Information processing system having function of securely protecting confidential information

• US 6,085,323 A
• Filed: 04/14/1997
• Issued: 07/04/2000
• Est. Priority Date: 04/15/1996
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Shimizu, Hideo, Endoh, Naoki, Saisho, Toshiaki, Hori, Satomi
• Primary Examiner(s): Hayes, Gail O.
• Assistant Examiner(s): Tucker, Christopher M.
• Application Number:
  US08/837,097
• Time in Patent Office: 1,177 Days
• Field of Search: 380/4, 380/21, 380/25
• US Class Current: 713/150
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

An information processing system includes a first information processing apparatus and a second information processing apparatus arranged separate from the first information processing apparatus and capable of exchanging a signal with the first information processing apparatus. The first information processing apparatus includes a first key generator for generating a first key, and a first encrypting unit for encrypting data using the first key generated by the first key generator to generate first encrypted information. The second information processing apparatus includes a second key storage unit for storing a second key, and a second encrypting unit for encrypting the first key using the second key stored in the second storage unit to generate second encrypted information. The first information processing apparatus further includes a correlation storage unit for storing the first encrypted information generated by the first encrypting unit and the second encrypted information generated by the second encrypting unit, the first encrypted information being correlated with the second encrypted information.

Claims

1. An information processing system comprising a first information processing apparatus and a second information processing apparatus arranged separate from said first information processing apparatus and capable of exchanging a signal with said first information processing apparatus, wherein

said first information processing apparatus comprises

first key generation means for generating a first key, and

first encryption means for encrypting data using the first key generated by said first key generation means to generate first encrypted information;

said second information processing apparatus comprises

second key storage means for storing a second key, and

second encryption means for encrypting the first key using the second key stored in said second key storage means to generate second encrypted information; and

said first information processing apparatus further comprises correlation storage means for storing the first encrypted information generated by said first encryption means and the second encrypted information generated by said second encryption means, the first encrypted information being correlated with the second encrypted information.

2. A system according to claim 1, wherein said first encryption means comprises means for deleting the data after the first encrypted information is generated.

3. A system according to claim 1, wherein said second key storage means stores a plurality of second keys, and said first information processing apparatus comprises designation means for selecting, from the plurality of second keys, a second key used to encrypt the first key, and designating the selected second key to said second information processing apparatus.

4. An information processing system comprising a first information processing apparatus and a second information processing apparatus arranged separate from said first information processing apparatus and capable of exchanging a signal with said first information processing apparatus, wherein

said first information processing apparatus comprises

correlation storage means for storing first encrypted information obtained by encrypting data with a first key and second encrypted information obtained by encrypting the first key with a second key, the first encrypted information being correlated with the second encrypted information;

said second information processing apparatus comprises

second key storage means for storing the second key, and

first decryption means for decrypting the second encrypted information from said correlation storage means by using the second key stored in said second key storage means, thereby extracting the first key; and

said first information processing apparatus further comprises second decryption means for decrypting the first encrypted information from said correlation storage means by using the first key extracted by said first decryption means, thereby obtaining the data.

5. An information processing apparatus comprising:

first key generation means for generating a first key;

encryption means for encrypting data with the first key generated by said first key generation means;

input means for outputting the first key generated by said first key generation means to an external information processing apparatus and inputting, in said external information processing apparatus, the first key encrypted with a second key stored in said external information processing apparatus; and

storage means for storing the encrypted first key input through said input means and the data encrypted by said encryption means, the encrypted first key being correlated with the encrypted data.

6. An information processing apparatus according to claim 5, wherein said encryption means comprises means for deleting the data after the data is encrypted.

7. An information processing apparatus according to claim 5, further comprising designation means for selecting, from the plurality of second keys, a second key used to encrypt the first key, and designating the selected second key to said external information processing apparatus.

