Patent ID: 8396218

Claim:
A cryptographic module distribution system comprising: a cryptographic management server apparatus; a cryptographic apparatus; and a client apparatus, wherein the cryptographic management server apparatus, the cryptographic apparatus, and the client apparatus are connected so as to communicate with one other, the cryptographic management server apparatus includes: a cryptographic module storage device which stores a cryptographic module; a key generating device which generates a common key for encrypting the cryptographic module to be transmitted to the client apparatus; a key sharing device configured to share a shared key with the cryptographic apparatus using a key sharing scheme; a key encrypting device configured to encrypt the common key with the shared key, and transmit the encrypted common key to the cryptographic apparatus through the client apparatus; a cryptographic module encrypting device configured to encrypt the cryptographic module with the common key; and a client apparatus communication device configured to transmit the encrypted cryptographic module to the client apparatus, the cryptographic apparatus includes: a key sharing device configured to share a shared key with the cryptographic management server apparatus using the key sharing scheme; a key decrypting device configured to receive the encrypted common key, and decrypt the encrypted common key with the shared key; a cryptographic module decrypting device configured to receive the encrypted cryptographic module from the client apparatus, and decrypt the received encrypted cryptographic module with the common key; and a client apparatus communication device configured to transmit the decrypted cryptographic module to the client apparatus, and the client apparatus includes: a server communication device configured to receive the encrypted cryptographic module from the cryptographic management server apparatus; a cryptographic apparatus communication device configured to transmit the received encrypted cryptographic module to the cryptographic apparatus, and receive the decrypted cryptographic module from the cryptographic apparatus; and a cryptographic module storage device which stores the cryptographic module received from the cryptographic apparatus communication device.