公开(公告)号：EP0891054A2

公开(公告)日：1999-01-13

申请号：EP98112482.9

申请日：1998-07-06

申请人： Hitachi, Ltd. ,  NEC CORPORATION ,  FUJITSU LIMITED

发明人： Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko ,  Ando, Hioyuki ,  Morita, Ichirou ,  Kuroda, Yasutsugu ,  Torii, Naoya ,  Miyauchi, Hiroshi ,  Sako, Kazue ,  Yamazaki, Masashi

IPC分类号： H04L9/08

CPC分类号： H04L9/0894

摘要： The present invention has an object to overcome problems of a key recovery system using a conventional KRF system and to achieve efficient operation of the overall key recovery system. A key recovery system of the present invention includes check units 12a, 12b for checking whether a user has a recovery authorization for a common key KS, on the basis of a recovery condition RC specified by a recovery condition index RCI which is added to an encrypted message (encrypted message obtained by encrypting the common key KS with a public key KRCpub) supplied from a terminal (10a to 10d) of the user concerned, and a key recovery control unit 14 which is provided separately from the check units 12a, 12b and decrypts the encrypted message with a private key KRCpri paired with the public key KRCpub to recover the common key. The check unit 12a, 12b supplies the common key KS recovered in the key recovery control unit 14 to the user concerned only when the user has the recovery authorization.

摘要翻译： 本发明的目的是克服使用常规KRF系统的密钥恢复系统的问题并实现整体密钥恢复系统的有效操作。 本发明的密钥恢复系统包括基于由恢复条件索引RCI指定的恢复条件RC来检查用户是否具有用于公共密钥KS的恢复授权的检查单元12a，12b，其被添加到加密的 消息（通过用公共密钥KRCpub通过加密公共密钥KS获得的加密消息）和与检查单元12a，12b分开设置的密钥恢复控制单元14和 使用与公钥KRCpub配对的专用密钥KRCpri解密加密的消息，以恢复公用密钥。 检查单元12a，12b仅在用户具有恢复授权时将恢复在密钥恢复控制单元14中的公用密钥KS提供给用户。

公开(公告)号：EP0891053A3

公开(公告)日：2003-03-19

申请号：EP98112477.9

申请日：1998-07-06

申请人： NEC CORPORATION ,  Hitachi, Ltd. ,  FUJITSU LIMITED

发明人： Miyauchi, Hiroshi ,  Sako, Kazue ,  Yamazaki, Masashi ,  Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko ,  Morita, Ichirou ,  Torii, Naoya ,  Ando, Hiroyuki ,  Kuroda, Yasutsugu

IPC分类号： H04L9/08 ,  G06F1/00

CPC分类号： H04L9/0643 ,  H04L9/0894

摘要： A key recovery condition encryption apparatus includes a hashing unit, a first concatenating unit, and a condition information encryption unit. The hashing unit calculates a hash value on the basis of a hash function using a key recovery information text serving as information necessary for performing key recovery. The first concatenating unit concatenates the hash value from the hashing unit to the key recovery condition. The condition information encrytion unit encrypts a concatenating result from the first concatenating unit by using a first encryption key. Also is disclosed a key recovery condition decryption apparatus for decrypting the encrypted data from the above encryption apparatus.

公开(公告)号：EP0891054A3

公开(公告)日：2003-01-15

申请号：EP98112482.9

申请日：1998-07-06

申请人： Hitachi, Ltd. ,  NEC CORPORATION ,  FUJITSU LIMITED

发明人： Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko ,  Ando, Hioyuki ,  Morita, Ichirou ,  Kuroda, Yasutsugu ,  Torii, Naoya ,  Miyauchi, Hiroshi ,  Sako, Kazue ,  Yamazaki, Masashi

IPC分类号： H04L9/08

CPC分类号： H04L9/0894

摘要： The present invention has an object to overcome problems of a key recovery system using a conventional KRF system and to achieve efficient operation of the overall key recovery system. A key recovery system of the present invention includes check units 12a, 12b for checking whether a user has a recovery authorization for a common key KS, on the basis of a recovery condition RC specified by a recovery condition index RCI which is added to an encrypted message (encrypted message obtained by encrypting the common key KS with a public key KRCpub) supplied from a terminal (10a to 10d) of the user concerned, and a key recovery control unit 14 which is provided separately from the check units 12a, 12b and decrypts the encrypted message with a private key KRCpri paired with the public key KRCpub to recover the common key. The check unit 12a, 12b supplies the common key KS recovered in the key recovery control unit 14 to the user concerned only when the user has the recovery authorization.

公开(公告)号：EP0891055A3

公开(公告)日：2001-09-05

申请号：EP98302486.0

申请日：1998-03-31

申请人： FUJITSU LIMITED ,  NEC Corporation ,  Hitachi, Ltd.

