Authentication system, authentication method, and entrance/exit management system

An authentication system comprising:

• a first electronic device;
• a second electronic device;
• and a host device,
• the first electronic device including:
• a first memory which stores first key information;
• a first encryption processing section which encrypts inherent information transmitted from the host device by use of the first key information stored in the first memory;
• a first transmitting section which transmits to the second electronic device the inherent information encrypted with the first key information by the first encryption processing section;
• and
• a transfer section which transfers to the host device the information transmitted from the second electronic device and obtained by encrypting the inherent information encrypted with the first key information further by the second electronic device, the second electronic device including:
• a second memory which stores second key information;
• a second encryption processing section which encrypts the inherent information transmitted from the first electronic device and encrypted with the first key information by use of the second key information stored in the second memory;
• and
• a second transmitting section which transmits to the first electronic device the information encrypted with the second key information by the second encryption processing section,
• the host device including:
• a storage section which stores key information for decryption in association with the first electronic device;
• a third transmitting section which transmits the inherent information to the first electronic device;
• a decryption processing section which decrypts information transferred from the first electronic device and obtained by encrypting the inherent information by the first and second electronic devices by use of the decryption key information stored in association with the first electronic device in the storage section;
• and
• an authentication processing section which authenticates the first and second electronic devices based on the information decrypted by the decryption processing section and the inherent information.

An authentication method for use in a system comprising a first electronic device, a second electronic device, and a host device, the method comprising:

• transmitting inherent information from the host device to the first electronic device;
• encrypting, by the first electronic device, the inherent information transmitted from the host device by use of first key information stored in a memory of the first electronic device;
• transmitting the inherent information encrypted with the first key information from the first electronic device to the second electronic device;
• encrypting, by the second electronic device, the inherent information transmitted from the first electronic device and encrypted with the first key information by use of second key information stored in a memory of the second electronic device;
• transmitting, from the second electronic device to the first electronic device, information obtained by encrypting the inherent information encrypted with the first key information further with the second key information;
• transmitting, from the first electronic device to the host device, information transmitted from the second electronic device and obtained by encrypting the inherent information encrypted with the first key information further by the second electronic device;
• decrypting, by the host device, information transmitted from the first electronic device and encrypted with the first and second key information by use of decryption key information stored in association with the first electronic device in a storage section of the host device;
• and
• authenticating the first electronic device and the second electronic device based on the information decrypted with the key information for decryption and the inherent information.

An entrance/exit management system comprising:

• a first electronic device;
• a second electronic device;
• and a host device,
• the first electronic device including:
• a first memory which stores first key information;
• a first encryption processing section which encrypts inherent information transmitted from the host device by use of the first key information stored in the first memory;
• a first transmitting section which transmits to the second electronic device the inherent information encrypted with the first key information by the first encryption processing section;
• and
• a transfer section which transfers to the host device the information transmitted from the second electronic device and obtained by encrypting the inherent information encrypted with the first key information further by the second electronic device, the second electronic device including:
• a second memory which stores second key information;
• a second encryption processing section which encrypts the inherent information transmitted from the first electronic device and encrypted with the first key information by use of the second key information stored in the second memory;
• and
• a second transmitting section which transmits to the first electronic device the information encrypted with the second key information by the second encryption processing section,
• the host device including:
• a storage section which stores key information for decryption in association with the first electronic device;
• a third transmitting section which transmits the inherent information to the first electronic device;
• a decryption processing section which decrypts information transferred from the first electronic device and obtained by encrypting the inherent information by the first and second electronic devices by use of the decryption key information stored in association with the first electronic device in the storage section;
• an authentication processing section which authenticates the first and second electronic devices based on the information decrypted by the decryption processing section and the inherent information;
• and
• an opening and closing control section which opens and closes a gate for entrance and exit based on an authentication result by the authentication processing section.