WO2005104430A1 - 個人情報管理装置、分散鍵記憶装置、個人情報管理システム - Google Patents
個人情報管理装置、分散鍵記憶装置、個人情報管理システム Download PDFInfo
- Publication number
- WO2005104430A1 WO2005104430A1 PCT/JP2005/007695 JP2005007695W WO2005104430A1 WO 2005104430 A1 WO2005104430 A1 WO 2005104430A1 JP 2005007695 W JP2005007695 W JP 2005007695W WO 2005104430 A1 WO2005104430 A1 WO 2005104430A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- key
- personal information
- shared key
- unit
- shared
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0894—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
- H04L9/0897—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
- G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
- G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
- G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
- G06K19/077—Constructional details, e.g. mounting of circuits in the carrier
- G06K19/07749—Constructional details, e.g. mounting of circuits in the carrier the record carrier being capable of non-contact communication, e.g. constructional details of the antenna of a non-contact smart card
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/085—Secret sharing or secret splitting, e.g. threshold schemes
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/60—Digital content management, e.g. content distribution
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
Definitions
- the present invention relates to a personal information management device for managing personal information, and more particularly, to protection of personal information when the device is lost.
- Patent Document 1 discloses a system for invalidating, for example, a SIM (Subscriber Identification Module) card mounted on a wireless communication device such as a mobile phone.
- SIM Subscriber Identification Module
- the memory of the SIM card stores personal data of the owner in addition to the ID code, and further stores a unique invalidation code. If the SIM card is lost, the owner sends an invalidation code from another phone. Then, after the authentication of this code, the SIM card locks the data in the memory of the SIM card and makes it unusable. This prevents unauthorized use and leakage of personal data by others.
- SIM Subscriber Identification Module
- Patent Document 1 Japanese Patent Application Laid-Open No. 11-177682
- Patent Document 2 JP-A-2002-91301
- Non-Patent Document 1 A. Shamir, "How to Share a secret, Comm. Assoc. Comput. Mach., vol.22, no.ll, pp.612— 613, 1979.
- the number of digits that a human can memorize as a password is at most about 10 digits, and the password is exposed by a brute force attack or the user forgets the password. Therefore, there is a problem that the lock cannot be released.
- the present invention prevents the user from having to input a password or erase the personal information, prevents other people from viewing the personal information, and protects the confidentiality of the personal information even if the mobile device is lost. It is an object of the present invention to provide a personal information management device, a distributed key storage device, a personal information management system, a personal information management method, a computer program, a recording medium, and an integrated circuit that can perform the above operations.
- the present invention relates to a personal information management device for managing personal information, comprising: an information storage means for storing the encrypted personal information; Shared key storage means for storing the second shared key among the first and second shared keys generated based on a secret sharing method using a decryption key used for decrypting personal information; Link confirmation means for confirming whether or not communication is possible with the shared key storage device storing the shared key, and acquiring the first shared key from the shared key storage device when communication is confirmed. Acquiring means, decryption key generation means for generating the decryption key based on the secret sharing method using the first shared key and the second shared key, and encryption using the generated decryption key. Decoding means for decoding the personal information obtained. The invention's effect
- the personal information management device of the present invention having the above-described configuration, restricts restoration of personal information based on the secret sharing method to a case where the personal information management device and the shared key storage device can communicate with each other. Can be.
- the shared key storage device is fixed to a specific place such as the home of the user of the personal information management device, and the personal information management device has a communication range with the shared key storage device only within the home. If wireless communication is performed, the restoration of the personal information can be restricted to the home. Further, if the personal information management device performs wireless communication with a communication range of about one meter with the distributed key storage device attached to the user's portable object, the personal information management device may Restoration of information can be limited to the case where the user wears the personal information management device and the portable object so that they are within a range of about 1 meter.
- the link confirmation unit receives, within a predetermined communication range, a link request unit that transmits a link request to the distributed key storage device, and receives a response to the link request from the distributed key storage device. It may include a link response accepting unit and a determining unit that, when receiving the response, determines that communication with the distributed key storage device has been confirmed.
- the personal information management device determines whether or not the personal information can be restored based on the secret sharing method by determining whether the link request is received by the shared key storage device, and transmitting the link response as a response to the link confirmation means. Can be determined based on whether or not the power is received.
- the shared key storage device is fixed at a specific location, sends a packet to the personal information management device within a predetermined communication range at predetermined time intervals
- the link confirmation means includes:
- the information processing apparatus may include a packet receiving unit that receives the packet, and a determining unit that determines that communication with the shared key storage device has been confirmed when the packet is received.
- the personal information management device can determine whether the personal information can be restored by the secret sharing method based on whether the link confirmation unit receives the packet.
- the shared key storage device holds confirmation information for confirming whether or not communication is possible, and the link confirmation means is stored in the shared key storage device within a predetermined communication range.
- a reading unit that reads the confirmation information, and a determining unit that determines that communication with the distributed key storage device has been confirmed when the confirmation information can be read.
- the personal information management device can determine whether the personal information can be restored by the secret sharing method based on the ability to read the confirmation information.
- the shared key storage device is an IC tag attached to a portable object of the owner of the personal information management device, and the reading unit is held by the IC tag within a wireless reach. Yes The confirmation information may be read.
- the personal information management device can restrict the restoration of the personal information by the secret sharing method when the personal information management device is within the wireless range of the IC tag.
- the link confirmation unit may include an address storage unit storing an IP address of the own device, an address obtaining unit obtaining an IP address of the distributed key storage device, and an IP address of the own device.
- An address determining unit that determines whether or not the IP address of the shared key storage device belongs to the same subnet; and determines that communication with the shared key storage device can be confirmed if the IP address of the shared key storage device is determined to belong to the same subnet.
- the personal information management device can restrict the restoration of the personal information by the secret sharing method to a case where the personal information belongs to the same subnet as the shared key storage device.
- the link confirmation unit When the link confirmation unit confirms that communication is possible, the link confirmation unit periodically confirms whether communication with the shared key storage device is possible, and the personal information management device further confirms that communication is not possible.
- the link confirmation unit there may be provided erasing means for erasing the decryption key generated by the decryption key generating means and the personal information decrypted by the decrypting means.
- the personal information management device can disable browsing of the personal information when communication with the shared key storage device becomes impossible.
- the personal information management device can prevent an unauthorized state in which the personal information is browsed even when communication with the shared key storage device is disabled. Further, the personal information management device further holds the decryption key, generates the first and second shared keys based on a secret sharing scheme using the decrypted key, and deletes the decrypted key.
- the apparatus may further include a generating unit, a shared key transmitting unit that transmits the first shared key to the shared key storage device, and a writing unit that stores the second shared key in the shared key storage unit.
- the personal information management device can generate the decryption key.
- the personal information management device may further include shared key receiving means for receiving the second shared key, and writing means for storing the received second shared key in the shared key storage means. .
- the personal information management device can acquire the shared key from the outside
- the information storage means further stores encrypted additional personal information
- the personal information management device further uses an additional decryption key used for decrypting the encrypted additional personal information.
- K, n additional shared key storage means for storing one additional shared key among the n additional additional shared keys generated based on the (k, n) threshold secret sharing method; Of the (n-1) additional shared keys other than! /, And the difference is stored without duplication.
- Link confirmation means, and additional acquisition means for acquiring an additional shared key from each of the (k1) additional shared key storage apparatuses when communication with the (k1) or more additional shared key storage apparatuses is confirmed.
- a shared key storage device of the present invention is a shared key storage device that manages a shared key generated based on a secret sharing method, and uses a decryption key used for decrypting encrypted personal information to perform a secret sharing method.
- the personal information management device includes communication means for performing communication for confirming whether communication is possible, and transmission means for transmitting the first shared key to the personal information management device.
- restoration of personal information by the secret sharing method performed by the personal information management device can be limited to a case where the personal information management device and the shared key storage device can communicate with each other.
- the communication unit may include a request receiving unit that receives a link request from the personal information management device, and a response transmitting unit that transmits a response to the link request.
- the link request is received by the shared key storage device, and the link confirmation means receives the link response, in which the personal information management device restores the personal information by the secret sharing method. Can be restricted.
- the distributed key storage device is fixed at a specific location, and the communication means transmits a packet to the personal information management device within a predetermined communication range at predetermined time intervals.
- the restoration of the personal information by the secret sharing method performed by the personal information management device is limited to a case where the packet transmitted by the communication means can be received by the personal information management device. Can be.
- the shared key storage device may hold confirmation information for confirming whether communication is possible, and the communication unit may transmit the confirmation information to the personal information management device within a predetermined communication range. .
- the restoration of personal information by the secret sharing method performed by the personal information management device can be limited to a case where the personal information management device can read the confirmation information.
- the shared key storage device is an IC tag attached to a portable object of the owner of the personal information management device, and the communication unit is configured to communicate with the personal information management device within a wireless reach.
- the confirmation information may be transmitted.
- restoration of personal information by the secret sharing method performed by the personal information management device can be limited to a case where the personal information management device is within the wireless reach of the IC tag.
- the personal information management system is a personal information management system including a personal information management device for managing personal information and a distributed key storage device, wherein the distributed key storage device stores the encrypted personal information.
- First shared key storage means for storing the first shared key among the first and second shared keys generated based on a secret sharing scheme using a decryption key used for decryption of the private key;
- First link confirmation means for confirming whether communication with the information management device is possible, and transmitting the first shared key to the personal information management device when it is confirmed that communication with the personal information management device is possible. Transmitting means, the personal information management device comprising: an information storage means for storing the encrypted personal information; and a second shared key storage for storing the second shared key!
- Second link confirming means for confirming; acquiring means for acquiring the first shared key from the shared key storage device when it is confirmed that communication with the shared key storage device is possible; A decryption key generating means for generating the decryption key based on a secret sharing method using a second shared key; and a decryption means for decrypting the encrypted personal information using the generated decryption key.
- the personal information management method includes the first and second personal information generated based on a secret sharing method using encrypted personal information and a decryption key used for decrypting the encrypted personal information.
- a personal information management method used in a personal information management device that stores said second shared key among shared keys said personal information management method comprising: A link confirmation step for confirming whether or not communication is possible; an acquisition step for acquiring the first shared key from the shared key storage device when it is confirmed that communication is possible; a first shared key and the second shared key.
- the computer program according to the present invention includes the encrypted personal information and the encrypted A computer program used in a personal information management device storing the second shared key among the first and second shared keys generated based on a secret sharing method using a decryption key used for decrypting personal information.
- the recording medium of the present invention stores the computer program.
- the restoration of personal information by the secret sharing method can be limited to the case where the personal information management device and the shared key storage device can communicate.
- the shared key storage device is fixed to a specific place such as the home of the user of the personal information management device, and the personal information management device has a communication range with the shared key storage device only within the home. If wireless communication is performed, the restoration of the personal information can be restricted to the home. Further, if the personal information management device performs wireless communication with the shared key storage device added to the user's portable object in a communication range of about 1 meter, the personal information management device may Restoration of personal information can be limited to the case where the user wears the personal information management device and the portable object so that they are within a range of about one meter.
- the integrated circuit of the present invention is an integrated circuit for managing personal information.
- the integrated circuit stores and stores the encrypted personal information, and decrypts the encrypted personal information.
- a shared key storage unit that stores the second shared key among the first and second shared keys generated based on the secret sharing method using a decryption key used for the storage unit; and stores the first shared key.
