Information processing device, information processing method, program, and communication system

Abstract

The present technology pertains to an information processing device, an information processing method, a program, and a communication system such that it is possible to confirm the switching timing of a key for security processing of output data on a device to which the output data is transmitted. An information processing device according to an embodiment of the present technology receives a new key and a key ID that is identification information of the new key, and when a key for security processing of output data for each frame is updated, transmits the new key and the key ID from a device that is an output data destination using a first communication IF. Further, the information processing apparatus performs security processing using the new key, generates frame data of a predetermined format including the output data after the security processing and the key ID used for the security processing, and transmits the frame data to the destination apparatus using the second communication IF. The present technology can be applied to a device that performs communication with an external device using two communication IF of a high-speed communication IF and a register communication IF.

Description

Technical Field

[0001] In particular, the present technology relates to an information processing device, an information processing method, a program, and a communication system that enable a device to which output data is sent to confirm a key switching time for securely processing the output data. Background Art

[0002] As standards for high-speed communication IF, there are Mobile Industry Processor Interface (MIPI), Scalable Low Voltage Signaling Embedded Clock (SLVS-EC), etc. For example, standards such as MIPI and SLVS-EC are used for data transmission between an image sensor (e.g., CIS) and a processor (e.g., DSP used as a host).

[0003] Reference List

[0004] Patent Literature

[0005] Patent Document 1: Japanese Unexamined Patent Application Publication No. 2020-533924 Summary of the invention

[0006] Problems to be solved by the present invention

[0007] In order to protect the data output from the image sensor, a mechanism of data encryption or tamper detection using a MAC value, etc. is used. A public key group in each of the image sensor and the processor is used for data encryption and tamper detection.

[0008] A key used for security processing (such as a public key) also has a usable period depending on a scheme (such as an algorithm) to be adopted. Therefore, it is necessary to update the key before the valid period elapses.

[0009] In the case where the key is updated by key distribution from a processor serving as a host, it is difficult for the processor side to grasp the timing at which the image sensor side switches to the updated new key.

[0010] The present technology has been made in view of such circumstances, and enables a transmission destination device of output data to confirm a key switching timing for securely processing the output data.

[0011] Solution to the problem

[0012] According to the first aspect of the present technology, an information processing device includes: a first communication unit, which receives a new key sent from a device as a sending destination of output data by using a first communication IF when a key used to securely process output data of each frame is updated, and a key ID as identification information of the new key; a security processing unit, which performs the security processing using the new key and generates frame data in a predetermined format including the output data after the security processing and the key ID of the key used for the security processing; and a second communication unit, which sends the frame data to the device using a second communication IF.

[0013] According to the second aspect of the present technology, an information processing device includes: a first communication unit, which, when updating a key used to securely process the output data of each frame, sends a new key and a key ID serving as identification information of the new key to a device serving as a sending source of the output data by using a first communication IF; a second communication unit, which uses a second communication IF to receive frame data of a predetermined format including the output data after the above-mentioned security processing and the key ID used for the above-mentioned security processing, which is sent from the above-mentioned device; and a security processing unit, which performs security processing on the output data included in the frame data using the new key identified by the key ID included in the frame data.

[0014] In the first aspect of the present technology, in the case of updating a key for performing security processing on output data of each frame, a new key and a key ID as identification information of the new key transmitted from a device as a transmission destination of the output data using a first communication IF are received. In addition, security processing using the new key is performed, frame data of a predetermined format including the output data after security processing and the key ID for security processing is generated, and the frame data is transmitted to the device using a second communication IF.

[0015] In the second aspect of the present technology, in the case of updating a key for performing security processing on output data of each frame, a new key and a key ID as identification information of the new key are transmitted to a device as a transmission source of the output data using a first communication IF. In addition, frame data of a predetermined format including the output data after the security processing and the key ID used for the security processing transmitted from the device using a second communication IF are received, and the output data contained in the frame data is securely processed using a new key identified by the key ID contained in the frame data. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 : is a diagram showing a configuration example of a communication system according to an embodiment of the present technology.

[0017] Figure 2 is a diagram illustrating an example of key update through key distribution.

[0018] Figure 3 is a diagram illustrating an example of data transmission through SLVS-EC.

[0019] Figure 4 is a diagram showing an example of a format of data transmission for SLVS-EC.

[0020] Figure 5 This is a sequence diagram for explaining the key update process.

[0021] Figure 6 is a sequence diagram for explaining another process of key update.

[0022] Figure 7 is a diagram showing an example of information transmitted at the time of key update.

[0023] Figure 8 is a diagram showing an example of the data structure of key update information.

[0024] Fig. 9 is a diagram showing another example of the data structure of key update information.

[0025] Fig.10 is a sequence diagram showing the flow of key update using key update information.

[0026] Fig.11 is a diagram showing an arrangement example of a key ID.

[0027] Fig.12 is a diagram showing an arrangement example of a key ID.

[0028] Fig.13 is a diagram showing an arrangement example of a key ID.

[0029] Fig.14 is a diagram illustrating another configuration example of the communication system according to an embodiment of the present technology.

[0030] Fig.15 This is a sequence diagram for explaining the process of key update in a multi-sensor system.

[0031] Fig.16 is a block diagram showing a configuration example of an image sensor.

[0032] Fig.17 is a block diagram showing a configuration example of a host-side processor.

[0033] Fig.18 is a sequence diagram showing another flow of key update using key update information. DETAILED DESCRIPTION

[0034] Hereinafter, a mode for carrying out the present technology will be described. The description will be given in the following order.

[0035] 1. Key Update in Communication System

[0036] 2. Key update process

[0037] 3. Processing using key ID

[0038] 4. Application examples of multi-sensor systems

[0039] 5. Composition of each device

[0040] 6. Modifications

[0041] <<Key Update in Communication System>>

[0042] <Configuration Example of Communication System>

[0043] Figure 1 : is a diagram showing a configuration example of a communication system according to an embodiment of the present technology.

[0044] By connecting the image sensor 1 and the host side processor 2 Figure 1 As will be described later, a plurality of image sensors 1 can be connected to one host-side processor 2.

[0045] The image sensor 1 and the host-side processor 2 may be mounted in a device in the same housing such as a camera or a smartphone, or may be mounted in devices in different housings.

[0046] The image sensor 1 and the host processor 2 are connected via a high-speed communication IF. Figure 1 The high-speed communication IF is a communication IF such as a mobile industry processor interface (MIPI), a scalable low voltage signaling embedded clock (SLVS-EC), and a scalable low voltage signaling (SLVS).

[0047] In addition, the image sensor 1 and the host side processor 2 are connected via a register communication IF, such as Figure 1 As shown by the dotted arrow in . The register communication IF is a communication IF using registers such as a serial peripheral interface (SPI) or an inter-integrated circuit (I2C).

[0048] The image sensor 1 is a sensor such as a CMOS image sensor (CIS). In addition to the sensor unit 11 configured by arranging a plurality of pixels, the image sensor 1 is provided with a high-speed communication IF unit 12 and a register communication IF unit 13. In the image sensor 1, security processing such as encryption and calculation of a MAC value is performed on the image data of each frame output from the sensor unit 11.

[0049] The high-speed communication IF unit 12 transmits the security-processed image data to the host-side processor 2 via the high-speed communication IF.

[0050] The register communication IF unit 13 performs register communication with the host side processor 2, which is communication using the register communication IF. Through the register communication with the host side processor 2, the host side processor 2 sets the operation mode related to shooting, such as exposure time, gain, resolution, and frame rate. In addition, the host side processor 2 sets a key for secure processing of image data.

[0051] The host-side processor 2 serving as a host (host) of register communication (master) has a high-speed communication IF unit 21 , a register communication IF unit 22 , and a data processing unit 23 .

[0052] The high-speed communication IF unit 21 receives image data transmitted using the high-speed communication IF.

