Authentication processing device and security processing method

A removable authentication apparatus connected to an external apparatus, comprising

• inputting means for inputting the information for authentication;
• authentication means for authenticating said information for authentication, entered by said inputting means;
• a CPU (central processing unit) formed in an integrated circuit for comprehensively controlling an inner bus and said authentication means;
• PKI processing means for generating a secret key and a public key based on a PKI (Public Key Infrastructure) system for performing predetermined security processing with the secret key generated;
• storage means having a write-only area in which the secret key generated by said PKI processing means is written and which cannot be read out from outside, writing in said write only area being possible only by a write operation by said CPU;
• and
• secret key transmitting means for directly accessing said write only area of said storage means, responsive to authentication of said information for authentication, by said authentication means, and for transmitting said secret key written in said write only area only between said PKI processing means and said storage means.

A security processing method for a removable authentication apparatus, connected to an external apparatus, said method comprising

• a step of inputting the information for authentication;
• an authentication step of authenticating said information for authentication, entered by said inputting step;
• a key generating step of generating a secret key and a public key by PKI processing means performing predetermined security processing based on the PKI (Public Key Infrastructure) system;
• a write step of writing a secret key generated by said key generating step in storage means having a write only area from which readout from outside is not possible;
• and
• a secret key transmitting step of directly accessing said write only area of said storage means responsive to authentication of said information for authentication by said authentication step to transmit the written secret key to said PKI processing means.

A removable authentication apparatus connected to an external apparatus, comprising

• inputting means for inputting the information for authentication;
• authentication means for authenticating said information for authentication, entered by said inputting means;
• a CPU (central processing unit) formed in an integrated circuit for comprehensively controlling an inner bus and said authentication means;
• PKI processing means for generating a secret key and a public key based on a PKI (Public Key Infrastructure) system for performing predetermined security processing with the secret key generated;
• and
• storage means connected over a dedicated bus to said PKI processing means and having a write only area in which said secret key is written and which cannot be read out from outside, writing in said write only area being possible only by a write operation by said CPU (central processing unit);
• said PKI processing means reading out said secret key written in said write only area of said storage means, solely over another dedicated bus, solely interconnecting said PKI processing means and said storage means, responsive to authentication by said authentication means of said information for authentication.

A security processing method for a removable authentication apparatus connected to an external apparatus, said method comprising

• a step of inputting the information for authentication;
• an authentication step of authenticating said information for authentication, entered by said inputting step;
• a key generating step of generating a secret key and a public key by PKI processing means performing predetermined security processing based on the PKI (Public Key Infrastructure) system;
• and
• a writing step of writing a secret key, generated by said key generating step, in storage means connected over a dedicated bus to said PKI processing means, said storage means having a write only area from which readout from outside is not possible;
• said PKI processing means reading out said secret key, written in said write only area of said storage means, over said dedicated bus, responsive to authentication by said authentication means of said information for authentication.

A removable authentication apparatus connected to an external apparatus, comprising

• inputting means for inputting the information for authentication;
• authentication means for authenticating said information for authentication, entered by said inputting means;
• a CPU (central processing unit) formed in an integrated circuit for comprehensively controlling an inner bus and said authentication means;
• PKI-DES processing means including a PKI part for generating a secret key and a public key based on a PKI (Public Key Infrastructure) system for performing predetermined security processing with the secret key generated, and a DES key generating part for generating a first DES key based on the DES (Data Encryption Standard) system;
• and
• storage means connected to said PKI processing part over a dedicated bus;
• said first DES key, generated by said DES key generating part, being written in said storage means;
• said PKI processing means after generating said secret key reading out said first DES key, written in said storage means, over said dedicated bus, and encrypting said secret key, using the read out first DES key, to generate an encrypted secret key;
• said PKI processing means reading out said first DES key written in said storage means, solely over another dedicated bus, solely interconnecting said PKI processing means and said storage means, responsive to authentication by said authentication means of said information for authentication.