- Link confirmation means for confirming whether or not communication is possible with the shared key storage device; acquisition means for acquiring the first shared key from the shared key storage device when communication is confirmed; (1)
- a decryption key generating means for generating the decryption key based on a secret sharing scheme using the shared key and the second shared key, and the personal information encrypted using the generated decryption key.
- Decoding means for decoding. According to this configuration, the restoration of personal information by the secret sharing method can be limited to a case where the integrated circuit and the shared key storage device can communicate with each other.
- the shared key storage device is fixed to a specific place such as a home of the user of the integrated circuit, and the integrated circuit communicates with the shared key storage device by wireless communication having a communication range only in the home. If so, restoration of the personal information can be restricted to the home. Further, if the integrated circuit performs wireless communication having a communication range of about 1 meter with the distributed key storage device attached to the user's portable object, the integrated circuit restores the personal information. In addition, it is possible to limit the case where the user wears the integrated circuit and the portable object such that the integrated circuit and the portable object are within a range of about 1 meter.
- FIG. 1 is a diagram showing a schematic configuration of a personal information management system according to the present invention.
- FIG. 2 is a block diagram of a mopile device.
- FIG. 3 is a diagram showing an example of encryption control information stored in an encryption control information storage unit.
- FIG. 4 is a diagram showing an example of a personal information file stored in a personal information storage unit.
- FIG. 5 is a diagram showing an example of key identification information and a shared key stored in a shared key storage unit.
- FIG. 6 is a block diagram showing a configuration of a home device.
- FIG. 7 is a block diagram showing a configuration of an IC tag.
- FIG. 8 is a diagram showing an example of personal information stored in a personal information storage unit.
- FIG. 9 is a flowchart showing the encryption processing performed by the personal information management system.
- FIG. 10 is a flowchart showing a decryption process by the personal information management system.
- FIG. 11 is a block diagram showing a configuration of a personal information management system according to a modification of the embodiment.
- FIG. 12 is a block diagram showing a configuration of a personal information management system according to a modification of the embodiment.
- FIG. 13 is a diagram showing the concept of backup of a shared key and encrypted personal information in a mobile device.
- the personal information management system 1 restricts browsing of personal information stored in the mobile device to the home of the user of the mobile device, and also restricts the user to the user of the mobile device. It protects personal information for viewing outside the home or for viewing by anyone other than the user.
- the mobile device 20 the home device 30, the IC tag 40 on the glasses, and the coat IC tag 50 attached to the watch and IC tag 60 attached to the watch.
- Home device 30 is a personal computer arranged in the home where a wireless LAN (Local Area Network) is laid.
- LAN Local Area Network
- the mopile device 20 is a PDA (Personal Digital Assistant) equipped with a digital camera, is connected to the home device 30 via the wireless LAN, and has an IC tag 40 to an IC tag that is wirelessly connected to the wireless LAN. 60, wirelessly communicate with each other, and store the user's schedule of the mobile device 20, an address book including telephone numbers and e-mails for communication, images taken by the user using the digital camera, and personal information. Do
- the mopile device 20 encrypts the personal information using an encryption key, and distributes the encryption key to generate two shared keys, One of the two shared keys is held, and the other shared key is held by the home device 30. However, dark It is assumed that the number key and the decryption key are the same key.
- the mopile device 20 is held by each of the mopile device 20 and the home device 30 and can acquire two shared keys, that is, when the mopile device 20 and the home device 30 are in the home, the two shared keys A decryption key identical to the encryption key is generated from the key, and the personal information is decrypted using the decryption key.
- the mobile device 20 encrypts the personal information using an encryption key and distributes the encryption key to generate four shared keys.
- One of the four shared keys is held, and the other three shared keys are held by the IC tags 30 to 50 attached to the glasses, the coat, and the watch belonging to the user, respectively. If, for example, three of the four shared keys, including the shared key held by the own device, can be obtained, the decryption key is restored from the three shared keys, and the personal information is used by using the decryption key. Decrypt.
- the mobile device 20 includes a personal information storage unit 201, a key generation unit 202, an encryption unit 203, a key distribution unit 204, a distributed key storage unit 205, a transmission / reception unit 206, a key recovery unit 207, and a decryption unit.
- the mopile device 20 is, specifically, a computer system including a microprocessor, a ROM, a RAM, and the like.
- the RAM stores a computer program. By operating in accordance with the microprocessor power and the computer program, the mopile device 20 achieves its function.
- the device information storage unit 211 includes a ROM, and stores device identification information “DID-1” for identifying the mobile device 20.
- the device identification information is previously written in the device information storage unit 211 when the mobile device 20 is shipped.
- the encryption control information storage unit 214 stores encryption control information written by the control unit 216, which is a parameter for encrypting personal information.
- the cryptographic control information includes a cryptographic control information number that identifies the cryptographic control information, key identification information that is identification information of a key used for encryption, and a key that is a type of method for storing a distributed cryptographic key.
- a distribution type a distribution key number which is the number of distribution keys when distributing the encryption keys, a key threshold value which is a value indicating how many of the plurality of distribution keys are collected before the encryption key can be restored, and Key storage destination information indicating the number of shared key 1) devices that hold shared keys.
- the key distribution type When the key distribution type is “1”, it indicates that the device connected via the wireless LAN holds the distributed key, and when the key distribution type is “2”, it indicates that the IC tag holds the distributed key. .
- the device connected via the wireless LAN is the home device 30 identified by the device identification information “DID-2”.
- the key storage destination information is device identification information of a device connected via a wireless LAN when the key distribution type is “1”, and a tag ID for identifying an IC tag when the key distribution type is “2”.
- the encryption control information storage unit 214 stores two pieces of encryption control information, encryption control information 231 and encryption control information 241 as shown in FIG.
- the encryption control information 231 includes an encryption control information number “1” (232) for identifying the encryption control information, key identification information “KID-A” (233), a key distribution type “1” (234), and a distribution key. It includes a number “2” (235), a key threshold “2” (236), and key storage location information “DID-2” (237).
- the key storage destination information “DID-2” is device identification information for identifying the home device 30, and is also held in the home device 30.
- the encryption control information 241 includes an encryption control information number “2” (242) for identifying encryption control information, key identification information “KID-B” (243), a key distribution type “2” (244), The number “4” (245), the key threshold “3” (246), the key storage destination information “TID_1” (247), the key storage destination information “TID_2” (248), and the key storage destination information “TID— 3 "(249).
- the key storage destination information "TID_1" is a tag ID for identifying the IC tag 40, and is also held in the IC tag 40.
- the key storage destination information "TID_2" is a tag ID for identifying the IC tag 50, and the IC tag 5
- the key storage destination information “TID-3” is also stored in the IC tag 60, and is also stored in the IC tag 60.
- the personal information acquisition unit 213 is, specifically, a digital camera.
- the personal information acquisition unit 213 receives a shooting instruction from the control unit 216 and shoots an image. After the shooting, a personal information name that is the name of the shot image is obtained. And a personal information file including the personal information name, the cipher control information number having a value of “0” indicating no encryption and the image, and the personal information storage unit. Write to 201.
- the personal information acquisition unit 213 generates a personal information name that is not duplicated with the one stored in the personal information storage unit 201.
- the encryption control information number in the personal information file associates the personal information file with the encryption control information that is stored in the encryption control information storage unit 214 and includes the same encryption control information number.
- the key generation unit 202 receives a key generation instruction including the encryption control information number from the control unit 216, randomly generates an encryption key, transmits the generated encryption key to the encryption unit 203, and The encryption control information number and the key distribution unit 204 are transmitted.
- the encryption unit 203 receives the personal information name from the control unit 216, and receives the encryption key from the key generation unit 202.
- the encryption unit 203 reads out the personal information identified by the received personal information name from the personal information storage unit 201, and applies the encryption algorithm E1 to the read personal information using the received encryption key.
- the personal information is generated, and the encrypted personal information is overwritten on the personal information stored in the personal information storage unit 201 and corresponding to the personal information name.
- the personal information storage unit 201 is specifically a non-volatile memory, and stores a personal information file.
- the personal information storage unit 201 stores personal information files 251 to 253 shown in FIG.
- the personal information file 251 contains the personal information name "" photo 001.JPG “j (261), the encryption control identification number" 1 "(262), and the personal information" E1 (image data 001, KEY-A) "( 263).
- El data, key
- El indicates encrypted data generated by applying the encrypted algorithm E1 to the data using the key.
- the personal information file 252 contains the personal information name "" address book. TXT “j (264), the encryption control identification number" 1 "(265), and the personal information" E1 (text 002, KEY—A) "(266 ).
- the personal information file 253 stores the personal information name "" photo 003. JPG "j (267), the encryption control identification number" 2 "(268), and the personal information" image data 003 "(269). Including.
- the key distribution unit 204 receives the encryption key and the encryption control information number from the key generation unit 202, and distributes the received encryption key into n (n is a natural number) distributed keys as described later.
- Non-patent Document 1 which is performed based on Shamir's threshold secret sharing method. This method is based on k points on a k—linear curve with the encryption key S as a y intercept. Is the shared key. By gathering k arbitrary shared keys, the k-linear curve can be specified, and the encryption key S, which is the y-intercept, can be obtained.
- Non-Patent Document 1 When n (n is a natural number) points on the k-linear curve that are larger than k are used as shared keys, if k of the n shared keys are known, then The encryption key, which is the y-intercept, can be obtained.
- the key distribution unit 204 generates a distributed key by the following steps.
- n is the received encryption control information number stored in the encryption control information storage unit 214.
- k is the key threshold value in the encryption control information.
- the key distribution unit 204 receives the encryption key from the key generation unit 202, and associates one of the generated n distributed keys with the key identification information in the encryption control information, and To memorize it.
- the key distribution unit 204 refers to the encryption control information 231 including the encryption control information number 232 having the value S “l”, As “n”, “2” which is the value of the distributed key number 235 is obtained, and as “k”, “2” which is the value of the key threshold 236 is obtained.
- the key distribution unit 204 generates two distributed keys “KEY-Al” and “KEY-A2” based on the encryption key, and replaces “KEY-A2” with key identification information included in the encryption control information 231. It is transmitted to the shared key storage unit 205 together with “KID-A” (233).
- KEY A1 is the above (1, S)
- KEY A2 is the above (2, S).
- key distribution section 204 refers to encryption control information 241 including encryption control information number 242 having the value “2”, and n As the value of the distributed key number 245, and “3” as the value of the key threshold value 246 as k.
- the key distribution unit 204 generates four distributed keys “KEY—Bl”, “KEY—B2”, “K ⁇ — ⁇ 3”, and “ ⁇ — ⁇ 4” based on the encryption key, and encrypts “ ⁇ — ⁇ 4”.
- the key identification information “KID- ⁇ ” (243) included in the control information 241 is stored in the shared key storage unit 205.
- “ ⁇ —Bl”, key storage destination information “TID—1” (247) included in the encryption control information 241 and key identification information “KID—B” (KID—B) included in the encryption control information 241 ( 243) is transmitted to the IC tag communication unit 212 to perform wireless communication with the IC tag indicated by the key distribution type “2” (244) included in the encryption control information 241.
- the key distribution unit 204 transmits a transmission instruction including “KEY-B2”, “TID-2” and “KID-B” to the IC tag communication unit 212, and transmits “KEY-B3” and “TID-3”. And a transmission instruction containing "KID-B" The information is transmitted to the IC tag communication unit 212.