8. An information processing apparatus comprising:

storage means for storing first encrypted information obtained by encrypting data with a first key and second encrypted information obtained by encrypting the first key with a second key;

input means for outputting the second encrypted information from said storage means to an external information processing apparatus, and inputting a decrypted first key obtained by decrypting, in said external information processing apparatus, the second encrypted information with the second key stored in said external information processing apparatus; and

decryption means for decrypting the first encrypted information with the decrypted first key input through said input means, thereby obtaining the data.

9. An information processing apparatus comprising:

storage means for storing a second key;

input means for inputting the first key from an external information processing apparatus which encrypts data with the first key;

encryption means for encrypting the first key input through said input means, by using the second key stored in said storage means; and

output means for outputting the encrypted first key to said external information processing apparatus so as to store the first key encrypted by said encryption means and the encrypted data in correlation with the encrypted first key in said external information processing apparatus.

10. An information processing apparatus according to claim 9, wherein said storage means stores a plurality of second keys, and said encryption means comprises means for encrypting the first key with one of the plurality of second keys which is designated by said external information processing apparatus.

11. An information processing apparatus comprising:

second key storage means for storing a second key;

input means for inputting second encrypted information from an external information processing apparatus having storage means for storing first encrypted information obtained by encrypting data with a first key and the second encrypted information obtained by encrypting the first key with the second key stored in said second key storage means;

decryption means for decrypting with the second key the second encrypted information input through said input means to extract the first key; and

output means for outputting the extracted first key to said external information processing apparatus in order to decrypt the first encrypted information with the first key extracted by said decryption means to obtain the data.

12. An information processing method comprising:

the first key generation step of generating a first key in a first information processing apparatus;

the first encrypted information generation step of encrypting data using the generated first key to generate first encrypted information;

the output step of outputting the first key to a second information processing apparatus which is arranged separate from said first information processing apparatus and stores a second key;

the second encrypted information generation step of encrypting the first key using the second key in said second information processing apparatus to generate second encrypted information;

the output step of outputting the generated second encrypted information to said first information processing apparatus; and

the storage step of storing the first encrypted information and the second encrypted information in correlation with the first encrypted information in said first information processing apparatus.

13. An information processing method comprising:

the output step of outputting second encrypted information from a first information processing apparatus to a second information processing apparatus separate from said first information processing apparatus, said first information processing apparatus storing first encrypted information obtained by encrypting data with a first key and the second encrypted information obtained by encrypting the first key with a second key, and the first encrypted information being correlated with the second encrypted information;

the first key extraction step of decrypting the second encrypted information with the second key stored in said second information processing apparatus in advance to extract the first key;

the output step of outputting the extracted first key to said first information processing apparatus; and

the data acquisition step of decrypting the first encrypted information with the first key in said first information processing apparatus to obtain the data.

14. An information processing method comprising:

the first key generation step of generating a first key;

the encryption step of encrypting data with the generated first key;

the output step of outputting the generated first key to an external information processing apparatus;

the input step of inputting, in said external information processing apparatus, the first key encrypted with the second key stored in said external information processing apparatus; and

the storage step of storing the input encrypted first key and data encrypted with the first key, the encrypted first key being correlated with the encrypted data.

15. An information processing method comprising:

the output step of outputting, to an external information processing apparatus, second encrypted information of first encrypted information stored and obtained by encrypting data with a first key and the second encrypted information stored and obtained by encrypting the first key with a second key;

the input step of inputting, in said external information processing apparatus, the first key obtained by decrypting the second encrypted information with the second key stored in said external information processing apparatus; and

the extraction step of decrypting the first encrypted information with the input first key to extract the data.

16. An information processing method comprising:

the input step of inputting a generated first key from an external information processing apparatus which encrypts data with the first key;

the encryption step of encrypting the input first key with a second key stored in advance; and

the output step of outputting the encrypted first key to said external information processing apparatus in order to store the encrypted first key and the encrypted data in correlation with the encrypted first key in said external information processing apparatus.

