JP6519601B2 - Information processing apparatus, information processing method, device, method of updating encryption key, system and program - Google Patents

Description

  The present invention relates to an information processing apparatus, an information processing method, a device, an encryption key updating method, a system, and a program.

  In order to improve security in information communication via a network, encryption using an encryption key, authentication, etc. are widely performed. Cryptographic security is guaranteed on the premise that it takes a great deal of time and money to decipher, but various factors can compromise the cryptography. Various techniques for updating the encryption key have been proposed as a countermeasure against this.

  Patent Document 1 discloses a wireless local area network (LAN) terminal capable of automatically updating an electronic certificate. The wireless LAN terminal determines whether or not a preset update time limit has been reached. If the renewal time limit has been reached, the wireless LAN terminal requests the certification authority to issue a new expiration date electronic certificate, and renews the electronic certificate.

  Patent Document 2 discloses a method of updating an encryption key used for encryption for encrypting and transmitting a user ID and a password when a client accesses a computer. The encryption key is provided with a preset lifetime, and when the end of the lifetime is reached, a new encryption key is issued and automatically delivered to the client by the automatic updating function.

  Patent Document 3 discloses a card processing system including a card terminal, a POS (Point Of Sales) terminal, and a server device. In order to prevent leakage of medium information due to unauthorized acquisition, when the same card information is read a prescribed number of times by the card terminal, the POS terminal requests the server apparatus to exchange the encryption key.

JP, 2008-160384, A Japanese Patent Application Publication No. 2007-503136 JP 2012-169751 A

  However, as in the techniques described in Patent Documents 1 and 2, in the method of updating the encryption key based on the update time limit, there may be cases where the response becomes insufficient when a new encryption key compromise factor occurs. is there.

  In addition, in the method of updating the key based on factors such as the number of times the card is read, such as the technology described in Patent Document 3, the response may be insufficient depending on the factor of compromise. is there.

  The present invention has been made in view of the above-described problems, and an object of the present invention is to provide an information processing apparatus capable of updating an encryption key in response to a wider range of encryption key compromise factors.

According to one aspect of the present invention, there is provided an acquisition unit for acquiring compromise information of an encryption key, a key information storage unit for storing key information in which a device and an encryption key distributed to the device are associated; based on the compromise information and the key information, the encryption key to be updated of the encryption key that was distributed to the device, and the encryption key specifying unit that specifies the device corresponding to the encryption key to be the update, An information processing apparatus comprising: a transmission unit for transmitting an update encryption key for updating the specified encryption key to a device to which the specified encryption key is distributed; Ru.

According to another aspect of the present invention, there is provided a key information storage unit storing key information in which a step of acquiring compromise information of an encryption key, a device, and an encryption key distributed to the device are stored. obtaining information, on the basis of the compromise information and the key information, the encryption key to be updated of the encryption key that was distributed to the device, and a device corresponding to the encryption key to be the update Information processing comprising: identifying; and transmitting an updating encryption key for updating the identified encryption key to a device to which the identified encryption key has been distributed. A method is provided.

According to still another aspect of the present invention, there is provided a key information storage for storing in a computer a step of acquiring compromise information of an encryption key, a device, and an encryption key distributed to the device. a step of acquiring the key information from the parts, based on said key information and said compromised information, and the encryption key to be updated of the encryption key that was distributed in the device, corresponding to the encryption key to be the update Performing a step of identifying a device to be linked and a step of transmitting an update encryption key for updating the identified encryption key to the device to which the identified encryption key has been distributed. A featured program is provided.

According to still another aspect of the present invention, the encryption key for encryption key encryption key specified as the encryption key to be updated by the information processing device based on the compromise information of the encryption key among the encryption keys distributed by the information processing device the key, a receiver for receiving from said information processing apparatus, using the updated encryption key, a Lud vice comprising an update unit for updating the encryption key, wherein the information processing apparatus, said device A key information storage unit storing key information associated with the encryption key distributed to the device, and the information processing apparatus is distributed to the device based on the compromise information and the key information There is provided a device characterized by identifying an encryption key to be updated among encryption keys and a device corresponding to the encryption key to be updated .

According to still another aspect of the present invention, the encryption key for encryption key encryption key specified as the encryption key to be updated by the information processing device based on the compromise information of the encryption key among the encryption keys distributed by the information processing device the key, and receiving from the information processing apparatus, the update using the encryption key, a method of updating encryption key that includes the steps of: updating an encryption key, the information processing apparatus, device And a key information storage unit storing key information associated with the encryption key distributed to the device, and the information processing apparatus distributes the information to the device based on the compromise information and the key information A method of updating an encryption key is provided , which identifies the encryption key to be updated among the encryption keys and the device corresponding to the encryption key to be updated .

