the pattern data so as to detect an amount of cyclic shift at the time when the reference data is similar to the pattern data, wherein
on the basis of the amount of cyclic shift detected by the comparing unit, the confidential data is reproduced;
during the encryption key setting operation using the converting unit, the confidential data generating unit, the output shifting circuit unit, and the memory controller, the apparatus generates one encryption key by using a total round number, R, of confidential data that are generated through R times of round operations and stores R number of pattern data in the memory, and
during the encryption key reproducing operation using the converting unit and the comparing unit, the apparatus reproduces the one encryption key by using the R number of confidential data that are reproduced through the R times of round operations.

Assignees

• Komano Yuichi
• Ohta Kazuo
• Sakiyama Kazuo
• Toshiba Kk

Inventors

• Komano Yuichi
• Ohta Kazuo
• Sakiyama Kazuo

Classifications

• H04L9/0866 Primary

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title

• H04L9/0861 Primary

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title