Communication device, communication method, and computer program product
According to an embodiment, a communication device includes a first manager, and a second manager, a first communication unit, a determination unit, a controller, and a second communication unit. The first manager shares a first cryptographic key with a first external device connected via a link. The second manager shares a second cryptographic key to be provided to an application, with the first external device and with a second external device connected via links. The first communication unit transmits the second cryptographic key to the first external device. The determination unit determines whether a device with which the second cryptographic key is to be shared is the first external device. If it is affirmative, the controller controls the second manager to share, as the second cryptographic key, a cryptographic key obtained by converting the first cryptographic key. The second communication unit provides the application with the second cryptographic key.
1. A communication device comprising:
a first manager to share a first cryptographic key with a first external device that is connected via a link;
a second manager to share a second cryptographic key that is provided to an application, with the first external device and with a second external device that is connected via a plurality of links;
a first communication unit to transmit to the first external device, the second cryptographic key being encrypted using the first cryptographic key;
a determination unit to determine whether a device with which the second cryptographic key is to be shared is the first external device;
a controller to control the second manager to share, as the second cryptographic key, a cryptographic key that is obtained by converting the first cryptographic key, when the device with which the second cryptographic key is to be shared is the first external device; and
a second communication unit to provide the application with the second cryptographic key, wherein
the controller further controls the second manager to convert the first cryptographic key when at least one of
a residual quantity of the first cryptographic key is equal to or greater than a first threshold, and
frequency of use of the first cryptographic key in encryption of the second cryptographic key is equal to or less than a second threshold.
2. The device according to claim 1 , wherein the first communication unit further transmits specific information that specifies the converted first cryptographic key to the first external device.
3. The device according to claim 1 , wherein the determination unit determines whether a device with which the application performs cryptographic communication is the first external device with reference to setup information on processing in which the first manager shares the first cryptographic key.
4. The device according to claim 1 , wherein the determination unit determines whether a device with which the application performs cryptographic communication is the first external device with reference to network information.
5. The device according to claim 1 , wherein the first manager shares the first cryptographic key based on quantum key distribution.
6. A communication method comprising:
sharing a first cryptographic key with a first external device that is connected via a link;
sharing a second cryptographic key that is provided to an application, with the first external device and with a second external device that is connected via a plurality of links;
transmitting the second cryptographic key to the first external device, the second cryptographic key being encrypted using the first cryptographic key;
determining whether a device with which the second cryptographic key is to be shared is the first external device, the second cryptographic key being provided to the application;
controlling the sharing of the second cryptographic key to share, as the second cryptographic key, a cryptographic key that is obtained by converting the first cryptographic key, when the device with which the second cryptographic key is to be shared is the first external device; and
transmitting the second cryptographic key to the application, wherein
the controlling includes controlling converting the first cryptographic key when at least one of
a residual quantity of the first cryptographic key is equal to or greater than a first threshold, and
frequency of use of the first cryptographic key in encryption of the second cryptographic key is equal to or less than a second threshold.
7. A non-transitory computer-readable medium including programmed instructions stored therein, wherein the instructions cause a computer to function as:
a first manager to share a first cryptographic key with a first external device that is connected via a link;
a second manager to share a second cryptographic key that is provided to an application, with the first external device and with a second external device that is connected via a plurality of links;
a first communication unit to transmit the second cryptographic key to the first external device, the second cryptographic key being encrypted using the first cryptographic key;
a determination unit to determine whether a device with which the second cryptographic key is to be shared is the first external device, the second cryptographic key being provided to the application;
a controller to control the second manager to share, as the second cryptographic key, a cryptographic key that is obtained by converting the first cryptographic key, when the device with which the second cryptographic key is to be shared is the first external device; and
a second communication unit to provide the application with the second cryptographic key, wherein
the controller further controls the second manager to convert the first cryptographic key when at least one of
a residual quantity of the first cryptographic key is equal to or greater than a first threshold, and
frequency of use of the first cryptographic key in encryption of the second cryptographic key is equal to or less than a second threshold.