JP5167082B2 - Electronic data supply device and electronic data utilization device - Google Patents

Description

  The present invention relates to an electronic data supply device that supplies electronic data and an electronic data utilization device that uses the supplied electronic data, and more particularly, unauthorized electronic data between the electronic data supply device and the electronic data utilization device. The present invention relates to an electronic data supply device and an electronic data utilization device having a mechanism for preventing exchange of information.

  Since electronic data can be easily duplicated with the same quality as the original, the copyright protection has become a social issue. In particular, a portable storage device such as a memory card can be used as an electronic data supply device, and electronic data in the portable storage device can be easily transferred or copied from a right holder to a non-user. Therefore, if copyright protection measures are not taken, it depends on the copyright awareness of the user to prevent fraud, so if there is a malicious user, it is stored in the portable storage device. The secondary-distributable electronic data is connected to an unspecified number of storage devices, so that illegally copied electronic data can be stored.

  Recently, a memory card is often used as an electronic data supply device. A memory card is a portable storage device with high versatility, and can be connected to many electronic data utilization devices to store, read, erase, etc. electronic data in the memory card. In addition, a method of storing and distributing update data related to a specific program or digital information in a memory card is performed. The update data in the memory card is used to update the electronic data used internally by a specific electronic data utilization device, and becomes unnecessary after the update. It can be deleted after copying to a medium or the like, and the memory card can be used for another purpose, which is very convenient.

  Assuming the use as described above, if a user publishes update data on the Internet, etc., an unspecified number of users store the update data in their own memory cards, so that a lot of specification It is possible to update the internal electronic data of the electronic data utilization apparatus. It does not matter if the copyright holder of the update data allows such a large number of update processes, but it corresponds to the case where the copyright holder of the update data wants to limit the user to those who have the right. I can't.

  Solutions to this problem include encryption of update data, assigning a password to the update data so that only the person who knows the decryption key and password can use the update data, and special writing Using the device, perform special special writing, such as forcing a specific part of the medium to a hard error, and create the update data with the occurrence of the hard error as a precondition for accessing the update data. Therefore, a physical guard method for preventing update data access at the time of illegal copying has been proposed.

  However, the method using a password or a decryption key does not necessarily lead to the benefit of the user because the confidential information is not concealed. Therefore, there is a high risk of leakage of the confidential information. Therefore, there are problems such as production problems and inability to reuse the apparatus. Regardless of the method, there is a disadvantage for the copyright holder and the information provider. Therefore, further research and development have been conducted to solve the copyright protection problem of electronic data.

  For example, Patent Document 1 below discloses a copy guard device that prevents unauthorized copying of electronic data recorded on an electronic medium. The feature of the technique disclosed in Patent Document 1 is that information that is written in the electronic data storage medium using the ID number is provided separately from the electronic data utilization device by providing a medium with an ID number corresponding to the electronic data user in advance. Encryption and decryption are performed.

  Patent Document 2 below discloses an electronic publication distribution system provided with illegal copy prevention means. A feature of the system disclosed in Patent Document 2 is that an electronic data supply device is a storage medium that is divided into a user area and a non-user area, an encryption key is stored in the non-user area, and the electronic data is encrypted with the encryption key. The data is stored in the user area, the encrypted electronic data is read with a normal command, the encryption key in the non-user area is read with a private command, and decrypted in the electronic data using device. .

JP-A-5-250268 JP 2001-67269 A

  However, in the copy guard device described in Patent Document 1, a portable storage device that is an electronic data supply device and a storage medium that is assigned a user-compatible ID number are separately provided, and a storage medium that is assigned an ID number Since the electronic data that is written and used in the electronic data using device is encrypted and decrypted using the storage device, the storage medium to which the ID number is assigned and the portable storage device that stores the electronic data are always used as a pair. Otherwise, there is a problem that the contents of electronic data cannot be used.

  Therefore, for example, when lending a portable storage device storing electronic data purchased by a certain user to another person, if the storage medium assigned with the ID number is also lent to the other person, It becomes possible to execute without verifying the validity of the supply of electronic data.

  In the electronic publication distribution system described in Patent Document 2, the content of electronic data can be used only by a portable storage device that is an electronic data supply apparatus. However, the copy guard apparatus described in Patent Document 1 can be used. As in the case of, the electronic data can be supplied to the electronic data utilization device in the same manner only by lending a portable storage device in which electronic data is stored to another user.

  Therefore, the techniques disclosed in the above two patent documents can prevent unauthorized copying in which electronic data is taken out from a portable storage device and stored in another portable storage device, but the same portable storage device is used many times. Unauthorized operation when turning cannot be prevented.

  In light of the above-mentioned background, the technical field to which the present invention belongs includes robust means for preventing unauthorized copying of electronic data in a portable storage device, and unauthorized operations that use a portable storage device that stores electronic data. There is a problem that both means to prevent must be realized simultaneously.

  The present invention has been made in view of the problems in the above-described electronic data supply device and utilization device, and an object thereof is to provide an electronic data supply device and an electronic data utilization device that can prevent reuse of stored electronic data. In the point.

  In order to achieve the above object, an electronic data supply device according to the present invention provides electronic data in which electronic data at least partially encrypted is linked one-to-one by a linking process among a plurality of electronic data utilization devices. An electronic data supply device that supplies only to a utilization device, a first storage area having tamper resistance, a second storage area having tamper resistance equal to or lower than the first storage area, the linking process, and the electronic An initial shared key of shared key information shared with the electronic data utilization device in an initial state in which the first storage device includes a first control device that controls data supply processing and the first storage area is not associated one-to-one Information is stored, and in the tied state after the tying process, the nearest shared key information that is the shared key information shared at the time of the last connection with the tied electronic data utilization device, and the tied electronic data Profit Unique key information unique to the device is stored, and the first control device performs the electronic data supply processing to one of the plurality of electronic data utilization devices before the electronic data supply processing. When one electronic data using device is in the initial state, the first ciphertext obtained by encrypting the unique key information of the one electronic data using device with the initial shared key information, or the one electronic data using device If it is not the initial state, the second ciphertext obtained by encrypting the unique key information of the one electronic data using device with the latest shared key information included in the one electronic data using device is sent from the one electronic data using device. Receiving and decrypting the received first or second ciphertext with the initial shared key information or the latest shared key information stored in the first storage area, and using the one electronic data utilization device The unique key information is taken out, and in the tied state, the one electronic data using device compares the unique key information taken out by decryption with the unique key information stored in the first storage area. The first feature is that a process for confirming whether or not the electronic data utilization apparatus is attached is performed.

  According to the electronic data supply device of the first feature, between the electronic data supply device in the initial state and the electronic data utilization device in the initial state, the electronic data supply device decrypts the first ciphertext with the initial shared key information. Since the unique key information of the electronic data utilization device can be shared, the linking process can be executed with the electronic data utilization device and the electronic data is provided to the electronic data utilization device. Can do. In addition, between the electronic data supply device and the electronic data utilization device associated with each other, the electronic data supply device decrypts the second ciphertext with the latest shared key information, so that the uniqueness of the electronic data utilization device is obtained. Compared with the key information and the unique key information stored in the first storage area, it is possible to confirm the association with the electronic data utilization device. Data can be provided. In addition, between the electronic data supply device in the initial state and the electronic data utilization device linked with another electronic data supply device, the electronic data supply device decrypts the second ciphertext received from the electronic data utilization device. Since the unique key information of the electronic data using device cannot be shared because it does not have the most recent shared key information to be converted, the new association process with the electronic data using device, and the electronic data using device The provision of electronic data can be suppressed. Further, between the electronic data supply device in the associated state and the electronic data utilization device in the initial state, the electronic data supply device decrypts the first ciphertext received from the electronic data utilization device with the latest shared key information. Therefore, the unique key information of the electronic data utilization device cannot be shared, and provision of electronic data to the electronic data utilization device can be suppressed. In addition, between the electronic data supply device in the associated state and the electronic data utilization device associated with another electronic data supply device, the most recent sharing for decrypting the second ciphertext received from the electronic data utilization device Since the key information is not shared, the unique key information of the electronic data utilization device cannot be shared, and provision of electronic data to the electronic data utilization device can be suppressed.

  Therefore, according to the electronic data supply device of the first feature, in the initial state, for the electronic data utilization device in the initial state, in the association state, for the electronic data utilization devices associated with each other, Although electronic data can be provided, electronic data cannot be provided in other illegal combinations, so that reuse of stored electronic data can be prevented.

  In addition, since the first storage area has tamper resistance, the initial shared key information stored in the first storage area or the unique key of the electronic data supply device linked to the latest shared key information. Since it is difficult to illegally read out or falsify information, it becomes difficult to make the electronic data supply device that is an unauthorized combination appear to be an electronic data supply device that is an authorized combination. Providing electronic data in combination is effectively suppressed. Since the first storage area has tamper resistance, the second storage area does not need to have the same tamper resistance as the first storage area, and tamper resistance is not necessarily required. It may have the same tamper resistance as the storage area. That is, the second storage area only needs to have tamper resistance equal to or less than the tamper resistance included in the first storage area.

  In addition to the first feature, the electronic data supply device according to the present invention further includes the second storage area storing the electronic data at least partially encrypted, and the first storage area A second feature is that decryption key information used for decrypting the electronic data is further stored.

  According to the electronic data supply device of the second feature, since the decryption key information is stored in the first storage area, even if electronic data at least partially encrypted is read out, Since it is difficult to decrypt the electronic data, it is difficult to use the electronic data in an unauthorized combination of electronic data utilization apparatuses.

  In the electronic data supply device according to the present invention, in addition to the first or second feature, the first control device further uses the unique key information in the association processing to generate a random number generation process and an encryption. By performing processing, mutual authentication processing is performed with the one electronic data utilization device, and the decryption key information is supplied to the one electronic data utilization device and shared with the one electronic data utilization device. According to a third aspect of the present invention, the latest shared key information is generated or updated, and the electronic data supply process is performed when no error occurs in the association process.

  According to the electronic data supply device of the third feature, the operational effects of the electronic data supply device of the first feature can be reliably achieved. That is, in the initial state, the mutual authentication process is normally completed only for the electronic data utilization device in the initial state, and in the association state, only for the electronic data utilization devices associated with each other. Supply processing is permitted, and in other illegal combinations, provision of electronic data is not permitted, so that it is possible to reliably prevent reuse of stored electronic data. Further, when the linking process is completed normally, the most recently shared key information is shared between the mutually linked electronic data using devices. Therefore, in the next electronic data supply process, Electronic data supply processing is permitted with the data utilization device. Note that the process of generating or updating the latest shared key information for sharing the latest shared key information is performed according to the state before the mutual authentication process (initial state or linked state). Specifically, when there is no nearest shared key information in the first storage area before the mutual authentication process and the initial shared key information exists (initial state), the nearest shared key information is generated and the mutual authentication is performed. If the previous most recent shared key information exists in the first storage area before processing (linked state), the latest shared key information is updated.

  In the electronic data supply device according to the present invention, in addition to the third feature, the first control device further encrypts an internally generated first random number with the unique key information in the association process. A third ciphertext is transmitted to the one electronic data utilization device, and further, first shared key information to be used as the shared key information is generated temporarily using the first random number and the unique key information. A fourth ciphertext stored and encrypted with the first shared key information extracted from the third ciphertext from a second random number generated internally by the one electronic data using device is stored from the one electronic data using device. Receiving, decrypting the received fourth ciphertext with the first shared key information, extracting the second random number, and using the extracted second random number and the first random number as the shared key information Generate and temporarily store key information Transmitting a fifth ciphertext obtained by encrypting the synthesized information obtained by synthesizing the decryption key information and the second random number with the second shared key information to the one electronic data utilization device. Features.

  In the electronic data supply device according to the present invention, in addition to the fourth feature, the first control device further performs a predetermined function process on the decryption key information in the association process. A function value that is uniquely obtained is generated and temporarily stored, and the second shared data is generated by generating the function value of the decryption key information extracted from the fifth ciphertext by the one electronic data utilization device. A sixth ciphertext encrypted with key information is received from the one electronic data utilization device, the received sixth ciphertext is decrypted with the second shared key information, and the function value is extracted, generated in advance, temporarily A fifth feature is that the electronic data supply process is performed when the two function values coincide with each other when compared with the stored function value.

  According to the electronic data supply device of the fourth or fifth feature, the random number generation processing and encryption processing on the electronic data supply device side, and the random number generation processing and encryption processing on the electronic data utilization device side are combined. Thus, since the second shared key information that is the latest shared key information at the time of the electronic data supply process is generated, the confidentiality of the intermediate data in the process of generating the latest shared key information is highly maintained. It becomes extremely difficult to derive the latest shared key information from the tamper resistance of the tying process itself. Further, by exchanging the fifth ciphertext and the sixth ciphertext with the electronic data utilization device, it is possible to confirm whether or not the second shared key information of both is correctly shared as the latest shared key information. Since it can be performed, the associating process can be ensured, and the decryption key information for decrypting the electronic data can be shared. As a result, in the tied state, it is possible to reliably perform the electronic data supply process to the electronic data utilization device that is legitimately linked. The predetermined function process includes a process of obtaining a hash value using a hash function.

  In addition to any of the third to fifth features, the electronic data supply device according to the present invention is further configured so that the first control device performs the electronic data supply processing in the association processing. When the completion instruction for the association process is received from the one electronic data utilization device, the second shared key information is stored in the first storage area as the latest shared key information, and at the start of the association process, If it is in the initial state, the unique key information of the one electronic data utilization device is further stored in the first storage area as the unique key information of the associated electronic data utilization device, and the association The sixth feature is to complete the processing.

  According to the electronic data supply device of the sixth feature, the unique key information and the latest shared key information can be reliably shared with the electronic data utilization device legally associated with each other. Further electronic data can be supplied to the data utilization device.

  In addition to any one of the first to sixth features, the electronic data supply device according to the present invention further includes the other electronic data supply in which the first storage area is in the initial state and the tied state. In the process before storing the unique information different from the apparatus, the first control apparatus performs the electronic data supply process to one of the plurality of electronic data utilization apparatuses. When the unique information is transmitted to the one electronic data using device and the one electronic data using device accepts the unique information, the electronic data supply device identified by the unique information is sent to the electronic data using device. When the one electronic data utilization device is in the initial state, the one electronic data utilization device is used for the electronic data supply device specified by the first ciphertext or the unique information. Wherein in the case of tying state the second ciphertext, and the seventh feature of the receiving from the one electronic data utilizing apparatus.

  In addition to any one of the first to sixth features, the electronic data supply device according to the present invention is further characterized in that the first storage area is different from the other electronic data supply devices in the initial state. And further storing management registration information and the specific information specified from the associated electronic data utilization device in the association state, and the first control device uses the plurality of electronic data utilization items. In the process before the electronic data supply process is performed for one electronic data utilization apparatus in the apparatus, in the initial state, the management registration information is stored for the one electronic data utilization apparatus. The predetermined registration information indicating that it is not registered is transmitted, and in the case of the association state, the management registration stored in the first storage area for the one electronic data utilization device Information is transmitted, and when the one electronic data utilization apparatus receives the default information or the management registration information, the one electronic data utilization apparatus with respect to the electronic data supply apparatus in which the management registration information is unregistered Is in the initial state, the combined information obtained by combining the unique key information corresponding to the unused management registration information of the one electronic data utilization device and the initial extended information is encrypted with the initial shared key information. When the one electronic data utilization device is in the association state with the electronic data supply device specified by the first extended ciphertext or the management registration information, the one electronic data utilization device Obtained by combining the unique key information corresponding to the management registration information and the latest extended information generated at the time of the most recent connection with the electronic data supply device specified by the management registration information. The second extended ciphertext obtained by encrypting the composite information with the latest shared key information included in the one electronic data utilization device is received from the one electronic data utilization device, and the received first extended ciphertext or the second The extended ciphertext is decrypted with the initial shared key information or the most recent shared key information stored in the first storage area, and the unique key information and the initial extended information or the The latest extended information is extracted, and in the initial state, the combined key information obtained by combining the extracted initial extended information and the unique information stored in the first storage area is extracted. The first response ciphertext encrypted in step 1 is transmitted to the one electronic data utilization apparatus, and in the case of the association state, the extracted unique key information and the first storage area are stored. And the combined information obtained by combining the most recently extended information and the unique information stored in the first storage area when the two unique key information matches. The eighth feature is that the second response ciphertext encrypted with the extracted unique key information is transmitted to the one electronic data utilization apparatus.

