METHOD AND APPARATUS FOR ENCRYPTED AUTHENTICATION

• US 20090177885A1
• Filed: 11/13/2008
• Published: 07/09/2009
• Est. Priority Date: 01/07/2008
• Status: Active Grant

• Current Assignee: Alpine Electronics Incorporated (Alps Alpine Co., Ltd.)
• Original Assignee: Alpine Electronics Incorporated (Alps Alpine Co., Ltd.)
• Inventors: Kubota, Akihiro, Hatakeyama, Hideyuki
• Granted Patent: US 8,200,973 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04N 21/4135 external recorder interface circuits between an apparatus for recording television signals and a television receiver H04N5/775
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A sink device including a first data processing unit and a second data processing unit authenticates the processing units, when turned on, to generate first authentication keys having the same data. When a data request is issued from the sink device to the source device, device authentication is made between the source device and the first data processing unit to generate second authentication keys having the same data. The source device encrypts an exchange key using the second authentication key, and sends the encrypted exchange key to the first data processing unit. The first data processing unit decrypts the encrypted exchange key using the second authentication key, encrypts the decrypted exchange key using the first authentication key, and sends the encrypted exchange key to the second data processing unit. The second data processing unit decrypts the encrypted exchange key using the first authentication key to obtain an exchange key.

Claims

1. A method for encrypted authentication between a first device and a second device that transmit or receive a plurality of kinds of data, wherein the result of encrypted authentication performed on one kind of data is applied to the other kinds of data.

2. The method for encrypted authentication according to claim 1, wherein

the result of the encrypted authentication is the result of receiving an encrypted exchange key generated by a sending device and decrypting the encrypted exchange key using an authentication key between the devices to obtain an exchange key;

and

the method comprises;

receiving one kind of encrypted data encrypted using an exchange key generated by the sending device and decrypting the encrypted data using the decrypted exchange key; and

decrypting the other kinds of encrypted data using the decrypted exchange key.

3. The method for encrypted authentication according to claim 1, wherein

the result of the encrypted authentication is the result of receiving an encrypted exchange key generated by a receiving device and decrypting the encrypted exchange key using an authentication key between the devices to obtain an exchange key;

and

the method comprises;

receiving one kind of encrypted data encrypted using an exchange key generated by the receiving device and decrypting the encrypted data using the decrypted exchange key; and

decrypting the other kinds of encrypted data using the decrypted exchange key.

4. The method for encrypted authentication according to claim 1, wherein

the first device includes a first data processing unit and a second data processing unit;

the method comprises the successive acts of;

generating first authentication keys by the device authentication between the first data processing unit and the second data processing unit of the first device; and

generating second authentication keys by the device authentication between the first data processing unit of the first device and the second device;

the first data processing unit decrypts data sent from the second device using the second authentication key, the data being encrypted by the second authentication key, encrypts the decrypted data using the first authentication key, and sends the encrypted data to the second data processing unit; and

the second data processing unit decrypts the encrypted data received from the first data processing unit using the first authentication key.

5. The method for encrypted authentication according to claim 4, wherein

the data encrypted by the second device using the second authentication key is an exchange key;

the first data processing unit decrypts a first kind of content data using the exchange key, the content data being encrypted by the second device using the exchange key; and

the second data processing unit decrypts a second kind of content data using the exchange key encrypted by the first data processing unit and decrypted by the second data processing unit, the content data being encrypted by the second device using the exchange key.

6. The method for encrypted authentication according to claim 1, wherein

the first device includes a first data processing unit and a second data processing unit;

the method comprises;

generating authentication keys by the device authentication between the first data processing unit of the first device and the second device;

the first data processing unit decrypts data sent from the second device using the authentication key, the data being encrypted by the authentication key, and sends the authentication key to the second data processing unit; and

the second data processing unit decrypts data sent from the second device using the authentication key received from the first data processing unit, the data being encrypted by the authentication key.

