Patent ID: 8667286

Claim:
A storage medium comprising: a controller; and a memory device controlled by the controller, wherein the memory device includes: a first area which stores first key information and first identification information unique to the memory device, and is prohibited from being read from outside of the memory device; a second area which stores encrypted first identification information generated by encrypting the first identification information, and is readable; and a third area which stores key management information and is readable and writable, wherein the controller is configured to: read the key management information from the third area and send the key management information to an external apparatus in response to receiving a read command of the key management information from the external apparatus, read the encrypted first identification information from the second area and send the encrypted first identification information to the external apparatus in response to receiving a read command of the encrypted first identification information from the external apparatus, and send second identification information allocated to and received from the external apparatus to the memory device, and wherein the memory device is configured to: generate an index key using the first key information and index information which is sent from the external apparatus, decrypt, using the index key, the encrypted management key information which is sent from the external apparatus, send the decrypted management key information to the external apparatus, perform an encryption process using the first key information and the second identification information to generate second key information, perform an encryption process using the second key information and random number information received from the external apparatus to generate third key information, perform a one-way conversion process using the third key information and the first identification information to generate the authentication information, send the authentication information to the external apparatus, and be authenticated by the external apparatus.