  In addition to the eighth feature, the electronic data supply device according to the present invention further performs the electronic data supply process in the association process when the electronic data supply apparatus is in the initial state before the association process. Later, when receiving an instruction to complete the linking process from the one electronic data utilization device, the first control device stores the management registration information received at or before the completion instruction in the first storage area. It is a ninth feature that the data is stored in the.

  According to the electronic data supply device having any of the seventh to ninth characteristics, the unique information unique to each electronic data supply device is used, or the unique information and management registration information are used in combination. A plurality of electronic data supply devices can be independently associated with one electronic data utilization device on a one-to-one basis. As a result, a plurality of electronic data different from each other can be independently supplied to a single electronic data utilization apparatus from a plurality of electronic data supply apparatuses.

  In particular, according to the electronic data supply device of the eighth feature, the electronic data supply device side performs the associating state confirmation process before performing the electronic data supply processing for one electronic data utilization device. The confirmation processing result can be transmitted to the electronic data utilization device side as the first response ciphertext or the second response ciphertext, and a state where mutual authentication cannot be performed can be found early. In addition, the first extended ciphertext or the second extended ciphertext received from the electronic data utilization device side is complicated by including the extended information consisting of random numbers in the original combined information before encryption. It is more difficult to illegally decrypt the text or the second extended ciphertext. As a result, provision of electronic data to an electronic data utilization device with an inappropriate combination can be more effectively suppressed.

  Furthermore, according to the electronic data supply device of the ninth feature, between the unique information possessed by a plurality of electronic data utilization devices and the most recently shared key information, between the electronic data utilization devices that have been legally linked. It is possible to reliably check the association information uniquely.

  In order to achieve the above object, an electronic data utilization apparatus according to the present invention decrypts at least partly encrypted electronic data supplied from the electronic data supply apparatus having any one of the first to sixth characteristics. A third storage area having tamper resistance, a fourth storage area having tamper resistance equal to or lower than the third storage area, and one electronic data supply apparatus. A second control device for controlling a linking process linked to 1 and a decoding process of the electronic data, and in the initial state where the third storage area is not linked one-to-one, the use of the electronic data Storing the unique key information of the device and the initial shared key information of the shared key information shared with the electronic data supply device or the first ciphertext obtained by encrypting the unique key information with the initial shared key information, and the association process Later tied state Encrypts the most recent shared key information or the most recent shared key information, which is the shared key information shared at the time of the most recent connection with the electronic data supply apparatus associated with the unique key information one-to-one. The second ciphertext is stored, and before the second control device accepts the supply of the electronic data from the one electronic data supply device, the first ciphertext is associated with the association state in the initial state. Then, the first characteristic is that the second ciphertext is transmitted to the one electronic data supply apparatus.

  According to the electronic data utilization device having the first feature, between the electronic data utilization device in the initial state and the electronic data supply device in the initial state, the electronic data utilization device transmits the first ciphertext to the electronic data supply device. And the electronic data supply device can share the unique key information of the electronic data utilization device by decrypting the first ciphertext with the initial shared key information. The linking process can be executed with the supply device, and electronic data can be received from the electronic data supply device. In addition, between the electronic data utilization device and the electronic data supply device associated with each other, the electronic data utilization device transmits a second ciphertext to the electronic data supply device, and the electronic data supply device receives the second ciphertext. By decrypting the ciphertext with the latest shared key information, the unique key information obtained by decryption is compared with the unique key information held by the electronic data supply device, and between the electronic data using device. Therefore, the electronic data utilization apparatus can receive electronic data only from the electronic data supply apparatus that has confirmed the association. In addition, between the electronic data utilization device already associated with another electronic data supply device and the electronic data supply device in the initial state, the electronic data utilization device encrypts the electronic data supply device with the latest shared key information. 2 The ciphertext is transmitted, but since the electronic data supply device does not have the nearest shared key information for decrypting the second ciphertext, the unique key information of the electronic data using device cannot be shared. The electronic data utilization device cannot receive electronic data from the electronic data supply device. Further, between the electronic data utilization device in the initial state and the electronic data supply device in the associated state, the electronic data utilization device transmits the first ciphertext encrypted with the initial shared key information to the electronic data supply device. Since the electronic data supply device decrypts the first ciphertext with the latest shared key information, the electronic data use device cannot share the unique key information of the electronic data use device. I cannot receive data. In addition, between the electronic data utilization device in the associated state and the electronic data supply device associated with another electronic data utilization device, the electronic data utilization device has encrypted the electronic data supply device with the latest shared key information. Although the second ciphertext is transmitted, since the electronic data supply device does not share the same nearest shared key information for decrypting the second ciphertext, the unique key information of the electronic data using device can be shared. In other words, the electronic data utilization device cannot receive electronic data from the electronic data supply device.

  Therefore, according to the electronic data utilization device of the first feature, the electronic data is provided from the electronic data supply device in the initial state in the initial state and from the electronic data supply devices associated with each other in the association state. However, it is possible to prevent reuse of the stored electronic data because the electronic data cannot be provided in any other illegal combination.

  In addition, since the third storage area has tamper resistance, the first ciphertext obtained by encrypting the unique key information, the initial shared key information, or the unique key information stored in the third storage area with the initial shared key information. Since it is difficult to illegally read out or tamper with the second ciphertext obtained by encrypting the most recent shared key information or the unique key information with the most recent shared key information, the electronic data having the above illegal combination The operation of making the use device appear as an electronic data use device that is a valid combination becomes difficult, and reception of electronic data in the illegal combination is effectively suppressed. Since the third storage area has tamper resistance, the fourth storage area does not need to have the same tamper resistance as the third storage area, and tamper resistance is not necessarily required. It may have the same tamper resistance as the storage area. That is, the fourth storage area only needs to have tamper resistance equal to or less than the tamper resistance included in the third storage area.

  An electronic data utilization apparatus according to the present invention is an electronic data utilization apparatus that decrypts and uses at least a part of encrypted electronic data supplied from the electronic data supply apparatus of the seventh feature. A third storage area having the characteristics, a fourth storage area having a tamper resistance equal to or lower than the third storage area, a linking process for associating one electronic data supply device one-to-one, and decoding of the electronic data A second control device for controlling the data processing, wherein the third storage area is divided into a plurality of small areas associated with the plurality of electronic data supply devices, and each of the third storage areas is In an initial state that is not one-to-one associated with the corresponding electronic data supply device, unique key information of the electronic data utilization device and initial shared key information of shared key information shared with the corresponding electronic data supply device Also A first ciphertext obtained by encrypting the unique key information with the initial shared key information is stored, and the associated electronic data supply apparatus and the associated state after the association process are associated with the unique key information and the corresponding A second ciphertext obtained by encrypting the most recent shared key information or the unique key information which is the shared key information shared at the time of the most recent connection with the electronic data supply device, and the corresponding uniqueness of the electronic data supply device Information is stored, and the second control device receives the unique information from the one electronic data supply device before accepting the supply of the electronic data from the one electronic data supply device, and the third storage area. If there is no classification of the association state in which the received unique information is recorded, and there is a classification of the initial state in which the unique information is not recorded, the first ciphertext is changed to the third ciphertext. If the recorded section of the tying condition of the specific information received in 憶領 zone is present, the second ciphertext, the second feature to send to the one electronic data supply device.

  An electronic data utilization apparatus according to the present invention is an electronic data utilization apparatus that decrypts and uses at least a part of encrypted electronic data supplied from the electronic data supply apparatus according to the eighth or ninth feature. , A third storage area having tamper resistance, a fourth storage area having tamper resistance equal to or lower than the third storage area, and a linking process for associating one electronic data supply device one-to-one with the electronic A second control device for controlling data decryption processing, wherein the third storage area is divided into a plurality of small areas associated with the plurality of electronic data supply devices, and each of the third storage areas In an initial state where the classification is not one-to-one associated with the corresponding electronic data supply device, the unique key information of the electronic data utilization device, the initial extension information generated by random number processing, and the corresponding electronic data A first extended ciphertext obtained by encrypting, with the initial shared key information, initial shared key information of the shared key information shared with the feeding device or synthesized information obtained by synthesizing the unique key information and the initial extended information, Management registration information assigned to each category is stored as information for identifying the category, and the unique key information and the corresponding electronic data are associated with the corresponding electronic data supply device and the associated state after the association process. Combining the latest extended information generated at the time of the last connection with the supply device and the latest shared key information or the unique key information that is the shared key information shared at the time of the last connection with the corresponding electronic data supply device and the latest extended information A second extended ciphertext obtained by encrypting the obtained composite information with the latest shared key information, the management registration information, and the corresponding unique information of the electronic data supply device; Before the control device accepts the supply of the electronic data from the one electronic data supply device, the predetermined information indicating that the management registration information is not registered in the electronic data supply device from the one electronic data supply device Default information or the management registration information registered in the electronic data supply device is received, and when the default information is received, there is a section of the initial state in which the unique information is not recorded in the third storage area When the first extended ciphertext is transmitted to the one electronic data supply apparatus and the management registration information is received, there is a section for recording the management registration information in the third storage area. The third feature is that the second extended ciphertext is transmitted to the one electronic data supply apparatus.

  In addition to the third feature, the electronic data utilization apparatus according to the present invention further includes a section of the initial state in which the unique information is not recorded in the third storage area when the default information is received. In this case, after the first extended ciphertext is transmitted to the one electronic data supply device, the first response ciphertext is received from the one electronic data supply device, and the first response ciphertext is converted into the unique response data. The initial extended information and the unique information are extracted by decrypting with key information, and compared with the initial extended information stored in the third storage area, the one electronic data supply device is authenticated, and the management When registration information is received, if there is a section for recording the management registration information in the third storage area, the second extended ciphertext is transmitted to the one electronic data supply device, and The second response ciphertext is received from two electronic data supply devices, the second response ciphertext is decrypted with the unique key information, the latest extended information and the unique information are extracted, and stored in the third storage area The fourth feature is that authentication of the one electronic data supply apparatus is performed by comparing the latest extended information and the unique information respectively.

  According to the electronic data utilization device having any one of the second to fourth features, the unique information unique to each electronic data supply device is used, or the unique information and management registration information are used in combination. A plurality of electronic data supply devices can be distinguished, and each electronic data supply device can be independently associated with each other on a one-to-one basis. Thereby, one electronic data utilization apparatus can receive supply of a plurality of different electronic data independently from each of a plurality of electronic data supply apparatuses.

  In particular, according to the electronic data utilization device of the third feature, the first extended ciphertext or the second extended ciphertext transmitted to the electronic data supply device side is an extension composed of random numbers in the original combined information before encryption. Since the information is complicated and complicated, it is more difficult to illegally create the first response ciphertext or the second response ciphertext. As a result, the supply of electronic data from an electronic data supply device of an inappropriate combination can be more effectively suppressed.

  Further, according to the electronic data utilization device of the fourth feature, the confirmation processing result performed on the electronic data supply device side is received as the first response ciphertext or the second response ciphertext, and the first response ciphertext or Since the confirmation process can be performed using the unique information obtained by decrypting the second response ciphertext or the unique information and the extended information, a state in which mutual authentication cannot be performed with the electronic data supply device can be found early.

  In addition to any of the above features, the electronic data utilization apparatus according to the present invention further performs random number generation processing and encryption processing using the unique key information in the linking processing, so that the one electronic Perform mutual authentication processing with the data supply device, receive the decryption key information from the electronic data supply device, generate or update the nearest shared key information shared with the electronic data supply device, and When no error occurs in the process, the supply of the electronic data from the one electronic data supply apparatus is accepted, and the electronic data is decrypted with the decryption key information received in the association process. The fifth feature.

  According to the electronic data utilization device having the fifth characteristic, the operational effects of the electronic data utilization device having the first characteristic can be reliably achieved. That is, in the initial state, electronic data can be received only from the electronic data supply device in the initial state, and in the association state, only from the electronic data supply devices associated with each other, electronic data can be received. Since reception of electronic data is not permitted, it is possible to reliably prevent reuse of stored electronic data. Further, when the linking process is normally completed, the most recently shared key information is shared between the electronic data supply apparatuses linked to each other. Therefore, in the next electronic data receiving process, Electronic data reception processing is permitted with the data supply device. Note that the process of generating or updating the latest shared key information for sharing the latest shared key information is performed according to the state before the mutual authentication process (initial state or linked state). Specifically, if there is no nearest shared key information or the second ciphertext in the third storage area before the mutual authentication process, and the initial shared key information or the first ciphertext exists (initial state), the most recently shared When the key information generation process is performed and the previous closest shared key information or the second ciphertext thereof exists in the third storage area before the mutual authentication process (linked state), the update process of the latest shared key information Is done.

  In addition to the fifth feature, the electronic data utilization device according to the present invention is further configured such that the second control device generates the one electronic data supply device internally in the association process in the initial state. Receiving the third ciphertext obtained by encrypting the first random number with the unique key information, and extracting the second random number generated internally by decrypting the third ciphertext and the unique key information A fourth ciphertext encrypted with the first shared key information generated using the first shared key information is transmitted to the one electronic data supply device, and second shared key information is generated from the second random number and the first random number. The one electronic data supply device decrypts the fourth ciphertext with the first shared key information and uses the second random number extracted from the first shared key information and the second shared key information generated from the first random number, and the decryption key Combined information obtained by combining the information and the second random number The encoded fifth ciphertext is received from the one electronic data supply device, the fifth ciphertext is decrypted to extract the decryption key information and the second random number, and the extracted second random number and the internal The second random number generated in step (b) is compared, and information indicating that the two second random numbers match is transmitted to the one electronic data supply device only when the two second random numbers match. The sixth feature.

  In addition to the sixth feature, the electronic data utilization device according to the present invention further includes the second random number extracted by the second control device after decrypting the fifth ciphertext in the linking process. Only when the internally generated second random number matches, a predetermined function process is performed on the decryption key information to generate a function value uniquely obtained, and the function value is used as the second shared key information. The sixth feature is that the sixth ciphertext encrypted in step (b) is transmitted to the one electronic data supply apparatus as information indicating that the two second random numbers match.

  According to the electronic data utilization device of the sixth or seventh feature, the random number generation processing and encryption processing on the electronic data supply device side, and the random number generation processing and encryption processing on the electronic data utilization device side are combined. Thus, since the second shared key information that is the latest shared key information at the time of the electronic data supply process is generated, the confidentiality of the intermediate data in the process of generating the latest shared key information is highly maintained. It becomes extremely difficult to derive the latest shared key information from the tamper resistance of the tying process itself. Furthermore, by exchanging information (sixth ciphertext) indicating that the second ciphertext and the two second random numbers match with the electronic data supply device, the second shared key information of both is obtained. Since it is possible to confirm whether it is correctly shared as the most recent shared key information, the linking process can be ensured, and the decryption key information for decrypting electronic data can also be shared it can. As a result, it is possible to reliably perform the electronic data receiving process from the electronic data supply device that is legally associated in the association state. The predetermined function process includes a process of obtaining a hash value using a hash function.

  In the electronic data utilization device according to the present invention, in addition to the sixth or seventh feature, the second control device receives the electronic data from the one electronic data supply device in the association process. The eighth feature is that the electronic data is decrypted with the decryption key information extracted by decrypting the fifth ciphertext.

  According to the electronic data utilization device having the eighth feature, in the associating process, it is possible to decrypt and use at least a part of the encrypted electronic data received from the electronic data supply device in the initial state. It becomes.

  In the electronic data utilization device according to the present invention, in the case of including the first feature, in addition to any of the fifth to eighth features, the second control device further includes: After the electronic data is decrypted with the decryption key information, an instruction to complete the linking process is transmitted to the one electronic data supply apparatus, and a notification of completion of the linking process is sent from the one electronic data supply apparatus. When received, the second shared key information is stored as the latest shared key information in the third storage area, or the unique key information is encrypted with the second shared key information serving as the latest shared key information The second feature is that the second ciphertext is stored and the linking process is completed.