17. An information processing method comprising:

the input step of inputting second encrypted information form an external information processing apparatus having storage means for storing first encrypted information obtained by encrypting data with a first key and the second encrypted information obtained by encrypting the first key with a second key;

the extraction step of decrypting the second encrypted information with the second key stored in advance to extract the first key; and

the output step of outputting the decrypted extracted first key to said external information processing apparatus in order to decrypt the first encrypted information with the extracted first key to obtain the data in said external information processing apparatus.

18. A program storage device which stores a program readable from a machine in order to execute method steps for performing encryption processing, wherein the method steps comprise:

the first key generation step of generating a first key;

the encryption step of encrypting data with the generated first key;

the output step of outputting the generated first key to an external information processing apparatus;

the input step of inputting, in said external information processing apparatus, the first key encrypted with a second key stored in said external information processing apparatus; and

the storage step of storing the encrypted input first key and the data encrypted with the first key, the encrypted input first key being correlated with the data encrypted with the first key.

19. A program storage device which stores a program readable from a machine in order to execute method steps for performing encryption processing, wherein the method steps comprise:

the output step of outputting, to an external information processing apparatus, second encrypted information of first encrypted information stored and obtained by encrypting data with a first key and the second encrypted information stored and obtained by encrypting the first key with a second key;

the input step of inputting, in said external information processing apparatus, the first key obtained by decrypting the second encrypted information with the second key stored in said external information processing apparatus; and

the extraction step of decrypting the first encrypted information with the input first key to extract the data.

20. A key determination method for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a second key corresponding to a specific key of the receiving side, the method comprising steps of:

inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the second key corresponding to the specific key of the receiving side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the second key;

executing a second processing including the first processing on the plurality of first data, the second data, and the specific key of the receiving side, to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the second key corresponding to the specific key of the receiving side; and

outputting the first key obtained from the determined one of the plurality of first data by using the specific key.

21. A key determination method for determining, at a receiving side, which one of a plurality of second keys of the receiving side corresponds to a specific key of the transmitting side, the specific key having been used in obtaining first data at a transmitting side to encrypt/decrypt a first key, the method comprising steps of:

inputting the first data from the transmitting side, the first data having been obtained at the transmitting side by encrypting/decrypting the first key using the specific key of the transmitting side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the specific key;

executing a second processing including the first processing on the first data, the second data, and the plurality of second keys of the receiving side, to determine which one of the plurality of second keys corresponds to the specific key of the transmitting side used in obtaining the first data; and

outputting the first key obtained from the first data by using the determined one of the plurality of second keys.

22. The method according to claim 21, wherein the specific key of the transmitting side is identical to one of the plurality of the specific keys of the receiving side, and the first data have been obtained at the transmitting side by using said one of the plurality of the specific keys.

23. A key determination method for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a specific second key, the method comprising steps of:

inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the specific second key;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by encrypting/decrypting the first key using the first key;

executing a processing on the plurality of first data and the second data using the specific key to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the specific second key; and

outputting the first key obtained by the processing using the specific second key from the determined one of the plurality of first data.

24. A key determination apparatus for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a second key corresponding to a specific key of the receiving side, the apparatus comprising:

first input means for inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the second key corresponding to the specific key of the receiving side;

second input means for inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the second key;

execution means for executing a second processing including the first processing on the plurality of first data, the second data, and the specific key of the receiving side, to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the second key corresponding to the specific key of the receiving side; and

output means for outputting the first key obtained from the determined one of the plurality of first data by using the specific key.

25. A key determination apparatus according to claim 24, wherein the second input means inputs, as the second data, at least one of data A generated at the transmitting side on the basis of the first and second keys, data B generated at the transmitting side on the basis of only the first key, data C generated at the transmitting side on the basis of only the second key, and data D generated at the transmitting side using neither the first key nor the second key.

26. A key determination apparatus according to claim 25, wherein the data A is one of data obtained by encrypting the second key with the first key, data obtained by decrypting the second key with the first key, data obtained by encrypting the first key twice with the second key, and data obtained by decrypting the first key with the second key.

