JP2002190797A5 - - Google Patents
Download PDFInfo
- Publication number
- JP2002190797A5 JP2002190797A5 JP2001311039A JP2001311039A JP2002190797A5 JP 2002190797 A5 JP2002190797 A5 JP 2002190797A5 JP 2001311039 A JP2001311039 A JP 2001311039A JP 2001311039 A JP2001311039 A JP 2001311039A JP 2002190797 A5 JP2002190797 A5 JP 2002190797A5
- Authority
- JP
- Japan
- Prior art keywords
- information
- key
- encryption
- date
- decryption
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000000875 corresponding Effects 0.000 claims 6
- 230000005540 biological transmission Effects 0.000 claims 2
Claims (9)
前記鍵管理装置は、
少なくとも１組の暗号鍵および復号鍵を記憶する鍵記憶手段と、
前記記憶手段に記憶された復号鍵と、当該復号鍵の公開日あるいは公開日時と、の対応関係を示す管理テーブルを記憶する管理テーブル記憶手段と、
前記管理テーブル記憶手段に記憶された管理テーブルを参照することで、前記情報暗号化装置が要求した日あるいは日時に対応する復号鍵と対の暗号鍵を検索する鍵検索手段と、
前記検索手段で検索した暗号鍵を、通信ネットワークを介して前記情報暗号化装置に送信する暗号鍵送信手段と、
前記管理テーブル記憶手段に記憶された管理テーブルにしたがい、現在の日あるいは日時に対応する復号鍵を公開する復号鍵公開手段と、を備えており、
前記情報暗号化装置は、
暗号化すべき情報の機密性が解除される日あるいは日時に関する日時情報を、通信ネットワークを介して前記鍵管理装置に送信する日時情報送信手段と、
通信ネットワークを介して前記鍵管理装置から送られてきた、前記日時情報送信手段が送信した日時情報で特定される日あるいは日時に対応する暗号鍵を受信する暗号鍵受信手段と、
前記暗号鍵受信手段で受信した暗号鍵を用いて、情報を暗号化する暗号化手段と、
前記暗号化手段で暗号化された情報に当該情報についての前記日時情報を付与して、前記情報復号化装置に配布する暗号化情報を作成する暗号化情報作成手段と、を備えており、
前記情報復号化装置は、
前記情報暗号化装置によって作成された暗号化情報を取得する暗号化情報取得手段と、
前記暗号化情報取得手段で取得した暗号化情報に付与された日時情報で特定される日あるいは日時になったときに、前記鍵管理装置で公開されている復号鍵を取得する復号鍵取得手段と、
前記復号鍵取得手段で取得した復号鍵を用いて、前記暗号化情報取得手段で取得した暗号化情報を復号化する復号化手段と、を備えている
ことを特徴とする鍵管理システム。An information encryption apparatus that encrypts information using an encryption key, an information decryption apparatus that decrypts information using a decryption key, and an encryption key and a decryption key used in the information encryption apparatus and the information decryption apparatus A key management system in which at least the information encryption device and the key management device are connected by a communication network,
The key management device includes:
Key storage means for storing at least one pair of encryption key and decryption key;
A management table storage means for storing a management table indicating a correspondence relationship between the decryption key stored in the storage means and the release date or release date of the decryption key;
A key search means for searching for an encryption key paired with a decryption key corresponding to the date or date and time requested by the information encryption device by referring to the management table stored in the management table storage means;
An encryption key transmitting means for transmitting the encryption key searched by the search means to the information encryption apparatus via a communication network;
According to a management table stored in the management table storage means, and a decryption key release means for releasing a decryption key corresponding to the current date or date and time,
The information encryption device includes:
Date / time information transmitting means for transmitting date / time information on the date or date / time when the confidentiality of the information to be encrypted is released to the key management device via a communication network;
An encryption key receiving means for receiving an encryption key corresponding to the date or date specified by the date and time information sent from the key management device via the communication network and sent by the date and time information sending means;
An encryption means for encrypting information using the encryption key received by the encryption key receiving means;
Providing the date and time information about the information to the information encrypted by the encryption means, and creating encrypted information to be distributed to the information decryption device, and encryption information creation means,
The information decoding device includes:
Encrypted information acquisition means for acquiring encrypted information created by the information encryption device;
A decryption key acquisition means for acquiring a decryption key published by the key management device when the date or the date specified by the date / time information given to the encryption information acquired by the encryption information acquisition means is reached; ,
A key management system comprising: decryption means for decrypting the encrypted information acquired by the encrypted information acquisition means using the decryption key acquired by the decryption key acquisition means.
