WO2009157142A1 - 情報処理装置、暗号鍵の管理方法、コンピュータプログラム及び集積回路 - Google Patents
情報処理装置、暗号鍵の管理方法、コンピュータプログラム及び集積回路 Download PDFInfo
- Publication number
- WO2009157142A1 WO2009157142A1 PCT/JP2009/002531 JP2009002531W WO2009157142A1 WO 2009157142 A1 WO2009157142 A1 WO 2009157142A1 JP 2009002531 W JP2009002531 W JP 2009002531W WO 2009157142 A1 WO2009157142 A1 WO 2009157142A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- key
- stakeholder
- control unit
- shared
- group
- Prior art date
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
- H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key
- H04L9/0836—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key using tree structure or hierarchical structure
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0894—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
- H04L9/0897—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
Definitions
- the present invention relates to an information processing apparatus, a cryptographic key management method, a computer program, and an information processing apparatus that control a shared key that can be shared and used among a plurality of stakeholders in a device having a plurality of stakeholders.
- the present invention relates to an integrated circuit.
- TCG Trusted Computing Group
- TPM Trusted Platform Module
- the integrity information that measures the integrity information of each module from the time when the terminal is activated until the OS or application is activated, and links the measured value with the integrity information of the previous module.
- TCG integrity information
- PCR Platform Configuration Registers
- an Attestation function that notifies the external server of the value accumulated in the PCR as terminal environment information and verifies whether the terminal environment information is expected environment information in the external server.
- Protected Storage function As a third feature function, there is a storage data protection function called Protected Storage function. This function holds a Storage Root Key (SRK) that is an encryption key generated in the TPM in a secure memory area in the TPM. This is a function that uses the SRK as a root key and encrypts a plurality of encryption keys to be protected with the root key to safely protect them on a memory outside the TPM.
- SRK Storage Root Key
- the nodes to be protected are associated with nodes in a hierarchical tree structure with SRK as the root key, and the parent node key is This is a method of encrypting a child node key. Since the SRK as the root key is held on the secure memory in the TPM, encrypted keys other than the root key can be safely managed on the memory outside the TPM. It also has a migration function for the purpose of backing up these keys.
- the migration function is a function for copying a key under the SRK of another TPM.
- TCG targets mobile phones as TPM-equipped terminals
- TPM specifications for mobile phones have also been standardized (Non-Patent Documents 3 and 4).
- the TPM for mobile phones is called Mobile Trusted Module (MTM). While MTM realizes the function of TPM, some commands are modified for mobile phones and new commands are added. As additional functions, a secure boot function and a multi-stakeholder model are defined.
- MTM Mobile Trusted Module
- Secure boot measures the integrity information of each module from the time the mobile phone terminal is started until the OS or application is started, and verifies whether the measured value is an expected value in the local terminal. This is a booting method.
- the multi-stakeholder model defines an implementation model for safely using rights that are owned by multiple stakeholders in the mobile phone terminal such as device manufacturers, carriers, application service providers, and users. . For example, if it is a device manufacturer, it is International Mobile Equipment Identity (IMEI), if it is a carrier, it is Subscriber Identification Module (SIM) related information, and if it is an application service provider, it is a service. If the user is provided data, an address book can be cited.
- IMEI International Mobile Equipment Identity
- SIM Subscriber Identification Module
- the multi-stakeholder model is a model that uses each right property safely by individually assigning the MTM used by each stakeholder.
- the virtualization technology By using the virtualization technology, a plurality of MTMs can be virtually realized in one terminal.
- Patent Document 1 discloses a method of structuring an encryption key into a tree structure and managing it when updating the encryption key.
- each stakeholder holds a key tree rooted at each SRK. Therefore, there are as many key trees as there are stakeholders in one terminal.
- stakeholder A uses data and functions managed by stakeholder B.
- stakeholder A wants to access data encrypted with the node key of the tree rooted in the SRK managed by the stakeholder B's TPM
- stakeholder A makes a stakeholder B Data decryption processing using SRK must be requested.
- stakeholder B transmits the decrypted data to stakeholder A after decryption processing using SRK of stakeholder B.
- overhead processing such as the stakeholder who manages the key decrypts and securely delivers the decrypted data for each access request for the shared data. I need it.
- the TCG migration function is used.
- the source of migration is designated as stakeholder B
- the destination of migration is designated as stakeholder A
- the key of stakeholder B is migrated to stakeholder A.
- a key migrated from stakeholder B can be configured as a key tree node managed by stakeholder A.
- the migrated key becomes the shared key, and the data encrypted with the shared key can be directly accessed without crossing the stakeholders.
- the migration function since the entity of the key to be migrated is held by each of the stakeholders A and B, the shared key is held twice in one terminal. There was a problem of being inefficient. In particular, when a plurality of shared keys are set, there are a plurality of duplicate keys.
- Patent Document 1 is a configuration in which encryption keys are managed in a tree structure, and a child node encrypts a parent node.
- a key group of a route from a leaf to a root is distributed to the user as a user key, and the user Discloses a method for updating a key tree when a user leaves.
- an information processing apparatus that sets a part of a node between key trees having different SRK as a root key for each stakeholder as a shared key
- encryption Information processing apparatus for more flexibly disabling access to a shared key from an unauthorized stakeholder when a stakeholder sharing the shared key with the key management method, computer program and integrated circuit is unauthorized
- an information processing apparatus includes a first shared key control unit corresponding to a first stakeholder, a second shared key control unit corresponding to a second stakeholder, and the first A first tamper-resistant module that corresponds to one stakeholder and manages a first encryption key group including a plurality of encryption keys in a tree structure, and encryption using the encryption key included in the first encryption key group A data holding unit that holds the predetermined data, and a second tamper-resistant module that corresponds to the second stakeholder and that manages a second encryption key group including a plurality of encryption keys in a tree structure.
- the first shared key control unit 2 Corresponds to the shared key control unit It is determined whether the second stakeholder is dependent on the first stakeholder corresponding to the first shared key controller, and the second stakeholder corresponding to the second shared key controller is the first shared key If the relationship depends on the first stakeholder corresponding to the key control unit, search for a predetermined key that can be copied to the second encryption key group from the keys included in the first encryption key group, The predetermined key is copied into the second encryption key group, and the second shared key control unit encrypts the predetermined key using a key included in the second encryption key, and By holding in the second encryption key group, a key lower than the predetermined key included in the first encryption key group is shared.
- the second shared key control unit upon receiving a notification from the second shared key control unit to the first shared key control unit that a key included in the first encryption key group is to be shared, the second shared key control unit When the corresponding second stakeholder has a relationship depending on the first stakeholder corresponding to the first shared key control unit, the second encryption key group out of the keys included in the first encryption key group
- the predetermined key is transferred on condition that the second stakeholder is dependent on the first stakeholder.
- the predetermined key is copied. Accordingly, it is possible to avoid the inefficiency of double holding the entire key group included in the tree structure having the predetermined key as a parent key between the first tamper resistant module and the second tamper resistant module.
- the second shared key control unit encrypts the predetermined key using a key included in the second encryption key and holds it in the second encryption key group, and By sharing a key lower than the predetermined key included in the encryption key group, the second shared key control unit only needs to copy the predetermined key, and the second shared key control unit corresponds to the first shared key control unit.
- a key lower than the predetermined key included in the first encryption key group managed by one tamper resistant module can be shared. Accordingly, the second shared key control unit can use the encrypted predetermined data held by the data holding unit with a simple configuration.
- An information processing apparatus includes a first shared key control unit corresponding to a first stakeholder, a second shared key control unit corresponding to a second stakeholder, and the first stakeholder.
- a first tamper-resistant module that manages a first encryption key group including a plurality of encryption keys in a tree structure, and a predetermined encrypted using the encryption key included in the first encryption key group
- a data holding unit for holding data and a second tamper-resistant module that corresponds to the second stakeholder and manages a second encryption key group including a plurality of encryption keys in a tree structure
- the second stake hotel corresponding to the club determines whether the first stakeholder depends on the first stakeholder corresponding to the first shared key control unit. If the relationship depends on the first stakeholder corresponding to the part, a predetermined key that can be copied to the second cryptographic key group is searched for from the keys included in the first cryptographic key group, and the predetermined key is found. And the second shared key control unit encrypts the predetermined key using a key included in the second encryption key to copy the second key to the second encryption key group. By holding in the encryption key group, a key lower than the predetermined key included in the first encryption key group is shared.
- the second shared key control unit when the second shared key control unit receives a notification to the first shared key control unit that the key included in the first encryption key group is to be shared, the second shared key control unit corresponds to the second shared key control unit.
- the second encryption key group includes a key included in the first encryption key group.
- the second shared key control unit encrypts the predetermined key using a key included in the second encryption key and holds it in the second encryption key group, and By sharing a key lower than the predetermined key included in the encryption key group, the second shared key control unit only needs to copy the predetermined key, and the second shared key control unit corresponds to the first shared key control unit.
- a key lower than the predetermined key included in the first encryption key group managed by one tamper resistant module can be shared. Accordingly, the second shared key control unit can use the encrypted predetermined data held by the data holding unit with a simple configuration.
- the second shared key control unit can use the predetermined encrypted data held in the data holding unit only when the second stakeholder is in a relationship depending on the first stakeholder. .
- the second shared key control unit can use the predetermined encrypted data held in the data holding unit only when the second stakeholder is in a relationship depending on the first stakeholder.
- the second shared key control unit includes a certificate that proves a dependency relationship with the first shared key control unit, and the first shared key
- the certificate is sent, and the first shared key control unit is configured to transmit the certificate based on the certificate.
- the first shared key control unit is a stakeholder model in which a second stakeholder corresponding to the second shared key control unit uses at least a first tamper-resistant module corresponding to the first stakeholder. If it is determined based on the certificate, it is determined that the second stakeholder is dependent on the first stakeholder. This makes it possible to reliably determine the dependency of the second stakeholder on the first stakeholder, so that the key configuration for managing the predetermined data can be determined by the first tamper resistant module and the first tamper resistant module. While simplifying, access to the predetermined data from an unauthorized stakeholder can be surely prohibited.
- each key included in the first encryption key group has attribute information indicating whether or not the key can be copied from the first encryption key group.
- the first shared key control unit refers to the attribute information and searches for a predetermined key that can be copied to the second encryption key group from keys included in the first encryption key group. It is characterized by.
- the second encryption key is selected from the keys included in the first encryption key group. Find a given key that can be copied to a group. As a result, a key that can be copied can be found simply by referring to the attribute information, so that a key that can be copied can be easily searched.
- the information processing apparatus is characterized in that the first shared key control unit has a predetermined copy that can be copied from the keys included in the first encryption key group to the second encryption key group. If no key exists, a copyable key is generated, and the generated key is copied into the second encryption key group.
- the first shared key control unit is capable of copying when there is no predetermined key that can be copied to the second encryption key group from among the keys included in the first encryption key group. A key is generated, and the generated key is copied into the second encryption key group.
- the second shared key control unit Since a key included in one encryption key group can be shared, the second shared key control unit stores a predetermined data encrypted using the encryption key included in the first encryption key group Can be accessed.
- the first shared key control unit receives position information indicating a position of a key lower than the predetermined key included in the first encryption key group. 4. The information processing apparatus according to claim 3, wherein the key information is generated as link information of the key and the predetermined key is copied into the second encryption key group together with the link information.
- the second shared key Since the control unit can confirm the position of the key below the predetermined key by referring to the link information of the predetermined key, the key below the predetermined key is copied to the second tamper resistant module.
- the key lower than the predetermined key can be shared with the first tamper resistant module.
- the first shared key control unit is included in position information of a predetermined key included in the first encryption key group and the second encryption key group.
- the position information of a predetermined key is generated as link information of a key below the predetermined key included in the first encryption key group.
- the position information of the predetermined key included in the first encryption key group and the position information of the predetermined key included in the second encryption key group are included in the first encryption key group.
- the location of a parent key obtained by encrypting the lower key can be recognized by referring to the link information of the lower key.
- the first tamper resistant module and the first tamper resistant module share a key lower than the predetermined key included in the first cryptographic key group, the first tamper resistant module and the first tamper resistant module It is possible to easily identify which key is used to encrypt a key lower than the predetermined key included in the encryption key group.
- the information processing apparatus is characterized in that the first shared key control unit and the previous second shared key control unit are a shared shared key control unit.
- the first shared key control unit and the previous second shared key control unit can be configured by a shared shared key control unit, and a shared key between two stakeholders can be formed by one shared key control unit. Since it is possible to control the system in an integrated manner, access control can be performed more flexibly.
- the first stakeholder environment managed by the first stakeholder is altered by the second stakeholder environment managed by the second stakeholder, or is subject to revocation. If it is detected, the first shared key control unit causes the first tamper-resistant module to generate an alternative key that replaces the predetermined key, and is included in the tree structure having the predetermined key as a parent key. Re-encrypting the key with the alternative key and encrypting the alternative key using the parent key of the predetermined key to eliminate the use of the predetermined data by the second shared key control unit It is characterized by.
- a tamper-resistant module that generates an alternative key to replace the predetermined key, re-encrypts the key included in the tree structure having the predetermined key as a parent key with the alternative key, and the parent of the predetermined key;
- the alternative key is encrypted using a key.
- the first stakeholder environment managed by the first stakeholder is altered by the second stakeholder environment managed by the second stakeholder, or is subject to revocation. If it is detected, the first shared key control unit sends the predetermined data to the first tamper resistant module using a key other than a key included in a tree structure having the predetermined key as a parent key. Re-encryption is performed to eliminate the use of the predetermined key by the second shared key control unit.
- the first tamper resistant module when the first stakeholder environment detects that the second stakeholder environment has been attacked, the first tamper resistant module is included in a tree structure having the predetermined key as a parent key.
- the predetermined data is re-encrypted using a key other than the key.
- the second shared key control unit cannot decrypt the predetermined data using a key included in a tree structure having the predetermined key as a parent key.
- Predetermined data encrypted with a key other than the key included in the structure cannot be used, and the predetermined data can be protected from unauthorized use.
- a key included in a tree structure having the predetermined key included in the first encryption key group as a parent key has no falsification as attribute information.
- Key usage restriction information is included as an expected value generated from the hash value of the second stakeholder environment managed by the second stakeholder, and the second tamper resistant module is generated from the hash value of the second stakeholder environment Environment information as an actual value is stored, and the predetermined key included in the first encryption key group from the second shared key control unit to the first shared key control unit as a parent key
- the second shared key control unit compares the key use restriction information with the environment information, and uses the key only when the comparison result is correct. Limit to It features that.
