Authentication method

A system comprising:

• a host device;
• and
• a storage device to be authenticated by the host device;
• wherein the storage device comprises:
• a controller;
• and
• a memory controlled by the controller, comprising:
• a first memory area being used to store a first key and unique secret identification information, the first memory area being restricted from being read and written from outside by the host device and the controller;
• a second memory area being used to store encrypted secret identification information generated by encrypting the secret identification information;
• and
• a third memory area being readable and writable;
• wherein:
• the memory is configured to receive first host number information and second host number information;
• the memory is configured to generate a second key by using the first key and the first host number information;
• the memory configured to generate a session key by using the second key and the second host number information;
• the memory is configured to generate authentication information by using the secret identification information and the session key;
• the memory is configured to generate the second key in a case where the host device reads the encrypted secret identification information from the second memory area of the memory;
• the memory is configured to generate the session key in a case where the host device sends an authentication request to the memory;
• the memory is configured to generate the authentication information when generating the session key;
• the memory is configured to send the authentication information to the host device;
• the host is configured to send the first host number information and the second host number information to the memory;
• the host is configured to verify the authentication information;
• and
• the host is configured to generate one-way conversion identification information from the secret identification information after the verification.

A system comprising:

• a host device;
• and
• a memory to be authenticated by the host device;
• wherein the memory comprises:
• a first memory area being used to store a first key and unique secret identification information, the first memory area being restricted from being read and written from outside by the host device and the controller;
• a second memory area being used to store encrypted secret identification information generated by encrypting the secret identification information;
• and
• a third memory area being readable and writable;
• wherein:
• the memory is configured to receive first host number information and second host number information;
• the memory is configured to generate a second key by using the first key and the first host number information;
• the memory configured to generate a session key by using the second key and the second host number information;
• the memory is configured to generate authentication information by using the secret identification information and the session key;
• the memory is configured to generate the second key in a case where the host device reads the encrypted secret identification information from the second memory area of the memory;
• the memory is configured to generate the session key in a case where the host device sends an authentication request to the memory;
• the memory is configured to generate the authentication information when generating the session key;
• the memory is configured to send the authentication information to the host device;
• the host is configured to send the first host number information and the second host number information to the memory;
• the host is configured to verify the authentication information, and
• the host is configured to generate one-way conversion identification information from the secret identification information after the verification.

A memory device to be authenticated by a host comprising:

• a first memory area being used to store a first key and unique secret identification information, the first memory area being restricted from being read and written from outside by a host and a controller;
• a second memory area being used to store encrypted secret identification information generated by encrypting the secret identification information;
• and
• a third memory area being readable and writable;
• wherein:
• the memory device is configured to receive first host number information and second host number information by using a controller;
• the memory device is configured to generate a second key by using the first key;
• the memory device is configured to generate a session key by using the second key;
• the memory device is configured to generate authentication information by using the secret identification information and the session key;
• the memory device is configured to generate the second key in a case where the host reads the encrypted secret identification information from the second memory area;
• the memory device is configured to generate the session key in a case where the host sends an authentication request;
• the memory device is configured to generate the authentication information when generating the session key;
• and
• the memory device is configured to send the authentication information to the host to generate one-way conversion identification information.

A storage device to be authenticated by a host comprising:

• a controller;
• a first memory area being used to store a first key and unique secret identification information, the first memory area being restricted from being read and written from outside by a host and a controller;
• a second memory area being used to store encrypted secret identification information generated by encrypting the secret identification information;
• and
• a third memory area being readable and writable;
• wherein:
• the controller is configured to receive first host number information and second host number information from the host;
• the storage device is configured to generate a second key by using the first key;
• the storage device is configured to generate a session key by using the second key;
• the storage device is configured to generate authentication information by using the secret identification information and a session key;
• the storage device is configured to generate the second key in a case where the host reads the encrypted secret identification information from the second memory area;
• the storage device is configured to generate the session key in a case where the host sends an authentication request;
• the memory device is configured to generate the authentication information when generating the session key;
• and
• the memory device is configured to send the authentication information to the host to generate one-way conversion identification information.

A host being configured to perform an authentication process with a memory device, the memory device including a first memory area being used to store a first key and unique secret identification information, the first memory area being restricted from being read and written from outside by the host and a controller;

• a second memory area being used to store encrypted secret identification information generated by encrypting the secret identification information, the second memory area being allowed to be read-only from the perspective of the device, and a third memory area being readable and writable,
• the host being further configured to:
• store a first host key and a second host key;
• cause the controller to read the encrypted secret identification from the second area, and decrypt the encrypted secret identification using information obtained by a process using the first host key;
• send, to the memory device, an authentication request, random number, and host identification information allocated to the host;
• generate a third host key by using the second host key;
• generate verification information by using the third host key;
• verify authentication information from the memory device by using the verification information;
• and
• generate one-way conversion identification information from the secret identification information after the verification;
• and
• the memory device being configured to:
• generate the second key in a case where the host device reads the encrypted secret identification information from the second memory area;
• generate a session key in case where the host device sends the authentication request;
• generate the authentication information in the case generating the session key;
• and
• send the authentication information to the host device.