27. A key determination apparatus according to claim 25, wherein the data B is one of data obtained by encrypting the first key with the first key itself, data obtained by decrypting the first key with the first key itself, data obtained by encrypting predetermined shared data with the first key, data obtained by decrypting the predetermined shared data with the first key, and data obtained by encrypting the first key with a specific function.

28. A key determination apparatus according to claim 25, wherein the data C is one of data obtained by encrypting the second key with the second key itself, data obtained by decrypting the second key with the second key itself, data obtained by encrypting with the second key a sum of the second key and shared data changing every encryption, data obtained by decrypting with the second key the sum of the second key and shared data changing every encryption, data obtained by encrypting with the second key shared data changing every encryption, data obtained by decrypting with the second key the shared data changing every encryption, and data obtained by encrypting the second key with a specific function.

29. A key determination apparatus according to claim 25, wherein the data D is obtained by encrypting with the specific function data in which the first and second keys are juxtaposed.

30. A key determination apparatus for determining, at a receiving side, which one of a plurality of second keys of the receiving side corresponds to a specific key of the transmitting side, the specific key having been used in obtaining first data at a transmitting side to encrypt/decrypt a first key, the apparatus comprising:

first input means for inputting the first data from the transmitting side, the second having been obtained at the transmitting side by encrypting/decrypting the first key using the specific key of the transmitting side;

second input means for inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the specific key;

execution means for executing a second processing including the first processing on the first data, the second data, and the plurality of second keys of the receiving side, to determine which one of the plurality of second keys corresponds to the specific key of the transmitting side used in obtaining the first data; and

output means for outputting the first key obtained from the first data by using the determined one of the plurality of second keys.

31. A key determination apparatus according to claim 30, wherein the second input means inputs, as the second data, at least one of data A generated at the transmitting side on the basis of the first and specific keys, data B generated at the transmitting side on the basis of only the first key, data C generated at the transmitting side on the basis of only the specific key, and data D generated at the transmitting side using neither the first key nor the specific key.

32. A key determination apparatus according to claim 31, wherein the data A is one of data obtained by encrypting the specific key with the first key, data obtained by decrypting the specific key with the first key, data obtained by encrypting the first key twice with the specific key, and data obtained by decrypting the first key with the specific key.

33. A key determination apparatus according to claim 31, wherein the data B is one of data obtained by encrypting the first key with the first key itself, data obtained by decrypting the first key with the first key itself, data obtained by encrypting predetermined shared data with the first key, data obtained by decrypting the predetermined shared data with the first key, and data obtained by encrypting the first key with a specific function.

34. A key determination apparatus according to claim 31, wherein the data C is one of data obtained by encrypting the specific key with the specific key itself, data obtained by decrypting the specific key with the specific key itself, data obtained by encrypting with the specific key a sum of the specific key and shared data changing every encryption, data obtained by decrypting with the specific key the sum of the specific key and shared data changing every encryption, data obtained by encrypting with the specific key shared data changing every encryption, data obtained by decrypting with the specific key the shared data changing every encryption, and data obtained by encrypting the specific key with a specific function.

35. A key determination apparatus according to claim 31, wherein the data D is obtained by encrypting with the specific function data in which the first and specific keys are juxtaposed.

36. A key determination apparatus for determining at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a specific key, the apparatus comprising:

first input means for inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the specific second key;

second input means for inputting second data from the transmitting side, the second data having been obtained at the transmitting side by encrypting/decrypting the first key using the first key;

execution means for executing a processing on the plurality of first data and the second data using the specific key to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the specific second key; and

output means for outputting the first key obtained by the processing using the specific second key from the determined one of the plurality of first data.

37. A program storage device which stores a program readable from a machine in order to execute a key determination step for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a specific key corresponding to a specific key of the receiving side, the key determination step comprising the steps of:

inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the second key corresponding to the specific key of the receiving side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the second key;

executing a second processing including the first processing on the plurality of first data, the second data, and the specific key of the receiving side, to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the second key corresponding to the specific key of the receiving side; and

outputting the first key obtained from the determined one of the plurality of first data by using the specific key.