  In the electronic data utilization device according to the present invention, in addition to any of the fifth to eighth features, in addition to the second feature, the second control device further includes: After the electronic data is decrypted with the decryption key information, an instruction to complete the linking process is transmitted to the one electronic data supply apparatus, and a notification of completion of the linking process is sent from the one electronic data supply apparatus. When received, the second shared key information is stored as the latest shared key information in the third storage area, or the unique key information is encrypted with the second shared key information serving as the latest shared key information The tenth feature is that the second ciphertext is stored, and the unique information is stored in the initial state when the linking process is started, and the linking process is completed. To do.

  According to the electronic data utilization device of the ninth or tenth feature, the unique key information and the latest shared key information can be reliably shared between the electronic data supply devices legally associated with each other. It becomes possible to receive further supply of electronic data from the electronic data supply device.

  In the electronic data utilization device according to the present invention, in the case of including the third feature, in addition to any of the fifth to eighth features, the second control device further includes: After the electronic data is decrypted with the decryption key information, an instruction to complete the linking process is transmitted to the one electronic data supply apparatus, and a notification of completion of the linking process is sent from the one electronic data supply apparatus. Upon receipt, new extension information is generated by random number processing, the latest extension information is updated, and the second shared key information is stored as the latest shared key information in the third storage area, or The second extended ciphertext obtained by encrypting the synthesized information obtained by synthesizing the unique key information and the updated latest extended information with the latest shared key information is stored, and the updated last extended information and the previous Storing the unique information, and the eleventh aspect to complete the pairing process.

  Furthermore, according to the electronic data utilization device of the eleventh feature, the extension information used for encryption of the first response ciphertext or the second response ciphertext is updated every time the linking process is completed. An attack that transmits the same information from an unauthorized combination of electronic data supply devices can be effectively eliminated, and supply of electronic data from an inappropriate combination of electronic data supply devices can be more effectively suppressed.

  Furthermore, according to the electronic data utilization device of the tenth or eleventh feature, by using unique information unique to each electronic data supply device, or by using the unique information and management registration information together, A plurality of electronic data supply devices can be independently associated with one electronic data utilization device on a one-to-one basis. As a result, a plurality of electronic data different from each of the plurality of electronic data supply devices can be separately used by one electronic data utilization device.

  An electronic data utilization system according to the present invention includes an electronic data supply device having any one of the first to sixth features, and the fifth to ninth features based on the first feature or the first feature. The first feature is that an electronic data utilization apparatus having any one of the features is provided.

  The electronic data utilization system according to the present invention includes an electronic data supply device having the seventh feature, and any of the fifth to eighth, tenth features based on the second feature or the second feature. A second feature is that an electronic data utilization apparatus having the above characteristics is provided.

  Furthermore, an electronic data utilization system according to the present invention includes the electronic data supply device having the eighth or ninth feature, and the third or fourth feature or the third or fourth feature based on the third feature. A third feature is that an electronic data utilization apparatus having any one of the fifth to eighth and eleventh features is provided.

  According to the electronic data utilization system having any of the above characteristics, the electronic data stored in the electronic data supply apparatus is suppressed because the supply of electronic data between the unauthorized combination of the electronic data supply apparatus and the electronic data utilization apparatus is suppressed. Can be prevented from being reused by a plurality of electronic data utilization devices. In particular, according to the electronic data utilization system of the second or third feature, a one-to-one association process can be performed between one electronic data utilization apparatus and a plurality of electronic data supply apparatuses.

  An electronic data supply program according to the present invention is a computer program to be executed by a computer constituting the first control device of the electronic data supply device having any one of the above characteristics, wherein the first control device performs the association. It has the program step which can perform the process step of a process, It is characterized by the above-mentioned.

  According to the electronic data supply program of the above characteristics, the electronic data supply program is mounted so as to be executable by a computer constituting the first control device of the electronic data supply apparatus of any of the above characteristics. It is possible to provide an electronic data supply device that exhibits the operational effects of the features.

  An electronic data utilization program according to the present invention is a computer program to be executed by a computer constituting the second control device of the electronic data utilization device having any one of the above characteristics, wherein the second control device performs the association. It has the program step which can perform the process step of a process, It is characterized by the above-mentioned.

  According to the electronic data utilization program having the above characteristics, the electronic data utilization program can be executed by a computer that constitutes the second control device of the electronic data utilization apparatus having any one of the above characteristics. It is possible to provide an electronic data utilization apparatus that exhibits the operational effects of features.

  Next, an electronic data supply apparatus and an electronic data utilization apparatus according to an embodiment of the present invention will be described with reference to the drawings. In the following, a first embodiment in which only one electronic data supply device 10 is associated with one electronic data utilization device 20 in a one-to-one relationship, and a plurality of electronic data supply to one electronic data utilization device 20 Second and third embodiments will be described in which the devices 10 are independently linked one to one.

  The electronic data supply device and the electronic data utilization device according to each of the first to third embodiments of the present invention constitute an electronic data utilization system as a pair, and as shown in FIG. Includes a first storage area 11 composed of a non-volatile memory having tamper resistance, a second storage area 12 composed of a non-volatile memory having tamper resistance equal to or less than the first storage area 11, and use of electronic data. A first control device 13 that controls the association processing with the device 20 and the supply processing of electronic data to the electronic data utilization device 20 and the first communication interface 14 that communicates with the electronic data utilization device 20 are provided. In addition, the electronic data utilization apparatus 20 includes a third storage area 21 configured by a non-volatile memory having tamper resistance, and a fourth memory configured by a non-volatile memory having tamper resistance of the third storage area 21 or less. Communication between the electronic data supply device 10 and the second control device 23 that controls the association process between the storage area 22 and the electronic data supply device 10 and the decryption processing of the electronic data supplied from the electronic data supply device 10 The second communication interface 24 is configured to perform.

  The electronic data supply device 10 stores at least a part of the encrypted electronic data that can be used by the plurality of electronic data utilization devices 20, and is associated with only one electronic data utilization device 20 in one-to-one correspondence. The electronic data is supplied only to the electronic data utilization device 20, and unauthorized electronic data supply to other electronic data utilization devices 20 that are not linked is suppressed. In the present embodiment, the electronic data supply device 10 is provided in the form of a memory card, for example.

  The electronic data utilization device 20 receives electronic data that is at least partially encrypted only from one or a plurality of electronic data supply devices 10 linked one-to-one, and decrypts the received electronic data. The electronic device uses the electronic data, and is configured to suppress the supply of unauthorized electronic data from another electronic data supply device 10 that is not linked. In the present embodiment, the electronic data utilization device 20 uses map data that is electronic data, such as a car navigation device, and an electronic device to which update data of the map data is supplied from the electronic data supply device 10. Suppose.

  Therefore, in the present invention, the electronic data stored in one electronic data supply device 10 is prohibited from being used in a plurality of electronic data using devices 20, so that the electronic data using device 20 can store electronic data. When an update is necessary, for each user of the electronic data utilization device 20, the electronic data supply device 10 storing the update data is individually prepared for each electronic data utilization device 20, that is, Can be encouraged to purchase.

  In the present embodiment, the tamper resistance of the first storage area 11 and the third storage area 21 means that electronic data (data and programs) stored in each storage area is observed from the outside or altered. Constructed by hardware or software with special configuration to prevent. Tamper resistance by hardware is realized by making it difficult to analyze the circuit due to the complexity and sophistication of the algorithm, encrypting the data, and making the circuit stop working when a test probe is attached. . Software tamper resistance can be realized by configuring the software to be difficult to analyze even with a debugger or disassemble tool. Actually, there are a method of executing an encrypted program while partially decrypting it, a method of dividing the program into small cells and interleaving the processing, a method of randomizing the order of executing the programs, and the like. In the present embodiment, the method for realizing tamper resistance is not limited to a specific method. Also, the degree of tamper resistance is sufficient if the observation of the electronic data from the outside can be prevented with a certain difficulty, and the difficulty is that the electronic data supply device 10 storing the update data is properly prepared. It is sufficient if it is easy.

  The second storage area 12 of the electronic data supply apparatus 10 and the fourth storage area 22 of the electronic data utilization apparatus 20 are the first storage area 11 of the electronic data supply apparatus 10 and the third storage area 21 of the electronic data utilization apparatus 20 are Since the above-described tamper resistance is provided, it is not always necessary to provide the same tamper resistance, and various memories that do not have tamper resistance can be used. However, the second storage area 12 and the fourth storage area 22 may have the same tamper resistance as the first storage area 11 and the third storage area 21. That is, the second storage area 12 only needs to have tamper resistance equal to or less than the tamper resistance included in the first storage area 11, and the fourth storage area 22 has tamper resistance included in the third storage area 21. It may be less than tampering.

  The first storage area 11 and the second storage area 12 of the electronic data supply apparatus 10 may be configured by separating the respective storage areas in the same nonvolatile memory, or may be configured as independent nonvolatile memories. May be. Similarly, the third storage area 21 and the fourth storage area 22 of the electronic data utilization device 20 may be configured by separating the respective storage areas in the same nonvolatile memory, or each independent nonvolatile memory. It may be configured as. In this embodiment, a non-volatile semiconductor memory such as a flash memory can be used as the non-volatile memory. However, the non-volatile memory is not limited to the flash memory. , Not limited to specific ones. For example, the fourth storage area 22 of the electronic data utilization device 20 may not be a semiconductor memory but a magnetic storage device such as a hard disk drive.

  The first control device 13 executes an electronic data supply program built in the electronic data supply device 10, thereby controlling the association process with the electronic data utilization device 20 and the electronic data supply processing to the electronic data utilization device 20. And a computer such as a microprocessor for performing The electronic data supply program is stored in the memory in the first control device 13, the first storage area 11, or the second storage area 12. The first control device 13 also includes a random number generator that generates random numbers used in the associating process.

  The second control device 23 executes an electronic data utilization program built in the electronic data utilization device 20, thereby associating with the electronic data supply device 10 and decoding the electronic data supplied from the electronic data supply device 10. A computer such as a microprocessor for controlling processing is provided. The electronic data utilization program is stored in the memory in the second control device 23, the third storage area 21, or the fourth storage area 22. The second control device 23 includes a random number generator that generates random numbers used in the associating process.

  The first control device 13 and the second control device 23 perform encryption and decryption processing in the associating process, and the encryption and decryption processing algorithms use a predetermined common algorithm. Is set to In addition, the first control device 13 and the second control device 23 may execute the encryption and decryption processing in the association processing using a dedicated coprocessor.

  Next, an overall process flow relating to the supply of electronic data from the electronic data supply apparatus 10 to the electronic data utilization apparatus 20 and individual processes in the overall process will be described.

  FIG. 2 is a flowchart showing the overall flow of the linking process and the electronic data supply and decryption process between the electronic data supply device 10 and the electronic data utilization device 20 in the first to third embodiments. is there. As shown in FIG. 2, the linking process and the electronic data supply / decryption process include a linking confirmation process S1, a mutual authentication process S2, an electronic data supply / decryption process S3, and a linking completion process S4. Is done.

  The association confirmation processing S1 is an initial state (first state) in which the pair of electronic data supply devices 10 and the electronic data utilization device 20 that are to perform the electronic data supply and decryption processing are not associated one-to-one. 1 state), a one-to-one connection state (second state), one is an initial state and the other is associated with a different partner (third state), and both It is determined whether or not it is the second state among the tying states (fourth state) associated with different opponents. The first state and the second state are recognized as a legitimate combination between the electronic data supply device 10 and the electronic data utilization device 20, and the electronic data utilization device 20 is connected between the electronic data supply device 10 and the electronic data utilization device 20. The unique unique key information can be shared, and the subsequent mutual authentication processing S2, electronic data supply / decryption processing S3, and linking completion processing S4 are normally executed. However, in the third state and the fourth state, since the electronic data supply device 10 and the electronic data utilization device 20 are an illegal combination, an error occurs at the end of the association confirmation processing S1 or during the subsequent mutual authentication processing S2. Occurs and subsequent electronic data supply / decryption processing S3 and linking completion processing S4 are not executed. Note that the processing order of the electronic data supply / decryption processing S3 and the association completion processing S4 may be reversed.

  Hereinafter, the series of processes will be described in detail for each of the first to third embodiments.

<First Embodiment>
First, information used between the electronic data supply device 10 and the electronic data utilization device 20 in the series of processes will be described.

  As shown in FIG. 3, the first storage area 11 includes three storage areas: a shared key information area M11, a decryption key information area M12, and a unique key information area M13. In the shared key information area M11, initial shared key information Kc0 of shared key information shared with the electronic data utilization device 20 is stored in the initial state before being associated with the electronic data utilization device 20, and the electronic data utilization device 20 is stored. In the linked state after being linked, the latest shared key information Kcn, which is shared key information shared with the linked electronic data utilization device 20 at the time of the latest connection, is stored. The decryption key information area M12 stores decryption key information Kd used for decrypting electronic data to be newly supplied to the electronic data utilization device 20 through the initial state and the association state. In the initial state, nothing is stored in the unique key information area M13, and in the tied state, unique key information Kt unique to the associated electronic data utilization device 20 is stored. The second storage area 12 stores electronic data D0 that is newly encrypted at least partially supplied to the electronic data utilization apparatus 20.

  As shown in FIG. 4, the third storage area 21 includes two storage areas, a unique key information area M21 and a shared key information area M22. In the unique key information area M21, the unique key information Kt of the electronic data using device 20 is stored through the initial state before being associated with the electronic data supply device 10 and the associated state after being associated, and the shared key In the information area M22, in the initial state, the first ciphertext C1Kc0 obtained by encrypting the unique key information Kt with the initial shared key information Kc0 of the shared key information shared with the electronic data supply apparatus 10 is stored. The second ciphertext C2Kcn encrypted with the latest shared key information Kcn, which is shared key information shared at the time of the latest connection with the electronic data supply apparatus 10 associated with the unique key information Kt on a one-to-one basis, is stored. The fourth storage area 22 temporarily stores electronic data D0 before decryption newly supplied from the electronic data supply device 10, and stores decrypted electronic data D1 after decryption. The

  Next, the association confirmation processing S1 in the association processing between the electronic data supply device 10 and the electronic data utilization device 20 will be described with reference to FIG.

  When the electronic data supply device 10 is connected to the electronic data utilization device 20, when the electronic data utilization device 20 is in the initial state, as shown in FIG. 10, the first ciphertext C1Kc0 stored in the shared key information area M22 of the third storage area 21 is transmitted (step S11). The electronic data supply apparatus 10 decrypts the received first ciphertext C1Kc0 with the initial shared key information Kc0 or the latest shared key information Kcn stored in the shared key information area M11 (step S12). When the electronic data supply device 10 is in the initial state, the first ciphertext C1Kc0 is decrypted with the initial shared key information Kc0, so that the unique key information Kt unique to the electronic data utilization device 20 is extracted normally. However, when the electronic data supply apparatus 10 is in the initial state, the unique key information Kt is not stored in the unique key information area M13, so it is impossible to determine whether or not the unique key information Kt has been successfully extracted. is there. On the other hand, when the electronic data supply device 10 is in the linked state, the first ciphertext C1Kc0 is decrypted with the latest shared key information Kcn, so that the unique key information Kt unique to the electronic data utilization device 20 is successfully decrypted. Not. When the electronic data supply apparatus 10 is in the linked state, the electronic data supply apparatus 10 further compares the unique key information Kt extracted by decryption with the unique key information Kt stored in the unique key information area M13. To determine whether the unique key information Kt has been normally extracted (step S13). As a result of the determination, it is understood that the unique key information Kt is not normally decrypted because the electronic data utilization device 20 is in the initial state. Therefore, the electronic data supply apparatus 10 does not determine whether or not the unique key information Kt has been normally extracted, or a predetermined response message indicating information that the unique key information Kt has not been normally extracted. Cak is transmitted to the electronic data utilization apparatus 20 (step S14). If it is determined in step S13 that the unique key information Kt has not been normally extracted, an error process for forcibly ending the linking process without proceeding to the subsequent mutual authentication process S2 is performed. Run.

