DATA MANAGEMENT APPARATUS AND DATA MANAGEMENT METHOD

• US 20090106561A1
• Filed: 10/15/2008
• Published: 04/23/2009
• Est. Priority Date: 10/16/2007
• Status: Abandoned Application

• Current Assignee: Buffalo Incorporated (Melco Holdings Incorporated)
• Original Assignee: Buffalo Incorporated (Melco Holdings Incorporated)
• Inventors: EJIRI, Taichi
• Application Number:
  US12/251,851
• Publication Number:
  US 20090106561A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A data management apparatus is adaptable to an encryption system using a common key and a pair of keys comprising a public key and a private key. The data management apparatus includes: a common key encryption unit configured to encrypt a first common key with a first public key to generate an encrypted first common key; a password setting receiving unit configured to receive a setting of a first password; and a private key encryption unit configured to encrypt a first private key with the first password to generate an encrypted first private key.

Claims

1. A data management apparatus adaptable to an encryption system using a common key and a pair of keys comprising a public key and a private key, the encryption system in which:

an encryption is performed by encrypting plaintext data with the common key to generate encrypted data and generate an encrypted common key by encrypting the common key with the public key; and

decryption is performed by decrypting the encrypted common key with the private key to obtain a decrypted common key and decrypting the encrypted data with the decrypted common key, said data management apparatus comprising;

a common key encryption unit configured to encrypt a first common key with a first public key to generate an encrypted first common key;

a password setting receiving unit configured to receive a setting of a first password; and

a private key encryption unit configured to encrypt a first private key with the first password to generate an encrypted first private key.

2. The data management apparatus according to claim 1, further comprising:

a password input receiving unit configured to receive an input of a password; and

a data encrypting unit configured to;

decrypt the encrypted first private key with the input password to obtain a decrypted first private key;

decrypt the encrypted first common key with the decrypted first private key to obtain the decrypted first common key; and

encrypt a plaintext data with the decrypted first common key to generate encrypted data.

3. The data management apparatus according to claim 2, further comprising a storage control unit configured to store the encrypted data in association with the encrypted first private key and the encrypted first common key.

4. The data management apparatus according to claim 1, further comprising:

a decryption data obtaining unit configured to obtain encrypted data generated by encrypting plaintext data with the first common key, the encrypted first private key and the encrypted first common key;

a password input receiving unit configured to receive an input of a password; and

a data decryption unit configured to;

decrypt the encrypted first private key with the input password to obtain a decrypted first private key;

decrypt the encrypted first common key with the decrypted private key to obtain a decrypted first common key; and

decrypt the encrypted data with the decrypted first common key to obtain the plaintext data.

5. The data management apparatus according to claim 1, wherein the private key encryption unit is configured to calculate a hash value from the first password by a predetermined hash function and encrypt the first private key with the hash value.

6. The data management apparatus according to claim 1, further comprising:

a hash condition generating unit configured to generate a salt and a repetition number from predetermined random numbers; and

a storage control unit,

wherein the private key encryption unit is configured to generate a hash value from the first password by a predetermined hash function by use of the salt and the repetition number, and

wherein the storage control unit is configured to store the salt and the repetition number in association with the encrypted first common key and the encrypted first private key.

7. The data management apparatus according to claim 1, further comprising an output unit configured to output the first public key and the encrypted first private key to another data management apparatus.

8. The data management apparatus according to claim 7, further comprising:

a decryption data obtaining unit configured to obtain the encrypted first private key, an encrypted second common key generated by encrypting a second common key with the first public key, and encrypted data generated by encrypting plaintext data with the second common key;

a password input receiving unit configured to receive an input of a password; and

a data decryption unit configured to;

decrypt the encrypted first private key with the input password to obtain a decrypted first private key;

decrypt the encrypted second common key with the decrypted private key to obtain a decrypted second common key; and

decrypt the encrypted data with the decrypted second common key to obtain the plaintext data.

9. The data management apparatus according to claim 1, wherein the common key encryption unit comprises:

a hash generating unit configured to calculate a hash value from the first public key by a predetermined hash function;

a first output unit configured to output the hash value; and

a second output unit configured to output the first public key.

10. The data management apparatus according to claim 1, further comprising an obtaining unit configured to obtain an encrypted second private key and a second public key, the encrypted second private key being generated by encrypting a second private key with a second password, the second private key and the second public key being unique from the first private key and the first public key,

wherein the common key encryption unit is configured to encrypt the first common key with the second public key to generate a relief encrypted first common key.

11. The data management apparatus according to claim 10, further comprising a storage control unit configured to store the encrypted first common key and the encrypted first common key as first decryption information and store the relief encrypted first common key and the encrypted second private key as second decryption information.

12. The data management apparatus according to claim 11, further comprising:

a password input receiving unit configured to receive an input of an input password; and

a data encrypting unit configured to;

decrypt the encrypted first private key with the input password to obtain a decrypted first private key;

decrypt the encrypted fist common key with the decrypted first private key to obtain the decrypted first common key; and

encrypt a plaintext data with the decrypted first common key to generate an encrypted data,

wherein the storage control unit configured to store the encrypted data in association with the first decryption information and the second decryption information.

13. The data management apparatus according to claim 10, further comprising:

a hash generating unit configured to calculate a hash value from the obtained second public key by a predetermined hash function; and

a determination unit configured to determine whether the hash value coincides with a second hash value calculated from an original second public key by the predetermined hash function, the original second public key corresponding to the second public key but having been generated before the obtaining unit obtains the second public key;

wherein the common key encryption unit encrypts the first common key with the second public key to generate a relief encrypted first common key if the determination unit determines that the hash value coincides with the second hash value.

14. A data management method adaptable to an encryption system using a common key and a pair of keys comprising a public key and a private key, the encryption system in which:

an encryption is performed by encrypting plaintext data with the common key to generate encrypted data and generating an encrypted common key by encrypting the common key with the public key; and

decryption is performed by decrypting the encrypted common key with the private key to obtain a decrypted common key and decrypting the encrypted data with the decrypted common key, said data management method comprising;

encrypting a first common key with a first public key to generate an encrypted first common key;

receiving a setting of a first password; and

encrypting a first private key with the first password to generate an encrypted first private key.

15. A computer-readable medium having a computer program stored thereon and readable by a computer, said computer program, when executed by the computer, causes the computer to perform operations for a data management apparatus adaptable to an encryption system using a common key and a pair of keys comprising a public key and a private key, the encryption system in which:

an encryption is performed by encrypting plaintext data with the common key to generate encrypted data and generating an encrypted common key by encrypting the common key with the public key; and

decryption is performed by decrypting the encrypted common key with the private key to obtain a decrypted common key and decrypting the encrypted data with the decrypted common key, said operations comprising;

encrypting a first common key with a first public key to generate an encrypted first common key;

receiving a setting of a first password; and

encrypting a first private key with the first password to generate an encrypted first private key.