Cryptographic device, system and method thereof
The invention provides a device with cryptographic function, which includes: a hardware unit, exhibiting hardware-intrinsic properties; a key generating unit, generating a private key according to the hardware-intrinsic properties, and generating a public key according to the private key, for exchanging public keys with an outside device to convert communication payload information into first encrypted information based on the received public key; and a session operational unit, establishing a session key configured to encrypt the first encrypted information into second encrypted information to be transmitted between the cryptographic device with cryptographic function and the outside device. The key generating unit further optionally generates a secret key according to the hardware-intrinsic properties for securing data at rest in the cryptographic device.
1. A cryptographic method, including:
providing hardware-intrinsic properties, wherein a drift in the value of the hardware-intrinsic properties are periodically marked and tracked;
generating a private key according to the hardware-intrinsic properties in a first device;
generating a public key according to the private key, into a second device for encrypting the communication payload information into first encrypted information based on the public key; and
encrypting the first encrypted information into second encrypted information according to a session key and the public key, to transmit the second encrypted information between the first and second devices with two cryptographical information-flow directions,
wherein the two cryptographical information-flow directions includes: the first device encrypting the first encrypted information to the second encrypted information according to the session key and the public key from the second device, and the second device encrypting the first encrypted information to the second encrypted information according to the session key and the public key from the first device.
2. The cryptographic method of claim 1 , further including: generating the session key when authenticating the first device with cryptographic function to connect the second device.
3. The cryptographic method of claim 1 , further including: identifying whether a user has a matched biometric feature for accessing the first device.