  On the other hand, when the electronic data utilization device 20 is in the linked state, the shared data information area M22 in the third storage area 21 is transferred from the electronic data utilization device 20 to the electronic data supply device 10, as shown in FIG. The second ciphertext C2Kcn stored in is transmitted (step S15). The electronic data supply device 10 decrypts the received second ciphertext C2Kcn with the initial shared key information Kc0 or the latest shared key information Kcn stored in the shared key information area M11 (step S16). When the electronic data supply apparatus 10 is in the linked state, the electronic data supply apparatus 10 further compares the unique key information Kt extracted by decryption with the unique key information Kt stored in the unique key information area M13. It is determined whether or not the unique key information Kt has been successfully extracted (step S17). If the electronic data supply device 10 is normally associated with the electronic data utilization device 20 according to this determination, since the most recent shared key information Kcn common to each other is shared, it is stored in the unique key information area M13. It can be confirmed that the connected electronic data utilization device 20 is a one-to-one associated electronic data utilization device 20 that matches the unique key information Kt. However, when the electronic data supply device 10 is associated with a different electronic data utilization device 20, since the most recent shared key information Kcn that is common to each other is not shared, the unique data stored in the unique key information area M13 is not shared. The key information Kt does not match, and it can be confirmed that the connected electronic data utilization device 20 is not the electronic data utilization device 20 linked one-on-one. On the other hand, when the electronic data supply apparatus 10 is in the initial state, the received second ciphertext C2Kcn is decrypted with the initial shared key information Kc0, so the unique key information Kt is not decrypted normally. However, when the electronic data supply apparatus 10 is in the initial state, the unique key information Kt is not stored in the unique key information area M13, so it is impossible to determine whether or not the unique key information Kt has been successfully extracted. is there. Therefore, the electronic data supply apparatus 10 does not determine whether or not the unique key information Kt has been normally extracted, or indicates a predetermined response message indicating the determination result of whether or not the unique key information Kt has been normally extracted. Cak is transmitted to the electronic data utilization apparatus 20 (step S18). If it is determined in step S17 that the unique key information Kt has not been normally extracted, an error process for forcibly ending the linking process without shifting to the subsequent mutual authentication process S2 is performed. Run.

  In the association confirmation process S1, the electronic data supply apparatus 10 side determines whether the electronic data supply apparatus 10 is normally associated with the electronic data utilization apparatus 20 when the electronic data supply apparatus 10 is in an association state. However, when the electronic data supply device 10 is in the initial state, it cannot be confirmed whether or not the electronic data utilization device 20 is in the initial state. However, the electronic data utilization device 20 confirms whether the electronic data supply device 10 is normally linked to the electronic data utilization device 20 according to the contents of the response sentence Cak, and uses the electronic data supply device 10 and the electronic data. It can be confirmed that both devices 20 are in the initial state. In this embodiment, since mutual authentication is performed between the electronic data supply device 10 and the electronic data utilization device 20 in the mutual authentication processing S2 after the association confirmation processing S1, the response sentence Cak transmitted in step S14 and step S18. May be a response text for confirming reception of the first ciphertext C1Kc0 or the second ciphertext C2Kcn.

  Step S11 and step S15 in the association confirmation process S1 are common in that the ciphertext stored in the shared key information area M22 is transmitted. Accordingly, the electronic data utilization device 20 may transmit the ciphertext stored in the shared key information area M22 without determining whether the electronic data utilization device 20 is in the initial state or the association state in step S11 or step S15. .

  In steps S12 and S16 in the association confirmation process S1, the received ciphertext is shared key information (initial shared key information Kc0 or nearest shared key information Kcn) stored in the shared key information area M11. Common in terms of decryption. However, since the unique key information Kt is stored in the unique key information area M13 in step S16, the comparison process between the unique key information Kt stored in the unique key information area M13 and the decrypted unique key information Kt is performed. It is executed separately.

  Next, the mutual authentication process S2 in the linking process between the electronic data supply apparatus 10 and the electronic data utilization apparatus 20 will be described with reference to FIG.

  The mutual authentication process S2 is started when the error process is not executed in the association confirmation process S1, and is not started when the error process is executed. The electronic data utilization apparatus 20 determines the occurrence of an error on the electronic data supply apparatus 10 side based on the response sentence Cak received in step S14 and step S18 of the association confirmation process S1. In this case, neither the electronic data supply device 10 nor the electronic data utilization device 20 forcibly ends the association process without shifting to the mutual authentication process S2.

  The mutual authentication process S2 starts from the electronic data supply apparatus 10. First, the electronic data supply device 10 generates a first random number RN1 using a random number generator (step S201), and generates a first random number RN1 generated using the unique key information Kt decrypted and extracted in the association confirmation processing S1 as a common key. Is encrypted to generate a third ciphertext C3Kt (step S202), predetermined calculation processing is performed using the first random number RN1 and the unique key information Kt, and first shared key information temporarily used as shared key information SK1 is generated and temporarily stored (step S203). Further, the generated third ciphertext C3Kt is transmitted to the electronic data utilization device 20 (step S204).

  Next, the electronic data utilization device 20 decrypts the received third ciphertext C3Kt with the unique key information Kt stored in the unique key information area M21 to extract the first random number RN1 (step S205). The same calculation process as in step S203 is performed using one random number RN1 and unique key information Kt, and first shared key information SK1 is generated and temporarily stored (step S206). Subsequently, a second random number RN2 is generated by the random number generator (step S207), and the generated second random number RN2 is encrypted using the generated first shared key information SK1 as a common key to generate a fourth ciphertext C4SK1. (Step S208). Further, predetermined calculation processing is performed using the first random number RN1 and the second random number RN2, and second shared key information SK2 is generated and temporarily stored as shared key information (step S209). Further, the generated fourth ciphertext C4SK1 is transmitted to the electronic data supply apparatus 10 (step S210).

  Next, the electronic data supply apparatus 10 decrypts the received fourth ciphertext C4SK1 with the first shared key information SK1 generated in step S203 to extract the second random number RN2 (step S211), and the first random number RN1. The same arithmetic processing as step S209 is performed using the second random number RN2, and second shared key information SK2 is generated and temporarily stored (step S212). Subsequently, concatenation information (Kd · RN2) between the decryption key information Kd stored in the decryption key information area M12 and the extracted second random number RN2 is generated (step S213), and the second shared key information SK2 is used as the common key. As a result, the generated concatenated information (Kd · RN2) is encrypted to generate the fifth ciphertext C5SK2 (step S214), and the hash value Hd of the decryption key information Kd is generated temporarily using a predetermined hash function. (Step S215). Further, the generated fifth ciphertext C5SK2 is transmitted to the electronic data utilization device 20 (step S216).

  Next, the electronic data utilization device 20 decrypts the received fifth ciphertext C5SK2 with the second shared key information SK2 generated in step S209, extracts the concatenation information (Kd · RN2) (step S217), and extracts the concatenation thus extracted. The second random number RN2 in the information (Kd · RN2) is compared with the second random number RN2 generated in step S207, and the comparison result is temporarily stored (step S218). Using the same hash function as in step S215, a hash value Hd of the decryption key information Kd in the extracted concatenated information (Kd · RN2) is generated (step S219), and the second shared key information SK2 is generated as a common key The hash value Hd is encrypted to generate a sixth ciphertext C6SK2 (step S220), and the generated sixth ciphertext C6SK2 is transmitted to the electronic data supply apparatus 10 (step S221).

  If the comparison of the second random number RN2 does not match in step S218, it is determined that an error has occurred, and the mutual authentication processing S2 on the electronic data utilization device 20 side is forcibly terminated, and the subsequent electronic data supply / decryption An error process for stopping the execution of the process S3 and the association completion process S4 is executed.

  In addition, although it is not determined that the unique key information Kt has not been normally extracted in the determination in step S13 or step S17 of the association confirmation process S1, the electronic data supply device 10 and the electronic data utilization device 20 are an illegal combination. In the case of (the third state or the fourth state), the mutual authentication process S2 is started, but the unique key information Kt obtained by the electronic data supply apparatus 10 in the association confirmation process S1 is the electronic data utilization apparatus 20 Unlike the unique key information Kt, since the third ciphertext C3Kt encrypted in step S202 is not normally decrypted in step S205, the decryption of the fourth ciphertext C4SK1 and the fifth ciphertext C5SK2 is not executed normally. As a result, the comparison of the second random number RN2 does not match.

  Next, the electronic data supply device 10 decrypts the received sixth ciphertext C6SK2 with the second shared key information SK2 generated in step S212 to extract the hash value Hd (step S222), and extracts the hash value Hd and the step The hash values Hd generated in S215 are compared (step S223). If the comparison of the hash values Hd matches, the mutual authentication process S2 is successfully completed, and the process proceeds to the subsequent electronic data supply / decryption process S3. In this case, it has been confirmed that the second shared key information SK2 generated by the electronic data utilization device 20 in step S209 and the second shared key information SK2 generated by the electronic data supply device 10 in step S212 are the same. become.

  If the comparison of the second random number RN2 does not match in step S218, or if the extraction of the first random number RN1 is not performed normally in step S205, the two hash values Hd are determined in step S223. Since the comparison also does not match, the electronic data supply device 10 determines the occurrence of an error based on the comparison result of step S223, forcibly ends the mutual authentication processing S2 on the electronic data supply device 10 side, and thereafter An error process for stopping the execution of the electronic data supply / decryption process S3 and the link completion process S4 is executed. In addition, in step S218, the comparison of the second random number RN2 matches, but in step S223, the comparison of the hash value Hd does not match, assuming that there is a possibility that the electronic data is supplied for some reason. The apparatus 10 preferably transmits information indicating the execution of the error process to the electronic data utilization apparatus 20 when the error process is executed based on the comparison result of step S223.

  In the mutual authentication process S2, the electronic data utilization apparatus 20 generates a hash value of the first random number RN1, for example, instead of the process of steps S219 to S221, and compares the hash value with the second random number RN2. The ciphertext obtained by encrypting the resulting concatenated information with the second shared key information SK2 is transmitted to the electronic data supply apparatus 10, and the electronic data supply apparatus 10 is generated in step S201 instead of the processes in steps S222 to S221. A hash value of the first random number RN1 may be generated and compared with the hash value of the first random number RN1 obtained by decrypting the ciphertext. In this case, on the electronic data supply device 10 side, based on the comparison result of the second random number RN2 obtained by decrypting the ciphertext and the comparison result of the hash value of the first random number RN1, the electronic data utilization device is normal. It can be determined in the same manner as in step S223 that the process can be performed. Alternatively, instead of the processing of step S219 to step S223, the electronic data utilization device 20 may transmit the comparison result of the two second random numbers RN2 to the electronic data supply device 10. In this case, the authentication processing of the electronic data utilization device 20 on the electronic data supply device 10 side is not performed, but on the electronic data supply device 10 side, the authentication processing of the electronic data supply device 10 on the electronic data utilization device 20 side is an error. It can be determined whether or not. Further, in the mutual authentication process S2, the electronic data utilization device 20 transmits the comparison result of the two second random numbers RN2 to the electronic data supply device 10 when the comparison of the second random numbers RN2 does not match in step S218. You may do it. On the electronic data supply apparatus 10 side, the mutual authentication process S2 on the electronic data supply apparatus 10 side is forcibly terminated based on the comparison result without making the determination in step S223. An error process for canceling the execution of the decryption process S3 and the association completion process S4 can be executed.

  Next, electronic data supply / decryption processing S3 and association completion processing S4 between the electronic data supply device 10 and the electronic data utilization device 20 will be described with reference to FIG.

  When the mutual authentication process S2 ends successfully, that is, when the two hash values Hd match in step S223, the electronic data supply apparatus 10 stores the electronic data D0 stored in the second storage area 12. Is extracted and transmitted to the electronic data utilization apparatus 20 (step S31). The electronic data D0 is at least partially encrypted with the decryption key information Kd stored in the decryption key information area M12. The electronic data utilization device 20 decrypts the received electronic data D0 using the decryption key information Kd in the concatenation information (Kd / RN2) extracted in step S217 of the mutual authentication process S2, and decrypts the decrypted electronic data. D1 is stored in the fourth storage area 22 (step S32).

  Subsequently, the process proceeds to the linking completion process S4, and the electronic data utilization device 20 transmits a linking completion instruction Cf to the electronic data supply device 10 (step S41). Upon receiving the association completion instruction Cf, the electronic data supply apparatus 10 uses the initial shared key information Kc0 stored in the shared key information area M11 or the latest shared key information Kcn at the start of the association process in the mutual authentication process S2. Replacing the second shared key information SK2 generated in step S212, the second shared key information SK2 is stored in the shared key information area M11 as new nearest shared key information Kcn. In the initial state at the start of the attaching process, the unique key information Kt unique to the associated electronic data utilization device 20 is stored in the unique key information area M13, and the shared key information area M11 and the unique key information area are stored. Update processing of M13 is performed (step S42). When the update processing of the shared key information area M11 and the unique key information area M13 is completed, an end notification Cr to that effect is transmitted to the electronic data utilization device 20 (step S43).

  Upon receiving the end notification Cr, the electronic data utilization device 20 receives the unique key information Kt in the second shared key information SK2 generated in step S209, that is, the latest shared key information shared with the electronic data supply device 10 at the time of the most recent connection. Encryption with the shared key information Kcn generates a second ciphertext C2Kcn (step S44), overwriting the first ciphertext C1Kc0 stored in the shared key information area M22 or the second ciphertext C2Kcn at the start of the linking process Then, it is stored in the shared key information area M22 (step S45).

  As the information stored in the shared key information area M22, the first ciphertext C1Kc0 is stored when the electronic data utilization device 20 is in the initial state, and the second ciphertext C2Kcn is stored in the linked state. However, the initial shared key information Kc0 may be stored instead of the first ciphertext C1Kc0, and the latest shared key information Kcn may be stored instead of the second ciphertext C2Kcn. In this case, the second shared key information SK2 generated in step S209 is stored in the shared key information area M22 without generating the second ciphertext C2Kcn in steps S44 and S45 of the association completion process. It is stored as Kcn. Further, in the association confirmation processing S1, before sending the first ciphertext C1Kc0 or the second ciphertext C2Kcn to be transmitted to the electronic data supply device 10, the unique key information Kt stored in the unique key information area M21 is It is necessary to generate the first ciphertext C1Kc0 or the second ciphertext C2Kcn by encrypting with the initial shared key information Kc0 or the latest shared key information Kcn stored in the shared key information area M22.

  The linking process between the electronic data supply device 10 and the electronic data utilization device 20, and the electronic data supply and decryption process have been described above in detail. In the above description, in the associating process between the electronic data supply device 10 and the electronic data utilization device 20 and the electronic data supply and decryption processing, the electronic data supply device 10 and the electronic data utilization device 20 have the first encryption. The first to sixth ciphertexts are encrypted and decrypted, and the electronic data is decrypted once to generate the first random number RN1 and the second random number RN2. The ciphertext to sixth ciphertext and the encryption algorithm of the electronic data are not limited to a specific cipher algorithm, and also between the first ciphertext to the sixth ciphertext and the electronic data, respectively. Are not necessarily the same. The same applies to second and third embodiments described later.

  Further, the random number generation method in the random number generation process performed in steps S201 and S207 of the mutual authentication process S2 is not limited to a specific method. Furthermore, the concatenation process performed in step S213 of the mutual authentication process S2 is one of the processes for combining the decryption key information Kd stored in the decryption key information area M12 and the extracted second random number RN2. As long as the decryption key information Kd and the second random number RN2 are separated and extracted when the fifth ciphertext C5SK2 is decrypted in step S217, the synthesis method is not limited to the concatenation process. . Further, the decryption key information Kd and the second random number RN2 are individually encrypted without performing the concatenation process in step S213, and the generated two ciphertexts are transmitted to the electronic data utilization device 20 in step S216. Anyway. In addition, concatenated data of two ciphertexts may be transmitted.

  Furthermore, the hash function used in the generation processing of the hash value Hd performed in step S215 and step S219 of the mutual authentication processing S2 is not limited to a specific hash function.

  Further, the mutual authentication processing S2 is not limited to the processing procedure shown in FIG. 6 as long as it can be confirmed that the electronic data supply device 10 and the electronic data utilization device 20 are a valid combination.