[0053] The register communication IF unit 22 performs register communication with the image sensor 1. The register communication IF unit 22 sends a write command to the image sensor 1, and sends data to the image sensor 1 by writing the data in a register provided in the image sensor 1. In addition, the register communication IF unit 22 sends a read command to the image sensor 1, and reads the data stored in the register to receive the data sent from the image sensor 1.

[0054] The data processing unit 23 including a CPU and the like processes image data transmitted from the image sensor 1 and received by the high-speed communication IF unit 21. In the data processing unit 23, security processing such as decryption of encrypted image data and tamper detection using a MAC value is performed.

[0055] In this way, the image sensor 1 and the host processor 2 are connected via two communication IFs: a high-speed communication IF for sending and receiving large data such as image data and a register communication IF for sending and receiving small data such as operation mode settings.

[0056] <Key Update>

[0057] In the image sensor 1 and the host side processor 2, for example, security processing such as encryption / decryption of image data and tampering detection using a MAC value is performed by a common key encryption scheme. For example, for each mode of the Advanced Encryption Standard (AES), the update period of the key as a common key is different.

[0058] Key update methods usually include key distribution and key derivation.

[0059] Key distribution is a method in which the host sends a key to the sensor at any time to update the key. In the sensor, settings are performed to use the key received from the host for subsequent security processing.

[0060] Key derivation is a method in which the host and the sensor derive and update the key at a preset update time. An arbitrary time such as the time when a predetermined amount of image data is transmitted is preset as the key update time between the host and the sensor.

[0061] like Figure 2 As shown, in Figure 1 In the communication system of the present invention, the key is updated by key distribution. The information sent from the host-side processor 2 to the image sensor 1 at the time of key update includes information about the new key after the update. The key data itself such as the public key data may be sent, or in the case where a plurality of keys are prepared in advance for each of the image sensor 1 and the host-side processor 2, information specifying the new key may be sent.

[0062] The new key is sent using the register communication IF. The key used in the security processing of the image data sent using the high-speed communication IF is updated using the register communication IF, which is a communication IF different from the high-speed communication IF. The flow of key update will be described later.

[0063] <High-speed communication IF>

[0064] SLVS-EC, which is one of the high-speed communication IFs, will be described.

[0065] Figure 3 is a diagram showing an example of data transmission through SLVS-EC. It should be noted that Figure 3 Only the configuration related to data transmission using the high-speed communication IF is shown.

[0066] The sensor unit 11 of the image sensor 1 performs photoelectric conversion on light received via the lens. The sensor unit 11 performs A / D conversion and the like on a signal obtained by the photoelectric conversion, and sequentially outputs pixel data constituting one frame of an image (e.g., data of one pixel at a time) to the high-speed communication IF unit 12. Security processing is appropriately performed on the data output from the sensor unit 11, and the data after the security processing is output to the high-speed communication IF unit 12.

[0067] The high-speed communication IF unit 12 distributes the data of each pixel output from the sensor unit 11 to a plurality of transmission paths, and transmits the data to the host-side processor 2 in parallel via the plurality of transmission paths. Figure 3 In the example of , eight transmission paths are used to transmit pixel data. The transmission path between the image sensor 1 and the host-side processor 2 may be a wired transmission path or a wireless transmission path. Hereinafter, the transmission path between the image sensor 1 and the host-side processor 2 is appropriately referred to as a channel.

[0068] The high-speed communication IF unit 21 of the host processor 2 receives the pixel data sent from the high-speed communication IF unit 12 via 8 channels, and sequentially outputs the data of each pixel to the data processing unit 23. As described above, data is sent and received using multiple channels between the high-speed communication IF unit 12 and the high-speed communication IF unit 21.

[0069] The data processing unit 23 acquires image data of one frame based on the pixel data supplied from the high-speed communication IF unit 21 and performs various types of image processing on the acquired image data. In the data processing unit 23, various types of processing such as compression of image data and recording of image data on a recording medium are performed.

[0070] In SLVS-EC, an application layer, a link layer, and a physical layer are defined according to the content of signal processing. Link layer processing and physical layer processing are performed in each of the high-speed communication IF unit 12 and the high-speed communication IF unit 21.

[0071] As the processing of the link layer, for example, processing for realizing the following functions is performed.

[0072] 1. Pixel data to byte data conversion

[0073] 2. Error correction of payload data

[0074] 3. Transmission of packet data and auxiliary data

[0075] 4. Error correction using sufficient payload data

[0076] 5. Channel Management

[0077] 6. Protocol management of packet generation

[0078] Meanwhile, as processing of the physical layer, for example, processing for realizing the following functions is performed.

[0079] 1. Generation and extraction of control codes

[0080] 2. Bandwidth control

[0081] 3. Control of channel skew

[0082] 4. Placement of symbols

[0083] 5. Symbol encoding for bit synchronization

[0084] 6.SERDES (serializer / deserializer)

[0085] 7. Clock generation and reproduction

[0086] 8. Transmission of Scalable Low Voltage Signaling (SLVS) signals

[0087] Figure 4 is a diagram showing an example of a format of data transmission for SLVS-EC.

[0088] The effective pixel region is a region of effective pixels of an image of one frame captured by the sensor unit 11. A margin region is arranged on the left side of the effective pixel region.

[0089] A front dummy area is provided on the upper side of the effective pixel area. Figure 4 In the example of , the embedded data is arranged in the front virtual area. The embedded data includes information about setting values ​​imaged by the sensor unit 11, such as shutter speed, aperture value, and gain. In addition to the information of the setting values ​​related to imaging, various types of additional information such as content, format, and data size are appropriately arranged as embedded data. The embedded data is additional information added to the image data of each frame.

[0090] The rear dummy area is disposed on the lower side of the effective pixel area. The embedded data may be arranged in the rear dummy area.

[0091] The effective pixel area, the edge area, the front dummy area, and the rear dummy area constitute an image data area.

[0092] A header is added before each line constituting the image data area, and a start code is added before the header. In addition, a footer is optionally added after each line constituting the image data area, and a control code such as an end code (EndCode) is added after the footer. In the case where a footer is not added, a control code such as an end code is added after each line constituting the image data area.

[0093] For each image of a frame captured by the sensor unit 11, use Figure 4 The frame data in the format shown in FIG.

[0094] Figure 4The upper band in shows the structure of the packet for transmitting the frame data shown on the lower side. Assuming that the arrangement of the data in the horizontal direction is one row, the data constituting one row of the image data area is stored in the payload of the packet. The entire frame data of one frame is transmitted using the number of packets equal to or greater than the number of pixels in the vertical direction of the image data area. In addition, for example, the transmission of the entire frame data of one frame is performed by sequentially transmitting packets storing data in row units from the data arranged in the upper row.

[0095] A packet is configured by adding a header and a footer to a payload storing data of one row. At least a start code and an end code are added as control codes to each packet.

[0096] like Figure 4 As shown in the lower left of , the header includes additional information about the data stored in the payload, such as frame start, frame end, line validity, and line number.

[0097] The frame start is 1-bit information indicating the header of the frame. A value of 1 is set to the frame start of the header of a packet for transmitting the first row of frame data, and a value of 0 is set to the frame start of the header of a packet for transmitting data of another row.

[0098] The frame end is 1-bit information indicating the end of the frame. A value of 1 is set to the frame end of the header of the packet including the end row of the frame data, and a value of 0 is set to the frame end of the header of the packet for transmission of another row of data.

[0099] Row valid is 1-bit information indicating whether a row of data stored in a packet is a row of a valid pixel area. A value of 1 is set to row valid of a header of a packet for transmission of pixel data of a row in a valid pixel area, and a value of 0 is set to row valid of a header of a packet for transmission of data of another row.

[0100] The row number is 13-bit information indicating the row number of the row where the data stored in the packet is arranged.

[0101] When the high-speed communication IF unit 12 of the image sensor 1 and the high-speed communication IF unit 21 of the host-side processor 2 are high-speed communication IFs compatible with a standard different from SLVS-EC, frame data configuring image data for each frame is also generated, and data is transmitted using packets storing each row of data of the frame data.