前記情報復号化装置は複数あり、当該複数の情報復号化装置各々と前記鍵管理装置とは通信ネットワークを介して接続されており、
前記鍵管理装置の復号鍵公開手段は、前記複数の情報復号化装置を宛先とするブロードキャストパケットあるいはマルチキャストパケットにより、復号鍵を、通信ネットワークを介して前記複数の情報復号化装置に一斉同報通信するものである
ことを特徴とする鍵管理システム。The key management system according to claim 1,
There are a plurality of the information decryption devices, and each of the plurality of information decryption devices and the key management device are connected via a communication network,
The decryption key disclosing means of the key management device broadcasts a decryption key to the plurality of information decryption devices via a communication network by broadcast packets or multicast packets destined for the plurality of information decryption devices. A key management system characterized by
前記情報復号化装置は複数あり、
前記鍵管理装置の復号鍵公開手段は、無線放送を利用することで、前記複数の情報復号化装置に対して復号鍵の公開を行うものである
ことを特徴とする鍵管理システム。The key management system according to claim 1,
There are a plurality of the information decoding devices,
The key management system according to claim 1, wherein the decryption key disclosure means of the key management device is configured to disclose a decryption key to the plurality of information decryption devices by using wireless broadcasting.
前記鍵管理装置は、前記情報暗号化装置が要求した日あるいは日時に対応する復号鍵が前記管理テーブル記憶手段に記憶された管理テーブルにない場合に、新たに１組の暗号鍵および復号鍵を生成する鍵生成手段と、
前記鍵生成手段で生成した暗号鍵および復号鍵に、前記情報暗号化装置が要求した日あるいは日時を対応付けて、前記管理テーブルに追加する管理テーブル作成手段と、をさらに備えている
ことを特徴とする鍵管理システム。The key management system according to claim 1, 2, or 3,
The key management device newly sets a pair of encryption key and decryption key when there is no decryption key corresponding to the date or date and time requested by the information encryption device in the management table stored in the management table storage means. A key generation means for generating;
Management table creation means for associating the date or date requested by the information encryption apparatus with the encryption key and decryption key generated by the key generation means, and adding to the management table. Key management system.
前記情報暗号化装置において、
前記暗号化手段は、送信すべき情報をデータ鍵を用いて暗号化するとともに、当該データ鍵を、操作者によって入力された個別暗号鍵および前記暗号鍵受信手段で受信した暗号鍵を用いて二重に暗号化するものであり、
前記情報作成手段は、前記暗号化手段で暗号化された情報に、当該情報についての前記日時情報および前記暗号化手段で二重に暗号化されたデータ鍵を付与して、前記情報復号化装置に配布する暗号化情報を作成するものであり、
前記情報復号化装置において、
前記復号化手段は、操作者によって入力された前記個別暗号鍵および前記復号鍵取得手段で取得した復号鍵を用いて、前記暗号化情報取得手段で取得した暗号化情報に付加された、二重に暗号化されたデータ鍵を復号化するとともに、当該復号化されたデータ鍵を用いて暗号化情報を復号化するものである
ことを特徴とする鍵管理システム。The key management system according to claim 1, 2, 3 or 4,
In the information encryption apparatus,
The encryption means encrypts information to be transmitted using a data key, and the data key is encrypted using an individual encryption key input by an operator and an encryption key received by the encryption key receiving means. Is to encrypt heavily,
The information creating means assigns the date and time information about the information and the data key double-encrypted by the encryption means to the information encrypted by the encryption means, and the information decryption apparatus To create encrypted information for distribution to
In the information decoding apparatus,
The decryption means uses the individual encryption key input by the operator and the decryption key acquired by the decryption key acquisition means, and uses the double information added to the encryption information acquired by the encryption information acquisition means. A key management system that decrypts the encrypted data key and decrypts the encrypted information using the decrypted data key.
