DATA STORAGE DEVICE, MANAGEMENT SERVER, INTEGRATED CIRCUIT, DATA UPDATE SYSTEM, HOME ELECTRIC APPARATUSES, DATA UPDATE METHOD, ENCRYPTION METHOD, AND ENCRYPTION/DECRYPTION KEY GENERATION METHOD

• US 20090172419A1
• Filed: 06/05/2007
• Published: 07/02/2009
• Est. Priority Date: 06/08/2006
• Status: Active Grant

• Current Assignee: Sovereign Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Inventors: Takayama, Hisashi
• Granted Patent: US 8,155,320 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/42684 Client identification by a unique number or address, e.g. serial number, MAC address, socket ID network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/6112 involving terrestrial transmission, e.g. DVB-T
• CPC Class Codes: H04N 21/6175 involving transmission via Internet broadcast-related systems characterised by the transmission system being the Internet H04H60/82
• CPC Class Codes: H04N 21/818 OS software
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

Provided is a data storage device capable of safely and effectively updating software of a home electric apparatus. In the home electric apparatus (100) in which currently used data is to be updated to new data, a reception unit (140) receives encrypted new data and a serial number of data to be updated. A key generation unit (112) generates a key by executing a predetermined irreversible calculation on the unique information correlated to the currently used data by a number of times based on the serial number of the data to be updated. An update unit (113) decrypts the new data by using the key.

Claims

1. A data storage apparatus connected to a management server, comprising:

a data storage section that stores data Pn as data of n'"'"'th (where n≧

1);

a key generation information storage section that stores first generation information and second generation information for generating key information;

a key generation section that generates key information from said first generation information and second generation information; and

an update section that updates said data and said first generation information and second generation information, wherein;

first generation information stored in said key generation information storage section is X(n,A) resulting from performing irreversible calculation X n times using first secret information A as a starting parameter of the irreversible calculation X, and second generation information stored in said key generation information storage section is Y(M−

n,B) resulting from performing irreversible calculation Y M−

n times (where M−

n≧

1) on second secret information B; and

when receiving from the management server update information for updating data Pn to updated data Pk (where M≧

k≧

1), the update information being used for a plurality of data storage apparatuses, each of the plurality of the data storage apparatuses having one among data of (n−

i)'"'"'th through data of (n+j)'"'"'th (where M≧

n+j≧

n≧

n−

i≧

1), the data Pn being among data of (n−

i)'"'"'th through data of (n+j)'"'"'th (where M≧

n+j≧

n≧

n−

i≧

1);

said key generation section generates X(n+j,A) by performing irreversible calculation X j times using first generation information as a starting parameter of the irreversible calculation X, generates Y(M−

n+i,B) by performing irreversible calculation Y i times using second generation information as a starting parameter of the irreversible calculation Y, and furthermore generates key information G (X(n+j,A), Y(M−

n+i,B)) (where G is an arbitrary function) from said X(n+j,A) and Y(M−

n+i,B); and

said update section decrypts encrypted form of said update information using said generated key information G(X(n+j,A), Y(M−

n+i,B)), acquires data Pk, first updated generation information X(k,A) and second updated generation information Y(M−

k,B), updates data Pn stored in said data storage section to data Pk, and updates first generation information X(n,A) and second generation information Y(M−

n,B) stored in said key generation information storage section to first updated generation information X(k,A) and second updated generation information Y(M−

k,B) respectively.

2. The data storage apparatus according to claim 1, wherein:

said key generation section generates key information F(X(n+j,A), Y(M−

n+i,B),k) (where F is an arbitrary function) from said generated X(n+j,A) and Y(M−

n+i,B) and said k; and

said update section decrypts encrypted form of said update information using said generated key information F(X(n+j,A), Y(M−

n+i,B),k), and acquires data Pk and first updated generation information X(k,A) and second updated generation information Y(M−

k,B).

3. The data storage apparatus according to claim 1, further comprising:

a communication section that performs data communication; and

a registering section that registers identification information of said data storage apparatus into a management apparatus, the management apparatus being distinct from the data storage apparatus,

wherein, when said communication section becomes capable of communication, said registering section registers its own identification information into said management apparatus via said communication section, and receives said update information from said management apparatus via said communication section.

