Authenticator, authenticatee and authentication method

• US 10,361,850 B2
• Filed: 11/30/2017
• Issued: 07/23/2019
• Est. Priority Date: 08/31/2011
• Status: Active Grant

• Current Assignee: Kioxia Corporation
• Original Assignee: Toshiba Memory Corporation (Kioxia Corporation)
• Inventors: Kato, Taku, Matsushita, Tatsuyuki, Nagai, Yuji, Zhao, Fangming
• Primary Examiner(s): Chiang, Jason
• Application Number:
  US15/827,867
• Publication Number:
  US 20180097623A1
• Time in Patent Office: 600 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

According to one embodiment, an authenticator which authenticates an authenticatee, which stores first key information (NKey) that is hidden, includes a memory configured to store second key information (HKey) which is hidden, a random number generation module configured to generate random number information, and a data generation module configured to generate a session key (SKey) by using the second key information (HKey) and the random number information. The authenticator is configured such that the second key information (HKey) is generated from the first key information (NKey) but the first key information (NKey) is not generated from the second key information (HKey).

Claims

1. A device comprising:

a first area being used to store first key data and secret data uniquely assigned to the device, the first area being unreadable from outside of the device; and

a second area being used to store encrypted secret data generated by encrypting the secret data, the second area being a readable area;

wherein the device

reads the first key data from the first area,

generates second key data by performing an Advanced Encryption Standard (AES) encryption process using the first key data and first number data which is received from other device,

generates session key data by performing an AES encryption process using the second key data and second number data which is received from the other device, and

generates authentication information data by performing a conversion process using a one-way function with the session key data and the secret data which is read from the first area, and

the authentication information data is sent to the other device.