Key distribution system

1. A key distribution system comprising:

a terminal; and

a server connected to said terminal by way of a communication network,

wherein

said terminal comprises:

a first key storage unit configured to store a communication secret key and a public key in a rewritable manner;

a first communication unit configured to establish encrypted communication with said server by use of a common key cryptography using the communication secret key stored in said first key storage unit; and

a key request unit configured to, when requesting said server to issue a new communication secret key,

generate newly a secret value defined as a numerical value, and

generate a first secret code by encrypting the secret value with the public key stored in said first key storage unit, and

send the first secret code to said server,

wherein

said server comprises:

a second key storage unit configured to store a decryption secret key and the communication secret key in a rewritable manner, the decryption secret key being defined as a private key paired with the public key;

a second communication unit configured to establish the encrypted communication with said terminal by use of the common key cryptography using the communication secret key stored in said second key storage unit; and

a key issuance unit configured to

issue the new communication secret key in response to a request of issuing new communication secret keys from said terminal, and

store the new communication secret key in said second key storage unit, and

obtain the secret value by decrypting the first secret code with the decryption secret key, and

generate a second secret code by encrypting the new communication secret key with the secret value, and

send the second secret code to said terminal requesting issue of the new communication secret key, and

wherein

said key request unit is configured to

decrypt the second secret code with the secret value to obtain the new communication secret key and

store the obtained new communication secret key in said first key storage unit,

said first communication unit being configured to, after the new communication secret key is stored in said first key storage unit, use the new communication secret key for establishing the encrypted communication with said server by use of the common key cryptography, and

said second communication unit being configured to, after the new communication secret key is stored in said second key storage unit, use the new communication secret key for establishing the encrypted communication with said terminal by use of the common key cryptography, and

wherein

said key request unit is configured to

generate a first random number used as the secret value, and a second random number, and

send the second random number to said server before requesting said server to issue the new communication secret key, and

generate a communication numerical value by use of the first random number and the second random number, and

encrypt the communication numerical value with the public key, and

send the encrypted communication numerical value to said server, and

said key issuance unit is configured to

store the second random number received from said terminal, and

upon receiving the encrypted communication numerical value, decrypt the encrypted communication numerical value with the decryption secret key to obtain the communication numerical value, and

obtain the first random number by use of the obtained communication numerical value and the stored second random number.

2. The key distribution system as set forth in claim 1 , wherein

said key request unit is configured to encrypt the newly generated secret value by use of, as the public key, said communication secret key stored in said first key storage unit, when requesting said server to issue the new communication secret key,

said key issuance unit being configured to

issue a new decryption secret key defined as a private key paired with the new communication secret key, in addition to the new communication secret key, in response to the request of issuing the new communication secret key from said terminal, and

store the new decryption secret key in said second key storage unit, and

said key issuance unit being configured to, after the new decryption secret key is stored in said second key storage unit, use the new decryption secret key for decrypting the first secret code.

3. The key distribution system as set forth in claim 1 , wherein

said key issuance unit is configured to, in response to the request of issuing the new communication secret key from said terminal,

issue a message code including the secret value received from said terminal, and

encrypt the new communication secret key with the message code, and

send the encrypted new communication secret key to said terminal.