4. A management server comprising:

a secret information storing section that stores first secret information A and second secret information B for each type of a plurality of data storage apparatuses; and

a generation information generation section that generates first generation information and second generation information for each of the plurality of data storage apparatuses,

wherein, vis-à

-vis a predetermined data storage apparatus that stores data Pn as data of n'"'"'th (where n≧

1), said generation information generation section reads first secret information A and second secret information B from said secret information storing section, generates first generation information X(n,A) by performing irreversible calculation X n times using said first secret information A as a starting parameter of the irreversible calculation X, and generates second generation information Y(M−

n,B) by performing irreversible calculation Y M−

n times (where M−

n≧

1) on said second secret information B.

5. A management server comprising:

a secret information storing section that stores first secret information A and second secret information B for each type of a plurality of data storage apparatuses;

a generation information generation section that generates first generation information and second generation information for each of the plurality of data storage apparatuses;

an encryption key generation section that generates an encryption key from said first generation information and second generation information; and

an update information generation section that generates update information transmitted to a data storage apparatus,

wherein when update information containing data Pk as data of k'"'"'th (where M≧

k≧

1) is generated, vis-à

-vis a data storage apparatus that stores data Pn as one among data of (n−

i)'"'"'th through data of (n+j)'"'"'th (where M≧

n+j≧

n≧

n−

i≧

1);

said generation information generation section reads first secret information A and second secret information B from said secret information storing section, generates first generation information X(k,A) by performing irreversible calculation X k times using said first secret information A as a starting parameter of the irreversible calculation X, and generates second generation information Y(M−

k,B) by performing irreversible calculation Y M−

k times using said second secret information B as a starting parameter of the irreversible calculation Y;

said encryption key generation section generates X(n+j,A) by performing irreversible calculation X n+j times using said first secret information A as a starting parameter of the irreversible calculation X, generates Y(M−

n+i,B) by performing irreversible calculation Y M−

n+i times using said second secret information B as a starting parameter of the irreversible calculation Y, and furthermore generates key information G (X(n+j,A), Y(M−

n+i,B)) (where G is an arbitrary function) from said generated X(n+k,A) and Y(M−

n+i,B); and

said update information generation section concatenates said data Pk and first generation information X(k,A) and second generation information Y(M−

k,B), and furthermore performs encryption of the concatenated data using said key information G(X(n+j,A), Y(M−

n+i,B)), and furthermore concatenates control information controlling update information processing in a data storage apparatus that received update information, and generates update information.

6. The management server according to claim 5, wherein:

said encryption key generation section generates key information F(X(n+j,A), Y(M−

n+i,B),k) (where F is an arbitrary function) from said generated X(n+j,A) and Y(M−

n+i,B) and said k; and

said update information generation section encrypts the concatenated data of said data Pk and first generation information X(k,A) and second generation information Y(M−

k,B) using said key information F(X(n+j,A), Y(M−

n+i,B),k).

7. An integrated circuit that is installed in a data storage apparatus, connected to a management server, that stores data Pn as data of n'"'"'th (where n≧

1), said integrated circuit comprising;

a key generation information storage section that stores first generation information and second generation information for generating key information;

a key generation section that generates key information from said first generation information and second generation information; and

an update section that updates data stored in said data storage apparatus and said first generation information and second generation information, wherein;

first generation information stored in said key generation information storage section is X(n,A) resulting from performing irreversible calculation X n times using first secret information A as a starting parameter of the irreversible calculation X, and second generation information stored in said key generation information storage section is Y(M−

n,B) resulting from performing irreversible calculation Y M−

n times (where M−

n≧

1) on second secret information B; and

when receiving from the management server update information for updating data Pn to updated data Pk (where M≧

k≧

1), the update information being used for a plurality of data storage apparatuses, each of the plurality of the data storage apparatuses having one among data of (n−

i)'"'"'th through data of (n+j)'"'"'th (where M≧

n+j≧

n≧

n−

i≧

1), the data Pn being among data of (n−

i)'"'"'th through data of (n+j)'"'"'th (where M≧

n+j≧

n≧

n−

i≧

1);