- the shared key storage unit 205 is a non-volatile memory, and stores the key identification information written by the key sharing unit 204 and the shared key in association with each other.
- the shared key storage unit 205 stores the key identification information acquired from the external device and the shared key in association with each other via the transmission / reception unit 206.
- the shared key storage unit 205 stores the key identification information “KID-A” (281
- IC tag communication section 212 receives a transmission instruction including a shared key, key storage destination information, and key identification information from key distribution section 204, and sends an IC tag identified by the key storage destination information to the IC tag identified by the key storage destination information.
- the key identification information and the shared key are transmitted using wireless communication.
- a read instruction including the key storage destination information is received from the key restoration unit 207, and the key identification information stored in the IC tag is identified from the IC tag identified by the key storage destination information using wireless communication. Attempt to read with shared key.
- the IC tag communication unit 212 transmits the read key identification information and the shared key to the key restoration unit 207. If it cannot be read, the IC tag communication unit 212 sends the key.
- the key value indicating the error S “0” is transmitted to the key restoration unit 207.
- a read response including the read tag ID is transmitted to the link confirmation unit 210.
- the read including the value “0” as the tag ID is performed. The response is transmitted to the link confirmation unit 210.
- the transmission / reception unit 206 receives a transmission instruction including the shared key, the key storage destination information, and the key identification information from the key distribution unit 204, and sends a transmission instruction using the wireless LAN to the device identified by the key storage destination information. , Key storage destination information, key identification information, and a shared key.
- transmitting / receiving section 206 receives a read instruction including key storage destination information from key restoration section 207, and transmits the key storage destination to a device identified by the key storage destination information using a wireless LAN.
- a distributed key read instruction including the information and the key identification information is transmitted.
- the transmitting / receiving unit 206 performs the shared key read operation.
- the key identification information and the shared key included in the response are transmitted to key restoring section 207.
- transmitting / receiving section 206 transmits key identification information and a shared key whose value is “0” to key restoring section 207.
- the link confirmation unit 210 receives a link confirmation instruction including the key distribution type and the key storage destination information from the control unit 216, and confirms the establishment of a link with the device indicated by the received key storage destination information. .
- the link confirmation unit 210 reads the device identification information “DID-1” from the device information storage unit 211, and transmits the home device 30 via the transmission / reception unit 206.
- a response request packet containing the device identification information “DID-1” is sent to the home device 30, and the time required for a response packet to the sent response request packet to return from the home device 30 is measured. If it is within the time (for example, within 1 second), it is determined that the link has been established, and it is known that the mobile device 20 is in the same home as the home device 30.
- the link confirmation unit 210 transmits a read request including the key storage destination information to the IC tag communication unit 212.
- the link confirmation unit 210 receives a read response from the IC tag communication unit 212 as a response to the read request.
- the read response includes the same tag ID as the key storage destination information, it is determined that the link is established.
- the read response does not include the same tag ID as the key storage destination information, it is determined that the link is not established.
- the user input acquisition unit 215 includes various keys such as a power key, an encryption control information input start key, an encryption control information input end key, a camera shooting key, a menu key, a numeric keypad, an alphabet key, a selection key, and a cursor movement key.
- the control unit 216 detects a key operation by the user and outputs information corresponding to the detected key operation to the control unit 216.
- the user After pressing the encryption control information input start key, the user inputs "1" for the key distribution type, inputs “2" for the number of distributed keys, and inputs "2" for the key threshold. Enter “DID-2" for the key storage destination information and press the encryption control information input end key.
- the user input acquisition unit 215 sends the encryption control information input start instruction, key distribution type, number of distributed keys, key threshold, key storage destination information, and encryption control input end instruction to the control unit 216 in order according to the input. Send.
- the user input acquiring unit 215 When detecting that the camera photographing key is pressed, the user input acquiring unit 215 transmits a camera photographing instruction to the control unit 216.
- the user input acquisition unit 215 accepts the input of the encryption control information number and transmits it to the control unit 216.
- the user input acquisition unit 215 receives an input of a personal information name relating to personal information to be decrypted by a key operation of the user, and transmits the personal information name to the control unit 216.
- the key deletion control unit 209 deletes the encryption key remaining in the key generation unit 202, the key distribution unit 204, the encryption unit 203, deletes the distribution key remaining in the key distribution unit 204, and decrypts the key remaining in the key restoration unit 207.
- the key and the shared key are deleted, and the decryption key remaining in the decryption unit 208 is deleted.
- Key deletion control section 209 receives the key identification information from key distribution section 204, deletes the encryption key remaining in key generation section 202 and key distribution section 204, and stores the key remaining in key distribution section 204. Delete the key.
- a link confirmation request is periodically transmitted to the link confirmation unit 210, and when the link is less than the key key threshold, the encryption key is erased from the encryption unit 203 and the display unit 217 is displayed. On the other hand, instruct to stop displaying personal information.
- the key restoring unit 207 receives, from the control unit 216, a personal information name indicating the personal information to be decrypted.
- the key restoration unit 207 acquires a personal information file including a personal information name from the personal information storage unit 201, and extracts an encryption control information number from the acquired personal information file.
- the key restoration unit 207 reads the encryption control information identified by the extracted encryption control information number from the encryption control information storage unit 214.
- the key restoring unit 207 attempts to obtain a shared key from each of the devices indicated by the (number of shared keys—1) key storage information included in the read encryption control information, and stores the shared key. Part 205 In the case where the shared key including the shared key stored in the key has been successfully obtained, the decryption key is restored from the obtained shared key, and the decrypted key and the personal information name are decrypted. Transmit to section 208.
- the key restoration unit 207 transmits the key identification information “KID-A” (233) and the key storage destination information “DID-2” (237). ) Is transmitted to the transmission / reception unit 206.
- the key restoring unit 207 transmits a shared key read response including the key identification information “KID-A” (233), the key storage destination information “DID-2” (237), and the shared key in response to the shared key read instruction. Received from transmission / reception unit 206.
- the transmitting / receiving section 206 cannot receive the shared key “KEY-Al” from the home device 30, the shared key received by the key restoring section 207 from the transmitting / receiving section 206 is (0, 0). It has become.
- the key recovery unit 207 When the key recovery unit 207 receives a shared key that is not (0, 0) from the transmission / reception unit 206, the key recovery unit 207 stores the shared key corresponding to the key identification information “KID-A” in the shared key storage unit 205. And the shared key “KEY—Al” acquired from the home device 30 and the shared key “KEY—Al” obtained from the home device 30 are obtained. A decryption key “KEY-A” is generated using the shared key “KEY-A2” read from the storage unit 205, and the generated decryption key and the personal information name are transmitted to the decryption unit 208.
- the key restoration unit 207 stores the key identification information “KID_B” (243) and the key storage destination information “TID_1” (247).
- the shared key reading instruction including the key is transmitted to the IC tag communication unit 212.
- the key restoration unit 207 includes key identification information “KID-B” (243), key storage destination information “TID-1” (247), and a shared key “KEY-Bl” in response to the shared key read instruction.
- the shared key read response is received from the IC tag communication unit 212.
- the IC tag communication unit 212 cannot receive the shared key from the IC tag 40 having the tag ID power “TID-1”, the shared key received by the key restoration unit 207 is “KEY”. —Bl ”and (0, 0), so that the key recovery unit 207 holds the received shared key when receiving a shared key other than (0, 0).
- the key restoration unit 207 transmits a shared key read instruction including the key identification information “KID-B” (243) and the key storage destination information “TID-2” (248) to the IC tag communication unit 212, and As a response to the distributed key readout instruction, a distributed key readout response including “KID-B”, “TID-2”, and a distributed key “KEY-B2” is received from the IC tag communication unit 212.
- the shared key received by the key restoration unit 207 is not “KEY-B2” but (0, 0). Therefore, when receiving a shared key other than (0, 0), the key restoring unit 207 holds the received shared key.
- the key restoring unit 207 transmits a distributed key reading instruction including the key identification information “KID-B” (243) and the key storage destination information “TID-3” (249) to the IC tag communication unit 212, and A distributed key read response including “KID-B”, “TID-3”, and a distributed key “KEY-B3” is received from the IC tag communication unit 212 as a response to the distributed key read instruction.
- the shared key received by the key restoration unit 207 is not "KEY-B3" but (0, 0).
- the key restoration unit 207 holds the received shared key.
- the key restoring unit 207 reads out the shared key “KEY-B4” corresponding to the key identification information “KID-B” from the shared key storage unit 205.
- the key recovery unit 207 obtains “KEY—Bl”, “KEY—B2”, “KEY—B2” when “3” or more shared keys, which is the value of the key threshold 246 included in the encryption control information 241, can be obtained.
- “KEY-B” is generated using three of the obtained shared keys, and the generated decryption key and the personal information name are The information is transmitted to the decoding unit 208.
- the key restoring unit 207 specifically generates a decryption key using Lagrange interpolation.
- Lagrangian interpolation is widely used, so a detailed description is omitted.
- the key restoring unit 207 is k shared keys obtained from the n shared keys (i, Si) (l ⁇ i ⁇ n) generated by the key sharing unit 204 (x , f) (l ⁇ j ⁇ k), a k-th order interpolation curve passing through all k coordinate points
- the decryption key P (0) is calculated based on!
- Decryption section 208 receives the personal information name and the decryption key from key restoration section 207.
- the decryption unit 208 reads the encrypted personal information identified by the received personal information name from the personal information storage unit 201, and applies a decryption algorithm D1 to the read encrypted personal information using the received decryption key. By generating the personal information, the personal information is overwritten on the encrypted personal information stored in the personal information storage unit 201 and corresponding to the personal information name.
- the decryption algorithm D1 is an algorithm for decrypting the ciphertext generated by the encryption algorithm E1, and the encryption key used for the encryption algorithm E1 and the decryption key used for the decryption algorithm D1 are Let it be the same key.
- the control unit 216 controls the overall operation of the device 20.
- control executed by the control unit 216 will be described separately for pre-key generation control, encryption control, and decryption control.
- the control unit 216 receives an encryption control information input start instruction, a key distribution type, the number of distributed keys, a key threshold, key storage destination information, and an encryption control input end instruction from the user input acquisition unit 215, and Key identification information is generated in the mobile device 20 so as to be unique, and the generated cryptographic control information number and key identification information, and the received key distribution type, the number of distributed keys, the key threshold, and the key storage destination information are generated. Is generated and stored in the cryptographic control information storage unit 214.
- the control unit 216 When receiving a camera photographing instruction from the user input acquiring unit 215, the control unit 216 transmits a photographing instruction to the personal information acquiring unit 213, and the personal information acquiring unit 213 transmits the photographed image and the encrypted image. After the personal information file including the encryption control information number with the value “0” indicating that the encryption control information has been generated is received, the encryption control information number is received from the user input acquisition unit 215, and the Rewrite the encryption control information number whose value is “0” with the received encryption control information number.
- the control unit 216 determines whether or not the personal information file containing the personal information whose encryption control information number is other than “0” and which is not encrypted is stored in the personal information storage unit 201. Then, the corresponding personal information file is read from personal information storage unit 201, and the personal information name is transmitted to encryption unit 203.
- the control unit 216 reads the encryption control information indicated by the encryption control information number included in the read personal information file from the encryption control information storage unit 214.
- the control unit 216 sends a link confirmation instruction including a key distribution type and key storage destination information to each of the (shared key number) 1 key storage destination information included in the read encryption control information. Send to 210.
