JP6598259B2 - Device specific information generation apparatus, device specific information generation system, and device specific information generation method - Google Patents

Description

  The present invention relates to a technique for generating device-specific information.

  Conventionally, as a technique for identifying a genuine device from a counterfeit device, for example, as shown in Patent Documents 1 to 4, a physical duplication circuit (PUF: Physical) that generates device-specific information that is difficult to duplicate A technique using Unclonable Function) has been devised.

Special table 2010-527219 Special table 2012-519987 gazette JP 2013-3431 A JP 2013-31151 A

  However, since the output from the physical replication difficult circuit contains a lot of noise, a technology called Fuzzy Extractor has been devised to stably generate device-specific information from the output. However, the algorithm in the technique has a problem that the processing time is complicated and the required circuit scale is large.

  The present invention has been made to solve such a problem. A device-specific information generation apparatus, a device-specific information generation system, and a device-specific information generation method for generating device-specific information at high speed with a simple circuit or method. The purpose is to provide.

  In order to solve the above-described problems, the present invention provides a characteristic signal generating means for generating a first specific signal that depends on a physical characteristic of a device in accordance with an input signal, and a converted signal by converting the first specific signal. Conversion means for generating and storing in the external storage device, the second unique signal generated in response to the input signal input again, and the signal generated in response to the conversion signal stored in the external storage device There is provided a device-specific information generating apparatus including a decoding means.

  In order to solve the above-described problem, the present invention provides a device-specific information generation system including a device and an information reader that reads information supplied from the device, and the device is a device corresponding to an input signal. A characteristic signal generating means for generating a specific signal depending on the physical characteristics of the input signal and a second specific signal generated by inputting the input signal to the characteristic signal generating means again to generate a second converted signal. A first conversion unit, wherein the information reading device converts the first specific signal generated by the characteristic signal generation unit according to the input signal input in advance to generate a first conversion signal. There is provided a device specific information generation system including two conversion means and a decoding means for decoding a signal generated by a first conversion signal and a second conversion signal.

  In order to solve the above-described problem, the present invention provides a device-specific information generation system including a device and an information reader that reads information supplied from the device, and the device is a device corresponding to an input signal. A characteristic signal generating means for generating a specific signal depending on the physical characteristics of the input signal and a second specific signal generated by inputting the input signal to the characteristic signal generating means again to generate a second converted signal. A first conversion unit, wherein the information reading device converts the first specific signal generated by the characteristic signal generation unit according to the input signal input in advance to generate a first conversion signal. Two conversion means and a decoding means for decoding the signal generated by the first converted signal and the second converted signal, and the device performs decoding by the second eigensignal and the decoding means. Providing further device-specific information generating system having an arithmetic unit for the made the signal generating a first specific signal.

  In order to solve the above-described problem, the present invention provides a device-specific information generation system including a device and an information reader that reads information supplied from the device, and the device is a device corresponding to an input signal. A characteristic signal generating means for generating a specific signal depending on the physical characteristics of the signal, and a first converted signal generated by converting the first specific signal generated by the characteristic signal generating means to generate the first converted signal, and the input signal is again the characteristic signal. Conversion means for generating a second conversion signal by converting the second specific signal generated by inputting to the generation means, and the information reading device includes the first conversion signal and the second conversion signal. A decoding means for decoding the signal generated by the decoding means, wherein the device is a computing means for generating the first unique signal from the second unique signal and the signal generated by the decoding by the decoding means. Providing further device-specific information generating system comprising a.

  In order to solve the above problem, the present invention provides a characteristic signal generation step for generating a first specific signal that depends on a physical characteristic of a device in accordance with an input signal, and by converting the first specific signal. A conversion step for generating a conversion signal and storing it in the external storage device, a second unique signal generated according to the input signal input again, and a signal generated according to the conversion signal stored in the external storage device A device-specific information generation method comprising: a decoding step of decoding.