According to still another aspect of the present invention, in the computer, among the encryption keys distributed by the information processing apparatus, the encryption key specified by the information processing apparatus as the encryption key to be updated based on the compromise information of the encryption key updating encryption key, receiving from the information processing apparatus, using the updated encryption key, a Help program to execute the steps of: updating an encryption key, the information processing apparatus, device And a key information storage unit storing key information associated with the encryption key distributed to the device, and the information processing apparatus distributes the information to the device based on the compromise information and the key information A program is provided , which identifies an encryption key to be updated among the encryption keys and a device corresponding to the encryption key to be updated .

According to still another aspect of the present invention, there is provided a system comprising an information processing device and a device, wherein the information processing device comprises key information in which the device and an encryption key distributed to the device are associated. a key information storage unit for storing an acquisition unit that acquires compromise information of the encryption key, based on said key information and said compromised information, the encryption key to be updated of the encryption key that was distributed to the device And an encryption key identification unit that identifies a device corresponding to the encryption key to be updated, and an update for causing the device to which the identified encryption key is distributed to update the identified encryption key A transmitting unit that transmits an encryption key, and the device updates the encryption key using the receiving unit that receives the update encryption key transmitted from the information processing apparatus and the update encryption key And an update unit The system characterized provided that.

  According to the present invention, it is possible to provide an information processing apparatus capable of updating an encryption key in response to a wider range of encryption key compromise factors.

FIG. 1 is a schematic view showing an entire configuration of an encryption key management system according to a first embodiment. It is the schematic which shows another structural example of an encryption key management system. It is a block diagram which shows the hardware configuration example of the compromise information collection server which concerns on 1st Embodiment, a key management server, and a device. It is a functional block diagram of the compromise information collection server concerning the 1st embodiment, a key management server, and a device. It is a sequence diagram which shows operation | movement of the compromise information collection server which concerns on 1st Embodiment, a key management server, and a device. It is a flowchart which shows operation | movement of the compromise information collection server which concerns on 1st Embodiment. It is a table showing an example of a recommended encryption list concerning a 1st embodiment. It is a flowchart which shows the issue operation | movement of the encryption key of the first time in the key management server which concerns on 1st Embodiment. It is a table showing an example of key information concerning a 1st embodiment. It is a flowchart which shows issuing operation | movement of the encryption key for update in the key management server which concerns on 1st Embodiment. It is a flowchart which shows the update operation of the encryption key in the device which concerns on 1st Embodiment. It is a functional block diagram of an information processor concerning a 2nd embodiment. It is a functional block diagram of the device concerning a 3rd embodiment. It is a functional block diagram of the system concerning a 4th embodiment.

  Hereinafter, exemplary embodiments of the present invention will be described with reference to the drawings. The parts having the same functions in the drawings are given the same reference numerals, and the description thereof may be omitted or simplified.

First Embodiment
FIG. 1A is a schematic view showing an entire configuration of an encryption key management system according to a first embodiment. The encryption key management system 100 includes a key management server 300 and a device 400. The key management server 300 and the device 400 are communicably connected via a first network. The key management server 300 is also communicably connected to the compromise information collection server 200 via the second network. In FIG. 1A, although the compromised information collection server 200, the key management server 300, and the device 400 are illustrated one by one, the number of these is not particularly limited, and may be plural. . The encryption key management system 100 may be simply referred to as a system.

  The compromise information collection server 200 is a server that periodically collects and stores compromise information which is information regarding compromise of the encryption key. The compromised information collection server 200 accumulates the compromised information in the form of a recommended cipher list, as an example. In response to the request from the key management server 300 or periodically, the compromise information collection server 200 transmits the compromise information to the key management server 300. Here, the compromise information collection server 200 collects, for example, information announced by information security organizations inside and outside the country, information announced at information security conferences inside and outside the country, etc. as compromise information. More specifically, the compromise information may include information on a cryptographic algorithm set in consideration of the compromise of the cryptographic algorithm of the cryptographic key.

  The key management server 300 is a server that distributes the encryption key to the device 400, and stores key information on the distributed encryption key for managing the encryption key. The key management server 300 acquires the compromised information from the compromised information collection server 200 by receiving it. The key management server 300 specifies the encryption key to be updated among the encryption keys distributed to the device based on the acquired compromise information. Thereafter, the key management server 300 transmits an update encryption key for updating the identified encryption key to the device 400 to which the identified encryption key has been distributed. Examples of the encryption key that can be used in the present embodiment include a combination of a common key in the common key cryptosystem, a public key in the public key cryptosystem, and a secret key. Furthermore, in the present specification, the encryption key also includes irreversible ones such as a hash algorithm. The key management server 300 may be called an information processing apparatus.