[0102] <<Key Update Process>>

[0103] The basic flow of key update achieved through key distribution will be described.

[0104] <Flow in the Case of Update Processing During the Time for Switching Frame Data>

[0105] Reference Figure 5 The sequence describes the key update process.

[0106] Assume that the key Kn is set to the key before the update. In this case, Figure 5 As shown by arrow #1 in FIG. 1 , a high-speed communication IF is included to transmit frame data including image data subjected to security processing using key Kn from image sensor 1 to host-side processor 2. As described above, by sequentially sending packets storing data of each row, frame data including image data subjected to security processing using key Kn is sent.

[0107] like Figure 5 As shown on the left side of , the transmission time of each frame data is defined by the synchronization signal generated in the image sensor 1. Figure 5 In the example of , transmission of frame data of the first frame including image data subjected to security processing using the key Kn starts at time t1.

[0108] The host-side processor 2 , which has received the packet storing the line data constituting the frame data of the first frame, performs decryption processing using the key Kn, and acquires image data which is output data of the image sensor 1 .

[0109] When the key update time is reached during the transmission and reception of the frame data of the first frame, the host processor 2 performs key update using the register communication IF in step S1. The information transmitted to the image sensor 1 includes information of the key Kn+1 as a new key.

[0110] In step S2, the image sensor 1 receives information sent from the host side processor 2. The image sensor 1 performs update processing such as rewriting the value of the register. The update processing performed here is processing for updating the key used for the high-speed communication IF from the key Kn to the key Kn+1.

[0111] At time t2 after completing the update process, the image sensor 1 switches the key used for security processing to key Kn+1 and starts sending frame data of the second frame as shown by arrow #2. The frame data of the second frame includes image data subjected to security processing using key Kn+1.

[0112] The host processor 2 that has received the packet storing the line data constituting the second frame performs security processing using the key Kn+1 to obtain image data that is output data of the image sensor 1. The host processor 2 manages which key is used for security processing.

[0113] The high-speed communication IF and the register communication IF are independently operable communication IFs. When the high-speed communication IF is in secure operation, the image sensor 1 and the host-side processor 2 can use the register communication IF to perform key update.

[0114] As described above, since security processing using a key is performed on image data in units of frames, the key switching timing that reflects the key update by the host-side processor 2 is the frame data switching timing.

[0115] In the case where key updating occurs during transmission and reception of specific frame data and the key updating process in the image sensor 1 is at the timing of starting transmission of the next frame data, the new key is used from the next frame data.

[0116] <Flow in a Case Where Update Processing Is Not in the Timing for Switching Frame Data>

[0117] Reference Figure 6 The sequence describes another process of key update.

[0118] Also in Figure 6 In , it is assumed that the key Kn is set to the key before updating. Figure 6 As shown by arrow #11 in FIG. 1 , a high-speed communication IF is included to transmit frame data including image data securely processed using a key Kn from the image sensor 1 to the host-side processor 2 .

[0119] The host-side processor 2 that has received the packet storing the line data constituting the frame data of the first frame performs security processing using the key Kn, and acquires the image data that is the output data of the image sensor 1 .

[0120] When the key update time is reached during the transmission and reception of the frame data of the first frame, the host processor 2 performs key update using the register communication IF in step S11. The information transmitted to the image sensor 1 includes information of the key Kn+1 as a new key.

[0121] In step S12, the image sensor 1 receives the information transmitted from the host-side processor 2 and executes an update process. The update process executed here is a process for updating the key used for the high-speed communication IF from the key Kn to the key Kn+1.

[0122] exist Figure 6 In the example of , the key update process continues until and after time t2, which is the time when the frame data of the second frame starts to be transmitted. If the key update process is not completed before time t2, as shown by arrow #12, the key Kn is used to send the frame data of the second frame.

[0123] At time t3, the image sensor 1 switches the key used for security processing to the key Kn+1, and starts transmitting the frame data of the third frame as shown by arrow # 13. The key Kn+1 is used as a new key from the frame data of the third frame.

[0124] As described above, the key update process may not be performed at the time of starting to transmit the next frame of data, depending on the processing capability of the image sensor 1, etc. That is, there may be a difference between the time when the host-side processor 2 performs the key update by sending the information of the new key and the time when the key is switched by reflecting it in the image sensor 1.

[0125] When the host-side processor 2 updates the key by sending information about a new key, in order to send frame data via the high-speed communication IF, it is necessary to know which key is used in the image sensor 1. For example, the host-side processor 2 needs to know that the key Kn is used for the frame data of the second frame and the transmission starts at time t2. In addition, the host-side processor 2 needs to know that the key Kn+1 is used for the frame data of the third frame and the transmission starts at time t3.

[0126] exist Figure 1 In the communication system of FIG. 1 , a key ID which is identification information of each key is used so that the host-side processor 2 can grasp which key is used for security processing.

[0127] <<Processing using key ID>>

[0128] <Key ID transmission example>

[0129] Figure 7 is a diagram showing an example of information transmitted at the time of key update.

[0130] When the key is updated, Figure 7 As shown, a set of keys and a key ID as identification information of the key are transmitted as key update information from the host side processor 2 to the image sensor 1 using the register communication IF. The key included in the key update information is a new key of the high-speed communication IF.

[0131] Security processing such as encryption or addition of a MAC value is appropriately performed on the key and the key ID. The key and the key ID used for security processing of the key are keys for the register communication IF, which are different from the keys for the high-speed communication IF. The image sensor 1 and the host-side processor 2 have keys for the register communication IF.

[0132] Figure 8 is a diagram showing an example of the data structure of key update information.

[0133] Transmission Example 1

[0134] As in Figure 8As shown in A of FIG. 1 , the key update information is transmitted by adding a marker indicating the start of data transmission and a marker indicating the end of data transmission before and after the marker. Figure 8 In the example of A, the key and the key ID for the high-speed communication IF are encrypted using the key of the register communication IF, and the key update information is configured by the encrypted data.

[0135] In the register of the image sensor 1, an area as a flag S_STATE indicating the start / end of data transmission is secured. In the image sensor 1, after a value indicating the start of data transmission is written as the value of the flag S_STATE, a decryption process of the transmitted data is performed using the key for the register communication IF, and a new key and a key ID are acquired. After the new key and the key ID are acquired, a value indicating the end of data transmission is written as the value of the flag S_STATE.

[0136] For example, when an area for the flag S_STATE is reserved in the register of the image sensor 1, the image sensor 1 is used to execute Figure 8 The key update information shown in A is the key update.

[0137] Transmission Example 2

[0138] like Figure 8 As shown in FIG. 1B , the key update information is sent by adding a flag KEY_SENT notifying that a new key has been sent back. Figure 8 In the example of B, the key for the high-speed communication IF is encrypted using the key of the register communication IF, and the key update information is configured by adding the key ID to the encrypted data. The key ID may be encrypted together with the key.

[0139] In the image sensor 1, a decryption process is performed using the key for register communication IF, and a new key and key ID for high-speed communication IF are acquired. In addition, after acquiring the new key and key ID, a value of 1 is written as the value of the flag KEY_SENT. For example, a value of 1 of the flag S_STATE indicates that a new key has been sent.

[0140] For example, when an area for the flag KEY_SENT is secured in the register of the image sensor 1, the image sensor 1 is used to perform Figure 8 The key update information of key update is shown in B. After the value 1 is set as the value of the flag S_STATE, the value 0 is written to the value of the flag S_STATE by the image sensor 1.

[0141] The value 0 may be written to the flag S_STATE by the host side processor 2, which has confirmed based on the key ID that the key update has been reflected (the key has been switched to a new key). By switching or updating the value of the flag S_STATE in the register by incrementing, it may be notified that a new key has been transmitted.

