INFORMATION PROCESSING APPARATUS, ENCRYPTION APPARATUS, AND CONTROL METHOD

• US 20160285632A1
• Filed: 03/22/2016
• Published: 09/29/2016
• Est. Priority Date: 03/24/2015
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Akiba, Tomohiro
• Granted Patent: US 10,038,556 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

An information processing apparatus includes a storage unit, an encryption processing unit that encrypts data to be stored in the storage unit, and a control unit that stores a first key in a unit different from the encryption processing unit, wherein the first key, which is used to decrypt data encrypted by the encryption processing unit and stored in the storage unit, is encrypted using a second key set in the encryption processing unit.

Claims

1. An information processing apparatus comprising:

a storage unit;

an encryption processing unit configured to encrypt data to be stored in the storage unit; and

a control unit configured to store a first key in a unit different from the encryption processing unit, wherein the first key, which is used to decrypt data encrypted by the encryption processing unit and stored in the storage unit, is encrypted using a second key set in the encryption processing unit.

2. The information processing apparatus according to claim 1, wherein the second key is set in the encryption processing unit according to a command from the control unit.

3. The information processing apparatus according to claim 1, wherein the control unit checks a consistency between the first key and the data stored in the storage unit, and

wherein, based on the control unit having checked that there is the consistency, the control unit stores the first key encrypted using the second key in the unit different from the encryption processing unit.

4. The information processing apparatus according to claim 3, wherein the control unit checks the consistency between the first key and the data stored in the storage unit by determining whether data read from a specific area of the storage unit coincides with known data.

5. The information processing apparatus according to claim 1, wherein the control unit checks a consistency between the first key and the data stored in the storage unit, and

wherein, based on the control unit having checked that there is no consistency, the control unit acquires the first key encrypted using the second key and is stored in the unit different from the encryption processing unit, and sets the acquired first key in the encryption processing unit.

6. The information processing apparatus according to claim 1, wherein the encryption processing unit encrypts, according to a command from the control unit, the data to be stored in the storage unit using the first key.

7. The information processing apparatus according to claim 1, wherein the encryption processing unit decrypts, according to a command from the control unit, data read from the storage unit using the first key.

8. The information processing apparatus according to claim 1, wherein the storage unit is an auxiliary storage device.

9. The information processing apparatus according to claim 1, wherein the encryption processing unit further includes a key storage unit configured to store the first key.

10. An encryption apparatus that connects to a storage unit and a control unit, the encryption apparatus comprising:

a key storage unit configured to store a first key; and

an encryption processing unit configured to encrypt data transmitted from the control unit using the first key, transmit the encrypted data to the storage unit, decrypt data read from the storage unit using the first key, and transmit the decrypted data to the control unit,

wherein the encryption processing unit is configured to encrypt, according to reception of a command for acquiring the first key from the control unit, the first key using a second key and transmit the encrypted first key to the control unit.

11. A method for controlling an information processing apparatus including a storage unit and an encryption processing unit for encrypting data to be stored in the storage unit, the method comprising:

storing a first key encrypted using a second key in a unit different from the encryption processing unit, wherein the first key is used to decrypt data that encrypted by the encryption processing unit and stored in the storage unit.