Memory, information apparatus for access to the memory, and method for the information apparatus
View Patent ↗With commands from a terminal divided into a command to designate an access area and a command to gain access, the terminal adds verification data of the terminal to an argument of the command to gain access, and it is thereby possible to verify the identity of a terminal application that issues the command to designate an access area, a terminal application that issues the command to gain access, and a terminal application that holds a verification key.
1. An access method for an apparatus to gain access to a specific area of a memory device, said specific area being assigned an area number, the method comprising the steps of:
sharing, by the apparatus, a verification key with the memory device;
first transmitting designation information from the apparatus to the memory device, said designation information designating an access area in the memory device, and including the area number of the access area, an access start offset in the specific area associated with the area number and a size of data to be accessed;
second transmitting verification data obtained by encrypting the designation information using the verification key, together with a processing command, from the apparatus to the memory device, after first transmitting the designation information;
verifying the verification data using the designation information and the verification key at the memory device; and
executing the processing command when the verification succeeds at the memory device.
2. An access method according to claim 1 , wherein the specific area is a security protection area to which an access from an outer apparatus is restricted.
3. An access method according to claim 1 , wherein the processing command is a command for reading out or writing a data in the specific area.
4. An access method for an apparatus to gain access to a specific area of a memory device, the method comprising the steps of:
sharing, by the apparatus, a verification key with the memory device;
requesting, by the apparatus, transmission of random numbers to the memory device;
transmitting, by the memory device, random numbers to the apparatus;
first transmitting designation information from the apparatus to the memory device, said designation information designating an access area in the memory device, and including the area number of the access area, an access start offset in the specific area associated with the area number and a size of data to be accessed;
second transmitting verification data obtained by encrypting verification information including the random numbers and the designation information, together with a processing command, from the apparatus to the memory device, after first transmitting the designation information;
verifying the verification data using the random numbers, the designation information and the verification key at the memory device; and
executing the processing command when the verification succeeds at the memory device.
5. A memory device whose data of a specific area is read and written by an apparatus, said specific area being assigned an area number, the memory device comprising:
a verification key sharing section that shares the verification key with the apparatus;
a processing command receiver that receives designation information including the area number, an access start offset in the specific area associated with the area number and a size of data to access and designating an area to access and receives verification data obtained by encrypting the designation information using the verification key and a processing command including a command for read or write;
a designation information verifier that performs verification processing on the verification data using the designation information;
a storage area that stores data;
a storage area access section that performs read or write from/in a designated area of the storage area according to the command for processing, when the verification processing succeeds;
a data transmitter that transmits data read by the storage area access section to the apparatus; and
a data receiver that receives data to write from the apparatus.
6. The memory device according to claim 5 , wherein, the designation information verifier generates random numbers in response to a request by the apparatus, holds the random numbers and transmits the random numbers to the apparatus.
7. An information apparatus that reads and writes data to a specific area from/in a memory device, said specific area being assigned an area number, the information apparatus comprising:
a verification key sharing section that shares the verification key with the memory device;
a designation information determiner that determines designation information including an access start offset for reading and writing data from/in the specific area, a size of data for performing read and write and the area number and designating the access area;
a verification information generator that performs processing for generating verification data by encrypting the designation information using the verification key;
a processing command transmitter that transmits the designation information to the memory device and separately transmits the verification data and a processing command for reading or writing data to the memory device;
a data transmitter that transmits data to the memory device when the processing command is write; and
a data receiver that receives data from the memory device when the processing command is read.
8. The information apparatus according to claim 7 , wherein the detection information verifier requests transmission of random numbers to the memory device and receives the random numbers from the memory device.
9. An access method for an apparatus to gain access to a specific area of a memory device, said specific area being assigned an area number, the method comprising:
first transmitting designation information from the apparatus to the memory device, said designation information designating an access area in the memory device, and including the area number of the access area, an access start offset in the specific area associated with the area number and a size of data to be accessed;
second transmitting verification data obtained by encrypting the designation information using the verification key, together with a processing command, from the apparatus to the memory device, after first transmitting the designation information;
verifying the verification data using the designation information and the verification key at the memory device; and
executing the processing command when the verification succeeds at the memory device.
10. An access method for an apparatus to gain access to a specific area of a memory device, said specific area being assigned an area number, the method comprising the steps of:
requesting, by the apparatus, transmission of random numbers to the memory device;
transmitting, by the memory device, device random numbers to the apparatus;
first transmitting designation information from the apparatus to the memory device, said designation information designating an access area in the memory device, and including the area number of the access area, an access start offset in the specific area associated with the area number and a size of data to be accessed;
second transmitting verification data obtained by encrypting the designation information using a verification key, together with a processing command, from the apparatus to the memory device, after first transmitting the designation information;
verifying the verification data using the random numbers, the designation information, and the verification key at the memory device; and
executing the processing command when the verification succeeds at the memory device.