Communication system and communication method for communication based on encryption capabilities of device
The present embodiments relate to a communication system, communication method, information processor, method, device, program, and recording medium which permit plural algorithms to be treated and which can impart expansibility to communications. A capability list stores a capability list in which capabilities regarding algorithms for encryption and decryption treated by a reader/writer are described. Similarly, a capability list stores a capability list in which capabilities regarding algorithms for encryption and decryption treated by an IC card are described. The reader/writer and the IC card exchange their mutual capability lists, select algorithms capable of securing a security level according to the importance of the data sent and received, and perform communications based on the selected algorithms. The present embodiments can be applied, for example, to a device that performs communications by the NFCIP method.
1. A first device for communication with a second device, comprising:
circuitry configured to:
send, to the second device, a capability list indicating capabilities regarding a plurality of encryption algorithms used by the first device;
determine an encryption algorithm of the plurality of encryption algorithms based on a security level that corresponds to an importance of data sent or received in the communication;
receive, from the second device, identification information and a first key; and
create a session key based on the first key and the identification information,
wherein the identification information corresponds to the determined encryption algorithm.
2. The first device according to claim 1 , wherein the circuitry is further configured to:
encrypt, after the reception of the identification information, the session key based on the first key; and
send the encrypted session key to the second device.
3. The first device according to claim 1 , wherein the capabilities include capabilities of a key sharing system and a cryptocommunication system.
4. The first device according to claim 3 , wherein the key sharing system is defined by at least one of Diffie-Hellman, Elliptic Curve Diffie-Hellman, Rivest, Shamir, Adleman (RSA), or a pre-shared key, and the cryptocommunication system is defined by at least one of Data Encryption Standard (DES) or Advanced Encryption Standard (AES).
5. The first device according to claim 1 , wherein the encryption algorithm has a priority based on difficulty to decipher the data encrypted by the encryption algorithm.
6. A method of information processing for a first device communicating with a second device, comprising:
sending, to the second device, a capability list indicating capabilities regarding a plurality of encryption algorithms used by the first device;
determining an encryption algorithm of the plurality of encryption algorithms based on a security level corresponding to an importance of data sent or received in the communication;
receiving, from the second device, identification information and a first key; and
creating a session key based on the first key and the identification information,
wherein the identification information corresponds to the determined encryption algorithm.
7. The method of information processing according to claim 6 , further comprising:
encrypting, after the reception of the identification information, the session key based on the first key; and
sending the encrypted session key to the second device.
8. The method of information processing according to claim 6 , wherein the capabilities include capabilities of a key sharing system and a cryptocommunication system.
9. The method of information processing according to claim 8 , wherein the key sharing system is defined by at least one of Diffie-Hellman, Elliptic Curve Diffie-Hellman, Rivest, Shamir, Adleman (RSA), or a pre-shared key, and the cryptocommunication system is defined by at least one of Data Encryption Standard (DES) or Advanced Encryption Standard (AES).
10. The method of information processing according to claim 6 , wherein the encryption algorithm has a priority based on difficulty to decipher the data encrypted by the encryption algorithm.
11. A non-transitory computer-readable medium having stored thereon, computer-executable instructions that when executed by a first device, cause the first device to execute operations, the operations comprising:
sending, to a second device, a capability list indicating capabilities regarding a plurality of encryption algorithms used by the first device;
determining an encryption algorithm of the plurality of encryption algorithms based on a security level corresponding to an importance of data sent or received in a communication between the first device and the second device;
receiving, from the second device, identification information and a first key; and
creating a session key based on the first key and the identification information,
wherein the identification information corresponds to the determined encryption algorithm.
12. The non-transitory computer-readable medium according to claim 11 , wherein the operations further comprising:
encrypting, after the reception of the identification information, the session key based on the first key; and
sending the encrypted session key to the second device.
13. The non-transitory computer-readable medium according to claim 11 , wherein the capabilities include capabilities of a key sharing system and a cryptocommunication system.
14. The non-transitory computer-readable medium according to claim 13 , wherein the key sharing system is defined by at least one of Diffie-Hellman, Elliptic Curve Diffie-Hellman, Rivest, Shamir, Adleman (RSA), or a pre-shared key, and the cryptocommunication system is defined by at least one of Data Encryption Standard (DES) or Advanced Encryption Standard (AES).
15. The non-transitory computer-readable medium according to claim 11 , wherein the encryption algorithm has a priority based on difficulty to decipher the data encrypted by the encryption algorithm.