Information processing device, information processing method, and program

Abstract

The present technology relates to an information processing device, an information processing method, a program, and an information processing system which can enhance the safety of a time-varying key. An information processing device of an aspect of the present technology receives a first random number and a second random number transmitted from another information processing device, generates a third random number, generates a first time-varying key by applying the second and third random numbers to a first fixed key, encodes the first random number by using the first time-varying key, and transmits the encoded first random number and the third random number to another information processing device. The present technology can be applied to an IC card mounted with an IC chip that performs non-contact communication.

Description

[Technical field]

[0001] This technology is particularly effective in improving the security of time-varying keys. Information processing device, information processing method, and program Regarding. [Background technology]

[0002] In recent years, payments using IC cards equipped with IC chips such as FeliCa (registered trademark) are commonly made at stores, train station ticket gates, etc. Users make payments by holding their IC cards over an R / W (Reader / Writer) device.

[0003] When an IC card is held over a R / W device, an authentication process is performed between the IC card and the R / W device to prevent unauthorized use of the IC card. In the authentication process, authentication is performed using keys that the IC card and the R / W device have in advance.

[0004] Patent Document 1 discloses a technique for generating a time-varying key using a random number generated in an IC card in order to prevent a key set in the IC card from being analyzed by a DFA attack.

[0005] A DFA (Differential Fault Analysis) attack is a technique that intentionally induces a fault during encryption processing and identifies the key used for encryption from the difference between a correct ciphertext and a ciphertext containing an error. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] JP 2010-45761 A Summary of the Invention [Problem to be solved by the invention]

[0007] When generating a time-varying key using only random numbers generated in an IC card, the randomness of the generated random numbers may be degraded due to a malfunction of the random number generator or due to tampering with the random numbers on the communication path. If the randomness is degraded and the random numbers used to generate the time-varying key become fixed values, there is a risk that a DFA attack may succeed.

[0008] The present technology has been made in consideration of such circumstances, and makes it possible to improve the security of a time-varying key. [Means for solving the problem]

[0009] An information processing device according to a first aspect of the present technology, Memory, From other information processing devices With the Read command A receiver for receiving the first and second random numbers transmitted, and a third random number and the fourth random number a time-varying key generation unit that generates a first time-varying key by applying the second random number and the third random number to a first fixed key; The fourth random number, The first random number and data obtained by concatenating the first data read from the memory. Encrypt the above using the first time-varying key. Generate the first message by An encryption unit; the fourth random number, the third random number, the first data, and the first message a transmission unit that transmits the information to the other information processing device; an authentication unit that performs authentication processing based on data transmitted from the other information processing device; Equipped with.

[0010] According to a second aspect of the present technology, there is provided an information processing device including: a random number generation unit that generates a first random number and a second random number; With the Read command a transmission unit for transmitting the second random number to another information processing device; and a first time-varying key generated by applying the second random number and a third random number generated in the other information processing device to a first fixed key. Furthermore, a fourth random number generated in the other information processing device, The first random number and the fourth random number, the third random number, the first data, and the first message transmitted from the other information processing device after the first message is generated in the other information processing device by encrypting data obtained by concatenating the first data read from the memory. a receiving unit that receives the third random number and the second random number generated by the random number generating unit, and a time variable key generating unit that generates a second time variable key by applying the third random number and the second random number generated by the random number generating unit to a second fixed key that is the same fixed key as the first fixed key held by the other information processing device; an encryption unit that encrypts data obtained by concatenating the fourth random number, the first random number, and the first data using the second time-varying key; and and an authentication unit that performs authentication processing based on the authentication result.

[0011] In a first aspect of the present technology, With the Read command The first and second random numbers are received, and the third random number is and the fourth random number a first time-varying key is generated by applying the second random number and the third random number to a first fixed key; The fourth random number, The first random number and data obtained by concatenating the first data read from the memory. is encrypted using the first time-varying key The first message is generated by And, the fourth random number, the third random number, the first data, and the first message is transmitted to the other information processing device.

[0012] In a second aspect of the present technology, a first random number and a second random number are generated, and the first random number and the second random number are With the Read command The second random number is transmitted to another information processing device, and a first time-varying key is generated by applying the second random number and a third random number generated in the other information processing device to a first fixed key. Furthermore, a fourth random number generated in the other information processing device, The first random number and the fourth random number, the third random number, the first data, and the first message transmitted from the other information processing device after the encryption of data obtained by concatenating the first data read from the memory is performed in the other information processing device. Furthermore, a second time-varying key is generated by applying the third random number and the generated second random number to a second fixed key that is the same fixed key as the first fixed key held by the other information processing device, The data obtained by concatenating the fourth random number, the first random number, and the first data is encrypted using the second time-varying key, and the received first message and the data generated by the encryption using the second time-varying key are The authentication process is performed based on the above. [Brief description of the drawings]

[0013] [Figure 1] 1 is a diagram illustrating an example of a configuration of an information processing system according to an embodiment of the present technology. [Diagram 2] FIG. 13 is a diagram showing an authentication sequence. [Diagram 3] FIG. 13 is a diagram showing an example of fraud. [Figure 4] FIG. 1 is a diagram showing an example of an authentication sequence according to an embodiment of the present technology. [Diagram 5] FIG. 13 is a diagram showing another example of fraud. [Figure 6] 5 is a diagram illustrating an effect achieved by the authentication sequence in FIG. 4. [Figure 7] FIG. 11 is a diagram showing a sequence when one-sided MAC authentication is performed. [Figure 8]FIG. 11 is a diagram showing a sequence when MAC mutual authentication is performed. [Figure 9] FIG. 9 is a diagram showing a sequence following FIG. 8. [Figure 10] FIG. 11 is a diagram showing a sequence for performing MAC mutual authentication and reading and writing data. [Figure 11] FIG. 11 is a diagram showing a sequence following FIG. [Figure 12] FIG. 11 is a diagram showing a sequence for performing MAC mutual authentication and reading and writing encrypted data. [Figure 13] FIG. 13 is a diagram showing the sequence following FIG. 12. [Figure 14] 1 is a block diagram showing an example of the configuration of an IC card. [Figure 15] FIG. 2 is a block diagram showing a configuration example of a R / W device. [Figure 16] FIG. 2 is a block diagram showing an example of the configuration of a computer. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] Hereinafter, an embodiment of the present technology will be described in the following order. 1. Information Processing System Configuration 2. Authentication sequence 3. Application Examples 4. Apparatus Configuration 5. Variations

[0015] <Configuration of information processing system> FIG. 1 is a diagram illustrating an example of the configuration of an information processing system according to an embodiment of the present technology.

[0016] 1, an information processing system according to an embodiment of the present technology includes an R / W device 1 and an IC card 2. The R / W device 1 is appropriately connected to a computer (not shown).

[0017] The IC card 2 is a card equipped with a contactless IC chip such as FeliCa (registered trademark). When the IC card 2 is held over the R / W device 1, contactless near-field communication is performed between the R / W device 1 and the IC card 2, and various processes are performed in the IC card 2 in response to commands sent from the R / W device 1.