  In order to solve the above problems, the present invention provides an eigensignal storage step for preliminarily storing an input signal and a first eigensignal that depends on the physical characteristics of a device generated according to the input signal, and eigensignal storage. The re-input step for re-inputting the input signal previously stored in the step to the device, the first conversion step for converting the first specific signal to generate the first conversion signal, and the re-input step A second conversion step of generating a second converted signal by converting the second specific signal generated according to the input signal, and a signal generated by the first converted signal and the second converted signal. A device specific information generation method including a decoding step of decoding is provided.

  In order to solve the above problems, the present invention provides an eigensignal storage step for preliminarily storing an input signal and a first eigensignal that depends on the physical characteristics of a device generated according to the input signal, and eigensignal storage. The re-input step for re-inputting the input signal previously stored in the step to the device, the first conversion step for converting the first specific signal to generate the first conversion signal, and the re-input step A second conversion step of generating a second converted signal by converting the second specific signal generated according to the input signal, and a signal generated by the first converted signal and the second converted signal. A device specific information generation method including a decoding step for decoding, a second specific signal, and an operation step for generating a first specific signal from the signal generated by the decoding in the decoding step is provided. To.

  In order to solve the above problem, the present invention provides a first converted signal and an input signal obtained by converting a first specific signal that depends on the physical characteristics of a device generated according to the input signal. A conversion signal storage step that stores the input signal in advance, a re-input step in which the input signal stored in advance in the conversion signal storage step is input again to the device, and a second input generated according to the input signal input again in the re-input step A conversion step for converting the unique signal to generate a second conversion signal, a decoding step for decoding the first conversion signal stored in the conversion signal storage step and the signal generated by the second conversion signal, Provided is a device specific information generation method including a second specific signal and a calculation step for generating a first specific signal from a signal generated by decoding in a decoding step. That.

  According to the present invention, it is possible to reduce the scale of a circuit necessary for generating device-specific information and to generate device-specific information at high speed.

It is a block diagram which shows the structure of the device specific information generation apparatus which concerns on embodiment of this invention. It is a block diagram which shows the 1st usage example of the device specific information generation apparatus shown by FIG. It is a block diagram which shows the 2nd usage example of the device specific information generation apparatus shown by FIG. It is a block diagram which shows the structure of IC chip 1 which is a specific example of the device specific information generation apparatus shown by FIG. 5 is a flowchart showing the operation of the IC chip 1 shown in FIG. It is a block diagram which shows the structure of the 1st device specific information generation system which concerns on embodiment of this invention. It is a block diagram which shows the specific example of the device specific information generation system shown by FIG. It is a flowchart which shows operation | movement of the device specific information generation system shown by FIG. It is a block diagram which shows the structure of the 2nd device specific information generation system which concerns on embodiment of this invention. It is a block diagram which shows the specific example of the device specific information generation system shown by FIG. It is a flowchart which shows operation | movement of the device specific information generation system shown by FIG. It is a block diagram which shows the structure of the 3rd device specific information generation system which concerns on embodiment of this invention. It is a block diagram which shows the specific example of the device specific information generation system shown by FIG. It is a flowchart which shows the device specific information generation method by the device specific information generation system shown by FIG. It is a block diagram which shows the modification of the device specific information generation system shown by FIG.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the drawings, the same reference numerals indicate the same or equivalent parts. FIG. 1 is a block diagram showing a configuration of a device specific information generation apparatus according to an embodiment of the present invention.

  As shown in FIG. 1, a device specific information generation apparatus 100 according to an embodiment of the present invention is connected to a physical duplication difficulty circuit (PUF) 3 that generates a specific signal that depends on the physical characteristics of a device, and the PUF 3. A register 101, and a converter 102 and a decoder 103 connected to the register 101.

  Here, the register 101 outputs a part D1 of the unique signal R1 output from the PUF 3 in response to the input signal C as a signal Key1, and the converter 102 converts the unique signal R1 into a syndrome S1 of an error correction code and converts it into a database. Register in DB. In addition, the decoder 103 generates a signal Key2 from the unique signal R2 output from the PUF 3 according to the input signal C input again and the syndrome S1 read from the database DB according to the input signal C.