- the control unit 216 causes the key generation unit 202 to generate a key including the key control information number. Send instructions. The transmission of the key generation instruction from the control unit 216 to the key generation unit 202 becomes a trigger, and the personal information is encrypted in the encryption unit 203.
- the control unit 216 receives the personal information name related to the personal information to be decrypted from the user input acquisition unit 215, transmits the personal information name to the decryption unit 208, and transmits the personal information file including the personal information name to the decryption unit 208.
- the encryption control information number read from the personal information storage unit 201 and included in the personal information file is extracted, and the encryption control information number is transmitted to the key restoration unit 207.
- the control unit 216 transmits the encryption control information number to the key restoration unit 207, and the encrypted personal information is decrypted by the decryption unit 208.
- the display unit 217 is a display that displays characters, images, moving images, and the like.
- the home device 30 includes a transmission / reception unit 301, a shared key storage unit 302, a link check unit 303, and a device information storage unit 304.
- the home device 30 is, specifically, a computer system including a microprocessor, a ROM, a RAM, and the like.
- the RAM stores a computer program. By operating in accordance with the microprocessor power and the computer program, the home device 30 achieves its function.
- the transmission / reception unit 301 communicates with the mobile device 20 using a wireless LAN.
- the transmission / reception unit 301 receives the device identification information, which is the key storage destination information, the key identification information, and the shared key from the mobile device 20, and associates the received key identification information with the shared key and distributes the shared key. It is stored in the key storage unit 302.
- the transmission / reception unit 301 receives, from the mobile device 20, device identification information as key storage destination information and a distributed key readout instruction including key identification information.
- the transmission / reception unit 301 When receiving the read instruction, the transmission / reception unit 301 reads the shared key corresponding to the key identification information included in the read instruction from the shared key storage unit 302, and reads the device identification information from the device information storage unit 304. “DID-2” is read, and a shared key read response including the read device identification information, key identification information, and shared key is transmitted.
- the shared key storage unit 302 stores the key identification information written by the transmitting / receiving unit 301 and the shared key in association with each other.
- the link confirmation unit 303 receives a response request packet including the device identification information “DID-1” for identifying the mobile device 20 from the mobile device 20 via the transmission / reception unit 301, and receives the response request packet from the device information storage unit 304.
- the device identification information “DID-2” is read out, and a reply packet including the device identification information “DID-2” is transmitted to the mobile device 20 identified by the device identification information “DID-1”.
- the device information storage unit 304 is configured from a ROM, and stores device identification information "DID-2" for identifying the home device 30.
- the device identification information is previously written in the device information storage unit 304 when the home device 30 is shipped.
- the IC tag 40 includes a wireless communication unit 41, a tag ID storage unit 42, and a shared key storage unit 43.
- the wireless communication unit 41 performs communication with the mobile device 20 by wireless communication.
- the tag ID storage unit 42 is composed of a ROM and stores a tag ID “TID_1” (45) for identifying the IC tag 40.
- the tag ID is previously written in the tag ID storage unit 42 when the IC tag 40 is shipped.
- the tag ID “TID-1” (45) is read from the tag ID storage unit 42 by the mobile device 20 via the wireless communication unit 41.
- the shared key storage unit 43 stores the key identification information written by the unit device 20 and the shared key via the wireless communication unit 41.
- the shared key storage unit 43 stores the key identification information “KID_B” (46) and the shared key “KEY_B1” (47) in association with each other, as shown in FIG.
- the IC tag 50 has the same configuration as the IC tag 40, and includes a wireless communication unit 51, a tag ID storage unit 52, and a shared key storage unit 53. And the tag ID “TID-2” (55), and the shared key storage unit 53 associates the key identification information “KID-B” (56) with the shared key “KEY-B2” (57) as an example. Then, memorize it.
- the IC tag 60 has a configuration similar to that of the IC tag 40, and includes a wireless communication unit 61, a tag ID storage unit 62, and a shared key storage unit 63, and stores the tag ID.
- the section 62 stores the tag ID “TID-3” (65)
- the shared key storage section 63 stores the key identification information “KID-B” (66) and the shared key “KEY-B3” (67) as an example. Are associated and stored.
- the other description of the IC tags 50 and 60 is the same as the description of the IC tag 40, and thus the description is omitted.
- the operation of the personal information management system 1 will be described separately for key generation preprocessing for generating a decryption key, encryption processing for encrypting personal information, and decryption processing for encrypted personal information.
- the user of the mopile device 20 inputs the encryption control information using the key provided in the user input acquisition unit 215.
- the user after pressing the encryption control information input start key, the user inputs "1" for the key distribution type, inputs "2" for the number of distributed keys, and “2" for the key threshold. Enter “DID-2" for the key storage destination information and press the encryption control information input end key.
- the user input acquisition unit 215 determines the key distribution type, distribution The number of keys, the key threshold value, and the key storage destination information are transmitted to the control unit 216.
- the control unit 216 receives the key distribution type, the number of distributed keys, the key threshold value, and the key storage destination information from the user input acquisition unit 215, and randomly generates an encryption control information number and key identification information.
- the cryptographic control information including the key distribution type, the number of distributed keys, the key threshold value, the key storage destination information, the generated cryptographic control information number, and the generated key identification information, as already shown in FIG. It is generated and stored in the encryption control information storage unit 214.
- the user of the mopile device 20 presses a camera shooting button provided in the user input acquisition unit 215 outside the home.
- the user input acquisition unit 215 detects the press of the camera shooting key and transmits a camera shooting instruction to the control unit 216.
- the control unit 216 transmits a shooting instruction to the personal information acquisition unit 213.
- the personal information acquisition unit 213 receives the shooting instruction from the control unit 216, shoots an image, randomly generates a personal information name that is the name of the shot image, and stores the personal information name and the value. Is generated, and the personal information file including the encryption control information number indicating that there is no encryption and the image is generated and written into the personal information storage unit 201.
- the user After capturing the image, if the user wants to encrypt the captured image, the user inputs an encryption control information number using a key provided in the user input acquisition unit 215.
- the user input acquisition unit 215 transmits the encryption control information number to the control unit 216.
- the control unit 216 receives the encryption control information number from the user input acquisition unit 215, and stores the encryption control information number of the personal information file generated by the personal information acquisition unit 213 from the encryption control information received from “0”. Rewrite with a number.
- control unit 216 controls the encryption control information number of the personal information file generated by the personal information acquisition unit 213 from “0” in advance without receiving the encryption control information number from the user input acquisition unit 215.
- the encryption control information number held by the unit 216 can be rewritten.
- the control unit 216 selects in advance whether the encryption control information number is received from the user input acquisition unit 215 by the user.
- the encryption control information storage unit 214 stores the encryption control shown in FIG. Information is stored, and a personal information storage unit 201 stores a personal information file 291 and a personal information file 295 as shown in FIG.
- the personal information file 291 contains an image data 001 (294), a personal information name that identifies the image data 001 (294), and a photo control number “picture 001. JPGJ (292) and an image data 001 (294). 1 ”(293), and the personal information file 295 contains the personal information name“ photo 002. JPGJ (296) and image data 002 (298) ”that identifies the image data 002 (298) and the image data 002 (298). It includes the encryption control information number “2” (297) relating to the encryption key.
- control unit 216 stores the personal information file including the encrypted personal information whose encryption control information number is other than "0" and the personal information storage unit 201. Then, it is determined whether or not the force is applied (step S101).
- step S101 If it is determined in step S101 that the corresponding personal information file has been stored (step S101: NO), step S101 is repeated.
- step S101 When it is determined in step S101 that the corresponding personal information file is stored
- control unit 216 reads the corresponding personal information file from personal information storage unit 201 (step S102).
- Control unit 216 transmits the personal information name in the read personal information file to encryption unit 203 (step S103).
- the control unit 216 reads the encryption control information indicated by the encryption control information number included in the read personal information file from the encryption control information storage unit 214 (Step S104). The control unit 216 initializes the internal counter value i with 1 (step S105). The control unit 216 determines the key distribution type and the i-th key storage destination information included in the read encryption control information. Is transmitted to the link confirmation unit 210.
- the link confirmation unit 210 attempts to establish a link with the device identified by the i-th key storage destination information as described above (step S106).
- step S107: NO If the link establishment has failed (step S107: NO), the process returns to step S101. If the link has been successfully established (step S107: YES), the internal counter value i is incremented by 1 (step S108).
- the control unit 216 determines whether or not the internal counter value i is larger than (the number of shared keys included in the encryption control information—1) (Step S109).
- step S109 NO
- the process proceeds to step S106.
- step S109 When i is larger than (the number of shared keys included in the encryption control information—1) (step S109: YES), the control unit 216 transmits a key generation instruction including the key control information number to the key generation unit 202.
- the key generation unit 202 receives the key generation instruction, randomly generates an encryption key (step S110), and transmits the encryption control information number and the generated encryption key to the key distribution unit 204.
- the encryption key is also transmitted to the encryption unit 203.
- the encryption unit 203 receives the encryption key from the encryption unit 203, reads a personal information file corresponding to the personal information name from the personal information storage unit 201, and extracts personal information to be encrypted from the personal information file.
- the encryption unit 203 encrypts the personal information using the received encryption key to generate encrypted personal information, and corresponds to the personal information name stored in the personal information storage unit 201. Replaces the personal information in the personal information file with the encrypted personal information (step S111).
- the key distribution unit 204 receives the encryption control information number and the encryption key from the key generation unit 202, and transmits the encryption control information identified by the received encryption control information number from the encryption control information storage unit 214. read out.
- the key distribution unit 204 distributes the encryption key to the number of distribution keys included in the read encryption control information (step S112).
- the key distribution unit 204 initializes the internal counter value j with the value “1” (Step S113).
- the key distribution unit 204 transmits a transmission instruction including the j-th key storage destination information included in the encryption control information, the key identification information, and the distribution key to be stored in the device, to the key included in the encryption control information.
- the data is transmitted to the communication unit corresponding to the distribution type.
- the communication unit is the transmission / reception unit 206. Then, the transmitting / receiving section 206 transmits the key identification information and the shared key to the device indicated by the j-th key storage destination information (step S114).
- the transmission / reception unit 301 of the home device 30 receives the key identification information and the shared key, associates the received key identification information with the shared key, and stores it in the shared key storage unit 302 (step S115).
- the communication unit is the IC tag communication unit 212, and the IC tag communication unit 212 replaces the key identification information and the shared key with the j-th key. Sent to the IC tag indicated by the storage location information.
- the wireless communication unit of the IC tag indicated by the j-th key storage destination information receives the key identification information and the shared key, and associates the received key identification information with the shared key to distribute the IC tag. Store it in the key storage.
- the key distribution unit 204 increments the internal counter value j by 1 (step S116).
- the key distribution unit 204 determines whether or not j is larger than (the number of distributed keys included in the encryption control information—1) (step S117).
- step S114 If j is equal to or smaller than (the number of shared keys included in the encryption control information—1), the process proceeds to step S114.
- the key distributing section 204 associates the key identification information with the shared keys to be stored by the own device, The key is stored in the shared key storage unit 205 (step S118), and a key deletion instruction including the encryption control information number is transmitted to the key deletion control unit 209.
- the key distribution unit 204 stores the key identification information in the distributed key storage unit 205 in association with the distributed key to be stored by the own device.
- the key deletion control unit 209 receives the key identification information from the key distribution unit 204, and deletes the encryption keys remaining in the key generation unit 202 and the key distribution unit 204 (step S119).
