Information processing apparatus and method for installing an encrypted program in key implemented system

BACKGROUND OF THE INVENTION

The present invention relates to a technology including a key-installed (key-implemented) system, and development and installation of a program for an LSI device used in such a system.

In a key-installed system having high secrecy and confidentiality, how to maintain the security of the system in program development and program installation processes is a significant challenge.

SUMMARY OF THE INVENTION

The present invention provides to such a key-installed system, high-security program development method and environment and a high-security program installation method.

Specifically, the present invention provides a method for developing a program which is to be installed in a system having an LSI device. The LSI device has a secure memory including an unrewritable area. The method comprises the steps of: providing an LSI device having the same structure as that of the LSI device; setting the provided LSI device to a development mode so that the provided LSI device is used as a development LSI device, the development mode being different from a product operation mode employed at the times of program installation and product operation; and developing the program on the development LSI device.

According to this method invention, development of a program which is to be installed in a system having an LSI device which includes a secure memory is performed in a development LSI device which has the same structure as that of the LSI device and which has been set to a development mode that is different from a product operation mode employed at the times of program installation and product operation. That is, the operation mode of an LSI device which has a secure memory including an unrewritable area and which has high confidentiality is switched from an installation mode to the development mode so that the LSI device is used as a program development environment. As a result, the security of the program development environment is improved as compared with conventional techniques.

In the program development method of the present invention, the operation of the LSI device is preferably restricted such that when being set to the development mode, the LSI device can execute a raw (binary) program, and when being set to the product operation mode, the LSI device cannot execute a raw (binary) program.

The program development method of the present invention preferably includes the step of encrypting the program developed on the development LSI device at the program development step.

In the program development method of the present invention, the operation of the LSI device is preferably restricted such that when being set to the development mode, the LSI device cannot generate a key for encrypting a raw (binary) program.

The program development method of the present invention preferably includes the steps of: providing an LSI device having the same structure as that of the LSI device; setting the provided LSI device to a key-generation mode so that the provided LSI device is used as an key-generation LSI device, the key-generation mode being different from the development mode and an installation mode; and installing an encrypted key-generation program in the key-generation LSI device and executing the key-generation program to generate a key. Furthermore, the operation of the LSI device is preferably restricted such that when being set to the key-generation mode, the LSI device cannot execute a raw (binary) program. Alternatively, the program development method of the present invention preferably includes the steps of: providing an LSI device having the same structure as that of the LSI device; setting the provided LSI device to an administrator mode so that the provided LSI device is used as an administrator LSI device, the administrator mode being different from the development mode, the installation mode, and the key-generation mode; and developing the key-generation program and encrypting the developed key-generation program with any key on the administrator LSI device.

Furthermore, the present invention provides a program development supporting system for supporting development of an encrypted program. The system includes: an LSI device having the same structure as that of an LSI device on which the encrypted program runs; and an external memory for storing a raw (binary) program. The LSI device includes a secure memory for storing common key information regarding a raw common key. The LSI device is capable of executing a first step of obtaining the raw common key from the common key information stored in the secure memory, and a second step of encrypting the raw (binary) program input from the external memory using the raw common key.

According to this system invention, an LSI device having the same structure as that of an LSI device on which an encrypted program to be developed runs is provided as a development environment. In this LSI device, a raw common key is obtained from common key information stored in a secure memory, and a raw (binary) program input from an external memory is encrypted using the raw common key. That is, decryption into the raw common key and encryption of the raw (binary) program with the raw common key can be performed. Thus, encryption of raw (binary) program can be performed while keeping the raw common key secret from a program developer.

Furthermore, the present invention provides a program development supporting system for supporting development of an encrypted program. The system includes: an LSI device; and an external memory for storing a raw (binary) program. The LSI device includes a secure memory for storing common key information regarding a raw common key, and a boot ROM for storing a boot program. By executing the boot program stored in the boot ROM, the LSI device executes a first step of obtaining a raw common key from the common key information stored in the secure memory, and a second step of encrypting the raw (binary) program input from the external memory using the raw common key.

According to this system invention, by executing a boot program in an LSI device, a raw common key is obtained from common key information stored in a secure memory, and a raw (binary) program input from an external memory is encrypted using the raw common key. That is, decryption into the raw common key and encryption of the raw (binary) key with the raw common key are performed not by an external instruction but by the boot program. Thus, encryption of the raw (binary) program can be performed while surely keeping the raw common key secret from a program developer.

In the program development supporting system of the present invention, the common key information preferably includes an encrypted common key which is obtained by encrypting the raw common key with a raw first intermediate key and an encrypted first intermediate key which is obtained by encrypting the raw first intermediate key with a second intermediate key. The first step preferably includes the step of obtaining the raw common key using the encrypted common key, the encrypted first intermediate key and a program encryption seed.