[0142] In this way, at least the new key is encrypted and included in the key update information together with the key ID and transmitted to the image sensor 1 .

[0143] Transmission Example 3

[0144] like Fig. 9 As shown in A, a MAC value may be added to key update information including encrypted data of a key and a key ID. Fig. 9 The data structure shown in A is Figure 8 The data structure in A is different in that a MAC value is added after the key update information. The MAC value added to the key update information is, for example, information generated by performing a MAC operation on the encrypted data of the key and the key ID.

[0145] The image sensor 1 performs a MAC operation on the encrypted data transmitted from the host-side processor 2 to obtain a MAC value. In addition, tampering detection is performed by checking the MAC value obtained by the MAC operation with the MAC value added to the encrypted data.

[0146] Transmission Example 4

[0147] like Fig. 9 As shown in B, a MAC value may be added after the key ID. Fig. 9 The data structure shown in B is Figure 8 The data structure in B is different in that a MAC value is added after the key ID. The MAC value added after the key ID is, for example, information generated by performing a MAC operation on the encrypted data of the key and the key ID.

[0148] In the image sensor 1, a MAC operation is performed on the encrypted data and the key ID sent from the host side processor 2 to obtain a MAC value. In addition, tampering detection is performed by checking the MAC value obtained by the MAC operation with the MAC value added after the key ID.

[0149] In this way, tamper detection can be performed using the MAC value when the key is updated. The MAC value can be sent separately from the group key and the key ID.

[0150] <Process of key update using key update information>

[0151] Reference Fig.10The sequence describes the process of key update using key update information.

[0152] Assume that the key Kn is set as the key before updating. In addition, assume that a key IDkn as a key ID of the key Kn is managed in each of the image sensor 1 and the host-side processor 2. The key ID indicates that the key identified by the key ID is used for security processing as a key of the high-speed communication IF.

[0153] In this case, if Fig.10 As shown by arrow #21 in FIG. 1 , a high-speed communication IF is included to transmit frame data including image data securely processed using a key IDkn from the image sensor 1 to the host-side processor 2. The key IDkn is arranged at a predetermined position of the frame data of the first frame.

[0154] The host processor 2, which receives the group storing the row data constituting the frame data of the first frame, confirms that the key used for securely processing the image data contained in the frame data of the first frame is the key Kn based on the key IDkn set in the frame data. The host processor 2 performs decryption processing using the key Kn to obtain the image data as the output data of the image sensor 1.

[0155] When the key update time is reached during the transmission and reception of the frame data of the first frame, in step S21, the host side processor 2 uses the register communication IF to perform key update. The key update information sent to the image sensor 1 includes a set of the key Kn+1 as the new key and the key IDkn+1 as the key ID of the key Kn+1. Figure 8 and Fig. 9 As described, transmit key update information.

[0156] In step S22, the image sensor 1 receives the key update information sent from the host side processor 2. The image sensor 1 performs an update process, for example, decrypts the encrypted key and rewrites the value of the register. The update process performed here is a process for updating the key used for the high-speed communication IF from the key Kn to the key Kn+1.

[0157] At time t2 after the update process is completed, the image sensor 1 switches the key used for security processing to the key Kn+1 and starts to send the frame data of the second frame, as shown by arrow #22. The frame data of the second frame includes image data subjected to security processing using the key Kn+1. In addition, the key ID kn+1, which is the key ID of the key Kn+1, is arranged at a predetermined position of the frame data of the second frame.

[0158] The host processor 2, which has received the packet storing the row data constituting the frame data of the second frame, confirms that the key used for securely processing the image data included in the frame data of the second frame is the key Kn+1 based on the key IDkn+1 set in the frame data. The host processor 2 performs decryption processing using the key Kn+1 to obtain the image data as the output data of the image sensor 1.

[0159] As described above, when the key is updated, the key ID as identification information associated with the key is sent from the host side processor 2 to the image sensor 1. In addition, in the frame data sent after the key used for the high-speed communication IF is switched in the image sensor 1, the key ID indicating which key is used for the security processing of the frame data is arranged.

[0160] The image sensor 1 can notify the host processor 2 which key is used for security processing by transmitting frame data with a key ID arranged therein. The host processor 2 can confirm the key switching timing used in security processing based on the key ID included in the frame data.

[0161] <Key ID Arrangement Example>

[0162] ·Layout Example 1

[0163] Fig.11 is a diagram showing an arrangement example of a key ID.

[0164] exist Fig.11 In the frame data shown in , the key ID is arranged to be included in the embedded data (EBD) arranged in one row before the encrypted data. Fig.11 The encrypted data arranged in the frame data shown in is image data encrypted using a key for the high-speed communication IF.

[0165] like Fig.11 As shown in the upper part of , the key IDkn is included in the EBD of the frame data, and the frame data includes the image data encrypted using the key Kn.

[0166] When the key used for high-speed communication IF is switched from key Kn to key Kn+1, as shown in FIG. Fig.11 As shown in the lower part of , the EBD including the frame data of the image data encrypted using the key Kn+1 includes the key IDkn+1.

[0167] like Fig.11 As shown in , the host-side processor 2 having received the frame data can confirm the timing of switching the key in the image sensor 1 based on the key ID included in the EBD. In this way, the key ID can be arranged as information constituting the EBD as additional information.

[0168] Note that the frame start (FS) line and the frame end (FE) line are arranged at the head and tail of the frame data, respectively. The frame start line is a line of data that sets the value 1 to the frame start of the packet header. In addition, the frame end line is a data line that sets the value 1 to the frame end of the packet header. Fig.11 In the data packet header, it is represented as "PH".

[0169] exist Fig.11 In the example of , information of IV and information of MAC value are arranged in the next row of encrypted data of one frame as a plurality of rows of data. IV is an encryption parameter used together with a key for encryption of image data. MAC value is information for tampering detection of image data. In the case where the mode of security operation in the image sensor 1 and the host-side processor 2 is a mode for performing encryption and tampering detection using MAC value, information of IV and information of MAC value are arranged in the frame data. Information of IV may be included in EBD.

[0170] ·Layout Example 2

[0171] Fig.12 is a diagram showing another configuration example of a key ID. Fig.11 Descriptions that overlap with the descriptions will be omitted appropriately.

[0172] exist Fig.12 In the frame data shown, the security-related information row is arranged before the EBD row. The key ID is set as information constituting the security-related information.

[0173] The security-related information is information for achieving the security of output data. The security information includes, for example, the following information in addition to the key ID.

[0174] · Register communication security error / warning information

[0175] Information indicating attacks inside the detection sensor

[0176] Information used for security error / warning analysis

[0177] Internal status information

[0178] · Operation mode related information

[0179] · Information used to notify that register communication has occurred

[0180] Frame counter

[0181] Information about the data size of a frame

[0182] like Fig.12 As shown in the upper part of , the key IDkn is included in the security-related information of the frame data including the image data encrypted using the key Kn.

[0183] In the case where the key used for high-speed communication IF is switched from key Kn to key Kn+1, as in Fig.12 As shown in the lower part of , the key ID kn+1 is included in the security-related information of the frame data including the image data encrypted using the key Kn+1.

[0184] like Fig.12 As shown in , the host-side processor 2 having received the frame data can check the timing of switching the key in the image sensor 1 based on the key ID included in the security-related information. The information of the IV may be included in the security-related information.

[0185] ·Layout Example 3

[0186] Fig.13 is a diagram showing another configuration example of a key ID.

[0187] exist Fig.13 In the frame data shown, the key ID is set as information constituting a part of the initial vector (IV) arranged in the next line of encrypted data.

[0188] like Fig.13 As shown in the upper part of , the key IDkn is included in the information of the IV of the frame data, and the frame data includes the image data encrypted using the key Kn.

[0189] When the key used for high-speed communication IF is switched from key Kn to key Kn+1, as shown in FIG. Fig.13 As shown in the lower part of , key ID kn+1 is included in the information of IV of the frame data including the image data encrypted using the key Kn+1.