[0018] For example, when a Read command is sent, the information stored in the IC chip of the IC card 2 is read, and the read information is sent as a response to the R / W device 1. When a Write command is sent, the information stored in the IC chip of the IC card 2 is updated, and information indicating that the update was successful is sent as a response to the R / W device 1.

[0019] The following describes the authentication process carried out between the R / W device 1 and the IC card 2. In the description of the authentication process, the following terms are used as appropriate.

[0020] IDm :Manufacture ID. A unique ID for each IC chip on the IC card 2.

[0021] Ra, Rb, Rc, Rd :random number

[0022] Cipher text = ENC K (Plain text) : Perform cryptographic operations (encryption) on plain text using key K to obtain cipher text

[0023] Plain text = DEC K (Cipher text) : Perform cryptographic operation (decryption) on the cipher text using key K to obtain plain text

[0024] Message = MAC K(Plain text) : A cryptographic operation (MAC) is performed on the plain text using key K to obtain a MAC (Message Authentication Code).

[0025] K' = KDF K (a,b) : Using parameters a, b and a key derivation function (KDF), derive a derived key K' from the key K.

[0026] ? A == B :Compare A and B and get authentication result

[0027] A||B : The concatenation of A and B

[0028] <Authentication sequence> Authentication sequence Fig. 2 is a diagram showing an authentication sequence. A process similar to the authentication process according to the sequence shown in Fig. 2 is described in, for example, Patent Document 1.

[0029] In step S1, the R / W device 1 generates a random number Ra. The R / W device 1 is provided with a random number generator for generating the random number Ra.

[0030] In step S 2 , the R / W device 1 transmits the random number Ra to the IC card 2 .

[0031] In step S11, the IC card 2 receives the random number Ra transmitted from the R / W device 1.

[0032] In step S12, the IC card 2 generates a random number Rc. The IC card 2 is provided with a random number generator for generating the random number Rc.

[0033] In step S13, the IC card 2 uses the random number Rc and the function KDF to generate the key K based on the key AK. enc Generate the key K enc is expressed by the following formula (1).enc The generation of the key AK is a process of applying the key AK to the random number Rc. The key AK is a common fixed key (pre-shared key) that is held in advance by both the R / W device 1 and the IC card 2.

number

[0034] As shown in speech bubble #1, a newly generated random number Rc is used, so the key K generated using the random number Rc enc is a time-varying key.

[0035] In step S14, the IC card 2 receives the key K enc The random number Ra sent from the R / W device 1 is subjected to cryptographic calculation using the key K to generate a message M1. The message M1 is expressed by the following formula (2). enc The cryptographic calculation performed in the IC card 2 using this is the encryption process.

number

[0036] Since the key used to generate message M1 is a time-varying key, as shown in speech bubble #2, a DFA attack using message M1 is not possible.

[0037] In step S15, the IC card 2 concatenates the message M1 and the random number Rc and transmits them.

[0038] In step S3, the R / W device 1 receives the message M1 and the random number Rc transmitted from the IC card 2.

[0039] In step S4, the R / W device 1 extracts a random number Rc from the received information.

[0040] In step S5, the R / W device 1 applies the key AK to the random number Rc to obtain the key K enc Generate the key K encis expressed by the following equation (3).

number

[0041] In step S6, the R / W device 1 receives the key K enc The random number Ra' is obtained by performing an encryption operation using the key K on the message M1. The random number Ra' is expressed by the following formula (4). enc The cryptographic operation performed in the R / W device 1 using this is the decryption process.

number

[0042] In step S7, the R / W device 1 compares the random number Ra generated in step S1 with the random number Ra' obtained by decrypting the message M1 in step S6, and performs authentication.

[0043] If the random number Ra and the random number Ra' match, the authentication is deemed successful and the subsequent processes are carried out, whereas if they do not match, the authentication is deemed unsuccessful and the subsequent processes are carried out.

[0044] FIG. 3 is a diagram showing an example of fraud.

[0045] As shown in balloon #11 in Fig. 3, the random number Rc may become a fixed value due to an attack on the random number generator for generating the random number Rc provided in the IC card 2 or due to a failure of the random number generator. Note that the sequence shown in Fig. 3 is the same sequence as the sequence shown in Fig. 2.

[0046] In this case, since the key is generated based on a fixed value, as shown in speech bubble #12, the key K generated in the IC card 2 enc is not a time-varying key. In other words, a DFA attack using message M1 is possible.

[0047] Authentication sequence according to an embodiment of the present technology 4 is a diagram showing an example of an authentication sequence according to an embodiment of the present technology. Descriptions that overlap with the above description will be omitted as appropriate.

[0048] In the authentication sequence shown in FIG. 4, in addition to the random number Rc, the random number Rd is enc This is used to generate the key K enc The time-varying key property of is maintained.

[0049] In step S31, the R / W device 1 generates a random number Ra and a random number Rd. The R / W device 1 is provided with a random number generator for generating the random number Ra and a random number generator for generating the random number Rd.

[0050] In step S32, the R / W device 1 concatenates the random numbers Ra and Rd and transmits the concatenated random numbers to the IC card 2.

[0051] In step S 41 , the IC card 2 receives the random numbers Ra and Rd transmitted from the R / W device 1 .

[0052] In step S42, the IC card 2 generates a random number Rc.

[0053] In step S43, the IC card 2 applies the key AK to the random number Rc generated in step S42 and the random number Rd transmitted from the R / W device 1 to obtain the key K enc Generate the key K enc is expressed by the following equation (5).

number

[0054] In step S44, the IC card 2 receives the key K enc The random number Ra sent from the R / W device 1 is encrypted using the above formula to generate a message M1.

[0055] In this way, in the IC card 2, the key K is generated by combining the random number Rc generated by the IC card 2 itself and the random number Rd generated by the R / W device 1. enc is generated.

[0056] Therefore, even if the random number Rc becomes a fixed value due to an attack on the random number generator as shown in speech bubble #21, the random number Rd remains a random number as shown in speech bubble #22. enc is a time-varying key.

[0057] Furthermore, since the key used to generate message M1 is a time-variant key, as shown in speech bubble #23, a DFA attack using message M1 is not possible.

[0058] In step S45, the IC card 2 concatenates the message M1 and the random number Rc and transmits them.

[0059] In step S33, the R / W device 1 receives the message M1 and the random number Rc transmitted from the IC card 2.

[0060] In step S34, the R / W device 1 extracts a random number Rc from the received information.

[0061] In step S35, the R / W device 1 applies the key AK to the random number Rc extracted in step S34 and the random number Rd generated in step S31 to obtain the key K enc Generate the key K enc is expressed by the above equation (5).

[0062] In the R / W device 1, a key K is generated by combining a random number Rc generated by the IC card 2 and a random number Rd generated by the R / W device 1 itself. enc is generated.