前記情報暗号化装置は、前記暗号化情報作成手段で作成した暗号化情報を通信ネットワークを介して前記情報復号化装置に送信する暗号化情報送信手段をさらに備えている
ことを特徴とする鍵管理システム。The key management system according to claim 1, wherein the information encryption device and the information decryption device are connected via a communication network,
The information encryption apparatus further includes encryption information transmission means for transmitting encrypted information created by the encrypted information creation means to the information decryption apparatus via a communication network. system.
少なくとも１組の暗号鍵および復号鍵を記憶する鍵記憶手段と、
前記記憶手段に記憶された復号鍵と、当該復号鍵の公開日あるいは公開日時と、の対応関係を示す管理テーブルを記憶する管理テーブル記憶手段と、
前記管理テーブル記憶手段に記憶された管理テーブルを参照することで、情報の暗号化を行う情報暗号化装置が要求した日あるいは日時に対応する復号鍵と対の暗号鍵を検索する鍵検索手段と、
前記検索手段で検索した暗号鍵を前記情報暗号化装置に送信する暗号鍵送信手段と、
前記管理テーブル記憶手段に記憶された管理テーブルにしたがい、現在の日あるいは日時に対応する復号鍵を、情報の復号化を行う少なくとも１つ情報復号化装置に公開する復号鍵公開手段と、
を備えていることを特徴とする鍵管理装置。A key management device for managing an encryption key and a decryption key used for encryption and decryption of information,
Key storage means for storing at least one pair of encryption key and decryption key;
A management table storage means for storing a management table indicating a correspondence relationship between the decryption key stored in the storage means and the release date or release date of the decryption key;
Key search means for searching for a pair of encryption keys corresponding to the date or date and time requested by the information encryption apparatus for encrypting information by referring to the management table stored in the management table storage means; ,
Encryption key transmission means for transmitting the encryption key searched by the search means to the information encryption device;
In accordance with the management table stored in the management table storage means, a decryption key disclosing means for disclosing at least one decryption key corresponding to the current date or date and time to an information decryption device for decrypting information;
A key management device comprising:
暗号鍵および復号鍵の管理を行う鍵管理装置から、当該鍵管理装置において、暗号化すべき情報の機密性が解除される日あるいは日時に公開される復号鍵と対の暗号鍵を取得する暗号鍵取得手段と、
前記暗号鍵取得手段で取得した暗号鍵を用いて、情報を暗号化する暗号化手段と、
前記暗号化手段で暗号化された情報に、当該情報についての機密性が解除される日あるいは日時に関する情報を付与することで、当該情報の復号化を行う情報復号化装置に配布する暗号化情報を作成する暗号化情報作成手段と、
を備えていることを特徴とする情報暗号化装置。An information encryption device for encrypting information,
An encryption key that acquires an encryption key paired with a decryption key that is disclosed on the date or date when the confidentiality of the information to be encrypted is released from the key management device that manages the encryption key and the decryption key Acquisition means;
Encryption means for encrypting information using the encryption key acquired by the encryption key acquisition means;
Encrypted information distributed to an information decryption device that decrypts the information by giving the information encrypted by the encryption means information related to the date or date when the confidentiality of the information is released Encryption information creating means for creating
An information encryption apparatus comprising:
当該情報復号化装置は、請求項８記載の情報暗号化装置で作成された暗号化情報を復号化するものであり、
請求項８記載の情報暗号化装置で作成された暗号化情報に付与された、当該暗号化情報の機密性が解除される日あるいは日時に関する情報を取得する日時情報取得手段と、
現在の日あるいは日時が前記日時情報取得手段で取得した情報で特定される日あるいは日時となったときに、請求項８記載の鍵管理装置において公開されている復号鍵を取得する復号鍵取得手段と、
前記復号鍵取得手段で取得した復号鍵を用いて、請求項８記載の情報暗号化装置で作成された暗号化情報を復号化する復号化手段と、
を備えていることを特徴とする情報復号化装置。An information decoding device for decoding information,
The information decryption device decrypts the encrypted information created by the information encryption device according to claim 8,
Date and time information acquisition means for acquiring information related to the date or date and time when the confidentiality of the encrypted information is released, which is given to the encrypted information created by the information encryption device according to claim 8;
The decryption key acquisition means for acquiring the decryption key disclosed in the key management device according to claim 8, when the current date or date is the date or date specified by the information acquired by the date information acquisition means. When,