- the second shared key control unit compares the key use restriction information generated from the second stakeholder environment without falsification with the environment information actually obtained from the second stakeholder environment.
- the key is used only when the comparison result is correct.
- the second shared key control unit uses the predetermined key as a master key. Since the key included in the tree structure cannot be decrypted, the predetermined data encrypted using the key included in the tree structure having the predetermined key as a parent key cannot be decrypted, and the predetermined data is Protects against unauthorized use.
- the first shared key control unit rewrites the key use restriction information so that a key included in the tree structure having the predetermined key as a parent key cannot be used by the second shared key control unit.
- the first shared key control unit when the first stakeholder environment managed by the first stakeholder detects that the second stakeholder environment has been altered or is subject to revocation, the first shared key control unit The key use restriction information is rewritten so that a key included in a tree structure having a predetermined key as a parent key cannot be used from the second shared key control unit.
- the second shared key control unit cannot decrypt the key included in the tree structure having the predetermined key as a parent key by using the predetermined key, the tree having the predetermined key as the parent key
- the predetermined data encrypted using the key included in the structure cannot be decrypted, and the predetermined data can be protected from unauthorized use.
- encrypted data encrypted with a key included in a tree structure having the predetermined key included in the first encryption key group as a parent key The attribute information includes encrypted data usage restriction information that is an expected value generated from the hash value of the second stakeholder environment managed by the second stakeholder without falsification, and the second tamper-resistant module includes the first tamper resistant module. Environment information as an actual value generated from the hash value of the second stakeholder environment is stored, and the second shared key control unit sends the first encryption key group to the first shared key control unit.
- the second shared key control unit When requesting a decryption process of data encrypted with a key included in a tree structure having the predetermined key included as a parent key, the second shared key control unit includes the encrypted data usage restriction information and the Environmental information Compare and characterized by restriction so as to process the decrypted the encrypted data only when comparison results are correct.
- the second shared key control unit includes the encrypted data usage restriction information generated from the second stakeholder environment without falsification and the environment information actually obtained from the second stakeholder environment.
- the encrypted data is decrypted only when the comparison result is correct.
- the comparison result becomes inconsistent, and the second shared key control unit uses the predetermined key as a master key. Therefore, the encrypted data encrypted using the key included in the tree structure cannot be decrypted, and the encrypted data can be protected from unauthorized use.
- the first shared key control unit is configured to prevent the encrypted data encrypted with the key included in the tree structure having the predetermined key as a parent key from being used by the second shared key control unit. It is characterized by rewriting usage restriction information.
- the first shared key control unit when the first stakeholder environment managed by the first stakeholder detects that the second stakeholder environment has been altered or is subject to revocation, the first shared key control unit The encrypted data usage restriction information is rewritten so that encrypted data encrypted with a key included in a tree structure having a predetermined key as a parent key cannot be used from the second shared key control unit.
- the second shared key control unit cannot perform decryption processing using the key included in the tree structure having the predetermined key as a parent key by using the predetermined key, the predetermined data is illegally used. Can be protected from.
- the first shared key control unit checks only the environment in which the first stakeholder environment and the second stakeholder environment are not tampered with after checking the integrity of the environment. It is characterized by detecting that the second stakeholder environment has been falsified or revoked when booting by a secure boot which is a function to be activated.
- the first shared key control unit is booted by secure boot, which is a function for starting only an environment that has not been tampered with after checking the integrity of the first stakeholder environment and the second stakeholder environment.
- secure boot which is a function for starting only an environment that has not been tampered with after checking the integrity of the first stakeholder environment and the second stakeholder environment.
- the first shared key control unit receives a notification from the external server that the second shared key control unit has been tampered with or is subject to revocation. Then, it is detected that the second shared key control unit is attacked from the outside.
- the first shared key control unit receives a notification from the outside server that the second shared key control unit has been attacked from the outside, and thus from the outside of the second shared key control unit. Can be detected.
- the encryption key management method includes a first shared key control unit corresponding to a first stakeholder, a second shared key control unit corresponding to a second stakeholder, and the first Corresponding to the stakeholder, the first tamper resistant module that manages the first cryptographic key group including a plurality of cryptographic keys in a tree structure and encrypted using the cryptographic key included in the first cryptographic key group Information comprising: a data holding unit that holds predetermined data; and a second tamper-resistant module that corresponds to the second stakeholder and manages a second encryption key group including a plurality of encryption keys in a tree structure
- a key management method for an encryption key in a processing device wherein in the first shared key control unit, a key included in the first encryption key group is transferred from the second shared key control unit to the first shared key control unit.
- the second stakeholder corresponding to the second shared key control unit is dependent on the first stakeholder corresponding to the first shared key control unit, and the second shared key
- the second stakeholder is selected from the keys included in the first encryption key group.
- a predetermined key that can be copied to the encryption key group is searched, the predetermined key is copied into the second encryption key group, and the second shared key control unit includes the second encryption key.
- a key lower than the predetermined key included in the first cryptographic key group is shared by encrypting the predetermined key using a key and holding it in the second cryptographic key group Features.
- a computer program according to claim 17 of the present invention corresponds to a first shared key control unit corresponding to a first stakeholder, a second shared key control unit corresponding to a second stakeholder, and the first stakeholder.
- a first tamper-resistant module that manages a first encryption key group including a plurality of encryption keys in a tree structure, and predetermined data encrypted using the encryption key included in the first encryption key group
- An information processing apparatus comprising: a data holding unit that holds a second tamper-resistant module that corresponds to the second stakeholder and that manages a second encryption key group including a plurality of encryption keys in a tree structure
- a computer program used for key management of an encryption key wherein the first shared key control unit controls the computer from the second shared key control unit to the first shared key control unit.
- the second stakeholder corresponding to the second shared key control unit receives the first stake corresponding to the first shared key control unit.
- a process of determining whether or not the relationship depends on a stakeholder, and a relationship in which a second stakeholder corresponding to the second shared key control unit depends on a first stakeholder corresponding to the first shared key control unit If there is, a search is made for a predetermined key that can be copied to the second encryption key group from the keys included in the first encryption key group, and the predetermined key is searched for in the second encryption key group.
- the second shared key control unit encrypts the predetermined key using the key included in the second encryption key and stores it in the second encryption key group.
- the first encryption key group includes the first encryption key group Characterized in that to execute a process of sharing the underlying key from the constant key.
- An integrated circuit according to claim 18 of the present invention corresponds to a first shared key control unit corresponding to the first stakeholder, a second shared key control unit corresponding to the second stakeholder, and the first stakeholder.
- a first tamper-resistant module that manages a first encryption key group including a plurality of encryption keys in a tree structure, and predetermined data encrypted using the encryption key included in the first encryption key group
- An information processing apparatus comprising: a data holding unit that holds a second tamper-resistant module that corresponds to the second stakeholder and that manages a second encryption key group including a plurality of encryption keys in a tree structure
- An integrated circuit to be used, wherein the first cipher is transferred from the second shared key control unit to the first shared key control unit in the first shared key control unit with respect to the information processing unit and the information processing unit.
- Keys included in the key group Upon receiving notification that sharing is desired, it is determined whether the second stakeholder corresponding to the second shared key control unit is dependent on the first stakeholder corresponding to the first shared key control unit. If the relationship between the processing and the second stakeholder corresponding to the second shared key control unit is dependent on the first stakeholder corresponding to the first shared key control unit, it is included in the first encryption key group Searching for a predetermined key that can be copied to the second encryption key group from the keys, and copying the predetermined key into the second encryption key group, and executing the second sharing In the key control unit, the predetermined key is encrypted using the key included in the second encryption key, and is stored in the second encryption key group, thereby being included in the first encryption key group Processing to share a key below the predetermined key A memory storing a processing program to be executed, the integrated circuit having.
- the information processing apparatus uses the predetermined key encrypted with an encryption key included in the first encryption key group as the encryption key. And decrypting the decrypted key with an encryption key included in the second encryption key group, and copying the re-encrypted key into the second encryption key group.
- TPM shown in the present embodiment will be described as a tamper-resistant module having a function of Mobile Trusted Module (MTM) specified in the TCG's Mobile Phone Working Group.
- MTM Mobile Trusted Module
- a mobile phone has a plurality of stakeholders such as a device manufacturer, a carrier, an application service provider, and a user. Each stakeholder has his own property.
- the rights of each stakeholder are, for example, International Mobile Equipment Identity (IMEI) for device manufacturers, Subscriber Identification Module (SIM) related information for carriers, and Service for application service providers. If the user is provided data, an address book can be cited.
- IMEI International Mobile Equipment Identity
- SIM Subscriber Identification Module
- the multi-stakeholder model is a model in which each right property is used safely by allocating the TPM used by each stakeholder individually.
- Fig. 1 shows the entire system in the multi-stakeholder model.
- the information processing terminal 10 is a mobile terminal equipped with MTM.
- the first embodiment will be described below using an example in which there are two stakeholders, a first stakeholder and a second stakeholder, in the information processing apparatus 10. Note that there may be two or more stakeholders as described above.
- the information processing terminal may be a mobile phone, a mobile terminal such as a PDA, or a stationary electronic device such as a TV, DVD, BD player, or STB.
- the first stakeholder management server 11 is a server managed by a stakeholder that provides the first stakeholder environment.
- the first stakeholder management server 11 manages an authentication PCR database 12, a certificate management database 13, and a revocation list 14.
- the authentication PCR database 12 is a database used by the first stakeholder management server 11 in the Attestation process for verifying the validity of the information processing terminal 10, and the PCR expectation that is the environment information of the legitimate information processing terminal 10 A database of values.
- the first stakeholder management server 11 compares the PCR value transmitted from the information processing terminal 10 and the value recorded in the authentication PCR database 12 at the time of the attestation, and determines that the information processing terminal 10 is valid if they match. Provide appropriate services.
- the certificate database 13 is a database of software certificates provided by the first stakeholder. If it is necessary to update the module of the first stakeholder, the certificate of the update module is transmitted together with the module to be updated. The certificate of the update module is also managed in the certificate database 13.
- the revocation list 14 is a database that records a list of stakeholders to be revoked.
- the revocation list 14 is transmitted from the first stakeholder management server 11 to the information processing terminal 10 and is managed in the information processing terminal 10 with integrity protected.
- the revocation list 14 is described as a black list method in which information of stakeholders to be invalidated is described, but a white list method in which information of valid stakeholders is described may be used.
- the authentication PCR database 12, the certificate database 13, and the revocation list 14 are all managed by the first stakeholder management server 11, but may be managed by a plurality of management servers.
- the second stakeholder management server 16 is a server managed by a stakeholder that provides the second stakeholder environment. Although not shown in FIG. 1, the second stakeholder also manages the authentication PCR database 12, the certificate management database 13, and the revocation list 14 in the same manner as the first stakeholder management server 11.
- FIG. 2 is a diagram showing a trust model in the multi-stakeholder model.
- each stakeholder manages the rights belongings of each stakeholder, and the rights possessed by each stakeholder are secured by using a TPM associated with each stakeholder. Is accessed.
- TPM associated with each stakeholder.
- FIG. 2 (a) shows the Independent Model. This model has no trust dependency among each stakeholder. For example, stakeholder 1 (21) uses TPM1 (23), and stakeholder 2 (22) uses TPM2 (24).
- FIG. 2 (b) shows the Interdependent Model.
- This model is a model that has a partial dependency relationship among stakeholders.
- stakeholder 1 (31) uses TPM1 (33)
- stakeholder 2 (32) uses TPM2 (34).
- TPM1 33
- TPM2 34
- FIG. 2B there is a part where the partial areas overlap.
- the stakeholder 2 (32) uses the function of the TPM1 (33) in addition to the TPM2 (34).
- the carrier accesses the IMEI that is the property of the device manufacturer.
- the stakeholder 2 (32) makes an IMEI access request to the stakeholder 1 (31)
- the stakeholder 2 (32) uses the TPM1 (33) via the stakeholder 1 (31). It will be.
- FIG. 2 (c) shows the Dependent Model.
- This model is a model in which one stakeholder is completely dependent on another stakeholder.
- This is a model in which stakeholder 1 (41) uses TPM1 (43) and stakeholder 2 (42) also uses TPM1 (43).
- the IMEI that is the property of the device manufacturer is protected by the function of the TPM 1 (43) and is the property of the carrier.
- the SIM information is also safely protected using the function of TPM1 (43).
- FIG. 3 is an overall configuration diagram of the multi-stakeholder model information processing terminal 10.
- the information processing terminal 10 includes a first stakeholder program 100, a second stakeholder program 200, a shared key control unit (111, 210), a tamper resistant module (120, 220), a key storage unit 30, and an encrypted data storage unit 40. , And a stakeholder certificate storage unit 50.
- the information processing terminal 10 holds a hardware group such as a CPU, an I / O device, a volatile memory such as a RAM, and a nonvolatile memory such as a ROM or a flash memory.
- the first stakeholder program 100 is a group of programs provided from the first stakeholder, and is distributed from the first stakeholder management server 11. As for the first stakeholder program 100, only the program whose validity is verified by the secure boot function of the tamper resistant module 120 is started.
- the second stakeholder program is a group of programs provided by the second stakeholder, and is distributed from the second stakeholder management server 16.
- the second stakeholder program 200 only the program whose validity is verified by the secure boot function of the tamper resistant module 220 is started.
- the shared key control unit 1 (110) is a unit that controls use of the key group 1 (130) and the shared key group (330).
- the multi-stakeholder model determination unit 1 sets a shared key from a stakeholder other than the stakeholder 1 for the key group 1 (113) or the shared key (330) managed by the shared key control unit 1 (110).
- the stakeholder certificate (150, 250) stored in the stakeholder certificate storage unit 50 determines whether or not the stakeholder that is the request source is a stakeholder who may share the key. To do.
- the sharing permission setting unit 1 (112) sets a key belonging to the key group 1 (130) as a shared key of the shared key group (330), generates a new key, and controls key migration processing. Or a key processing necessary for setting various shared keys.
- the key processing here is performed in cooperation between the shared key control unit 1 (112) and the tamper resistant module 1 (120).
- the key management table 1 (113) is a table in which information necessary for accessing the key group 1 (130) and the shared key group (330) from the shared key control unit 1 (110) is described.
- the key management table 1 (113) will be described later with reference to FIG.
- the shared key control unit 2 is a unit that controls the use of the key group 2 (230) and the shared key group (330).
- the Malus stakeholder model determination unit 2 (211) sets a shared key from a stakeholder other than the stakeholder 2 for the key group 2 (230) or the shared key (330) managed by the shared key control unit 2 (210).
