Patent ID: 8650398

Claim:
A device to be authenticated comprising: a controller; and a memory comprising: a first memory area being used to store a first key and unique secret identification information, the first memory area being restricted from being read and written from outside by a host and the controller; a second memory area being used to store encrypted secret identification information generated by encrypting the secret identification information, the second memory area being allowed to be read-only from the perspective of the device; and a third memory area being readable and writable from outside; wherein the memory is configured to generate a second key by using the first key; the memory is configured to generate a session key by using the second key; and the memory is configured to generate authentication information by processing the unique secret identification information with a session key in one-way function operation, wherein the memory is configured to generate the second key after the encrypted secret identification information is read by the host from the second memory area of the memory; the memory configured is to generate the session key after the host sends an authentication request and other information including random number data to the memory; the memory is configured to generate authentication information after generating the session key; and the memory is configured to send the authentication information to the host after generating the session key.