Method and apparatus for encrypted authentication

• US 8,200,973 B2
• Filed: 11/13/2008
• Issued: 06/12/2012
• Est. Priority Date: 01/07/2008
• Status: Active Grant

• Current Assignee: Alpine Electronics Incorporated (Alps Alpine Co., Ltd.)
• Original Assignee: Alpine Electronics Incorporated (Alps Alpine Co., Ltd.)
• Inventors: Kubota, Akihiro, Hatakeyama, Hideyuki
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US12/270,478
• Publication Number:
  US 20090177885A1
• Time in Patent Office: 1,307 Days
• Field of Search: 713/171, 713/168, 713/155, 713/161, 380/277, 726/2
• US Class Current: 713/171
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04N 21/4135 external recorder interface circuits between an apparatus for recording television signals and a television receiver H04N5/775
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A sink device including a first data processing unit and a second data processing unit authenticates the processing units, when turned on, to generate first authentication keys having the same data. When a data request is issued from the sink device to the source device, device authentication is made between the source device and the first data processing unit to generate second authentication keys having the same data. The source device encrypts an exchange key using the second authentication key, and sends the encrypted exchange key to the first data processing unit. The first data processing unit decrypts the encrypted exchange key using the second authentication key, encrypts the decrypted exchange key using the first authentication key, and sends the encrypted exchange key to the second data processing unit. The second data processing unit decrypts the encrypted exchange key using the first authentication key to obtain an exchange key.

Claims

1. A method for encrypted authentication between a sending device and receiving device, the sending device transmitting at least a first type of data and a second type of data that is different from the first type of data, and the receiving device receiving at least the first type of data and the second type of data, wherein a result of encrypted authentication performed on the first type of data is applied to the second of data;

wherein the result of the encrypted authentication is a result of receiving an encrypted exchange key generated by the sending device and decrypting the encrypted exchange key using an authentication key between the sending and receiving devices to obtain an exchange key; and

wherein the method comprises;

receiving the first type of data that is encrypted using an exchange key generated by the sending device and decrypting the first type of data using the decrypted exchange key; and

receiving the second type of data and decrypting the second type of data using the decrypted exchange key.

2. A method for encrypted authentication between a sending device and receiving device, the sending device transmitting at least a first type of data and a second type of data that is different from the first type of data, and the receiving device receiving at least the first type of data and the second type of data, wherein a result of encrypted authentication performed on the first type of data is applied to the second type of data;

wherein the result of the encrypted authentication is the result of receiving an encrypted exchange key generated by the receiving device and decrypting the encrypted exchange key using an authentication key between the sending and receiving devices to obtain an exchange key; and

wherein the method comprises;

receiving the first type of data encrypted using an exchange key generated by the receiving device and decrypting the first type of data using the decrypted exchange key; and

receiving the second type of data and decrypting the second type of data using the decrypted exchange key.

3. A method for encrypted authentication between a first device and a second device, the first device configured to transmit or receive at least a first type of data and a second type of data that is different from the first type of data, and the second device configured to transmit or receive at least the first type of data and the second type of data, wherein a result of encrypted authentication performed on the first type of data is applied to the second type of data, the method comprising:

generating first authentication keys for device authentication with a first data processing unit and a second data processing unit of the first device; and

generating second authentication keys for device authentication with the first data processing unit of the first device and the second device;

wherein the first data processing unit;

decrypts data sent from the second device using the second authentication key, the data being encrypted using the second authentication key,

encrypts the decrypted data using the first authentication key, and

sends the encrypted data to the second data processing unit; and

wherein the second data processing unit decrypts the encrypted data received from the first data processing unit using the first authentication key.

4. The method for encrypted authentication of claim 3, wherein the data encrypted by the second device using the second authentication key is an exchange key;

the first data processing unit decrypts data of the first type of data using the exchange key, the data of the first type of data being encrypted by the second device using the exchange key; and

the second data processing unit decrypts data of the second type of data using the exchange key encrypted by the first data processing unit and decrypted by the second data processing unit, the data of the second type of data being encrypted by the second device using the exchange key.

