An information recording device comprising a data storage unit and a controller, the data storage unit being capable of storing an encrypted medium device key Enc (Kcu, Kmd_i) generated by encrypting a medium device key (Kmd_i) functioning as a secret key of a public key cryptosystem using a controller unique key (Kcu), and a medium device key certificate (Certmedia) functioning as a public key of the public key cryptosystem, the controller further including: an information recording unit configured to store a controller key (Kc) and first controller identification information (IDcu) unique to the controller; a key generation unit configured to execute a one-way function calculation based on the controller key (Kc) and the first controller identification information (IDcu) to generate the controller unique key (Kcu) unique to the controller characterised by: an identification information generating unit configured to execute a one-way function calculation based on the controller key (Kc) and the first controller identification information (IDcu) to generate second controller identification information (IDcntr); a key encryption unit configured to encrypt the medium device key (Kmd_i) by the controller unique key (Kcu) to generate the encrypted medium device key Enc (Kcu, Kmd_i); and a key exchange unit configured to execute an authentication key exchange process with a host device using the medium device key (Kmd_i) and the medium device key certificate (Certmedia) to establish a secure channel between the recording device and the host device, wherein the identification information generating unit is configured to transmit to the host device the second controller identification information (IDcntr), through the secure channel, after the authentication key exchange process is completed. an information recording unit configured to store a controller key (Kc) and first controller identification information (IDcu) unique to the controller; a key generation unit configured to execute a one-way function calculation based on the controller key (Kc) and the first controller identification information (IDcu) to generate the controller unique key (Kcu) unique to the controller characterised by: an identification information generating unit configured to execute a one-way function calculation based on the controller key (Kc) and the first controller identification information (IDcu) to generate second controller identification information (IDcntr); a key encryption unit configured to encrypt the medium device key (Kmd_i) by the controller unique key (Kcu) to generate the encrypted medium device key Enc (Kcu, Kmd_i); and a key exchange unit configured to execute an authentication key exchange process with a host device using the medium device key (Kmd_i) and the medium device key certificate (Certmedia) to establish a secure channel between the recording device and the host device, wherein the identification information generating unit is configured to transmit to the host device the second controller identification information (IDcntr), through the secure channel, after the authentication key exchange process is completed. an identification information generating unit configured to execute a one-way function calculation based on the controller key (Kc) and the first controller identification information (IDcu) to generate second controller identification information (IDcntr); a key encryption unit configured to encrypt the medium device key (Kmd_i) by the controller unique key (Kcu) to generate the encrypted medium device key Enc (Kcu, Kmd_i); and a key exchange unit configured to execute an authentication key exchange process with a host device using the medium device key (Kmd_i) and the medium device key certificate (Certmedia) to establish a secure channel between the recording device and the host device, wherein the identification information generating unit is configured to transmit to the host device the second controller identification information (IDcntr), through the secure channel, after the authentication key exchange process is completed.