US 2006/0053302 A1 · Information processing apparatus with security module

Abstract

An information processing apparatus includes a TPM, a key management module for managing a key database, a memory, and a file processing module for encrypting and decrypting a file. The TPM stores a first TPM key therein and encrypts a third TPM key. The key management module stores and manages the third TPM key in the database. When the information processing apparatus starts communicating with the tamper-proof device, the key management module receives, from the TPM, a parameter for generating a second TPM key, provides the received parameter to the tamper-proof device, receives from the tamper-proof device the second TPM key which has been encrypted using the first TPM key, and provides the TPM with the second TPM key and with the third TPM key which has been encrypted using the second TPM key. When the second TPM key contains password check information, the TPM receives from the tamper-proof device a password associated with the password check information, and verifies the received password using the password check information. When it is verified that the password is correct, the TPM decrypts the second TPM key using the first TPM key, decrypts the third TPM key using the decrypted second TPM key, and decrypts, using the decrypted third TPM key, an encrypted encryption key for decrypting the file. The file processing module decrypts the file using the decrypted encryption key.

Claims12

Dependent claims

An information processing apparatus being adapted to communicate with a tamper-proof device, and comprising a TPM, a key management module for managing a key database, a memory, and a file processing module for encrypting and decrypting a file, wherein

said TPM stores a first TPM key therein and encrypts a third TPM key;
said key management module stores and manages the third TPM key in said database;
when said information processing apparatus starts communicating with said tamper-proof device, said key management module receives, from said TPM, a parameter for generating a second TPM key, provides the received parameter to said tamper-proof device, receives from said tamper-proof device the second TPM key which has been encrypted using the first TPM key, and provides said TPM with the second TPM key and with the third TPM key which has been encrypted using the second TPM key;
when the second TPM key contains password check information, said TPM receives from said tamper-proof device a password associated with the password check information, and verifies the received password using the password check information;
when it is verified that the password is correct, said TPM decrypts the second TPM key using the first TPM key, decrypts the third TPM key using the decrypted second TPM key, and decrypts, using the decrypted third TPM key, an encrypted encryption key for decrypting the file;
and
said file processing module decrypts the file using the decrypted encryption key.

4 more elements

An information processing device comprising a connector for communicating with a separate information processing apparatus, a module for generating a TPM key, and a memory, wherein

said memory stores therein an encryption key, a decryption key, at least one password, and a public key of an external TPM key;
and
said generating module generates, in accordance with the password, information to be used for verifying the password, and encrypts the decryption key using the public key of the external TPM key, to thereby generate a TPM key which contains the encrypted decryption key and the information to be used for verifying the password, and said generating module is adapted to provide the generated TPM key to said separate information processing apparatus.

Dependencies are inferred from the claim text.

Information processing apparatus with security module

Life of this patent

Information processing apparatus with security module

Life of this patent

Abstract

Claims12