  Next, by configuring the electronic data supply device 10 and the electronic data utilization device 20 as described above, the electronic data supply device 10 and the electronic data can be obtained in the following illegal combination of the electronic data supply device 10 and the electronic data utilization device 20. It will be described that the linking process between the data using devices 20, the electronic data supply process, and the decryption process are not executed normally and result in an error process. In the following description, it is assumed that the tamper resistance provided in the first storage area 11 and the third storage area 21 functions normally.

  In the following description, the following six combinations can be considered as an illegal combination of the electronic data supply device 10 and the electronic data utilization device 20.

  The first unauthorized combination is a combination of the electronic data supply device 10 in the initial state and the electronic data utilization device 20 in the associated state, and the second unauthorized combination is the combination of the electronic data supply device 10 in the associated state and the initial state. The third unauthorized combination is a combination of the electronic data supply device 10 that is associated with the other electronic data utilization device 20 and the electronic data utilization device 20 that is associated with the other electronic data utilization device 20. The illegal combination 4 is a combination of the electronic data supply device 10 in the regular association state in which the electronic data is illegally changed and the electronic data utilization device 20 in the association state, and the fifth unauthorized combination is illegal. This is a combination of the modified electronic data supply device 10 and the electronic data utilization device 20 in the initial state. The sixth illegal combination is illegally modified. It has been a combination of electronic data supply device 10 and the electronic data utilizing apparatus 20 for tying state.

  In the first unauthorized combination (the electronic data utilization device 20 associated with the electronic data supply device 10 in the initial state), the initial shared key information Kc0 is stored in the shared key information area M11 of the electronic data supply device 10 in the initial state. The second ciphertext C2Kcn obtained by encrypting the unique key information Kt with the latest shared key information Kcn is stored in the shared key information area M22 of the electronic data utilization device 20 stored and associated. Therefore, since the second ciphertext C2Kcn cannot be normally decrypted in step S16 of the association confirmation process S1, the unique key information Kt of the electronic data utilization device 20 cannot be correctly extracted. The generation of the third ciphertext C3Kt (step S202) and the generation of the first shared key information SK1 (step S203) in the mutual authentication process S2 on the electronic data supply apparatus 10 side both depend on the unique key information Kt. Since this is a process, the third ciphertext C3Kt and the first shared key information SK1 cannot be generated correctly. As a result, since the first random number RN1 is not correctly extracted in the decryption process (step S205) of the third ciphertext C3Kt in the mutual authentication process S2 on the electronic data utilization apparatus 20 side, the electronic data supply apparatus 10 performs the mutual authentication process. The second random number RN2 generated in step S207 is the second random number RN2 generated by the electronic data using device 20 in the decryption process (step S217) of the mutual authentication process S2 from the fifth ciphertext C5SK2 generated in step S214 of S2. (Step S218), the electronic data utilization device 20 detects the unauthorized combination, forcibly ends the mutual authentication process S2, and then performs the electronic data supply / decryption process S3 and the string. Error processing for canceling the execution of the attachment completion processing S4 is executed.

  In the second unauthorized combination (the electronic data supply device 10 in the associated state and the electronic data utilization device 20 in the initial state), the nearest shared key information Kcn is stored in the shared key information area M11 of the electronic data supply device 10 in the associated state. Is stored, and the first ciphertext C1Kc0 obtained by encrypting the unique key information Kt with the initial shared key information Kc0 is stored in the shared key information area M22 of the electronic data utilization device 20 in the initial state. Therefore, since the electronic data supply apparatus 10 is in the association state, the first cipher text C1Kc0 is decrypted with the latest shared key information Kcn in step S12 of the association confirmation process S1, and thus the electronic data utilization apparatus 20 The unique key information Kt cannot be correctly extracted. The unique key information area M13 of the electronic data supply device 10 stores the unique key information Kt of the electronic data utilization device 20 that is properly associated, and the unique key that is erroneously extracted in the determination process of step S13. By comparing the information Kt ′ with the unique key information Kt of the electronic data utilization apparatus 20 that is properly associated, the electronic data supply apparatus 10 allows the electronic data utilization apparatus 20 to be associated with the electronic data utilization apparatus 20 An error process for forcibly ending the association process is executed without detecting the illegal combination in the initial state other than 20 and shifting to the subsequent mutual authentication process S2.

  In the third unauthorized combination (the electronic data supply device 10 linked with the other electronic data utilization device 20 and the electronic data utilization device 20 associated with the other electronic data utilization device 20), the electronic data associated with the other electronic data utilization device 20 The shared key information area M11 of the data supply apparatus 10 stores the latest shared key information Kcn ′ with the other electronic data utilization apparatus 20, and the shared key information area M22 of the associated electronic data utilization apparatus 20 includes The second ciphertext C1Kcn obtained by encrypting the unique key information Kt with the latest shared key information Kcn is stored. Accordingly, since the electronic data supply device 10 is in an illegal association state, the second ciphertext C1Kcn is decrypted with another nearest shared key information Kcn ′ in step S12 of the association confirmation process S1, The unique key information Kt of the electronic data utilization device 20 cannot be correctly extracted. The unique key information area M13 of the electronic data supply device 10 stores the unique key information Kt of the electronic data utilization device 20 that is properly associated, and the unique key that is erroneously extracted in the determination process of step S13. By comparing the information Kt ′ with the unique key information Kt of the electronic data utilization device 20 that is properly associated, the electronic data supply device 10 can use another electronic data utilization device associated with the electronic data utilization device 20. An error process for forcibly ending the linking process is executed without detecting the illegal combination different from 20 and shifting to the subsequent mutual authentication process S2.

  In the fourth illegal combination (the electronic data supply device 10 in the regular association state in which the electronic data is illegally changed and the electronic data utilization device 20 in the association state), the second storage area 12 is illegally The changed electronic data D0 ′ is stored, and the decryption key information area M12 of the first storage area 11 is decrypted to decrypt at least a part of the electronic data D0 before being illegally changed. Key information Kd is stored. Therefore, in the fourth unauthorized combination, the decryption key information Kd obtained from the connection information (Kd / RN2) acquired by the electronic data utilization device 20 in the decryption process in step S217 of the mutual authentication process S2 is illegally changed. Since this is the decryption key information Kd of the electronic data D0 before being processed, in the decryption process using the decryption key information Kd in step S32 of the electronic data supply / decryption process S3, the electronic data D0 ′ cannot be correctly decoded. Therefore, by determining that the electronic data D0 ′ has been illegally changed and has not been correctly decrypted, the electronic data supply / decryption process S3 is forcibly performed without shifting to the subsequent linking completion process S4. Ending error handling can be performed.

  In the fifth illegal combination (the illegally modified electronic data supply apparatus 10 and the electronic data utilization apparatus 20 in the initial state), the unknown information Kcx is stored in the shared key information area M11 of the illegally modified electronic data supply apparatus 10. Is stored, and the first ciphertext C1Kc0 obtained by encrypting the unique key information Kt with the initial shared key information Kc0 is stored in the shared key information area M22 of the electronic data utilization device 20 in the initial state. Therefore, since the first ciphertext C1Kc0 is decrypted with the unknown information Kcx in step S12 of the association confirmation process S1, the unique key information Kt of the electronic data utilization device 20 cannot be correctly extracted. However, the illegally modified electronic data supply apparatus 10 has not determined whether or not the unique key information Kt has been normally extracted in step S14 of the association confirmation process S1, or the unique key information Kt is It is assumed that a predetermined response sentence Cak indicating information indicating that it has been normally extracted is illegally transmitted to the electronic data utilization device 20. The generation of the third ciphertext C3Kt (step S202) and the generation of the first shared key information SK1 (step S203) in the mutual authentication process S2 on the electronic data supply apparatus 10 side both depend on the unique key information Kt. Since this is a process, the third ciphertext C3Kt and the first shared key information SK1 cannot be generated correctly. As a result, since the first random number RN1 is not correctly extracted in the decryption process (step S205) of the third ciphertext C3Kt in the mutual authentication process S2 on the electronic data utilization apparatus 20 side, the electronic data supply apparatus 10 performs the mutual authentication process. The second random number RN2 generated in step S207 is the second random number RN2 generated by the electronic data using device 20 in the decryption process (step S217) of the mutual authentication process S2 from the fifth ciphertext C5SK2 generated in step S214 of S2. (Step S218), the electronic data utilization device 20 detects the unauthorized combination, forcibly ends the mutual authentication process S2, and then performs the electronic data supply / decryption process S3 and the string. Error processing for canceling the execution of the attachment completion processing S4 is executed.

  In the sixth illegal combination (the electronic data utilization device 20 linked with the illegally modified electronic data supply device 10), unknown information is stored in the shared key information area M11 of the illegally modified electronic data supply device 10. Kcx is stored, and the second ciphertext C2Kcn obtained by encrypting the unique key information Kt with the latest shared key information Kcn is stored in the shared key information area M22 of the electronic data utilization device 20 in the associated state. Therefore, since the second ciphertext C2Kcn cannot be normally decrypted in step S16 of the association confirmation process S1, the unique key information Kt of the electronic data utilization device 20 cannot be correctly extracted. However, the electronic data supply device 10 that has been illegally modified has not determined whether or not the unique key information Kt has been normally extracted in step S18 of the association confirmation process S1, or the unique key information Kt is not It is assumed that a predetermined response sentence Cak indicating information indicating that it has been normally extracted is illegally transmitted to the electronic data utilization device 20. The generation of the third ciphertext C3Kt (step S202) and the generation of the first shared key information SK1 (step S203) in the mutual authentication process S2 on the electronic data supply apparatus 10 side both depend on the unique key information Kt. Since this is a process, the third ciphertext C3Kt and the first shared key information SK1 cannot be generated correctly. As a result, since the first random number RN1 is not correctly extracted in the decryption process (step S205) of the third ciphertext C3Kt in the mutual authentication process S2 on the electronic data utilization apparatus 20 side, the electronic data supply apparatus 10 performs the mutual authentication process. The second random number RN2 generated in step S207 is the second random number RN2 generated by the electronic data using device 20 in the decryption process (step S217) of the mutual authentication process S2 from the fifth ciphertext C5SK2 generated in step S214 of S2. (Step S218), the electronic data utilization device 20 detects the unauthorized combination, forcibly ends the mutual authentication process S2, and then performs the electronic data supply / decryption process S3 and the string. Error processing for canceling the execution of the attachment completion processing S4 is executed.

  As described above, according to the electronic data supply device and the electronic data utilization device according to the present invention, a one-to-one association relationship is established between the electronic data supply device and the electronic data utilization device in a valid combination, and the electronic data supply device It is possible to prevent unauthorized operations such as unauthorized copying of electronic data due to an unauthorized combination of the electronic data utilization device and use of one electronic data supply device for a plurality of electronic data utilization devices. As a result, it is possible to increase the utility value of electronic data while effectively preventing unauthorized use of electronic data.

  In the description of the above embodiment, the electronic data utilization device 20 uses map data that is electronic data, such as a car navigation device, and the update data of the map data is supplied from the electronic data supply device 10. However, the electronic data supply device 10 and the electronic data utilization device 20 are limited to a car navigation device and a memory card used for the electronic data supply device 10. It is not a thing.

Second Embodiment
Next, an electronic data supply device and an electronic data utilization device according to the second embodiment will be described. In the first embodiment, since only one electronic data supply device 10 can be associated with one electronic data utilization device 20 on a one-to-one basis, a plurality of electronic data is divided into one electronic data utilization device 20. In the case of supplying the electronic data, it is necessary to obtain the second and subsequent electronic data from the electronic data supply source, store them in the electronic data supply device 10 once associated, and then supply the electronic data. there were. In contrast, in the second and third embodiments, the second and subsequent electronic data can be directly supplied from another electronic data supply apparatus 10 that stores the respective data. Hereinafter, the association confirmation process S1, the electronic data supply / decryption process S3, and the association completion process S4 in the second embodiment will be described. Since the mutual authentication process S2 is the same as that of the first embodiment, a duplicate description is omitted. In the second and third embodiments, a plurality of electronic data supply devices 10 can be independently associated one-to-one with one electronic data utilization device 20, but a series of association processing, In addition, since the electronic data supply and the decryption process simultaneously proceed one-to-one between one electronic data utilization device 20 and one electronic data supply device 10, in the following description, a pair of electronic data The utilization device 20 and the electronic data supply device 10 will be described as targets.

  First, information used between the electronic data supply device 10 and the electronic data utilization device 20 in the series of processes will be described.

  As shown in FIG. 8, the first storage area 11 includes four storage areas: a shared key information area M11, a decryption key information area M12, a unique key information area M13, and a unique information area M14. In the shared key information area M11, initial shared key information Kc0 of shared key information shared with the electronic data utilization device 20 is stored in the initial state before being associated with the electronic data utilization device 20, and the electronic data utilization device 20 is stored. In the linked state after being linked, the latest shared key information Kcn, which is shared key information shared with the linked electronic data utilization device 20 at the time of the latest connection, is stored. The decryption key information area M12 stores decryption key information Kd used for decrypting electronic data to be newly supplied to the electronic data utilization device 20 through the initial state and the association state. In the initial state, nothing is stored in the unique key information area M13, and in the tied state, unique key information Kt unique to the associated electronic data utilization device 20 is stored. The unique information area M14 has unique information SN (for example, a serial number uniquely assigned to each electronic data supply device 10) different from the other electronic data supply devices 10 through the initial state and the association state. Stored. The difference from the first embodiment is that a unique information area M14 is added. Similarly to the first embodiment, the second storage area 12 stores electronic data D0 that is newly encrypted at least partially supplied to the electronic data utilization device 20.

  As shown in FIG. 9, the third storage area 21 includes three storage areas: a unique key information area M21, a shared key information area M22, and a unique information area M23. In the unique key information area M21, the unique key information Kt of the electronic data using device 20 is stored through the initial state before being associated with the electronic data supply device 10 and the associated state after being associated, and the shared key In the information area M22, in the initial state, the first ciphertext C1Kc0 obtained by encrypting the unique key information Kt with the initial shared key information Kc0 of the shared key information shared with the electronic data supply apparatus 10 is stored. The second ciphertext C2Kcn encrypted with the latest shared key information Kcn, which is shared key information shared at the time of the latest connection with the electronic data supply apparatus 10 associated with the unique key information Kt on a one-to-one basis, is stored. Nothing is stored in the unique information area M23 in the initial state, and the unique information SN unique to the associated electronic data supply device 10 is stored in the tied state. As shown in FIG. 10, the third storage area 21 is divided into the number of the plurality of electronic data supply devices 10 that are linked one-to-one, and each of the three storage areas M21 to M23 shown in FIG. Each section of the third storage area 21 is associated with the corresponding first storage area 11 of the electronic data supply apparatus 10 that is associated with the one-to-one correspondence. In addition, the time of the latest connection in the second embodiment means the time of the latest connection in the linking process in the same section of the third storage area 21. Therefore, basically, it is at the time of the latest connection with the same electronic data supply apparatus 10.

  Information stored in the three storage areas M21 to M23 of the third storage area 21 is basically different between sections. The unique key information Kt stored in the unique key information area M21 may be the same in each section, but is preferably different. Further, the initial shared key information Kc0 for encrypting the first ciphertext C1Kc0 stored in the shared key information area M22 of each section in the initial state may be the same in each section, but is preferably different. The difference of the third storage area 21 from the first embodiment is that a unique information area M23 is added and divided into a plurality of sections. Further, similarly to the first embodiment, the electronic data D0 before decryption newly supplied from the electronic data supply apparatus 10 is temporarily stored in the fourth storage area 22, and decryption is performed after decryption. Stored electronic data D1 is stored.

  Next, a second embodiment of the linking confirmation process S1 in the linking process between the electronic data supply apparatus 10 and the electronic data utilization apparatus 20 will be described with reference to FIG.

