Authentication using electronic signature

• US 9,882,721 B2
• Filed: 08/22/2013
• Issued: 01/30/2018
• Est. Priority Date: 08/30/2012
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Kawamoto, Yohei, Tanaka, Yu
• Primary Examiner(s): GIDDINS, NELSON S
• Application Number:
  US14/366,418
• Publication Number:
  US 20140331056A1
• Time in Patent Office: 1,622 Days
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3093 involving Lattices or polynomial equations, e.g. NTRU scheme
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

An information processing system comprising interface circuitry configured to receive message-independent information, the message-independent information having been generated by another apparatus and transferred to the interface in advance of a digital signature being generated, send message-dependent information to an external device, and receive a digital signature from the external device; and processing circuitry configured to generate the message-dependent information from a message and at least a part of the message-independent information, and associate the digital signature with the message.

Claims

1. An information processing system, comprising:

interface circuitry configured to;

receive message-dependent information from a first external device, based on reception of message-independent information by the first external device from a second external device;

send the received message-dependent information to the second external device; and

receive a digital signature from the second external device,

wherein the digital signature is generated by the second external device based on reception of a first message by the second external device from a third external device, and

wherein the first message is received by the second external device based on a request to receive the first message, that is transmitted from the second external device to the third external device,

wherein the message-independent information is used in generation of the digital signature, and

wherein the second external device is configured to delete the message-independent information based on the generation of the digital signature for a determined number of times, wherein the determined number of times is greater than one; and

processing circuitry configured to;

send a second message to the first external device based on a request to receive the second message, sent by the first external device,

wherein the message-dependent information is generated by the first external device based on the received second message; and

associate the received digital signature with the second message.

2. The information processing system of claim 1, wherein

the interface circuitry is further configured to receive the message-independent information in at least one near field communication message.

3. The information processing system of claim 1, wherein

the interface circuitry is further configured to receive the message-independent information used in the generation of the digital signature from the second external device.

4. The information processing system of claim 1, wherein

the interface circuitry is further configured to receive, from the second external device, first information extracted from the message-independent information, wherein the first information corresponds to the message-dependent information sent to the first external device.

5. The information processing system of claim 1, further comprising the first external device configured to:

generate a hash value used for the generation of the digital signature; and

send the hash value to at least one of the interface circuitry or the second external device.

6. The information processing system of claim 5, wherein the first external device is further configured to generate the hash value based on an ID number, wherein the ID number is stored or transmitted to the second external device.

7. The information processing system of claim 1,

wherein the second external device includes a secure area configured to hold first information associated with a secret key.

8. The information processing system of claim 1, wherein

the interface circuitry is further configured to receive, from the second external device, a hash value relevant to the generation of the digital signature to reduce a communication volume between the second external device and the interface circuitry.

9. The information processing system of claim 1, wherein

the digital signature is compliant with an MQ protocol.

10. The information processing system of claim 1, wherein the message-independent information is updated based on the generation of the digital signature for the determined number of times.

11. The information processing system of claim 1, wherein

the processing circuitry is further configured to send the second message with the digital signature to a verifier device.

12. The information processing system of claim 1, wherein the second external device is one of an IC card, a mobile phone, or a PDA.

13. An information processing method, comprising:

receiving message-dependent information from a first external device, based on reception of message-independent information by the first external device from a second external device;

sending a first message to the first external device based on a request to receive the first message is sent by the first external device,

wherein the message-dependent information is generated by the first external device based on the received first message;

sending the received message-dependent information to the second external device;

receiving a digital signature from the second external device,

wherein the digital signature is generated by the second external device based on reception of a second message by the second external device from a third external device,

wherein the second message is received by the second external device based on a request to receive the first message, that is transmitted from the second external device to the third external device,

wherein the message-independent information is used in generation of the digital signature, and

wherein the second external device is configured to delete the message-independent information, based on the generation of the digital signature for a determined number of times, wherein the determined number of times is greater than one; and

associating the received digital signature with the first message.