7. The method for encrypted authentication according to claim 6, wherein

the data encrypted by the second device using the authentication key is an exchange key;

the first data processing unit decrypts a first kind of content data using the exchange key, the content data being encrypted by the second device using the exchange key; and

the second data processing unit decrypts a second kind of content data using the exchange key decrypted by the second data processing unit, the content data being encrypted by the second device using the exchange key.

8. An apparatus for encrypted authentication between a first device and a second device that transmit or receive data, the apparatus comprising:

an authentication-key generating section configured to authenticate the second device that transmits a plurality of kinds of data and the first device to generate authentication keys; and

a processing section configured to apply the result of encrypted authentication in the processing of one kind of data using the authentication keys to the processing of the other kinds of data.

9. The apparatus for encrypted authentication according to claim 8, wherein

the result of the authentication executed in the processing of one kind of data is the data of an exchange key obtained by receiving an encrypted exchange key generated by a sending device and decrypting the encrypted exchange key using the authentication key between the devices;

and

the processing section applies the data of the exchange key to the processing of the other kinds of data.

10. The apparatus for encrypted authentication according to claim 8, wherein

the result of the authentication executed in the processing of one kind of data is the data of an exchange key obtained by receiving an encrypted exchange key generated by a receiving device and decrypting the encrypted exchange key using the authentication key between the devices;

and

the processing section applies the data of the exchange key to the processing of the other kinds of data.

11. The apparatus for encrypted authentication according to claim 8, wherein

the plurality of kinds of data transmitted and received between the plurality of devices include image data and audio data related to each other.

12. The apparatus for encrypted authentication according to claim 8, wherein

the first device includes a first data processing unit and a second data processing unit;

and

the apparatus comprises;

a first-authentication-key generating section configured to generate first authentication keys by the device authentication between the first data processing unit and the second data processing unit of the first device;

a second-authentication-key generating section configured to generate second authentication keys by the device authentication between the first data processing unit of the first device and the second device;

a decrypting section of the first data processing unit configured to decrypt data sent from the second device, the data being encrypted by the second authentication key, using the second authentication key;

a transmitting section of the first data processing unit configured to encrypt the data decrypted by the decrypting section of the first data processing unit using the first authentication key, and send the encrypted data to the second data processing unit; and

a decrypting section of the second data processing unit configured to receive the encrypted data sent from the transmitting section of the first data processing unit and decrypt the encrypted data using the first authentication key.

13. The apparatus for encrypted authentication according to claim 12, wherein

the data encrypted by the second device using the second authentication key is an exchange key;

the decrypting section of the first data processing unit decrypts a first kind of content data using the exchange key, the content data being encrypted by the second device using the exchange key; and

the decrypting section of the second data processing unit decrypts a second kind of content data using the exchange key encrypted by the first data processing unit and decrypted by the second data processing unit, the content data being encrypted by the second device using the exchange key.

14. The apparatus for encrypted authentication according to claim 8, wherein

the first device includes a first data processing unit and a second data processing unit;

and

the apparatus comprises;

an authentication-key generating section configured to generate authentication keys by the device authentication between the first data processing unit of the first device and the second device;

an authentication-key transmitting section configured to send the authentication key generated by the first data processing unit to the second data processing unit;

a decrypting section of the first data processing section configured to decrypt data sent from the second device using the authentication key, the data being encrypted by the authentication key; and

a decrypting section of the second data processing section configured to decrypt data sent from the second device using the authentication key received from the first data processing unit, the data being encrypted by the authentication key.

15. The apparatus for encrypted authentication according to claim 14, wherein

the data encrypted by the second device using the authentication key is an exchange key;

the decrypting section of the first data processing unit decrypts a first kind of content data using the exchange key, the content data being encrypted by the second device using the exchange key; and

the decrypting section of the second data processing unit decrypts a second kind of content data using the exchange key decrypted by the second data processing unit, the content data being encrypted by the second device using the exchange key.