  When the electronic data supply device 10 is connected to the electronic data utilization device 20, first, as shown in FIG. 11, first, the electronic data supply device 10 moves from the electronic data utilization device 20 to the unique information area M 14 in the first storage area 11. The stored unique information SN is transmitted (step S51). In the electronic data utilization device 20, it is confirmed whether or not the received unique information SN is stored in any of the unique information areas M23 of the respective sections of the third storage area 21 (step S52). In the case of the initial state with respect to the electronic data supply apparatus 10 to which the electronic data utilization apparatus 20 is connected, the received unique information SN is not stored in any section of the unique information area M23. It is confirmed whether or not any of the sections in the initial state, that is, a section that has not yet been used for the linking process with the electronic data supply apparatus 10 exists (step S53). If there is no classification in the initial state in step S53, the linking process has been completed with the other electronic data supply apparatus 10 in all of the classifications, and therefore the linking with the new electronic data supply apparatus 10 has been completed. Since there is no room for performing the attaching process, an error process for forcibly terminating the associating process is executed. On the other hand, if there is an initial state classification in step S53, it is stored in the shared key information area M22 of the initial state classification in the third storage area 21 from the electronic data utilization apparatus 20 to the electronic data supply apparatus 10. The first ciphertext C1Kc0 is transmitted (step S11). Thereby, the classification of the initial state of the third storage area 21 is used in the subsequent linking process. Henceforth, the process from step S11 to step S14 is performed similarly to 1st Embodiment (refer FIG. 5 (A)). The redundant description of the details of the processing from step S11 to step S14 is omitted.

  When the electronic data supply device 10 to which the electronic data utilization device 20 is connected is associated with the electronic data supply device 10, the received unique information SN is stored in the corresponding unique information region M23. In the determination, since it is tentatively determined that the corresponding unique information SN exists, the corresponding unique information SN in the third storage area 21 is transferred from the electronic data utilization device 20 to the electronic data supply device 10. The second ciphertext C2Kcn stored in the existing shared key information area M22 is transmitted (step S15). Henceforth, the process from step S15 to step S18 is performed similarly to 1st Embodiment (refer FIG. 5 (B)). The redundant description of the details of the processing from step S15 to step S18 will be omitted.

  As described above, in the linking confirmation process S <b> 1 in the second embodiment, even when the electronic data utilization device 20 is in the linking state with respect to the other electronic data supply devices 10, If the initial state (the initial state category exists) or the linked state (the corresponding unique information SN is stored), the electronic data supply apparatus 10 connected using the category is connected Can start the pegging process.

  In the association confirmation process S1, the unique information SN transmitted from the electronic data supply device 10 of an unauthorized combination that is not in the initial state is the unique information region M23 of each section of the third storage region 21 of the electronic data utilization device 20. However, if the unique information SN is a serial number, the unique information SN is illegally obtained and generated from the electronic data supply apparatus 10 after other association processing. In such a case, there is a possibility of matching with a certain probability, and there may occur a case where the error processing is not performed in the above-described linking confirmation processing S1, but in this case, as described in the first embodiment, the subsequent mutual An illegal combination of electronic data supply devices 10 is detected in the authentication process S2.

  Next, a second embodiment of electronic data supply / decryption processing S3 and association completion processing S4 between the electronic data supply device 10 and the electronic data utilization device 20 will be described with reference to FIG.

  When the mutual authentication process S2 ends successfully, that is, when the two hash values Hd match in step S223, the electronic data supply apparatus 10 stores the electronic data D0 stored in the second storage area 12. Is extracted and transmitted to the electronic data utilization apparatus 20 (step S31). Thereafter, the processing from step S31, step S32, and step S41 to step S45 is executed in the same manner as in the first embodiment (see FIG. 7). Upon receiving the end notification Cr transmitted in step S43, the electronic data utilization device 20 shares the unique key information Kt with the second shared key information SK2 generated in step S209, that is, the electronic data supply device 10 at the time of the most recent connection. The second ciphertext C2Kcn is generated by encrypting with the most recent shared key information Kcn that is the shared key information (step S44), and the first ciphertext C1Kc0 stored in the corresponding shared key information area M22 or the linking process When the second ciphertext C2Kcn at the start is overwritten and stored in the shared key information area M22, and the electronic data supply device 20 is in the initial initial state with the electronic data supply device 10 performing the linking process The unique information SN received in the association confirmation process S1 is stored in the unique information area M23 of the corresponding category (step S45).

  The electronic data supply / decryption process S3 and the association completion process S4 are the same as those in the first embodiment (see FIG. 7) except for the storage process of the unique information SN in the electronic data utilization apparatus 20 in step S45. The description in the first embodiment for each step is valid as it is, and a duplicate description is omitted.

  Furthermore, in the second embodiment, the association confirmation process S1, the mutual authentication process S2, the electronic data supply / decryption process S3, and the association completion process S4 include the same processing contents as in the first embodiment. In the illegal combination of the electronic data supply device 10 and the electronic data utilization device 20 described in the embodiment, the linking process between the electronic data supply device 10 and the electronic data utilization device 20, the electronic data supply processing, and the decryption processing are performed. The description that the error processing is not executed normally is valid also in the second embodiment.

<Third Embodiment>
Next, an electronic data supply device and an electronic data utilization device according to the third embodiment will be described. In the embodiment in which a plurality of electronic data supply devices 10 are independently and one-to-one associated with one electronic data utilization device 20, structurally, one electronic data utilization device 20 is a certain electronic data supply device. 10, since it is possible to perform the linking process with the electronic data supply device 10 in another initial state or the linking state, one electronic data utilization device 20 as in the first embodiment. On the other hand, compared to a case where only one electronic data supply device 10 is linked one-on-one, there is a higher risk of being attacked by an unauthorized combination of electronic data supply devices 10 and accepting supply of unauthorized electronic data.

  By the way, in the first and second embodiments, in the association confirmation processing S1 on the electronic data utilization device 20 side, the electronic data supply device 10 is used until the mutual authentication processing S2 is successfully completed and the mutual authentication is performed. It was assumed that the information sent from would be used as legitimate. However, in the third embodiment, it is illegal to confirm the association state of the electronic data supply apparatus 10 prior to the mutual authentication process S2 in the association confirmation process S1 on the electronic data utilization apparatus 20 side. The detection function of the combined electronic data supply apparatus 10 is further strengthened.

  Hereinafter, the association confirmation process S1, the electronic data supply / decryption process S3, and the association completion process S4 in the third embodiment will be described. Since the mutual authentication process S2 is the same as that of the first embodiment, a duplicate description is omitted. First, information used between the electronic data supply device 10 and the electronic data utilization device 20 in the series of processes will be described.

  As shown in FIG. 13, the first storage area 11 includes five storage areas: a shared key information area M11, a decryption key information area M12, a unique key information area M13, a unique information area M14, and a management registration information area M15. Configured. In the shared key information area M11, initial shared key information Kc0 of shared key information shared with the electronic data utilization device 20 is stored in the initial state before being associated with the electronic data utilization device 20, and the electronic data utilization device 20 is stored. In the linked state after being linked, the latest shared key information Kcn, which is shared key information shared with the linked electronic data utilization device 20 at the time of the latest connection, is stored. The decryption key information area M12 stores decryption key information Kd used for decrypting electronic data to be newly supplied to the electronic data utilization device 20 through the initial state and the association state. In the initial state, nothing is stored in the unique key information area M13, and in the tied state, unique key information Kt unique to the associated electronic data utilization device 20 is stored. The unique information area M14 has unique information SN (for example, a serial number uniquely assigned to each electronic data supply device 10) different from the other electronic data supply devices 10 through the initial state and the association state. Stored. The management registration information area M15 stores nothing in the initial state, and stores the management registration information KN designated from the associated electronic data utilization device 20 in the association state. The management registration information KN is an identification number assigned to identify each division that divides the third storage area 21 of the electronic data utilization device 20 into the number of the plurality of electronic data supply devices 10 that are associated one-to-one. Thus, each section is uniquely assigned. The management registration information area M15 is a predetermined management that indicates that the electronic data supply apparatus 10 is in the initial state and does not store the management registration information KN designated by the electronic data utilization apparatus 20 in the initial state. Default information KN0 (for example, data in which all bits are 1) of the registration information KN may be stored. The difference from the second embodiment is that a management registration information area M15 is further added. Similarly to the first and second embodiments, the second storage area 12 stores electronic data D0 that is newly encrypted at least partially supplied to the electronic data utilization device 20.

  As shown in FIG. 14, the third storage area 21 includes five storage areas: a unique key information area M21, a shared key information area M22, a unique information area M23, an extended information area M24, and a management registration information area M25. Is done. In the unique key information area M21, the unique key information Kt of the electronic data using device 20 is stored through the initial state before being associated with the electronic data supply device 10 and the associated state after being associated, and the shared key In the information area M22, in the initial state, the connection information (Kt · R0) obtained by connecting the unique key information Kt and the initial extended information R0 described later is shared with the electronic data supply device 10 as the initial shared key information Kc0. The encrypted first extended ciphertext C1eKc0 is stored, and in the linked state, the electronic data in which the connection information (Kt · Rn) obtained by connecting the unique key information Kt and the latest extended information Rn described later is linked one-to-one. The second extended ciphertext C2eKcn encrypted with the latest shared key information Kcn that is shared key information shared at the time of the latest connection with the supply device 10 is stored. Nothing is stored in the unique information area M23 in the initial state, and the unique information SN unique to the associated electronic data supply device 10 is stored in the tied state. The extended information area M24 extends the first ciphertext C1Kc0 or the second ciphertext C2Kcn transmitted from the electronic data utilization device 20 to the electronic data supply device 10 in the association confirmation processing S1 of the first and second embodiments. Extension information that is a random number for complication with the first extension ciphertext C1eKc0 or the second extension ciphertext C2eKcn is stored, and the initial extension information R0 is generated in the initial state and the latest extension generated at the time of the most recent connection in the linked state Information Rn is stored. The management registration information area M25 stores management registration information KN assigned to each section through the initial state and the association state.

  As shown in FIG. 15, the third storage area 21 is divided into the number of the plurality of electronic data supply devices 10 that are linked one-on-one, and each division includes five storage areas M <b> 21 to M <b> 25 shown in FIG. 14. Each section of the third storage area 21 is associated with the corresponding first storage area 11 of the electronic data supply apparatus 10 that is associated with the one-to-one correspondence. In addition, the time of the latest connection in the third embodiment means the time of the latest connection in the linking process in the same section of the third storage area 21. Therefore, basically, it is at the time of the latest connection with the same electronic data supply apparatus 10.

  Information stored in the five storage areas M21 to M25 of the third storage area 21 is basically different between sections. The unique key information Kt stored in the unique key information area M21 may be the same in each section, but is preferably different. Further, the initial shared key information Kc0 for encrypting the first extended ciphertext C1eKc0 stored in the shared key information area M22 of each section in the initial state may be the same in each section, but is preferably different. The third storage area 21 is different from the second embodiment in that an extended information area M24 and a management registration information area M25 are further added. Similarly to the first and second embodiments, the pre-decryption electronic data D0 newly supplied from the electronic data supply device 10 is temporarily stored in the fourth storage area 22, and after the decryption, The decrypted electronic data D1 is stored.

  Next, a third embodiment of the linking confirmation process S1 in the linking process between the electronic data supply apparatus 10 and the electronic data utilization apparatus 20 will be described with reference to FIG.

  When the electronic data supply device 10 is connected to the electronic data utilization device 20, first, as shown in FIG. 16, when the electronic data supply device 10 is in the initial state, the electronic data supply device 10 transfers to the electronic data utilization device 20. Is the default information KN0 of the management registration information KN, and the management registration information KN stored in the management registration information area M15 of the first storage area 11 when the electronic data supply device 10 is in the linked state. (Step S61). If the default information KN0 is stored in the management registration information area M15, it may be used, and if it is not stored, it may be created each time. Subsequently, in the electronic data utilization device 20, does the received management registration information KN or default information KN0 match the management registration information KN stored in the management registration information area M25 assigned to each section of the third storage area 21? It is confirmed whether or not (step S62).

  In step S62, when the electronic data supply device 10 is in the initial state, the electronic data utilization device 20 receives the default information KN0, and therefore does not match the management registration information KN in the confirmation processing in step S62. As a result of receiving the default information KN0 in the confirmation processing in step S62, if it does not match the management registration information KN stored in the management registration information area M25, it continues to any of the categories, It is confirmed whether or not there is a section that has not been used for the association process with the electronic data supply apparatus 10 (step S63). If there is no classification in the initial state in step S63, the linking process has been completed with other electronic data supply apparatuses 10 in all the sections, so that the linking with the new electronic data supply apparatus 10 has been completed. Since there is no room for performing the attaching process, an error process for forcibly terminating the associating process is executed. On the other hand, if there is a division in the initial state in step S63 (if there are a plurality of divisions, one division is selected in step S63), the third storage area is transferred from the electronic data utilization device 20 to the electronic data supply device 10. The first extended ciphertext C1eKc0 stored in the shared key information area M22 of the initial state classification of 21 is transmitted (step S64). Thereby, the classification of the initial state of the third storage area 21 is used in the subsequent linking process.

  On the other hand, when the electronic data supply device 10 is already associated with the electronic data utilization device 20 and the management registration information KN is transmitted in step S61, the confirmation processing in step S62 normally includes a management registration information area. It matches the management registration information KN stored in M25. If the management registration information KN is received and does not match, an error process for forcibly terminating the linking process is executed. If they match, the third storage area is transferred from the electronic data utilization device 20 to the electronic data supply device 10. The second extended ciphertext C2eKcn stored in the shared key information area M22 of the section corresponding to the 21 management registration information KN is transmitted (step S65). Thereby, the classification corresponding to the management registration information KN in the third storage area 21 is used in the subsequent linking process.

  When the electronic data supply apparatus 10 receives the first extended ciphertext C1eKc0 transmitted in step S64 or the second extended ciphertext C2eKcn transmitted in step S65, the electronic data supply apparatus 10 is in the initial state the first extended ciphertext. The sentence C1eKc0 is decrypted with the initial shared key information Kc0 stored in the shared key information area M11, and the second extended ciphertext C2eKcn is stored in the shared key information area M11 when the electronic data supply device 10 is linked. Decryption is performed using the latest shared key information Kcn (step S66). When the electronic data supply device 10 is in the initial state, the first extended ciphertext C1eKc0 is decrypted with the initial shared key information Kc0, so that the unique key information Kt and the initial extended information R0 unique to the electronic data utilization device 20 are normal. To be taken out. However, when the electronic data supply apparatus 10 is in the initial state, the unique key information Kt is not stored in the unique key information area M13, so it is impossible to determine whether or not the unique key information Kt has been successfully extracted. is there. On the other hand, when the electronic data supply device 10 is in the linked state, the second extended ciphertext C2eKcn is decrypted with the latest shared key information Kcn, so that the unique key information Kt unique to the electronic data utilization device 20 and the latest extended information are decrypted. Rn is taken out normally. When the electronic data supply apparatus 10 is in the linked state, the electronic data supply apparatus 10 further compares the unique key information Kt extracted by decryption with the unique key information Kt stored in the unique key information area M13. To determine whether the unique key information Kt has been normally extracted (step S67). If the electronic data supply device 10 is normally associated with the electronic data utilization device 20 according to this determination, since the most recent shared key information Kcn common to each other is shared, it is stored in the unique key information area M13. It can be confirmed that the connected electronic data utilization device 20 is a one-to-one associated electronic data utilization device 20 that matches the unique key information Kt. If it is determined in step S67 that the unique key information Kt has not been normally extracted, an error process for forcibly ending the linking process without proceeding to the subsequent mutual authentication process S2 is performed. Run.

  However, when the electronic data supply device 10 is associated with a different electronic data utilization device 20, since the most recent shared key information Kcn that is common to each other is not shared, the unique data stored in the unique key information area M13 is not shared. The key information Kt does not match, and it can be confirmed that the connected electronic data utilization device 20 is not the electronic data utilization device 20 linked one-on-one. On the other hand, when the electronic data supply apparatus 10 is in the initial state, if the management registration information KN is illegally transmitted in step S61 and the second extended ciphertext C2eKcn is received, the initial shared key information Kc0 is used. Since the decryption is performed, the unique key information Kt is not decrypted normally. However, when the electronic data supply apparatus 10 is in the initial state, the unique key information Kt is not stored in the unique key information area M13, so it is impossible to determine whether or not the unique key information Kt has been successfully extracted. is there.

