Key implementation system
An LSI includes a first decryptor which receives first encrypted key data, and decrypts the first encrypted key data using a first cryptographic key, thereby generating first decrypted key data, a second cryptographic key generator which generates a second cryptographic key based on a second ID, a second encryptor which encrypts the first decrypted key data using the second cryptographic key, thereby generating second encrypted key data, and a second decryptor which decrypts the second encrypted key data using the second cryptographic key, thereby generating second decrypted key data. At a time of key setting, the second encryptor stores the second encrypted key data in a storage unit. At a time of key usage, the second decryptor reads the second encrypted key data from the storage unit.
1. A key implementation method, comprising:
a first decrypting step of receiving first encrypted key data, and decrypting the first encrypted key data using a first cryptographic key, thereby generating first decrypted key data;
a second cryptographic key generating step of generating a second cryptographic key based on a second ID; and
a second encrypting step of encrypting the first decrypted key data using the second cryptographic key, thereby generating second encrypted key data which is decryptable by using the second cryptographic key, and storing the second encrypted key data in a storage unit.
2. The key implementation method of claim 1 , further comprising:
a second decrypting step of decrypting the second encrypted key data using the second encrypted key read from the storage unit, thereby generating second decrypted key data.
3. The key implementation method of claim 2 , further comprising:
a first cryptographic key generating step of generating the first cryptographic key based on a first ID.
4. The key implementation method of claim 3 , wherein
in the first cryptographic key generating step, the first cryptographic key is generated based on a first LSI key and the first ID, and
in the second cryptographic key generating step, the second cryptographic key is generated based on a second LSI key and the second ID.
5. The key implementation method of claim 1 , wherein
the first decrypted key data includes verification data, and
the method includes a first verifying step of confirming the verification data and verifying a validity of the first decrypted key data.
6. The key implementation method of claim 1 , wherein
the second decrypted key data includes verification data, and
the method includes a second verifying step of confirming the verification data and verifying a validity of the second decrypted key data.
7. The key implementation method of claim 1 , further comprising:
a content decryption processing step of performing, using the second encrypted key data, authentication processing in relation to access to encrypted content, or decryption processing of encrypted content.