- the stakeholder certificate (150, 250) stored in the stakeholder certificate storage unit 50 determines whether or not the stakeholder that is the request source is a stakeholder who may share the key. To do.
- the sharing permission setting unit 2 (212) sets the key of the key group 2 (230) as a shared key of the shared key group (330), generates a new key, and controls key migration processing. Or a key processing necessary for setting various shared keys.
- the key processing here is performed in cooperation with the shared key control unit 2 (212) and the tamper resistant module 2 (220).
- the key management table 2 (213) is a table in which information necessary for accessing the key group 2 (230) and the shared key group (330) is described.
- the key management table 2 (213) will be described later with reference to FIG.
- the shared key control unit 1 (110) and the shared key control unit 2 (210) may be realized as a first stakeholder program and a second stakeholder program, respectively. As a result, the shared key control unit 1 (110) and the shared key control unit 2 (210) can be activated after the integrity is verified by secure boot defined by the mobile specification of TCG.
- ⁇ Tamper resistant module (120, 220)> The tamper resistant module 1 (120) will be described as being mounted as having an MTM function. Therefore, the tamper-resistant module 1 (120) is configured to use the first stakeholder program and the shared key control unit when performing secure processing such as encryption / decryption processing, signature generation / verification processing, TPM function processing, and key control processing. 1 (110). Further, the tamper resistant module 1 (120) holds the root key 1 (121) on the nonvolatile memory in the tamper resistant module 1. The root key 1 (121) is a key corresponding to SRK in TCG.
- the tamper resistant module 2 (220) will be described as being implemented as having an MTM function. Therefore, the tamper resistant module 2 (220) uses the second stakeholder program and the shared key control unit when performing secure processing such as encryption / decryption processing, signature generation / verification processing, TPM function processing, and key control processing. 2 (210). Further, the tamper resistant module 2 (220) holds the root key 2 (221) on the non-volatile memory in the tamper resistant module 1.
- the root key 2 (221) is a key corresponding to SRK in TCG.
- the key group 1 (130) and the shared key group 330 are configured as node keys having a hierarchical tree structure with the root key 1 (121) as a root. This corresponds to a key tree structure for realizing the protected storage function of TCG.
- Key group 1 (130) is a key group having a tree structure composed of one or more keys. Individual keys of the key group 1 (130) are used for encryption / decryption processing and signature generation / verification processing from the shared key control unit 1 (110) via the tamper resistant module 1 (120).
- the key group 2 (230) and the shared key group 330 are configured as node keys having a hierarchical tree structure with the root key 2 (221) as a root. This corresponds to a key tree structure for realizing the TCG Protected Storage function.
- Key group 2 (230) is a key group having a tree structure composed of one or more keys. Individual keys of the key group 2 (230) are used for encryption / decryption processing and signature generation / verification processing from the shared key control unit 2 (210) via the tamper resistant module 2 (220).
- the shared key group 330 is a key group having a tree structure composed of one or more keys. Individual keys of the shared key group 330 are used for encryption / decryption processing and signature generation / verification processing from the shared key control unit 1 (110) via the tamper resistant module 1 (110). The shared key group 330 is also used for encryption / decryption processing and signature generation / verification processing from the shared key control unit 2 (210) via the tamper resistant module 2 (220).
- the shared key group 330 includes a shared key and a parent key of the shared key for protecting the shared key.
- the parent key of the shared key is a key used only from the shared key control unit 1 (110) via the tamper resistant module 1 (110), and from the shared key control unit 2 (210) via the tamper resistant module 2 (210). And only used keys.
- the key group 1 (130), the key group 2 (230), and the shared key group (330) are stored in the key storage unit 30. The structure of the key group 1 (130), the key group 2 (230), and the shared key group (330) will be described in more detail with reference to FIGS.
- the encrypted data 1 (140) is data encrypted with the key of the key group 1 (130).
- the encrypted shared data 340 is data encrypted with the key of the shared key group 330.
- the encrypted data 2 (240) is data encrypted with the key of the key group 2 (230).
- the encrypted data 1 (140), the encrypted data 2 (240), and the encrypted shared data 340 are stored in the encrypted data storage unit 40.
- the encrypted data storage unit 40 is composed of a nonvolatile memory such as an HDD or a flash memory.
- the encrypted data 1 (140), the encrypted data 2 (240), and the encrypted shared data 340 are encrypted data.
- the encrypted data is not limited to the encrypted data. It may be generated data.
- the stakeholder certificate storage unit 50 is a unit that stores the stakeholder certificate 1 (150) and the stakeholder certificate 2 (250).
- the stakeholder certificate storage unit 50 is realized by a non-volatile memory, and is managed in a form in which integrity is protected.
- the stakeholder certificate 1 (250) is a certificate indicating that the first stakeholder program, the shared key control unit 1 (110), and the tamper-resistant module 1 (120) are provided from an authorized stakeholder.
- the stakeholder certificate 2 (250) is a certificate indicating that the second stakeholder program, the shared key control unit 2 (210), and the tamper-resistant module 2 (220) are provided from legitimate stakeholders.
- FIG. 4 is a diagram showing a tree structure of the key group 1 (130), the key group 2 (230), and the shared key group (330). Note that description of the components already described in FIG. 3 is omitted.
- FIG. 4 shows the tamper resistant module (120, 220), key group 1 (130), key group 2 (230), and shared key group (330) in FIG. 3 in more detail.
- the tamper resistant module 1 (120) includes a secure memory (122) protected from unauthorized access from the outside of the tamper resistant module 1 (120) and 16 PCRs (123).
- the root key 1 (121) is securely held in the secure memory (122).
- the tamper resistant module 2 (220) includes a secure memory (222) protected from unauthorized access from the outside of the tamper resistant module 2 (220) and 16 PCRs (223).
- the root key 2 (221) is securely held in the secure memory (222).
- the PCR 120, 220 is a register called Platform Configuration Registers, and stores the integrity value generated by the TCG TPM_Extend command. Note that the number of PCRs is not limited to 16, but may be more or less. In the embodiment, the number more than the number determined by the TCG specification is provided.
- root key 1 (121) will be described as K10 and the root key 2 (221) will be described as K20.
- Key group 1 (130) is composed of three keys (K11, K12, K13).
- K11 is tree-structured as a child key of K10, and K11 is encrypted by K10.
- Both K12 and K13 are tree-structured as child keys of K11, and K12 and K13 are encrypted with K11.
- Key group 2 (230) is composed of three keys (K21, K22, K23).
- K21 is tree-structured as a child key of K20, and K21 is encrypted by K20.
- K22 and K23 are tree-structured as child keys of K21, and K22 and K23 are encrypted with K31.
- the shared key group 330 is composed of four keys (K31, K32, K33, K34).
- K31 is tree-structured as a child key of K10, and K31 is encrypted by K10. Therefore, K31 is a key used only from the shared key control unit 1 (110) via the tamper resistant module 1 (110). This is because K31 is encrypted with K10, and when using the key value of K31, K31 must be decrypted using K10.
- K32 is tree-structured as a child key of K20, and K32 is encrypted by K20. Therefore, K32 is a key that is used only from the shared key control unit 2 (210) via the tamper resistant module 2 (210). This is because K32 is encrypted with K20, and therefore when using the key value of K32, K32 must be decrypted using K20.
- K33 and K34 will be described.
- K33 is tree-structured as a child key of K31 and K32
- K34 is tree-structured as a child key of K31 and K32.
- K33 and K34 are used for encryption / decryption processing and signature generation / verification processing from the shared key control unit 1 (110) via the tamper resistant module 1 (110), and from the shared key control unit 2 (210) to the tamper resistant module.
- 2 (220) is a shared key used for encryption / decryption processing and signature generation / verification processing. Therefore, K33 and K34 are keys that can be used from both the tamper resistant module 1 (110) and the tamper resistant module 2 (210) as described above.
- K31 and K32 have the same key value. Since the parent key has a tree structure in which the child key is encrypted, if K31 and K32 have the same key value, K33 and K34 are decrypted even if the root keys are different, such as K10 and K20. it can.
- the migration function in TCG is used. Since a specific flow will be described later with reference to FIGS. 11 and 12, a description thereof is omitted here.
- the encrypted data 1 (140) is composed of encrypted data D12 and D13.
- D12 is data encrypted with K12
- D13 is data encrypted with K13.
- the encrypted data of the encrypted data 1 (140) is not limited to this, and may be data signed using each of K12 and K13 as a signature key. Further, there may be a plurality of data encrypted at K12, or a plurality of data encrypted at K13.
- the encrypted data 2 (240) is composed of encrypted data D22 and D23.
- D22 is data encrypted with K22
- D23 is data encrypted with K23.
- the encrypted data of the encrypted data 2 (240) is not limited to this, and may be data signed using K22 and K23 as signature keys. Further, there may be a plurality of data encrypted at K22, or a plurality of data encrypted at K23.
- the encrypted shared data 340 is composed of encrypted shared data D33 and D34.
- D33 is data encrypted with K33
- D34 is data encrypted with K34.
- the encrypted data of the encrypted shared data 340 is not limited to this, and may be data signed using K33 and K34 as signature keys. Further, there may be a plurality of data encrypted at K33, or a plurality of data encrypted at K34.
- the number of keys of the key group 1 (130), the key group 2 (230), and the shared key group 330, the encrypted data 1 (140), the encrypted data 2 (240), and the encrypted shared data 340 The number of data is not limited to that shown in FIG.
- the key tree structure for rooting K10 and K20 is composed of a binary tree, but it may be a binary tree or an N-ary tree (N is an integer).
- Each key value of the root key 1 (121), the root key 2 (221), the key group 1 (130), the key group 2 (230), and the shared key group 330 has a key value as one element of the key attribute information. .
- the key value of K10 which is the root key 1 (121) is recorded in the key attribute information 410.
- the key value of K20 which is the root key 2 (221) is recorded in the key attribute information 420.
- the key value of K11 which is the key of the key group 1 (130), is recorded in the key attribute information 411.
- the key value of K21 which is the key of the key group 2 (230) is recorded in the key attribute information 421.
- the key value of K31 which is the key of the shared key group (330), is recorded in the key attribute information 431. Since other key values are recorded in the same manner, description thereof is omitted.
- the key value information and the information indicating the key attribute are recorded as the same data structure.
- FIG. 5 is a diagram showing the configuration of the key attribute information.
- the key attribute information 434 includes a migration permission flag 501, a sharing permission flag 502, an encryption algorithm that is information for identifying a key algorithm, a key value size 503, and a key value 504.
- the migration permission flag 501 is flag information indicating whether or not key migration is permitted. If “0”, migration is not possible, and “1” indicates migration permission.
- the sharing permission flag 502 is flag information indicating whether or not it can be used as a shared key. If “0”, sharing is not possible, and “1” indicates sharing permission.
- the key attribute information 410 further includes a stakeholder field 505 for storing information on a stakeholder when the key is accessible as a shared key from a plurality of stakeholders. If the key can be accessed from a plurality of stakeholders, the stakeholder field 505 is listed as many as the number of stakeholders to be accessed.
- stakeholder fields 505 from stakeholder identifiers 1 to n are set.
- K34 is an example accessible from the stakeholder 1 and the stakeholder 2, so there are two stakeholder fields 505.
- the stakeholder field 505 includes a stakeholder identifier 506, key usage restriction information 507 indicating key usage restrictions, and link information 508.
- the key usage restriction information 507 is a PCR value that is expected to be recorded in the PCR (123, 223) provided in the tamper resistant module when the key is used.
- the key use restriction information 507 is compared with the actual value recorded in the PCR (123, 223) included in the tamper resistant module, and the key is used only when the actual PCR value is equal to the expected PCR value. It is information for limiting as much as possible.
- the link information 508 is link information for identifying a parent key for each key or link information for identifying a child key for each key.
- the link information 508 in FIG. 6A is information for identifying a parent key for each key. If there are a plurality of parent keys, pointers (601, 602, 603) to the plurality of parent keys are stored in the link information 508 as shown in the figure.
- the link information 508 in FIG. 6B is information for identifying a child key for each key. If there are a plurality of child keys, pointers (611, 612, 613) to the plurality of child keys are stored in the link information 508 as shown in the figure.
- FIG. 7 is a diagram illustrating an example of a relationship between a key tree configuration and key attribute information. In FIG. 7, some of the keys illustrated in FIG. 4 are extracted and described.
- the key attribute information 410 of the root key 1 (K10) indicates that migration is not permitted, sharing is not permitted, the encryption algorithm is the RSA algorithm, and the key length is 2048 bits.
- the key value 504 field the key value of the public key of K10 and the key value of the secret key of K10 are set.
- the stakeholder field 505 shows the stakeholder identifier 506 as the stakeholder 1 identifier “SH1” and the PCR_10 as the expected PCR information in the key usage restriction information 507.
- the link information 508 is set with link information to the parent key in FIG. Since K10 is a root key, there is no parent key, so “NULL” is set in the link information 508. Furthermore, since K10 has no parent key, a plaintext key value is set in the field of the key value 504 of K10.
- the key attribute information 411 of the key K11 of the key group 1 (130) indicates migration permission, sharing permission, the encryption algorithm is the RSA algorithm, and the key length is 2048 bits.
- the key value of the public key of K11 and the key value of the secret key of K11 encrypted with the public key of K10 are set. Since K11 allows the stakeholder 1 to access, the stakeholder field 505 is set with the identifier “SH1” of the stakeholder 1 as the stakeholder identifier 506. Further, the link information 508 describes the link information to the parent key described in FIG. Since the parent key of K11 is K10, “pointer information to K10” is set in the link information 508.
- this pointer information may be an address or an identification ID as long as it can refer to the key attribute information 410 to K10.
- “NULL” is set as PCR information expected in the key use restriction information 507. This “NULL” indicates that there is no PCR restriction when using K11.
- the key attribute information 433 of K33 of the shared key group (330) indicates migration permission, sharing permission, the encryption algorithm is the AES algorithm, and the key length is 256 bits.
- the K33 key value encrypted with the public key of K31 or K32 is set. Since K33 is a shared key that can be shared between the stakeholder 1 and the stakeholder 2, the stakeholder identifiers “SH1” and “SH2” are set as the stakeholder identifier 506 in the stakeholder field 505.
- the key usage restriction information 507 describes PCR_33_1 used for restriction on usage from “SH1” and PCR_33_2 used for restriction on usage from “SH1” as expected PCR information.
- link information 508 link information to the parent key described in FIG. 6A is described. Since K33 is a shared key and the parent keys are K31 and K32, “pointer information to K31” and “pointer information to K32” are set in the link information 508.