  If the electronic data supply device 10 is in the initial state in step S66, or if it is determined in step S67 that the unique key information Kt is normally extracted, the electronic data supply device 10 performs the decryption in step S66. Concatenated information (R0 · SN) or (Rn · SN) obtained by concatenating the initial extended information R0 or the latest extended information Rn extracted by the conversion and the specific information SN stored in the specific information area M14 of the first storage area 11 Encryption is performed with the unique key information Kt extracted by the decryption in step S66, and a response ciphertext CakKt is generated and transmitted to the electronic data utilization apparatus 20 (step S68).

  The electronic data utilization apparatus 20 uses the unique key information Kt stored in the unique key information area M21 of the section identified in the confirmation process in step S62 or step S63 in the third storage area 21 for the received response ciphertext CakKt. Decoding is performed to extract the initial extension information R0 or the latest extension information Rn and the unique information SN (step S69). When the electronic data utilization apparatus 20 is in an initial state with respect to the connected electronic data supply apparatus 10, the extracted initial extension information R0 and the initial extension information R0 stored in the extension information area M24 of the above-described classification are used. If the comparison is performed and the connected electronic data supply device 10 is in the linked state, the comparison between the latest extended information Rn extracted and the latest extended information Rn stored in the extended information area M24 of the above- Then, the extracted unique information SN is compared with the unique information SN stored in the specific information area M23 of the above-mentioned classification (step S70). In the comparison verification in step S70, if any of the comparisons matches, the process proceeds to the subsequent mutual authentication process S2. If any mismatch is detected in any of the comparisons, the process proceeds to the subsequent mutual authentication process S2. Error processing that forcibly terminates the linking process.

  As described above, in the third embodiment, in the association confirmation process S1 on the electronic data supply device 10 side, instead of sending the response text Cak (step S14, step S18) in the first and second embodiments, the response cipher text CakKt Is transmitted (step S68), and on the electronic data utilization device 20 side, the response ciphertext CakKt is decrypted (step S69) and the initial extended information R0, the latest extended information Rn, and the unique information SN are compared and verified (step S70). By adding, it becomes possible to confirm the association state of the electronic data supply apparatus 10 prior to the mutual authentication process S2.

  Furthermore, in the third embodiment, instead of transmitting the first ciphertext C1Kc0 or the second ciphertext C2Kcn in the first and second embodiments in the association confirmation processing S1 on the electronic data utilization device 20 side, The first extended ciphertext C1eKc0 or the second extended ciphertext C2eKcn that has become more complicated and difficult to illegally decrypt by including the extension information (initial extension information R0, latest extension information Rn) made of different random numbers is transmitted. Therefore, compared with the first and second embodiments, it is strengthened against retransmission attacks. Further, since the response ciphertext CakKt generated on the electronic data supply apparatus 10 side includes extension information (initial extension information R0, latest extension information Rn) consisting of different random numbers for each process, it is inherent to fixed data. The response ciphertext obtained by simply encrypting the information SN with the unique key information Kt is extremely vulnerable to a replay attack because it becomes the same ciphertext for each process, but it is retransmitted by including the extended information. Strengthened against attacks. Furthermore, since the transmission of the unique information SN from the electronic data supply device 10 to the electronic data utilization device 20 is encrypted, the confidentiality of the serial number is generated when the unique information SN is generated with a simple serial number. Will improve.

  Further, in the linking confirmation process S1 in the third embodiment, as in the second embodiment, the electronic data utilization device 20 is connected to another electronic data supply device 10 even if it is in a linking state. If the electronic data supply apparatus 10 is in the initial state (there is a category of the initial state) or the linked state (there is a category in which the corresponding management registration information KN and unique information SN are stored), the corresponding category The associating process can be started with respect to the electronic data supply apparatus 10 connected by using.

  Next, a third embodiment of electronic data supply / decryption processing S3 and association completion processing S4 between the electronic data supply device 10 and the electronic data utilization device 20 will be described with reference to FIG.

  When the mutual authentication process S2 ends successfully, that is, when the two hash values Hd match in step S223, the electronic data supply apparatus 10 stores the electronic data D0 stored in the second storage area 12. Is extracted and transmitted to the electronic data utilization apparatus 20 (step S31). The electronic data D0 is at least partially encrypted with the decryption key information Kd stored in the decryption key information area M12. The electronic data utilization device 20 decrypts the received electronic data D0 using the decryption key information Kd in the concatenation information (Kd / RN2) extracted in step S217 of the mutual authentication process S2, and decrypts the decrypted electronic data. D1 is stored in the fourth storage area 22 (step S32). The electronic data supply / decryption processing S3 is the same as in the first and second embodiments.

  Subsequently, the process proceeds to the linking completion process S4, and the electronic data utilization device 20 transmits a linking completion instruction Cf to the electronic data supply device 10 (step S71). If the electronic data utilization apparatus 20 receives the default information KN0 from the electronic data supply apparatus 10 in step S61 of the association confirmation process S1, it is confirmed or selected in step S63 in addition to the association completion instruction Cf. The management registration information KN stored in the management registration information area M25 in the initial state is transmitted to the electronic data supply apparatus 10.

  Upon receiving the association completion instruction Cf, the electronic data supply apparatus 10 uses the initial shared key information Kc0 stored in the shared key information area M11 or the latest shared key information Kcn at the start of the association process in the mutual authentication process S2. Replacing the second shared key information SK2 generated in step S212, the second shared key information SK2 is stored in the shared key information area M11 as new nearest shared key information Kcn. In the initial state at the start of the attaching process, the unique key information Kt unique to the associated electronic data utilization device 20 is stored in the unique key information area M13, and the shared key information area M11 and the unique key information area are stored. The updating process of M13 is performed, and the management registration information KN received together with the linking completion instruction Cf is stored in the management registration information area M15 (step S72). When the updating process of the shared key information area M11, the unique key information area M13, and the management registration information area M15 is completed, an end notification Cr to that effect is transmitted to the electronic data utilization device 20 (step S73).

  Upon receiving the end notification Cr, the electronic data utilization device 20 newly generates the latest extended information Rn by random number processing, and further, the unique key information Kt and the newly generated concatenated information (Kt · Rn) of the latest extended information Rn. Is encrypted with the second shared key information SK2 generated in step S209, that is, the latest shared key information Kcn that is shared key information shared with the electronic data supply apparatus 10 at the time of the latest connection, and a second extended ciphertext C2eKcn is newly generated. (Step S74) and stored in the extended information area M24 of the section corresponding to the connected electronic data supply apparatus 10 (the section specified in the confirmation process in step S62 or step S63 and used in the linking process). Update processing of the extension information area M24 by replacing the initial extension information R0 or the latest extension information Rn with the newly generated latest extension information Rn And replacing the first extended ciphertext C1eKc0 stored in the shared key information area M22 of the section or the second extended ciphertext C2eKcn at the start of the linking process with the newly generated second extended ciphertext C2eKcn, The shared key information area M22 is updated (step S75). If the classification corresponding to the connected electronic data supply device 10 is in the initial state at the start of the linking process, the unique information SN is not stored in the unique information area M23. In S75, the unique information SN extracted by decrypting the response ciphertext CakKt in step S69 of the association confirmation process S1 is stored in the unique information area M23.

  As information stored in the shared key information area M22, the first extended ciphertext C1eKc0 is stored when the electronic data utilization device 20 is in the initial state, and the second extended ciphertext C2eKcn is stored in the linked state. However, the initial shared key information Kc0 may be stored instead of the first extended ciphertext C1eKc0, and the latest shared key information Kcn may be stored instead of the second extended ciphertext C2eKcn. In this case, the second shared key information SK2 generated in step S209 is stored in the shared key information area M22 without generating the second extended ciphertext C2eKcn in steps S74 and S75 of the linking completion process. It is stored as information Kcn. Further, in the linking confirmation process S1, the unique key information Kt stored in the unique key information area M21 before transmitting the first extended ciphertext C1eKc0 or the second extended ciphertext C2eKcn to be transmitted to the electronic data supply apparatus 10. And the concatenated information (Kt · R0) or (Kt · Rn) obtained by concatenating the initial extended information R0 or the latest extended information Rn stored in the extended information area M24 with the initial shared key stored in the shared key information area M22 It is necessary to generate the first extended ciphertext C1eKc0 or the second extended ciphertext C2eKcn by encrypting with the information Kc0 or the latest shared key information Kcn.

  In the third embodiment, the association confirmation process S1, the mutual authentication process S2, the electronic data supply / decryption process S3, and the association completion process S4 include the same processing contents as in the first embodiment. In the illegal combination of the electronic data supply device 10 and the electronic data utilization device 20 described in the embodiment, the linking process between the electronic data supply device 10 and the electronic data utilization device 20, the electronic data supply processing, and the decryption processing are normally performed. The explanation that error processing is not executed is valid in the third embodiment.

  INDUSTRIAL APPLICABILITY The present invention is applicable to an electronic data supply device that supplies electronic data and an electronic data utilization device that uses the supplied electronic data. It is effective to prevent giving and receiving.

The block diagram which shows schematic structure in one Embodiment of the electronic data supply apparatus and electronic data utilization apparatus which concern on this invention The flowchart which shows the whole flow of the tied | linking process between the electronic data supply apparatus shown in FIG. 1, and an electronic data utilization apparatus, and supply and decoding of electronic data. The figure which shows the structure of the 1st storage area in the 1st Embodiment of the electronic data supply apparatus shown in FIG. 1, and the information stored. The figure which shows the structure of the 3rd storage area in 1st Embodiment of the electronic data utilization apparatus shown in FIG. 1, and the information stored. The flowchart which shows the process sequence in 1st Embodiment of the link confirmation process in the link process between the electronic data supply apparatus and electronic data utilization apparatus shown in FIG. The flowchart which shows the process sequence of the mutual authentication process in the tied | linking process between the electronic data supply apparatus and electronic data utilization apparatus which are shown in FIG. The flowchart which shows the process sequence in 1st Embodiment of the electronic data supply / decoding process in the link | linkage process between the electronic data supply apparatus shown in FIG. 2 and an electronic data utilization apparatus, and a link completion process. The figure which shows the structure of the 1st storage area in the 2nd Embodiment of the electronic data supply apparatus shown in FIG. 1, and the information stored. The figure which shows the structure of 1 division of the 3rd storage area in the 2nd Embodiment of the electronic data utilization apparatus shown in FIG. 1, and the information stored. The figure which shows the correspondence of the 1st storage area and 3rd storage area in 2nd Embodiment of the electronic data supply apparatus and electronic data utilization apparatus which are shown in FIG. The flowchart which shows the process sequence in 2nd Embodiment of the tied confirmation process in the tied process between the electronic data supply apparatus and electronic data utilization apparatus shown in FIG. The flowchart which shows the process sequence in 2nd Embodiment of the electronic data supply / decoding process in the link | linkage process between the electronic data supply apparatus shown in FIG. 2 and an electronic data utilization apparatus, and a link completion process. The figure which shows the structure of the 1st storage area in the 3rd Embodiment of the electronic data supply apparatus shown in FIG. 1, and the information stored. The figure which shows the structure of 1 division of the 3rd storage area in the 3rd Embodiment of the electronic data utilization apparatus shown in FIG. 1, and the information stored. The figure which shows the correspondence of the 1st storage area and 3rd storage area in 3rd Embodiment of the electronic data supply apparatus and electronic data utilization apparatus which are shown in FIG. The flowchart which shows the process sequence in 3rd Embodiment of the tied confirmation process in the tied process between the electronic data supply apparatus and electronic data utilization apparatus shown in FIG. The flowchart which shows the process sequence in 3rd Embodiment of the electronic data supply / decoding process in the link | linkage process between the electronic data supply apparatus shown in FIG. 2 and an electronic data utilization apparatus, and a link completion process.

Explanation of symbols

10: Electronic data supply device 11: First storage area 12: Second storage area 13: First control device 14: First communication interface 20: Electronic data utilization device 21: Third storage area 22: Fourth storage area 23: Second control device 24: Second communication interface M11: Shared key information area M12: Decryption key information area M13: Unique key information area M14: Unique information area M15: Management registration information area M21: Unique key information area M22: Shared key Information area M23: Unique information area M24: Extended information area M25: Management registration information area

Claims (33)