- the key deletion control unit 209 deletes the shared key remaining in the key distribution unit 204 (Step S120)
- Steps S101 and S102 The personal information storage unit 201 shown in FIG. 8 stores the personal information including the image data 001 (294) which is the cryptographic control information number S "1" and is not encrypted. Since the information file 291 is stored, the control unit 216 determines that the corresponding personal information file 291 is stored, and extracts the personal information file 291 from the personal information storage unit 201.
- Step S103 The control unit 216 transmits the “photograph 001. JPGJ (292)” which is the personal information name included in the personal information file 291 to the encryption unit 203.
- Step S104 The control unit 216 reads from the encryption control information storage unit 214 the encryption control information 231 having the encryption control information number power S “l”.
- Step S106 The control unit 216 transmits a link confirmation instruction including the key distribution type “1” and the first key storage destination information “DI D_2j” to the link confirmation unit 210. An attempt is made to establish a link with the home device 30 identified by “DID_2”. Here, it is assumed that the link has been established.
- Step S110 The key generation unit 202 generates the encryption key "KEY-A” (Step S110), and uses the encryption control information number "1" and the generated encryption key "KEY-A” as the key distribution unit.
- the encryption key “KEY_A” is also transmitted to the encryption unit 203.
- Step S111 The encryption unit 203 receives the encryption key “KEY-A” from the encryption unit 203, reads out the personal information file 291 corresponding to the personal information name “Photo 001. JPGJ” from the personal information storage unit 201, and Then, the image data 001 (294), which is the personal information to be encrypted, is extracted from the personal information file, and the image data 001 (294) is encrypted using the encryption key “KEY_A”, and the encrypted personal information is obtained. (Image data 001, KEY-A) is generated, and the image data 001 of the personal information file 291 stored in the personal information storage unit 201 is replaced with E1 (image 001, KEY-A).
- Step S112 The key distribution unit 204 receives the encryption control information number “1” and the encryption key “KEY-A” from the key generation unit 202, and receives the encryption identified by the encryption control information number “1”.
- the control information 231 is read from the encryption control information storage unit 214.
- the key distribution unit 204 converts the encryption key “KEY-A” into two distribution keys of “KEY-Al” and “KEY-A2”, which are the number of distributed keys (235) included in the cryptographic control information 231.
- Spread. (Step S114)
- the key distribution unit 204 transmits the first key storage destination information “DID-2” and the key identification information “KID-A” included in the encryption control information 231 and the distribution key “KE A transmission instruction including Y_Alj is transmitted to the transmission / reception unit 206.
- Step S115 The transmitting / receiving unit 301 of the home device 30 identified by the key storage destination information “DID-2” receives the key identification information and the shared key, and compares the received key identification information and the shared key. The corresponding key is stored in the shared key storage unit 302.
- Step S118 The key distribution unit 204 associates the key identification information “KID-A” with the distribution key “KEY-A2” and stores it in the distribution key storage unit 205.
- the user of the mobile device 20 uses the key provided in the user input acquisition unit 215 to input the personal information name of the browsed! / Personal information.
- the user input acquisition unit 215 transmits the input personal information name to the control unit 216.
- the control unit 216 receives the personal information name from the user input acquisition unit 215.
- the control unit 216 transmits the personal information name to the decryption unit 208 (Step S131).
- the control unit 216 reads out the personal information file including the personal information name of the data that needs to be decrypted from the personal information storage unit 201, and extracts the encryption control information number included in the personal information file (Step S132) ).
- the control unit 216 transmits the extracted encryption control information number to the key restoration unit 207 (Step S).
- the key recovery unit 207 receives the encryption control information number, and reads the encryption control information including the encryption control information number from the encryption control information storage unit 214 (Step S134).
- the key restoration unit 207 initializes the internal counter values i and j with the value “1” (step S135).
- the key restoration unit 207 determines whether or not i is larger than the number of shared keys (step S136).
- step S136 If i is larger than the number of shared keys (step S136: YES), the process ends.
- step S136 the key decompression unit 207 instructs the link confirmation unit 210 to send the key distribution type included in the encryption control information, the i-th key storage destination information, Is transmitted to the link confirmation unit 210.
- the link confirmation unit 210 attempts to establish a link with the device identified by the i-th key storage location information as described above (step S137).
- step S138 If the link establishment has failed (step S138: NO), the process proceeds to step S147 described later.
- step S138 If the link establishment is successful (step S138: YES), the key restoration unit 207 sends a shared key read instruction including the i-th key storage destination information included in the encryption control information and key identification information to the key recovery unit. The information is transmitted to the communication unit corresponding to the key distribution type included in the encryption control information.
- the communication unit is the transmission / reception unit 206.
- the transmission / reception unit 206 transmits a distributed key reading instruction including key identification information to the i-th key.
- the data is transmitted to the device indicated by the storage location information (step S139).
- the communication unit is an IC tag communication unit 212.
- the IC tag communication unit 212 transmits key identification information from the IC tag identified by the key storage destination information. And read the shared key.
- the device identified by the key storage destination information reads out the shared key corresponding to the received key identification information stored in the shared key storage unit (Step S140).
- the device transmits the read shared key to the mobile device 20 (Step S141).
- the communication unit receives the shared key and transmits the received shared key to the key restoration unit 207
- the key restoration unit 207 receives and holds the shared key (step S142).
- the key restoration unit 207 increments the internal counter value j by 1 (step S143).
- the key restoration unit 207 determines whether or not the internal counter value is equal to or larger than the key threshold value included in the encryption control information (Step S144).
- step S144 NO
- the key restoration unit 207 increments the internal counter value i by 1 (step S147), and proceeds to step S136.
- step S144 If j is equal to or larger than the key threshold value (step S144: YES), key recovery section 207 generates a decryption key from the received distributed key (step S145).
- the key restoration unit 207 sends the generated decryption key to the decryption unit 208.
- the decryption unit 208 receives the decryption key and reads out a personal information file corresponding to the personal information name from the personal information storage unit 201.
- the decryption unit 208 decrypts the encrypted personal information included in the personal information file using the decryption key (step S146), and transmits the decrypted personal information to the display unit 217.
- the display unit 217 receives the personal information and displays the personal information.
- the key restoration unit 207 and the link confirmation unit 210 repeat the above-described steps S134 to S144, and when the number of links for which a link has been successfully established is smaller than the number of keys (key threshold value-1), the decryption key is decrypted.
- the personal information deleted and decrypted from the unit 208 is deleted from the decrypting unit 208 and the display unit 217, and the display unit 217 stops displaying the personal information.
- the generation of a shared key related to an encryption key and the generation of a decryption key (same as an encryption key) using the shared key An apparatus for generating a shared key and an apparatus for generating a decryption key using the shared key may be separated.
- the home device 1300 is installed in the home of the user of the mopile device 1200, and the home device 1300 can communicate only with devices in the home via a wireless LAN within the home, which is a wireless range.
- Home device 1300 stores content that is confidential information, and personal information storage unit 1
- a key generation unit 1302 an encryption unit 1303, a key distribution unit 1304, a transmission / reception unit 1305, a distribution key storage unit 1306, an encryption control information storage unit 1307, and a link confirmation unit 1308.
- the key generation unit 1302 generates and generates an encryption key for encrypting the content.
- the encryption key is transmitted to the encryption unit 1303 and the key distribution unit 1304.
- the encryption unit 1303 generates encrypted content by encrypting the content using the encryption key, and transmits the encrypted content to the mobile device 1200 via the transmission / reception unit 1305.
- the encryption control information storage unit 1307 stores the identification information of the home device 1300 and the identification information of the device 1400 as the key distribution number of the encryption key (for example, the value “4”), the key threshold (for example, the value “3”), and the key storage destination identification. It includes the identification information and the identification information of the device 1500.
- the key distributing unit 1304 uses the encryption key based on the value of the key sharing number stored in the encryption control information storage unit 1307 so that the encryption key can be restored from the number of distributed keys equal to or larger than the key threshold value.
- the first shared key to the fourth shared key are generated by distributing the first shared key, and the first shared key is stored in the shared key storage unit 1306.
- the first shared key stored in the shared key storage unit 1306 is read by the mobile device 1200 via the transmission / reception unit 1305.
- Key distribution section 1304 transmits the second distributed key to mopile device 1200, transmits the third distributed key to device 1400, and transmits the fourth distributed key to device 1500.
- the key distribution unit 1304 reads the encryption control information from the encryption control information storage unit 1307, transmits the read encryption control information to the mobile device 1200 via the transmission / reception unit 1305, and stores the encryption control information in the encryption control information storage unit 1307. Delete the encryption control information in
- the link confirmation unit 1308 confirms a link with a link confirmation unit included in a device as a communication partner prior to data transmission / reception.
- the device 1400 includes a transmission / reception unit 1401, a shared key storage unit 1402, and a link confirmation unit 1403.
- the transmission / reception unit 1401 receives the third shared key from the home device 1300, and stores the third shared key in the shared key storage unit 1402.
- the third shared key stored in shared key storage section 1402 is transmitted to monophone device 1200 via transmission / reception section 1401.
- the link check unit 1403 checks the link with the link check unit of the communication partner device before transmitting / receiving data.
- the device 1500 includes a transmission / reception unit 1501 and a shared key storage unit 1502. Consisting of
- the transmission / reception unit 1501 receives the fourth shared key from the home device 1300, and
- the fourth shared key stored in the shared key storage unit 1502 is transmitted to the mobile device 1200 via the transmission / reception unit 1501.
- the link check unit 1503 checks the link with the link check unit of the communication partner device before transmitting / receiving data.
- the mobile device 1200 includes a transmitting / receiving unit 1201, a personal information storage unit 1202, a shared key storage unit 1203, an encryption control information storage unit 1204, a key recovery unit 1205, a decryption unit 1206, and a display unit 1207. And a link confirmation unit 1208.
- the transmission / reception unit 1201 communicates with the home device 1300, the device 1400, and the device 1500.
- the link confirmation unit 1208 confirms the link with the link confirmation unit of the communication partner device before transmitting / receiving data to / from the home device 1300, the device 1400, and the device 1500.
- the personal information storage unit 1202 stores the encrypted content received from the home device 1300 via the transmission / reception unit 1201.
- the shared key storage unit 1203 stores the second shared key received from the home device 1300 via the transmission / reception unit 1201.
- Encryption control information storage section 1204 stores the encryption control information received from home device 1300 via transmission / reception section 1201.
- the key recovery unit 1205 reads the encryption control information from the encryption control information storage unit 1204, and stores the identification information of the home device 1300 as the key storage destination identification in the read encryption control information.
- the link confirmation unit 1208 is instructed to confirm the link between the device indicated by the identification information of the device 1400 and the identification information of the device 1500.
- the key recovery unit 1205 tries to obtain a distributed key from the home device 1300, device 1400, or device 1500 whose link has been confirmed, via the transmission / reception unit 1201, and obtains the home device 1300, device 1400, and device If three or more of the shared keys held by each of the 1500 and the mopile device 1200 can be obtained, the key recovery unit 1205 returns
- a decryption key (the same key as the encryption key) is generated from the three shared keys, and transmitted to the decryption unit 1206.
- the decryption unit 1206 reads the encrypted content from the personal information storage unit 1202, , The content is generated by decrypting the decryption key.
- the decoding unit 1206 transmits the content to the display unit 1207, and the display unit 1207 displays the received content on a display.
