Apparatus and method for testing normality of shared data

• US 10,255,428 B2
• Filed: 09/12/2016
• Issued: 04/09/2019
• Est. Priority Date: 11/13/2015
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Komano, Yuichi, Kawabata, Takeshi
• Primary Examiner(s): Mehrmanesh, Elmira
• Application Number:
  US15/262,162
• Publication Number:
  US 20170139795A1
• Time in Patent Office: 939 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3278 using physically unclonable functions [PUF]

Abstract

According to an embodiment, a test apparatus that is connected to an electronic device through a network includes a generator, a transmitter, and a determination unit. The generator generates third data computed from first data shared with the electronic device and predetermined second data. The transmitter transmits the third data to the electronic device. The determination unit determines whether the first data of the electronic device is normal depending on whether the second data is restored correctly from the third data using the first data of the electronic device.

Claims

1. A test apparatus that is connected to an electronic device through a network, the apparatus comprising:

circuitry configured to function as;

a generator configured to generate third data computed from first data shared with the electronic device and predetermined second data;

a transmitter configured to transmit the third data to the electronic device;

a receiver configured to receive, from the electronic device, verification data for verifying correctness of the second data restored by the electronic device;

a verification unit configured to verify correctness of the second data restored by the electronic device using the verification data,

a determination unit configured to determine whether the first data of the electronic device is normal based on a result of verification performed by the verification unit; and

an error output unit, wherein

the determination unit determines whether the first data is normal for each of a plurality of electronic devices connected to the network, and

the error output unit outputs a first error signal when the number of electronic devices having the first data determined to be abnormal is equal to or smaller than a first threshold, and outputs a second error signal when the number of electronic devices having the first data determined to be abnormal exceeds the first threshold, the first error signal indicating that the electronic devices have abnormality, the second error signal indicating that there is an abnormality other than in the electronic devices, the abnormality including an abnormality in the test apparatus or the network.

2. The apparatus according to claim 1, wherein

when the number of electronic devices having the first data determined to be abnormal exceeds the first threshold, the error output unit gives an instruction to repeat transmission of the third data by the transmitter and determination by the determination unit until the number of times the number of electronic devices having the first data determined to be abnormal exceeds the first threshold reaches a second threshold, and outputs the second error signal when the number of times the number of electronic devices having the first data determined to be abnormal exceeds the first threshold reaches the second threshold.

3. The apparatus according to claim 1, in a case of a plurality of the electronic devices connected to the network store therein the first data in common, the transmitter transmits the third data in common to the electronic devices that store therein the first data in common.

4. The apparatus according to claim 1, wherein, based on information about use environment of the electronic device having the first data determined to be abnormal, another electronic device having the first data likely to be abnormal is specified.

5. The apparatus according to claim 1, wherein

when the first data of the electronic device is determined to be abnormal, the generator newly generates the first data shared with the electronic device and generates fourth data obtained by encrypting the newly generated first data using the second data correctly restored and stored by the electronic device in past, and

when the first data of the electronic device is determined to be abnormal, the transmitter transmits the fourth data to the electronic device.

6. The apparatus according to claim 1, wherein

the first data is a pre-shared key shared between a plurality of the electronic devices connected to the network,

the second data is a session key derived from the pre-shared key, and

the third data is encrypted data obtained by encrypting the session key using the pre-shared key.

7. The apparatus according to claim 1, wherein

the first data is output data of a physically unclonable function of the electronic device,

the second data is a session key generated using the output data of the physically unclonable function, and

the third data is auxiliary data used for generating the session key from the output data of the physically unclonable function.

8. A communication system comprising:

a test apparatus; and

an electronic device connected to the test apparatus through a network, wherein

the test apparatus comprises;

circuitry configured to function as;

a generator configured to generate third data computed from first data shared with the electronic device and predetermined second data;

a transmitter configured to transmit the third data to the electronic device;

a receiver configured to receive, from the electronic device, verification data for verifying correctness of the second data restored by the electronic device;

a verification unit configured to verify correctness of the second data restored by the electronic device using the verification data;

a determination unit configured to determine whether the first data of the electronic device is normal based on a result of verification performed by the verification unit; and

an error output unit, wherein

the determination unit determines whether the first data is normal for each of a plurality of electronic devices connected to the network, and

the error output unit outputs a first error signal when the number of electronic devices having the first data determined to be abnormal is equal to or smaller than a first threshold, and outputs a second error signal when the number of electronic devices having the first data determined to be abnormal exceeds the first threshold, the first error signal indicating that the electronic devices have abnormality, the second error signal indicating that something other than the electronic devices, such as the test apparatus or the network, has abnormality.

9. A test method performed by a test apparatus that is connected to an electronic device through a network, the method comprising:

generating third data computed from first data shared with the electronic device and predetermined second data;

transmitting the third data to the electronic device;

receiving, from the electronic device, verification data for verifying correctness of the second data restored by the electronic device;

verifying correctness of the second data restored by the electronic device using the verification data;

determining whether the first data of the electronic device is normal based on a result of the verification; and

outputting an error signal, wherein

the determining determines whether the first data is normal for each of a plurality of electronic devices connected to the network, and

the outputting outputs a first error signal when the number of electronic devices having the first data determined to be abnormal is equal to or smaller than a first threshold, and the outputting outputs a second error signal when the number of electronic devices having the first data determined to be abnormal exceeds the first threshold, the first error signal indicating that the electronic devices have abnormality, the second error signal indicating that something other than the electronic devices, such as the test apparatus or the network, has abnormality.