Device and authentication method therefor

A memory card comprising:

• a controller;
• and
• a memory device controlled by the controller,
• wherein the memory device includes a unreadable area which stores a data element used for an authentication process, the unreadable area being prohibited from being read, and a readable area which stores key index data, encrypted secret data, and family key block data,
• wherein the controller is configured to:
• read the family key block data from the readable area of the memory device, and send the family key block data to a host apparatus in response to receiving a read command for the family key block data from the host apparatus,
• read the encrypted secret data from the readable area of the memory device, and send the encrypted secret data to the host apparatus in response to receiving a read command for the encrypted secret data from the host apparatus,
• read the key index data from the readable area of the memory device, and send the key index data to the host apparatus after receiving a read command for the key index data from the host apparatus, and
• send constant number data received from the host apparatus to the memory device, after receiving a command for obtaining authentication information from the host apparatus.

A host apparatus capable of communicating with a memory device via a controller, wherein the host apparatus is configured to:

• send a read command for family key block data to cause the controller to read the family key block data from a readable area of the memory device,
• send a read command for encrypted secret data to cause the controller to read the encrypted secret data from a readable area of the memory device,
• send a read command for key index data to cause the controller to read the key index data from a readable area of the memory device,
• send a command for obtaining authentication information, and
• verify the authentication information data.

A system comprising:

• a memory card;
• and
• a host apparatus capable of communicating with the memory card,
• wherein the memory card includes:
• a controller;
• and
• a memory device controlled by the controller and storing secret data and encrypted secret data, the secret data being unreadable, the encrypted secret data being readable,
• wherein the controller is configured to read the encrypted secret data from the memory device, and send the encrypted secret data to the host apparatus in response to receiving a read command for the encrypted secret data from the host apparatus.

A memory device controlled by a controller, comprising:

• an area which stores a data element for an authentication process and is prohibited from being read by the controller;
• and
• an area which stores key index data, encrypted secret data (E-SecretID), and family key block data (FKB), and is readable,
• wherein the data element is used only within the memory device,
• the key index data, the encrypted secret data, and the family key block data is read from the area which is readable via the controller in response to a command from an external host apparatus, and
• the memory device is configured to receive random number data and calculate authentication information by using the data element in response to receiving a command for obtaining the authentication information.

A system comprising:

• a controller;
• and
• a host apparatus,
• wherein the controller is configured to:
• read family key block data from a readable area of an external memory device and send the family key block data to the host apparatus in response to receiving a read command for the family key block from the host apparatus,
• read encrypted secret data from a readable area of the memory device and send the encrypted secret data to the host apparatus in response to receiving a read command for the encrypted secret data from the host apparatus,
• read key index data from a readable area of the memory device and send the key index data to the host apparatus in response to receiving a read command for the key index data from the host apparatus, and
• send data received from the host apparatus in response to receiving a command for obtaining authentication information data from the host apparatus.

A system comprising:

• a controller;
• a memory device configured to generate authentication information data;
• and
• a host apparatus,
• wherein the memory device stores secret data and encrypted secret data, the secret data is unreadable by the controller, and the encrypted secret data is readable by the controller,
• the controller is configured to:
• read the encrypted secret data from the memory device and send the encrypted secret data to the host apparatus when receiving a read command for the encrypted secret data from the host apparatus, and
• send data received from the host apparatus to the memory device when receiving a command for obtaining authentication information from the host apparatus.