[0063] In step S36, the R / W device 1 receives the key K encThe message M1 is encrypted using the above formula to decrypt the random number Ra'.

[0064] In step S37, the R / W device 1 compares the random number Ra generated in step S31 with the random number Ra' obtained by decrypting the message M1 in step S36, and performs authentication.

[0065] If the random number Ra and the random number Ra' match, the authentication is deemed successful and the subsequent processes are carried out, whereas if they do not match, the authentication is deemed unsuccessful and the subsequent processes are carried out.

[0066] In this way, the key K is generated between the R / W device 1 and the IC card 2 by using random numbers generated by each of them. enc is generated.

[0067] As a result, even if the random number Rc becomes a fixed value due to an attack on the random number generator of the IC card 2, the key K enc It is possible to prevent the randomness of the random numbers used to generate the key K from decreasing. enc Since the generation of is based on random numbers, the result is a time-varying key K enc This can improve safety.

[0068] Effect of the authentication sequence according to one embodiment of the present technology FIG. 5 is a diagram showing another example of fraud.

[0069] 5, the random number Rc generated by the IC card 2 may be tampered with and converted to a fixed value on the communication path. The sequence shown in FIG. 5 is the same as the sequence shown in FIG.

[0070] In this case, since the key is generated based on a fixed value, as shown in balloon #32, the key K generated in the R / W device 1 is enc does not become a time-varying key. In other words, as shown in speech bubble #33, a DFA attack using message M1 becomes possible.

[0071] FIG. 6 is a diagram for explaining the effect achieved by the authentication sequence in FIG.

[0072] The sequence shown in Fig. 6 is the same as the sequence described with reference to Fig. 4. Even if the random number Rc generated by the IC card 2 is altered to a fixed value on the communication path as shown in balloon #41 in Fig. 6, the random number Rd remains a random number as shown in balloon #42. The key K generated using the random number Rd enc is a time-varying key.

[0073] Furthermore, since the key used to decrypt message M1 is a time-varying key, as shown in speech bubble #43, a DFA attack using message M1 is not possible.

[0074] In this way, even if the random number Rc generated by the IC card 2 is altered to a fixed value on the communication path, the time-varying key K enc This can improve safety.

[0075] <Application Examples> A key K generated based on the random numbers Rc and Rd enc An application example of an authentication sequence using the above will be described.

[0076] Application example 1 (MAC one-sided authentication) FIG. 7 is a diagram showing a sequence when one-sided MAC authentication is performed.

[0077] In the MAC authentication, a MAC is generated using IDm, which is the identification information of the IC chip of the IC card 2. Also, the MAC is used to verify whether or not unauthorized tampering has been performed. In FIG. 7, the description overlapping with the above description will be omitted as appropriate.

[0078] In step S101, the R / W device 1 generates a random number Ra and a random number Rd.

[0079] In step S102, the R / W device 1 concatenates the random numbers Ra and Rd and transmits them to the IC card 2 along with an Internal Authenticate command.

[0080] In step S111, the IC card 2 receives the Internal Authenticate command, the random number Ra, and the random number Rd transmitted from the R / W device 1.

[0081] In step S112, the IC card 2 generates a random number Rc.

[0082] In step S113, the IC card 2 applies the key AK to the random number Rc generated in step S112 and the random number Rd transmitted from the R / W device 1 to obtain a key (MAC key) K mac Generate the key K mac is expressed by the following equation (6).

number

[0083] In this way, in the IC card 2, the key K is generated by combining the random number Rc generated by the IC card 2 itself and the random number Rd generated by the R / W device 1. mac is generated.

[0084] In step S114, the IC card 2 receives the key K mac The MAC is generated by performing cryptographic calculations using the above formula on the data obtained by concatenating the random number Ra sent from the R / W device 1 and the IDm of the IC card 2. The MAC is expressed by the following formula (7).

number

[0085] In step S115, the IC card 2 concatenates IDm, the random number Rc, and the MAC together with the Internal Authenticate response and transmits the result.

[0086] In step S 103 , the R / W device 1 receives the IDm, the random number Rc, and the MAC transmitted from the IC card 2 .

[0087] In step S104, the R / W device 1 extracts a random number Rc from the received information.

[0088] In step S105, the R / W device 1 applies the key AK to the random number Rc extracted in step S104 and the random number Rd generated in step S101 to obtain the key K mac Generate the key K mac is expressed by the above equation (6).

[0089] In the R / W device 1, a key K is generated by combining a random number Rc generated by the IC card 2 and a random number Rd generated by the R / W device 1 itself. mac is generated.

[0090] In step S106, the R / W device 1 receives the key K mac The MAC' is generated by performing cryptographic calculation using the above formula on the data obtained by concatenating the random number Ra and IDm transmitted from the IC card 2. The MAC' is expressed by the following formula (8).

number

[0091] In step S107, the R / W device 1 compares the MAC received in step S103 with the MAC' generated in step S106 to perform authentication.

[0092] If the MAC and MAC' match, the authentication is deemed successful and the subsequent processes are carried out, whereas if they do not match, the authentication is deemed unsuccessful and the subsequent processes are carried out.

[0093] By performing MAC one-sided authentication as described above, even if the random number Rc becomes a fixed value due to an attack on the random number generator of the IC card 2, the time-varying key K mac This can improve safety.

[0094] Application example 2 (MAC mutual authentication) 8 and 9 are diagrams showing sequences when performing MAC mutual authentication. In Fig. 8 and Fig. 9, descriptions that overlap with the above description will be omitted as appropriate.

[0095] In step S131, the R / W device 1 generates a random number Ra and a random number Rd.

[0096] In step S132, the R / W device 1 concatenates the random numbers Ra and Rd and transmits them to the IC card 2 along with the Mutual Authenticate 1 command.

[0097] In step S151, the IC card 2 receives the Mutual Authenticate 1 command, the random number Ra, and the random number Rd transmitted from the R / W device 1.

[0098] In step S152, the IC card 2 generates random numbers Rb and Rc.

[0099] In step S153, the IC card 2 applies the key AK to the random number Rc generated in step S152 and the random number Rd transmitted from the R / W device 1 to obtain the key K mac Generate the key K mac is expressed by the above equation (6).

[0100] In step S154, the IC card 2 receives the key K mac The MAC is generated by performing cryptographic calculations using the above formula on the data obtained by concatenating the random number Rb, the random number Ra sent from the R / W device 1, and IDm. The MAC is expressed by the following formula (9).

number

[0101] In step S155, the IC card 2 concatenates the random number Rb, the random number Rc, IDm, and MAC together with the Mutual Authenticate 1 response and transmits the result.

[0102] In step S133, the R / W device 1 receives the random number Rb, the random number Rc, the IDm, and the MAC transmitted from the IC card 2.

[0103] In step S134, the R / W device 1 extracts a random number Rc from the received information.

[0104] In step S135, the R / W device 1 applies the key AK to the random number Rc extracted in step S104 and the random number Rd generated in step S131 to obtain the key K mac Generate the key K mac is expressed by the above equation (6).

