Signature verification using unidirectional function

1. A signature verification system comprising:

a communication device; and

a verification device which provides verification of a signature generated by the communication device,

wherein the communication device and the verification device are connected to each other through a network,

wherein the communication device includes:

a first processor, and

a first memory including instructions that, when executed by the first processor, cause the first processor to perform first operations, including:

generating a first random number or acquiring a first random number from random number veneration hardware,

deriving a first hash value from the first random number using a unidirectional function,

generating a secret key and a public key of the communication device,

deriving a second hash value from a first combined data including first electronic data and a first certificate of the communication device, the first certificate of the communication device includes the first hash value, the public key of the communication device and an access information for having access to the communication device, using a unidirectional function,

generating a first signature using the secret key of the communication device with respect to the second hash value, and

transmitting the first electronic data, the first certificate and the first signature to the verification device occurs via a non-secure communication path, and

wherein the verification device includes:

a second processor; and

a second memory, including instructions that, when executed by the second processor, cause the second processor to perform second operations, including:

receiving a second electronic data, a second certificate and a second signature,

receiving the first certificate based on the access information,

comparing the second certificate with the first certificate, and

when the second certificate does no match the tint certificate, the second operations, further including:

discontinuing the verification of the signature generated by the communication device, and

when the second certificate matches the first certificate, the second operations, further including:

continuing the verification of the signature generated by the communication device.

2. The signature verification system of claim 1 ,

wherein when the second certificate matches the first certificate, the second operations, further including: generating a second random number or acquiring a first random number from random number generation hardware, and

generating first encrypted transmit data using the second random number and the public key of the communication device included with the first certificate, and

transmitting the first encrypted transmit data to the communication device,

wherein the first operations, further including:

receiving a first encrypted receive data from the verification device,

acquiring a decrypted second random number by decrypting the first encrypted receive data rising the secret key of the communication device,

generating second encrypted transmit data using the first random number and the decrypted second random number, and

transmitting the second encrypted transmit data to the verification device, and

the second operations, further including:

receiving a second encrypted receive data,

acquiring a decrypted first random number by decrypting the second encrypted receive data using the second random number,

deriving a derived first hash value from the first random number, and

comparing the derived first hash value with the first hash value included with the first certificate received from the communication device, and

when the derived first hash value does not match the first hash value received, the second operations, further including:

discontinuing the verification of the signature generated by the communication device, and

when the derived first bash value matches the first hash value received, the second operations, further including:

continuing the verification of the signature generated by the communication device.

3. The signature verification system of claim 2 ,

wherein the communication device includes a first storage unit that stores a common key shared by the communication device and the verification device,

wherein the verification device includes a second storage unit that stores the common key, and

the second operations further including;

generating the first encrypted transmit data using the second random number, the public key of the communication device included with the first certificate, and the common key, and

the first operations, further including:

acquiring the decrypted second random number by decrypting the first encrypted receive data using the secret key of the communication device and the common key.

4. The signature verification system of claim 2 , the second operations further including:

deriving a third hash value from the second combined data including the first electronic data and the first certificate of the communication device, using a unidirectional function,

deriving a fourth hash value by decrypting the second signature using the public key of the communication device included with the first certificate of the communication device,

comparing the third hash value with the fourth hash value, and

when the third hash value does not match the fourth hash value, the second operations further including:

discontinuing the verification of the signature generated by the communication device, and

when file third hash value matches with the fourth hash value, the second operations further including:

continuing the verification of the signature generated by the communication device.

5. The signature verification system of claim 1 , wherein the network includes a secure communication path and a non-secure communication path.

6. The signature verification system of claim 5 , wherein receiving the second electronic data, the second certificate and the second signature by the verification device occurs via the non-secure communication path.

7. The signature verification system of claim 2 , wherein the second encrypted transmit data is non-secure second encrypted transmit data.

8. The signature verification system of claim 2 , wherein the second encrypted receive data is non-secure second encrypted receive data.

9. A signature generation method in a communication device which is connectable to a verification device through a network and the verification device provides through the network, verification of a signature generated by the communication device, the signature generation method comprising:

the communication device perforating first operations, including:

generating a first random number or acquiring a first random number from random number generation hardware,

deriving a first hash value from the first random number using a unidirectional function,

generating a secret key and a public key of the communication device,

deriving a second hash value from a first combined data including first electronic data and a first certificate of the communication device, the first certificate of the communication device includes the first hash value, the public key of the communication device and an access information for having access to the communication device, using a unidirectional function,

generating a first signature using the secret key of the communication device with respect to the second hash value, and

transmitting the first electronic data, the first certificate and the first signature to the verification device occurs via a non-secure communication path, and

the verification device performing second operations, including:

receiving a second electronic data, a second certificate and a second signature,

receiving the first certificate based on the access information,

comparing the second certificate with the first certificate, and

when the second certificate does not match the first certificate, the second operations, further including:

discontinuing the verification of the signature generated by the communication device, and

when the second certificate matches the first certificate, the second operations, further including;

continuing the verification of the signature generated by the communication device.

10. A machine readable non-transitory storage media comprising;

at least one storage medium having stored thereon instructions that, when executed by a communication device which is connectable to a verification device through a network and the verification device provides through the network, verification of a signature generated by die communication device, cause the communication device to perform first operations, including:

generating a first random number or acquiring a first random number from random number generation hardware,

deriving a first hash value from the first random number using a unidirectional function,

generating a secret key and a public key of me communication device,

deriving a second hash value from a first combined data including first electronic data and a first certificate of the communication device, the first certificate of the communication device includes the first hash value, the public key of the communication device and an access information tor having access to the communication device, using a unidirectional function,

generating a first signature using the secret key of the communication device with respect to the second hash value, and

transmitting the first electronic data, the first certificate and the first signature to the verification device occurs via a non-secure communication path; and

another storage medium having stored thereon instructions that, when executed by the verification device, cause the verification device to perform second operations, inducting:

receiving a second electronic data, a second certificate and a second signature,

receiving the first certificate based on the access information,

comparing the second certificate with the first certificate, and

when the second certificate does not match the first certificate, the second operations, further including:

discontinuing the verification of the signature generated by the communication device, and

when the second certificate matches the first certificate, the second operations, further including:

continuing the verification of the signature generated by the communication device.