Method, apparatus, and computer program for generating session keys for encryption of image data

1. A data processing apparatus comprising:

an input section, arranged to input information for encryption key generation;

a first encryption key generator, arranged to generate a first encryption key from the information for encryption key generation;

an image data generator, arranged to generate image data to be stored in a non-transitory storage medium;

a session key generator, arranged to generate a session key based on the first encryption key;

a first encryption section, arranged to encrypt the image data using the session key

a secondary image data generator, arranged to generate secondary image data of the image data;

a second encryption key generator, arranged to generate a second encryption key using information secretly held by the data processing apparatus;

a second encryption section, arranged to encrypt the secondary image data using the second encryption key; and

a controller, arranged to store the image data encrypted by the first encryption section and the secondary image data encrypted by the second encryption section in the non-transitory storage medium,

wherein the session key generator generates the session key using the first encryption key and a one-way function, the first time that it generates a session key, and generates the session key using the most recently generated session key and the one-way function, the second and subsequent times that it generates a session key, and destroys the session key which is used to generate a next session key, and

wherein if different image data is encrypted, the first encryption section uses a different session key.

2. The apparatus according to claim 1 , further comprising an authenticator arranged to acquire encryption key verification data from the non-transitory storage medium and authenticate, based on the verification data, validity of the information for encryption key generation.

3. The apparatus according to claim 2 , wherein the encryption key verification data is a message authentication code for the information for encryption key generation.

4. The apparatus according to claim 2 , wherein the encryption key verification data is a message authentication code for the first encryption key.

5. The apparatus according to claim 1 , wherein the secondary image data is thumbnail image data of the image data.

6. The apparatus according to claim 2 , wherein the controller stores the image data in the non-transitory storage medium without encryption if the authenticator has failed to authenticate the information for encryption key generation.

7. A method of processing data by a data processing apparatus, the method comprising the steps of:

inputting information for encryption key generation;

generating a first encryption key from the information for encryption key generation;

generating image data to be stored in a storage medium;

generating a session key based on the first encryption key;

encrypting the image data using the session key

generating secondary image data of the image data;

generating a second encryption key using information secretly held by the data processing apparatus;

encrypting the secondary image data using the second encryption key; and

storing the encrypted image data and the encrypted secondary image data in the storage medium,

wherein in the session key generating step, the session key is generated using the first encryption key and a one-way function, the first time a session key is generated, and the session key is generated using the most recently generated session key and the one-way function, the second and subsequent times that a session key is generated, and the session key that is used to generate a next session key is destroyed, and

wherein in the first encrypting step, if different image data is encrypted, a different session key is used.

8. The method according to claim 7 , further comprising the step of acquiring encryption key verification data from the storage medium and authenticating, based on the verification data, validity of the information for encryption.

9. The method according to claim 8 , wherein the verification data is a message authentication code for the information for encryption key generation.

10. The method according to claim 8 , wherein the verification data is a message authentication code for the first encryption key.

11. The method according to claim 8 , wherein the image data is stored in the storage medium without encryption if the acquiring and authenticating step has failed to authenticate the information for encryption key generation.

12. The method according to claim 7 , wherein the secondary image data is thumbnail image data of the image data.

13. A non-transitory computer-readable medium storing a computer-executable program causing a computer to perform a data processing method, the method comprising the steps of:

inputting information for encryption key generation;

generating a first encryption key from the information for encryption key generation;

generating image data to be stored;

generating a session key based on the first encryption key;

encrypting the image data using the session key

generating secondary image data from the image data;

generating a second encryption key using information secretly held by the computer;

encrypting the secondary image data using the second encryption key; and

storing the encrypted image data and the encrypted secondary image data in the storage medium,

wherein in the session key generating step, the session key is generated using the first encryption key and a one-way function, the first time a session key is generated, and the session key is generated using the most recently generated session key and the one-way function, the second and subsequent times that a session key is generated, and the session key that is used to generate a next session key is destroyed, and

wherein in the first encrypting step, if different image data is encrypted, a different session key is used.