[0105] In step S136, the R / W device 1 receives the key K mac The encryption process using the above formula is performed on the data obtained by concatenating the random numbers Rb, Ra, and IDm to generate a MAC'. The MAC' is expressed by the following formula (10).

number

[0106] In step S137, the R / W device 1 compares the MAC received in step S133 with the MAC' generated in step S136 to perform authentication.

[0107] If the MAC and MAC' match, in step S138 (FIG. 9), the R / W device 1 reads the key K macThe random number Ra generated in step S131 and the random number Rb transmitted from the IC card 2 are concatenated together to generate a MAC″. The MAC″ is expressed by the following equation (11).

number

[0108] In step S139, the R / W device 1 transmits the MAC'' generated in step S138 to the IC card 2 together with a Mutual Authenticate 2 command.

[0109] In step S 156 , the IC card 2 receives the Mutual Authenticate 2 command and MAC″ sent from the R / W device 1 .

[0110] In step S157, the IC card 2 receives the key K mac The encryption operation using the above formula is performed on the data obtained by concatenating the random number Ra sent from the R / W device 1 and the random number Rb generated in step S152, thereby generating a MAC'''. The MAC''' is expressed by the following formula (12).

number

[0111] In step S158, the IC card 2 compares the MAC'' received in step S156 with the MAC'''' generated in step S157, and performs authentication.

[0112] In step S159, the IC card 2 transmits the authentication result of MAC'' and MAC''.

[0113] In step S 140 , the R / W device 1 receives the authentication result transmitted from the IC card 2 .

[0114] The above process makes it possible to realize MAC mutual authentication that makes DFA attacks more difficult.

[0115] Application example 3 (Combination of MAC mutual authentication and data reading and writing) 10 and 11 are diagrams showing sequences for performing MAC mutual authentication and reading and writing data.

[0116] 10 and 11, reading and writing of data stored in the IC card 2 is performed together with MAC mutual authentication. In Fig. 10 and Fig. 11, explanations that overlap with those described above will be omitted as appropriate.

[0117] In step S171, the R / W device 1 generates a random number Ra and a random number Rd.

[0118] In step S172, the R / W device 1 concatenates the random numbers Ra and Rd and transmits them to the IC card 2 along with the Mutual Authenticate 1 and Read command.

[0119] In step S191, the IC card 2 receives the Mutual Authenticate 1 and Read command, the random number Ra, and the random number Rd transmitted from the R / W device 1.

[0120] In step S192, the IC card 2 generates random numbers Rb and Rc.

[0121] In step S193, the IC card 2 applies the key AK to the random number Rc generated in step S192 and the random number Rd transmitted from the R / W device 1 to obtain the key K mac Generate the key K mac is expressed by the above equation (6).

[0122] In step S194, the IC card 2 reads Data1 stored in the memory of the IC chip.

[0123] In step S195, the IC card 2 receives the key K mac The random number Rb generated in step S192, the random number Ra transmitted from the R / W device 1, and the Data1 read in step S194 are concatenated to generate a MAC. The MAC is expressed by the following formula (13).

number

[0124] In step S196, the IC card 2 concatenates the random number Rb, the random number Rc, Data1, and the MAC and transmits the result as a Mutual Authenticate 2 and Read response.

[0125] In step S173, the R / W device 1 receives the random number Rb, the random number Rc, Data1, and MAC transmitted from the IC card 2.

[0126] In step S174, the R / W device 1 extracts a random number Rc from the received information.

[0127] In step S175, the R / W device 1 applies the key AK to the random number Rc extracted in step S174 and the random number Rd generated in step S171 to obtain the key K mac Generate the key K mac is expressed by the above equation (6).

[0128] In step S176, the R / W device 1 receives the key K mac The encryption operation using the above formula is performed on the data obtained by concatenating the random number Rb, the random number Ra, and Data1 to generate a MAC'. The MAC' is expressed by the following formula (14).

number

[0129] In step S177, the R / W device 1 compares the MAC received in step S173 with the MAC' generated in step S176, and performs authentication.

[0130] If the MAC and MAC' match, in step S178 (FIG. 11), the R / W device 1 obtains the key K mac The encryption operation using the above formula is performed on the data obtained by concatenating the random number Ra, the random number Rb, and Data2 to generate a MAC''. The MAC'' is expressed by the following formula (15).

number

[0131] In step S179, the R / W device 1 transmits Data2 and MAC'' along with a Mutual Authenticate 2 and Write command to the IC card 2. Data2 is data to be newly stored in the memory of the IC chip.

[0132] In step S197, the IC card 2 receives the Mutual Authenticate 2 and Write command, Data2, and MAC'' sent from the R / W device 1.

[0133] In step S198, the IC card 2 receives the key K mac The MAC''' is generated by performing an encryption operation using the above formula on the data obtained by concatenating the random number Ra, the random number Rb, and Data2. The MAC''' is expressed by the following formula (16).

number

[0134] In step S199, the IC card 2 compares the MAC'' received in step S197 with the MAC'''' generated in step S198, and performs authentication.

[0135] In step S200, if MAC'' and MAC''' match and authentication is successful, the IC card 2 writes Data2.

[0136] In step S201, the IC card 2 transmits the authentication result and the write result as a Mutual Authenticate 2 and Write response.

[0137] In step S 180 , the R / W device 1 receives the authentication result and the writing result transmitted from the IC card 2 .

[0138] Application example 4 (Combination of encrypted MAC mutual authentication and reading and writing encrypted data) 12 and 13 are diagrams showing sequences for performing MAC mutual authentication and reading and writing of encrypted data.

[0139] The processing in Figures 12 and 13 differs from the processing in Figures 10 and 11 in that the transmission and reception of data read from the IC card 2 and the transmission and reception of data to be written to the IC card 2 are performed in an encrypted state. In Figures 12 and 13, descriptions that overlap with those described above will be omitted as appropriate.

[0140] In step S221, the R / W device 1 generates a random number Ra and a random number Rd.

[0141] In step S222, the R / W device 1 concatenates the random numbers Ra and Rd and transmits them to the IC card 2 along with the Mutual Authenticate 1 and Read command.

[0142] In step S251, the IC card 2 receives the Mutual Authenticate 1 and Read command, the random number Ra, and the random number Rd transmitted from the R / W device 1.

[0143] In step S252, the IC card 2 generates random numbers Rb and Rc.

[0144] In step S253, the IC card 2 applies the key AK to the random number Rc generated in step S252 and the random number Rd transmitted from the R / W device 1 to obtain the key K enc and key K mac Generate the key K enc and key K mac is expressed by the following equation (17).

number

[0145] In step S254, the IC card 2 reads Data1 stored in the memory of the IC chip.