  The device 400 is a device that communicates with another device using the encryption key distributed from the key management server 300. When there are a plurality of devices 400 included in the encryption key management system 100, different encryption keys may be distributed to each device 400. The device 400 may be, for example, a computer connected to the Internet, a mobile phone or the like. Also, when the device 400 is a device used in an IoT (Internet of Things) environment, the device 400 may be an Internet connectable thing (IoT device), an edge server, or the like.

  FIG. 1B is a schematic view showing another configuration example of the encryption key management system according to the first embodiment. As shown in FIG. 1B, the compromise information collection server 200, the key management server 300 and the device 400 may be communicably connected to each other via a network. Furthermore, as another example, the key management server 300 and the device 400 may be directly connected without the network. The communication connection method of each device may be wired or wireless.

  FIG. 2 is a block diagram showing an example of the hardware configuration of the compromised information collection server 200, the key management server 300 and the device 400 according to the first embodiment. Since the compromised information collection server 200, the key management server 300 and the device 400 all have the same hardware configuration, the hardware configuration of the key management server 300 will be mainly described in the following description regarding FIG.

  The key management server 300 includes a central processing unit (CPU) 201, a random access memory (RAM) 202, a read only memory (ROM) 203, a storage medium 204, an input device 205, a display device 206, and a network interface 207.

  The CPU 201 performs a predetermined operation according to a program stored in the ROM 203, the storage medium 204, and the like, and also has a function of controlling each unit of the key management server 300. The RAM 202 provides a memory area necessary for the temporary operation of the CPU 201. The ROM 203 is constituted by a non-volatile memory, and stores necessary information such as a program used for the operation of the key management server 300. The storage medium 204 is a mass storage device such as a hard disk. The input device 205 is a keyboard, a mouse, a touch panel or the like, and is used to operate the key management server 300. The display device 206 includes a liquid crystal display device or the like, and is used to display information. The network interface 207 is a wired communication interface based on a standard such as Ethernet (registered trademark) or a wireless communication interface based on a standard such as Wi-Fi (registered trademark), and is a module for communicating with other devices. It is.

  The configurations of the compromised information collection server 200, the key management server 300, and the device 400 shown in FIG. 2 are only examples, and other devices may be added, and some devices are provided. It does not have to be. For example, when the device 400 is a device used in the IoT environment and the user interface is unnecessary, the input device 205, the display device 206, and the like may be omitted.

  FIG. 3 is a functional block diagram of an apparatus that constitutes the compromised information collection server 200, the key management server 300 and the device 400 according to the first embodiment. The compromise information collection server 200 includes a compromise information storage unit 211 and a compromise information transmission unit 212. The key management server 300 includes a compromise information reception unit 311, a key information storage unit 312, an encryption key identification unit 313, an encryption key generation unit 314, and an encryption key transmission unit 315. The device 400 includes an encryption key reception unit 411, an encryption key storage unit 412, and an encryption key update unit 413.

  The compromise information storage unit 211 includes, for example, a storage medium 204 provided in the compromise information collection server 200, and the CPU 201 of the compromise information collection server 200 that controls the storage medium 204 based on a program. The compromise information transmission unit 212 includes, for example, a network interface 207 provided in the compromise information collection server 200, and the CPU 201 of the compromise information collection server 200 that controls the network interface 207 based on a program.

  The compromised information reception unit 311 includes, for example, a network interface 207 provided in the key management server 300, and the CPU 201 of the key management server 300 that controls the network interface 207 based on a program. The key information storage unit 312 includes, for example, the storage medium 204 provided in the key management server 300 and the CPU 201 of the key management server 300 that controls the storage medium 204 based on a program. The encryption key identification unit 313 and the encryption key generation unit 314 are configured by the CPU 201 of the key management server 300 that operates based on a program. The encryption key transmission unit 315 includes, for example, a network interface 207 provided in the key management server 300, and the CPU 201 of the key management server 300 that controls the network interface 207 based on a program.

  The encryption key receiving unit 411 includes, for example, a network interface 207 provided in the device 400 and a CPU 201 of the device 400 that controls the network interface 207 based on a program. The encryption key storage unit 412 includes, for example, the storage medium 204 provided in the device 400 and the CPU 201 of the device 400 that controls the storage medium 204 based on a program. The encryption key update unit 413 is configured by the CPU 201 of the device 400 that operates based on a program.

  The compromised information reception unit 311 may also be called an acquisition unit. The encryption key transmission unit 315 may be simply referred to as a transmission unit. The encryption key receiving unit 411 may be simply referred to as a receiving unit. The encryption key update unit 413 may be simply referred to as an update unit.

  FIG. 4 is a sequence diagram showing operations of the compromise information collection server 200, the key management server 300 and the device 400 according to the first embodiment. Step S1 shows the operation of issuing the encryption key for the first time. In step S 1, the key management server 300 transmits the encryption key to the device 400. The subsequent steps S2 and S3 show the issuing operation of the update encryption key for updating the encryption key when the encryption key issued to the device 400 in step S1 is compromised. In step S2, the key management server 300 acquires the compromise information of the encryption key from the compromise information collection server 200. In step S3, the key management server 300 transmits the update encryption key to the device 400.

