Information processing device, management apparatus, information processing system, information processing method, and computer program product

A management apparatus comprising:

• a second receiver configured to receive request information containing a device key of a first external device and a device key of an information processing device from the information processing device connected via a network;
• an MKB generator configured to generate a media key block from which the first external device and the information processing device are enabled to derive a first group key;
• and
• a second transmitter configured to transmit the media key block to the information processing device.

An information processing system comprising:

• a management apparatus;
• and
• an information processing device connected to the management apparatus via a network, wherein
• the information processing device includes
• a first receiver configured to receive communication information;
• an acquisition unit configured to, in response to receipt of the communication information from a first external device not belonging to a group previously classified on a management unit basis by the management apparatus, transmit request information to the management apparatus, and acquire a media key block from the management apparatus, the request information containing an MKB request instruction of a media key block from which the first external device and the information processing device are enabled to derive a first group key, a device key of the information processing device and a device key of the first external device;
• an MKB processor configured to generate the first group key from the device key of the information processing device and the media key block;
• and
• an authentication unit configured to perform encrypted communication with the first external device based on first authentication using the first group key, and
• the management apparatus includes
• a second receiver configured to receive the request information from the information processing device;
• an MKB generator configured to generate the media key block;
• and
• a second transmitter configured to transmit the media key block to the information processing device.

An information processing method to be performed by an information processing device connected to a management apparatus via a network, the method comprising:

• receiving communication information;
• acquiring a media key block from the management apparatus, in response to receipt of the communication information from a first external device not belonging to a group previously classified on a management unit basis by the management apparatus, the first external device and the information processing device being enabled to derive a first group key based on the media key block;
• generating the first group key from a device key of the information processing device and the media key block;
• and
• performing encrypted communication with the first external device based on first authentication using the first group key.