[0146] In step S255, the IC card 2 receives the key K enc The random number Rb generated in step S252, the random number Ra transmitted from the R / W device 1, and the Data1 read in step S254 are concatenated to generate a ciphertext C1. The ciphertext C1 is expressed by the following formula (18).

number

[0147] In step S256, the IC card 2 receives the key K mac The encryption operation using the above formula is performed on the ciphertext C1 generated in step S255 to generate a MAC. The MAC is expressed by the following formula (19).

number

[0148] In step S257, the IC card 2 concatenates the random number Rc, the ciphertext C1, and the MAC and transmits the result as a Mutual Authenticate 2 and Read response.

[0149] In step S 223 , the R / W device 1 receives the random number Rc, the ciphertext C 1 , and the MAC transmitted from the IC card 2 .

[0150] In step S224, the R / W device 1 extracts a random number Rc from the received information.

[0151] In step S225, the R / W device 1 applies the key AK to the random number Rc extracted in step S224 and the random number Rd generated in step S221 to obtain the key K enc and key K mac Generate the key K enc and key K mac is expressed by the above equation (17).

[0152] In step S226, the R / W device 1 receives the key K mac The encryption operation using the above formula is performed on the ciphertext C1 transmitted from the IC card 2 to generate a MAC'. The MAC' is expressed by the following formula (20).

number

[0153] In step S227, the R / W device 1 compares the MAC received in step S223 with the MAC' generated in step S226, and performs authentication.

[0154] If the MAC and MAC' match, in step S228 (FIG. 13), the R / W device 1 obtains the key K enc The cryptographic operation using the above formula is performed on the ciphertext C1 transmitted from the IC card 2, and the random numbers Rb', Ra', and Data1 are decrypted. The decrypted random numbers Rb', Ra', and Data1 are expressed by the following formula (21).

number

[0155] In step S229, the R / W device 1 compares the random number Ra generated in step S221 with the random number Ra' obtained by decryption in step S228.

[0156] If the random number Ra and the random number Ra′ match, in step S230, the R / W device 1 enc The cryptographic operation using the above formula is performed on the data obtained by concatenating the random numbers Ra', Rb', and Data2 to generate ciphertext C2. The ciphertext C2 is expressed by the following formula (22).

number

[0157] In step S231, the R / W device 1 receives the key K mac The cryptographic operation using the above formula is performed on the ciphertext C2 generated in step S230 to generate a MAC''. The MAC'' is expressed by the following formula (23).

number

[0158] In step S232, the R / W device 1 transmits the ciphertext C2 and MAC'' to the IC card 2 along with a Mutual Authenticate 2 and Write command.

[0159] In step S258, the IC card 2 receives the Mutual Authenticate 2 and Write command, the ciphertext C2, and the MAC'' sent from the R / W device 1.

[0160] In step S259, the IC card 2 receives the key K mac The cryptographic operation using the above formula is performed on the ciphertext C2 received in step S258 to generate a MAC'''. The MAC''' is expressed by the following formula (24).

number

[0161] In step S260, the IC card 2 compares the MAC'' received in step S258 with the MAC'''' generated in step S259, and performs authentication.

[0162] If the MAC'' and MAC''' match, in step S261, the IC card 2 enc The cryptographic operation using the above formula is performed on the ciphertext C2 sent from the R / W device 1, and the random numbers Ra'', Rb'', and Data2 are decrypted. The decrypted random numbers Ra'', Rb'', and Data2 are expressed by the following formula (25).

number

[0163] In step S262, the IC card 2 compares the random number Ra received in step S251 with the random number Ra'' obtained by decryption in step S261.

[0164] If the random number Ra and the random number Ra″ match, in step S263, the IC card 2 compares the random number Rb generated in step S252 with the random number Rb″ obtained by decryption in step S261.

[0165] If the random number Rb and the random number Rb'' match, the IC card 2 writes Data2 in step S264.

[0166] In step S265, the IC card 2 transmits the authentication result and the write result as a Mutual Authenticate 2 and Write response.

[0167] In step S 233 , the R / W device 1 receives the authentication result and the writing result transmitted from the IC card 2 .

[0168] <Device configuration> Here, the configurations of the R / W device 1 and the IC card 2 will be described.

[0169] IC card 2 configuration FIG. 14 is a block diagram showing an example of the configuration of the IC card 2. As shown in FIG.

[0170] The IC card 2 is made up of an antenna unit 101 , a receiving unit 102 , a decrypting unit 103 , an authenticating unit 104 , an encrypting unit 105 , a transmitting unit 106 , a random number generating unit 107 , a key generating unit 108 , and a storage unit 109 .

[0171] When the IC card 2 functions as an information processing device, the antenna unit 101 transmits and receives electromagnetic waves to and from an antenna unit 151 (FIG. 15) of the R / W device 1 functioning as another information processing device.

[0172] The receiving unit 102 receives the signal transmitted from the R / W device 1 via the antenna unit 101 and demodulates it.

[0173] The decryption unit 103 decrypts the encrypted information received by the reception unit 102 .

[0174] The authentication unit 104 performs authentication processing of the R / W device 1 based on information supplied from the decryption unit 103 etc. The authentication unit 104 controls the authentication processing performed based on a message M1 generated by encryption using a time-varying key. The authentication unit 104 also controls the authentication processing performed based on a MAC, which is a message generated by encrypting data including IDm using a time-varying key.

[0175] Furthermore, if the authentication process is successful, the authentication unit 104 reads data stored in the storage unit 109 or writes data to the storage unit 109 .

[0176] The encryption unit 105 performs cryptographic operations on information to be transmitted to the R / W device 1. The encryption unit 105 performs cryptographic operations to encrypt data.

[0177] The transmitting unit 106 modulates the information supplied from the encryption unit 105 and the like, outputs it to the antenna unit 101 , and causes it to be transmitted to the R / W device 1 .

[0178] The random number generation unit 107 generates random numbers. The random number generation unit 107 functions as the random number generator described above. The random numbers generated by the random number generation unit 107 do not need to be random numbers in the mathematical sense, and may be pseudo-random numbers or counter values ​​generated by a counter.

[0179] The key generation unit 108 generates a time-varying key based on information supplied from the random number generation unit 107 and the like, and supplies the time-varying key to the decryption unit 103 and the encryption unit 105. The time-varying key is a key that changes every time it is generated.

[0180] The storage unit 109 is configured by a memory of an IC chip. The storage unit 109 stores various information such as a program executed in the IC chip, IDm, and information related to electronic money.

[0181] The output of the receiving unit 102 is supplied to the decrypting unit 103, as well as the authentication unit 104, the encryption unit 105, the key generating unit 108, etc. The output of the authentication unit 104 is supplied to the encryption unit 105, as well as the transmission unit 106, etc. The output of the random number generating unit 107 is supplied to the key generating unit 108, as well as the decrypting unit 103, the authentication unit 104, the encryption unit 105, the transmission unit 106, etc. The output of the key generating unit 108 is supplied to the decrypting unit 103, the encryption unit 105, the authentication unit 104, etc.

[0182] 4, the process of step S41 is performed by the receiving unit 102. The process of step S42 is performed by the random number generating unit 107, and the process of step S43 is performed by the key generating unit 108. The process of step S44 is performed by the encryption unit 105, and the process of step S45 is performed by the transmitting unit 106.

