# US 8,751,814 B2 · Device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,751,814 B2
- Document ID: US8751814B2
- Status: Granted
- Kind: B2
- Application number: 13/517,900
- Filed: 2012-06-14
- Published: 2013-12-19
- Granted: 2014-06-10
- Earliest claimed: 2012-06-14
- Assignees: Kabushiki Kaisha Toshiba
- Applicants: Yuji Nagai; Taku Kato; Tatsuyuki Matsushita
- Inventors: Yuji Nagai; Taku Kato; Tatsuyuki Matsushita
- Web page: https://patentgrep.com/patent/US8751814B2

## CPC

- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

According to one embodiment, a device includes a second data generator configured to generate a session key (SKey) by encrypting a random number (RN) with the second key (HKey) in AES operation; a one-way function processor configured to generate an authentication information (Oneway-ID) by processing the secret identification information (SecretID) with the session key (SKey) in one-way function operation; and a data output interface configured to output the encrypted secret identification information (E-SecretID) and the authentication information (Oneway-ID) to outside of the device.

## Claims

### Claim 1

A memory device having a plurality of different type memory areas to be authenticated using an external controller comprising:
a first type of memory area being used to store a first key and secret identification information unique to the memory device, the first type of memory area being prohibited from being read and written from outside of the memory device by the external controller at least after shipping;
a second type of memory area being used to store encrypted secret identification information generated by encrypting the secret identification information, the second type of memory area being required to be readable from outside of the memory device by the external controller;
a third type of memory area being required to be readable and writable from outside of the memory device;
a first data generator configured to generate a second key by encrypting a host constant with the first key in an Advanced Encryption Standard operation;
a second data generator configured to generate a session key by encrypting a random number with the second key in AES operation; and
a one-way function processor configured to generate authentication information by processing the secret identification information with the session key in a one-way function operation;
the encrypted secret identification information and the authentication information being configured to be output to outside of the memory device using the external controller.

### Claim 2

A storage device to be authenticated by an external host device comprising:
a memory device having a plurality of different type memory areas; and
an external controller which mediates between the memory device and the external host device; wherein
the memory device comprises:
a first type of the memory area being used to store a first key and secret identification information unique to the memory device, the first type of memory area being prohibited from being read and written from outside of the memory device by the controller at least after shipping;
a second type of memory area being used to store encrypted secret identification information generated by encrypting the secret identification information, the second type of memory area being required to be readable from outside of the memory device;
a third type of memory area being required to be readable and writable from outside of the memory device;
a first data generator configured to generate a second key by encrypting a host constant with the first key in an Advanced Encryption Standard (AES) operation;
a second data generator configured to generate a session key by encrypting a random number with the second key in an AES operation;
a one-way function processor configured to generate authentication information by processing the secret identification information with the session key in a one-way function operation; and
the encrypted secret identification information and the authentication information configured to be output to outside of the memory device using the controller.