said key generation section generates X(n+j,A) by performing irreversible calculation X j times using first generation information as a starting parameter of the irreversible calculation X, generates Y(M−

n+i,B) by performing irreversible calculation Y i times using second generation information as a starting parameter of the irreversible calculation Y, and furthermore generates key information G (X(n+j,A), Y(M−

n+i,B)) (where G is an arbitrary function) from said X(n+j,A) and Y(M−

n+i,B); and

said update section decrypts encryption of said update information using said generated key information G(X(n+j,A), Y(M−

n+i,B)) and acquires data Pk and first updated generation information X(k,A) and second updated generation information Y(M−

k,B), updates data Pn stored in said data storage apparatus to data Pk, and updates first generation information X(n,A) and second generation information Y(M−

n,B) stored in said key generation information storage section to first updated generation information X(k,A) and second updated generation information Y(M−

k,B) respectively.

8. The integrated circuit according to claim 7, wherein:

said key generation section generates key information F(X(n+j,A), Y(M−

n+i,B),k) (where F is an arbitrary function) from said generated X(n+j,A) and Y(M−

n+i,B) and said k; and

said update section decrypts encryption of said update information using said generated key information F(X(n+j,A), Y(M−

n+i,B),k), and acquires data Pk and first updated generation information X(k,A) and second updated generation information Y(M−

k,B).

9. The integrated circuit according to claim 7, further comprising:

a communication section that performs data communication; and

a registering section that registers identification information of said data storage apparatus into a management apparatus,

wherein, when said communication section becomes capable of communication, said registering section registers its own identification information into said management apparatus via said communication section, and receives said update information from said management apparatus via said communication section.

10. A data update system comprising:

a data storage apparatus that stores data Pn as data of n'"'"'th (where n≧

1);

a management apparatus that stores apparatus information of said data storage apparatus; and

a management server that updates data installed in said data storage apparatus, wherein;

said data storage apparatus has;

a data storage section that stores data Pn;

a key generation information storage section that stores first generation information and second generation information for generating key information;

a key generation section that generates key information from said first generation information and second generation information; and

an update section that updates said data and said first generation information and second generation information,

wherein first generation information stored in said key generation information storage section is X(n,A) resulting from performing irreversible calculation X n times using first secret information A as a starting parameter of the irreversible calculation X, and second generation information stored in said key generation information storage section is Y(M−

n,B) resulting from performing irreversible calculation Y M−

n times (where M−

n≧

1) on second secret information B;

said management apparatus has;

an apparatus information management section that stores apparatus information registered from said data storage apparatus; and

a data update section that updates data stored by said data storage apparatus; and

said management server has;

a secret information storing section that stores first secret information A and second secret information B for each type of a plurality of data storage apparatuses;

a generation information generation section that generates first generation information and second generation information for each of the plurality of data storage apparatuses;

an encryption key generation section that generates an encryption key from said first generation information and second generation information; and

an update information generation section that generates update information transmitted to a data storage apparatus; and

said data update section further has;

a verification section that verifies apparatus information contained in update information with apparatus information held by said apparatus information management section;

a storing section that stores update information; and

an update processing control section that controls processing that updates data stored by said data storage apparatus performed vis-à

-vis said data storage apparatus,

wherein, when data of a data storage apparatus installed with data as one among data of (n−

i)'"'"'th through (n+j)'"'"'th (where M≧

n+j≧

n≧

n−

i≧

1) is updated to data Pk as data of k'"'"'th (where M≧

k≧

1),

in said management server;

said generation information generation section reads first secret information A and second secret information B from said secret information storing section, generates first updated generation information X(k,A) by performing irreversible calculation X k times using said first secret information A as a starting parameter of the irreversible calculation X, and generates second generation information Y(M−

k,B) by performing irreversible calculation Y M−

k times using said second secret information B as a starting parameter of the irreversible calculation Y;

said encryption key generation section generates X(n+j,A) by performing irreversible calculation X n+j times using said first secret information A as a starting parameter of the irreversible calculation X, generates Y(M−