[0183] 7, the process of step S111 is performed by the receiving unit 102. The process of step S112 is performed by the random number generating unit 107, and the process of step S113 is performed by the key generating unit 108. The process of step S114 is performed by the encryption unit 105, and the process of step S115 is performed by the transmitting unit 106.

[0184] Of the processing steps constituting the authentication sequence in Figures 8 and 9, the processing steps S151 and S156 are performed by the receiving unit 102. The processing step S152 is performed by the random number generating unit 107, and the processing step S153 is performed by the key generating unit 108. The processing steps S154 and S157 are performed by the encryption unit 105, and the processing steps S155 and S159 are performed by the transmitting unit 106. The processing step S158 is performed by the authentication unit 104.

[0185] The processing of each step of the IC card 2 constituting the authentication sequence in FIG. 10 and thereafter is similarly performed by each unit of the IC card 2.

[0186] R / W device 1 configuration FIG. 15 is a block diagram showing an example of the configuration of the R / W device 1. As shown in FIG.

[0187] The R / W device 1 is composed of an antenna unit 151, a receiving unit 152, a decrypting unit 153, an authenticating unit 154, an encrypting unit 155, a transmitting unit 156, a random number generating unit 157, a key generating unit 158, a storage unit 159, and an interface 160. The R / W device 1 has a similar configuration to that of the IC card 2. Duplicate descriptions will be omitted as appropriate.

[0188] When the R / W device 1 functions as an information processing device, the antenna unit 151 transmits and receives electromagnetic waves to and from the antenna unit 101 of an IC card 2 functioning as another information processing device.

[0189] The receiving unit 152 receives the signal transmitted from the IC card 2 via the antenna unit 151 and demodulates it.

[0190] The decryption unit 153 decrypts the encrypted information received by the reception unit 152 .

[0191] The authentication unit 154 performs authentication processing of the IC card 2 based on information supplied from the decryption unit 153 and the like. The authentication unit 154 controls the authentication processing performed based on a message M1 generated by encryption using a time-varying key. The authentication unit 154 also controls the authentication processing performed based on a MAC, which is a message generated by encrypting data including IDm using a time-varying key.

[0192] The encryption unit 155 performs cryptographic calculations on information to be transmitted to the IC card 2. The encryption unit 155 performs cryptographic calculations to encrypt data.

[0193] The transmitting unit 156 modulates the information supplied from the encryption unit 155 and the like, outputs it to the antenna unit 151 , and causes it to be transmitted to the IC card 2 .

[0194] The random number generation unit 157 generates random numbers.

[0195] The key generation unit 158 ​​generates a time-varying key based on information supplied from the random number generation unit 157 and the like, and supplies the generated key to the decryption unit 153 and the encryption unit 155 .

[0196] The storage unit 159 stores various types of information such as programs executed by the CPU of the R / W device 1 .

[0197] The interface 160 communicates with an external computer and transmits the result of authentication by the authentication unit 154 to the external computer.

[0198] The output of the receiving unit 152 is supplied to the decrypting unit 153, as well as the authentication unit 154, the encryption unit 155, the key generating unit 158, etc. The output of the authentication unit 154 is supplied to the encryption unit 155, as well as the transmission unit 156, etc. The output of the random number generating unit 157 is supplied to the key generating unit 158, as well as the decrypting unit 153, the authentication unit 154, the encryption unit 155, the transmission unit 156, etc. The output of the key generating unit 158 ​​is supplied to the decrypting unit 153, the encryption unit 155, the authentication unit 154, etc.

[0199] For example, among the processing of each step constituting the authentication sequence in Fig. 4, the processing of step S31 is performed by random number generation unit 157. The processing of step S32 is performed by transmission unit 156, and the processing of step S33 is performed by reception unit 152. The processing of steps S34 and S35 is performed by key generation unit 158, and the processing of step S36 is performed by decryption unit 153. The processing of step S37 is performed by authentication unit 154.

[0200] 7, the process of step S101 is performed by the random number generation unit 157. The process of step S102 is performed by the transmission unit 156, and the process of step S103 is performed by the reception unit 152. The processes of steps S104 and S105 are performed by the key generation unit 158, and the process of step S106 is performed by the encryption unit 155. The process of step S107 is performed by the authentication unit 154.

[0201] 8 and 9, the process of step S131 is performed by the random number generation unit 157. The processes of steps S132 and S139 are performed by the transmission unit 156, and the processes of steps S133 and S140 are performed by the reception unit 152. The processes of steps S134 and S135 are performed by the key generation unit 158, and the processes of steps S136 and S138 are performed by the encryption unit 155. The process of step S137 is performed by the authentication unit 154.

[0202] The processing of each step of the R / W device 1 constituting the authentication sequence in FIG. 10 and subsequent figures is similarly performed by each unit of the R / W device 1.

[0203] <Modification> Although the device that communicates with the R / W device 1 is assumed to be an IC card 2, it is possible to provide the functionality of the above-mentioned IC card 2 in various devices that have an IC chip, such as mobile terminals and PCs.

[0204] Similarly, on the R / W side, it is possible to provide the functions of the R / W device 1 described above to various devices having a R / W, such as a mobile terminal or a PC.

[0205] The above authentication sequence can be applied to near-field communication performed between an IC chip conforming to a standard other than the FeliCa (registered trademark) standard and a R / W device.

[0206] Computer configuration example The above-mentioned series of processes can be executed by hardware or software. When the series of processes is executed by software, the program constituting the software is installed from a program recording medium into a computer incorporated in dedicated hardware, or into a general-purpose personal computer, etc.

[0207] FIG. 16 is a block diagram showing an example of the hardware configuration of a computer that executes the above-mentioned series of processes by a program.

[0208] For example, it is possible to connect a computer having the configuration shown in FIG. 16 to the R / W device 1 and have the above-mentioned processing performed in the computer.

[0209] A central processing unit (CPU) 301, a read only memory (ROM) 302, and a random access memory (RAM) 303 are interconnected via a bus 304.

[0210] An input / output interface 305 is further connected to the bus 304. An input unit 306 including a keyboard, a mouse, etc., and an output unit 307 including a display, a speaker, etc. are connected to the input / output interface 305. In addition, a storage unit 308 including a hard disk, a non-volatile memory, etc., a communication unit 309 including a network interface, etc., and a drive 310 that drives a removable medium 311 are connected to the input / output interface 305.

[0211] In the computer configured as above, the CPU 301 loads a program stored in the storage unit 308 into the RAM 303 via the input / output interface 305 and the bus 304 and executes the program, thereby performing the above-mentioned series of processes.

[0212] The programs executed by the CPU 301 are installed in the storage unit 308 by being recorded on a removable medium 311, or provided via a wired or wireless transmission medium such as a local area network, the Internet, or digital broadcasting.

[0213] The program executed by the computer may be a program in which processing is performed chronologically in the order described in this specification, or it may be a program in which processing is performed in parallel or at the required timing, such as when called.

