Host device and authentication method for host device
A first data generation unit generates identification key information (FKey) that may be decrypted from the identification key information (IDKey) using key management information (FKB) read from an authenticatee. A decryption unit decrypts encrypted secret identification information (E-SecretID) using the identification key information (FKey) to generate secret identification information (SecretID). A second data generation unit generates a first session key (Skey) using the first key information (Hkey) and a random number. A one-way conversion unit performs a one-way conversion process on the secret identification information (SecretID) using the generated first session key (SKey) to generate first one-way conversion data (Oneway-ID).
1. A host device assigned with identification key information and first key information, comprising:
a first data generation unit that generates identification key information that may be decrypted from the identification key information using key management information read from an authenticatee;
a decryption unit that decrypts encrypted secret identification information read from the authenticatee using the generated identification key information to generate secret identification information;
a random number generator that generates a random number;
a second data generation unit that generates a first session key using the first key information and the random number;
a one-way conversion unit that performs a one-way conversion process on the secret identification information using the generated first session key to generate first one-way conversion data; and
a verification unit that judges whether the first one-way conversion data and a second one-way conversion data received from the authenticatee match,
when the judgment result of the verification unit is affirmative, a one-way conversion process being conducted on the secret identification information and secret information to generate one-way conversion identification information.
2. A method of authenticating an authenticate in the host device assigned with identification key information and first key information, comprising:
generating, in a processor, identification key information that may be decrypted from the identification key information using key management information read from an authenticatee;
decrypting, in a processor, encrypted secret identification information read from the authenticatee using the identification key information to generate secret identification information;
generating a random number;
generating a first session key using the first key information and the random number;
performing a one-way conversion process on the secret identification information using the first session key to generate first one-way conversion data; and
judging whether the first one-way conversion data and a second one-way conversion data received from the authenticatee match; and
when the judgment result of the verification unit is affirmative, performing a one-way conversion process on the secret identification information and secret information to generate one-way conversion identification information.