38. A program storage medium which stores a program readable from a machine in order to execute a key determination step for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a specific key corresponding to a specific key of the receiving side, the key determination step comprising the steps of:

inputting the first data from the transmitting side, the first data having been obtained at the transmitting side by encrypting/decrypting the first key using the specific key of the transmitting side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the specific key;

executing a second processing including the first processing on the first data, the second data, and the plurality of second keys of the receiving side, to determine which one of the plurality of second keys corresponds to the specific key of the transmitting side used in obtaining the first data; and

outputting the first key obtained from the first data by using the determined one of the plurality of second keys.

39. A program storage medium which stores a program readable from a machine in order to execute a key determination step for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a specific key corresponding to a specific key of the receiving side, the key determination step comprising the steps of:

inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the specific second key;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by encrypting/decrypting the first key using the first key;

executing a processing on the plurality of first data and the second data using the specific key to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the specific second key; and

outputting the first key obtained by the processing using the specific second key from the determined one of the plurality of first data.

40. A key determination method for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a second key corresponding to a specific key of the receiving side, the method comprising steps of:

inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the second key corresponding to the specific key of the receiving side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the second key;

executing a second processing opposite to that of the first processing on the plurality of first data, the second data, and the specific key of the receiving side, to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the second key corresponding to the specific key of the receiving side; and

outputting the first key obtained from the determined one of the plurality of first data by using the specific key.

41. A key determination method for determining, at a receiving side, which one of a plurality of second keys of the receiving side corresponds to a specific key of the transmitting side, the specific key having been used in obtaining first data at a transmitting side to encrypt/decrypt a first key, the method comprising steps of:

inputting the first data from the transmitting side, the first data having been obtained at the transmitting side by encrypting/decrypting the first key using the specific key of the transmitting side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the specific key;

executing a second processing opposite to that of the first processing on the first data, the second data, and the plurality of second keys of the receiving side, to determine which one of the plurality of second keys corresponds to the specific key of the transmitting side used in obtaining the first data; and

outputting the first key obtained from the first data by using the determined one of the plurality of second keys.

42. The method according to claim 41, wherein the specific key of the transmitting side is identical to one of the plurality of the specific keys of the receiving side, and the first data have been obtained at the transmitting side by using said one of the plurality of the specific keys.

43. A key determination apparatus for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a second key corresponding to a specific key of the receiving side, the apparatus comprising:

first input means for inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the second key corresponding to the specific key of the receiving side;

second input means for inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the second key;

execution means for executing a second processing opposite to that of the first processing on the plurality of first data, the second data, and the specific key of the receiving side, to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the second key corresponding to the specific key of the receiving side; and

output means for outputting the first key obtained from the determined one of the plurality of first data by using the specific key.

44. A key determination apparatus according to claim 43, wherein the second input means inputs, as the second data, at least one of data A generated at the transmitting side on the basis of the first and second keys, data B generated at the transmitting side on the basis of only the first key, data C generated at the transmitting side on the basis of only the second key, and data D generated at the transmitting side using neither the first key nor the second key.

45. A key determination apparatus according to claim 44, wherein the data A is one of data obtained by encrypting the second key with the first key, data obtained by decrypting the second key with the first key, data obtained by encrypting the first key twice with the second key, and data obtained by decrypting the first key with the second key.

46. A key determination apparatus according to claim 44, wherein the data B is one of data obtained by encrypting the first key with the first key itself, data obtained by decrypting the first key with the first key itself, data obtained by encrypting predetermined shared data with the first key, data obtained by decrypting the predetermined shared data with the first key, and data obtained by encrypting the first key with a specific function.

47. A key determination apparatus according to claim 44, wherein the data C is one of data obtained by encrypting the second key with the second key itself, data obtained by decrypting the second key with the second key itself, data obtained by encrypting with the second key a sum of the second key and shared data changing every encryption, data obtained by decrypting with the second key the sum of the second key and shared data changing every encryption, data obtained by encrypting with the second key shared data changing every encryption, data obtained by decrypting with the second key the shared data changing every encryption, and data obtained by encrypting the second key with a specific function.

