Patent ID: 7650503
Filing Date: 2010-01-19
Classification: G06Q,G07F,H04L

Abstract:
1. A memory system capable of connecting to a host apparatus, said memory system comprising: a flash memory; an IC unit; a controller; and an external terminal for connecting to said host apparatus capable of communicating with a server, wherein said flash memory stores a digital certificate necessary for authenticating said host apparatus and a seed of random numbers for producing a key for encrypting communications between said server and said host apparatus, wherein said IC unit comprises a first program, an EEPROM storing a private key corresponding to said digital certificate and reference personal identification information, a first CPU capable of executing said first program, a cryptography coprocessor for producing a signature by use of said private key, and a first register, wherein said controller comprises a second CPU which can generate said random numbers in shorter time than said first CPU does and is capable of executing a second program, a second register, a first interface for connecting to said external terminal, a second interface for connecting to said flash memory, a third interface for connecting to said IC unit, wherein when said controller received a personal identification information from said host apparatus via said external terminal, said controller sends said personal identification information to said IC unit, wherein when said IC unit received said personal identification information from said controller, said IC unit authenticates said personal identification information by use of said reference personal identification information in accordance with said first program, and stores an authentication result of said personal identification information in said first register and sends the authentication result to said controller, wherein when said controller received the authentication result from said IC unit, said controller stores said authentication result in said second register in accordance with said second program, wherein when said IC unit received a request of producing a signature from said host apparatus via said external terminal and said controller, said IC unit refers said authentication result stored in said first register, wherein if said authentication result indicates the authentication successful, said IC unit produces the signature by use of said cryptography coprocessor and sends said signature to said host apparatus, wherein if said authentication result indicates a failure of the authentication, said IC unit refuses to produce the signature, wherein when said controller receives a request of generating the random numbers from said host apparatus via said external terminal, said controller refers said authentication result stored in said second register, wherein if said resultant indicates the authentication successful, said controller reads out said seed of random numbers from said flash memory, generates the random numbers based on said seed of random numbers in accordance with said second program and send said random numbers to said host apparatus, and wherein if said resultant indicates a failure of the authentication, said controller refuses to generate the random numbers.