[0214] In this specification, a system refers to a collection of multiple components (devices, modules (parts), etc.), regardless of whether all the components are in the same housing. Therefore, multiple devices housed in separate housings and connected via a network, and a single device in which multiple modules are housed in a single housing, are both systems.

[0215] It should be noted that the effects described in this specification are merely examples and are not limiting, and other effects may also be obtained.

[0216] The embodiments of the present technology are not limited to the above-described embodiments, and various modifications are possible without departing from the gist of the present technology.

[0217] For example, the present technology can be configured as cloud computing, in which a single function is shared and processed collaboratively by multiple devices via a network.

[0218] Furthermore, each step described in the above flow chart can be executed by one device, or can be shared and executed by a plurality of devices.

[0219] Furthermore, when a single step includes multiple processes, the multiple processes included in the single step can be executed by a single device, or can be shared and executed by multiple devices.

[0220] Example of configuration combination The present technology can also be configured as follows.

[0221] (1) a receiving unit that receives the first random number and the second random number transmitted from another information processing device; a random number generator that generates a third random number; a time-variant key generation unit that generates a first time-variant key by applying the second random number and the third random number to a first fixed key; an encryption unit that encrypts the first random number by using the first time-varying key; a transmission unit that transmits the encrypted first random number and the encrypted third random number to the other information processing device; An information processing device comprising: (2) The information processing device further includes a storage unit for storing identification information of an IC chip provided in the information processing device. The information processing device according to (1). (3) The authentication unit further includes: an authentication unit that controls an authentication process performed based on a message generated by encrypting data including the identification information with the first time-varying key. The information processing device according to (2). (4) the encryption unit generates the message by encrypting data obtained by concatenating the first random number and the identification information with the first time-varying key; The transmission unit transmits the identification information, the third random number, and the message to the other information processing device. The information processing device according to (3). (5) the random number generation unit generates the third random number and the fourth random number; the encryption unit generates a first message by encrypting data obtained by concatenating the fourth random number, the first random number, and the identification information with the first time-varying key; The transmission unit transmits the fourth random number, the third random number, the identification information, and the first message to the other information processing device. The information processing device according to (3). (6) In the other information processing device, a process is performed in which a second time-varying key is generated by applying the third random number and the second random number transmitted together with the first message to the first fixed key, a second message is generated by encrypting the fourth random number, the first random number, and the identification information using the second time-varying key, and if authentication based on the first message and the second message is successful, a third message is generated by encrypting the first random number and the fourth random number using the second time-varying key. The information processing device according to (5). (7) The receiving unit receives the third message transmitted from the other information processing device, The authentication unit performs the authentication process based on a fourth message generated by encrypting the first random number and the fourth random number by using the first time-varying key, and the third message. The information processing device according to (6). (8) The authentication unit writes or reads data to or from the storage unit if the authentication process is successful. The information processing device according to (3). (9) An information processing device, receiving the first random number and the second random number transmitted from the other information processing device; Generate a third random number, generating a first time-varying key by applying the second random number and the third random number to a first fixed key; encrypting the first random number with the first time-varying key; Transmitting the encrypted first random number and the encrypted third random number to the other information processing device. Information processing methods. (10) On the computer, receiving the first random number and the second random number transmitted from the other information processing device; Generate a third random number, generating a first time-varying key by applying the second random number and the third random number to a first fixed key; encrypting the first random number with the first time-varying key; Transmitting the encrypted first random number and the encrypted third random number to the other information processing device. A program for executing a process. (11) a random number generation unit that generates a first random number and a second random number; A transmission unit that transmits the first random number and the second random number to another information processing device; a receiving unit that receives from the other information processing device the first random number and the third random number generated in the other information processing device, the first random number being encrypted in the other information processing device using a first time-varying key generated by applying a first fixed key to the second random number and the third random number generated in the other information processing device; a time-varying key generating unit that generates a second time-varying key by applying the third random number and the second random number generated by the random number generating unit to a second fixed key that is the same fixed key as the first fixed key held by the other information processing device; an authentication unit that decrypts the encrypted first random number by using the second time-varying key, and performs authentication processing based on the first random number obtained by decryption and the first random number generated by the random number generation unit; An information processing device comprising: (12) Identification information is stored in an IC chip provided in the other information processing device. The information processing device according to (11). (13) The authentication unit performs the authentication process based on a message generated by encrypting data including the identification information with the second time-varying key. The information processing device according to (12). (14) the receiving unit receives a first message generated in the other information processing device by encrypting the identification information, the third random number, and data obtained by concatenating the first random number and the identification information using the first time-varying key; The authentication unit performs the authentication process based on a second message generated by encrypting the first random number generated by the random number generation unit and the identification information received from the other information processing device using the second time-varying key, and the first message. The information processing device according to (13). (15) When the other information processing device generates a fourth random number together with the third random number, and generates a first message by encrypting data obtained by concatenating the fourth random number, the first random number, and the identification information using the first time-varying key, The receiving unit receives the fourth random number, the third random number, the identification information, and the first message. The information processing device according to (13). (16) If the authentication process is successful, the transmission unit transmits a third message to the other information processing device, the third message being generated by encrypting the first random number generated by the random number generation unit and the fourth random number received from the other information processing device using the second time-varying key. The information processing device according to (15). (17) An information processing device, Generate a first random number and a second random number, Transmitting the first random number and the second random number to another information processing device; receiving, from the other information processing device, the first random number and the third random number generated in the other information processing device, encrypted in the other information processing device using a first time-varying key generated by applying a first fixed key to the second random number and a third random number generated in the other information processing device; generating a second time-varying key by applying the third random number and the generated second random number to a second fixed key which is the same fixed key as the first fixed key held by the other information processing device; decrypting the encrypted first random number using the second time-varying key; An authentication process is performed based on the first random number obtained by decryption and the first random number generated. Information processing methods. (18) On the computer, Generate a first random number and a second random number, Transmitting the first random number and the second random number to another information processing device; receiving, from the other information processing device, the first random number and the third random number generated in the other information processing device, encrypted in the other information processing device using a first time-varying key generated by applying a first fixed key to the second random number and a third random number generated in the other information processing device; generating a second time-varying key by applying the third random number and the generated second random number to a second fixed key which is the same fixed key as the first fixed key held by the other information processing device; decrypting the encrypted first random number using the second time-varying key; An authentication process is performed based on the first random number obtained by decryption and the first random number generated. A program for executing a process. (19) a receiving unit that receives the first random number and the second random number transmitted from another information processing device; a random number generator that generates a third random number; a time-variant key generation unit that generates a first time-variant key by applying the second random number and the third random number to a first fixed key; an encryption unit that encrypts the first random number by using the first time-varying key; a transmission unit that transmits the encrypted first random number and the encrypted third random number to the other information processing device; An information processing device comprising: a random number generation unit that generates the first random number and the second random number; a transmission unit that transmits the first random number and the second random number to the information processing device; a receiving unit that receives the first random number encrypted in the information processing device using the first time-varying key and the third random number from the information processing device; a time-varying key generating unit that generates a second time-varying key by applying the third random number and the second random number generated by the random number generating unit to a second fixed key that is the same fixed key as the first fixed key; an authentication unit that decrypts the encrypted first random number by using the second time-varying key, and performs authentication processing based on the first random number obtained by decryption and the first random number generated by the random number generation unit; The other information processing device comprising: An information processing system consisting of: [Explanation of symbols]

