Calculation device and calculation method

• US 7,392,272 B2
• Filed: 04/18/2003
• Issued: 06/24/2008
• Est. Priority Date: 04/19/2002
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Tanaka, Masao, Matsuda, Hiromi, Morinaga, Eiichiro, Abe, Miki
• Primary Examiner(s): Mai; Tan V.
• Application Number:
  US10/480,803
• Publication Number:
  US 20040162869A1
• Time in Patent Office: 1,894 Days
• Field of Search: 708/490
• US Class Current: 708/490
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]

Abstract

An arithmetic unit and an arithmetic method that output no information necessary for decryption or encryption to the outside and can perform a self-protecting function when an illegal attack is made. A command monitoring part (44) monitors input command sequences. In a first sequence, a process key in a first stage is calculated from a hardware key (Khd) and is then written to a key storing part (47). In each of the following sequences, a process key in a next stage is calculated from a process key stored in the key storing part (47). When commands of predetermined contents are inputted in predetermined order, a content key is calculated and then written to the key storing part (47). Encrypted data is decrypted with the content key, and the result is outputted from data output means (63). When an illegal attack is made, initialization is performed by selecting fixed value data (Kf) as key data (Ksl) and selecting fixed value data (Df) as input data (Ein).

Claims

1. An arithmetic unit comprising:

a data input interface configured to input data to be subjected to arithmetic processing for at least one of encryption, decryption, or key generation;

a command input interface configured to input a command for specifying processing on said data;

an arithmetic processor configured to subject the data inputted by said data input interface to arithmetic processing;

a data output interface configured to output the data processed by the arithmetic processor;

an output selector configured to select data to be outputted from the data output interface; and

a controller configured to control said output selector such that only data allowed to be outputted is outputted from said data output interface on the basis of the command inputted by said command input interface.

2. The arithmetic unit as claimed in claim 1,

wherein said controller includes a determining part configured to determine an input order of commands inputted by said command input interface, and controls said output selector on the basis of a result of the determination.

3. The arithmetic unit as claimed in claim 2, further comprising;

an input data selector configured to select the data inputted by said data input interface and second fixed value data and outputting the selected data,

wherein when said controller determines that commands are inputted in a different order from a predetermined order, said controller controls said input data selector such that said input data selector selects said second fixed value data and inputs said second fixed value data to said arithmetic processor.

4. The arithmetic unit as claimed in claim 2, further comprising command storage configured to store a command inputted by said command interface,

wherein said controller is configured to determine a command input order on the basis of the command stored in said command storage and an input command.

5. The arithmetic unit as claimed in claim 1, further comprising a storage configured to store at least one piece of data processed by said arithmetic processor.

6. The arithmetic unit as claimed in claim 5,

wherein said arithmetic processor uses the data stored in said storage and the data inputted by said data input interface for an operation.

7. The arithmetic unit as claimed in claim 1, further comprising a data generator configured to generate initial value data,

wherein said arithmetic processor is configured to use the initial value data generated by the data generator and the data inputted by said data input interface for an operation.

8. The arithmetic unit as claimed in claim 7, further comprising a storage configured to store at least one piece of data processed by said arithmetic processor.

9. The arithmetic unit as claimed in claim 8, further comprising a data selector configured to select the data stored in said storage and the initial value data generated by said data generator and inputting the selected data to said arithmetic processor,

wherein said controller is configured to control said data selector to selectively input the data stored in said storage and the initial value data generated by said data generator into said arithmetic processor on the basis of the command inputted by said command input interface;

and

said arithmetic processor is configured to subject the data selected by said data selector and the data inputted by said data input interface to an operation.

10. The arithmetic unit as claimed in claim 9,

wherein first fixed value data is further inputted to said data selector;

and

when said controller determines that commands are inputted in a different order from a predetermined order, said controls said data selector such that said data selector selects said first fixed value data and inputs said first fixed value data to said arithmetic processor.

11. The arithmetic unit as claimed in claim 1, wherein the controller is further configured to control said output selector such that encryption or description data that is encrypted or decrypted by the arithmetic processor is output by the output interface, and key data processed by the arithmetic processor is not output by the output interface.

12. An arithmetic method comprising the steps of:

performing arithmetic processing on input data on the basis of an input command to generate at least one of encrypted data, decrypted data, or an key;

determining whether the input command specifies output of an encryption or decryption result of the arithmetic processing; and

outputting the result of the arithmetic processing on said input data when the input command specifies the output of the result of the arithmetic processing.

13. The arithmetic method as claimed in claim 12, further comprising the steps of:

storing the input command; and

determining that said result of the arithmetic processing is to be outputted on the basis of the stored command and a newly input command when input order of the commands is predetermined order.

14. The arithmetic method as claimed in claim 12, wherein the outputting outputs encryption or description data that is encrypted or decrypted by said step of arithmetic processing, and does not output key data processed by said step of arithmetic processing.