Encryption apparatus, communication system using the same and method therefor

• US 5,600,720 A
• Filed: 07/19/1994
• Issued: 02/04/1997
• Est. Priority Date: 07/20/1993
• Status: Expired due to Term

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Yamamoto, Takahisa, Iwamura, Keiichi
• Primary Examiner(s): Cangialosi, Salvatore
• Application Number:
  US08/277,512
• Time in Patent Office: 931 Days
• Field of Search: 380/21, 380/1, 380/46, 380/49
• US Class Current: 380/1
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/0668 producing a non-linear pseudorandom sequence

Abstract

In order to attain high speed and secure encryption, a communication apparatus comprises a random number generation circuit for sequentially generating random number sequences which assure difficulty in terms of amount of calculation in cryptoanalyzing the sequences based on output sequences while using a cryptographic key shared by partner stations as an initial value, and an encryption circuit for sequentially encrypting communication texts and outputting cryptograms in a transmitting station and sequentially cryptoanalyzing the cryptograms and outputting the same in a receiving station, faster than the sequential generation of the random numbers by the random number generation circuit.

Claims

1. An encryption apparatus comprising:

random number generation means for sequentially generating random number sequences using a first cryptographic key shared by a sender and a receiver as an initial value; and

encryption means for encrypting communication data based on a second encryption key and sequentially outputting the cryptographic sequences, wherein the encryption of one of the communication data is faster than the generation of one random number by said random number generation means and the number of random numbers necessary for cryptoanalyzing the random number sequence is greater than that of the encrypted communication data necessary for cryptoanalyzing the cryptographic sequence, and the second encryption key is sequentially updated based on the random number whenever a predetermined number of communication data is encrypted.

2. An encryption apparatus according to claim 1, wherein the cryptographic sequences outputted by said encryption means are cryptoanalyzable based on more than a predetermined number of output sequences, and the parameters are updated based on said predetermined number.

3. An encryption apparatus according to claim 1, wherein said encryption means includes second random number generation means for generating a random number sequence which allows the cryptoanalysis of the sequences based on more than a predetermined number of output sequences.

4. An encryption apparatus according to claim 1, wherein a plurality of encryption means are included.

5. An encryption apparatus according to claim 1, wherein a plurality of random number generation means are included.

6. An encryption apparatus according to claim 1, wherein Feistel cryptology is used as the cryptology of said encryption means.

7. An encryption apparatus according to claim 1, wherein said encryption means includes a feedback shift register.

8. An encryption apparatus according to claim 1, wherein said random number generation means includes means for performing a square residue operation and outputting several low order bits of the operation result.

9. An encryption apparatus according to claim 1, wherein said random number generation means includes means for generating RSA random numbers.

10. An encryption apparatus according to claim 1, wherein said random number generation means includes means for generating discrete logarithm random numbers.

11. An encryption apparatus according to claim 1, wherein said random number generation means includes means for generating inverse random numbers.

12. A random number generator comprising:

hold means for holding data;

calculation means for sequentially calculating parameter sequences and outputting a parameter;

conversion means for receiving the data held by said hold means and converting the received data based on the parameter output from said calculation means;

update means for updating the data held by said hold means in accordance with the conversion result by said conversion means; and

output means for sequentially outputting a portion of the data held by said hold means as random number sequences,

wherein the conversion of the data held by said hold means is faster than the calculation of one parameter by said calculation means and the number of parameters necessary for cryptoanalyzing the parameter sequence is greater than that of the random number sequence and the parameter is updated whenever the held data is updated a predetermined number of times.

13. A communication system comprising:

a transmission unit including first random number generation means for sequentially generating random number sequences using a first cryptographic key shared by a sender and a receiver as an initial value, and encryption means for encrypting communication data based on a second encryption key and sequentially outputting the cryptographic sequences, wherein the encryption of one of the communication data is faster than the generation of one random number by said random number generation means and the number of random numbers necessary for cryptoanalyzing the random number sequence is greater than that of the encrypted communication data necessary for cryptoanalyzing the cryptographic sequence; and

a receiver unit including second random number generation means for generating the same random number sequences as those of said first random number generation means while using first the cryptographic key as an initial value and cryptoanalysis means for cryptoanalyzing the cryptograms by inverse operation by said encryption means based on the second encryption key to sequentially output communication texts, wherein the second encryption key is sequentially updated based on the random number whenever a predetermined number of communication data is encrypted.