[0222] 1 R / W device, 2 IC card, 101 antenna unit, 102 receiver unit, 103 decryption unit, 104 authentication unit, 105 encryption unit, 106 transmitter unit, 107 random number generation unit, 108 key generation unit, 109 memory unit, 151 antenna unit, 152 receiver unit, 153 decryption unit, 154 authentication unit, 155 encryption unit, 156 transmitter unit, 157 random number generation unit, 158 key generation unit, 159 memory unit, 160 interface

Claims

1. A memory; a receiving unit that receives the first random number and the second random number transmitted together with a Read command from another information processing device; a random number generation unit that generates a third random number and a fourth random number; a time-varying key generating unit that generates a first time-varying key by applying the second random number and the third random number to a first fixed key; an encryption unit that generates a first message by encrypting data obtained by concatenating the fourth random number, the first random number, and the first data read from the memory using the first time-varying key; a transmitting unit that transmits the fourth random number, the third random number, the first data, and the first message to the other information processing device; an authentication unit that performs authentication processing based on data transmitted from the other information processing device; Equipped with in the other information processing device, if the authentication process using the first message is successful, a second message is generated by encrypting data obtained by concatenating the first random number, the fourth random number, and the second data to be written using a second time-variant key generated by applying the second random number and the third random number to a second fixed key that is the same fixed key as the first fixed key; the receiving unit receives the second data and the second message transmitted together with a Write command from the other information processing device, The authentication unit writes the second data to the memory when the authentication process using the second message is successful. Information processing device.

2. The memory stores identification information of an IC chip provided in the information processing device. The information processing device according to claim 1 .

3. The authentication unit performs authentication processing based on a third message generated by encrypting data obtained by concatenating the first random number, the fourth random number, and the second data with the first time-varying key, and the second message. The information processing device according to claim 1 .

4. An information processing device having a memory, receiving the first random number and the second random number transmitted together with a Read command from another information processing device; generating a third random number and a fourth random number; generating a first time-varying key by applying the second random number and the third random number to a first fixed key; generating a first message by encrypting data obtained by concatenating the fourth random number, the first random number, and the first data read from the memory with the first time-varying key; Transmitting the fourth random number, the third random number, the first data, and the first message to the other information processing device; receiving the second data and the second message transmitted together with a Write command from the other information processing device, generating a second message by encrypting data obtained by concatenating the first random number, the fourth random number, and the second data to be written using a second time-varying key generated by applying the second random number and the third random number to a second fixed key that is the same fixed key as the first fixed key; and If the authentication process using the second message is successful, the second data is written to the memory. Information processing methods.

5. On the computer, receiving the first random number and the second random number transmitted together with a Read command from another information processing device; generating a third random number and a fourth random number; generating a first time-varying key by applying the second random number and the third random number to a first fixed key; generating a first message by encrypting data obtained by concatenating the fourth random number, the first random number, and the first data read from the memory using the first time-varying key; Transmitting the fourth random number, the third random number, the first data, and the first message to the other information processing device; receiving the second data and the second message transmitted together with a Write command from the other information processing device, generating a second message by encrypting data obtained by concatenating the first random number, the fourth random number, and the second data to be written using a second time-varying key generated by applying the second random number and the third random number to a second fixed key that is the same fixed key as the first fixed key; and If the authentication process using the second message is successful, the second data is written to the memory. A program for executing a process.

6. a random number generation unit that generates a first random number and a second random number; a transmission unit that transmits the first random number and the second random number together with a Read command to another information processing device; a receiving unit that receives the fourth random number, the third random number, the first data, and the first message transmitted from the other information processing device after a first message is generated in the other information processing device by encrypting data obtained by concatenating a fourth random number generated in the other information processing device, the first random number, and first data read from a memory, using a first time-varying key generated by applying the second random number and a third random number generated in the other information processing device to a first fixed key; a time-varying key generating unit that generates a second time-varying key by applying the third random number and the second random number generated by the random number generating unit to a second fixed key that is the same fixed key as the first fixed key held by the other information processing device; an encryption unit that encrypts data obtained by concatenating the fourth random number, the first random number, and the first data using the second time-varying key; an authentication unit that performs authentication processing based on the received first message and data generated by encryption using the second time-varying key; Equipped with the encryption unit generates a second message by encrypting data obtained by concatenating the first random number, the fourth random number, and the second data to be written, using the second time-varying key, if the authentication process is successful; The transmission unit transmits the second data and the second message together with a Write command to the other information processing device. Information processing device.

7. Identification information is stored in an IC chip provided in the other information processing device. The information processing device according to claim 6.

8. An information processing device, generating a first random number and a second random number; Transmitting the first random number and the second random number together with a Read command to another information processing device; receiving the fourth random number, the third random number, the first data, and the first message transmitted from the other information processing device after a first message is generated in the other information processing device by encrypting data obtained by concatenating a fourth random number generated in the other information processing device, the first random number, and first data read from a memory, using a first time-variant key generated by applying the second random number and a third random number generated in the other information processing device to a first fixed key; generating a second time-varying key by applying the third random number and the generated second random number to a second fixed key which is the same fixed key as the first fixed key held by the other information processing device; encrypting data obtained by concatenating the fourth random number, the first random number, and the first data with the second time-varying key; performing an authentication process based on the received first message and data generated by encryption using the second time-varying key; If the authentication process is successful, generating a second message by encrypting data obtained by concatenating the first random number, the fourth random number, and the second data to be written using the second time-varying key; The second data and the second message are transmitted to the other information processing device together with a Write command. Information processing methods.

9. On the computer, generating a first random number and a second random number; Transmitting the first random number and the second random number together with a Read command to another information processing device; receiving the fourth random number, the third random number, the first data, and the first message transmitted from the other information processing device after a first message is generated in the other information processing device by encrypting data obtained by concatenating a fourth random number generated in the other information processing device, the first random number, and first data read from a memory, using a first time-variant key generated by applying the second random number and a third random number generated in the other information processing device to a first fixed key; generating a second time-varying key by applying the third random number and the generated second random number to a second fixed key which is the same fixed key as the first fixed key held by the other information processing device; encrypting data obtained by concatenating the fourth random number, the first random number, and the first data with the second time-varying key; performing an authentication process based on the received first message and data generated by encryption using the second time-varying key; If the authentication process is successful, generating a second message by encrypting data obtained by concatenating the first random number, the fourth random number, and the second data to be written using the second time-varying key; The second data and the second message are transmitted to the other information processing device together with a Write command. A program for executing a process.

Images