5. A method for encrypted authentication between a first device and a second device, the first device configured to transmit or receive at least a first type of data and a second type of data that is different from the first type of data, and the second device configured to transmit or receive at least the first type of data and the second type of data, wherein a result of encrypted authentication performed on the first type of data is applied to the second type of data, the method comprising:

generating authentication keys for device authentication between the first data processing unit of the first device and the second device;

wherein the first data processing unit;

decrypts data sent from the second device using the authentication key, the data being encrypted by the authentication key, and

sends the authentication key to a second data processing unit of the first device; and

wherein the second data processing unit decrypts data sent from the second device using the authentication key received from the first data processing unit, the data being encrypted by the authentication key.

6. The method for encrypted authentication of claim 5, wherein the data encrypted by the second device using the authentication key is an exchange key;

the first data processing unit decrypts data of the first type of data using the exchange key, the data of the first type of data being encrypted by the second device using the exchange key; and

the second data processing unit decrypts data of the second type of data using the exchange key decrypted by the second data processing unit, the data of the second type of data being encrypted by the second device using the exchange key.

7. An apparatus for encrypted authentication between a first device and a second device, the first device configured to transmit or receive at least a first type of data and a second type of data that is different from the first type of data and the second device configured to transmit or receive at least the first type of data and the second type of data, the apparatus comprising:

an authentication-key generating section configured to authenticate the second device that transmits at least the first type of data and the second type of data and the first device to generate authentication keys; and

a processing section configured to apply a result of encrypted authentication in the processing of the first type of data using the authentication keys to the processing of the second type of data.

8. The apparatus for encrypted authentication of claim 7, wherein the first type of data comprises image data and the second type of data comprises audio data related to the image data.

9. The apparatus for encrypted authentication of claim 7, wherein the first device includes a first data processing unit and a second data processing unit;

and

wherein the apparatus comprises;

a first-authentication-key generating section configured to generate first authentication keys for device authentication between the first data processing unit and the second data processing unit of the first device;

a second-authentication-key generating section configured to generate second authentication keys for device authentication between the first data processing unit of the first device and the second device;

a decrypting section of the first data processing unit configured to decrypt data sent from the second device, the data being encrypted using the second authentication key;

a transmitting section of the first data processing unit configured to encrypt the data decrypted by the decrypting section of the first data processing unit using the first authentication key, and to send the encrypted data to the second data processing unit; and

a decrypting section of the second data processing unit configured to receive the encrypted data sent from the transmitting section of the first data processing unit and decrypt the encrypted data using the first authentication key.

10. The apparatus for encrypted authentication of claim 9, wherein the data encrypted by the second device using the second authentication key is an exchange key;

the decrypting section of the first data processing unit decrypts data of the first type of data using the exchange key, the data of the first type of data being encrypted by the second device using the exchange key; and

the decrypting section of the second data processing unit decrypts data of the second type of data using the exchange key encrypted by the first data processing unit and decrypted by the second data processing unit, the data of the second type of data being encrypted by the second device using the exchange key.

11. The apparatus for encrypted authentication of claim 7, wherein the first device includes a first data processing unit and a second data processing unit;

and

wherein the apparatus comprises;

an authentication-key generating section configured to generate authentication keys for device authentication between the first data processing unit of the first device and the second device;

an authentication-key transmitting section configured to send the authentication key generated by the first data processing unit to the second data processing unit;

a decrypting section of the first data processing section configured to decrypt data sent from the second device using the authentication key, the data being encrypted by the authentication key; and

a decrypting section of the second data processing section configured to decrypt data sent from the second device using the authentication key received from the first data processing unit, the data being encrypted by the authentication key.

12. The apparatus for encrypted authentication according to claim 11, wherein the data encrypted by the second device using the authentication key is an exchange key;

the decrypting section of the first data processing unit decrypts data of the first type of data using the exchange key, the data of the first type of data being encrypted by the second device using the exchange key; and

the decrypting section of the second data processing unit decrypts data of the second type of data using the exchange key decrypted by the second data processing unit, the data of the second type of data being encrypted by the second device using the exchange key.