  The process for generating the signal Key2 is, for example, calculating the syndrome S2 of the unique signal R2, decoding an error pattern corresponding to a value obtained by subtracting the syndrome S2 from the syndrome S1, and adding the error pattern to the unique signal R2. Can be done. Further, instead of the syndrome, a code word of an error correction code may be selected at random and a value obtained by adding or subtracting to a specific signal may be used.

  Here, for example, as shown in FIG. 2, the signal Key1 and the signal Key2 are output from the comparator 112 in another device 110 used in combination with the device-specific information generation apparatus 100 such as a set top box, ATM, or an entrance / exit management system. If they match, a signal T indicating that the device is authentic is generated, while if they do not match, a signal F indicating that the device has been forged is generated.

  In this comparison, the signal Key1 and the signal Key2 may be directly compared, or signals obtained by processing them may be compared.

  Further, the signal Key2 can be used as an encryption key generated only within the device. In FIG. 3, the plaintext is encrypted by the encryptor 121 using the signal Key2, and the ciphertext is encrypted by the decryptor 123. An example of decrypting into plain text is shown.

  FIG. 4 is a block diagram showing a configuration of the IC chip 1 on which the device specific information generating apparatus 100 shown in FIG. 1 is mounted.

  The IC chip 1 includes a physical replication difficulty circuit (PUF) 3 that generates a unique signal that depends on the physical characteristics of the device, a syndrome calculator 5 connected to the PUF 3, and a decoder 7 connected to the syndrome calculator 5. And a register 9 connected to the decoder 7, a syndrome calculator 5 and a comparator 10 connected to the register 9.

  Here, the syndrome calculator 5 is connected to the register 11 connected to the PUF 3, the encoder 13 connected to the register 11, the register 15 connected to the encoder 13, the register 11 and the register 15. The adder 17 and a register 19 connected to the adder 17 are included.

  FIG. 5 is a flowchart showing a device specific information generation method using the IC chip 1 shown in FIG. Hereinafter, this identification method will be described in detail with reference to FIG.

  In step S1, the challenge signal C is input to the PUF 3, and the first specific signal R1 depending on the physical characteristics of the device is stored in the register 11 in advance.

  A part of the unique signal R1 stored in the register 11, for example, the upper 115 bits when the unique signal R1 is 255 bits, is used as secret information Key1 such as an ID and an encryption key.

  Next, in step S2, the encoder 13 encodes the part of the unique signal R1 stored in the register 11 using an error correction code such as a BCH code. Note that the signal generated by the encoder 13 is stored in the register 15.

  Next, in step S <b> 3, the adder 17 adds the unique signal R <b> 1 stored in the register 11 and the signal stored in the register 15. Then, the signal generated by the adder 17 is stored in the register 19, and a part of the stored signal (syndrome S1), in the above example, the lower 140-bit signal of 255 bits is challenged to the external database DB. C is registered in advance as an index.

  Next, in step S4, the adder 17 receives the unique signal R2 generated according to the challenge signal C re-input to the PUF 3 and the syndrome S1 read from the database DB according to the re-input challenge signal C. Addition to generate a verification signal. In the above example, at the time of addition, the upper 155 bits of the syndrome S1 are set to 0 and then added to the unique signal R2 having 255 bits.

  Next, in step S5, the decoder 7 decodes the signal obtained by the addition by the adder 17. Note that the signal obtained by this decryption is stored in the register 9, and a part of the stored signal, in the above example, the signal of higher 155 bits is treated as the secret information Key2.

  Next, in step S6, when the comparator 10 compares the secret information Key1 and the secret information Key2 and determines that they match, the comparator 10 outputs a signal T indicating that the IC chip 1 is authentic. At the same time, if it is determined that they do not match, a signal F indicating that the IC chip 1 is not authentic is output.

  As described above, according to the device specific information generation apparatus and the device specific information generation method according to the embodiment of the present invention, by storing in advance the syndrome S1 that is a part of the signal obtained by encoding the output signal of the PUF 3, the device The size of data required for authentication can be reduced to near the theoretical limit.