n+i,B) by performing irreversible calculation Y M−

n+i times using said second secret information B as a starting parameter of the irreversible calculation Y, and furthermore generates key information G (X(n+j,A), Y(M−

n+i,B)) (where G is an arbitrary function) from said generated X(n+j,A) and Y(M−

n+i,B); and

said update information generation section concatenates said data Pk and first updated generation information X(k,A) and second updated generation information Y(M−

k,B), and furthermore performs encryption using said key information G(X(n+j,A), Y(M−

n+i,B)), and furthermore concatenates control information controlling update information processing in a data storage apparatus that received update information and generates update information, and distributes said generated update information to said management apparatus; and

in a management apparatus that receives said update information;

said verification section verifies apparatus information contained in said control information of said received update information with apparatus information held by said apparatus information management section, and if apparatus information of a data storage apparatus for which apparatus information matches has been registered,

said update processing control section stores said received update information in said storing section and furthermore transmits said update information to a data storage apparatus for which apparatus information matches; and

in a data storage apparatus that receives said update information;

said key generation section generates X(n+j,A) by performing irreversible calculation X j times using first generation information as a starting parameter of the irreversible calculation X, generates Y(M−

n+i,B) by performing irreversible calculation Y i times using second generation information as a starting parameter of the irreversible calculation Y, and furthermore generates key information G (X(n+j,A), Y(M−

n+i,B)) from said X(n+j,A) and Y(M−

n+i,B); and

said update section decrypts encryption of said update information using said generated key information G(X(n+j,A), Y(M−

n+i,B)) and acquires data Pk and first updated generation information X(k,A) and second updated generation information Y(M−

k,B), updates data Pn stored in said data storage section to data Pk, and updates first generation information X(n,A) and second generation information Y(M−

n,B) stored in said key generation information storage section to first updated generation information X(k,A) and second updated generation information Y(M−

k,B) respectively.

11. (canceled)

12. (canceled)

14. A data update method used for updating from currently used data to new data, said data update method comprising:

an acquiring step of acquiring encrypted said new data and a serial number of data to be updated;

a first calculating step of, by execution of a first irreversible calculation, calculating from first unique information associated with said currently used data a first key component generated by repeatedly executing said first irreversible calculation on first secret information a number of times identical to said maximum value;

a second calculating step of, by execution of a second irreversible calculation, calculating from second unique information associated with said currently used data a second key component generated by repeatedly executing said second irreversible calculation on second secret information a number of times identical to said minimum value;

a generating step of generating a key by combining said first and second key components;

a decrypting step of decrypting said new data using said key; and

an updating step of updating said currently used data to decrypted said new data.

15. (canceled)

16. An encryption key generation method that generates a key used for data encryption, said encryption key generation method comprising:

an acquiring step of acquiring first secret information A and second secret information B associated with said data;

a step of generating X(n+j,A) by performing irreversible calculation X n+j times (where n≧

0, j≧

0) on said first secret information A;

a step of generating Y(M−

n+i,B) by performing irreversible calculation Y M−

n+i times (where M≧

0, i≧

0) on said second secret information B; and

a step of synthesizing a key from information containing said X(n+j,A) and Y(M−

n+i,B).

17. A decryption key generation method that generates a key used for decryption of data encrypted using an encryption key generated by the encryption key generation method according to claim 16, said decryption key generation method comprising:

an acquiring step of acquiring first generation information Ca=X(n,A) and second generation information Cb=Y(M−

n,B);

a step of generating X(j,Ca) by performing irreversible calculation X j times (where j≧

0) on said first generation information Ca;

a step of generating Y(i,Cb) by performing irreversible calculation Y i times (where i≧

0) on said second generation information Cb; and

a step of synthesizing a key from information containing said X(j,Ca) and Y(i,Cb).