Decrypting means for decrypting the encrypted information created by the information encryption device according to claim 8, using the decryption key acquired by the decryption key acquiring means;
An information decoding apparatus comprising:
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP2001311039A JP4104315B2 (en) | 2001-10-09 | 2001-10-09 | Key management system, key management apparatus, information encryption apparatus, information decryption apparatus, and storage medium storing program |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP2001311039A JP4104315B2 (en) | 2001-10-09 | 2001-10-09 | Key management system, key management apparatus, information encryption apparatus, information decryption apparatus, and storage medium storing program |
Related Parent Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| JP18118697A Division JP3657396B2 (en) | 1997-07-07 | 1997-07-07 | Key management system, key management apparatus, information encryption apparatus, information decryption apparatus, and storage medium storing program |
Publications (3)
| Publication Number | Publication Date |
|---|---|
| JP2002190797A JP2002190797A (en) | 2002-07-05 |
| JP2002190797A5 true JP2002190797A5 (en) | 2005-05-19 |
| JP4104315B2 JP4104315B2 (en) | 2008-06-18 |
Family
ID=19129932
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| JP2001311039A Expired - Fee Related JP4104315B2 (en) | 2001-10-09 | 2001-10-09 | Key management system, key management apparatus, information encryption apparatus, information decryption apparatus, and storage medium storing program |
Country Status (1)
| Country | Link |
|---|---|
| JP (1) | JP4104315B2 (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7702904B2 (en) | 2002-11-15 | 2010-04-20 | Nec Corporation | Key management system and multicast delivery system using the same |
| JP5097145B2 (en) * | 2009-02-09 | 2012-12-12 | 日本電信電話株式会社 | Encryption system and encryption method |
-
2001
- 2001-10-09 JP JP2001311039A patent/JP4104315B2/en not_active Expired - Fee Related
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108574569B (en) | Authentication method and authentication device based on quantum key | |
| JP3657396B2 (en) | Key management system, key management apparatus, information encryption apparatus, information decryption apparatus, and storage medium storing program | |
| US6636968B1 (en) | Multi-node encryption and key delivery | |
| WO2016177332A1 (en) | Cloud storage method and system | |
| HK1095452A1 (en) | A method of encrypting and transferring data between a sender and a receiver using a network | |
| EP2034778A3 (en) | Method and apparatus for providing security in wireless communication networks | |
| GB2363278A (en) | Selective and renewable encryption for secure distribution of video on-demand | |
| KR101805602B1 (en) | Method for managing encryption key for broadcasting service | |
| US20130339726A1 (en) | File server apparatus and file server system | |
| EP0840477A3 (en) | Secret key transfer method which is highly secure and can restrict the damage caused when the secret key is leaked or decoded | |
| CN105610793A (en) | Outsourced data encrypted storage and cryptograph query system and application method therefor | |
| CN102333093A (en) | Data encryption transmission method and system | |
| JP2007258822A5 (en) | ||
| GB2404535B (en) | Secure transmission of data within a distributed computer system | |
| JP2008065696A5 (en) | ||
| EP1456995A4 (en) | Methods and apparatus for secure distribution of program content | |
| CN103236934A (en) | Method for cloud storage security control | |
| KR101424972B1 (en) | Method for using contents with a mobile card, host device, and mobile card | |
| TW200704092A (en) | Device and method for providing and decrypting encrypted network content | |
| CN101939962A (en) | Controlling media distribution | |
| JPH10107832A (en) | Cipher multi-address mail system | |
| JP2003264548A5 (en) | ||
| JP2002190797A5 (en) | ||
| JPH11187008A (en) | Delivering method for cryptographic key | |
| ATE298488T1 (en) | SECURE DATA TRANSMISSION SYSTEM |