  In addition, since the size of data required for device authentication can be reduced in this way, the speed of the authentication can be increased, and the required circuit scale can be reduced.

  Although the IC chip 1 has been described above, the above effect can also be obtained by implementing the device specific information generation method after the PUF 3 is incorporated into various products.

  FIG. 6 is a block diagram showing the configuration of the first device specific information generation system according to the embodiment of the present invention. As shown in FIG. 6, the present system includes a device 130 and an information reading device 140, and a specific configuration example is shown in FIG. 7.

  As shown in FIG. 7, the first device specific information generation system includes an IC chip 20 and an IC reader 30. Here, the IC chip 20 includes a PUF 3 and a syndrome calculator 5 connected to the PUF 3, and the IC reader 30 is a syndrome calculator 5 connected to an external database DB and a subtraction connected to the syndrome calculator 5. A subtractor 35 connected to the database DB and the decoder 33; and a comparator 37 connected to the subtractor 35 and PUF3.

  The decoder 33 here is for obtaining an error pattern from the syndrome of the error correction code, for example. The syndrome calculator 5 is a device for randomly selecting a code word of the error correction code and adding or subtracting the input. In this case, the decoder 33 is for obtaining an error pattern from a signal obtained by adding or subtracting the code word of the error correction code and the unique information.

  FIG. 8 is a flowchart showing a first device specific information generation method using the device specific information generation system shown in FIG. Hereinafter, this identification method will be described in detail with reference to FIG.

  In step S1, the challenge signal C is input to the PUF 3, and the generated first unique signal R1 is registered in the database DB in advance using the challenge signal C as an index.

  Next, in step S2, the challenge signal C registered in the database DB in advance is input to the PUF 3 again.

  Next, in step S3, the syndrome calculator 5 included in the IC reader 30 encodes the first unique signal R1 registered in advance in the database DB using an error correction code such as a BCH code to generate a syndrome S1. To do.

  Next, in step S4, the syndrome calculator 5 included in the IC chip 20 converts the second unique signal R2 generated by the PUF 3 in accordance with the challenge signal C re-input in step S2 into an error correction such as a BCH code. The syndrome S2 is generated by encoding using the code.

  Next, in step S5, the subtractor 31 subtracts the syndrome S2 from the syndrome S1, and the decoder 33 decodes the signal obtained by the subtraction by the subtractor 31.

  Next, in step S6, the subtractor 35 subtracts the signal generated by the decoding by the decoder 33 from the first unique signal R1 registered in advance in the database DB.

  Next, in step S7, the comparator 37 compares the second specific signal R2 generated by the PUF2 in step S2 with the signal generated by the subtractor 35. If these signals match, the IC 37 A signal T indicating that the chip 20 is authentic is output, and if they do not match, a signal F indicating that the IC chip 20 is not authentic is output.

  In this comparison, the second unique signal R2 and the signal generated by the subtractor 35 may be directly compared, or a signal obtained by processing them may be compared.

  In the IC reader 30 shown in FIG. 7, a signal d () indicating an error pattern is decoded by a decoder 33, which is obtained by subtracting the first unique signal R1 from the second unique signal R2 by the subtractor 31. = R2-R1) may be generated, and the second specific signal R2 may be generated by adding the first specific signal R1 and the signal d using an adder instead of the subtractor 35.

  Further, in the IC reader 30 shown in FIG. 7, the decoder 33 decodes the result of adding the second unique signal R2 and the first unique signal R1 using an adder instead of the subtractor 31. Alternatively, a signal d (= R1 + R2) indicating an error pattern may be generated, and the second specific signal R2 may be generated by subtracting the first specific signal R1 from the main signal d by the subtractor 35.

  According to the first device specific information generation system and the device specific information generation method as described above, the IC chip 20 includes a decoder that generally requires a large-scale circuit to perform a large amount of data processing. Since it is not necessary, the configuration of the IC chip 20 that realizes accurate authentication can be simplified, and the manufacturing cost can be reduced.

