Authentication method and authentication system

An authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices, wherein

• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process;
• and
• a clock function,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit which generates random-number data, and
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on an authentication time for the one side at a predetermined timing in said authenticating process to select one encryption key from said plurality of encryption keys in said key bundle as a selection encryption key for the one side;
• (c) receiving said initial communication random-number data on said other side, acquiring said original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on an authentication time for the other side capable of being identified with said authentication time for the one side to select one encryption key from said plurality of encryption keys in said key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent.

An authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices, wherein

• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process;
• and
• a temperature sensor capable of measuring a temperature of a device as a detection temperature,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit for generating random-number data, and
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on a detection temperature on the one side detected by said temperature sensor at a predetermined timing during said authenticating process to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the one side;
• (c) receiving said initial communication random-number data on said other side, acquiring said original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on a detection temperature on the other side capable of being identified with said detection temperature on the one side to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent.

An authentication system which has first and second constituent elements and executes mutual authentication upon an operation object capable of executing a predetermined operation by cooperation between said first and second constituent elements by using a predetermined authentication method between said first and second constituent elements, wherein

• said predetermined authentication method includes an authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices,
• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• and
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys, each of said key bundles containing a predetermined number of key bundles each having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit for generating random-number data,
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (a) recognizing a selection key bundle which is one key bundle contained in said predetermined number of key bundles by data transmission and reception between said one side and said other side;
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on said original random-number data to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the one side;
• (c) receiving the initial communication random-number data on said other side, acquiring the original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on the original random-number data to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent,
• said first constituent element has said first authentication device,
• said second constituent element has said second authentication device, and
• said authenticating process is executed according to said authentication method between said first and second authentication devices, and after it is determined that its authentication result is acceptable, said predetermined operation of said operation object is made possible.

An authentication system which, with a second constituent element and a plurality of first constituent elements possessed by an operation object, executes mutual authentication upon the operation object capable of executing a predetermined operation by cooperation between one of said first constituent elements and said second constituent element using a predetermined authentication method between one of said first constituent element and said second constituent element, wherein

• said predetermined authentication method includes an authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices,
• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• and
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys, each of said key bundles containing a predetermined number of key bundles each having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit for generating random-number data,
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (a) recognizing a selection key bundle which is one key bundle contained in said predetermined number of key bundles by data transmission and reception between said one side and said other side;
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on said original random-number data to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the one side;
• (c) receiving the initial communication random-number data on said other side, acquiring the original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on the original random-number data to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent,
• each of said plurality of first constituent elements has said first authentication device,
• said second constituent element has said second authentication device,
• said second authentication device has all of said key bundles possessed by said plurality of first authentication devices, and
• said authenticating process is executed according to said authentication method between one of said first constituent element and said second constituent element, and after it is determined that its authentication result is acceptable, said predetermined operation of said operation object is made possible.

An authentication system which has first and second constituent elements and executes mutual authentication upon an operation object capable of executing a predetermined operation by cooperation between said first and second constituent elements by using a predetermined authentication method between said first and second constituent elements, wherein

• said predetermined authentication method includes an authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices,
• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process;
• and
• a clock function,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit for generating random-number data,
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on an authentication time for the one side at a predetermined timing in said authenticating process to select one encryption key from said plurality of encryption keys in said key bundle as a selection encryption key for the one side;
• (c) receiving said initial communication random-number data on said other side, acquiring said original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on an authentication time for the other side capable of being identified with said authentication time for the one side to select one encryption key from said plurality of encryption keys in said key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent,
• said first constituent element has said first authentication device,
• said second constituent element has said second authentication device, and
• said authenticating process is executed according to said authentication method between said first and second authentication devices, and after it is determined that its authentication result is acceptable, said predetermined operation of said operation object is made possible.

