Encryption key distribution system

• US 8,817,985 B2
• Filed: 06/23/2010
• Issued: 08/26/2014
• Est. Priority Date: 06/23/2009
• Status: Expired due to Fees

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Inventors: Fukuda, Naohiro
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): KAPLAN, BENJAMIN A
• Application Number:
  US13/380,742
• Publication Number:
  US 20120106735A1
• Time in Patent Office: 1,525 Days
• Field of Search: 380/255
• US Class Current: 380/255
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

The encryption key distribution system includes a node A, a node B, and an authentication server S. Upon receiving a first nonce created by the node A and a second nonce created by the node B, the authentication server S creates a session key. The authentication server S sends a first message authentication code value and a first encryption message to the node A. The first encryption message is created by encrypting the first nonce, the session key, and first additional information with a first secret key. The authentication server S sends a second message authentication code value and a second encryption message to the node B. The second encryption message is created by encrypting the second nonce, the session key, and second additional information with a second secret key. The node A decrypts the first encryption message with the first secret key, thereby obtaining the session key and the first additional information. Further, the node A authenticates the session key by use of the first message authentication code value. The node B decrypts the second encryption message with the second secret key, thereby obtaining the session key and the second additional information. Further, the node B authenticates the session key by use of the second message authentication code value.

Claims

1. An encryption key distribution system comprising:

a first node;

a second node; and

an authentication server configured to create a session key used for encryption communication between said first node and said second node,

wherein said first node and said authentication server are configured to retain a first secret key used for encryption communication between said first node and said authentication server,

said second node and said authentication server being configured to retain a second secret key used for encryption communication between said second node and said authentication server,

said first node being configured to create a first nonce and sends the created first nonce,

said second node being configured to create a second nonce and sends the created second nonce,

said authentication server being configured to

newly create the session key in response to receiving the first nonce and the second nonce, and

calculate a first message authentication code value by use of the first secret key from a first message including the received first nonce, the newly created session key, and predetermined first additional information, and

create a first encryption message by encrypting the received first nonce, the newly created session key, and the first additional information with the first secret key, and

send the first encryption message and the first message authentication code value, and

calculate a second message authentication code value by use of the second secret key from a second message including the received second nonce, the newly created session key, and predetermined second additional information, and

create a second encryption message by encrypting the received second nonce, the newly created session key, and the second additional information with the second secret key, and

send the second encryption message and the second message authentication code value,

said first node being configured to

in response to receiving the first encryption message and the first message authentication code value, obtain the session key and the first additional information by decrypting the first encryption message with the first secret key, and

calculate the first message authentication code value by use of the first nonce stored in said first node, the session key and the first additional information obtained by decrypting the first encryption message, and the first secret key, and

authenticate the session key received from the authentication server by judging whether or not the first message authentication code value calculated by said first node is equal to the first message authentication code value received from said authentication server, and

said second node being configured to

in response to receiving the second encryption message and the second message authentication code value, obtain the session key and the second additional information by decrypting the second encryption message with the second secret key, and

calculate the second message authentication code value by use of the second nonce stored in said second node, the session key and the second additional information obtained by decrypting the second encryption message, and the second secret key, and

authenticate the session key received from said authentication server by judging whether or not the second message authentication code value calculated by said second node is equal to the second message authentication code value received from said authentication server.

2. An encryption key distribution system as set forth in claim 1, wherein

said first additional information and said second additional information are defined as authorization information regarding access control.

3. An encryption key distribution system as set forth in claim 2, wherein

said authentication server is configured to, upon receiving request information regarding the access control from said first node or said second node, compare the received request information regarding the access control with registration information regarding the access control preliminarily registered,

said authentication server being configured to, upon acknowledging that the registration information regarding the access control does not include the same information as the received request information regarding the access control, use the registration information regarding the access control as the authorization information of the access control.

4. An encryption key distribution system as set forth in claim 2, wherein

said encryption key distribution system further comprises a proxy node configured to relay communication between said first node and said second node,

said authentication server being configured to send the authorization information regarding the access control to said proxy node, and

said proxy node being configured to relay the communication between said first node and said second node on the basis of to the authorization information regarding the access control received from said authentication server.

5. An encryption key distribution system as set forth in claim 4, wherein

said first node and said second node have a group identifier,

said first additional information and said second additional information including the group identifier, and

said proxy node being configured to execute the access control by use of the group identifier.

6. An encryption key distribution system as set forth in claim 2, wherein

said authentication server is configured to create the authorization information regarding the access control on the basis of changeable registration information regarding the access control.

7. An encryption key distribution system as set forth in claim 2, wherein

said authentication server is configured to, upon receiving the request information regarding the access control from said first node or said second node, perform a logical operation of the received request information regarding the access control and registration information regarding the access control preliminarily registered, thereby creating the authorization information regarding the access control.