DATA RECORDING DEVICE, AND METHOD OF PROCESSING DATA RECORDING DEVICE

• US 20140281551A1
• Filed: 06/02/2014
• Published: 09/18/2014
• Est. Priority Date: 04/28/2011
• Status: Active Grant

• Current Assignee: Kioxia Corporation
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: KATO, Taku, Nagai, Yuji, Matsushita, Tatsuyuki
• Granted Patent: US 9,319,389 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A controller is provided with a controller key and a first controller identification information unique to the controller. The controller generates a controller unique key unique to a respective controller based on the controller key and the first controller identification information, and a second controller identification information based on the first controller identification information. A decryptor decrypts the encrypted medium device key using the controller unique key to obtain a medium device key. An authentication/key exchange process unit performs authentication/key exchange process with the host device through an interface unit using the medium device key, the medium device key certificate and the second controller identification information to establish a secure channel.

Claims

1. (canceled)

2. A host storing host key information, the host comprising:

a processor configured to

generate a first random number, and send, to a medium, the first random number and the host certification information;

receive, from the medium, a second random number, medium certification information, a first value, and unique ID information, the first value being calculated using a base point of an elliptic curve and a third random number, the unique ID information being generated by executing a one-way function calculation based on controller key information and controller identification information stored in the medium, the unique ID information being used in a signature process using medium key information;

generate a fourth random number, and calculate a second value using the fourth random number and the base point of the elliptic curve; and

generate shared key information based on the first value and the fourth random number, the shared key information being shared by a key exchange process between the host and the medium.

3. A host, comprising:

a processor configured to

send a first random number and host certification information to a medium,

receive a second random number, medium certification information, a value calculated using a third random number, and unique ID information from the medium,

generate a fourth random number, and generate shared key information based on the fourth random number and the value,

wherein the unique ID information is generated based on controller key information and controller identification information of the medium, and

the unique ID information is used in a signature process using medium key information.

4. A host, comprising:

a processor configured to

send host certificate information to a medium,

verify signature information of medium certification information when receiving the medium certification information from the medium, and

verify second signature information when receiving a value and the second signature information from the medium,

wherein the value is calculated using a random number generated in the medium,

the second signature information is generated by a signature process using a medium key information and information using unique ID information, and

the unique ID information is generated based on controller key information and controller identification information.

5. An authentication system that performs authentication between a medium and a host, the system comprising:

the medium, including

a memory storing medium key information, medium certification information, controller key information, and controller identification information, and

a controller configured to control the memory; and

the host, including

a host memory that stores host key information and host certification information; and

a processor configured to generate a first random number and send, to the medium, the first random number and the host certification information,

wherein the controller is further configured to

verify first signature information attached to the host certification information sent from the host,

generate a second random number and a third random number,

calculate a first value using the third random number and a base point of an elliptic curve,

execute a one-way function calculation based on the controller key information and the controller identification information to generate unique ID information,

perform a signature process for the first random number, the first value, and the unique ID information using the medium key information to generate second signature information, and

send, to the host, the second signature information, the first random number different from the second signature information, the first value, the unique ID information, and the medium certificate information; and

the host is configured to verify the second signature information sent from the medium.

6. The authentication system according to claim 5, wherein, when verification of the first signature information has failed, the controller ceases further processing.

7. The authentication system according to claim 5, wherein, when verification of the second signature information has failed, the processor ceases further processing.

8. The authentication system according to claim 5, wherein the processor is further configured to

generate a fourth random number,

calculate a second value using the fourth random number and the base point of the elliptic curve,

perform a signature process for the second random number and the second value using the host key information, and generate shared key information shared with the medium in the key exchange process.

9. The authentication system according to claim 8, wherein the processor is further configured to generate the shared key information based on the third random number and the second value.

10. The authentication system according to claim 8,

wherein the processor is further configured to send the second value to the medium;

and

the controller is further configured to newly generate the shared key information based on the third random number and the second value.

11. The authentication system according to claim 8, wherein the processor is further configured to generate the shared key information, which has different values for different times of execution of the key exchange process.

12. An authentication system, comprising:

a host that stores host certification information; and

a medium that stores medium key information, medium certification information, controller key information, and controller identification information,

wherein the host is configured to generate a first random number and send the first random number and the host certification information to the medium; and

the medium is configured to

verify first verification information attached to the host certification information sent from the host,

generate a second random number and a third random number,

calculate a first value using the third random number and a base point of an elliptic curve,

execute a one-way function calculation based on the controller key information and the controller identification information to generate unique ID information,

perform a signature process for the first random number, the first value, and the unique ID information using the medium key information to generate second signature information, and

send, to the host, the second signature information, the first random number different from the second signature information, the first value, the unique ID information, and the medium certificate information.

13. A medium, comprising:

a memory that stores medium key information, medium certification information, controller key information, and controller identification information; and

a controller that controls the memory,

wherein when the medium receives a first random number and host certification information from a host, the medium verifies first signature information attached to the host certification information,

when verification of the first signature information is judged as a success, the medium

generates a second random number and a third random number,

calculates a first value based on the third random number and a base point of an elliptic curve,

executes a one-way function calculation based on the controller key information and the controller identification information to generate unique ID information,

performs a signature process for the first random number, the first value, and the unique ID information using the medium key information to generate second signature information, and

sends, to the host, the second signature information, the second random number different from the second signature information, the first value, the unique ID information, and the medium certificate information, and

when verification of the first signature information is judged as a failure, further processing by the medium is ceased.

14. A medium, comprising:

a memory that stores medium key information, medium certification information, controller key information, and controller identification information; and

a controller configured to control the memory,

wherein when the medium receives a first random number and host certification information from a host, the medium verifies first signature information attached to the host certification information, and

the medium

generates a second random number and a third random number,

calculates a first value based on the third random number and a base point of an elliptic curve,

executes one-way function calculation based on the controller key information and the controller identification information to generate unique ID information,

performs a signature process for the first random number, the first value, and the unique ID information using the medium key information to generate second signature information, and

sends, to the host, the second signature information, the second random number different from the second signature information, the first value, the unique ID information, and the medium certificate information.