Granted Patent B2

US 12,489,737 · App. 18/710,064 · Granted Dec 2, 2025

Inventors: Sakae Chikara (Tokyo, JP); Tsunekazu Saito (Tokyo, JP)

Assignee: NTT, Inc.

H04L63/0428H04L9/085H04L9/3073

Abstract

Claims (39)

1 . A communication system comprising a plurality of communication apparatuses, wherein each one of the plurality of communication apparatuses includes:

a processor; and

a memory having instructions stored thereon that, when executed by the processor, cause the processor to function as:

an application program unit configured to perform encrypted communication with another communication apparatus;

a protocol conversion unit configured to transmit a message representing a predetermined procedure when a key request for a shared key to be used in the encrypted communication is received from the application program unit;

a state management unit configured to receive a message from the protocol conversion unit to manage an execution state of the procedure, and to transmit the message to a protocol driver supporting a predetermined key sharing protocol; and

the protocol driver configured to request a key sharing system that executes the key sharing protocol, to generate the shared key, when the message is received from the state management unit.

2 . The communication system according to claim 1 , wherein the procedure includes at least one of:

key ID sharing for sharing a key ID of the shared key;

key sharing for sharing the shared key;

key acquisition for acquiring at least one of the key ID and the shared key; or

key notification for outputting at least the shared key.

3 . The communication system according to claim 1 ,

wherein the key sharing protocol is quantum key distribution,

wherein the key sharing system is a device that is physically different from the communication apparatus, and

wherein, when the shared key and the key ID of the shared key are received from the key sharing system, the protocol driver transmits the key ID, the shared key, and a hash value of the key ID, to the another apparatus.

4 . The communication system according to claim 1 ,

wherein the key sharing protocol is post-quantum key distribution,

wherein the key sharing system is included in the communication apparatus, and

wherein the key sharing system:

generates a key pair of a public key and a secret key based on post-quantum cryptography; and

transmits, to the another communication apparatus:

a key ID generated by the protocol driver;

the public key;

a predetermined key length; and

a signature or a message authentication code for the key ID, the public key, and the key length.

5 . A communication apparatus comprising:

a processor; and

a memory having instructions stored thereon that, when executed by the processor, cause the processor to function as:

an application program unit configured to perform encrypted communication with another communication apparatus;

a protocol conversion unit configured to transmit a message representing a predetermined procedure when a key request for a shared key to be used in the encrypted communication is received from the application program unit;

a state management unit configured to receive a message from the protocol conversion unit to manage an execution state of the procedure, and to transmit the message to a protocol driver supporting a predetermined key sharing protocol; and

a protocol driver configured to request a key sharing system that executes the key sharing protocol to generate the shared key when the message is received from the state management unit.

6 . A method for use in a communication apparatus, the method comprising:

performing, by an application program unit, encrypted communication with another communication apparatus;

transmitting, by a protocol conversion unit, a message representing a predetermined procedure when a key request for a shared key to be used in the encrypted communication is received from the application program unit;

receiving, by a state management unit, a message from the protocol conversion unit to manage an execution state of the procedure, and transmitting the message to a protocol driver supporting a predetermined key sharing protocol; and

requesting, by the protocol driver, a key sharing system that executes the key sharing protocol, to generate the shared key, when the message is received from the state management unit.

7 . A non-transitory recording medium storing a program that, when executed on a computer, causes the computer to perform the method of claim 6 .

Assignments (2)

Continuity (1)

References Cited (12)