  Further, since the second specific signal R2 generated in the IC chip 20 changes every time without using a separate random number generator, a countermeasure against side channel attacks can be realized without adding an extra mechanism.

  FIG. 9 is a block diagram showing the configuration of the second device specific information generation system according to the embodiment of the present invention. As shown in FIG. 9, the system includes a device 150 and an information reading device 160, and a specific configuration example is shown in FIG. 10.

  As shown in FIG. 10, the second device specific information generation system includes an IC chip 40 and an IC reader 50. Here, the IC chip 40 includes a PUF 3, a syndrome calculator 5 connected to the PUF 3, and an adder 41 connected to the PUF 3, and the IC reader 50 includes a syndrome calculator 5 connected to an external database DB, The subtractor 31 connected to the syndrome calculator 5, the decoder 33 connected to the subtractor 31, and the comparator 51 connected to the database DB and the adder 41.

  The decoder 33 here is for obtaining an error pattern from the syndrome of the error correction code, for example. The syndrome calculator 5 is a device for randomly selecting a code word of the error correction code and adding or subtracting the input. In this case, the decoder 33 is for obtaining an error pattern from a signal obtained by adding or subtracting the code word of the error correction code and the unique information.

  FIG. 11 is a flowchart showing a second device specific information generation method using the device specific information generation system shown in FIG. Hereinafter, this identification method will be described in detail with reference to FIG.

  In step S1, the challenge signal C is input to the PUF 3, and the generated first unique signal R1 is registered in the database DB in advance using the challenge signal C as an index.

  Next, in step S2, the challenge signal C registered in the database DB in advance is input to the PUF 3 again.

  Next, in step S3, the syndrome calculator 5 included in the IC reader 50 encodes the first unique signal R1 registered in advance in the database DB using an error correction code such as a BCH code to generate a syndrome S1. To do.

  Next, in step S4, the syndrome calculator 5 included in the IC chip 40 corrects the second unique signal R2 generated by the PUF 3 in accordance with the challenge signal C re-input in step S2 with an error correction such as a BCH code. The syndrome S2 is generated by encoding using the code.

  Next, in step S5, the subtractor 31 subtracts the syndrome S2 from the syndrome S1, and the decoder 33 decodes the signal obtained by the subtraction by the subtractor 31.

  Next, in step S6, the adder 41 adds the second eigensignal R2 generated by the PUF3 according to the challenge signal C re-input in step S2 and the signal d generated by decoding by the decoder 33. To do.

  Next, in step S7, the comparator 51 compares the first unique signal R1 registered in the database DB in advance with the signal generated by the adder 41. If these signals match, the IC chip In addition to outputting a signal T indicating that 40 is authentic, a signal F indicating that the IC chip 40 is not authentic is output if they do not match.

  In this comparison, the first specific signal R1 and the signal generated by the adder 41 may be directly compared, or a signal obtained by processing them may be compared.

  In the IC reader 50 shown in FIG. 10, a signal d () indicating an error pattern is decoded by the decoder 33, which is obtained by subtracting the first unique signal R1 from the second unique signal R2 by the subtractor 31. = R2-R1) may be generated, and the first specific signal R1 may be generated by subtracting the signal d from the second specific signal R2 using a subtracter instead of the adder 41.

  Furthermore, in the IC reader 50 shown in FIG. 10, the decoder 33 decodes the result of adding the second unique signal R2 and the first unique signal R1 using an adder instead of the subtractor 31. A signal d (= R1 + R2) indicating an error pattern is generated, and a first specific signal R1 is generated by subtracting the second specific signal R2 from the main signal d using a subtracter instead of the adder 41. You may do it.

  Similar modifications can also be considered in the device specific information generation system shown in FIGS. 13 and 15 shown below.

  Even with the second device specific information generation system and device specific information generation method as described above, it is necessary to include in the IC chip 40 a decoder that generally requires a large-scale circuit to perform a large amount of data processing. Therefore, the configuration of the IC chip 40 that realizes accurate authentication can be simplified, and the manufacturing cost can be reduced.

