SIGNATURE VERIFICATION SYSTEM, COMMUNICATION DEVICE, VERIFICATION DEVICE, SIGNATURE GENERATION METHOD, AND SIGNATURE VERFICATION METHOD

• US 20150350197A1
• Filed: 05/14/2015
• Published: 12/03/2015
• Est. Priority Date: 05/27/2014
• Status: Active Grant

• Current Assignee: Panasonic Intellectual Property Management Co., Ltd. (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Intellectual Property Management Co., Ltd. (Panasonic Holdings Corporation)
• Inventors: Ike, Kenjiro, Toyonaga, Saburo, Tanaka, Hiroyuki, Matsuo, Masakatsu
• Granted Patent: US 9,692,770 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Provided is a signature verification system including a communication device and a verification device. The communication device and the verification device are connected to each other through a network. The communication device derives a first hash value from a first random number, derives a second hash value from data including electronic data and a certificate of the communication device which includes the first hash value and a public key of the communication device, using a unidirectional function, generates a signature using a secret key of the communication device with respect to the second hash value, and transmits the electronic data, the certificate, and the signature to the verification device. The verification device receives the electronic data, the certificate, and the signature, authenticates the communication device using the first hash value included in the certificate, derives the second hash value from the data including the electronic data and the certificate using a unidirectional function, and verifies the signature using the public key of the communication device and the derived second hash value which are included in the certificate.

Claims

1. A signature verification system comprising:

a communication device; and

a verification device,

wherein the communication device and the verification device are connected to each other through a network,

wherein the communication device includes

a first random number generation unit that generates a first random number,

a first unidirectional function processing unit that derives a first hash value from the first random number using a unidirectional function,

a public key pair generation unit that generates a secret key and a public key of the communication device,

a second unidirectional function processing unit that derives a second hash value from data including electronic data and a certificate of the communication device, which includes the first hash value and the public key of the communication device, using a unidirectional function,

a signature generation unit that generates a signature using the secret key of the communication device with respect to the second hash value, and

a first communication unit that transmits the electronic data, the certificate, and the signature to the verification device, and

wherein the verification device includes

a second communication unit that receives the electronic data, the certificate, and the signature from the communication device,

an authentication processing unit that authenticates the communication device using the first hash value included in the certificate,

a third unidirectional function processing unit that derives the second hash value from the data including the electronic data and the certificate, using a unidirectional function, and

a signature verification unit that verifies the signature using the public key of the communication device and the derived second hash value which are included in the certificate.

2. The signature verification system of claim 1, wherein the communication device includes a certificate generation unit that generates a certificate of the communication device.

3. The signature verification system of claim 1,

wherein the verification device includes

a second random number generation unit that generates a second random number, and

a second data encryption unit that generates first encrypted data using the second random number and the public key of the communication device,

wherein the second communication unit transmits the first encrypted data to the communication device,

wherein the first communication unit receives the first encrypted data from the verification device,

wherein the communication device includes

a first data decryption unit that decrypts the first encrypted data using the secret key of the communication device to thereby acquire the second random number, and

a first data encryption unit that generates second encrypted data using the first random number and the second random number,

wherein the first communication unit transmits the second encrypted data to the verification device,

wherein the second communication unit receives the second encrypted data from the communication device,

wherein the verification device includes a second data decryption unit that decrypts the second encrypted data using the second random number to thereby acquire the first random number,

wherein the third unidirectional function processing unit derives a first hash value from the first random number, and

wherein the authentication processing unit authenticates the communication device on the basis of the derived first hash value and the first hash value included in the certificate.

4. The signature verification system of claim 3,

wherein the communication device includes a first storage unit that stores a common key shared by the communication device and the verification device,

wherein the verification device includes a second storage unit that stores the common key,

wherein the second data encryption unit generates the first encrypted data using the second random number, the public key of the communication device, and the common key, and

wherein the first data decryption unit decrypts the first encrypted data using the secret key of the communication device and the common key to thereby acquire the second random number.

5. A communication device which is connected to a verification device through a network, the communication device comprising:

a random number generation unit that generates a first random number;

a first unidirectional function processing unit that derives a first hash value from the first random number using a unidirectional function;

a public key pair generation unit that generates a secret key and a public key of the communication device;

a second unidirectional function processing unit that derives a second hash value from data including electronic data and a certificate of the communication device, which includes the first hash value and the public key of the communication device, using a unidirectional function;

a signature generation unit that generates a signature using the secret key of the communication device with respect to the second hash value; and

a communication unit that transmits the electronic data, the certificate, and the signature to the verification device.

6. A verification device which is connected to a communication device through a network, the verification device comprising:

a communication unit that receives, from the communication device, electronic data, a certificate of the communication device which includes a first hash value, derived from a random number generated by the communication device, and a public key of the communication device, and a signature generated using a secret key of the communication device with respect to a second hash value which is derived from data including the electronic data and the certificate using a unidirectional function;

an authentication processing unit that authenticates the communication device using the first hash value included in the certificate;

a unidirectional function processing unit that derives a second hash value from the data including the electronic data and the certificate using a unidirectional function; and

a signature verification unit that verifies the signature using the public key of the communication device and the derived second hash value which are included in the certificate.

7. A signature generation method in a communication device which is connected to a verification device through a network, the signature generation method comprising:

a step of generating a first random number;

a step of deriving a first hash value from the first random number using a unidirectional function;

a step of generating a secret key and a public key of the communication device;

a step of deriving a second hash value from data including electronic data and a certificate of the communication device which includes the first hash value and the public key of the communication device; and

a step of generating a signature using the secret key of the communication device with respect to the second hash value.

8. A signature verification method in a verification device which is connected to a communication device through a network, the signature verification method comprising:

a step of authenticating the communication device using a first hash value, derived from a random number generated by the communication device, which is included in a certificate of the communication device which includes the first hash value and a public key of the communication device;

a step of deriving a second hash value from data including electronic data and the certificate, using a unidirectional function; and

a step of verifying a signature using the public key of the communication device and the derived second hash value which are included in the certificate,

wherein the signature is a signature which is generated by the communication device using a secret key of the communication device with respect to the second hash value derived from the data including the electronic data and the certificate.