Entity, gateway device, information processing device, information processing system, and information processing method

An information processing method of an information processing system including an entity that records a pre-generated secret key, a private key, and a public key, a gateway device that records the secret key, and an information processing device,

• wherein the entity
• generates a data ID of predetermined data on a basis of the data and calculates a nonce on a basis of the data and the secret key,
• generates an entity derived ID on a basis of an entity ID for identifying the entity calculated on a basis of the public key and the nonce, and
• generates a certificate of the data that includes a certificate message including the data ID and the entity derived ID and a signature for the certificate message with the nonce and a derived private key generated on a basis of the private key or includes a signature for the certificate message with the private key and the certificate message partially encrypted and replaced with the nonce,
• wherein the gateway device
• calculates the nonce on a basis of the secret key and the certificate or the data acquired from the entity, and
• transmits the certificate and the nonce to the information processing device, and
• wherein the information processing device
• receives the certificate and the nonce transmitted by the gateway device, and
• verifies a signature of the certificate of the entity on a basis of the certificate and the nonce.

An information processing method comprising:

• by an entity recording a pre-generated secret key, a private key, and a public key,
• generating a data ID of predetermined data on a basis of the data and calculating a nonce on a basis of the data and the secret key;
• generating an entity derived ID on a basis of an entity ID for identifying the entity calculated on a basis of the public key and the nonce;
• and
• generating a certificate of the data that includes a certificate message including the data ID and the entity derived ID and a signature for the certificate message with the nonce and a derived private key generated on a basis of the private key or includes a signature for the certificate message with the private key and the certificate message partially encrypted and replaced with the nonce.

A gateway device comprising:

• a communication unit configured to acquire a certificate of predetermined data generated by an entity recording a pre-generated secret key, a private key, and a public key and the data, the certificate including a certificate message including a data ID and an entity derived ID, and a signature for the certificate message with a nonce and a derived private key generated on a basis of the private key, or the certificate including a signature for the certificate message with the private key, and the certificate message partially encrypted and replaced by the nonce;
• a recording unit configured to record the secret key;
• and
• a control unit configured to calculate the nonce on a basis of the secret key and the acquired certificate or data,
• wherein the communication unit transmits the certificate and the nonce to an information processing device,
• the data ID is generated on a basis of the data, and
• the entity derived ID is generated on a basis of the nonce and an entity ID for identifying the entity calculated on a basis of the public key.

An information processing method comprising:

• by a gateway device recording a secret key,
• acquiring a certificate of predetermined data generated by an entity recording the secret key which is pre-generated, a private key, and a public key and the data, the certificate including a certificate message including a data ID and an entity derived ID, and a signature for the certificate message with a nonce and a derived private key generated on a basis of the private key, or the certificate including a signature for the certificate message with the private key, and the certificate message partially encrypted and replaced by the nonce;
• calculating the nonce on a basis of the secret key and the acquired certificate or data;
• and
• transmitting the certificate and the nonce to an information processing device,
• wherein the data ID is generated on a basis of the data, and
• the entity derived ID is generated on a basis of the nonce and an entity ID for identifying the entity calculated on a basis of the public key.

An information processing device comprising:

• a communication unit configured to receive a certificate of predetermined data generated by an entity recording a pre-generated secret key, a private key, and a public key and a nonce, the certificate including a certificate message including a data ID and an entity derived ID, and a signature for the certificate message with the nonce and a derived private key generated on a basis of the private key, or the certificate including a signature for the certificate message with the private key, and the certificate message partially encrypted and replaced by the nonce;
• and
• a control unit configured to verify the signature for the certificate of the entity on a basis of the certificate and the nonce,
• wherein the data ID is generated on a basis of the data,
• the nonce is calculated on a basis of the secret key and the certificate or the data, and
• the entity derived ID is generated on a basis of the nonce and an entity ID for identifying the entity calculated on a basis of the public key.

An information processing method comprising:

• by an information processing device,
• receiving a certificate of predetermined data generated by an entity recording a pre-generated secret key, a private key, and a public key and a nonce, the certificate including a certificate message including a data ID and an entity derived ID, and a signature for the certificate message with the nonce and a derived private key generated on a basis of the private key, or the certificate including a signature for the certificate message with the private key, and the certificate message partially encrypted and replaced by the nonce;
• and
• verifying the signature for the certificate of the entity on a basis of the certificate and the nonce,
• wherein the data ID is generated on a basis of the data,
• the nonce is calculated on a basis of the secret key and the certificate or the data, and
• the entity derived ID is generated on a basis of the nonce and an entity ID for identifying the entity calculated on a basis of the public key.