  Further, according to the second device specific information generation system and the device specific information generation method, the first specific signal R1 uniquely determined for the challenge signal C is restored and used as a comparison target by the comparator 51. Therefore, the reliability of device authentication can be improved. The first unique signal R1 is a fixed value as described above, but may be varied using a random number in order to improve safety.

  FIG. 12 is a block diagram showing the configuration of the third device specific information generation system according to the embodiment of the present invention. As shown in FIG. 12, this system is composed of a device 170 and an information reading device 180, and a specific configuration example is shown in FIG.

  As shown in FIG. 13, the third device specific information generation system includes an IC chip 60 and an IC reader 70. Here, the IC chip 60 includes a PUF 3, a syndrome calculator 5 connected to the PUF 3, an adder 41 connected to the PUF 3, and a secret key generator 61 connected to the adder 41. A subtractor 31 connected to the external database DB and a decoder 33 connected to the subtractor 31 are included. The public key generator 65 is connected between the PUF 3 and the database DB.

  FIG. 14 is a flowchart showing a third device specific information generation method using the device specific information generation system shown in FIG. Hereinafter, this identification method will be described in detail with reference to FIG.

  In step S1, the challenge signal C is input to the PUF 3, and the generated first unique signal R1 is encoded by the syndrome calculator 5 using an error correction code such as a BCH code. Then, the first encoded signal (syndrome S1) obtained by the encoding is registered in advance in the database DB using the challenge signal C as an index.

  Next, in step S2, the challenge signal C registered in advance in the database DB in step S1 is input to the PUF 3 again.

  Next, in step S3, the syndrome calculator 5 encodes the second specific signal R2 generated by the PUF 3 in accordance with the challenge signal C re-input in step S2 using an error correction code such as a BCH code. A second encoded signal (syndrome S2) is generated.

  Next, in step S4, the subtractor 31 subtracts the syndrome S2 generated in step S3 from the syndrome S1 registered in advance in the database DB in step S1. Then, the decoder 33 decodes the signal generated by the subtracter 31.

  Next, in step S5, the adder 41 adds the second eigensignal R2 generated by the PUF3 in response to the challenge signal C re-input in step S2 and the signal d generated by decoding by the decoder 33. Thus, the first specific signal R1 is generated.

  Even with the third device specific information generation system and device specific information generation method as described above, it is not necessary to include a decoder having a large circuit scale in the IC chip 60 in order to perform a large amount of data processing. The configuration of the IC chip 60 that realizes authentication can be simplified, and the manufacturing cost can be reduced.

  Further, according to the third device specific information generation system and the device specific information generation method, in order to authenticate the IC chip 60 by restoring the first specific signal R1 uniquely determined for the challenge signal C, The reliability of device authentication can be improved.

  In the third device specific information generation system, as shown in FIG. 13, a public key PK is generated from the first specific signal R1 by the public key generator 65, and the challenge signal C is used as an index in the database DB. be registered. Then, the IC reader 70 reads the public key PK from the database DB using the challenge signal C as an index, and the secret key generator 61 included in the IC chip 60 uses the secret signal from the first unique signal R1 generated by the adder 41. A key SK is generated.

  Therefore, according to the third device specific information generation system, only the signal d generated by the decoding by the syndrome S2 and the decoder 33 is communicated between the IC chip 60 and the IC reader 70. Therefore, even if these signals are wiretapped by a malicious third party, it is possible to make it difficult to guess the first unique information R1 and the secret key SK generated based on it.

  Further, FIG. 15 shows an IC chip including an arithmetic unit 81 that realizes the same processing as the processing using the secret key SK without directly using the secret key SK, instead of the secret key generator 61 shown in FIG. 80 configurations are shown.

  Here, as shown in FIG. 15, the arithmetic device 81 performs an operation using the first eigensignal R1 and the second eigensignal R2, and for example, performs the following operation.