- the key recovery unit 1205 periodically obtains the first shared key, the third shared key, and the fourth shared key as described above, and obtains four shared keys including the second shared key. If three or more of these cannot be obtained, the decryption key held by the decryption unit 1206 is erased, the content retained by the decryption unit 1206 and the display unit 1207 are erased, and the content Stop the display.
- the monopile device 1200 is such that the mopile device 1200 can communicate with the home device 1300, and in addition to the home device 1300, at least one of the device 1400 and the device 1500 is connected to the home device 1300.
- the home device 1300 In addition to the home device 1300, at least one of the device 1400 and the device 1500 is connected to the home device 1300.
- three or more shared keys are obtained, the decryption key is restored from the obtained shared key, and the encrypted content can be decrypted using the decryption key.
- the user of the device 1200 can view the content only in the home.
- the home device 1300 which is the device that has generated the shared key, holds one of the generated shared keys. May not be held.
- the personal information management system 2000 shown in FIG. 12 includes a premium content transmitting device 2300 installed in a ticket center that sells concert tickets, and a mopile device 2200 owned by a user who has purchased the concert tickets. And a gate device 2400 installed at the concert venue, which allows the ticket purchaser to view premium content, which is special content that cannot be viewed in general, only within the concert venue.
- the gate device 2400 is used for wireless communication in which the inside of the concert venue is within wireless reach.
- the premier content transmission device 2300 includes a personal information storage unit 2301, a key generation unit 2302, an encryption unit 2303, a key distribution unit 2304, and a transmission / reception unit 23 that store premier content. 05, an encryption control information storage unit 2307, and a link confirmation unit 2308.
- the key generation unit 2302 generates an encryption key for encrypting the premier content, and transmits the generated encryption key to the encryption unit 2303 and the key distribution unit 2304.
- the encryption unit 2303 generates encrypted content by encrypting the premium content using the encryption key, and transmits the encrypted content to the mobile device 2200 via the transmission / reception unit 2305.
- the encryption control information storage unit 2307 includes the key distribution number of the encryption key (for example, the value “2”), the key threshold value (for example, the value “2”), and the identification information of the gate device 2400 as the key storage destination identification. It stores encryption control information.
- the key distribution unit 2304 stores the encryption key into two based on the value of the key distribution number stored in the encryption control information storage unit 2307 so that the encryption key can be restored from the number of distribution keys equal to or larger than the key threshold value.
- the first shared key and the second shared key are generated by sharing, the first shared key is transmitted to the mobile device 2200, and the second shared key is transmitted to the gate device 2400.
- the key distribution unit 2304 reads the encryption control information from the encryption control information storage unit 2307, transmits the read encryption control information to the mobile device 20 via the transmission / reception unit 2305, and stores the encryption control information in the encryption control information storage unit 2307. Delete the encryption control information in
- the link confirmation unit 2308 confirms the link with the link confirmation unit of the communication partner device before transmitting / receiving data.
- the gate device 2400 includes a transmission / reception unit 2401, a shared key storage unit 2402, a radio unit 2403, and a link confirmation unit 2404.
- the transmitting / receiving section 2401 receives the second shared key from the premium content transmitting apparatus 2300, and stores the received second shared key in the shared key storage section 2402.
- the wireless unit 2403 performs wireless communication with the mono device 2200.
- the second shared key stored in shared key storage section 2402 is read from mobile device 2200 via wireless section 2403.
- the link confirmation unit 2404 confirms a link with the link confirmation unit of the communication partner device before transmitting / receiving data.
- the mopile device 2200 includes a transmission / reception unit 2201, a personal information storage unit 2202, and a shared key storage. It comprises a unit 2203, an encryption control information storage unit 2204, a key recovery unit 2205, a decryption unit 2206, a display unit 2207, a wireless unit 2208, and a link confirmation unit 2209.
- the personal information storage unit 2202 stores the encrypted content received from the premium content transmitting device 2300 via the transmission / reception unit 2201.
- the shared key storage unit 2203 stores the first shared key received from the premium content transmitting device 2300 via the transmission / reception unit 2201.
- the encryption control information storage unit 2204 stores the encryption control information received from the premier content transmission device 2300 via the transmission / reception unit 2201.
- Radio section 2208 performs radio communication with gate apparatus 2400.
- the key restoration unit 2205 reads the encryption control information from the encryption control information storage unit 2204, and performs wireless communication with the gate device 2400 identified by the key storage destination identification in the read encryption control information and the wireless unit 2208. Next, the gate device 2400 attempts to acquire the second shared key, which is the shared key.
- the key restoring unit 2205 determines the second shared key and the first shared key stored in the shared key storage unit 2203.
- a decryption key (the same key as the above-mentioned encryption key) is generated and transmitted to the decryption unit 2206.
- the decryption unit 2206 reads the encrypted content from the personal information storage unit 2202, and decrypts the encrypted content using the decryption key to generate the premier content.
- Decoding section 2206 transmits the premier content to display section 2207, and display section 2207 displays the received content on a display.
- the key restoration unit 2205 periodically attempts to read the second shared key held in the shared key storage unit 2402 in the gate device 2400 via the wireless unit 2208, and reads the second shared key. If the decryption fails, the decryption unit 2206 deletes the decryption key stored therein, and the decryption unit 2206 and the display unit 2207 delete the premium content held by the decryption unit.
- the mopile device 2200 can perform the first communication only in the concert venue where the mopile device 2200 can wirelessly communicate with the gate device 2400 and can acquire the second shared key from the gate device 2400. And the decrypted key is restored from the second shared key, and the encrypted premium content can be decrypted using the decryption key.
- the user No. 00 can view the premium content only in the concert venue, and cannot view the premium content when leaving the concert venue.
- the personal information acquisition unit 213 is a digital camera.
- the present invention is not limited to this, as long as it can acquire personal information.
- the personal information acquisition unit 213 has a function of connecting to a network, acquires the video and audio from a distribution server that distributes video and audio via the network, and acquires the personal information. It may be stored in the storage unit 201.
- the personal information acquisition unit 213 includes a television tuner, receives a broadcast wave broadcast by a broadcasting device by the television tuner, demodulates the received broadcast wave, performs signal processing, acquires a video signal, and the like,
- the acquired video signal or the like may be digitized and used as the personal information storage unit 201.
- the personal information is not limited to an image captured by a digital camera as described above, but is input by the user to the monophone device 20, such as a name, a date of birth, and biometric information. And other acquired information such as handle name, address, occupation, and history information such as purchase history, communication history, medical history and drug history. Further, the personal information is not limited to the above, and may be a copyrighted work such as a movie which is purchased by an individual and restricted to be used only at home. /.
- the method of key distribution performed by the key distribution unit is not limited to the method described above.
- the secret key is simply represented by the sum of M shared keys. According to this method, the original secret key can be obtained only when all M shared keys are available.
- the link establishment may be confirmed using a method different from that described above. For example, if ad-hoc wireless communication such as PAN (Personal Area Network) arrives, it may be determined that a link is established! /.
- PAN Personal Area Network
- the mobile device 20 in order to detect that the mobile device 20 is in the home, for example, it may be detected that the mobile device 20 is on the same subnet as the home device 30 using a protocol such as broadcast or UPnP (Universal Plug and Play).
- UPnP Universal Plug and Play
- the mobile device 20 obtains the IP address of the home device 30, determines whether the obtained IP address is on the same subnet as the IP address of the mobile device 20, and determines If it is an address, it is determined that the link has been established. Thereby, the mopile device 20 can detect that it is in the home where the home device 30 is installed.
- the mobile device 20 may obtain the IP address of the home device 30 directly from the home device 30, or may obtain the IP address from a device other than the home device 30, such as a DNS (Domain Name System) server.
- DNS Domain Name System
- detection may be performed by receiving an ad hoc wireless communication in which the reach of the radio wave is restricted.
- a ping may be transmitted between the home device 30 and the mobile device 20 and a determination may be made based on whether or not the time until it returns is within a predetermined time, for example, 1 second.
- the personal information name is associated with the personal information, and the personal information is identified by using the personal information name.
- a unique identification number may be assigned to each personal information, and each personal information may be identified using the identification number.
- the user when the user specifies personal information desired to be encrypted and decrypted, the user inputs a personal information name using a key provided in the user input acquisition unit 215, but as described above, The identification number may be input, or a candidate for personal information to be decrypted may be displayed on the display unit 217, and the user may select one of the candidate personal information.
- the mobile device 20 encrypts the acquired personal information when all the devices that should hold the distribution key are available, but the present invention is not limited to this.
- the key generation unit 202 immediately after the personal information acquisition unit 213 acquires the personal information, the key generation unit 202 generates an encryption key, and the encryption unit 203 encrypts the personal information using the encryption key. It may be stored in the personal information storage unit 201.
- the key sharing unit 204 generates a plurality of shared keys from the encryption key, and assigns one shared key to the shared key.
- the storage unit 205 may store another shared key and transmit it to all the devices that should hold the shared key.
- the encrypted personal information is decrypted when the user desires to view the encrypted personal information.
- the present invention is not limited to this. is not.
- the link confirmation unit 210 of the mobile device 20 can confirm the link with the link confirmation unit 303 of the home device 30, the link is associated with the encryption control information having a value of “1” and the personal information is stored.
- the personal information stored in the unit 201 is decrypted using a decryption key, and when the link cannot be confirmed, the personal information is encrypted with an encryption key that is the same key as the decryption key, The encryption key and the decryption key may be deleted.
- the personal information may be encrypted and stored at home, and may be decrypted when used.
- the personal information may be encrypted every time the personal information is updated, The encryption may be performed at predetermined time intervals.
- the timing at which the mobile device 20 encrypts the personal information and the timing at which the shared key generated from the encryption key used for the encryption are stored in the home device 30 are determined by the mobile device 20. The time may be stored, or the mopile device 20 may be taken out of the home. Further, when the mobile device 20 is at home, a user instruction may be used as a trigger to perform encryption.
- the mopile device 20 includes an authentication information holding unit that holds authentication information such as a password and biometrics information related to the user in advance, and an authentication information receiving unit that receives an input of authentication information from the user.
- An authentication means for performing authentication using the authentication information wherein the user of the mobile device 20 inputs the authentication information, and the authentication means holds the input authentication information and the authentication information holding means.
- the personal information is encrypted using an encryption key, the encryption key is distributed, and the distributed key is transmitted.
- the information may be stored in an IC tag or the like attached to the belongings carried.
- a trigger signal is output from the door of the home, and immediately before the user brings the mopile device 20 and passes through the door of the home, the mopile device 20 gives the belongings that the user is carrying at that time.
- the shared key may be stored in each attached IC tag.
- the number of shared keys for distributing decryption keys and the key threshold for restoring secrets are not limited to the values used in the embodiment, but appropriate values according to the system. You may choose.
- the number of shared keys is set to 5, and the mobile device 20 distributes the secret key to five, stores one in the mobile device 20, and stores the remaining one in the mobile device 20. Is stored in each of the four home devices. If the key threshold is set to 2, if at least one of the five home devices 30 is powered on, the mobile device 20 acquires the distributed key for the power of the home device that is powered on, and the mobile device 20 obtains the distributed key. It is possible to generate a decryption key using the shared key stored therein and the obtained shared key, and to decrypt the encrypted personal information using the decrypted key.
- the encryption control information includes a key distribution type described as "1 * 2" indicating a combination (AND) of the key distribution type "1" and the key distribution type "2". And the key storage destination information corresponding to the key distribution type “1”.