  Hereinafter, the operation of each device will be described in detail with reference to FIGS. 5 to 10. FIG. 5 is a flowchart showing the operation of the compromise information collection server 200 according to the first embodiment. FIG. 6 is a table showing an example of the recommended cipher list according to the first embodiment. FIG. 7 is a flowchart showing an operation of issuing a cryptographic key for the first time in the key management server 300 according to the first embodiment. FIG. 8 is a table showing an example of key information according to the first embodiment. FIG. 9 is a flowchart showing an issuing operation of the update encryption key in the key management server 300 according to the first embodiment. FIG. 10 is a flowchart showing an operation of updating an encryption key in the device 400 according to the first embodiment.

  First, the operation of the compromised information collection server 200 will be described with reference to FIGS. 5 and 6. In step S11, the compromise information collection server 200 collects compromise information. The collection of this compromised information is done by watching the information about the compromise of the encryption key among the announcement contents of the information security agency, the announcement contents at the information security conference, etc. and collecting it at any time or periodically. . In addition, although the collection work may be manually input by the administrator of the compromise information collection server 200 using the input device 205, the necessary information from the predetermined information source of the compromise information collection server 200 may be used. May be downloaded and collected automatically.

  In step S12, it is determined based on the collected compromise information whether or not the recommended encryption list stored in the compromise information storage unit 211 needs to be updated. Here, an example of the recommended cipher list will be described with reference to FIG. The recommended cipher list indicates the encryption method, the type of encryption algorithm, and the recommended key length range for the cipher that is recommended to be used, since sufficient security is currently guaranteed. For example, item No. 1 indicates that a key length of 128 bits or more is recommended in the A algorithm of the common key cryptosystem. If the collected compromised information requires updating of the recommended cipher list (YES in step S12), the process proceeds to step S13. For example, if the collected compromised information is a announcement that "the D algorithm of key length is 1024 bits has been decrypted", it is determined that the encryption of the item No. 4 of the recommended encryption list needs to be updated. . This determination may be made by the administrator of the compromise information collection server 200, but if the format of the collected compromise information is readable by the compromise information collection server 200, the compromise information collection server 200 May recognize the compromise information and perform it automatically. If the collected compromise information does not require the update of the recommended cipher list (NO in step S12), the compromise information collection server 200 ends the process.

  Note that the recommended cipher list may include items other than the above-described items, or may be partially omitted. Further, although FIG. 6 illustrates the information in a tabular form for easy understanding, information may be stored in another form.

  In step S13, the compromise information storage unit 211 stores the recommended encryption list in which the portion determined to require updating in the determination in step S12 in the recommended encryption list is updated. For example, as an example of the update method in the case where the above-mentioned “the D algorithm with a key length of 1024 bits is decrypted” is collected, an update method for deleting item number 4 can be mentioned. Alternatively, an update method is also exemplified in which the recommended key length is made sufficiently larger than 1024 bits, for example, “2048 bits or more”. This update operation may also be performed by the administrator of the compromise information collection server 200, or may be performed automatically by the compromise information collection server 200 according to a predetermined algorithm.

  In step S14, the compromise information transmission unit 212 of the compromise information collection server 200 transmits the updated recommended encryption list stored in the compromise information storage unit 211 to the key management server 300 as compromise information. This operation corresponds to step S2 in FIG. The transmission of the recommended encryption list in S14 may be performed according to the update of the recommended encryption list as described above, but may be performed at a timing according to the request of the key management server 300, and is performed periodically. It is also good.

  In the present embodiment, the compromise information collection server 200 stores the compromise information in the form of a recommended encryption list so as to be suitable for processing of the compromise information in the key management server 300, but is limited to this. It is not a thing. That is, the compromise information collection server 200 may have a function of transmitting information on compromise of the encryption key to the key management server 300. Also, part of the processing performed by the compromised information collection server 200 may be performed by another device, for example, the key management server 300.

  Next, the operation of the key management server 300 will be described with reference to FIG. 7, FIG. 8 and FIG. First, the operation of issuing the encryption key for the first time will be described with reference to FIG. In step S <b> 21, the encryption key generation unit 314 generates an encryption key to be distributed to the device 400. In step S22, the CPU 201 of the key management server 300 stores the generated encryption key and key information on the distribution destination in the key information storage unit 312 for managing the distributed encryption key. In addition, as for the encryption key produced | generated in step S21, in order to ensure the security of an encryption key, it is desirable to be produced | generated by the encryption algorithm contained in the recommendation encryption list mentioned later.

