Data recording device, host device and method of processing data recording device
A data storage unit can store an encrypted medium device key Enc (Kcu, Kmd_i), and a medium device key certificate (Certmedia). A controller can include an information recording unit to store a controller key (Kc) and first controller identification information (IDcu). A key generation unit executes a one-way function calculation based on the controller key and the first controller identification information to generate a controller unique key (Kcu). An identification information generating unit executes a one-way function calculation based on the controller key and the first controller identification information to generate second controller identification information (IDcntr). A key encryption unit encrypts the medium device key (Kmd_i) by the controller unique key (Kcu) to generate encrypted medium device key Enc (Kcu, Kmd_i). A key exchange unit executes an authentication key exchange process with a host device using the medium device key (Kmd_i) and the medium device key certificate (Certmedia).
1. An information recording device, comprising:
a data storage device configured to store:
an encrypted medium device key generated by encrypting a medium device key, which functions as a secret key of a public key cryptosystem, using a controller unique key, and
a medium device key certificate, which functions as a public key of the public key cryptosystem; and
a controller, including:
an information recording unit configured to store a controller key and first controller identification information unique to the controller;
a key generation unit configured to execute a first one-way function calculation based on the controller key and the first controller identification information to generate the controller unique key, which is unique to the controller;
an identification information unit configured to execute a second one-way function calculation based on the controller key and the first controller identification information to generate second controller identification information;
a key encryption unit configured to encrypt the medium device key by using the controller unique key to generate the encrypted medium device key; and
a key exchange unit configured to execute an authentication key exchange process with a host device using the medium device key and the medium device key certificate.