- the shared key may be obtained from each of the devices corresponding to the shared type “2”. In this case, for example, if the key threshold value is “3”, the mobile device 20 can acquire both the shared key held by the home device 30 and the shared key held by the IC tag 40 attached to the glasses. In this case, a decryption key can be generated from three shared keys including the shared key held by the mopile device 20.
- the encryption control information may include a plurality of key distribution types.
- the encryption control information may include two key distribution types, a key distribution type “1” and a key distribution type “2”, and key storage destination information corresponding to each key distribution type.
- the mono device 20 can obtain either the shared key held by the home device 30 or the shared key held by the IC tag 40 attached to the eyeglasses.
- a decryption key can be generated from the obtained shared key and the shared key held by the own device.
- a portable object such as a card or a portable telephone having a non-contact interface may be used without using an IC tag.
- the mobile device 20 has the encrypted personal information stored in the personal information storage unit 201 in the mobile device 20 and the shared key storage unit 205 that stores the encrypted personal information.
- the secret key may be stored on a backup medium such as a DVD-RAM.
- the personal information stored in the backup medium and stored in the backup medium is stored in the new U and the personal information storage of the mobile device 20.
- the shared key stored in the unit 201 and the shared key stored in the backup medium is stored in the shared key storage unit 205, the encrypted personal information and the shared key can be restored.
- the personal information is encrypted, so that the personal information cannot be viewed illegally.
- a device for storing the shared key is determined to be associated with a specific individual.
- a photograph of a family taken with a digital camera is associated with a specific home device 30 in the home and can be viewed only at home, and a photograph of friends is associated with a particular personal belonging. And only that person can see it.
- rule information attached to the personal information and what they are associated with. Based on this rule information, a shared key is generated and stored in each device, and upon decryption, the shared key is received from each device. Can be realized by For example, if the information is digital camera information, this rule may be determined depending on the person who took the image or the subject. If the work is a work, the holder of the work may be determined.
- the mono device 20 changes the processing to be executed according to the number of the obtained shared keys, when the shared keys equal to or larger than the key threshold can be obtained from the device such as the IC tag. You can do it.
- the key threshold value is 5, eight shared keys are generated from the encryption keys, and each shared key is stored in seven IC tags. It is assumed that personal information is stored in the personal information storage unit 201. If the mobile key device 20 can acquire the distribution key with the power of five IC tags, the mobile device 20 stores the personal information in the personal information storage unit 201, decrypts the six personal information, and makes it possible to view the personal information. If the tag power sharing key can be obtained, all 10 pieces of personal information stored in the personal information storage unit 201 are decrypted and can be browsed.
- the key threshold value is 5, eight shared keys are generated from the encryption key, and each shared key is stored in seven IC tags. It is assumed that the converted image and the address book are stored in the personal information storage unit 201. If the shared key can be obtained with the power of five IC tags, the mopile device 20 decrypts the encrypted image stored in the personal information storage unit 201 so that the encrypted image can be viewed. If the shared key can be obtained, the encrypted address book stored in the personal information storage unit 201 is decrypted and can be browsed.
- Each of the above devices is, specifically, a computer including a microprocessor, ROM, RAM, a hard disk unit, a display unit, a keyboard, a mouse, and the like. Data system.
- a computer program is stored in the RAM or the hard disk unit.
- Each device achieves its function by operating according to the microprocessor power and the computer program.
- the computer program is configured by combining a plurality of instruction codes indicating instructions to the computer in order to achieve a predetermined function.
- a part or all of the components constituting each of the above devices may be constituted by one system LSI (Large Scale Integration: large scale integrated circuit).
- a system LSI is a super-multifunctional LSI manufactured by integrating multiple components on a single chip.Specifically, it is a computer system that includes a microprocessor, ROM, RAM, etc. . The RAM stores a computer program. The system and SI achieve their functions by the microprocessor operating according to the computer program.
- the system LSI may be individually implemented as one chip, or may be implemented as one chip so as to include a part or all of them.
- the LSI may be called an IC, a system LSI, a super LSI, or an ultra LSI depending on the degree of integration.
- the method of circuit integration is not limited to LSI, but may be realized by a dedicated circuit or a general-purpose processor. You can use a programmable FPGA (Field Programmable Gate Array) or a reconfigurable processor that can reconfigure the connections and settings of circuit cells inside the LSI after the LSI is manufactured.
- a programmable FPGA Field Programmable Gate Array
- a reconfigurable processor that can reconfigure the connections and settings of circuit cells inside the LSI after the LSI is manufactured.
- the technology may be used to integrate the functional blocks.
- One example is the application of biotechnology.
- the IC card or the module is a computer system including a microprocessor, a ROM, a RAM, and the like.
- the IC card or the module may include the above super multifunctional LSI.
- the microprocessor operates according to the computer program, the IC card or the module achieves its function.
- This IC card or this module may have tamper resistance!
- the present invention may be the method described above. Further, the present invention may be a computer program that realizes these methods by a computer, or may be a digital signal that has the power of the computer program.
- the present invention also relates to a computer-readable recording medium capable of reading the computer program or the digital signal, for example, a flexible disk, a hard disk, a CD-ROM, a MO, a DVD, a DVD-ROM, a DVD-RAM, a BD ( Blu-ray Disc), semiconductor memory, etc., may also be recorded on a disc. Further, the present invention may be the computer program or the digital signal recorded on the recording medium.
- the computer program or the digital signal may be transmitted via an electric communication line, a wireless or wired communication line, a network represented by the Internet, a data broadcast, or the like.
- the present invention may be a computer system including a microprocessor and a memory, wherein the memory stores the computer program, and the microprocessor operates according to the computer program.
- the computer or the digital signal is recorded on the recording medium and transferred, or the program or the digital signal is transferred via the network or the like, so that another computer system becomes independent. May be implemented by
- the present invention is produced, sold, and the like in industries dealing with electric devices such as mopile devices for managing personal information and the like that need to be kept secret, and systems.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Storage Device Security (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Description
Claims
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/578,787 US20070239615A1 (en) | 2004-04-23 | 2005-04-22 | Personal Information Management Device, Distributed Key Storage Device, and Personal Information Management System |
JP2006512598A JP4771942B2 (ja) | 2004-04-23 | 2005-04-22 | 個人情報管理装置、分散鍵記憶装置、個人情報管理システム、個人情報管理方法、コンピュータプログラム、記録媒体及び集積回路 |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2004127806 | 2004-04-23 | ||
JP2004-127806 | 2004-04-23 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2005104430A1 true WO2005104430A1 (ja) | 2005-11-03 |
Family
ID=35197341
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/JP2005/007695 WO2005104430A1 (ja) | 2004-04-23 | 2005-04-22 | 個人情報管理装置、分散鍵記憶装置、個人情報管理システム |
Country Status (4)
Country | Link |
---|---|
US (1) | US20070239615A1 (ja) |
JP (1) | JP4771942B2 (ja) |
CN (1) | CN1947372A (ja) |
WO (1) | WO2005104430A1 (ja) |
Cited By (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2007328777A (ja) * | 2006-06-08 | 2007-12-20 | Sharp Corp | 移動体電子装置、データ保護方法、保護データ出力方法、制御プログラム、および、記録媒体 |
JP2008027430A (ja) * | 2006-06-23 | 2008-02-07 | Semiconductor Energy Lab Co Ltd | 個人情報管理システム及び不揮発性メモリカード |
JP2008098894A (ja) * | 2006-10-11 | 2008-04-24 | Kddi Corp | 情報管理システム、情報管理方法、情報管理プログラム |
JP2009194832A (ja) * | 2008-02-18 | 2009-08-27 | Nec Corp | ワイドバンドアンテナおよびそれを用いたウエア、持ち物 |
EP2122900A2 (en) * | 2007-01-22 | 2009-11-25 | Spyrus, Inc. | Portable data encryption device with configurable security functionality and method for file encryption |
JP2010198349A (ja) * | 2009-02-25 | 2010-09-09 | Ntt Docomo Inc | データ暗号化システム、通信機器、及びデータ暗号化方法 |
WO2010116678A1 (ja) * | 2009-03-30 | 2010-10-14 | パナソニック株式会社 | ヘルスケアシステム |
JP6300286B1 (ja) * | 2016-12-27 | 2018-03-28 | 株式会社ZenmuTech | アクセス管理システム、アクセス管理方法及びプログラム |
JP2018110442A (ja) * | 2018-02-21 | 2018-07-12 | 株式会社ZenmuTech | アクセス管理システム、アクセス管理方法及びプログラム |
WO2020100342A1 (ja) * | 2018-11-14 | 2020-05-22 | カウリー株式会社 | ブロックチェーンシステムおよびサーバ |
Families Citing this family (26)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060282681A1 (en) * | 2005-05-27 | 2006-12-14 | Scheidt Edward M | Cryptographic configuration control |