  Here, an example of key information stored in the key information storage unit 312 will be described with reference to FIG. The key information is information on the encryption key distributed by the key management server 300, and indicates the distribution destination of the encryption key, the encryption algorithm, the key length, and the usage purpose. For example, referring to the item No. 1, it can be understood that the encryption key generated by the A algorithm with a key length of 128 bits is distributed to the X device for data encryption. Also, referring to item No. 2, it is understood that the X device further distributes an encryption key generated by the C algorithm of 2048-bit key length for electronic certification and authentication. Also, referring to the item No. 3, it can be seen that the encryption key generated by the B algorithm with the key length of 128 bits is distributed to the Y device different from the X device for data encryption.

  The key information may include items other than the above-described items, or may be partially omitted. Further, although FIG. 8 illustrates the information in a tabular form for easy understanding, information may be stored in another form.

  In step S23, the encryption key transmission unit 315 transmits the generated encryption key to the device 400. This operation corresponds to step S1 in FIG. The device 400 can perform data encryption, electronic signature, authentication, etc. using the received encryption key when communicating with another device.

  Next, the operation of issuing the update encryption key will be described with reference to FIG. In step S31, the compromise information reception unit 311 receives the updated recommended encryption list as compromise information from the compromise information collection server 200, thereby acquiring the recommended encryption list. This operation corresponds to step S2 of FIG. 4 and step S23 of FIG.

  In step S32, the encryption key identification unit 313 compares the recommended encryption list with the key information to identify the encryption key to be updated. Here, a specific example of the encryption key in the case where the recommended encryption list is as shown in FIG. 6 and the key information is as shown in FIG. 8 will be described. The encryption key of No. 1 in FIG. 8 is an A algorithm with a key length of 128 bits, and this encryption key is included in the A algorithm with a key length of 128 bits or more of the No. The encryption key of item number 1 is determined to be a secure encryption key. The encryption key of item No. 2 in FIG. 8 is a C algorithm having a key length of 2048 bits, but this encryption key is included in the C algorithm having a key length of 2048 bits or more of item No. 3 in FIG. The encryption key of item No. 2 is also determined to be a secure encryption key. The encryption key of item No. 3 in FIG. 8 is a B algorithm having a key length of 128 bits, but this encryption key is not included in the C algorithm having a key length of 256 bits or more of item No. 2 in FIG. The encryption key of item 3 in FIG. 8 is determined to be an encryption key that may be compromised. As described above, the encryption key identification unit 313 identifies the encryption key according to the B algorithm having a key length of 128 bits distributed to the Y device as the encryption key to be updated because it is not included in the recommended encryption list.

  If there is an encryption key to be updated as in the above-described example (YES in step S33), the process proceeds to step S34. If there is no encryption key to be updated (NO in step S33), the process ends.

  In step S34, the encryption key generation unit 314 generates an update encryption key for distribution to the device 400 using an algorithm that is more secure than the encryption key to be updated. An example of an algorithm that is more secure than the encryption key to be updated is one in which the key length of the encryption key to be updated is increased. The longer the key length, the more difficult it is to decipher the cipher, and therefore the longer the key length, the better the security. Also, as another example, the type of encryption algorithm may be changed to a more secure one. It is desirable that the update encryption key generated in this step be generated by the encryption algorithm included in the recommended encryption list, which is guaranteed not to be compromised.

  In step S35, the key information storage unit 312 stores key information related to the update encryption key in order to reflect the update on the key information. The storage of the key information may be to newly register key information on the update encryption key and delete the key information on the key to be updated. It may be stored.

  In step S36, the encryption key transmission unit 315 transmits the generated update encryption key to the device 400 (the Y device in the above example) which is the distribution destination of the update encryption key. This operation corresponds to step S3 in FIG. The device 400 can update the encryption key using this update encryption key.

  In addition, in the transmission of the update encryption key in step S36, in order to reduce the possibility that the update encryption key itself may be intercepted, it is desirable that the update encryption key be transmitted in an encrypted state. Although it is possible to use the encryption key itself to be updated which has already been distributed to the device 400 for this encryption, the encryption key to be updated may be compromised, and wiretapping, spoofing or the like may be performed. In order to reduce such security risks, it is more desirable that an encryption key for update be encrypted using an algorithm different from the algorithm for the encryption key to be updated. Examples of such an algorithm include SSL (Secure Sockets Layer), TLS (Transport Layer Security) and the like. Alternatively, a more secure communication path may be separately prepared, and the update encryption key may be transmitted through a communication path different from that at the time of the initial issuance of the encryption key.

  Next, the operation of the device 400 will be described with reference to FIG. In step S 41, the encryption key receiving unit 411 receives the update encryption key from the key management server 300. The received update encryption key is stored in the encryption key storage unit 412. This operation corresponds to step S3 of FIG. 4 and step S36 of FIG.