14. A non-transitory computer-readable medium, having stored thereon, computer-executable instructions that when executed by a processing circuitry, cause the processing circuitry to execute operations, the operations comprising:

receiving message-dependent information from a first external device, based on reception of message-independent information by the first external device from a second external device;

sending a first message to the first external device based on a request to receive the first message is sent by the first external device,

wherein the message-dependent information is generated by the first external device based on the received first message;

sending the received message-dependent information to the second external device;

receiving a digital signature from the second external device,

wherein the digital signature is generated by the second external device based on reception of a second message by the second external device from a third external device;

wherein the second message is received by the second external device based on a request to receive the second message, that is transmitted from the second external device to the third external device;

wherein the message-independent information is used in generation of the digital signature, and

wherein the second external device is configured to delete the message-independent information based on the generation of the digital signature for a determined number of times, wherein the determined number of times is greater than one; and

associating the received digital signature with the first message.

15. An information processing apparatus, comprising:

interface circuitry configured to;

receive message-independent information, wherein the message-independent information is generated by a first external device and is transferred to the interface circuitry in advance of a digital signature being generated, and

receive signature generation information generated by a second external device based on reception of a message by the second external device from a third external device,

wherein the message is generated by the third external device,

wherein the message is sent to the second external device based on a request to receive the message, that is transmitted from the second external device and received by the third external device, and

wherein the signature generation information is generated by the second external device based on the received message; and

processing circuitry configured to;

generate the digital signature from the message-independent information and the received signature generation information; and

delete the message-independent information based on the generation of the digital signature for a determined number of times, wherein the determined number of times is greater than one.

16. The information processing apparatus of claim 15, wherein the interface circuitry is further configured to exchange information via near-field communication.

17. The information processing apparatus of claim 15, wherein the interface circuitry is further configured to send information extracted from the message-independent information to the second external device, wherein the information corresponds to the signature generation information received from the second external device.

18. The information processing apparatus of claim 15, further comprising

a non-transitory storage medium having a secure area configured to hold information associated with a secret key.

19. The information processing apparatus of claim 15, wherein

the interface circuitry is further configured to send, to the second external device, hash values relevant to the generation of the signature to reduce a communication volume between the second external device and the interface circuitry.

20. The information processing apparatus of claim 15, wherein

the processing circuitry is further configured to generate the digital signature to comply with a MQ protocol.

21. The information processing apparatus of claim 15, wherein

the message-independent information is updated based on the generation of the digital signature for the determined number of times.

22. The information processing apparatus of claim 15, wherein the information processing apparatus is one of an IC card, a mobile phone or a PDA.

23. An information processing method, comprising:

receiving message-independent information from a first external device, wherein the message-independent information is generated and transferred in advance of a digital signature being generated;

receiving signature generation information generated by a second external device based on reception of a message by the second external device from a third external device,

wherein the message is generated by the third external device,

wherein the message is sent to the second external device based on a request to receive the message, that is transmitted from the second external device and received by the third external device, and

wherein the signature generation information is generated by the second external device based on the received message;

generating, with processing circuitry, the digital signature from the message-independent information and the received signature generation information; and

deleting the message-independent information based on the generation of the digital signature for a determined number of times, wherein the determined number of times is greater than one.

24. A non-transitory computer-readable medium having stored thereon computer-executable instructions, that when executed by a processing circuitry, cause the processing circuitry to execute operations, the operations comprising:

receiving message-independent information from a first external device, wherein the message-independent information is generated and transferred in advance of a digital signature being generated;

receiving signature generation information generated by a second external device based on reception of a message by the second external device from a third external device,

wherein the message is generated by the third external device,

wherein the message is sent to the second external device based on a request to receive the message, that is transmitted from the second external device and received by the third external device, and

wherein the signature generation information is generated by the second external device based on the received message;

generating, with processing circuitry, the digital signature from the message-independent information and the received signature generation information; and

deleting the message-independent information based on the generation of the digital signature for a determined number of times, wherein the determined number of times is greater than one.