US8341397B2 (en) * | 2006-06-26 | 2012-12-25 | Mlr, Llc | Security system for handheld wireless devices using-time variable encryption keys |
US8588103B2 (en) * | 2007-04-10 | 2013-11-19 | Control4 Corporation | System and method for distributing communications through a dense mesh network |
WO2009096976A1 (en) * | 2008-01-31 | 2009-08-06 | Hewlett-Packard Development Company, L.P. | Systems and methods for protecting information used by mobile devices |
EP2357753A1 (en) * | 2008-11-14 | 2011-08-17 | Oki Semiconductor Co., Ltd. | Confidential information transmission method, confidential information transmission system, and confidential information transmission device |
US8468368B2 (en) * | 2009-12-29 | 2013-06-18 | Cleversafe, Inc. | Data encryption parameter dispersal |
JP5730491B2 (ja) * | 2010-02-26 | 2015-06-10 | 株式会社ニコン・エシロール | レンズ加工管理システム、レンズ製造システム、レンズ製造方法、コンピュータプログラム、レンズ加工管理方法、データ供給装置、レンズ設計データ利用管理システム、レンズ設計データ利用管理装置、及びレンズ設計データ利用管理プログラム |
CN102457527A (zh) * | 2011-12-30 | 2012-05-16 | 中国联合网络通信集团有限公司 | 基于生物密钥的单点登录方法、装置和*** |
CN103312494A (zh) * | 2012-03-14 | 2013-09-18 | 中国人民银行印制科学技术研究所 | 数据分散存储方法、数据还原方法及数据卡 |
US9317715B2 (en) * | 2012-08-24 | 2016-04-19 | Sap Se | Data protection compliant deletion of personally identifiable information |
MX2015004817A (es) * | 2012-11-16 | 2016-02-10 | Ericsson Telefon Ab L M | Autenticacion de multiples factores basada en alrededores. |
US9473507B2 (en) | 2013-01-03 | 2016-10-18 | International Business Machines Corporation | Social and proximity based access control for mobile applications |
US9942750B2 (en) * | 2013-01-23 | 2018-04-10 | Qualcomm Incorporated | Providing an encrypted account credential from a first device to a second device |
CN105025203B (zh) * | 2014-04-29 | 2018-05-04 | 华晶科技股份有限公司 | 结合生理特征之影像加解密方法及其影像捕获设备 |
US9571464B2 (en) * | 2014-08-11 | 2017-02-14 | Intel Corporation | Network-enabled device provisioning |
WO2016152601A1 (ja) * | 2015-03-23 | 2016-09-29 | 富士フイルム株式会社 | 画像ファイル分散装置および画像ファイル復元装置ならびにそれらの方法,それらのプログラムおよびそのプログラムを格納した記録媒体 |
US9584648B2 (en) | 2015-06-09 | 2017-02-28 | Brillio LLC | Method and system for managing incoming notifications |
JP5967739B1 (ja) * | 2015-07-23 | 2016-08-10 | Necプラットフォームズ株式会社 | フィルタリングシステム、管理装置、フィルタリング方法及び管理プログラム |
CN105072340B (zh) * | 2015-08-07 | 2018-11-30 | 北京橙鑫数据科技有限公司 | 摄影服务提供方法和装置 |
JP6752247B2 (ja) * | 2018-03-09 | 2020-09-09 | 三菱重工業株式会社 | 情報配信装置、配信対象装置、情報配信システム、情報配信方法及びプログラム |
JP2019161443A (ja) * | 2018-03-13 | 2019-09-19 | 富士通株式会社 | 暗号化情報処理装置、暗号化情報処理システム、復号化鍵情報生成プログラム、及び復号化鍵情報生成方法 |
US10805079B2 (en) * | 2018-05-18 | 2020-10-13 | Thales Dis France Sa | Method for securing an automated system |
CN109120395B (zh) * | 2018-06-08 | 2021-12-07 | ***股份有限公司 | 标签数据生成方法、标签及基于nfc标签的数据处理 |
KR20210046357A (ko) | 2019-10-18 | 2021-04-28 | 삼성전자주식회사 | 블록체인 기반 시스템을 위한 키의 저장 및 복구 방법과 그 장치 |
JPWO2022009337A1 (ja) * | 2020-07-08 | 2022-01-13 | ||
US20220376911A1 (en) * | 2021-05-24 | 2022-11-24 | Softiron Limited | Detection and Remediation of Unauthorized Relocation of Storage Media |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2002091301A (ja) * | 2000-09-19 | 2002-03-27 | Ntt Data Corp | 鍵情報分散装置、演算装置および署名検証装置 |
JP2002260070A (ja) * | 2001-03-01 | 2002-09-13 | Keisuke Wada | カード所持者の認識に用いるrf−id半導体デバイス、カード所持者の認識に用いるシール、およびカード・システム |
JP2002351845A (ja) * | 2001-05-24 | 2002-12-06 | Yutaka Hokura | 通信端末装置における電子情報保護システム |
Family Cites Families (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5623546A (en) * | 1995-06-23 | 1997-04-22 | Motorola, Inc. | Encryption method and system for portable data |
US6072876A (en) * | 1996-07-26 | 2000-06-06 | Nippon Telegraph And Telephone Corporation | Method and system for depositing private key used in RSA cryptosystem |
AU8348298A (en) * | 1997-07-28 | 1999-02-16 | Director Government Communications Headquarters, The | Split-key cryptographic system and method |
GB2329499B (en) * | 1997-09-19 | 2001-05-30 | Ibm | Method for controlling access to electronically provided services and system for implementing such method |
GB2329497B (en) * | 1997-09-19 | 2001-01-31 | Ibm | Method for controlling access to electronically provided services and system for implementing such method |
US6084968A (en) * | 1997-10-29 | 2000-07-04 | Motorola, Inc. | Security token and method for wireless applications |
JP3794457B2 (ja) * | 1998-02-13 | 2006-07-05 | 株式会社ルネサステクノロジ | データの暗号化復号化方法 |
EP0936776B1 (en) * | 1998-02-13 | 2004-05-19 | Hitachi, Ltd. | A network system using a threshold secret sharing method |
JP4815715B2 (ja) * | 2001-08-13 | 2011-11-16 | ソニー株式会社 | 個人認証システム、個人認証方法、および認証デバイス、並びにコンピュータ・プログラム |
US7194004B1 (en) * | 2002-01-28 | 2007-03-20 | 3Com Corporation | Method for managing network access |
US20030174840A1 (en) * | 2002-03-12 | 2003-09-18 | Bogan William B. | Encryption method for preventing unauthorized dissemination of protected data |
JP2003330493A (ja) * | 2002-05-10 | 2003-11-19 | Fujitsu Ltd | 本人認証方法および本人認証装置 |
JP2003333027A (ja) * | 2002-05-17 | 2003-11-21 | Nippon Telegr & Teleph Corp <Ntt> | 暗号鍵記憶装置及び電子機器 |
JP2005128996A (ja) * | 2003-09-30 | 2005-05-19 | Dainippon Printing Co Ltd | 情報処理装置、情報処理システム及びプログラム |
US7471199B2 (en) * | 2004-01-09 | 2008-12-30 | Intermec Ip Corp. | Mobile key using read/write RFID tag |
US7463861B2 (en) * | 2005-03-07 | 2008-12-09 | Broadcom Corporation | Automatic data encryption and access control based on bluetooth device proximity |
-
2005
- 2005-04-22 US US11/578,787 patent/US20070239615A1/en not_active Abandoned
- 2005-04-22 JP JP2006512598A patent/JP4771942B2/ja not_active Expired - Fee Related
- 2005-04-22 CN CNA2005800126992A patent/CN1947372A/zh active Pending
- 2005-04-22 WO PCT/JP2005/007695 patent/WO2005104430A1/ja active Application Filing
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2002091301A (ja) * | 2000-09-19 | 2002-03-27 | Ntt Data Corp | 鍵情報分散装置、演算装置および署名検証装置 |
JP2002260070A (ja) * | 2001-03-01 | 2002-09-13 | Keisuke Wada | カード所持者の認識に用いるrf−id半導体デバイス、カード所持者の認識に用いるシール、およびカード・システム |
JP2002351845A (ja) * | 2001-05-24 | 2002-12-06 | Yutaka Hokura | 通信端末装置における電子情報保護システム |
Cited By (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2007328777A (ja) * | 2006-06-08 | 2007-12-20 | Sharp Corp | 移動体電子装置、データ保護方法、保護データ出力方法、制御プログラム、および、記録媒体 |
JP2008027430A (ja) * | 2006-06-23 | 2008-02-07 | Semiconductor Energy Lab Co Ltd | 個人情報管理システム及び不揮発性メモリカード |
JP2008098894A (ja) * | 2006-10-11 | 2008-04-24 | Kddi Corp | 情報管理システム、情報管理方法、情報管理プログラム |
EP2122900A4 (en) * | 2007-01-22 | 2014-07-23 | Spyrus Inc | PORTABLE DATA ENCRYPTION DEVICE WITH CONFIGURABLE SAFETY FUNCTIONS AND METHOD FOR FILING ENCRYPTION |
EP2122900A2 (en) * | 2007-01-22 | 2009-11-25 | Spyrus, Inc. | Portable data encryption device with configurable security functionality and method for file encryption |
JP2009194832A (ja) * | 2008-02-18 | 2009-08-27 | Nec Corp | ワイドバンドアンテナおよびそれを用いたウエア、持ち物 |
JP2010198349A (ja) * | 2009-02-25 | 2010-09-09 | Ntt Docomo Inc | データ暗号化システム、通信機器、及びデータ暗号化方法 |
WO2010116678A1 (ja) * | 2009-03-30 | 2010-10-14 | パナソニック株式会社 | ヘルスケアシステム |
JP5361993B2 (ja) * | 2009-03-30 | 2013-12-04 | パナソニック株式会社 | ヘルスケアシステム |
US8886936B2 (en) | 2009-03-30 | 2014-11-11 | Panasonic Corporation | Health care system |
JP6300286B1 (ja) * | 2016-12-27 | 2018-03-28 | 株式会社ZenmuTech | アクセス管理システム、アクセス管理方法及びプログラム |
JP2018106026A (ja) * | 2016-12-27 | 2018-07-05 | 株式会社ZenmuTech | アクセス管理システム、アクセス管理方法及びプログラム |
JP2018110442A (ja) * | 2018-02-21 | 2018-07-12 | 株式会社ZenmuTech | アクセス管理システム、アクセス管理方法及びプログラム |
WO2020100342A1 (ja) * | 2018-11-14 | 2020-05-22 | カウリー株式会社 | ブロックチェーンシステムおよびサーバ |
JP2020080498A (ja) * | 2018-11-14 | 2020-05-28 | カウリー株式会社 | ブロックチェーンシステムおよびサーバ |
US11575503B2 (en) | 2018-11-14 | 2023-02-07 | Cowry Inc. | Blockchain control method |
Also Published As
Publication number | Publication date |
---|---|
JPWO2005104430A1 (ja) | 2007-08-30 |
US20070239615A1 (en) | 2007-10-11 |
CN1947372A (zh) | 2007-04-11 |
JP4771942B2 (ja) | 2011-09-14 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP4771942B2 (ja) | 個人情報管理装置、分散鍵記憶装置、個人情報管理システム、個人情報管理方法、コンピュータプログラム、記録媒体及び集積回路 | |
CN107453862B (zh) | 私钥生成存储及使用的方案 | |
JP4954628B2 (ja) | 真性乱数発生素子あるいは擬似乱数発生素子を用いた認証用デバイス、認証装置及び認証方法 | |
CN102460474B (zh) | 生物识别方法 | |
CN1697367B (zh) | 一种用于通过通信网络不暴露专用数据对密码保护的专用数据进行恢复的方法和*** | |
US8195961B2 (en) | Removable storage device and associated methodology of data encryption | |
US20110085664A1 (en) | Systems and methods for managing multiple keys for file encryption and decryption | |
JP5218338B2 (ja) | 情報伝達システム | |
US8209751B2 (en) | Receiving an access key | |
CN104662870A (zh) | 数据安全管理*** | |
CN106104562A (zh) | 机密数据安全储存和恢复***及方法 | |
WO2008010275A1 (en) | Medium data processing device and medium data processing method | |
CN103186761A (zh) | 私密文件的指纹加密方法及其通信终端 | |
JP2005010826A (ja) | 認証端末装置、生体情報認証システム、及び生体情報取得システム | |
JP2004312267A (ja) | 画像伝送システム,撮像装置,撮像装置ユニット,鍵生成装置,およびプログラム | |
US20150304321A1 (en) | An image management system and an image management method based on fingerprint authentication | |
CN101001305A (zh) | 信息处理设备及其控制方法 | |
EP1865658A1 (en) | Data processing apparatus and method | |
WO2016052959A1 (ko) | 온라인 시크릿 데이터 관리시스템 및 그 방법 | |
JP2006524352A (ja) | バイオメトリクスに基づいたアイデンティティベースの暗号化方法および装置 | |
KR102216869B1 (ko) | 종단간 암호화가 적용된 파일에 대한 복호화 장치 및 방법 | |
CN111262867A (zh) | 一种基于区块链的密钥管理方法 | |
JP2003304228A (ja) | 暗号化システム及び暗号化方法 | |
JP2003134107A (ja) | 個人認証システム、個人認証方法、及び個人認証プログラム | |
JP2002544690A (ja) | 安全な通信およびアクセス制御のためのシステム、デバイスおよび方法 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated states |
Kind code of ref document: A1 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KM KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SM SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A1 Designated state(s): BW GH GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
WWE | Wipo information: entry into national phase |
Ref document number: 11578787 Country of ref document: US Ref document number: 2007239615 Country of ref document: US |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2006512598 Country of ref document: JP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 200580012699.2 Country of ref document: CN |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWW | Wipo information: withdrawn in national office |
Country of ref document: DE |
|
122 | Ep: pct application non-entry in european phase | ||
WWP | Wipo information: published in national office |
Ref document number: 11578787 Country of ref document: US |