- the encryption algorithm is RSA or AES, but the encryption algorithm is not limited to this. If it is a public key cryptosystem, an elliptic curve cryptosystem may be used instead of RSA, and an algorithm other than AES may be used in a common key cryptosystem.
- the key length is not limited to the example of the first embodiment.
- the parent key is a public key cryptosystem algorithm in a parent-child relationship, the key is encrypted with the public key of the parent key. If the parent key is a common key cryptosystem algorithm, the key is encrypted with the parent key. In addition, if the key is a child key public key cryptosystem algorithm, the secret key is to be encrypted, and if it is a common key cryptosystem, the encryption key is to be encrypted.
- the key attribute information 434 includes a key value 505, but the key value 505 and other attribute information may be configured as different data.
- the key management table 1 (113) is a table used by the shared key control unit 1 (110).
- the key management table 1 (113) includes a key ID 811 and a key attribute information address 812.
- the key ID 811 is an identifier for identifying each key.
- the key attribute information address 812 is set with an address value in which key attribute information corresponding to each key ID 811 is stored. By using these two pieces of information, shared key control unit 1 (113) accesses a desired key.
- the key management table 2 (213) is a table used by the shared key control unit 2 (210).
- the key management table 2 (213) includes a key ID 821 and a key attribute information address 822.
- the key ID 821 is an identifier for identifying each key.
- the key attribute information address 822 an address value in which key attribute information corresponding to each key ID 821 is stored is set. By using these two pieces of information, the shared key control unit 2 (213) accesses a desired key.
- the keys K33 and K34 set as the shared key are registered in both the key management table 1 (113) and the key management table 2 (213).
- Stakeholder certificate A certificate version 901 indicating the version 509, a serial number 902 assigned a unique value by the issuer, signature algorithm information 903 indicating a signature algorithm used for certificate signature verification, issuer information 904, and certificate validity period 905, a subject 906 indicating a certificate reception target, public key information 907 indicating a key value and a public key algorithm, TPM version 908, trust model identification information 909, dependent stakeholder certificate identification information 910, an extension area 911, and It is composed of signature data 912 for these data.
- TPM certificate A certificate version 901 indicating the version 509, a serial number 902 assigned a unique value by the issuer, signature algorithm information 903 indicating a signature algorithm used for certificate signature verification, issuer information 904, and certificate validity period 905, a subject 906 indicating a certificate reception target, public key information 907 indicating a key value and a public key algorithm, TPM version 908, trust model identification information 909, dependent stakeholder certificate identification information 910, an extension area 911, and It is composed of signature
- security-related information such as a manufacturing process such as CRL and ISO 90000 and a common criterion such as EAL may be described, or a function control condition and a function control content may be described.
- the trust model is defined using the trust model identification information 909 and the dependent stakeholder certificate identification information 910.
- the trust model identification information 909 and the dependent stakeholder certificate identification information 910.
- X X
- the format is 509
- other formats may be used.
- a RIM certificate format defined by the MTM specification may be used. By using the RIM certificate, it is possible to perform certificate verification using an MTM certificate verification command. Since the RIM certificate is described in detail in Non-Patent Document 4, description thereof is omitted here.
- the trust model information identification information 909 describes information for identifying three trust models, an Independent model, an Interdependent model, and a Dependent model.
- Dependent stakeholder certificate identification information 910 stores pointer information to a stakeholder certificate having a trust relationship in the trust model.
- FIG. 10A is a specific example of the Independent Model.
- the trust model identification information indicating the Independent Model is “001”. Since the model has no dependency relationship between the stakeholder 1 and the stakeholder 2, the dependency stakeholder model identification information 910 of CERT001 and CERT002 is set to “NULL”.
- FIG. 10B is a specific example of the Interdependent Model.
- the stakeholder 2 has a trust dependency relationship with the stakeholder 1. Therefore, the dependency stakeholder identification information 910 of CERT002 is set to “CERT001”, which is a trust destination stakeholder.
- FIG. 10C is a specific example of the Dependent Model.
- the stakeholder 2 has a trust dependency relationship with the stakeholder 1. Therefore, the dependency stakeholder identification information 910 of CERT002 is set to “CERT001”, which is a trust destination stakeholder.
- FIG. 11 and FIG. 12 show the case where there is a use request as a shared key from the shared key control unit 2 (210) for the key of the key group 1 (130) managed by the shared key control unit 1 (110). It is a flow.
- the tamper resistant module 1 migrates K31 to the tamper resistant module 2 (220), and the tamper resistant module 2 (220) is migrated.
- K31 is managed as K32, and K33 and K34, which are child keys of K31, are set as shared keys of the stakeholder 1 and the stakeholder 2.
- the shared key control unit 2 (210) sends an ID for identifying the stakeholder 2 and the public key of K20, which is the root key 2, to the shared key control unit 1 (110) as shared key setting request data.
- Step S1101 data is transmitted directly from shared key control unit 2 (210) to shared key control unit 1 (110), but the second stakeholder program sends a request for S1101 to the first stakeholder program.
- the first stakeholder program issues a processing request to the shared key control unit 1 (110), and the second stakeholder program issues a processing request to the shared key control unit 2 (210). It may be.
- shared key control unit 1 reads the stakeholder certificate corresponding to the ID received in S1101 from stakeholder certificate storage unit 50 (step S1103).
- the stakeholder certificate 2 (250) is read.
- the shared key control unit 1 (110) verifies the stakeholder certificate using the tamper resistant module 1 (120) (step S1103). If it is determined that the stakeholder certificate is not valid as a result of the verification in S1103, the shared key control unit 1 (110) shifts the processing to error processing (S1130). If the certificate is valid as a result of the verification in S1103, the process proceeds to step S1104.
- the stakeholder certificate storage unit 50 refers to the stakeholder certificate referenced by the dependent stakeholder identifier, and determines whether or not the stakeholder stakeholder certificate is valid. Confirmation is made (step S1104).
- step S1130 if it is determined to be valid, the process proceeds to S1106. If not, that is, if it is determined that the trust model is the Independent model, or the dependency destination stakeholder certificate is not valid, the process proceeds to error processing (step S1130).
- shared key control unit 1 searches for a key that can be migrated and shared in key group 1 (130) (step S1105).
- the search is performed from among K10, K11, K12, K13, K31, K33, and K34.
- step S1106 a new key that can be migrated and is permitted to share is generated (step S1106).
- the key generation process is performed by the tamper resistant module 1 (120).
- the shared key control unit 1 (110) registers the generated key in the key management table 1 (113) as the key of the key group 1 (130) (step S1107).
- step S1108 it is checked whether there is a migratable key that can be shared and found by searching in S1105 that has a child key (step S1108). If there is no such key, the process moves to step S1106, and a child key that can be migrated and is permitted to share is generated.
- K31 has a child key, and is selected as a key that can be migrated and shared.
- step S1109 a process of loading the key selected as a key that can be migrated and has a sharing permission in step S1107 is performed (step S1109).
- the load process here means that the child key is encrypted with the parent key, so that the key requested to be loaded is traced from the root key K10 in the leaf direction and decrypted based on the parent-child relationship. It is. In the example of FIG. 4, K31 is loaded.
- the shared key control unit 1 (110) migrates the key loaded in S1109 from the tamper resistant module 1 (120) to the tamper resistant module 2 (220). Then, a migration process request is made (step S1110).
- the key to be migrated is referred to as a migration key.
- K31 is a migration key
- K33 and K34 are set as shared keys.
- the tamper resistant module 1 (120) that has received the migration processing request encrypts the migration key with the public key received in S1101, and returns it to the shared key control unit 1 (110) (step S1111).
- K31 is encrypted with the public key of K20.
- shared key control unit 1 (110) transmits the encrypted migration key to shared key control unit 2 (210) (step S1112).
- data can be directly transmitted and received between the shared key control unit 1 (110) and the shared key control unit 2 (210), it is not directly, but another third party. It may be performed via the control unit.
- the shared key control unit 2 requests the tamper resistant module 2 (220) to complete the key migration process (step S1113).
- the tamper resistant module 2 (220) decrypts the encrypted migration key with the secret key of the root key 2 (221) (step S1114).
- the encrypted K31 is decrypted with the secret key of K20.
- the tamper resistant module 2 sets the stakeholder identifier 506 and the key use restriction information 507 in the stakeholder field 505 of the key attribute information of the migration key that has been converted to the plain text as the key use restriction information in the stakeholder 2. (Step S1115).
- the link information 508 is link information to the parent key in FIG. 6A
- the link information 508 in the stakeholder field 505 is set as the parent key of the migration destination, and the link information 508 is If it is the link information to the child key in FIG.
- the key attribute information of K31 and K32 is different from the stakeholder identifier 506, the key use restriction information 507, and the link information 508 in the stakeholder field 505, and others are set as the same value.
- K31 can be used only from the environment of the stakeholder 1, and can be used only from the environment of the stakeholder 2.
- the tamper resistant module 2 sets the key set in step S1115 to the designated position of the shared key group (330) (S1116).
- K32 is set as a child of K20. Therefore, the secret key of K32 is encrypted with the public key of K20.
- the key usage restriction information of the stakeholder 2 is transmitted from the tamper resistant module 2 (220) to the shared key control unit 1 (110) via the shared key control unit 2 (210) (step S1117).
- the shared key control unit 2 (110) sets the key usage restriction information of the stakeholder 2 in the key attribute information of the key set as the shared key (child key of the migration key) (step S1118).
- the information of the stakeholder 2 is added to the stakeholder field 505 of the key use restriction information of K33 and K34.
- two stakeholder fields, “SH1” and “SH2”, are set in the stakeholder field 505, and the key use restriction information (PCR) of the stakeholder 1 and the key use of the stakeholder 2 are set as the respective key use restriction information. Restriction information (PCR) is set.
- K33 and K34 are keys that can be shared and used from the environment of the stakeholder 1 and the environment of the stakeholder 2.
- the shared key control unit 1 (110) transmits the key ID set in S1118 and the key attribute information address in the key management table 1 (113) to the shared key control unit 2 (210) (step). S1119).
- key IDs and key attribute information of K33 and K34 are sent.
- shared key control unit 2 registers the key ID and the key attribute information address received in S1119 in key management table 2 (212).
- the shared keys K33 and K34 can be used from the shared key control unit 1 (110) and the shared key control unit 2 (210).
- the shared key control unit 2 (210) receives a notification to the shared key control unit 1 (110) that the key included in the key group 1 (130) is to be shared.
- the key group 1 (130) includes A predetermined key K31 that can be migrated to the key group 2 (230) is migrated to the key group 2 (230).
- the entire key group included in the tree structure having the predetermined key K31 as a parent key is not copied, but only the predetermined key K31 is copied.
- the key group included in the tree structure having the predetermined key K31 as the parent key in the tamper resistant module 1 (210) and the tamper resistant module 2 (220) is set as the shared key group 330, so that the predetermined key K31 is the parent key. It is possible to avoid the inefficiency of having the entire key group included in the key tree structure as a key.
- a predetermined key K31 is encrypted using a key included in the key group 2 (230) and held in the key group 2 (230). 130), by sharing a key lower than the predetermined key K31 included in the predetermined key K31, for example, K33 and K34, the shared key control unit 2 (210) side only needs to migrate the predetermined key K31. Keys lower than the predetermined key K31 included in the key group 1 (130) managed by the tamper resistant module 1 (210) corresponding to the unit 1 (110), for example, K33 and K34 can be shared. As a result, the shared key control unit 2 (210) can use the encrypted shared data (340) held in the shared key group 330 or the encrypted data storage unit 40 with a simple configuration.
- the shared key control unit 2 (210) can use the encrypted shared data (340) held in the encrypted data storage unit (40) only when the stakeholder 2 is dependent on the stakeholder 1. .
- the shared key control unit 1 (110) is a stakeholder model in which the stakeholder 2 corresponding to the shared key control unit 2 (210) uses a tamper resistant module 1 (120) corresponding to at least the stakeholder 1.
- the determination is made based on the certificates (150, 250)
- the dependency relationship of the stakeholder 2 with the stakeholder 1 can be determined with certainty, so that the key configuration for managing the predetermined data is simplified with the tamper-resistant module 1 (120) and the tamper-resistant module 2 (220), and unauthorized. Access to the shared key group 330 or the encrypted shared data 340 from the stakeholders can be surely prohibited.
- the key group 2 is selected from the keys included in the key group 1 (130) by referring to the attribute information indicating whether or not the key group 1 (130) can be migrated.
- the attribute information indicating whether or not the key group 1 (130) can be migrated.
- shared key control unit 1 (110) generates a migratable key if there is no migratable key in key group 2 (230) among the keys included in key group 1 (130). The generated key is migrated into the key group 2 (230). As a result, even if the predetermined key that can be migrated does not exist in the key group 2 (230) among the keys included in the key group 1 (130), the shared key control unit 2 (210) Since the key included in 1 (130) can be shared, shared key control unit 1 (110) encrypts encrypted data 1 (140) encrypted using the encryption key included in key group 1 (130). The shared data 340 is held in the encrypted data storage unit, and the encrypted shared data 340 can be accessed.
- the shared key control unit 2 (210) generates position information indicating the position of a key lower than the predetermined key included in the key group 1 (130) as the link information of the predetermined key and performs migration.
- the link information 508 of the predetermined key the position of the key below the predetermined key can be confirmed, so that the key below the predetermined key is used as a key managed by the tamper resistant module 2 (220).
- a key lower than a predetermined key can be shared with the tamper resistant module 1 (120) without copying.
- the tamper resistant module 1 (120) and the tamper resistant module 2 (220) hold the entire key group included in the tree structure having the predetermined key as a parent key.
- K33 and K34 are used as a shared key, information including the link information 508 of K31 can be migrated. For example, this can be realized by using the link information 508 in FIG.
- the position information of the predetermined key included in the key group 1 (130) and the position information of the predetermined key included in the key group 2 (230) are displayed below the predetermined key included in the key group 1 (130).
- the link information 508 of the key By generating the link information 508 of the key, the location of the parent key obtained by encrypting the key of the lower layer can be recognized by referring to the link information 508 of the lower layer key. Therefore, the tamper resistant module 1 (120) and Even when the tamper resistant module 2 (220) shares a lower layer key than the predetermined key included in the key group 1 (130), the lower layer key than the predetermined key included in the key group 1 (130) Can be easily identified with which key is encrypted. For example, this can be realized by using the link information 508 in FIG.
- FIG. 13 is a flow when the shared key set in FIG. 12 is used, and the second stakeholder program (200) uses the shared key K33 or K34 via the shared key control unit 2 (210). It is a flow of the case.