18. An encryption method that encrypts data, said encryption method comprising:

an acquiring step of acquiring first secret information A and second secret information B and third secret information C and fourth secret information D associated with said data;

a step of generating X(n+j,A) by performing irreversible calculation X n+j times (where n≧

0, j≧

0) on said first secret information A;

a step of generating Y(M−

n+i,B) by performing irreversible calculation Y M−

n+i times (where M≧

0, i≧

0) on said second secret information B;

a step of generating U(N+q,C) by performing irreversible calculation U N+q times (where N≧

0, q≧

0) on said third secret information C;

a step of generating V(M−

N+p,D) by performing irreversible calculation V M−

N+p times (where p≧

0) on said fourth secret information D;

a step of synthesizing a key from information containing said X(n+j,A) and Y(M−

n+i,B);

a step of synthesizing a key from information containing said U(N+q,C) and V(M−

N+p,D);

a step of generating encryption key K;

a step of encrypting data using said encryption key K;

a step of encrypting said encryption key K using a key synthesized from information containing said X(n+j,A) and Y(M−

n+i,B); and

a step of encrypting said encryption key K using a key synthesized from information containing said U(N+q,C) and V(M−

N+p,D).

19. An encryption key generation method that generates a key used for data encryption, said encryption key generation method comprising:

an acquiring step of acquiring first secret information A and second secret information B and third secret information C and fourth secret information D associated with said data;

a step of generating X(n+j,A) by performing irreversible calculation X n+j times (where n≧

0, j≧

0) on said first secret information A;

a step of generating Y(M−

n+i,B) by performing irreversible calculation Y M−

n+i times (where M≧

0, i≧

0) on said second secret information B;

a step of generating U(s+q,C) by performing irreversible calculation U s+q times (where s≧

0, q≧

0) on said third secret information C;

a step of generating V(M−

s+p,D) by performing irreversible calculation V M−

s+p times (where p≧

0) on said fourth secret information D; and

a step of synthesizing a key from information containing said X(n+j,A) and Y(M−

n+i,B) and U(s+q,C) and V(M−

s+p,D).

20. A decryption key generation method that generates a key used for decryption of data encrypted using an encryption key generated by the encryption key generation method according to claim 19, said decryption key generation method comprising:

an acquiring step of acquiring first generation information Ca=X(n,A) and second generation information Cb=Y(M−

n,B) and third generation information Cc=U(s,C) and fourth generation information Cd=V(M−

s,D);

a step of generating X(j,Ca) by performing irreversible calculation X j times (where j≧

0) on said first generation information Ca;

a step of generating Y(i,Cb) by performing irreversible calculation Y i times (where i≧

0) on said second generation information Cb;

a step of generating U(q,Cc) by performing irreversible calculation U q times (where q≧

0) on said third generation information Cc;

a step of generating V(p,Cd) by performing irreversible calculation V p times (where p≧

0) on said fourth generation information Cd; and

a step of synthesizing a key from information containing said X(j,Ca) and Y(i,Cb) and U(q,Cc) and V(p,Cd).

21. A home electric apparatus that updates currently used data to new data, said home electric apparatus comprising:

a receiving section that receives encrypted said new data and a maximum value and minimum value of a serial number of data to be updated;

a generation section that generates a key by executing a predetermined irreversible calculation on unique information associated with said currently used data a number of times based on said serial number of data to be updated; and

a decryption section that decrypts said new data using said key,

wherein said generation section has;

a calculation section that, by execution of first and second irreversible calculations, acquires a first key component resulting from repeatedly executing said first irreversible calculation on first secret information a number of times identical to said maximum value, and a second key component resulting from repeatedly executing said second irreversible calculation on second secret information a number of times identical to a value obtained by subtracting said minimum value from a predetermined value; and

a synthesis (combining) section that obtains said key by combining said first and second key components.

13. The home electric apparatus according to claim 21, further comprising a storage section that stores first unique information resulting from repeatedly executing said first irreversible calculation on said first secret information a number of times identical to a serial number of said currently used data, and second unique information resulting from repeatedly executing said second irreversible calculation on said second secret information a number of times identical to a value obtained by subtracting said serial number of currently used data from said predetermined value,

wherein said calculation section, when said maximum value and minimum value are received, acquires said first key component by repeatedly executing said first irreversible calculation on said first unique information a number of times identical to a value obtained by subtracting said serial number of currently used data from said maximum value, and acquires said second key component by repeatedly executing said second irreversible calculation on said second unique information a number of times identical to a value obtained by subtracting said minimum value from said serial number of currently used data.