14. A communication system comprising:

a transmission unit including first hold means for holding data, first calculation means for sequentially calculating parameter sequences and outputting a parameter, first conversion means for receiving the data held by said first hold means and converting the received data based on the parameter output from said first calculation means, first update means for updating the data held by said first hold means in accordance with the conversion result by said first conversion means, first output means for sequentially outputting a portion of the data held by said first hold means as random number sequences, wherein the conversion of the data held by said first hold means is faster than the calculation of one parameter by said first calculation means and the number of parameters necessary for cryptoanalyzing the parameter sequence is greater than that of the random number sequence and the parameter is updated whenever the held data is updated a predetermined number of times, and encryption means for encrypting communication text based on the random number sequences outputted by said first output means; and

a receiver unit including second hold means for holding data, second calculation means for sequentially calculating parameter sequences and outputting a parameter, second conversion means for receiving the data held by said second hold means and converting the received data based on the parameter output from said second calculation means, second update means for updating the data held by said second hold means in accordance with the conversion result by said second conversion means, second output means for sequentially outputting a portion of the data held by said second hold means as random number sequences, wherein the conversion of the data held by said second hold means is faster than the calculation of one parameter by said second calculation means and the number of parameters necessary for cryptoanalyzing the parameter sequence is greater than that of the random number sequence and the parameter is updated whenever the held data is updated a predetermined number of times, and cryptoanalysis means for cryptoanalyzing cryptograms based on the random number sequences outputted by said second output means.

15. A communication method comprising the steps of:

in a transmission station,

sequentially generating random number sequences using a first cryptographic key shared by a sender and a receiver as an initial value; and

sequentially transmitting to the receiver cryptograms by encrypting communication texts based on a second encryption key that is sequentially updated based on the random number whenever a predetermined number of communication data is encrypted, wherein the encryption of one of the communication data is faster than the generation of one random number and the number of random numbers necessary for cryptoanalyzing the random number sequence is greater than that of the encrypted communication data necessary for cryptoanalyzing the cryptographic sequence; and

in a receiving station,

sequentially generating the same random number sequences as said random number sequences while using said first cryptographic key as an initial value; and

sequentially outputting communication texts by cryptoanalyzing the cryptograms by inverse operation to the encryption based on the second encryption key sequentially updated.

16. A communication method comprising the steps of:

in a transmitting station,

inputting data held by a first data hold unit to a first conversion unit;

sequentially calculating parameter sequences and outputting a parameter with first calculation means;

converting the input data based on the parameter output from said first calculation means;

updating the data held in said first hold unit based on the conversion result;

sequentially outputting a portion of data held in said first hold unit as random number sequences; and

sequentially transmitting to a receiving station cryptograms encrypted based on the output random number sequences, wherein the conversion of the data held by said first hold unit is faster than the calculation of one parameter by said first calculation means and the number of parameters necessary for cryptoanalyzing the parameter sequence is greater than that of the random number sequence and the parameter is updated whenever the held data is updated a predetermined number of times; and

in the receiving station,

inputting data held by a second data hold unit to a second conversion unit;

sequentially calculating parameter sequences and outputting a parameter with second calculation means;

converting the input data based on the parameter output from said second calculation means;

updating the data held in said second hold unit based on the conversion result;

[sequentially calculating parameter sequences which are difficult to be inferred from output sequences as the parameters;

to change the parameters;

sequentially outputting a portion of data held in said second hold unit as random number sequences; and

cryptoanalyzing the cryptograms based on the output random number sequences, wherein the conversion of the data held by said second hold unit is faster than the calculation of one parameter by said second calculation means and the number of parameters necessary for cryptoanalyzing the parameter sequence is greater than that of the random number sequence and the parameter is updated whenever the held data is updated a predetermined number of times.