- the second stakeholder program 200 transmits a shared key encryption request together with the shared key ID to the shared key control unit 2 (210) (step S1300).
- shared key control unit 2 selects a shared key from key management table 2 (213) based on the ID received in S1300 (step S1301).
- the shared key control unit 2 transmits data to be encrypted and key attribute information of the shared key to the tamper resistant module 2 (220) (step S1302).
- the tamper resistant module 2 compares the PCR information, which is the usage restriction information in the key attribute information, with the actual value recorded in the PCR, and checks whether they are equal (step). S1303).
- the tamper resistant module 2 encrypts the shared data with the shared key and returns the encrypted data to the shared key control unit 2 (210) (steps S1304 and S1305).
- shared key control unit 2 (210) writes the encrypted data encrypted with the shared key in the encrypted data storage unit (step S1306).
- the key use restriction information is PCR information, but the key use restriction information is not limited to this.
- various authentication information such as a secure counter value of the TPM and verification information with biometric authentication may be used.
- the use of the key may be restricted by a combination of the authentication information.
- the counter value and the PCR may be combined so that the shared key can be used only when both match.
- the key use restriction information may be a use permission flag, which may be used if the key use restriction information is “1”, and may not be used if the key use restriction information is “0”.
- FIG. 14 is an outline flow of invalidation of a shared key. If the key shared between Stakeholder 1 and Stakeholder 2 is determined that either stakeholder environment is subject to revocation, or that the stakeholder environment has been tampered with, from the stakeholder or altered stakeholder side, This is a flow for preventing the shared key from being used.
- the shared key control unit determines that the stakeholder environment in the terminal is a revoke target or that the stakeholder environment in the terminal has been tampered with (step S1401).
- the revocation target can be determined based on the IDs of revocation targets listed in the revocation list.
- the tampering check it is possible to have a certificate including the hash value of the stakeholder program in the information processing terminal and perform a tampering check on the program statically or dynamically to determine whether or not tampering has occurred.
- the shared key control unit confirms whether or not there is a shared key that the stakeholder determined to be revoked or tampered with shares with other stakeholders (step S1402). If it exists, the process proceeds to step S1403. Otherwise, if it does not exist, there is no shared key to be revoked, and the revocation process ends.
- FIG. 15 is a detailed flow of revoking the shared key, which is a detailed flow of S1403 of FIG.
- a shared key shared with other stakeholders by a stakeholder determined to be revoked or falsified is determined (step S1501). This determination process can be performed by referring to the stakeholder field 505 of the key attribute information. Become.
- step S1502 the parent key of the key determined as the shared key in S1501 is accessed, and the encrypted shared key is decrypted with the key (step S1502).
- the shared key control unit uses the random number generation function to update the key value of the key attribute information of the parent key with a random number (step S1503).
- the key value is updated with a random number
- the present invention is not limited to this. A value other than a random number may be used if it is overwritten with a value different from the original key value.
- the shared key is encrypted with the updated parent key (step S1504).
- FIG. 16 is an example showing a state before (before invalidation) and after (after invalidation) of the invalidation flow of FIG.
- FIG. 16A shows the state before invalidation.
- shared keys K33 and K34 are shared between stakeholder 1 and stakeholder 2.
- FIG. 16B is an example after invalidating K33 and K34 from the environment of the stakeholder 2 when it is determined that the environment of the stakeholder 2 is subject to revocation or tampering.
- K31 The key value of K31 is rewritten with a random number, and the rewritten key is K35.
- the shared keys K33 and K34 are encrypted with K35, and K35 is encrypted with K10. Therefore, K35 cannot be decrypted from the stakeholder 2 side.
- K33 nor K34 can be decoded. Therefore, it is possible to protect the data encrypted by K33 and K34 from unauthorized use by an unauthorized stakeholder environment.
- Module 1 120
- Module 1 120
- the shared key control unit 2 cannot decrypt the key included in the tree structure having the substitute key as a parent key using the predetermined key, the tree structure having the substitute key as the parent key is obtained.
- the predetermined data encrypted with the included key cannot be used, and the predetermined data can be protected from unauthorized use.
- the predetermined key is K31 and the alternative key is K35.
- shared key control unit 1 (110) and shared key control unit 2 (210) are configured as separate control units, but are shared with shared key control unit 1 (110).
- the key control unit 2 (210) and both functions may be realized as one control unit.
- the shared key control unit 1 (110) and the shared key control unit 2 (210) can be configured by a shared shared key control unit, and a shared key between two stakeholders can be obtained by one shared key control unit. Since it is possible to control in an integrated manner, it is possible to perform access control more flexibly.
- the setting of the shared key and the invalidation of the shared key for preventing unauthorized use of the shared key by an unauthorized stakeholder after setting the shared key are described. On the other hand, it may be set again as a shared key.
- the revoked shared key may be set as the shared key again.
- the unauthorized stakeholder 2 environment downloads the update module from the second stakeholder management server, updates the unauthorized stakeholder 2 environment, and if the result of the update results in a regular stakeholder environment, the invalidated sharing Revive the key so that it can be used again from the stakeholder 2.
- the process of setting again as a shared key can be realized by performing the shared key setting process described in the first embodiment on the updated stakeholder 2, and thus description thereof is omitted.
- the second embodiment is an example in which the shared key is revoked by a method different from that of the first embodiment. A description of the same configuration and flow as in the first embodiment will be omitted, and processing unique to the second embodiment will be described with reference to the drawings.
- FIG. 17 is a detailed flow of revoking the shared key, which is a detailed flow of S1403 of FIG.
- FIG. 18 shows before (after invalidation) and after (after invalidation) the invalidation flow of FIG.
- description will be made with reference to FIGS. 17 and 18.
- step S1701 and step S1702 are the same as S1501 and S1502 in the first embodiment, description thereof will be omitted.
- a key that can be migrated and is permitted to be shared which is different from the parent key of the shared key, is selected from the tree other than the shared key group (330) in S1702. If no such key exists, a new key is generated. (Step S1703).
- the shared key cannot be used from the stakeholder 2 by using the selected key as a new parent key of the shared key.
- a key different from the parent key of the shared key may be selected regardless of whether migration is possible or whether sharing is permitted.
- a key that can be further migrated and is permitted to share is selected.
- the first case is that an unauthorized stakeholder whose shared key has been revoked because it is determined to be an unauthorized stakeholder environment can use the shared key again when the stakeholder environment becomes a regular stakeholder environment through the update process. It is a case to be revived.
- it is necessary to migrate the parent key of the shared key In preparation for this, a key that can be migrated and has permission to share must be kept as a new parent key. There is.
- the second case is a case where there is a shared key shared by three or more stakeholders.
- a shared key shared by stakeholders 1, 2 and 3 is revoked only for stakeholder 2, the shared key must be set to be shared between stakeholder 1 and stakeholder 3. There is. If the parent key of the shared key is changed, the stakeholder 3 cannot use the shared key. Therefore, in order to maintain the shared key shared with the stakeholder 3, it is necessary to perform a process of migrating the shared key to the stakeholders 1 to 3 after the change of the shared key. If the master key of the shared key is migrated from stakeholder 1 to stakeholder 3, it becomes possible for both stakeholders to use the shared key.
- the link information 508 of the key attribute information is updated so that the key selected in S1703 and the shared key have a parent-child relationship (Step S1703). S1704).
- the shared key is encrypted with the key selected in S1703 (step S1705).
- FIG. 18 is an example showing a state before (before invalidation) and after (after invalidation) the invalidation flow of FIG.
- FIG. 18 (a) shows the state before invalidation.
- shared keys K33 and K34 are shared between stakeholder 1 and stakeholder 2.
- FIG. 18B shows an example after invalidating K33 and K34 from the stakeholder 2 environment when it is determined that the stakeholder 2 environment is subject to revocation or tampering.
- the master key of K33 and K34 is M11 that is not K31 but can be migrated and shared. In this way, K33 and K34 are encrypted with K11, and K11 is encrypted with K10. For this reason, K11 cannot be decrypted from the stakeholder 2 side, and as a result, neither K33 nor K34 can be decrypted. Therefore, data encrypted by K33 and K34 can be protected from unauthorized use due to an unauthorized stakeholder environment.
- Module 1 re-encrypts predetermined data using a key other than the key included in the tree structure having the predetermined key as a parent key.
- the shared key control unit 2 cannot decrypt the predetermined data using a key included in the tree structure having the predetermined key as a parent key.
- the predetermined data encrypted with a key other than the key included in the password cannot be used, and the predetermined data can be protected from unauthorized use.
- the predetermined key is K31, and a key other than the keys included in the tree structure having the predetermined key as a parent key can be realized as K11.
- the shared key can be shared again.
- the process of setting again as the shared key can be realized by performing the shared key setting process described in the second embodiment on the updated stakeholder 2, and thus the description thereof is omitted.
- the third embodiment is an example in which the shared key is revoked by a method different from the first embodiment and the second embodiment. A description of the same configuration and flow as those in the first and second embodiments will be omitted, and processing unique to the third embodiment will be described with reference to the drawings.
- FIG. 19 is a detailed flow of revoking the shared key, which is a detailed flow of S1403 of FIG.
- step S1901 and step S1902 are the same as S1501 and S1502, description thereof will be omitted.
- a stakeholder determined to be revoked or tampered by S1901 accesses a shared key determined to be shared with other stakeholders, and accesses key usage restriction information corresponding to the stakeholder or tampered stakeholder. (Step S1902).
- the shared key control unit uses the random number generation function to update the key usage restriction information of the key attribute information corresponding to the shared key selected in S1902 with a random number (step S1503).
- the key usage restriction information is updated with random numbers, but the present invention is not limited to this.
- the shared key control unit 1 when the first stakeholder environment managed by the first stakeholder detects that the second stakeholder environment has been altered or is subject to revocation, the shared key control unit 1 (110) The key use restriction information 508 of the key attribute information is rewritten so that the data encrypted in step S2 cannot be used from the shared key control unit 2 (210). As a result, the shared key control unit 2 (220) cannot perform the key loading process of the shared key, and can protect data encrypted with the shared key from unauthorized use.
- the key usage restriction information of the parent key of the shared key may be updated. This is because when a shared key is configured in a plurality of layers, the root of the shared key (330) is invalidated by following the shared key in the root direction, and the child key is invalidated. This is because the key can be invalidated.
- the shared key control unit 2 performs the PCR (223) actually obtained from the key use restriction information 507 generated from the second stakeholder environment without falsification and the second stakeholder program (200). The key is used only when the comparison result is correct.
- the shared key control unit 2 uses the predetermined key to change the predetermined key. Since the key included in the tree structure with the parent key cannot be decrypted, the predetermined data encrypted using the key included in the tree structure with the predetermined key as the parent key cannot be decrypted. Protects against unauthorized use.
- K33 cannot be loaded from the shared key control unit 2 (210), so that it is possible to protect against unauthorized use of the data D34 encrypted by K33.
- the shared key control unit 1 uses the predetermined key as a parent key.
- the key usage restriction information is rewritten so that the key included in the tree structure is not usable from the shared key control unit 2 (210).
- the shared key control unit 2 cannot decrypt a key included in the tree structure having the predetermined key as a parent key by using the predetermined key.
- the predetermined data encrypted using the included key cannot be decrypted, and the predetermined data can be protected from unauthorized use.
- the predetermined key is K32 and the keys included in the tree structure having the predetermined key as a parent key are K33 and K34, the usage restriction information on K32 is rewritten, or the key usage restriction on K33 and K34 is used. This can be realized by rewriting information.
- the shared key when an unauthorized stakeholder environment becomes a valid stakeholder environment due to updating or the like, the shared key can be shared again.
- the key use restriction information about the updated stakeholder may be updated to the updated key use restriction information (PCR value) of the stakeholder.
- FIG. 23 shows a flow for sharing a shared key again when an unauthorized stakeholder environment in the third embodiment becomes a valid stakeholder environment due to updating or the like.
- an example will be described in which the environment of the stakeholder 2 becomes a valid stakeholder environment due to updating or the like, and the shared key with the environment of the stakeholder 1 whose sharing has been invalidated is shared again.
- step S2301 it is determined that the environment of the stakeholder 1 has been updated to a valid environment of the stakeholder 2 that has been determined to be illegal. This determination is made, for example, periodically, when power is turned on, or when the environment of the stakeholder 2 has been updated.
- the shared key control unit 1 (110) in the stakeholder 1 environment refers to the key attribute information in the shared key group (330), and the stakeholder 2 identifier is registered in the stakeholder identifier 506 of the stakeholder field 505.
- a key is selected (step S2302).
- the key use restriction information in the key attribute information of the key selected in S2303 is updated to the stakeholder environment information that has become valid (step S2303).
- the key usage restriction information corresponding to the identifier of the stakeholder 2 in the key attribute information is updated to the environmental information of the stakeholder 2 after being validated by updating or the like.
- S2302 and S2303 may be repeated.
- the environment of the stakeholder 2 can use the shared key shared with the stakeholder 1 whose sharing has been invalidated as the shared key again.
- the fourth embodiment is an example in which the encrypted shared data is protected by a method different from the first embodiment, the second embodiment, and the third embodiment. Descriptions of parts having the same configuration and flow as those of the other embodiments will be omitted, and processing unique to the third embodiment will be described with reference to the drawings.
- FIG. 20 is a diagram showing the structure of encrypted shared data.
- the encrypted shared data includes an encrypted data size 2001, encrypted data 2002, and a stakeholder field 2003.
- the stakeholder field 2003 includes a stakeholder identifier 2004 and usage restriction information 2005 indicating the usage restriction of the key.
- Usage restriction information 2005 is an expected PCR value, compared with the actual value recorded in the PCR (123, 223) included in the tamper resistant module, and the actual PCR value and the expected PCR value were equal. This is information for limiting the decoding result to be obtained from the tamper resistant module only in the case.
- FIG. 21 is a diagram showing a flow of the encrypted shared data decryption process of the shared key control unit 2 (210).
- shared key control unit 2 receives a decryption request for encrypted shared data from second stakeholder program (200), and reads encrypted shared data 340 to be decrypted from encrypted data storage unit 40. (Step S2101).
- shared key control unit 2 selects a shared key from key management table 2 (213) (step S2102).
- the shared key control unit 2 uses the shared key selected in S2102 and the encrypted shared data read in S2101 as parameters, and requests the tamper resistant module 2 (220) to perform a decryption process (step) S2103).
- Step S2104 the shared key specified in S2103 is decrypted from the root key 2 of the key tree in the leaf direction based on the parent-child relationship, and a plaintext shared key is obtained to decrypt the encrypted shared data.