[0190] like Fig.13 As shown in , the host-side processor 2 having received the frame data can confirm the timing of switching the key in the image sensor 1 based on the key ID included in the IV. In this way, the key ID can be arranged at various positions of the frame data.

[0191] <<Application Examples of Multi-Sensor Systems>>

[0192] Fig.14 is a diagram illustrating another configuration example of the communication system according to an embodiment of the present technology.

[0193] Fig.14 The communication system is configured by connecting the image sensor 1-1 and the image sensor 1-2 as two image sensors to the host side processor 2. A large number of image sensors can be connected to the host side processor 2. Fig.14 The communication system shown in is a multi-sensor system in which multiple image sensors are connected to one host.

[0194] The image sensor 1 - 1 and the image sensor 1 - 2 have the same function. In the case where it is not necessary to distinguish the image sensor 1 - 1 and the image sensor 1 - 2 from each other, they are collectively referred to as the image sensor 1 .

[0195] As a key for high-speed communication IF, the same key is used in image sensor 1-1 and image sensor 1-2. In host-side processor 2, since frame data sent from all image sensors 1 are securely processed using the same key, it is necessary to match the key switching timing in image sensor 1-1 with the key switching timing in image sensor 1-2.

[0196] When the key is updated, Fig.14 As shown by arrows A1 and A2 in the upper part of , the host-side processor 2 sends key update information including a set of new keys and key IDs to the image sensor 1-1, and then sends key update information including the same set of new keys and key IDs to the image sensor 1-2. As described above, in the key update of the multi-sensor system, the key update information is sequentially transmitted to each image sensor.

[0197] After completing sending the key update information to all image sensors, such as Fig.14 As shown by arrows A11 and A112 in the lower part of , the host-side processor 2 sends an update trigger to each of the image sensor 1-1 and the image sensor 1-2 using the register communication IF. The update trigger is information indicating that the sending of the new key to all the image sensors has been completed.

[0198] Each of the image sensor 1-1 and the image sensor 1-2 that receives the update trigger switches the key used for the high-speed communication IF to the new key, and starts transmitting image data for security processing using the new key and frame data configured with the key ID of the new key. In response to the transmission of the update trigger, the key update is reflected in each of the image sensor 1-1 and the image sensor 1-2.

[0199] As described above, the new key is sent to all image sensors 1 in advance, and an update trigger is sent when the key update process in all image sensors 1 is completed, thereby notifying the key switching time. As a result, the key switching time in each image sensor 1 can be matched.

[0200] Reference Fig.15 The sequence describes the process of key update in a multi-sensor system.

[0201] It is assumed that the key Kn is set as the key before updating. Furthermore, it is assumed that the key ID of the key Kn is managed in each of the image sensors 1 - 1 and 1 - 2 and the host-side processor 2 .

[0202] In this case, if Fig.15 As shown by arrow #31-1 in FIG. 1 , frame data including image data subjected to security processing using key Kn is transmitted from image sensor 1-1 to host-side processor 2 using high-speed communication IF. Key IDkn is arranged at a predetermined position of frame data of the first frame transmitted by image sensor 1-1.

[0203] In addition, as shown by arrow #31-2, frame data including image data processed securely using key Kn is transmitted from image sensor 1-2 to host processor 2 using high-speed communication IF. Key IDkn is arranged at a predetermined position of frame data of the first frame transmitted by image sensor 1-2.

[0204] The host processor 2 that has received the packet sent from the image sensor 1-1 confirms that the key used to securely process the image data included in the frame data of the first frame is the key Kn based on the key IDkn arranged in the frame data. The host processor 2 performs decryption processing using the key Kn to obtain the image data as the output data of the image sensor 1-1.

[0205] Similarly, the host-side processor 2 that receives the packet sent from the image sensor 1-2 confirms that the key used for securely processing the image data included in the frame data of the first frame is the key Kn based on the key IDkn arranged in the frame data. The host-side processor 2 performs decryption processing using the key Kn to obtain the image data as the output data of the image sensor 1-2.

[0206] In this example, transmission of the frame data of the first frame by the image sensor 1 - 1 and transmission of the frame data of the first frame by the image sensor 1 - 2 are performed between time t1 and time t2 according to the same synchronization signal.

[0207] When the key update time is reached during the transmission and reception of the frame data of the first frame, the host side processor 2 updates the key of the image sensor 1-1 in step S51. The key update information sent to the image sensor 1-1 includes a set of the key Kn+1 as the new key and the key IDkn+1 as the key ID of the key Kn+1.

[0208] In step S61, the image sensor 1-1 receives the key update information sent from the host side processor 2 and performs update processing such as decrypting the encryption key and rewriting the value of the register. The update processing performed here is a process for updating the key used for the high-speed communication IF from the key Kn to the key Kn+1.

[0209] In step S52 after the key update of the image sensor 1-1, the host-side processor 2 updates the key of the image sensor 1-2. The key update information sent to the image sensor 1-2 includes a set of the key Kn+1 as the new key and the key IDkn+1 as the key ID of the key Kn+1. As described above, depending on the processing state of the host-side processor 2, etc., a time difference may occur in the key update of each in the image sensor 1.

[0210] In step S71, the image sensor 1-2 receives the key update information sent from the host side processor 2, and performs update processing, for example, decrypting the encrypted key and rewriting the value of the register. The update processing performed here is a process for updating the key used for the high-speed communication IF from the key Kn to the key Kn+1.

[0211] In this example, the key update is not reflected until the update trigger is sent. As shown by arrow #32-1, the key Kn is also used to send the frame data of the second frame in the image sensor 1-1, wherein the update process is completed before the time t2 which is the time of switching the frame data.

[0212] As indicated by arrow #32-2, the key Kn is also used to transmit the frame data of the second frame in the image sensor 1-2.

[0213] In step S53 after the key of the image sensor 1 - 2 is updated, the host-side processor 2 sends an update trigger to the image sensor 1 - 1 and the image sensor 1 - 2 in sequence.

[0214] In step S62 , the image sensor 1 - 1 receives the update trigger, and reflects the key update by switching the key used for the high-speed communication IF from the key Kn to the key Kn+1.

[0215] Furthermore, in step S72 , the image sensor 1 - 2 receives the update trigger, and reflects the key update by switching the key used for the high-speed communication IF from the key Kn to the key Kn+1.

[0216] At time t3, which is the time to switch the frame data, transmission of the frame data of the third frame including the image data securely processed using the encryption key Kn+1 starts.

[0217] As indicated by arrow #33-1, frame data including image data securely processed using key Kn+1 is transmitted from image sensor 1-1 to host processor 2 using high-speed communication IF. Key IDkn+1, which is a key ID of key Kn+1, is arranged at a predetermined position of the frame data of the third frame.

[0218] In addition, as indicated by arrow #33-2, frame data including image data securely processed using key Kn+1 is transmitted from image sensor 1-2 to host processor 2 using high-speed communication IF. Key IDkn+1, which is a key ID of key Kn+1, is arranged at a predetermined position of the frame data of the third frame.

[0219] The host-side processor 2 that has received the packet sent from the image sensor 1-1 confirms that the key used to securely process the image data included in the frame data of the third frame is the key Kn+1 based on the key IDkn+1 arranged in the frame data. The host-side processor 2 performs decryption processing using the key Kn+1 to obtain the image data as the output data of the image sensor 1-1.

[0220] Similarly, the host-side processor 2 that receives the packet sent from the image sensor 1-2 confirms that the key used for securely processing the image data included in the frame data is the key Kn+1 based on the key IDkn+1 arranged in the frame data of the third frame. The host-side processor 2 performs decryption processing using the key Kn+1 to obtain the image data as the output data of the image sensor 1-2.