  In step S42, the encryption key update unit 413 updates the encryption key to be updated among the encryption keys used in communication with another device to the update encryption key stored in the encryption key storage unit 412. Thereby, the device 400 can perform data encryption, electronic signature, authentication, and the like more safely by using the updated encryption key when communicating with another device. Note that although the encryption key update program that causes the CPU 201 to function as the encryption key update unit 413 may be provided from the key management server 300 at the time of update, it is provided in advance from the key management server 300 and used for the storage medium 204 of the device 400 or the like. It is desirable to be stored. In this case, the encryption key can be updated smoothly after acquisition of the update encryption key.

  According to the present embodiment, the key management server 300 acquires the compromise information, identifies the encryption key to be updated based on the information, and transmits the encrypted key to the device 400 to which the encryption key to be updated is distributed. By transmitting, the device 400 can update the encryption key. The effects of using such an encryption key update method will be described.

  There are various factors that make the cryptogram compromise, and specific examples include improvement of computing ability of computer, change of computational model of computer, advancement of attack method, and the like. Examples of the improvement of the computing ability of a computer include the improvement of the CPU performance of the computer, the technological progress of distributed computing, and the like. An example of the change in the computer's computational model is the development of a new cryptanalysis device using a quantum computer. Examples of advances in attack methods include the development of new hardware specialized for decryption and the discovery of decryption methods for cryptographic algorithms. In addition to the characteristic that the compromise progresses gradually as time passes, the factors of these compromises are characterized in that the compromise may also proceed suddenly.

  For example, a case where DES (Data Encryption Standard), which was used as a standard encryption, was subjected to a decryption experiment using a new decryption method such as linear decryption, and the compromise progressed and was replaced by another encryption. There is. In addition, there is also an example that is compromised due to the discovery of an effective attack method such as the hash algorithm SHA (Secure Hash Algorithm)-0, SHA-1. As described above, the method of updating the encryption key based on the expiration date alone may not be able to cope with sudden compromise such as discovery of a decryption method. In particular, the expiration date may be set to a long term such as 10 years, and in such a case, dealing with sudden compromise may be more difficult. In addition, there are cases where such a sudden compromise factor can not be grasped in a timely manner by the device receiving the distribution of the encryption key. In particular, when the device is limited in function, as in the case where the device is an IoT device, the device may not have a means for grasping the source of compromise itself.

  On the other hand, in the present embodiment, since the key management server 300 acquires the compromise information of the encryption key and identifies the encryption key to be updated based on the compromise information, even if the compromise progresses suddenly, The device 400 can be updated. At the time of this update, the device 400 does not have to obtain and judge the compromised information by itself. Therefore, even if the function of the device 400 is limited because the device 400 is an IoT device or the like, the encryption key can be updated in a timely manner. Therefore, according to this embodiment, it is possible to update the encryption key with respect to a wider range of encryption key compromise factors.

Second Embodiment
The systems and devices described in the above embodiments can also be configured as follows. FIG. 11 is a functional block diagram of an information processing apparatus 500 according to the second embodiment of the present invention. The information processing apparatus 500 includes an acquisition unit 501 that acquires compromise information of an encryption key. The information processing apparatus 500 further includes an encryption key identification unit 502 that identifies an encryption key to be updated among the encryption keys distributed to the device based on the compromise information. Furthermore, the information processing apparatus 500 includes a transmission unit 503 that transmits an update encryption key for updating the identified encryption key to the device to which the identified encryption key is distributed.

  According to the present embodiment, it is possible to provide an information processing apparatus capable of updating an encryption key in response to a wider range of encryption key compromise factors.

Third Embodiment
FIG. 12 is a functional block diagram of a device 600 according to the third embodiment of the present invention. The device 600 uses the encryption key for updating the encryption key specified as the encryption key to be updated by the information processing device 500 based on the compromise information of the encryption key among the encryption keys distributed by the information processing device 500, the information processing device A reception unit 601 for receiving from 500 is provided. Furthermore, the device 600 includes an update unit 602 that updates the encryption key using the update encryption key.

  According to this embodiment, it is possible to provide a device capable of updating the encryption key in response to a wider range of encryption key compromise factors.

Fourth Embodiment
FIG. 13 is a functional block diagram of a system 700 according to the fourth embodiment of the present invention. The system 700 includes an information processing device 500 and a device 600. The acquisition unit 501 is provided to acquire compromise information of the encryption key. The information processing apparatus 500 further includes an encryption key identification unit 502 that identifies an encryption key to be updated among the encryption keys distributed to the device based on the compromise information. Furthermore, the information processing apparatus 500 includes a transmission unit 503 that transmits an update encryption key for updating the identified encryption key to the device to which the identified encryption key is distributed. The device 600 includes the reception unit 601 that receives, from the information processing apparatus 500, the update encryption key of the encryption key specified by the information processing apparatus 500 as the encryption key to be updated among the encryption keys distributed by the information processing apparatus 500. . Furthermore, the device 600 includes an update unit 602 that updates the encryption key using the update encryption key.