发明人： Morita, Ichirou, c/o Fujitsu Limited ,  Kuroda, Yasutsugu, c/o Fujitsu Limited ,  Torii, Naoya, c/o Fujitsu Limited ,  Yamazaki, Masashi ,  Miyauchi, Hiroshi ,  Sako, Kazue ,  Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko

IPC分类号： H04L9/08

CPC分类号： H04L9/3226 ,  H04L9/0897

摘要： A key recovery information distribution device is provided between a recoverer device and a key recovery device, recovers a data key for the recoverer device, and reduces the load of the recoverer device. Data is encrypted using the data key and stored with key recovery information. The recoverer device which decrypts the encrypted data distributes the key recovery information to key recovery devices through the key recovery information distribution device to recover key information. A recoverer is authenticated directly between the key recovery device and the recoverer device, and then the key information is transmitted to the recoverer device, and the recoverer device recovers the data key.

公开(公告)号：EP0891053B1

公开(公告)日：2004-10-06

申请号：EP98112477.9

申请日：1998-07-06

申请人： NEC CORPORATION ,  Hitachi, Ltd. ,  FUJITSU LIMITED

发明人： Miyauchi, Hiroshi ,  Sako, Kazue ,  Yamazaki, Masashi ,  Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko ,  Morita, Ichirou ,  Torii, Naoya ,  Ando, Hiroyuki ,  Kuroda, Yasutsugu

IPC分类号： H04L9/08 ,  G06F1/00

CPC分类号： H04L9/0643 ,  H04L9/0894

公开(公告)号：EP0891055B1

公开(公告)日：2003-08-27

申请号：EP98302486.0

申请日：1998-03-31

申请人： FUJITSU LIMITED ,  NEC Corporation ,  Hitachi, Ltd.

发明人： Morita, Ichirou, c/o Fujitsu Limited ,  Kuroda, Yasutsugu, c/o Fujitsu Limited ,  Torii, Naoya, c/o Fujitsu Limited ,  Yamazaki, Masashi ,  Miyauchi, Hiroshi ,  Sako, Kazue ,  Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko ,  Ando, Hiroyuki c/o Fujitsu Limited

IPC分类号： H04L9/08

CPC分类号： H04L9/3226 ,  H04L9/0897

公开(公告)号：EP0891055A2

公开(公告)日：1999-01-13

申请号：EP98302486.0

申请日：1998-03-31

申请人： FUJITSU LIMITED ,  NEC Corporation ,  Hitachi, Ltd.

发明人： Morita, Ichirou, c/o Fujitsu Limited ,  Kuroda, Yasutsugu, c/o Fujitsu Limited ,  Torii, Naoya, c/o Fujitsu Limited ,  Yamazaki, Masashi ,  Miyauchi, Hiroshi ,  Sako, Kazue ,  Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko

IPC分类号： H04L9/08

CPC分类号： H04L9/3226 ,  H04L9/0897

摘要： A key recovery information distribution device is provided between a recoverer device and a key recovery device, recovers a data key for the recoverer device, and reduces the load of the recoverer device. Data is encrypted using the data key and stored with key recovery information. The recoverer device which decrypts the encrypted data distributes the key recovery information to key recovery devices through the key recovery information distribution device to recover key information. A recoverer is authenticated directly between the key recovery device and the recoverer device, and then the key information is transmitted to the recoverer device, and the recoverer device recovers the data key.

摘要翻译： 在恢复装置和密钥恢复装置之间提供密钥恢复信息分配装置，恢复用于恢复装置的数据密钥，并减少重新装置装置的负载。 使用数据密钥对数据进行加密，并与密钥恢复信息一起存储。 解密加密数据的恢复装置通过密钥恢复信息发布装置将密钥恢复信息分配给密钥恢复装置，以恢复密钥信息。 恢复器在密钥恢复装置和恢复装置之间直接认证，然后将密钥信息发送到恢复装置，恢复装置恢复数据密钥。

公开(公告)号：EP0891053A2

公开(公告)日：1999-01-13

申请号：EP98112477.9

申请日：1998-07-06

申请人： NEC CORPORATION ,  HITACHI, LTD. ,  FUJITSU LIMITED

发明人： Miyauchi, Hiroshi ,  Sako, Kazue ,  Yamazaki, Masashi ,  Domyo, Seiichi ,  Tsuchiya, Hiroyoshi ,  Kanno, Seiko ,  Morita, Ichirou ,  Torii, Naoya ,  Ando, Hiroyuki ,  Kuroda, Yasutsugu

IPC分类号： H04L9/08

CPC分类号： H04L9/0643 ,  H04L9/0894

摘要： A key recovery condition encryption apparatus includes a hashing unit, a first concatenating unit, and a condition information encryption unit. The hashing unit calculates a hash value on the basis of a hash function using a key recovery information text serving as information necessary for performing key recovery. The first concatenating unit concatenates the hash value from the hashing unit to the key recovery condition. The condition information encrytion unit encrypts a concatenating result from the first concatenating unit by using a first encryption key. Also is disclosed a key recovery condition decryption apparatus for decrypting the encrypted data from the above encryption apparatus.

摘要翻译： 密钥恢复条件加密装置包括散列单元，第一连接单元和条件信息加密单元。 哈希单元使用作为执行密钥恢复所必需的信息的密钥恢复信息文本，基于散列函数来计算哈希值。 第一级联单元将散列单元的哈希值连接到密钥恢复条件。 条件信息加密单元通过使用第一加密密钥来加密来自第一连接单元的连接结果。 还公开了一种用于从上述加密装置解密加密数据的密钥恢复条件解密装置。