[0221] As described above, the switching of the key of the high-speed communication IF of each image sensor 1 can be performed according to the update trigger sent from the host-side processor 2. As a result, the switching timing of the key used in each image sensor 1 constituting the multi-sensor system can be matched. In the case where the same key is sent to a plurality of image sensors, a plurality of values ​​can be set as the value of the ID indicating the key Kn (which is the same key), and a key ID having a different value can be used for each sensor, such as a key IDkn and a key IDkn'.

[0222] <<Configuration of each device>>

[0223] Here, the configurations of the image sensor 1 and the host-side processor 2 having the above-described functions will be described.

[0224] <Configuration of Image Sensor 1>

[0225] Fig.16 is a block diagram showing a configuration example of the image sensor 1. Fig.16 In the illustrated configuration, components identical to those described above are denoted by the same reference numerals, and duplicate descriptions are appropriately omitted.

[0226] In addition to the sensor unit 11, the high-speed communication IF unit 12 and the register communication IF unit 13, the image sensor 1 is also provided with a register value holding unit 14, a key information security processing unit 15, a synchronization signal generating unit 16, a key switching timing management unit 17, an image data processing unit 18 and an image data security processing unit 19.

[0227] The register communication IF unit 13 performs register communication with the register communication IF unit 22 of the host side processor 2, and transmits and receives various data. For example, the register communication IF unit 13 receives key update information transmitted from the register communication IF unit 22. The register communication IF unit 13 functions as a first communication unit that uses the register communication IF to communicate with the host side processor 2, which is a device to which output data is transmitted. Fig.10 Step S22 in Fig.15 The reception of the key update information in step S61 etc. in the above is a process performed by the register communication IF unit 13.

[0228] The register value holding unit 14 is a register that stores various data based on instructions from the host side processor 2 received by the register communication IF unit 13. In the register value holding unit 14, a key area and a key related information area for high-speed communication IF are ensured. The key related information includes a key ID, various flags, and an update trigger.

[0229] The data stored in the register value holding unit 14 is appropriately read out by the key information security processing unit 15 and the key switching timing management unit 17 , and is sent to the host side processing unit 2 in the register communication IF unit 13 in response to receiving a read command.

[0230] The key information security processing unit 15 performs update processing including security processing related to the key sent from the host side processor 2. For example, when the key update information sent from the host side processor 2 contains encrypted data, the key information security processing unit 15 uses the key for the register communication IF to decrypt it and obtain a new key or key ID.

[0231] In addition, in the case where the key update information sent from the host side processor 2 includes a MAC value, the key information security processing unit 15 performs a MAC operation on the encrypted data, etc. The key information security processing unit 15 performs tampering detection by checking the MAC value obtained by the MAC operation with the MAC value added to the encrypted data. The key information security processing unit 15 functions as another security processing unit that performs security processing on the register communication IF using the key. The key information security processing unit 15 outputs information about the new key and the key ID to the image data security processing unit 19.

[0232] The synchronization signal generating unit 16 generates a synchronization signal defining a transmission period of frame data, and outputs the synchronization signal to the key switching timing management unit 17. The synchronization signal may be generated based on a signal generated inside the synchronization signal generating unit 16, or the synchronization signal may be generated based on a signal input from outside the image sensor 1.

[0233] The key switching timing management unit 17 manages the switching timing of the key used for the high-speed communication IF. For example, in the case where the update process is performed by the key information security processing unit 15 and the new key is stored in the register value holding unit 14, the key switching timing management unit 17 determines the next frame data switching timing as the key switching timing based on the synchronization signal generated by the synchronization signal generating unit 16.

[0234] In addition, when the register communication IF unit 13 receives the update trigger sent using the register communication IF and stores information indicating the reception in the register value holding unit 14, the key switching time management unit 17 determines the next frame data switching time as the key switching time. Information on the key switching time determined by the key switching time management unit 17 is provided to the image data security processing unit 19.

[0235] The image data processing unit 18 acquires the pixel data output from the sensor unit 11 and performs application layer processing on the image data of each frame. The frame data having a predetermined format is generated by the processing of the application layer. The image data processing unit 18 outputs the data constituting the frame data to the image data security processing unit 19.

[0236] The image data security processing unit 19 performs security processing according to the security mode based on the image data of each frame. The key used for the security processing is switched according to the information supplied from the key switching timing management unit 17.

[0237] For example, in the case where a security mode for encrypting image data is set, the image data security processing unit 19 encrypts the image data supplied from the image data processing unit 18 using a key for the high-speed communication IF. For encryption of image data, IV or the like managed by the image data security processing unit 19 is appropriately used.

[0238] In the case where the security mode for tamper detection using a MAC value is set, the image data security processing unit 19 calculates a MAC value using a key for the high-speed communication IF.

[0239] The image data security processing unit 19 generates frame data in which a key ID used to encrypt the image data is arranged at a predetermined position together with the encrypted image data, and outputs the frame data to the high-speed communication IF unit 12. The frame data appropriately includes a MAC value.

[0240] The high-speed communication IF unit 12 performs link layer signal processing on the data supplied from the image data security processing unit 19. As the link layer signal processing, in addition to the above-mentioned processing, generation of packets storing frame data, distribution of packet data to a plurality of channels, and the like are performed.

[0241] In addition, the high-speed communication IF unit 12 performs signal processing of the physical layer on the data of each packet. As the signal processing of the physical layer, processing is performed in parallel for each channel, including processing for inserting a control code into a data packet assigned to each channel. The data stream of each channel is transmitted from the high-speed communication IF unit 12 to the high-speed communication IF unit 21. The high-speed communication IF unit 12 functions as a second communication unit, and uses the high-speed communication IF to send frame data including image data subjected to security processing to the host-side processor 2.

[0242] <Configuration of Host-Side Processor 2>

[0243] Fig.17 is a block diagram showing a configuration example of the host-side processor 2. Fig.17 In the configuration shown in FIG. 1 , the same components as those described above are denoted by the same reference numerals, and duplicate descriptions are appropriately omitted.

[0244] The host-side processor 2 includes a key management unit 24 and a security processing unit 25 in addition to the high-speed communication IF unit 21 , the register communication IF unit 22 , and the data processing unit 23 .

[0245] The high-speed communication IF unit 21 receives the data stream transmitted from the high-speed communication IF unit 12, and performs physical layer signal processing on the received data stream. As the signal processing of the physical layer, in addition to the above-mentioned processing, processing including symbol synchronization processing and control code removal is performed in parallel for each channel. By performing the signal processing of the physical layer, a data stream including data packets storing data constituting frame data is generated.

[0246] In addition, the high-speed communication IF unit 21 performs link layer signal processing on the data obtained by the signal processing of the physical layer. As the link layer processing, for example, a process of integrating data streams of multiple channels into data of one system and a process of acquiring packets constituting the data stream are performed.

[0247] The high-speed communication IF unit 21 outputs frame data including data extracted from a packet obtained by performing link layer processing to the security processing unit 25. The high-speed communication IF unit 21 functions as a second communication unit that receives frame data transmitted from the image sensor 1 by using the high-speed communication IF.

[0248] The register communication IF unit 22 performs register communication with the register communication IF unit 13 of the image sensor 1 to transmit and receive various data. The register communication IF unit 22 transmits information such as key update information and update trigger based on information managed by the key management unit 24. The register communication IF unit 22 communicates with the image sensor 1 using the register communication IF and serves as a first communication unit for transmitting key update information. Fig.10 Step S21 in Fig.15 The key update information is sent in step S51 etc.

[0249] The key management unit 24 manages the key of the high-speed communication IF used in each of the image sensor 1 and the host-side processor 2 in association with the key ID. For example, in the case of performing key update, the key management unit 24 performs security processing such as encrypting a new key and a key ID, or obtaining a MAC value by performing a MAC operation using the key for registering the communication IF.

[0250] The key management unit 24 outputs the data obtained through the security processing to the register communication IF unit 22, so that the register communication IF unit 22 sends the data included in the key update information to the host processor 2. In addition, the key management unit 24 controls the register communication IF unit 22 to send an update trigger to the image sensor 1.