A security processing method for a removable authentication apparatus connected to an external apparatus, said method comprising

• a step of inputting the information for authentication;
• an authentication step of authenticating said information for authentication, entered by said inputting step;
• a controlling step of controlling an inner bus and said authentication means by a CPU (central processing unit) formed in an integrated circuit;
• a key-DES key generating step of generating a secret key and a public key by a PKI part performing predetermined security processing based on the PKI (Public Key Infrastructure) system and of generating a first DES key based on the DES (Data Encryption System);
• and
• a write step of writing the first DES key, generated by said key-DES key generating step, in storage means connected over a dedicated bus to said PKI processing means;
• said PKI processing unit after generating said secret key reading out said first DES key, written in said storage means, over said dedicated bus, and encrypting said secret key, using the read out first DES key, to generate an encrypted secret key;
• said PKI processing unit reading out said first DES key, written in said storage means, solely over said dedicated bus, solely interconnecting the PKI-DES processing means and said storage means, responsive to authentication by said authentication step of the information for authentication, and decrypting said encrypted secret key into said secret key, using the read-out first DES key.

A removable authentication apparatus connected to an external apparatus, comprising

• inputting means for inputting the information for authentication;
• authentication means for authenticating said information for authentication, entered by said inputting step;
• a CPU (central processing unit) formed in an integrated circuit for comprehensively controlling an inner bus and said authentication means;
• PKI (Public Key Infrastructure)-DES processing means having a PKI part for generating a secret key and a public key by a PKI system for performing predetermined security processing using the generated secret key, and a DES(Data Encryption System) key generating part for generating a first DES key based on the DES system;
• storage means having a write only area from which readout from outside is not possible, said first DES key generated by said DES key generating means being written in said write only area;
• and
• DES key transmitting means for directly accessing said write only area of said storage means without the CPU taking part in transmission, over an inner bus, to transmit the DES key solely between said PKI-DES processing means and said storage means;
• said DES key transmitting means on generation of said secret key reading out said first DES key written in said write only area of said storage means to transmit the so read out first DES key to said PKI-DES processing means;
• said PKI-DES processing means encrypting said secret key using said first DES key transmitted by said DES key transmitting means;
• said DES key transmitting means reading out said first DES key written in said storage means responsive to authentication of said information for authentication by authentication means;
• said PKI-DES processing means decrypting said encrypted secret key to said secret key using said first DES key transmitted by said DES key transmitting means.

A security processing method for a removable authentication apparatus connected to an external apparatus, said method comprising

• a step of inputting the information for authentication;
• an authentication step of authenticating said information for authentication, entered by said inputting step;
• a controlling step of controlling a an inner bus and said authentication means by a CPU (central processing unit) formed in an integrated circuit;
• a PKI-DES processing step of generating a secret key and a public key by a PKI processing part performing predetermined security processing based on the PKI (Public Key Infrastructure) system and of generating a first DES key based on the DES (Data Encryption Standard) system;
• a write step of writing said first DES key, generated by said PKI-DES key processing step, in storage means having a write only area from which readout from outside is not possible;
• and
• a DES key transmitting step of directly accessing said write only area of said storage means, without said CPU taking part in transmission, over an inner bus, to transmit the DES key solely between said PKI-DES processing means taking charge of said PKI-DES processing and said storage means;
• said DES key transmitting step on generation of said secret key reading out said first DES key written in said write only area of said storage means to transmit the so read out first DES key to said PKI-DES processing means;
• said PKI-DES processing step encrypting said secret key to generate an encrypted secret key using said first DES key transmitted by said DES key transmitting means;
• said DES key transmitting step reading out said first DES key written in said storage means, responsive to authentication by said authentication step of said information for authentication;
• said PKI processing means decrypting said encrypted secret key to said secret key using said first DES key transmitted by said DES key transmitting step.