- the tamper resistant module 2 compares the expected PCR value set as the usage restriction information of the encrypted shared data requested to be decrypted with the value recorded in the actual PCR (223). (Step S2105). If they are equal as a result of the comparison, the decrypted data is returned to shared key control unit 2 (210) (step S2106). As a result of the comparison, if it is determined that they are not equal, the decrypted data is not returned to the shared key control unit 2 (210), and only an error notification is returned.
- FIG. 22 is a detailed flow for invalidating the decryption processing of the encrypted shared data, and is a detailed flow of S1403 of FIG. 14 in the fourth embodiment.
- the stakeholder determined to be revoked or falsified determines shared data shared with other stakeholders (step S2201). This determination process can be performed by referring to the stakeholder field 2003 of the data structure of the encrypted shared data.
- step S2202 the access restriction information of the encrypted shared data determined in S2201 is accessed.
- the shared key control unit uses the random number generation function to update the usage restriction information accessed in S2202 with a random number (step S1503).
- the usage restriction information is updated with random numbers, the present invention is not limited to this.
- the shared key control unit 2 (220) is configured to use the encrypted data usage restriction information generated from the second stakeholder environment without falsification and the tamper resistant module 2 actually obtained from the second stakeholder environment.
- the environment information recorded in the PCR (223) in (220) is compared, and the encrypted data is decrypted only when the comparison result is correct.
- the shared key control unit 2 uses the predetermined key and uses the predetermined key as the parent key.
- the encrypted data encrypted using the key included in the tree structure cannot be decrypted, and the encrypted data can be protected from unauthorized use.
- the decryption result cannot be obtained from the tamper-resistant module 2 (220) even if the decryption data of D33 encrypted with K33 is obtained. It can protect from unauthorized use of D34.
- the shared key control unit 1 uses a predetermined key as a parent key.
- the encrypted data usage restriction information 2005 is rewritten so that the encrypted data encrypted with the key included in the tree structure as a key cannot be used from the shared key control unit 2 (210).
- Embodiments 1 to 4 may be implemented in combination.
- the tamper resistant module (150, 250) is realized by using TPM or MTM. Therefore, a Trusted Boot specified by TCG or a Secure Boot specified by TCG Mobile specifications may be used. Any mechanism that can verify the integrity of the program to be executed may be used.
- the first shared key control unit when the first shared key control unit performs a secure boot, it detects an attack from the outside of the second shared key control unit by detecting that the second shared key control unit is attacked from the outside. I can judge.
- the Attestation function defined by TCG may be used for the tampering check of the stakeholder environment.
- the server-side determination result of the Attestation function may be sent to the information processing terminal 10 to detect stakeholder tampering, or the revocation list 14 distributed from the server as described above may be used.
- the shared key control unit 1 (110) receives an unauthorized detection of a falsification of the shared key control unit 2 (210) or a notification indicating that the shared key control unit 1 (110) is a revoke target from the external server. 2 (210) can prevent unauthorized use of shared keys and encrypted shared data.
- the encrypted shared data can be shared again when an unauthorized stakeholder environment becomes a valid stakeholder environment due to an update or the like.
- the key use restriction information for the updated stakeholder of the encrypted shared data may be updated to the updated key use restriction information (PCR value) of the stakeholder.
- the information referred to in S2202 and S2203 of the processing in FIG. 23 is not the key attribute information in FIG. 5 but the shared key encrypted data in FIG. Since the information to be updated is not the key use restriction information 508 but only the key use restriction information 2005, description thereof is omitted.
- the stakeholder environment other than the stakeholder determined to be unauthorized is used as the trigger for the re-sharing process. After the stakeholder himself / herself verifies that he / she is valid after the update, the stakeholder may request sharing to the stakeholder as the sharing destination again.
- the present invention has been described based on the above embodiment, it is needless to say that the present invention is not limited to the above embodiment. The following cases are also included in the present invention.
- Each of the above devices is specifically a computer system including a microprocessor, a ROM, a RAM, a hard disk unit, a display unit, a keyboard, a mouse, and the like.
- a computer program is stored in the RAM or hard disk unit.
- Each device achieves its functions by the microprocessor operating according to the computer program.
- the computer program is configured by combining a plurality of instruction codes indicating instructions for the computer in order to achieve a predetermined function.
- Each device does not include all of the microprocessor, the ROM, the RAM, the hard disk unit, the display unit, the keyboard, the mouse, and the like, but may be configured by a part of them.
- a part or all of the components constituting each of the above devices may be configured by one system LSI (Large Scale Integration).
- the system LSI is an ultra-multifunctional LSI manufactured by integrating a plurality of components on a single chip, and specifically, a computer system including a microprocessor, ROM, RAM, and the like. .
- a computer program is stored in the RAM.
- the system LSI achieves its functions by the microprocessor operating according to the computer program.
- each part of the constituent elements constituting each of the above devices may be individually made into one chip, or may be made into one chip so as to include a part or all of them.
- the system LSI is used here, it may be called IC, LSI, super LSI, or ultra LSI depending on the degree of integration. Further, the method of circuit integration is not limited to LSI's, and implementation using dedicated circuitry or general purpose processors is also possible.
- An FPGA Field Programmable Gate Array
- a reconfigurable processor that can reconfigure the connection and setting of circuit cells inside the LSI may be used.
- a part or all of the constituent elements constituting each of the above devices may be constituted by an IC card or a single module that can be attached to and detached from each device.
- the IC card or the module is a computer system including a microprocessor, a ROM, a RAM, and the like.
- the IC card or the module may include the super multifunctional LSI described above.
- the IC card or the module achieves its function by the microprocessor operating according to the computer program. This IC card or this module may have tamper resistance.
- the present invention may be the method described above. Further, the present invention may be a computer program that realizes these methods by a computer, or may be a digital signal composed of the computer program.
- the present invention also provides a computer-readable recording medium such as a flexible disk, hard disk, CD-ROM, MO, DVD, DVD-ROM, DVD-RAM, BD (Blu-ray Disc). ), Recorded in a semiconductor memory or the like.
- the digital signal may be recorded on these recording media.
- the computer program or the digital signal may be transmitted via an electric communication line, a wireless or wired communication line, a network represented by the Internet, a data broadcast, or the like.
- the present invention may be a computer system including a microprocessor and a memory, the memory storing the computer program, and the microprocessor operating according to the computer program.
- the program or the digital signal is recorded on the recording medium and transferred, or the program or the digital signal is transferred via the network or the like, and executed by another independent computer system. It is good.
- the present invention for example, in an industry that manufactures and sells information processing devices that handle secure data, uses a certificate having a dependency relationship among a plurality of stakeholders, shares a key according to the dependency relationship, It can be used as a mechanism for efficiently encrypting secure shared data among multiple stakeholders. Furthermore, the present invention can be used as a mechanism for restricting access to a shared key from unauthorized stakeholders.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Storage Device Security (AREA)
Abstract
Description
本発明の実施の形態について、説明する。以降、本実施の形態で示すTPMは、TCGのMobile Phone Working Groupで仕様化されているMobile Trusted Module(MTM)の機能を有する耐タンパーモジュールであるとして説明する。
まず、マルチステークホルダーについて携帯電話機を例として説明する。携帯電話機には、デバイスメーカー、キャリア、アプリケーションサービス提供者、ユーザーといった複数のステークホルダーが存在する。各ステークホルダーは、各自の権利物を所有している。
図2は、マルチステークホルダーモデルにおけるトラストモデルを示した図である。
図3は、マルチステークホルダーモデルの情報処理端末10の全体構成図である。
第1のステークホルダープログラム100は、第1のステークホルダーから提供されるプログラム群であり、第1のステークホルダー管理サーバー11から配布されるものである。第1のステークホルダープログラム100は、耐タンパーモジュール120のセキュアブート機能により、正当性を検証されたプログラムのみが起動される。
共有鍵制御部1(110)は、鍵群1(130)と共有鍵群(330)との利用制御を行う部であり、マルチステークホルダーモデル判定部1(111)と、共有許可設定部1(112)と鍵管理テーブル1(113)とから構成される。
耐タンパーモジュール1(120)は、MTM機能を有するものとして実装されているとして説明する。そのため、耐タンパーモジュール1(120)は、暗復号処理や署名生成・検証処理やTPM機能処理などのセキュアな処理や、鍵の制御処理をする際に、第1のステークホルダープログラム及び共有鍵制御部1(110)などから利用される。さらに、耐タンパーモジュール1(120)は、耐タンパーモジュール1内の不揮発性メモリ上にルート鍵1(121)を保持する。このルート鍵1(121)は、TCGにおけるSRKに相当する鍵である。
鍵群1(130)と共有鍵群330とは、ルート鍵1(121)をルートとした階層的ツリー構造のノード鍵として構成される。これは、TCGのProtected Storage機能を実現するための鍵ツリー構造に相当する。
暗号化データ1(140)は、鍵群1(130)の鍵で暗号化されたデータである。暗号化共有データ340は、共有鍵群330の鍵で暗号化されたデータである。暗号化データ2(240)は、鍵群2(230)の鍵で暗号化されたデータである。
ステークホルダー証明書格納部50は、ステークホルダー証明書1(150)とステークホルダー証明書2(250)とを格納する部である。ステークホルダー証明書格納部50は、不揮発メモリで実現され、完全性が保護された形で管理される。
図4は、鍵群1(130)と鍵群2(230)と共有鍵群(330)とのツリー構成を表した図である。なお、図3で既に説明している構成要素については、説明を省略する。図4では、図3における耐タンパーモジュール(120,220)、鍵群1(130)、鍵群2(230)、及び共有鍵群(330)を、より詳細に示したものである。
ルート鍵1(121)、ルート鍵2(221)、鍵群1(130)、鍵群2(230)、共有鍵群330のそれぞれの鍵値は、鍵属性情報の1要素として鍵値を持つ。
ここで、図6を用いてリンク情報508の構造について説明する。
図7は、鍵のツリー構成と鍵属性情報の関係の例を表した図である。図7では、図4に図示している一部の鍵について抜粋して説明する。
次に、鍵管理テーブルについて説明する。