[0251] The security processing unit 25 acquires a key ID arranged at a predetermined position of the frame data supplied from the high-speed communication IF unit 21, and acquires a key of the high-speed communication IF associated with the key ID from the key management unit 24. The security processing unit 25 performs security processing such as decrypting image data subjected to security processing or detecting tampering by performing a MAC operation using the key acquired from the key management unit 24. The image data obtained by performing the security processing is supplied to the data processing unit 23.

[0252] <<Edit>>

[0253] Example of transmission of new key and key ID

[0254] Although a set of a new key and a key ID is transmitted to the image sensor 1 as key update information at the time of key update, the new key and the key ID may be transmitted separately.

[0255] Reference Fig.18 The sequence of describes another process of key update using key update information. Fig.11 The overlapping descriptions of the descriptions above will be omitted as appropriate.

[0256] As indicated by arrow #41, frame data including image data processed securely using key Kn is transmitted from image sensor 1 to host-side processor 2 using high-speed communication IF. Key IDkn is arranged at a predetermined position of frame data of the first frame.

[0257] When the key update timing is reached during transmission and reception of frame data of the first frame, in step S101, the host-side processor 2 transmits key update information to the image sensor 1. The key update information transmitted to the image sensor 1 includes the key Kn+1 as a new key.

[0258] In step S102 , the host-side processor 2 transmits the key IDkn+1 which is the key ID of the key Kn+1 to the image sensor 1 .

[0259] In step S111 , the image sensor 1 receives the key update information transmitted from the host-side processor 2 , and acquires a new key by decrypting the encrypted key.

[0260] In step S112 , the image sensor 1 receives the key ID transmitted from the host-side processor 2 .

[0261] At time t2, the image sensor 1 switches the key used for security processing to the key Kn+1, and starts to send the frame data of the second frame, as shown by arrow #42. The frame data of the second frame includes image data subjected to security processing using the key Kn+1. In addition, the key IDkn+1, which is the key ID of the key Kn+1, is arranged at a predetermined position of the frame data of the second frame.

[0262] As described above, the image sensor 1 may also send a new key and a key ID separately to generate frame data to which a key ID is assigned, thereby notifying the host processor 2 which key is used in the security process.

[0263] Example of output data

[0264] In addition, the frame data is generated as output data by using the image data of each frame captured by the sensor unit 11 and sent to the host-side processor 2, but other types of data in units of frames may be used as output data. For example, a distance image in which the distance to each position of the distance object is the pixel value of each pixel may be used as output data.

[0265] ·other

[0266] The above-described series of processing can be executed by hardware or software. In the case where the series of processing is executed by software, a program constituting the software is installed from a program recording medium into a computer incorporated in dedicated hardware, a general-purpose personal computer, or the like.

[0267] The installed program is provided by recording in a removable medium such as an optical disk (CD-ROM (Compact Disc Read Only Memory), DVD (Digital Versatile Disk), etc.) or a semiconductor memory. In addition, a transmission medium is provided via a wired or wireless transmission medium such as a local area network, the Internet, and digital broadcasting. The program can be pre-installed in a ROM or a storage unit of the device.

[0268] It should be noted that the program executed by the computer may be a program in which processing is performed in time series in the order described in this specification, or may be a program in which processing is performed in parallel or at necessary timing such as when a call is made.

[0269] In this specification, a system means a group of multiple components (devices, modules (components), etc.), and it does not matter whether all the components are in the same housing. Therefore, multiple devices housed in separate housings and connected via a network and a device in which multiple modules are housed in one housing are both systems.

[0270] The effects described in this specification are merely examples and are not limiting, and other effects may be provided.

[0271] The embodiments of the present technology are not limited to the above-described embodiments, and various modifications can be made without departing from the gist of the present technology.

[0272] · Example of configuration combination

[0273] The present technology may also have the following configurations. (1)

[0275] An information processing device, comprising:

[0276] a first communication unit that receives a new key transmitted from a device as a transmission destination of the output data by using a first communication IF when a key for securely processing output data of each frame is updated, and a key ID as identification information of the new key;

[0277] a security processing unit that performs the security processing using the new key and generates frame data of a predetermined format including output data after the security processing and a key ID of the key used for the security processing; and

[0278] The second communication unit transmits the frame data to the device using a second communication IF. (2)

[0280] The information processing device according to (1),

[0281] wherein the first communication unit receives a new key and a key ID encrypted in the device using a key for the first communication IF,

[0282] The information processing device further includes another security processing unit that decrypts the new key and the key ID using the key for the first communication IF. (3)

[0284] The information processing device according to (1),

[0285] wherein the first communication unit receives the new key encrypted in the device using the key for the first communication IF and the key ID added to the encrypted data of the new key,

[0286] The information processing device further includes another security processing unit that decrypts the new key using the key of the first communication IF. (4)

[0288] The information processing device according to any one of (1) to (3),

[0289] The security processing unit performs encryption using the new key as the security processing and generates the frame data including encrypted data of the output data. (5)

[0291] According to the information processing device of (4),

[0292] The security processing unit performs calculation of a MAC value using the new key as the security processing and generates the frame data including the MAC value obtained by the calculation. (6)

[0294] The information processing device according to any one of (1) to (5),

[0295] The security processing unit generates the frame data in which the key ID is arranged as information for constituting additional information of the output data. (7)

[0297] The information processing device according to any one of (1) to (5),

[0298] The security processing unit generates the frame data in which the key ID is arranged as information constituting security-related information, the security-related information being information for achieving security of the output data. (8)

[0300] The information processing device according to (4) or (5),

[0301] The security processing unit generates the frame data in which the key ID is arranged as information constituting an initial vector, and the initial vector is used together with the new key for encryption of the output data. (9)

[0303] The information processing device according to any one of (1) to (8),

[0304] The security processing unit switches the key used for the security processing to the new key at a switching timing of the output data that is a target of the security processing. (10)

[0306] According to the information processing device of (9),

[0307] Here, in response to trigger information transmitted from the device using the first communication IF, the security processing unit switches the key used for the security processing to the new key. (11)

[0309] The information processing device according to any one of (1) to (10), further comprising:

[0310] The sensor unit outputs image data of each frame as output data. (12)

[0312] An information processing method, wherein an information processing device is configured to:

[0313] receiving, in the case of updating a key for securely processing output data of each frame, a new key transmitted from a device as a transmission destination of the output data by using a first communication IF, and a key ID as identification information of the new key;

[0314] executing the security processing using the new key, and generating frame data of a predetermined format including output data after the security processing and a key ID of the key used for the security processing; and

[0315] The frame data is transmitted to the device using the second communication IF. (13)

[0317] A program for causing a computer to execute the following processing:

[0318] receiving, in the case of updating a key for securely processing output data of each frame, a new key transmitted from a device as a transmission destination of the output data by using a first communication IF, and a key ID as identification information of the new key;

[0319] executing the security process using the new key, and generating frame data of a predetermined format including output data after the security process and a key ID of the key used for the security process; and

[0320] The frame data is transmitted to the device using the second communication IF. (14)

[0322] An information processing device, comprising:

[0323] a first communication unit that, when updating a key for securely processing output data of each frame, transmits a new key and a key ID as identification information of the new key to a device as a transmission source of the output data using a first communication IF;

[0324] a second communication unit that receives frame data of a predetermined format including the output data after the security processing and a key ID of a key used for the security processing, which is transmitted from the device using a second communication IF; and

[0325] A security processing unit performs the security processing on the output data included in the frame data using the new key identified by the key ID included in the frame data. (15)

[0327] The information processing device according to (14), further comprising:

[0328] a key management unit that encrypts the new key and the key ID using the key for the first communication IF,

[0329] The first communication unit transmits the encrypted data of the new key and the key ID to the device. (16)

[0331] The information processing device according to (14), further comprising:

[0332] a key management unit that encrypts the new key using the key for the first communication IF,

