Information recording device
View Patent ↗A data storage unit may store an encrypted medium device key Enc (Kcu, Kmd_i), and a medium device key certificate (Certmedia). A controller further includes: an information recording unit configured to store a controller key (Kc) and first controller identification information (IDcu). A key generation unit executes a one-way function calculation based on the controller key and the first controller identification information to generate a controller unique key (Kcu). An identification information generating unit executes a one-way function calculation based on on the controller key and the first controller identification information to generate second controller identification information (IDcntr). A key encryption unit encrypts the medium device key (Kmd_i) by the controller unique key (Kcu) to generate encrypted medium device key Enc (Kcu, Kmd_i). A key exchange unit executes an authentication key exchange process with a host device using the medium device key (Kmd_i) and the medium device key certificate (Certmedia).
1. A memory card comprising a controller and having controller key information, controller ID information, media key information and media certification information stored therein, wherein the controller is configured to:
receive, from a host, a first random number and host certification information with first signature information attached thereto;
verify the first signature information attached to the received host certification information;
generate a second random number and send to the host the generated second random number and the media certification information with second signature information, which is to be verified by the host, attached thereto;
generate a third random number and calculate a first value using the generated third random number and a base point of an elliptic curve;
generate a unique ID information using a one-way function based on the controller key information and the controller ID information;
generate third signature information to be verified at the host, from the first value, the unique ID information, and the first random number, using the media key information;
send to the host the calculated first value, the generated unique ID information, and the generated third signature information;
receive, from a host, a second value that is calculated by the host based on a fourth random number generated at the host and the base point of the elliptic curve, after verification of the third signature information; and
generate a first shared key information corresponding to a second shared key information that is generated at the host after verification of the third signature information, wherein the first shared key information is based on the second value and the third random number, and the second shared key information is based on the first value and the fourth random number.
2. A system comprising a memory card and a host, wherein
the memory card has stored therein controller key information, controller ID information, media key information and media certification information,
the host has stored therein host key information and host certification information,
the host is configured to send to the memory card a first random number and the host certification information with first signature information attached thereto:
the memory card is configured to receive from the host the first random number and the host certification information,
the memory card is configured to verify the received first signature information,
the memory card is configured to generate a second random number after verification of the received first signature information and send to the host the generated second random number and the media certification information with second signature information attached thereto;
the host is configured to receive the second random number and the media certification information and verify the attached second signature information,
the memory card is configured to generate a third random number and calculate a first value using the generated third random number and a base point of an elliptic curve,
the memory card is configured to generate a unique ID information using a one-way function based on the controller key information and the controller ID information,
the memory card is configured to generate third signature information to be verified at the host, from the first value, the unique ID information, and the first random number, using the media key information,
the memory card is configured to send to the host the calculated first value, the generated unique ID information, and the generated third signature information,
the host is configured to verify the third signature information, calculate a second value based on a fourth random number and the base point of the elliptic curve, after verification of the third signature information, and send the calculated second value to the memory card,
the memory card is configured to receive the second value, and
the memory card is configured to generate a first shared key information corresponding to a second shared key information that is generated at the host after verification of the third signature information, wherein the first shared key information is based on the second value and the third random number, and the second shared key information is based on the first value and the fourth random number.
3. A host having host key information and host certification information stored therein,
the host being configured to:
generate a first random number;
send to a memory card the generated first random number and the host certification information with first signature information attached thereto;
receive, from the memory card, a second random number that is generated by the memory card after verification of the first signature information;
receive, from the memory card, media certification information that is generated by the memory card after verification of the first signature information;
verify second signature information attached to the media certification information sent from the memory card;
receive, from the memory card, a first value that is calculated by the memory card using a third random number and a base point of elliptic curve after verification of the first signature information;
receive, from the memory card, unique ID information that is generated by the memory card executing one-way function calculation based on controller key information and controller identification information after verification of the first signature information;
receive, from the memory card, third signature information that is generated by the memory card performing signature process using medium key information after verification of the first signature information;
verify the received third signature information;
generate a fourth random number after verification of the third signature information;
calculate a second value using the generated fourth random number and the base point of the elliptic curve; and
generate shared key information to be shared by a key exchange process between the host and the memory card, after verification of the third signature information.