[Operation Example 1]
For example, the secret key SK is s = KDF (R1). However, KDF (Key Derivation Function) is a function for converting the first unique signal R1 into s.

  Normally, when the common key K is obtained by calculating sP, the calculation device 81 performs the following calculation. However, let P, K ', K ", K be a point on the elliptic curve whose order is n, and let s' and d' be integers.

と演算してもよい。 In the above equation (1)
d '= {KDF (R1) -s'} mod n

May be calculated.

[Operation example 2]
When calculating rs mod n for the product rs of the secret key s and the value r that can be calculated from the outside, the calculation is performed as in the following formula (3) or formula (4).

  By performing operations such as these, calculation using a secret key s such as sP and rs mod n is not performed every time, so it is possible to prevent side channel attacks without introducing a circuit such as a pseudo random number generator. Defense can be realized.

1, 20, 40, 60 IC chip 3 Physical replication difficulty circuit (PUF)
5 Syndrome Calculator 7, 33, 103, 161, 181 Decoder 10, 37, 51 Comparator 11 Register 13 Encoder 17, 41, 151 Adder 19 Register 30, 50, 70 IC Reader 31, 35 Subtractor 61 , 171 Secret key generator 100, 120 Device specific information generator 102 Converter 80, 130, 150, 170 Device 70, 140, 160, 180 Information reader

Claims (11)

