Authentication method

Abstract

According to one embodiment, an authentication method comprising: generating a second key by the first key, the first key being stored in a memory and being prohibited from being read from outside; generating a session key by the second key; generating first authentication information, the secret identification information stored in a memory and being prohibited from being read from outside; transmitting encrypted secret identification information to an external device and receiving second authentication information from the external device, the encrypted secret identification information stored in a memory and readable, the second authentication information generated based on the encrypted secret identification information; and determining whether the first authentication information and the second authentication information match.

1 . A method of authenticating a device by an authenticator, wherein
 the device includes
 a first memory area storing memory unique identification information and a first key, the first memory area being prohibited from being read and written from outside of the device at least after shipment of the device, and 
 a second memory area storing encrypted memory unique secret identification information generated by encrypting the memory unique secret identification information with a family key selected from a family key block, the second memory area being readable, 
   the method comprising:   generating a second key by encrypting a host constant with the first key in an AES (Advanced Encryption Standard) operation;   selecting the family key from the family key block and decrypting the encrypted memory unique secret information;   generating a session key by encrypting a random number with the second key in an AES operation; and   generating authentication information by processing the decrypted memory unique secret information with the session key in a one-way function calculation.   
     
     
         2 . A memory device to be authenticated comprising:
 a first memory area being used to store a first key and memory unique secret identification information, the first memory area being prohibited from being read and written from outside by a host device and a controller at least after shipping;   a second memory area being used to store encrypted memory unique secret identification information generated by encrypting the memory unique secret identification information with a family key, the second memory area being readable;   wherein,   the memory device is configured to generate a second key by encrypting a host constant with the first key in an AES (Advanced Encryption Standard) operation;   the memory device is configured to generate a session key by encrypting a random number with the second key in an AES operation; and   the memory device is configured to generate authentication information by processing the secret identification information with the session key in one-way function calculation.