Data processing apparatus and method

• US 7,840,817 B2
• Filed: 05/17/2007
• Issued: 11/23/2010
• Est. Priority Date: 06/07/2006
• Status: Active Grant

• Current Assignee: Spectrio
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Tagashira, Nobuhiro
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Hailu, Teshome
• Application Number:
  US11/750,012
• Publication Number:
  US 20080046744A1
• Time in Patent Office: 1,286 Days
• Field of Search: 713/186
• US Class Current: 713/186
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04N 1/4486 using digital data encryption

Abstract

To realize device authentication which is highly resistant to attacks with simple procedures. Hence, an authentication unit of an image input apparatus transmits first data to an authentication unit of an information holding device, and receives, from the authentication unit, encrypted key information and second data which is generated from the first data. The authentication unit authenticates a partner device based on the first data and second data. In the case that authentication is successful, the authentication unit of the image input apparatus decrypts the encrypted key information to acquire key information. Then the image input apparatus encrypts data using the key information, and transmits the encrypted data to the partner device.

Claims

1. A data transmission apparatus comprising:

an input section, arranged to input image data to be stored in a data reception apparatus;

a transmitter, arranged to transmit data to the data reception apparatus;

a receiver, arranged to receive, response data with encrypted key information generated from key information held in the data reception apparatus as a response of the data reception apparatus to challenge data transmitted by the transmitter when the input section inputs the image data;

an authentication section, arranged to authenticate the data reception apparatus based on the challenge data and the response data;

a decryption section, arranged to decrypt, in the case that the authentication is successful, the encrypted key information to acquire the key information; and

an encryption section, arranged to encrypt the input image data using the key information decrypted by the decryption section to transmit the encrypted image data by the transmitter;

wherein the data reception apparatus receives the encrypted image data from the data transmission apparatus, and stores the received encrypted image data in a memory.

2. An apparatus according to claim 1, further comprising a holding section arranged to hold the decrypted key information for a predetermined period.

3. An apparatus according to claim 1, wherein the challenge data is a random number, and the response data is obtained by encrypting the random number.

4. A data reception apparatus comprising:

a receiver, arranged to receive data from a data transmission apparatus;

a generator, arranged to generate response data from challenge data received by the receiver;

an encryption section, arranged to encrypt key information stored in a memory;

a transmitter, arranged to transmit the response data with the encrypted key information to the data transmission apparatus as a response to the challenge data; and

a controller, arranged to store image data received by the receiver in another memory,

wherein the data transmission apparatus authenticates the data reception apparatus based on the challenge data and the response data,

wherein, in the case that the authentication is successful, the data transmission apparatus decrypts the encrypted key information to acquire the key information, encrypts image data to be stored in the data reception apparatus using the key information, and transmits the encrypted image data to the data reception apparatus.

5. A method of a data transmission apparatus comprising the steps of:

transmitting challenge data to a data reception apparatus when image data is inputted;

receiving response data with encrypted key information generated from key information held in the data reception apparatus as a response of the data reception apparatus to the challenge data;

authenticating the data reception apparatus based on the challenge data and the response data;

decrypting, in the case that the authentication is successful, the encrypted key information to acquire the key information;

encrypting the image data using the key information decrypted in the decrypting step; and

transmitting the encrypted image data to the data reception apparatus

wherein the data reception apparatus receives the encrypted image data from the data transmission apparatus, and stores the received encrypted image data in a memory.

6. A method of a data reception apparatus comprising the steps of:

receiving challenge data from a data transmission apparatus;

generating response data from the challenge data;

encrypting key information stored in a memory;

transmitting the response data with the encrypted key information to the data transmission apparatus; and

storing image data received from the data transmission apparatus in another memory,

wherein the data transmission apparatus authenticates the data reception apparatus based on the challenge data and the response data,

wherein, in the case that the authentication is successful, the data transmission apparatus decrypts the encrypted key information to acquire the key information, encrypts image data to be stored in the data reception apparatus using the key information, and transmits the encrypted image data to the data reception apparatus.

7. A computer-executable program storing a non-transitory computer-readable medium, and causing a computer to perform a method of the data transmission apparatus, the method comprising the steps of:

transmitting challenge data to a data reception apparatus when image data is inputted;

receiving response data with encrypted key information generated from key information held in the data reception apparatus as a response of the data reception apparatus to the challenge data;

authenticating the data reception apparatus based on the challenge data and the response data;

decrypting, in the case that the authentication is successful, the encrypted key information to acquire the key information;

encrypting the image data using the key information decrypted in the decrypting step; and

transmitting the encrypted image data to the data reception apparatus,

wherein the data reception apparatus receives the encrypted image data from the data transmission apparatus, and stores the received encrypted image data in a memory.

8. A computer-executable program storing a non-transitory computer-readable medium, and causing a computer to perform a method of the data reception apparatus, the method comprising the steps of:

receiving challenge data from a data transmission apparatus;

generating response data from the challenge data;

encrypting key information stored in a memory;

transmitting the response data with the encrypted key information to the data transmission apparatus; and

storing image data received from the data transmission apparatus in another memory,

wherein the data transmission apparatus authenticates the data reception apparatus based on the challenge data and the response data,

wherein, in the case that the authentication is successful, the data transmission apparatus decrypts the encrypted key information to acquire the key information, encrypts image data to be stored in the data reception apparatus using the key information, and transmits the encrypted image data to the data reception apparatus.

9. A non-transitory computer-readable medium storing a computer-executable program causing a computer to perform a method of a data transmission apparatus, the method comprising the steps of:

transmitting challenge data to a data reception apparatus when image data is inputted;

receiving response data with encrypted key information generated from key information held in the data reception apparatus as a response of the data reception apparatus to the challenge data;

authenticating the data reception apparatus based on the challenge data and the response data;

decrypting, in the case that the authentication is successful, the encrypted key information to acquire the key information;

encrypting the image data using the key information decrypted in the decrypting step; and

transmitting the encrypted image data to the data reception apparatus,

wherein the data reception apparatus receives the encrypted image data from the data transmission apparatus, and stores the received encrypted image data in a memory.

10. A non-transitory computer-readable medium storing a computer-executable program causing a computer to perform a method of a data reception apparatus, the method comprising the steps of:

receiving challenge data from a data transmission apparatus;

generating response data from the challenge data;

encrypting key information stored in a memory;

transmitting the response data with the encrypted key information to the data transmission apparatus; and

storing image data received from the data transmission apparatus in another memory,

wherein the data transmission apparatus authenticates the data reception apparatus based on the challenge data and the response data,

wherein, in the case that the authentication is successful, the data transmission apparatus decrypts the encrypted key information to acquire the key information, encrypts image data to be stored in the data reception apparatus using the key information, and transmits the encrypted image data to the data reception apparatus.