次に、図9を用いて、ステークホルダー証明書について説明する。ステークホルダー証明書1(150)、及び、ステークホルダー証明書2(250)は、すべて同じフォーマットであるとする。具体的には、X.509形式のフォーマットを利用する。
トラストモデル情報識別情報909は、3つのトラストモデルであるIndependent Model、Interdependent Model、及び、Dependent Modelを識別するため情報が記載される。
図11及び図12は、共有鍵制御部1(110)で管理している鍵群1(130)の鍵について、共有鍵制御部2(210)から共有鍵としての利用要求があった場合のフローである。
図13は、図12で設定した共有鍵を利用する際のフローであり、第2のステークホルダープログラム(200)が、共有鍵制御部2(210)を介して、共有鍵K33あるいはK34を利用する場合のフローである。
図14は、共有鍵の無効化の概要フローである。ステークホルダー1及びステークホルダー2間で共有されている鍵を、どちらかのステークホルダー環境がリボーク対象であるか、もしくは、ステークホルダー環境に改竄があると判定された場合、リボーク対象もしくは改竄されたステークホルダー側から、共有鍵を利用させないようにするためのフローである。
<図15:共有鍵の無効化の詳細フロー>
図15は、共有鍵の無効化の詳細フローであり、図14のS1403を詳細化したフローである。
実施の形態2では、実施の形態1とは異なる方法で、共有鍵の無効化をする例である。実施の形態1と同じ構成やフローである部分について説明を省略し、実施の形態2に特有の処理について図面を用いて説明する。
図17は、共有鍵の無効化の詳細フローであり、図14のS1403を詳細化したフローである。また、図18は、図17の無効化フローの実施前(無効化前)と実施後(無効化後)とを示したものでる。以降、図17及び図18を用いて説明する。
本実施の形態3では、実施の形態1と実施の形態2とは異なる方法で、共有鍵の無効化をする例である。実施の形態1と実施の形態2と同じ構成やフローである部分について説明を省略し、実施の形態3に特有の処理について図面を用いて説明する。
図19は、共有鍵の無効化の詳細フローであり、図14のS1403を詳細化したフローである。
図23は、実施の形態3における不正なステークホルダー環境が、更新などにより正当なステークホルダー環境になった場合に、共有鍵を再度共有させるフローを示している。ここでは、ステークホルダー2の環境が、更新などにより正当なステークホルダー環境になり、共有が無効化されていたステークホルダー1の環境との共有鍵を、再度共有化する例で説明する。
本実施の形態4では、実施の形態1、実施の形態2、及び実施の形態3とは異なる方法で、暗号化共有データを保護するする例である。他の実施の形態と同じ構成やフローである部分について説明を省略し、実施の形態3に特有の処理について図面を用いて説明する。
図20は、暗号化共有データの構造を示した図である。暗号化共有データは、暗号化データサイズ2001と、暗号化データ2002と、ステークホルダーフィールド2003とを備える。
図21は、共有鍵制御部2(210)の暗号化共有データ復号処理のフローを示した図である。
図22は、暗号化共有データの復号処理を無効化するための詳細フローであり、実施の形態4における図14のS1403を詳細化したフローである。
なお、実施の形態1から実施の形態4は、組み合わせて実現されてもよい。
(その他変形例)
なお、本発明を上記実施の形態に基づいて説明してきたが、本発明は、上記の実施の形態に限定されないのはもちろんである。以下のような場合も本発明に含まれる。
11 第1のステークホルダー管理サーバー
12 認証PCRデータベース
13 証明書データベース
14 リボケーションリスト
15 ネットワーク
16 第2のステークホルダー管理サーバー
21、22、31、32、41,42 ステークホルダー
23、24、33、34、43 TPM
100、200 ステークホルダープグラム
110、210 共有鍵制御部
111、211 マルチステークホルダー判定部
112、212 共有許可設定部
113、213 鍵管理テーブル
120、220 耐タンパーモジュール
121、221 ルート鍵
30 鍵格納部
40 暗号化データ格納部
50 証明書格納部
130 鍵群1
230 鍵群2
330 共有鍵群
140、240 暗号化データ
340 暗号化共有データ
150、250 ステークホルダー証明書
122、221 セキュアメモリ
410、411、412、413、420、421、422、423、431、432、434 鍵属性情報
123、223 PCR
501 マイグレート許可フラグ
502 共有許可フラグ
503 暗号アルゴリズム・鍵サイズ
504 鍵値
505、2003 ステークホルダーフィールド
506、2004 ステークホルダー識別子
507、2005 鍵利用制限情報
508、2006 リンク情報
601、602、603、611、612、613 鍵ポインタ
811、821 鍵ID
812、822 鍵属性情報アドレス
901 証明書バージョン
902 シリアルナンバー
903 署名アルゴリズム
904 発行者情報
905 有効期間
906 サブジェクト
907 公開鍵情報
908 TPMバージョン
909 トラストモデル識別情報
910 依存ステークホルダー証明書識別情報
911 拡張領域
912 署名データ
2001 暗号化データサイズ
2002 暗号化データ
Claims (19)
- 第1のステークホルダーに対応する第1共有鍵制御部と、
第2のステークホルダーに対応する第2共有鍵制御部と、
前記第1のステークホルダーに対応し、複数の暗号鍵を含む第1の暗号鍵群をツリー構造で管理する第1の耐タンパーモジュールと、
前記第1の暗号鍵群に含まれる暗号鍵を用いて暗号化された所定のデータを保持するデータ保持部と、
前記第2のステークホルダーに対応し、複数の暗号鍵を含む第2の暗号鍵群をツリー構造で管理する第2の耐タンパーモジュールと、を具備し、
前記第2共有鍵制御部から前記第1共有鍵制御部に前記第1の暗号鍵群に含まれる鍵を共有したい旨の通知を受けると、
前記第1共有鍵制御部は、前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係であるか否かを判断し、前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係である場合、前記第1の暗号鍵群に含まれる鍵の中から前記第2の暗号鍵群にコピー可能な所定の鍵を探して、この所定の鍵を前記第2の暗号鍵群の中にコピーし、
前記第2共有鍵制御部は、前記第2の暗号鍵に含まれる鍵を用いて前記所定の鍵を暗号化して前記第2の暗号鍵群の中に保持することで、前記第1の暗号鍵群に含まれる前記所定の鍵より下層の鍵を共用することを特徴とする情報処理装置。 - 前記第2共有鍵制御部は、前記第1共有鍵制御部との間の依存関係を証明した証明書を有し、前記第1共有鍵制御部に前記第1の暗号鍵群に含まれる鍵を共有したい旨の通知を送付する際、前記証明書を送付し、
前記第1共有鍵制御部は、前記証明書に基づいて、前記第2共有鍵制御部に対応する第2のステークホルダーが、少なくとも前記第1のステークホルダーに対応する第1の耐タンパーモジュールを利用するステークホルダーモデルであると判断した場合に、
前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係であると判断することを特徴とする請求項1記載の情報処理装置。 - 前記第1の暗号鍵群に含まれる各鍵は、当該鍵が前記第1の暗号鍵群からコピー可能か否かを示す属性情報を有し、
前記第1共有鍵制御部は、前記属性情報を参照して、前記第1の暗号鍵群に含まれる鍵の中から前記第2の暗号鍵群にコピー可能な所定の鍵を探すことを特徴とする請求項2記載の情報処理装置。 - 前記第1共有鍵制御部は、前記第1の暗号鍵群に含まれる鍵の中から前記第2の暗号鍵群にコピー可能な所定の鍵が存在しない場合、コピー可能な鍵を生成して、この生成した鍵を前記第2の暗号鍵群の中にコピーすることを特徴とする請求項1記載の情報処理装置。
- 前記第1共有鍵制御部は、前記第1の暗号鍵群に含まれる前記所定の鍵より下層の鍵の位置を示す位置情報を前記所定の鍵のリンク情報として生成し、このリンク情報と共に前記所定の鍵を前記第2の暗号鍵群の中にコピーすることを特徴とする請求項3記載の情報処理装置。
- 前記第1共有鍵制御部は、前記第1の暗号鍵群に含まれる所定の鍵の位置情報及び前記第2の暗号鍵群に含まれる所定の鍵の位置情報を、前記第1の暗号鍵群に含まれる前記所定の鍵より下層の鍵のリンク情報として生成することを特徴とする請求項5記載の情報処理装置。
- 前記第1共有鍵制御部と前第2共有鍵制御部とは、共用の共有鍵制御部であることを特徴とする請求項1記載の情報処理装置。
- 前記第1のステークホルダーが管理する第1ステークホルダー環境は、前記第2のステークホルダーが管理する第2のステークホルダー環境が改竄されたもしくはリボーク対象であることを検知した場合、前記第1共有鍵制御部は、前記所定の鍵と置換える代替鍵を前記第1の耐タンパーモジュールに生成させ、前記所定の鍵を親鍵とするツリー構造に含まれる鍵を前記代替鍵で再暗号化させると共に前記前記所定の鍵の親鍵を用いて前記代替鍵を暗号化させて、前記第2共有鍵制御部による前記所定のデータの利用を排除することを特徴とする請求項1記載の情報処理装置。
- 前記第1のステークホルダーが管理する第1ステークホルダー環境は、前記第2のステークホルダーが管理する第2のステークホルダー環境が改竄されたもしくはリボーク対象であることを検知した場合、前記第1共有鍵制御部は、前記所定の鍵を親鍵とするツリー構造に含まれる鍵以外の鍵を用いて前記第1の耐タンパーモジュールに前記所定のデータを暗号化し直させて、前記第2共有鍵制御部による前記所定の鍵の使用を排除することを特徴とする請求項1記載の情報処理装置。
- 前記第1の暗号化鍵群に含まれる前記所定の鍵を親鍵とするツリー構造に含まれる鍵は、属性情報として、前記改竄のない第2のステークホルダーが管理する第2ステークホルダー環境のハッシュ値から生成された期待値として鍵利用制限情報を有し、
第2の耐タンパーモジュールは、前記第2のステークホルダー環境のハッシュ値から生成された実際の値としての環境情報を記憶し、
第2の共有鍵制御部から前記第1の共有鍵制御部に対して前記第1の暗号化鍵群に含まれる前記所定の鍵を親鍵とするツリー構造に含まれる鍵の利用を依頼するときに、第2の共有鍵制御部は、前記鍵利用制限情報と前記環境情報とを比較し、比較結果が正しい場合にのみ前記鍵を利用させるように制限をすることを特徴する請求項1記載の情報処理装置。 - 前記第1ステークホルダーが管理する第1のステークホルダー環境は、前記第2ステークホルダー環境が改竄されたもしくはリボーク対象であることを検知した場合、前記第1の共有鍵制御部は、前記所定の鍵を親鍵とするツリー構造に含まれる鍵を、第2の共有鍵制御部から利用できないように、前記鍵利用制限情報を書き換えることを特徴とする請求項10の情報処理端末。
- 前記第1の暗号化鍵群に含まれる前記所定の鍵を親鍵とするツリー構造に含まれる鍵で暗号化された暗号化データは、属性情報として、前記改竄のない第2のステークホルダーが管理する第2ステークホルダー環境のハッシュ値から生成された期待値である暗号化データ利用制限情報を有し、
第2の耐タンパーモジュールは、前記第2のステークホルダー環境のハッシュ値から生成された実際の値としての環境情報を記憶し、
第2の共有鍵制御部から前記第1の共有鍵制御部に対して前記第1の暗号化鍵群に含まれる前記所定の鍵を親鍵とするツリー構造に含まれる鍵で暗号化されたデータの復号処理を依頼するときに、第2の共有鍵制御部は、前記暗号化データ利用制限情報と前記環境情報とを比較し、比較結果が正しい場合にのみ前記暗号化データの復号処理させるように制限をすることを特徴する請求項1記載の情報処理装置。 - 前記第1ステークホルダーが管理する第1のステークホルダー環境は、前記第2ステークホルダー環境が改竄されたもしくはリボーク対象であることを検知した場合、前記第1の共有鍵制御部は、前記所定の鍵を親鍵とするツリー構造に含まれる鍵で暗号化された暗号化データを、第2の共有鍵制御部から利用できないように、前記暗号化データ利用制限情報を書き換えることを特徴とする請求項12の情報処理端末。
- 前記第1共有鍵制御部は、第1ステークホルダー環境および第2ステークホルダー環境を環境に対して完全性をチェックしてから改竄されていない環境のみを起動する機能であるセキュアブートによってブートする際に、第2ステークホルダー環境が改竄された、もしくはリボーク対象であることを検知することを特徴とする請求項8乃至請求項13のいずれかに記載の情報処理装置。
- 前記第1共有鍵制御部は、外部のサーバーから、前記第2ステークホルダー環境が改竄されたもしくはリボーク対象である旨の通知を受けることで前記第第2ステークホルダー環境が改竄された、もしくはリボーク対象であることを検知することを特徴とする請求項8乃至請求項13のいずれかに記載の情報処理装置。
- 第1のステークホルダーに対応する第1共有鍵制御部と、
第2のステークホルダーに対応する第2共有鍵制御部と、
前記第1のステークホルダーに対応し、複数の暗号鍵を含む第1の暗号鍵群をツリー構造で管理する第1の耐タンパーモジュールと、
前記第1の暗号鍵群に含まれる暗号鍵を用いて暗号化された所定のデータを保持するデー保持部と、
前記第2のステークホルダーに対応し、複数の暗号鍵を含む第2の暗号鍵群をツリー構造で管理する第2の耐タンパーモジュールと、を具備する情報処理装置における暗号鍵の鍵管理方法であって、
前記第1共有鍵制御部において、前記第2共有鍵制御部から前記第1共有鍵制御部に前記第1の暗号鍵群に含まれる鍵を共有したい旨の通知を受けると、
前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係であるか否かを判断し、
前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係である場合、前記第1の暗号鍵群に含まれる鍵の中から前記第2の暗号鍵群にコピー可能な所定の鍵を探して、この所定の鍵を前記第2の暗号鍵群の中にコピーし、
前記第2共有鍵制御部において、前記第2の暗号鍵に含まれる鍵を用いて前記所定の鍵を暗号化して前記第2の暗号鍵群の中に保持することで、前記第1の暗号鍵群に含まれる前記所定の鍵より下層の鍵を共用することを特徴とする暗号鍵の管理方法。 - 第1のステークホルダーに対応する第1共有鍵制御部と、
第2のステークホルダーに対応する第2共有鍵制御部と、
前記第1のステークホルダーに対応し、複数の暗号鍵を含む第1の暗号鍵群をツリー構造で管理する第1の耐タンパーモジュールと、
前記第1の暗号鍵群に含まれる暗号鍵を用いて暗号化された所定のデータを保持するデー保持部と、
前記第2のステークホルダーに対応し、複数の暗号鍵を含む第2の暗号鍵群をツリー構造で管理する第2の耐タンパーモジュールと、を具備する情報処理装置における暗号鍵の鍵管理に用いるコンピュータプログラムであって、
コンピュータに対して、
前記第1共有鍵制御部において、前記第2共有鍵制御部から前記第1共有鍵制御部に前記第1の暗号鍵群に含まれる鍵を共有したい旨の通知を受けると、
前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係であるか否かを判断する処理と、
前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係である場合、前記第1の暗号鍵群に含まれる鍵の中から前記第2の暗号鍵群にコピー可能な所定の鍵を探して、この所定の鍵を前記第2の暗号鍵群の中にコピーする処理と、を実行させ、
前記第2共有鍵制御部において、前記第2の暗号鍵に含まれる鍵を用いて前記所定の鍵を暗号化して前記第2の暗号鍵群の中に保持することで、前記第1の暗号鍵群に含まれる前記所定の鍵より下層の鍵を共用する処理を実行させることを特徴とするコンピュータプログラム。 - 第1のステークホルダーに対応する第1共有鍵制御部と、
第2のステークホルダーに対応する第2共有鍵制御部と、
前記第1のステークホルダーに対応し、複数の暗号鍵を含む第1の暗号鍵群をツリー構造で管理する第1の耐タンパーモジュールと、
前記第1の暗号鍵群に含まれる暗号鍵を用いて暗号化された所定のデータを保持するデー保持部と、
前記第2のステークホルダーに対応し、複数の暗号鍵を含む第2の暗号鍵群をツリー構造で管理する第2の耐タンパーモジュールと、を具備する情報処理装置に用いる集積回路であって、
情報処理部と、
この情報処理部に対して、
前記第1共有鍵制御部において、前記第2共有鍵制御部から前記第1共有鍵制御部に前記第1の暗号鍵群に含まれる鍵を共有したい旨の通知を受けると、
前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係であるか否かを判断する処理と、
前記第2共有鍵制御部に対応する第2のステークホルダーが前記第1共有鍵制御部に対応する第1のステークホルダーに依存する関係である場合、前記第1の暗号鍵群に含まれる鍵の中から前記第2の暗号鍵群にコピー可能な所定の鍵を探して、この所定の鍵を前記第2の暗号鍵群の中にコピーする処理と、を実行させ、
前記第2共有鍵制御部において、前記第2の暗号鍵に含まれる鍵を用いて前記所定の鍵を暗号化して前記第2の暗号鍵群の中に保持することで、前記第1の暗号鍵群に含まれる前記所定の鍵より下層の鍵を共用する処理を実行させる処理プログラムを格納したメモリと、
を具備した集積回路。 - 前記第1共有鍵制御部は、
前記第1の暗号鍵群に含まれる暗号鍵で暗号化されている前記所定の鍵を、前記暗号鍵を用いて復号し、
復号された鍵を、前記第2の暗号鍵群に含まれる暗号鍵で再暗号化し、
再暗号化された鍵を、前記第2の暗号鍵群の中にコピーする
ことを特徴とする請求項1記載の情報処理装置。
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2009801219282A CN102057618A (zh) | 2008-06-23 | 2009-06-04 | 信息处理装置、加密密钥的管理方法、计算机程序及集成电路 |
JP2010517691A JP5314016B2 (ja) | 2008-06-23 | 2009-06-04 | 情報処理装置、暗号鍵の管理方法、コンピュータプログラム及び集積回路 |
EP09769852A EP2293490A1 (en) | 2008-06-23 | 2009-06-04 | Information processing device, encryption key management method, computer program and integrated circuit |
US12/995,008 US20110099362A1 (en) | 2008-06-23 | 2009-06-04 | Information processing device, encryption key management method, computer program and integrated circuit |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2008-163071 | 2008-06-23 | ||
JP2008163071 | 2008-06-23 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2009157142A1 true WO2009157142A1 (ja) | 2009-12-30 |
Family
ID=41444215
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/JP2009/002531 WO2009157142A1 (ja) | 2008-06-23 | 2009-06-04 | 情報処理装置、暗号鍵の管理方法、コンピュータプログラム及び集積回路 |
Country Status (5)
Country | Link |
---|---|
US (1) | US20110099362A1 (ja) |
EP (1) | EP2293490A1 (ja) |
JP (1) | JP5314016B2 (ja) |
CN (1) | CN102057618A (ja) |
WO (1) | WO2009157142A1 (ja) |
Families Citing this family (66)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10181953B1 (en) * | 2013-09-16 | 2019-01-15 | Amazon Technologies, Inc. | Trusted data verification |
WO2012023050A2 (en) | 2010-08-20 | 2012-02-23 | Overtis Group Limited | Secure cloud computing system and method |
US9237155B1 (en) | 2010-12-06 | 2016-01-12 | Amazon Technologies, Inc. | Distributed policy enforcement with optimizing policy transformations |
US8769642B1 (en) | 2011-05-31 | 2014-07-01 | Amazon Technologies, Inc. | Techniques for delegation of access privileges |
US9197409B2 (en) | 2011-09-29 | 2015-11-24 | Amazon Technologies, Inc. | Key derivation techniques |
US9178701B2 (en) | 2011-09-29 | 2015-11-03 | Amazon Technologies, Inc. | Parameter based key derivation |
US9203613B2 (en) | 2011-09-29 | 2015-12-01 | Amazon Technologies, Inc. | Techniques for client constructed sessions |
US8892865B1 (en) | 2012-03-27 | 2014-11-18 | Amazon Technologies, Inc. | Multiple authority key derivation |
US9215076B1 (en) | 2012-03-27 | 2015-12-15 | Amazon Technologies, Inc. | Key generation for hierarchical data access |
US8739308B1 (en) | 2012-03-27 | 2014-05-27 | Amazon Technologies, Inc. | Source identification for unauthorized copies of content |
US10075471B2 (en) | 2012-06-07 | 2018-09-11 | Amazon Technologies, Inc. | Data loss prevention techniques |
US9590959B2 (en) | 2013-02-12 | 2017-03-07 | Amazon Technologies, Inc. | Data security service |
US10084818B1 (en) | 2012-06-07 | 2018-09-25 | Amazon Technologies, Inc. | Flexibly configurable data modification services |
US9286491B2 (en) | 2012-06-07 | 2016-03-15 | Amazon Technologies, Inc. | Virtual service provider zones |
