Key generating device and key generating method
According to an embodiment, a key generating device connected to an external device includes a generating unit configured to generate an encryption key; a first communicating unit configured to transmit and receive the encryption key to and from the external device; a storage unit configured to stores therein state information indicating a communication state with respect to an application using the encryption key; and a controller configured to make a control of changing a frequency at which the generating unit generates the encryption key or a frequency at which the first communicating unit transmits and receives the encryption key according to the state information.
1. A key generating device which is connected to an external device, comprising:
a processor configured to
generate a first encryption key shared with the external device by using a quantum key distribution technique,
generate a random number as a second encryption key independently of the generation of the first encryption key, and
transmit and receive the second encryption key to and from the external device through a link that is encrypted using the first encryption key; and
a memory configured to store therein session information including a communication state and a request throughput that represents a usage frequency of the second key of one or more key-use-sessions established with respect to an application using the second encryption key,
wherein the processor controls changing a generating frequency at which the second encryption key is generated and controls changing a transmitting/receiving frequency at which the second encryption key is transmitted or received, the control of said changing of the generating frequency and the control of said changing of the transmitting/receiving frequency being based on at least one of the number of key-use-sessions, each key-use-session having the communication state indicating a connected state and a total value of the request throughput that is requested for each of the key-use-sessions.
2. The device according to claim 1 , wherein the processors controls updating the usage frequency which is included in the session information stored in the memory in response to a request from the application, and changing the generating frequency or the transmitting/receiving frequency according to the updated usage frequency.
3. The device according to claim 1 , wherein the processor transmits and receives information to and from the application according to a predetermined session control protocol, wherein
the memory stores therein the session information of the key-use-sessions established according to the session control protocol.
4. The device according to claim 3 , wherein the session control protocol is a session initiation protocol (SIP).
5. The device according to claim 3 , wherein
the processor verifies a request from the application, and transmits and receives the information to and from the application when the request is verified.
6. The device according to claim 1 , wherein
the memory stores therein the session information of the key-use-sessions established with respect to an application which is provided with a function of storing the second encryption key in a storage.
7. The device according to claim 1 , wherein the processor determines, according to the session information, the external device to/from which the second encryption key is to be transmitted and received.
8. A key generating method performed in a key generating device connected to an external device, the method comprising:
generating a first encryption key shared with the external device by using a quantum key distribution technique;
generating a random number as a second encryption key independently of the generation of the first encryption key;
transmitting and receiving the second encryption key to and from the external device through a link that is encrypted using the first encryption key;
storing, in a memory, session information including a communication state and a request throughput that represents a usage frequency of the second key of one or more key-use-sessions established with respect to an application which uses the second encryption key; and
controlling, via a processor, changing a generating frequency of generating the second encryption key in the generating of the second encryption key and changing a transmitting/receiving frequency at which the second encryption key is transmitted or received, the control of said changing of the generating frequency and the control of said changing of the transmitting/receiving frequency being based on at least one of the number of key-use-sessions, each key-use-session having the communication state indicating a connected state and a total value of the request throughput that is requested for each of the key-use-sessions.