Device control apparatus
View Patent ↗A device control apparatus, comprising a processor for storing first key information, a memory section for storing encrypted second key information which is obtained by encrypting second key information such that the second key information is able to be restored through decryption using the first key information, and an interface section for carrying out authentication using the second key information when an access instruction requiring access to a device is given by the processor, and for controlling the access to the device based on the access instruction when the authentication is established.
1. A device control apparatus connected to a plurality of devices, comprising:
a processor with first key information embedded therein; and
a memory section for storing encrypted second key information for each of the plurality of devices which is obtained by encrypting second key information for each of the plurality of devices using third key information, encrypted third key information which is obtained by encrypting the third key information using the first key information, and a plurality of access programs for accessing the plurality of devices, which are encrypted using the third key information, each of the plurality of access programs is stored in the memory section associated with information specifying a usable second key information, wherein
the processor decrypts the encrypted third key information using the embedded first key information to store the decrypted third key information in a memory embedded in the processor, obtains the usable second key information and the associated access program through decryption using the decrypted third key information, encrypts an access instruction requiring access to the device using the usable second key information based on the associated access program, and outputs the encrypted access instruction.
2. The device control apparatus according to claim 1 , wherein the processor operates according to a loader program stored in the memory section, and loads the access program based on the loader program,
the loader program is encrypted together with third key information, using the first key information, and
the processor obtains the loader program through decryption using the first key information.
3. A device control apparatus connected to a plurality of devices, comprising:
a processor with first key information embedded therein; and
a memory section for storing information obtained by encrypting third key information and public key information using the first key information, and also information obtained by encrypting second key information for each of the plurality of devices and a plurality of access programs for accessing the plurality of devices using the third key information, and by digitally signing the encrypted second key information and the encrypted access programs using secret key information corresponding to the public key information, each of the plurality of access programs is stored in the memory section associated with information specifying a usable second key information, wherein
the processor decrypts the encrypted third key information and the encrypted public key information using the embedded first key information to store the decrypted third key information and the decrypted public key information in a memory embedded in the processor, verifies signatures of the encrypted second key information and the encrypted access program using the decrypted public key information, obtains the usable second key information and the associated access program through decryption using the decrypted third key information when the verification is completed successfully, encrypts an access instruction requiring access to the device using the usable second key information based on the associated access program, and outputs the encrypted access instruction.
4. A device control method, while using an apparatus being connected to a plurality of devices and comprising a processor with first key information embedded therein, and a memory section for storing encrypted second key information for each of the plurality of devices which is obtained by encrypting second key information for each of the plurality of devices using third key information, encrypted third key information which is obtained by encrypting the third key information using the first key information, and a plurality of access programs for accessing the plurality of devices, which are encrypted using the third key information, each of the plurality of access programs is stored in the memory section associated with information specifying a usable second key information, the method comprising the steps of:
decrypting the encrypted third key information using the embedded first key information to store the decrypted third key information in a memory embedded in the processor;
obtaining the usable second key information and the associated access program through decryption using the decrypted third key information;
encrypting an access instruction requiring access to the device using the usable second key information based on the associated access program; and
outputting the encrypted access instruction.
5. The device control method according to claim 4 , wherein the processor operates according to a loader program stored in the memory section, and loads the access program based on the loader program, the loader program is encrypted together with third key information, using the first key information; and further comprising the step of obtaining by the processor the loader program through decryption using the first key information.
6. A device control method, while using an apparatus being connected to a plurality of devices, and comprising a processor with first key information embedded therein; and a memory section for storing information obtained by encrypting third key information and public key information using the first key information, and also information obtained by encrypting second key information for each of the plurality of devices and a plurality of access programs for accessing the plurality of devices using the third key information, and by digitally signing the encrypted second key information and the encrypted access programs using secret key information corresponding to the public key information, each of the plurality of access programs is stored in the memory section associated with information specifying a usable second key information, the method comprising the steps of:
decrypting the encrypted third key information and the encrypted public key information using the embedded first key information to store the decrypted third key information and the decrypted public key information in a memory embedded in the processor,
verifying signatures of the encrypted second key information and the encrypted access program using the decrypted public key information,
obtaining the usable second key information and the associated access program through decryption using the decrypted third key information when the verification is completed successfully,
encrypting an access instruction requiring access to the device using the usable second key information based on the associated access program, and
outputting the encrypted access instruction.