RELAY APPARATUS, METHOD, AND SYSTEM

• US 20150163053A1
• Filed: 02/18/2015
• Published: 06/11/2015
• Est. Priority Date: 08/23/2012
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Izu, Tetsuya, Takenaka, Masahiko
• Application Number:
  US14/625,084
• Publication Number:
  US 20150163053A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 84/047 using dedicated repeater stations

Abstract

A relay apparatus includes: a memory; and one or more processors coupled to the memory and configured to: generate second encrypted data by performing a second encryption process using a second key shared with a providing destination apparatus in a second network on first encrypted data which is generated by a node apparatus in a first network performing a first encryption process using a first key on data, generate decrypted data by performing a decryption process using the first key on the second encrypted data, and transmit the decrypted data to the providing destination apparatus.

Claims

1. A relay apparatus comprising:

a memory; and

one or more processors coupled to the memory and configured to;

generate second encrypted data by performing a second encryption process using a second key shared with a providing destination apparatus in a second network on first encrypted data which is generated by a node apparatus in a first network performing a first encryption process using a first key on data,

generate decrypted data by performing a decryption process using the first key on the second encrypted data, and

transmit the decrypted data to the providing destination apparatus.

2. The relay apparatus according to claim 1, wherein

the first encrypted data includes a plurality of data pieces corresponding to a plurality of items, and

the one or more processors are configured to:

set at least one of the plurality of data pieces in a non-disclosed state based on information indicating whether or not each of the plurality of items is desired to be disclosed to the providing destination apparatus.

3. The relay apparatus according to claim 2, wherein the one or more processors are configured to:

delete the at least one of the plurality of data pieces, so as to set the at least one of the plurality of data pieces in a non-disclosed state.

4. The relay apparatus according to claim 2, wherein the one or more processors are configured to:

perform an encryption process using a third key on the at least one of the plurality of data pieces, so as to set the at least one of the plurality of data pieces in a non-disclosed state.

5. The relay apparatus according to claim 2, wherein the one or more processors are configured to:

replace the at least one of the plurality of data pieces with irreversible information, so as to set the at least one of the plurality of data pieces in a non-disclosed state.

6. The relay apparatus according to claim 1, wherein

the first encrypted data includes a plurality of data pieces corresponding to a plurality of items, and is encrypted for the plurality of data pieces by using a plurality of initial vectors in the first encryption process, and

the one or more processors are configured to:

receive the first encrypted data and the plurality of initial vectors, and

perform the decryption process on the second encrypted data by using the first key and the plurality of initial vectors.

7. A method comprising:

generating, by one or more processors, second encrypted data by performing a second encryption process using a second key shared with a providing destination apparatus in a second network on first encrypted data which is generated by a node apparatus in a first network performing a first encryption process using a first key on data;

generating decrypted data by performing a decryption process using the first key on the second encrypted data; and

transmitting the decrypted data to the providing destination apparatus.

8. The method according to claim 7, wherein

the first encrypted data includes a plurality of data pieces corresponding to a plurality of items, and

the method further comprising:

setting at least one of the plurality of data pieces in a non-disclosed state based on information indicating whether or not each of the plurality of items is desired to be disclosed to the providing destination apparatus.

9. The method according to claim 8, wherein the setting includes deleting the at least one of the plurality of data pieces.

10. The method according to claim 8, wherein the setting includes performing an encryption process using a third key on the at least one of the plurality of data pieces.

11. The method according to claim 8, wherein the setting includes replacing the at least one of the plurality of data pieces with irreversible information.

12. The method according to claim 7, wherein the first encrypted data includes a plurality of data pieces corresponding to a plurality of items, and is encrypted for the plurality of data pieces by using a plurality of initial vectors in the first encryption process, and

the method further comprising:

receiving the first encrypted data and the plurality of initial vectors; and

performing the decryption process on the second encrypted data by using the first key and the plurality of initial vectors.

13. A system comprising:

a node apparatus included in a first network and including a first processor;

a relay apparatus including a second processor; and

a providing destination apparatus in a second network,

wherein the first processor of the node apparatus is configured to;

generate first encrypted data by performing a first encryption process using a first key on data, and

transmit the first encrypted data, and

wherein the second processor of the relay apparatus is configured to;

generate second encrypted data by performing a second encryption process using a second key shared with the providing destination apparatus on the first encrypted data,

generate decrypted data by performing a decryption process using the first key on the second encrypted data, and

transmit the decrypted data to the providing destination apparatus.

14. The system according to claim 13, wherein

the first encrypted data includes a plurality of data pieces corresponding to a plurality of items, and

the second processor of the relay apparatus is configured to:

set at least one of the plurality of data pieces in a non-disclosed state based on information indicating whether or not each of the plurality of items is desired to be disclosed to the providing destination apparatus.

15. The system according to claim 14, wherein the second processor of the relay apparatus is configured to:

delete the at least one of the plurality of data pieces, so as to set the at least one of the plurality of data pieces in a non-disclosed state.

16. The system according to claim 14, wherein the second processor of the relay apparatus is configured to:

perform an encryption process using a third key on the at least one of the plurality of data pieces, so as to set the at least one of the plurality of data pieces in a non-disclosed state.

17. The system according to claim 14, wherein the second processor of the relay apparatus is configured to:

replace the at least one of the plurality of data pieces with irreversible information, so as to set the at least one of the plurality of data pieces in a non-disclosed state.

18. The system according to claim 13, wherein

the first encrypted data includes a plurality of data pieces corresponding to a plurality of items, and is encrypted for the plurality of data pieces by using a plurality of initial vectors in the first encryption process, and

the second processor of the relay apparatus is configured to:

receive the first encrypted data and the plurality of initial vectors, and

perform the decryption process on the second encrypted data by using the first key and the plurality of initial vectors.