Device authentication system and device authentication method
AssigneeMatsushita Electric Industrial Co., Ltd.
InventorsMasaya Yamamoto, Kouji Miura, Tohru Nakahara
Life of this patent
Estimating the term…
Abstract
Transmitting data 103 sent from the first device 101 includes random information 103a, which is encrypted by common information, and checksum 103b, and is sent to the second device 102. The second device 102 receives the transmitting data 103, and sends back answering data 104 that includes answer message 104a, which is encrypted using the random information 103a, and checksum 104b, to the first device 101.
Claims33
A device authentication system comprising at least a first device and a second device for determining whether or not the first device and the second device belong to a same group,
- wherein the first device includes:
- a first common information memory unit operable to memorize common information;
- a transmitting data generating unit operable to generate transmitting data that includes key information;
- a first encryption unit operable to encrypt the generated transmitting data using the common information;
- a first transmission unit operable to send the encrypted transmitting data generated by the first encryption unit to the second device;
- a first decryption unit operable to decrypt, using the key information, encrypted answering data sent from the second device;
- and
- an authentication unit operable to judge whether or not the decrypted answering data has a predetermined rule, and when the decrypted answering data has a predetermined rule, to determine that the first device and the second device belong to a same group, and
- the second device includes:
- a second common information memory unit operable to memorize the common information;
- a second decryption unit operable to decrypt, using the common information, the encrypted transmitting data sent from the first device;
- a judging unit operable to judge whether or not the decrypted transmitting data has a predetermined rule;
- an answering data generating unit operable to determine that, when the transmitting data has a predetermined rule, the first device and the second device belong to a same group, and to generate answering data indicating that the first device and the second device belong to a same group;
- a second encryption unit operable to encrypt the generated answering data using key information included in the transmitting data decrypted by the second decryption unit;
- and
- a second transmission unit operable to send the encrypted answering data generated by the second encryption unit to the first device.
A device authentication method for a system comprising at least a first device and a second device for determining whether or not the first device and the second device belong to a same group,
- wherein each of the first device and the second device includes, respectively, a first common information memory unit and a second common information memory unit that memorize common information,
- the device authentication method includes a first step performed by the first device and a second step performed by the second device, and
- the first step includes:
- a transmitting data generating step for generating transmitting data that includes key information;
- a first encryption step for encrypting generated transmitting data using the common information;
- a first transmission step for sending encrypted transmitting data generated in the first encryption step to the second device;
- a first decryption step for decrypting, using the key information, encrypted answering data sent from the second device;
- and
- an authentication step for judging whether or not the decrypted answering data has a predetermined rule, and when the decrypted answering data has a predetermined rule, for determining that the first device and the second device belong to a same group, and
- the second step includes:
- a second decryption step for decrypting, using the common information, encrypted transmitting data sent from the first device;
- a judging step for judging whether or not the decrypted transmitting data has a predetermined rule;
- an answering data generating step for determining that, when the transmitting data has a predetermined rule, the first device and the second device belong to a same group, and for generating answering data indicating that the first device and the second device belong to a same group;
- a second encryption step for encrypting the generated answering data using key information that is included in transmitting data decrypted in the decryption step;
- and
- a second transmission step for sending encrypted answering data generated in the second encryption step to the first device.
A communication device for determining whether or not a partner device and the device itself belong to a same group by mutually authenticating with the partner device and comprising:
- an authentication unit operable to authenticate a partner device;
- and
- an authentication target unit operable to be authenticated by the partner device, and
- wherein the authentication unit includes:
- a common information memory unit operable to memorize common information;
- a transmitting data generating unit operable to generate transmitting data that includes key information;
- a first encryption unit operable to encrypt the generated transmitting data using the common information;
- a first transmission unit operable to send the encrypted transmitting data generated by the first encryption unit to the partner device;
- a first decryption unit operable to decrypt, using the key information, encrypted answering data sent from the partner device;
- and
- an authentication unit operable to judge whether or not the decrypted answering data has a predetermined rule, and when the decrypted answering data has a predetermined rule, to determine that the partner device belong to a same group as the device itself, and
- the authentication target unit includes:
- a second decryption unit operable to decrypt, using the common information, the encrypted transmitting data sent from the partner device;
- a judging unit operable to judge whether or not the decrypted transmitting data has a predetermined rule;
- an answering data generating unit operable to determine that, when the transmitting data has a predetermined rule, the partner device belongs to a same group as the device itself, and to generate answering data that indicates that the partner device belongs to a same group as the device itself;
- a second encryption unit operable to encrypt the generated answering data using key information that is included in transmitting data decrypted by the decryption unit;
- and
- a second transmission unit operable to send the encrypted answering data generated by the second encryption unit to the partner device.
A program for a communication device that determines whether or not a partner device and the device itself belong to a same group by mutually authenticating with a partner device, the program comprising:
- an authentication step for authenticating a partner device;
- and
- an authentication target step for being authenticated by the partner device,
- wherein the authentication step includes:
- a transmitting data generating step for generating transmitting data that includes key information;
- a first encryption step for encrypting the generated transmitting data using common information that is memorized beforehand;
- a first transmission step for sending the encrypted transmitting data generated in the first encryption step to the partner device;
- a first decryption step for decrypting, using the key information, encrypted answering data sent from the partner device;
- and
- an authentication step for judging whether or not the decrypted answering data has a predetermined rule, and when the decrypted answering data has a predetermined rule, for determining that the partner device belongs to a same group as the device itself, and
- the authentication target step includes:
- a second decryption step for decrypting, using the common information, the encrypted transmitting data sent from the partner device;
- a judging step for judging whether or not the decrypted transmitting data has a predetermined rule;
- an answering data generating step for determining that, when the transmitting data has a predetermined rule, the partner device and the device itself belong to a same group, and for generating answering data indicating that the partner device and the device itself belong to a same group;
- a second encryption step for encrypting the generated answering data using key information that is included in transmitting data decrypted in the decryption step;
- and
- a second transmission step for sending encrypted answering data generated in the second encryption step to the partner device.
A computer-readable recording medium for a device authentication system comprising at least a first device and a second device for determining whether or not the first device and the second device belong to a same group,
- wherein the authentication data is recorded in the computer-readable recording medium, and includes:
- encrypted transmitting data that includes key information and is encrypted using common information;
- and
- a checksum of the transmitting data,
- the authentication data is data sent from the first device to the second device,
- the key information is used for encrypting answering data sent from the second device to the first device, when the second device determines that the first device belongs to a same group as the second device, and
- the common information is information held beforehand by a device that belongs to the same group.
Dependencies are inferred from the claim text.