An electronic data supply device that supplies electronic data, at least partially encrypted, only to an electronic data utilization device that is associated one-to-one by association processing among a plurality of electronic data utilization devices,
A first storage area having tamper resistance; a second storage area having tamper resistance equal to or lower than the first storage area; and a first control device that controls the association process and the electronic data supply process. ,
In the initial state in which the first storage area is not associated one-to-one, the initial shared key information of the shared key information shared with the electronic data utilization device is stored, and in the association state after the association process, Storing the nearest shared key information that is the shared key information shared at the time of the most recent connection with the associated electronic data utilization device, and unique key information unique to the associated electronic data utilization device,
Before the first control device performs the electronic data supply process to one electronic data utilization device among the plurality of electronic data utilization devices,
When the one electronic data utilization device is in the initial state, the first ciphertext obtained by encrypting the unique key information of the one electronic data utilization device with the initial shared key information, or the one electronic data utilization device Is not in the initial state, the second ciphertext obtained by encrypting the unique key information of the one electronic data using device with the latest shared key information included in the one electronic data using device is used as the one electronic data using Received from the device,
The received first or second ciphertext is decrypted with the initial shared key information or the latest shared key information stored in the first storage area, and the unique key information of the one electronic data utilization device is extracted. ,
In the tied state, the electronic data associated with the one electronic data using device is compared with the unique key information extracted by decryption and the unique key information stored in the first storage area. An electronic data supply device that performs confirmation processing as to whether or not the device is a user device. The second storage area stores the electronic data at least partially encrypted;
The electronic data supply device according to claim 1, wherein the first storage area further stores decryption key information used for decrypting the electronic data.   The first control device performs a mutual authentication process with the one electronic data utilization device by performing a random number generation process and an encryption process using the unique key information in the association process, When the decryption key information is supplied to the one electronic data utilization device, the latest shared key information shared with the one electronic data utilization device is generated or updated, and when no error occurs in the linking process, The electronic data supply apparatus according to claim 1 or 2, wherein electronic data supply processing is performed. In the tying process, the first control device
A third ciphertext obtained by encrypting an internally generated first random number with the unique key information is transmitted to the one electronic data utilization device, and further, the shared key is used using the first random number and the unique key information. Generating and temporarily storing first shared key information to be used as information,
Receiving the fourth ciphertext obtained by encrypting the second random number generated internally by the one electronic data using device with the first shared key information extracted from the third ciphertext from the one electronic data using device;
The received fourth ciphertext is decrypted with the first shared key information to extract the second random number, and second shared key information to be used as the shared key information from the extracted second random number and the first random number The one electronic data utilization device generates a fifth ciphertext, which is generated and temporarily stored, and the combined information obtained by combining the decryption key information and the second random number is encrypted with the second shared key information The electronic data supply apparatus according to claim 3, wherein the electronic data supply apparatus transmits the electronic data. The first control device further generates a function value uniquely obtained by performing a predetermined function process on the decryption key information in the association process, and temporarily stores the function value.
The one electronic data utilization apparatus generates the function value of the decryption key information extracted from the fifth ciphertext and uses the sixth ciphertext encrypted with the second shared key information as the one electronic data utilization Received from the device,
When the received sixth ciphertext is decrypted with the second shared key information and the function value is extracted and compared with the function value generated and temporarily stored, when the two function values match, The electronic data supply apparatus according to claim 4, wherein the electronic data supply process is performed.   When the first control device receives an instruction to complete the linking process from the one electronic data utilization device after performing the electronic data supply process in the linking process, the second shared key information is obtained. Stored in the first storage area as the most recent shared key information, and if the initial state at the start of the linking process, the unique key information of the one electronic data utilization device is further linked The electronic data supply apparatus according to claim 3, wherein the electronic data supply apparatus stores the unique key information of the electronic data utilization apparatus in the first storage area, and completes the association process. The first storage area further stores unique information different from the other electronic data supply device in the initial state and the tied state,
In the process before the first control device performs the electronic data supply process to one electronic data utilization device among the plurality of electronic data utilization devices, the one electronic data utilization device, When the unique information is transmitted and the one electronic data utilization device receives the unique information, the one electronic data utilization device is in the initial state with respect to the electronic data supply device specified by the unique information. In the case of the first ciphertext, or the second ciphertext when the one electronic data utilization device is in the linked state with respect to the electronic data supply device specified by the unique information, The electronic data supply apparatus according to claim 1, wherein the electronic data supply apparatus is received from the one electronic data utilization apparatus. The first storage area further stores unique information different from other electronic data supply devices in the initial state, and management registration designated by the electronic data utilization device associated in the association state Further storing information and the unique information;
In the process before the first control device performs the electronic data supply process to one of the plurality of electronic data utilization devices.
In the case of the initial state, predetermined default information indicating that the management registration information is unregistered is transmitted to the one electronic data utilization device. Transmitting the management registration information stored in the first storage area to two electronic data utilization devices;
When the one electronic data utilization apparatus receives the default information or the management registration information, the one electronic data utilization apparatus is in the initial state with respect to the electronic data supply apparatus with the management registration information unregistered. In this case, the first extension obtained by encrypting the synthesized information obtained by synthesizing the unique key information corresponding to the unused management registration information of the one electronic data utilization apparatus and the initial extension information with the initial shared key information. When the one electronic data utilization device is in the association state with respect to the electronic data supply device specified by the ciphertext or the management registration information, the management registration information of the one electronic data utilization device Combined information obtained by synthesizing the latest extended information generated at the time of the most recent connection with the electronic data supply device specified by the management registration information and the unique key information corresponding to The second enhancement ciphertext encrypted by the most recent common key information one electronic data utilizing apparatus have been received from the one electronic data utilizing apparatus,
The received first extended ciphertext or the second extended ciphertext is decrypted with the initial shared key information or the latest shared key information stored in the first storage area, and the one electronic data utilization device The unique key information and the initial extension information or the latest extension information of
In the case of the initial state, first information obtained by encrypting synthesized information obtained by synthesizing the extracted initial extension information and the unique information stored in the first storage area with the extracted unique key information. Send the response ciphertext to the one electronic data utilization device,
In the case of the linked state, the extracted unique key information is compared with the unique key information stored in the first storage area, and when the two unique key information matches, the latest extended information And the second response ciphertext obtained by encrypting the combined information obtained by combining the unique information stored in the first storage area with the extracted unique key information to the one electronic data using device The electronic data supply apparatus according to claim 1, wherein the electronic data supply apparatus transmits the electronic data.   In the case of the initial state before the linking process, after performing the electronic data supply process in the linking process, when receiving an instruction to complete the linking process from the one electronic data utilization device, 9. The electronic data supply device according to claim 8, wherein the first control device stores the management registration information received at or before the completion instruction is received in the first storage area. An electronic data utilization device that decrypts and uses at least a part of the encrypted electronic data supplied from the electronic data supply device according to any one of claims 1 to 6,
A third storage area having tamper resistance, a fourth storage area having tamper resistance equal to or lower than the third storage area, and a linking process for associating one electronic data supply device one-to-one and the electronic data A second control device for controlling the decoding process of
In an initial state where the third storage area is not associated one-to-one, the unique key information of the electronic data using device and the initial shared key information of the shared key information shared with the electronic data supply device or the unique A first ciphertext obtained by encrypting key information with the initial shared key information is stored, and the electronic data supply device is associated with the unique key information in a one-to-one relationship in the association state after the association process. Storing the second ciphertext obtained by encrypting the most recent shared key information or the unique key information that is the shared key information shared at the time of the most recent connection with the most recent shared key information,
Before the second control device accepts the supply of the electronic data from the one electronic data supply device, the first ciphertext in the initial state, the second ciphertext in the association state, An electronic data utilization apparatus, wherein the electronic data supply apparatus transmits the data to one electronic data supply apparatus.   The second control device performs a mutual authentication process with the one electronic data supply device by performing a random number generation process and an encryption process using the unique key information in the association process, Receiving the decryption key information from the electronic data supply device, generating or updating the latest shared key information shared with the electronic data supply device, and supplying the one electronic data when no error occurs in the linking process The electronic data utilization apparatus according to claim 10, wherein the electronic data is received from the apparatus, and the electronic data is decrypted with the decryption key information received in the association process. In the tying process, the second control device,
A third ciphertext obtained by encrypting a first random number generated inside the one electronic data supply device with the unique key information;
The fourth ciphertext obtained by encrypting the second random number generated internally with the first shared key information generated using the first random number obtained by decrypting the third ciphertext and the unique key information is used as the first ciphertext. A second shared key information is generated from the second random number and the first random number;
The decryption key information using the second shared key information generated from the second random number and the first random number extracted by the one electronic data supply device decrypting the fourth ciphertext with the first shared key information And a fifth ciphertext obtained by encrypting the synthesized information obtained by synthesizing the second random number from the one electronic data supply device,
The fifth ciphertext is decrypted, the decryption key information and the second random number are extracted, the extracted second random number is compared with the second random number generated internally, and the two second random numbers match. 12. The electronic data utilization apparatus according to claim 11, wherein only in some cases, information indicating that the two second random numbers match is transmitted to the one electronic data supply apparatus. In the tying process, the second control device,
Only when the second random number extracted by decrypting the fifth ciphertext matches the second random number generated internally, the decryption key information is uniquely obtained by performing a predetermined function process. A function value is generated, and the sixth ciphertext obtained by encrypting the function value with the second shared key information is transmitted to the one electronic data supply apparatus as information indicating that the two second random numbers match. The electronic data utilization apparatus according to claim 12, wherein:   When the second control device receives the electronic data from the one electronic data supply device in the associating process, the second control device decrypts the electronic data with the decryption key information obtained by decrypting the fifth ciphertext. The electronic data utilization apparatus according to claim 12 or 13, characterized in that:   In the linking process, the second control device transmits an instruction to complete the linking process to the one electronic data supply device after decrypting the electronic data with the decryption key information. When the completion notification of the linking process is received from the electronic data supply apparatus, the second shared key information is stored as the latest shared key information in the third storage area, or the unique key information is stored as the latest shared key information. The electronic data according to claim 11, wherein the second ciphertext encrypted with the second shared key information serving as key information is stored, and the linking process is completed. Use device. An electronic data utilization device that decrypts and uses at least a part of the encrypted electronic data supplied from the electronic data supply device according to claim 7,
A third storage area having tamper resistance, a fourth storage area having tamper resistance equal to or lower than the third storage area, and a linking process for associating one electronic data supply device one-to-one and the electronic data A second control device for controlling the decoding process of
The third storage area is divided into a plurality of small areas associated with the plurality of electronic data supply devices;
In an initial state in which each section of the third storage area is not associated with the corresponding electronic data supply device on a one-to-one basis, the unique key information of the electronic data utilization device and the corresponding electronic data supply device The initial shared key information of the shared key information to be shared or the first ciphertext obtained by encrypting the unique key information with the initial shared key information is stored, and the associated state after the association process with the corresponding electronic data supply device The second ciphertext obtained by encrypting the unique key information and the nearest shared key information that is the shared key information shared at the time of the last connection with the corresponding electronic data supply device or the unique key information with the nearest shared key information And storing the specific information of the corresponding electronic data supply device,
The second control device receives the unique information from the one electronic data supply device before receiving the supply of the electronic data from the one electronic data supply device, and receives the unique information received in the third storage area. When there is no classification of the linked state in which information is recorded and there is a classification of the initial state in which the unique information is not recorded, the first ciphertext is received in the third storage area. An electronic data utilization apparatus, wherein when there is a classification of the association state in which unique information is recorded, the second ciphertext is transmitted to the one electronic data supply apparatus.   The second control device performs a mutual authentication process with the one electronic data supply device by performing a random number generation process and an encryption process using the unique key information in the association process, Receiving the decryption key information from the electronic data supply device, generating or updating the latest shared key information shared with the electronic data supply device, and supplying the one electronic data when no error occurs in the linking process The electronic data utilization apparatus according to claim 16, wherein the electronic data is received from the apparatus, and the electronic data is decrypted with the decryption key information received in the association process. In the tying process, the second control device,
A third ciphertext obtained by encrypting a first random number generated inside the one electronic data supply device with the unique key information;
The fourth ciphertext obtained by encrypting the second random number generated internally with the first shared key information generated using the first random number obtained by decrypting the third ciphertext and the unique key information is used as the first ciphertext. A second shared key information is generated from the second random number and the first random number;
The decryption key information using the second shared key information generated from the second random number and the first random number extracted by the one electronic data supply device decrypting the fourth ciphertext with the first shared key information And a fifth ciphertext obtained by encrypting the synthesized information obtained by synthesizing the second random number from the one electronic data supply device,
The fifth ciphertext is decrypted, the decryption key information and the second random number are extracted, the extracted second random number is compared with the second random number generated internally, and the two second random numbers match. 18. The electronic data utilization apparatus according to claim 17, wherein only in some cases, information indicating that the two second random numbers match is transmitted to the one electronic data supply apparatus. In the tying process, the second control device,
Only when the second random number extracted by decrypting the fifth ciphertext matches the second random number generated internally, the decryption key information is uniquely obtained by performing a predetermined function process. A function value is generated, and the sixth ciphertext obtained by encrypting the function value with the second shared key information is transmitted to the one electronic data supply apparatus as information indicating that the two second random numbers match. The electronic data utilization apparatus according to claim 18, wherein:   When the second control device receives the electronic data from the one electronic data supply device in the associating process, the second control device decrypts the electronic data with the decryption key information obtained by decrypting the fifth ciphertext. 20. The electronic data utilization apparatus according to claim 18 or 19, characterized in that:   In the linking process, the second control device transmits an instruction to complete the linking process to the one electronic data supply device after decrypting the electronic data with the decryption key information. When the completion notification of the linking process is received from the electronic data supply apparatus, the second shared key information is stored as the latest shared key information in the third storage area, or the unique key information is stored as the latest shared key information. Storing the second ciphertext encrypted with the second shared key information serving as key information, and further storing the unique information in the initial state at the start of the linking process, 21. The electronic data utilization apparatus according to claim 17, wherein the association process is completed. An electronic data utilization device that decrypts and uses at least a part of the encrypted electronic data supplied from the electronic data supply device according to claim 8,
A third storage area having tamper resistance, a fourth storage area having tamper resistance equal to or lower than the third storage area, and a linking process for associating one electronic data supply device one-to-one and the electronic data A second control device for controlling the decoding process of
The third storage area is divided into a plurality of small areas associated with the plurality of electronic data supply devices;
In an initial state in which each section of the third storage area is not associated with the corresponding electronic data supply device on a one-to-one basis, unique key information of the electronic data utilization device and initial extended information generated by random number processing And first shared key information of the shared key information shared with the corresponding electronic data supply device or synthesized information obtained by synthesizing the unique key information and the initial extended information with the initial shared key information. An extended ciphertext and management registration information assigned to each section as information for identifying each section is stored, and the unique key information is associated with the corresponding electronic data supply apparatus after the linking process. And the latest extended information generated at the time of the last connection with the corresponding electronic data supply device, and the latest shared information that is the shared key information shared at the time of the last connection with the corresponding electronic data supply device. Information or the second extended ciphertext obtained by synthesizing the unique key information and the latest extended information with the latest shared key information, the management registration information, and the corresponding electronic data supply device Store unique information,
The management registration information is not registered in the electronic data supply device from the one electronic data supply device before the second control device accepts the supply of the electronic data from the one electronic data supply device. Receiving the predetermined registration information indicating the management registration information registered in the electronic data supply device,
When the default information is received, if there is a section of the initial state in which the unique information is not recorded in the third storage area, the first extended ciphertext is transmitted to the one electronic data supply device,
When the management registration information is received, if there is a section for recording the management registration information in the third storage area, the second extended ciphertext is transmitted to the one electronic data supply device. The electronic data utilization apparatus according to any one of claims 10 to 15. When the default information is received, if there is a section of the initial state in which the unique information is not recorded in the third storage area, the first extended ciphertext is transmitted to the one electronic data supply apparatus. , Receiving the first response ciphertext from the one electronic data supply device, decrypting the first response ciphertext with the unique key information, extracting the initial extension information and the unique information, and storing the third storage Compare with the initial extension information stored in the area, authenticate the one electronic data supply device,
When the management registration information is received, if there is a section for recording the management registration information in the third storage area, the second extended ciphertext is transmitted to the one electronic data supply device, and the one The second response ciphertext is received from the electronic data supply device, the second response ciphertext is decrypted with the unique key information, the latest extended information and the unique information are extracted, and stored in the third storage area 23. The electronic data utilization apparatus according to claim 22, wherein authentication of the one electronic data supply apparatus is performed by comparing the latest extended information and the unique information.   The second control device performs a mutual authentication process with the one electronic data supply device by performing a random number generation process and an encryption process using the unique key information in the association process, Receiving the decryption key information from the electronic data supply device, generating or updating the latest shared key information shared with the electronic data supply device, and supplying the one electronic data when no error occurs in the linking process 24. Use of electronic data according to claim 22 or 23, wherein supply of the electronic data from a device is accepted, and the decryption processing of the electronic data is performed with the decryption key information received in the association processing. apparatus. In the tying process, the second control device,
A third ciphertext obtained by encrypting a first random number generated inside the one electronic data supply device with the unique key information;
The fourth ciphertext obtained by encrypting the second random number generated internally with the first shared key information generated using the first random number obtained by decrypting the third ciphertext and the unique key information is used as the first ciphertext. A second shared key information is generated from the second random number and the first random number;
The decryption key information using the second shared key information generated from the second random number and the first random number extracted by the one electronic data supply device decrypting the fourth ciphertext with the first shared key information And a fifth ciphertext obtained by encrypting the synthesized information obtained by synthesizing the second random number from the one electronic data supply device,
The fifth ciphertext is decrypted, the decryption key information and the second random number are extracted, the extracted second random number is compared with the second random number generated internally, and the two second random numbers match. 25. The electronic data utilization apparatus according to claim 24, wherein only when the information indicates that the two second random numbers coincide with each other, the information is transmitted to the one electronic data supply apparatus. In the tying process, the second control device,
Only when the second random number extracted by decrypting the fifth ciphertext matches the second random number generated internally, the decryption key information is uniquely obtained by performing a predetermined function process. A function value is generated, and the sixth ciphertext obtained by encrypting the function value with the second shared key information is transmitted to the one electronic data supply apparatus as information indicating that the two second random numbers match. 26. The electronic data utilization apparatus according to claim 25.   When the second control device receives the electronic data from the one electronic data supply device in the associating process, the second control device decrypts the electronic data with the decryption key information obtained by decrypting the fifth ciphertext. 27. The electronic data utilization apparatus according to claim 25 or 26, characterized in that:   In the linking process, the second control device transmits an instruction to complete the linking process to the one electronic data supply device after decrypting the electronic data with the decryption key information. Upon receipt of the notification of completion of the linking process from the electronic data supply device, new extended information is generated by random number processing to update the latest extended information, and the second shared key information is stored in the third storage area. Storing the second extended ciphertext that is stored as the latest shared key information, or the synthesized information obtained by synthesizing the unique key information and the updated last extended information with the latest shared key information. 28. The electronic data utilization apparatus according to claim 24, further comprising storing the updated latest extended information and the unique information to complete the association process.   An electronic data utilization system comprising the electronic data supply device according to any one of claims 1 to 6 and the electronic data utilization device according to any one of claims 10 to 15.   An electronic data utilization system comprising: the electronic data supply device according to claim 7; and the electronic data utilization device according to any one of claims 16 to 21.   An electronic data utilization system comprising: the electronic data supply device according to claim 8 or 9; and the electronic data utilization device according to any one of claims 22 to 28.   It is a computer program for the computer which comprises the said 1st control apparatus of the electronic data supply apparatus of any one of Claims 1-9, Comprising: The said 1st control apparatus is a process of the said tied | linking process An electronic data supply program comprising program steps capable of executing steps.   It is a computer program for the computer which comprises the said 2nd control apparatus of the electronic data utilization apparatus of any one of Claims 10-28, Comprising: The said 2nd control apparatus is a process of the said link | linking process An electronic data utilization program comprising program steps capable of executing steps.

Images