An authentication system which, with a second constituent element and a plurality of first constituent elements possessed by an operation object, executes mutual authentication upon the operation object capable of executing a predetermined operation by cooperation between one of said first constituent elements and said second constituent element using a predetermined authentication method between one of said first constituent element and said second constituent element, wherein

• said predetermined authentication method includes an authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices,
• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process;
• and
• a clock function,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit for generating random-number data,
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on an authentication time for the one side at a predetermined timing in said authenticating process to select one encryption key from said plurality of encryption keys in said key bundle as a selection encryption key for the one side;
• (c) receiving said initial communication random-number data on said other side, acquiring said original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on an authentication time for the other side capable of being identified with said authentication time for the one side to select one encryption key from said plurality of encryption keys in said key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent,
• each of said plurality of first constituent elements has said first authentication device,
• said second constituent element has said second authentication device,
• said second authentication device has all of said key bundles possessed by said plurality of first authentication devices, and
• said authenticating process is executed according to said authentication method between one of said first constituent element and said second constituent element, and after it is determined that its authentication result is acceptable, said predetermined operation of said operation object is made possible.

An authentication system which has first and second constituent elements and executes mutual authentication upon an operation object capable of executing a predetermined operation by cooperation between said first and second constituent elements by using a predetermined authentication method between said first and second constituent elements, wherein

• said predetermined authentication method includes an authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices,
• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process;
• and
• a temperature sensor capable of measuring a temperature of a device as a detection temperature,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit for generating random-number data,
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on a detection temperature on the one side detected by said temperature sensor at a predetermined timing during said authenticating process to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the one side;
• (c) receiving said initial communication random-number data on said other side, acquiring said original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on a detection temperature on the other side capable of being identified with said detection temperature on the one side to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent,
• said first constituent element has said first authentication device,
• said second constituent element has said second authentication device, and
• said authenticating process is executed according to said authentication method between said first and second authentication devices, and after it is determined that its authentication result is acceptable, said predetermined operation of said operation object is made possible.

An authentication system which, with a second constituent element and a plurality of first constituent elements possessed by an operation object, executes mutual authentication upon the operation object capable of executing a predetermined operation by cooperation between one of said first constituent elements and said second constituent element using a predetermined authentication method between one of said first constituent element and said second constituent element, wherein

• said predetermined authentication method includes an authentication method for authenticating commonality of encryption keys possessed by first and second authentication devices,
• each of said first and second authentication devices includes:
• an authentication processing part for executing an authenticating process;
• a transmission/reception part for transmitting and receiving data at the time of said authenticating process;
• and
• a temperature sensor capable of measuring a temperature of a device as a detection temperature,
• said authentication processing part includes:
• an authenticating process control part for executing and controlling said authenticating process;
• a storage part for storing a key bundle having a plurality of encryption keys;
• an encryption/decryption circuit for encrypting and decrypting data using a selection encryption key;
• and
• a random-number generation circuit for generating random-number data,
• said authenticating process is executed in such a state that data transmission and reception via each transmission/reception part is enabled with the first authentication device as one side and the second authentication device as the other side, and includes the steps of:
• (b) transmitting initial communication random-number data based on original random-number data which is random-number data generated from said authentication processing part from said one side to said other side, said one side executing a predetermined association based on a detection temperature on the one side detected by said temperature sensor at a predetermined timing during said authenticating process to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the one side;
• (c) receiving said initial communication random-number data on said other side, acquiring said original random-number data from said initial communication random-number data using an initial random-number recognition method, executing said predetermined association based on a detection temperature on the other side capable of being identified with said detection temperature on the one side to select one encryption key from said plurality of encryption keys in said selection key bundle as a selection encryption key for the other side, acquiring encrypted random-number data by encrypting said original random-number data using the selection encryption key for the other side, and transmitting the encrypted random-number data to said one side;
• (d) receiving said encrypted random-number data on said one side, and acquiring decrypted random-number data by decrypting said encrypted random-number data using said selection encryption key for the one side;
• and
• (e) comparing said original random-number data with said decrypted random-number data on said one side and determining whether or not an authentication result is acceptable depending on whether the comparison result is consistent or inconsistent,
• each of said plurality of first constituent elements has said first authentication device,
• said second constituent element has said second authentication device,
• said second authentication device has all of said key bundles possessed by said plurality of first authentication devices, and
• said authenticating process is executed according to said authentication method between one of said first constituent element and said second constituent element, and after it is determined that its authentication result is acceptable, said predetermined operation of said operation object is made possible.