  According to this embodiment, it is possible to provide a system capable of updating the encryption key in response to a wider range of encryption key compromise factors.

[Modified embodiment]
The present invention is not limited to the above-described embodiment, and can be appropriately modified without departing from the spirit of the present invention.

  A program for operating the configuration of the embodiment to realize the function of the above embodiment is recorded on a storage medium, a program recorded on the storage medium is read as a code, and a processing method executed on a computer is also described in each embodiment. It is included in the category. That is, a computer readable storage medium is also included in the scope of each embodiment. Moreover, not only the storage medium in which the above-mentioned program is recorded, but the program itself is included in each embodiment.

  As the storage medium, for example, a floppy (registered trademark) disk, a hard disk, an optical disk, a magneto-optical disk, a CD (Compact Disk) -ROM, a magnetic tape, a non-volatile memory card, and a ROM can be used. In addition, the program is not limited to one in which processing is executed by a single program recorded in the storage medium, but is executed on OS (Operating System) in cooperation with other software and expansion board functions. Are also included in the category of each embodiment.

  The above-described embodiments are merely examples of implementation for carrying out the present invention, and the technical scope of the present invention should not be interpreted limitedly by these. That is, the present invention can be implemented in various forms without departing from the technical concept or the main features thereof.

  Although a part or all of the above-mentioned embodiment may be described as the following supplementary notes, it is not limited to the following.

(Supplementary Note 1)
An acquisition unit for acquiring compromise information of the encryption key;
An encryption key identification unit that identifies, among the encryption keys distributed to the device, the encryption key to be updated based on the compromised information;
A transmitting unit for transmitting an update encryption key for updating the specified encryption key to a device to which the specified encryption key has been distributed;
An information processing apparatus comprising:

(Supplementary Note 2)
The information processing apparatus according to claim 1, wherein the compromised information includes information on an encryption algorithm set in consideration of compromise of an encryption algorithm of an encryption key.

(Supplementary Note 3)
The information processing according to claim 2, wherein the encryption key identification unit identifies, among the encryption keys distributed to the device, an encryption key not included in the information related to the encryption algorithm as an encryption key to be updated. apparatus.

(Supplementary Note 4)
The information processing apparatus according to claim 2, wherein the information on the encryption algorithm includes information on at least one of a type of encryption algorithm of an encryption key and a key length of the encryption key.

(Supplementary Note 5)
The information processing apparatus according to any one of appendices 1 to 4, further comprising: a key information storage unit storing key information related to the encryption key distributed to the device.

(Supplementary Note 6)
The information processing apparatus according to claim 5, wherein the key information storage unit further stores key information related to the update encryption key.

(Appendix 7)
The information processing apparatus according to any one of appendices 1 to 6, wherein the update encryption key is an encryption key generated by an algorithm having higher security than the encryption key to be updated.

(Supplementary Note 8)
The information processing apparatus according to any one of appendices 1 to 7, wherein a key length of the update encryption key is longer than a key length of the encryption key to be updated.

(Appendix 9)
The encryption key for update is transmitted to a device to which the specified encryption key is distributed in a state of being encrypted by an algorithm different from the algorithm of the encryption key to be updated. The information processing apparatus according to any one of the above.

(Supplementary Note 10)
The update encryption key is transmitted to the device to which the specified encryption key is distributed, through a communication path different from the communication path when the encryption key to be updated is issued. The information processing apparatus according to any one of 9.

(Supplementary Note 11)
Obtaining compromise information of the encryption key;
Identifying the encryption key to be updated among the encryption keys distributed to the device based on the compromised information;
Sending an update encryption key for updating the identified encryption key to the device to which the identified encryption key has been distributed;
An information processing method comprising:

(Supplementary Note 12)
On the computer
Obtaining compromise information of the encryption key;
Identifying the encryption key to be updated among the encryption keys distributed to the device based on the compromised information;
Sending an update encryption key for updating the identified encryption key to the device to which the identified encryption key has been distributed;
A program characterized by causing

(Supplementary Note 13)
Receiving, from the information processing apparatus, the encryption key for updating the encryption key specified as the encryption key to be updated by the information processing apparatus based on the compromise information of the encryption key among the encryption keys distributed by the information processing apparatus Department,
An update unit that updates the encryption key using the update encryption key;
A device characterized by comprising:

(Supplementary Note 14)
Receiving, from the information processing apparatus, an encryption key for updating the encryption key specified as the encryption key to be updated by the information processing apparatus based on the compromise information of the encryption key among the encryption keys distributed by the information processing apparatus When,
Updating the encryption key using the update encryption key;
A method of updating an encryption key, comprising:

(Supplementary Note 15)
On the computer
Receiving, from the information processing apparatus, an encryption key for updating the encryption key specified as the encryption key to be updated by the information processing apparatus based on the compromise information of the encryption key among the encryption keys distributed by the information processing apparatus When,
Updating the encryption key using the update encryption key;
A program characterized by causing

(Supplementary Note 16)
A system comprising an information processing apparatus and a device, wherein
The information processing apparatus is
An acquisition unit for acquiring compromise information of the encryption key;
An encryption key identification unit that identifies, among the encryption keys distributed to the device, the encryption key to be updated based on the compromised information;
A transmitting unit for transmitting an update encryption key for updating the specified encryption key to a device to which the specified encryption key has been distributed;
Equipped with
The device is
A receiving unit that receives the update encryption key transmitted from the information processing apparatus;
An update unit that updates the encryption key using the update encryption key;
A system comprising:

100 Encryption Key Management System 200 Compromised Information Collection Server 201 CPU
202 RAM
203 ROM
204 storage medium 205 input device 206 display device 207 network interface 211 compromise information storage unit 212 compromise information transmission unit 300 key management server 311 compromise information reception unit 312 key information storage unit 313, 502 encryption key identification unit 314 encryption key generation Unit 315 Encryption key transmission unit 400, 600 Device 411 Encryption key reception unit 412 Encryption key storage unit 413 Encryption key update unit 500 Information processing device 501 Acquisition unit 503 Transmission unit 601 Reception unit 602 Update unit 700 System

Claims (12)

An acquisition unit for acquiring compromise information of the encryption key;
A key information storage unit that stores key information in which a device and an encryption key distributed to the device are associated;
An encryption key identification unit for identifying an encryption key to be updated among the encryption keys distributed to the device, and a device corresponding to the encryption key to be updated, based on the compromised information and the key information; ,
A transmitting unit for transmitting an update encryption key for updating the specified encryption key to a device to which the specified encryption key has been distributed;
An information processing apparatus comprising:   The information processing apparatus according to claim 1, wherein the compromise information includes information on an encryption algorithm set in consideration of compromise of an encryption algorithm of an encryption key.   3. The information according to claim 2, wherein the encryption key identification unit identifies, among the encryption keys distributed to the device, an encryption key not included in the information related to the encryption algorithm as an encryption key to be updated. Processing unit.   The information processing apparatus according to claim 2, wherein the information on the encryption algorithm includes information on at least one of a type of encryption algorithm of an encryption key and a key length of the encryption key.   The information processing apparatus according to any one of claims 1 to 4, wherein the key information storage unit further stores key information related to the update encryption key.   The information processing apparatus according to any one of claims 1 to 5, wherein the update encryption key is an encryption key generated by an algorithm having higher security than the encryption key to be updated.   The information processing apparatus according to any one of claims 1 to 6, wherein a key length of the update encryption key is longer than a key length of the encryption key to be updated.   The update encryption key is transmitted to a device to which the specified encryption key is distributed in a state of being encrypted by an algorithm different from the algorithm of the encryption key to be updated. The information processing apparatus according to any one of 7.   The update encryption key is transmitted to a device to which the specified encryption key is distributed, through a communication path different from the communication path when the encryption key to be updated is issued. The information processing apparatus according to any one of to 8. Obtaining compromise information of the encryption key;
Acquiring the key information from a key information storage unit that stores key information in which a device and an encryption key distributed to the device are associated;
Identifying an encryption key to be updated among the encryption keys distributed to the device and a device corresponding to the encryption key to be updated based on the compromised information and the key information;
Sending an update encryption key for updating the identified encryption key to the device to which the identified encryption key has been distributed;
An information processing method comprising: On the computer
Obtaining compromise information of the encryption key;
Acquiring the key information from a key information storage unit that stores key information in which a device and an encryption key distributed to the device are associated;
Identifying an encryption key to be updated among the encryption keys distributed to the device and a device corresponding to the encryption key to be updated based on the compromised information and the key information;
Sending an update encryption key for updating the identified encryption key to the device to which the identified encryption key has been distributed;
A program characterized by causing A system comprising an information processing apparatus and a device, wherein
The information processing apparatus is
A key information storage unit that stores key information in which the device and an encryption key distributed to the device are associated;
An acquisition unit for acquiring compromise information of the encryption key;
An encryption key identification unit for identifying an encryption key to be updated among the encryption keys distributed to the device, and a device corresponding to the encryption key to be updated, based on the compromised information and the key information; ,
A transmitting unit for transmitting an update encryption key for updating the specified encryption key to a device to which the specified encryption key has been distributed;
Equipped with
The device is
A receiving unit that receives the update encryption key transmitted from the information processing apparatus;
An update unit that updates the encryption key using the update encryption key;
A system comprising:

Images