[0333] Here, the first communication unit adds the key ID to the encrypted data of the new key and transmits the encrypted data to the device. (17)

[0335] An information processing method, wherein an information processing device is configured to:

[0336] When updating a key for securely processing output data of each frame, transmitting a new key and a key ID as identification information of the new key to a device as a transmission source of the output data using the first communication IF;

[0337] receiving frame data of a predetermined format including the output data after the security processing and a key ID of a key used for the security processing, which is transmitted from the device using a second communication IF; and

[0338] The security processing is performed on the output data included in the frame data using the new key identified by the key ID included in the frame data. (18)

[0340] A program for causing a computer to execute the following processing:

[0341] When a key for securely processing output data of each frame is updated, a new key and a key ID as identification information of the new key are transmitted to a device as a transmission source of the output data using the first communication IF;

[0342] receiving frame data of a predetermined format including the output data after the security processing and a key ID of a key used for the security processing, which is transmitted from the device using a second communication IF; and

[0343] The security processing is performed on the output data included in the frame data using the new key identified by the key ID included in the frame data. (19)

[0345] A communication system, comprising:

[0346] The first information processing device comprises:

[0347] a first communication unit that receives, when updating a key for securely processing output data of each frame, a new key transmitted from a device as a transmission destination of the output data by using a first communication IF, and a key ID as identification information of the new key,

[0348] a security processing unit that performs the security processing using the new key and generates frame data of a predetermined format including the output data after the security processing and a key ID of the key used for the security processing, and

[0349] a second communication unit that transmits frame data to the device using a second communication IF; and

[0350] The second information processing device comprises:

[0351] a first communication unit that, when updating the key used for the security processing, transmits the new key and the key ID to the first information processing device as a transmission source of the output data using the first communication IF;

[0352] a second communication unit that receives the frame data transmitted from the first information processing device by using the second communication IF, and

[0353] A security processing unit performs the security processing on the output data included in the frame data using the new key identified by the key ID included in the frame data.

[0354] Reference Symbols List

[0355] 1 Image Sensor

[0356] 2 Host-side processor

[0357] 11 Sensor unit

[0358] 12 high-speed communication IF units

[0359] 13 register communication IF unit

[0360] 14 Register value holding unit

[0361] 15 Key information security processing unit

[0362] 16 Synchronous signal generation unit

[0363] 17 Key switching time management unit

[0364] 18 Image data processing unit

[0365] 19 Image data security processing unit

[0366] 21 High-speed communication IF units

[0367] 22 register communication IF unit

[0368] 23 Data processing unit

[0369] 24 Key Management Unit

[0370] 25 Security Processing Unit.

Claims

1. An information processing device, comprising: a first communication unit that receives a new key transmitted from a device as a transmission destination of the output data by using a first communication IF when a key for securely processing output data of each frame is updated, and a key ID as identification information of the new key; a security processing unit that performs the security processing using the new key and generates frame data of a predetermined format including output data after the security processing and a key ID of the key used for the security processing; as well as The second communication unit transmits the frame data to the device using a second communication IF.

2. The information processing device according to claim 1, in, the first communication unit receives the new key and the key ID encrypted in the device using the key for the first communication IF, The information processing apparatus further includes another security processing unit that decrypts the new key and the key ID using the key for the first communication IF.

3. The information processing device according to claim 1, in, the first communication unit receives the new key and the key ID encrypted in the device using the key for the first communication IF added to the encrypted data of the new key, The information processing apparatus further includes another security processing unit that decrypts the new key using the key for the first communication IF.

4. The information processing device according to claim 1, in, The security processing unit performs encryption using the new key as the security processing and generates the frame data including encrypted data of the output data.

5. The information processing device according to claim 1, in, The security processing unit performs calculation of a MAC value using the new key as the security processing and generates the frame data including the MAC value obtained by the calculation.

6. The information processing device according to claim 1, in, The security processing unit generates the frame data in which the key ID is arranged as information for constituting additional information of the output data.

7. The information processing device according to claim 1, in, The security processing unit generates the frame data in which the key ID is arranged as information constituting security-related information, the security-related information being information for achieving security of the output data.

8. The information processing device according to claim 4, in, The security processing unit generates the frame data in which the key ID is arranged as information constituting an initial vector used for encryption of the output data together with the new key.

9. The information processing device according to claim 1, in, The security processing unit switches the key used for the security processing to the new key at a switching timing of the output data that is a target of the security processing.

10. The information processing device according to claim 9, in, In response to trigger information transmitted from the device using the first communication IF, the security processing unit switches the key used for the security processing to the new key.

11. The information processing device according to claim 1, further comprising: The sensor unit outputs image data of each frame as the output data.

12. An information processing method, in which an information processing device is configured to: receiving, in the case of updating a key for securely processing output data of each frame, a new key transmitted from a device as a transmission destination of the output data by using a first communication IF, and a key ID as identification information of the new key; executing the security processing using the new key, and generating frame data of a predetermined format including output data after the security processing and a key ID of the key used for the security processing; as well as The frame data is transmitted to the device using the second communication IF.

13. A program for causing a computer to execute the following processing: receiving, in the case of updating a key for securely processing output data of each frame, a new key transmitted from a device as a transmission destination of the output data by using a first communication IF, and a key ID as identification information of the new key; executing the security process using the new key and generating frame data of a predetermined format including output data after the security process and a key ID of the key used for the security process; as well as The frame data is transmitted to the device using the second communication IF.

14. An information processing device, comprising: a first communication unit that, when updating a key for securely processing output data of each frame, transmits a new key and a key ID as identification information of the new key to a device as a transmission source of the output data using a first communication IF; a second communication unit that receives frame data of a predetermined format including the output data after the security processing and a key ID of a key used for the security processing, which is transmitted from the device using a second communication IF; as well as A security processing unit performs the security processing on the output data included in the frame data using the new key identified by the key ID included in the frame data.

15. The information processing device according to claim 14, further comprising: a key management unit, encrypting the new key and the key ID using the key for the first communication IF, The first communication unit sends encrypted data of the new key and the key ID to the device.

16. The information processing device according to claim 14, further comprising: a key management unit, encrypting the new key using the key for the first communication IF, The first communication unit adds the key ID to encrypted data of the new key and transmits the encrypted data to the device.

17. An information processing method, wherein: The information processing device is configured to: When updating a key for securely processing output data of each frame, transmitting a new key and a key ID as identification information of the new key to a device as a transmission source of the output data using the first communication IF; receiving frame data of a predetermined format including the output data after the security processing and a key ID of a key used for the security processing, which is transmitted from the device using a second communication IF; and The security processing is performed on the output data included in the frame data using the new key identified by the key ID included in the frame data.

18. A program for causing a computer to execute the following processing: When a key for securely processing output data of each frame is updated, a new key and a key ID as identification information of the new key are transmitted to a device as a transmission source of the output data using the first communication IF; receiving frame data of a predetermined format including the output data after the security processing and a key ID of a key used for the security processing, which is transmitted from the device using a second communication IF; and The security processing is performed on the output data included in the frame data using the new key identified by the key ID included in the frame data.

19. A communication system comprising: The first information processing device comprises: a first communication unit that receives, when updating a key for securely processing output data of each frame, a new key transmitted from a device as a transmission destination of the output data by using a first communication IF, and a key ID as identification information of the new key, a security processing unit that performs the security processing using the new key and generates frame data of a predetermined format including the output data after the security processing and a key ID of the key used for the security processing, and a second communication unit, which uses a second communication IF to send frame data to the device; and a second information processing device, comprising: a first communication unit that, when updating the key used for the security processing, transmits the new key and the key ID to the first information processing device as a transmission source of the output data using the first communication IF; a second communication unit that receives the frame data transmitted from the first information processing device by using the second communication IF, and A security processing unit performs the security processing on the output data included in the frame data using the new key identified by the key ID included in the frame data.

Images