A device-specific information generation system including a device and an information reader that reads information supplied from the device,
The device is
Characteristic signal generating means for generating a specific signal depending on the physical characteristics of the device in accordance with the input signal;
The second unique signal generated by inputting the input signal again to the characteristic signal generating means is encoded using an error correction code to generate a syndrome, or a codeword of the error correction code is randomly selected And a first conversion means for generating a second converted signal by adding or subtracting the selected codeword to the second specific signal,
The information reader is
A first unique signal generated by the characteristic signal generation means is encoded using an error correction code in accordance with the input signal input in advance to generate a syndrome, or a code word of the error correction code is randomly generated A second conversion means for selecting and generating the first converted signal by adding or subtracting the selected codeword to the first specific signal;
Subtracting means for subtracting the second converted signal from the first converted signal;
Decoding means for decoding a signal generated by subtraction by the subtraction means ,
The device is a device specific information generation system further comprising a calculation unit that generates the first specific signal from the second specific signal and the signal generated by the decoding unit. A device-specific information generation system including a device and an information reader that reads information supplied from the device,
The device is
Characteristic signal generating means for generating a specific signal depending on the physical characteristics of the device in accordance with the input signal;
The first unique signal generated by the characteristic signal generation means is encoded using an error correction code to generate a syndrome, or a codeword of an error correction code is randomly selected, and the selected codeword is The first unique signal is added or subtracted to generate a first converted signal, and the second unique signal generated by inputting the input signal again to the characteristic signal generating means is used with an error correction code. Encoding to generate a syndrome, or randomly selecting a codeword of an error correction code, and adding or subtracting the selected codeword to or from the second specific signal to generate a second converted signal Means and
The information reader is
Subtracting means for subtracting the second converted signal from the first converted signal;
Decoding means for decoding a signal generated by subtraction by the subtraction means ,
The device is a device specific information generation system further comprising a calculation unit that generates the first specific signal from the second specific signal and the signal generated by the decoding unit. Before SL calculating means, the second an adder for adding the generated signals by the specific signal and said decoding means, device-specific information generating system according to claim 1 or 2. A device-specific information generation system including a device and an information reader that reads information supplied from the device,
The device is
Characteristic signal generating means for generating a specific signal depending on the physical characteristics of the device in accordance with the input signal;
The second unique signal generated by inputting the input signal again to the characteristic signal generating means is encoded using an error correction code to generate a syndrome, or a codeword of the error correction code is randomly selected And a first conversion means for generating a second converted signal by adding or subtracting the selected codeword to the second specific signal,
The information reader is
A first unique signal generated by the characteristic signal generation means according to the input signal input in advance is encoded using an error correction code to generate a syndrome, or a code word of the error correction code is randomly generated A second conversion means for selecting and generating the first converted signal by adding or subtracting the selected codeword to the first specific signal;
Subtracting means for subtracting the first converted signal from the second converted signal;
Decoding means for decoding a signal generated by subtraction by the subtraction means,
The device is a device specific information generation system further comprising a calculation unit that generates the first specific signal from the second specific signal and the signal generated by the decoding unit. A device-specific information generation system including a device and an information reader that reads information supplied from the device,
The device is
Characteristic signal generating means for generating a specific signal depending on the physical characteristics of the device in accordance with the input signal;
The first unique signal generated by the characteristic signal generation means is encoded using an error correction code to generate a syndrome, or a codeword of an error correction code is randomly selected, and the selected codeword is The first unique signal is added or subtracted to generate a first converted signal, and the second unique signal generated by inputting the input signal again to the characteristic signal generating means is used with an error correction code. Encoding to generate a syndrome, or randomly selecting a codeword of an error correction code, and adding or subtracting the selected codeword to or from the second specific signal to generate a second converted signal Means and
The information reader is
Subtracting means for subtracting the first converted signal from the second converted signal;
Decoding means for decoding a signal generated by subtraction by the subtraction means,
The device is a device specific information generation system further comprising a calculation unit that generates the first specific signal from the second specific signal and the signal generated by the decoding unit. Before SL calculating means, the second from the unique signal is a subtracter for subtracting a signal generated by said decoding means, device-specific information generating system according to claim 4 or 5. A device-specific information generation system including a device and an information reader that reads information supplied from the device,
The device is
Characteristic signal generating means for generating a specific signal depending on the physical characteristics of the device in accordance with the input signal;
The second unique signal generated by inputting the input signal again to the characteristic signal generating means is encoded using an error correction code to generate a syndrome, or a codeword of the error correction code is randomly selected And a first conversion means for generating a second converted signal by adding or subtracting the selected codeword to the second specific signal,
The information reader is
A first unique signal generated by the characteristic signal generation means according to the input signal input in advance is encoded using an error correction code to generate a syndrome, or a code word of the error correction code is randomly generated A second conversion means for selecting and generating the first converted signal by adding or subtracting the selected codeword to the first specific signal;
Adding means for adding the second converted signal and the first converted signal;
Decoding means for decoding the signal generated by the addition by the addition means,
The device is a device specific information generation system further comprising a calculation unit that generates the first specific signal from the second specific signal and the signal generated by the decoding unit. A device-specific information generation system including a device and an information reader that reads information supplied from the device,
The device is
Characteristic signal generating means for generating a specific signal depending on the physical characteristics of the device in accordance with the input signal;
The first unique signal generated by the characteristic signal generation means is encoded using an error correction code to generate a syndrome, or a codeword of an error correction code is randomly selected, and the selected codeword is The first unique signal is added or subtracted to generate a first converted signal, and the second unique signal generated by inputting the input signal again to the characteristic signal generating means is used with an error correction code. Encoding to generate a syndrome, or randomly selecting a codeword of an error correction code, and adding or subtracting the selected codeword to or from the second specific signal to generate a second converted signal Means and
The information reader is
Adding means for adding the second converted signal and the first converted signal;
A decoding means for decoding the signal generated by the addition by the adding means;
The device is a device specific information generation system further comprising a calculation unit that generates the first specific signal from the second specific signal and the signal generated by the decoding unit. Before SL calculating means is a subtracter for subtracting said second unique signal from the signal generated by the decoding means, the device-specific information generating system according to claim 7 or 8. The device further comprises secret key generation means for generating a secret key corresponding to a public key generated in accordance with the first unique signal from the first unique signal generated by the computing means. Item 3. The device specific information generation system according to Item 2. The device is obtained from the first unique signal and the second unique signal generated by the computing means using the secret key without directly using the secret key generated from the first unique signal. The device specific information generation system according to claim 2, further comprising second calculation means for calculating a calculated calculation result .

Images