US9258118B1 (en) | 2012-06-25 | 2016-02-09 | Amazon Technologies, Inc. | Decentralized verification in a distributed system |
US9660972B1 (en) | 2012-06-25 | 2017-05-23 | Amazon Technologies, Inc. | Protection from data security threats |
US9323950B2 (en) | 2012-07-19 | 2016-04-26 | Atmel Corporation | Generating signatures using a secure device |
US10210341B2 (en) | 2013-02-12 | 2019-02-19 | Amazon Technologies, Inc. | Delayed data access |
US9705674B2 (en) * | 2013-02-12 | 2017-07-11 | Amazon Technologies, Inc. | Federated key management |
US10467422B1 (en) | 2013-02-12 | 2019-11-05 | Amazon Technologies, Inc. | Automatic key rotation |
US9300464B1 (en) | 2013-02-12 | 2016-03-29 | Amazon Technologies, Inc. | Probabilistic key rotation |
US9547771B2 (en) | 2013-02-12 | 2017-01-17 | Amazon Technologies, Inc. | Policy enforcement with associated data |
US9367697B1 (en) | 2013-02-12 | 2016-06-14 | Amazon Technologies, Inc. | Data security with a security module |
US10211977B1 (en) | 2013-02-12 | 2019-02-19 | Amazon Technologies, Inc. | Secure management of information using a security module |
US9118467B2 (en) * | 2013-03-13 | 2015-08-25 | Atmel Corporation | Generating keys using secure hardware |
US9832171B1 (en) | 2013-06-13 | 2017-11-28 | Amazon Technologies, Inc. | Negotiating a session with a cryptographic domain |
US9407440B2 (en) | 2013-06-20 | 2016-08-02 | Amazon Technologies, Inc. | Multiple authority data security and access |
CN103338450A (zh) * | 2013-06-26 | 2013-10-02 | 华为技术有限公司 | 一种验证方法及设备 |
US9825759B2 (en) * | 2013-07-08 | 2017-11-21 | Alcatel Lucent | Secure service management in a communication network |
US9521000B1 (en) | 2013-07-17 | 2016-12-13 | Amazon Technologies, Inc. | Complete forward access sessions |
US9237019B2 (en) | 2013-09-25 | 2016-01-12 | Amazon Technologies, Inc. | Resource locators with keys |
US9311500B2 (en) | 2013-09-25 | 2016-04-12 | Amazon Technologies, Inc. | Data security using request-supplied keys |
US10243945B1 (en) | 2013-10-28 | 2019-03-26 | Amazon Technologies, Inc. | Managed identity federation |
US9172532B1 (en) * | 2013-11-19 | 2015-10-27 | Amazon Technologies, Inc. | Multi-tiered encryption system for efficiently regulating use of encryption keys |
US9420007B1 (en) | 2013-12-04 | 2016-08-16 | Amazon Technologies, Inc. | Access control using impersonization |
US9374368B1 (en) | 2014-01-07 | 2016-06-21 | Amazon Technologies, Inc. | Distributed passcode verification system |
US9292711B1 (en) | 2014-01-07 | 2016-03-22 | Amazon Technologies, Inc. | Hardware secret usage limits |
US9369461B1 (en) | 2014-01-07 | 2016-06-14 | Amazon Technologies, Inc. | Passcode verification using hardware secrets |
US9270662B1 (en) | 2014-01-13 | 2016-02-23 | Amazon Technologies, Inc. | Adaptive client-aware session security |
CN104901931B (zh) * | 2014-03-05 | 2018-10-12 | 财团法人工业技术研究院 | 证书管理方法与装置 |
US10771255B1 (en) | 2014-03-25 | 2020-09-08 | Amazon Technologies, Inc. | Authenticated storage operations |
US9432192B1 (en) * | 2014-03-28 | 2016-08-30 | Emc Corporation | Content aware hierarchical encryption for secure storage systems |
US9397835B1 (en) | 2014-05-21 | 2016-07-19 | Amazon Technologies, Inc. | Web of trust management in a distributed system |
US9258117B1 (en) | 2014-06-26 | 2016-02-09 | Amazon Technologies, Inc. | Mutual authentication with symmetric secrets and signatures |
US10326597B1 (en) | 2014-06-27 | 2019-06-18 | Amazon Technologies, Inc. | Dynamic response signing capability in a distributed system |
US9438421B1 (en) | 2014-06-27 | 2016-09-06 | Amazon Technologies, Inc. | Supporting a fixed transaction rate with a variably-backed logical cryptographic key |
US9866392B1 (en) | 2014-09-15 | 2018-01-09 | Amazon Technologies, Inc. | Distributed system web of trust provisioning |
US10469477B2 (en) | 2015-03-31 | 2019-11-05 | Amazon Technologies, Inc. | Key export techniques |
EP3297206B1 (en) * | 2015-05-08 | 2020-04-22 | Panasonic Intellectual Property Management Co., Ltd. | Authentication method, authentication system, and controller |
US10122692B2 (en) | 2015-06-16 | 2018-11-06 | Amazon Technologies, Inc. | Handshake offload |
US10122689B2 (en) | 2015-06-16 | 2018-11-06 | Amazon Technologies, Inc. | Load balancing with handshake offload |
EP3185464B1 (en) | 2015-12-21 | 2020-05-20 | Hewlett-Packard Development Company, L.P. | Key generation information trees |
US10482255B2 (en) | 2016-02-16 | 2019-11-19 | Atmel Corporation | Controlled secure code authentication |
US10474823B2 (en) | 2016-02-16 | 2019-11-12 | Atmel Corporation | Controlled secure code authentication |
US10616197B2 (en) | 2016-04-18 | 2020-04-07 | Atmel Corporation | Message authentication with secure code verification |
US10116440B1 (en) | 2016-08-09 | 2018-10-30 | Amazon Technologies, Inc. | Cryptographic key management for imported cryptographic keys |
US10666443B2 (en) * | 2016-10-18 | 2020-05-26 | Red Hat, Inc. | Continued verification and monitoring of application code in containerized execution environment |
SG10201609090XA (en) * | 2016-10-31 | 2018-05-30 | Huawei Int Pte Ltd | System and method for controlling access to encrypted vehicular data |
JPWO2019026372A1 (ja) * | 2017-08-04 | 2020-06-18 | ソニー株式会社 | 情報処理装置、情報処理方法およびプログラム |
US11539520B2 (en) * | 2017-10-04 | 2022-12-27 | Delphian Systems, LLC | Emergency lockdown in a local network of interconnected devices |
GB201803815D0 (en) * | 2018-03-09 | 2018-04-25 | Nchain Holdings Ltd | Computer-implemented methods and systems |
US20190305940A1 (en) * | 2018-03-28 | 2019-10-03 | Ca, Inc. | Group shareable credentials |
US11397815B2 (en) * | 2018-09-21 | 2022-07-26 | Hewlett Packard Enterprise Development Lp | Secure data protection |
US11399020B2 (en) | 2019-06-28 | 2022-07-26 | HCL Technologies Italy S.p.A | System and method for authenticating server identity during connection establishment with client machine |
US11804949B2 (en) * | 2021-03-19 | 2023-10-31 | Raytheon Bbn Technologies Corp. | Subscriber revocation in a publish-subscribe network using attribute-based encryption |
US11558185B2 (en) | 2021-03-19 | 2023-01-17 | Raytheon Bbn Technologies Corp. | Stream-based key management |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH11187013A (ja) | 1997-12-24 | 1999-07-09 | Ibm Japan Ltd | 暗号鍵配信システム |
JP2009003855A (ja) * | 2007-06-25 | 2009-01-08 | Panasonic Corp | 情報セキュリティ装置およびカウンタ制御方法 |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7103185B1 (en) * | 1999-12-22 | 2006-09-05 | Cisco Technology, Inc. | Method and apparatus for distributing and updating private keys of multicast group managers using directory replication |
CN101145177B (zh) * | 2002-08-01 | 2011-06-15 | 松下电器产业株式会社 | 加密程序生成方法和设备 |
MX2007012748A (es) * | 2005-04-25 | 2008-01-14 | Nokia Corp | Metodo y aparato de generacion de codigo de grupo. |
US7424398B2 (en) * | 2006-06-22 | 2008-09-09 | Lexmark International, Inc. | Boot validation system and method |
-
2009
- 2009-06-04 US US12/995,008 patent/US20110099362A1/en not_active Abandoned
- 2009-06-04 WO PCT/JP2009/002531 patent/WO2009157142A1/ja active Application Filing
- 2009-06-04 JP JP2010517691A patent/JP5314016B2/ja not_active Expired - Fee Related
- 2009-06-04 CN CN2009801219282A patent/CN102057618A/zh active Pending
- 2009-06-04 EP EP09769852A patent/EP2293490A1/en not_active Withdrawn
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH11187013A (ja) | 1997-12-24 | 1999-07-09 | Ibm Japan Ltd | 暗号鍵配信システム |
JP2009003855A (ja) * | 2007-06-25 | 2009-01-08 | Panasonic Corp | 情報セキュリティ装置およびカウンタ制御方法 |
Non-Patent Citations (3)
Title |
---|
"2008 Consumer Communications and Networking Conference", vol. 3, 10 January 2008, article ONUR ACIICMEZ ET AL.: "A Trusted Mobile Phone Prototype", pages: 1208 - 1209, XP008146447 * |
JEN-SHIUN LIN ET AL.: "Secure and efficient group key management with shared key derivation", COMPUTER STANDARDS & INTERFACES, vol. 31, no. ISSUE, January 2009 (2009-01-01), pages 192 - 208, XP027019037 * |
TAKAAKI MIZUKI ET AL.: "Necessary and Sufficient Numbers of Cards for Sharing Secret Keys on Hierarchical Groups", IEICE TRANSACTIONS ON INFORMATION AND SYSTEMS, vol. E85-D, no. 2, 1 February 2002 (2002-02-01), pages 333 - 345, XP008146449 * |
Also Published As
Publication number | Publication date |
---|---|
JPWO2009157142A1 (ja) | 2011-12-08 |
EP2293490A1 (en) | 2011-03-09 |
CN102057618A (zh) | 2011-05-11 |
US20110099362A1 (en) | 2011-04-28 |
JP5314016B2 (ja) | 2013-10-16 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP5314016B2 (ja) | 情報処理装置、暗号鍵の管理方法、コンピュータプログラム及び集積回路 | |
JP5281074B2 (ja) | 情報セキュリティ装置および情報セキュリティシステム | |
US8261073B2 (en) | Digital rights management method and apparatus | |
US8613103B2 (en) | Content control method using versatile control structure | |
US8245031B2 (en) | Content control method using certificate revocation lists | |
JP6286034B2 (ja) | プロセス認証とリソースパーミッション | |
CN110287654B (zh) | 使用硬件信任根的媒体客户端装置鉴权 | |
RU2500075C2 (ru) | Создание и проверка достоверности документов, защищенных криптографически | |
US20080034440A1 (en) | Content Control System Using Versatile Control Structure | |
US20100138652A1 (en) | Content control method using certificate revocation lists | |
JP5180203B2 (ja) | メモリ装置から供給される情報を制御するシステムおよび方法 | |
US20100268936A1 (en) | Information security device and information security system | |
CN109328352A (zh) | 靶向安全软件部署 | |
US20080010449A1 (en) | Content Control System Using Certificate Chains | |
US20080010452A1 (en) | Content Control System Using Certificate Revocation Lists | |
US20080022395A1 (en) | System for Controlling Information Supplied From Memory Device | |
JP5097130B2 (ja) | 情報端末、セキュリティデバイス、データ保護方法及びデータ保護プログラム | |
JP2005129069A (ja) | 携帯用メディア上のコンテンツの暗号化およびデータ保護 | |
WO2008008244A2 (en) | Content control system and method using versatile control structure | |
JP5178716B2 (ja) | 証明書取消リストを使用するコンテンツ管理システムおよび方法 | |
JP2009543208A (ja) | 証明書連鎖を使用するコンテンツ管理システムおよび方法 | |
JP4972165B2 (ja) | アイデンティティオブジェクトを使用する制御システムおよび方法 | |
KR101711024B1 (ko) | 부정조작방지 장치 접근 방법 및 그 방법을 채용한 단말 장치 | |
Abbadi | Digital rights management for personal networks |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WWE | Wipo information: entry into national phase |
Ref document number: 200980121928.2 Country of ref document: CN |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 09769852 Country of ref document: EP Kind code of ref document: A1 |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2010517691 Country of ref document: JP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 12995008 Country of ref document: US |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2009769852 Country of ref document: EP |
|
NENP | Non-entry into the national phase |
Ref country code: DE |