48. A key determination apparatus according to claim 44, wherein the data D is obtained by encrypting with the specific function data in which the first and second keys are juxtaposed.

49. A key determination apparatus for determining, at a receiving side, which one of a plurality of second keys of the receiving side corresponds to a specific key of the transmitting side, the specific key having been used in obtaining first data at a transmitting side to encrypt/decrypt a first key, the apparatus comprising:

first input means for inputting the first data from the transmitting side, the first data having been obtained at the transmitting side by encrypting/decrypting the first key using the specific key of the transmitting side;

second input means for inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the specific key;

execution means for executing a second processing opposite to that of the first processing on the first data, the second data, and the plurality of second keys of the receiving side, to determine which one of the plurality of second keys corresponds to the specific key of the transmitting side used in obtaining the first data; and

output means for outputting the first key obtained from the first data by using the determined one of the plurality of second keys.

50. A key determination apparatus according to claim 49, wherein the second input means inputs, as the second data, at least one of data A generated at the transmitting side on the basis of the first and specific keys, data B generated at the transmitting side on the basis of only the first key, data C generated at the transmitting side on the basis of only the specific key, and data D generated at the transmitting side using neither the first key nor the specific key.

51. A key determination apparatus according to claim 50, wherein the data A is one of data obtained by encrypting the specific key with the first key, data obtained by decrypting the specific key with the first key, data obtained by encrypting the first key twice with the specific key, and data obtained by decrypting the first key with the specific key.

52. A key determination apparatus according to claim 50, wherein the data B is one of data obtained by encrypting the first key with the first key itself, data obtained by decrypting the first key with the first key itself, data obtained by encrypting predetermined shared data with the first key, data obtained by decrypting the predetermined shared data with the first key, and data obtained by encrypting the first key with a specific function.

53. A key determination apparatus according to claim 50, wherein the data C is one of data obtained by encrypting the specific key with the specific key itself, data obtained by decrypting the specific key with the specific key itself, data obtained by encrypting with the specific key a sum of the specific key and shared data changing every encryption, data obtained by decrypting with the specific key the sum of the specific key and shared data changing every encryption, data obtained by encrypting with the specific key shared data changing every encryption, data obtained by decrypting with the specific key the shared data changing every encryption, and data obtained by encrypting the specific key with a specific function.

54. A key determination apparatus according to claim 50, wherein the data D is obtained by encrypting with the specific function data in which the first and specific keys are juxtaposed.

55. A program storage device which stores a program readable from a machine in order to execute a key determination step for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a specific key corresponding to a specific key of the receiving side, the key determination step comprising the steps of:

inputting the plurality of first data, each first data having been obtained at the transmitting side by encrypting/decrypting the first key using each one of a plurality of second keys, the plurality of second keys including the second key corresponding to the specific key of the receiving side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the second key;

executing a second processing opposite to that of the first processing on the plurality of first data, the second data, and the specific key of the receiving side, to determine which one of the plurality of first data has been obtained by encrypting/decrypting the first key using the second key corresponding to the specific key of the receiving side; and

outputting the first key obtained from the determined one of the plurality of first data by using the specific key.

56. A program storage medium which stores a program readable from a machine in order to execute a key determination step for determining, at a receiving side, which one of a plurality of first data received from a transmitting side has been obtained by encrypting/decrypting a first key using a specific key corresponding to a specific key of the receiving side, the key determination step comprising the steps of:

inputting the first data from the transmitting side, the first data having been obtained at the transmitting side by encrypting/decrypting the first key using the specific key of the transmitting side;

inputting second data from the transmitting side, the second data having been obtained at the transmitting side by executing a first processing on at least one of the first key and the specific key;

executing a second processing opposite to that of the first processing on the first data, the second data, and the plurality of second keys of the receiving side, to determine which one of the plurality of second keys corresponds to the specific key of the transmitting side used in obtaining the first data; and

outputting the first key obtained from the first data by using the determined one of the plurality of second keys.