Furthermore, the present invention provides a method for installing an encrypted program in a key-installed system which includes an external memory and an LSI device having a secure memory. The method includes: an initial value setting procedure for storing common key information regarding a raw common key and inherent key information regarding a raw inherent key in the secure memory; a first step of obtaining in the LSI device the raw common key from the common key information stored in the secure memory; a second step of decrypting in the LSI device a common key-encrypted program supplied from the external memory into a raw (binary) program using the raw common key obtained at the first step; a third step of obtaining in the LSI device the raw inherent key from the inherent key information stored in the secure memory; a fourth step of encrypting in the LSI device the raw (binary) program obtained at the second step using the raw inherent key obtained at the third step, thereby obtaining an inherent key-encrypted program; and the step of installing the inherent key-encrypted program obtained at the fourth step in the external memory.

According to this method invention, a common key-encrypted program supplied to an LSI device is decrypted using a raw common key obtained from common key information stored in a secure memory, thereby obtaining a raw (binary) program. The obtained raw (binary) program is encrypted using a raw inherent key obtained from inherent key information stored in the secure memory. That is, before being installed in a system, the common key-encrypted program is converted to an inherent key-encrypted program by switching the key for encryption from the common key to the inherent key. As a result, programs installed in different products of users are programs encrypted with different inherent keys, and thus, the confidentiality is improved. Furthermore, even if a cipher (encryption) is broken, the number of products to be damaged is restricted, and therefore, the security is improved as compared with conventional techniques.

In the program installation method of the present invention, the LSI device preferably includes a boot ROM for storing a boot program, and the LSI device preferably executes the boot program stored in the boot ROM, thereby executing the first to fourth steps.

In the program installation method of the present invention, the inherent key information is preferably stored in an unrewritable area of the secure memory.

In the program installation method of the present invention, the common key information preferably includes an encrypted common key which is obtained by encrypting the raw common key with a raw first intermediate key and an encrypted first intermediate key which is obtained by encrypting the raw first intermediate key with a second intermediate key. The first step preferably includes the step of obtaining the raw common key using the encrypted common key, the encrypted first intermediate key and a program encryption seed.

In the program installation method of the present invention, the inherent key information preferably includes an encrypted inherent key which is obtained by encrypting the raw inherent key with a raw first intermediate key and an encrypted first intermediate key which is obtained by encrypting the raw first intermediate key with a second intermediate key. The third step preferably includes the step of obtaining the raw inherent key using the encrypted inherent key, the encrypted first intermediate key and a program encryption seed.

In the program installation method of the present invention, the inherent key information is preferably an inherent ID which is inherent to the LSI device.

BRIEF DESCRIPTION OF THE DRAWINGS

<ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">FIG. <b>1</b></figref> is a block diagram showing a structure of a secure LSI device according to an embodiment of the present invention.</li><li><figref idref="f0002">FIG. <b>2</b></figref> illustrates an entire flow of development and manufacture which use the secure LSI device of <figref idref="f0001">FIG. <b>1</b></figref>.</li><li><figref idref="f0003">FIG. <b>3</b></figref> is a flowchart of an entire process flow of a boot program.</li><li><figref idref="f0004">FIG. <b>4</b></figref> shows a dataflow of preprocessing SZ2.</li><li><figref idref="f0005">FIG. <b>5</b></figref> shows a dataflow of encryption of a key-generation key.</li><li><figref idref="f0006">FIG. <b>6</b></figref> is a flowchart of program encryption processing SA2.</li><li><figref idref="f0007">FIG. <b>7</b></figref> shows a dataflow of program encryption processing SA2.</li><li><figref idref="f0008">FIG. <b>8</b></figref> is a flowchart of key generator production processing SB1 in the key-generation mode.</li><li><figref idref="f0009">FIGS. <b>9</b></figref> and <figref idref="f0010"><b>10</b></figref> show a dataflow of key generator production processing SB1.</li><li><figref idref="f0011">FIG. <b>11</b></figref> is a flowchart of key management/issuance processing SB2 in the key-generation mode.</li><li><figref idref="f0012">FIGS. <b>12</b></figref> and <figref idref="f0013"><b>13</b></figref> show a dataflow of key management/issuance processing SB2.</li><li><figref idref="f0014">FIG. <b>14</b></figref> is a flowchart of program encryption processing SC1 in the development mode.</li><li><figref idref="f0015">FIG. <b>15</b></figref> shows a dataflow of program encryption processing SC1.</li><li><figref idref="f0016">FIG. <b>16</b></figref> is a flowchart of program installation processing SD1 in the product operation mode.</li><li><figref idref="f0017">FIGS. <b>17</b></figref> and <figref idref="f0018"><b>18</b></figref> show a dataflow of program installation processing SD1.</li><li><figref idref="f0019">FIG. <b>19</b></figref> is a flowchart of normal boot processing SD2 in the product operation mode.</li><li><figref idref="f0020">FIGS. <b>20</b></figref> and <figref idref="f0021"><b>21</b></figref> show a dataflow of normal boot processing SD2.</li><li><figref idref="f0022">FIG. <b>22</b></figref> is a flowchart of initial value setting processing SZ1.</li></ul>

DESCRIPTION OF THE PREFERRED EMBODIMENTS

Hereinafter, an embodiment of the present invention is described with reference to the drawings. Note that, in the following descriptions, an encrypted key or program which is obtained by encrypting a key or program X using a key Y is represented as "Enc (X, Y)".

<figref idref="f0001">FIG. <b>1</b></figref> is a block diagram showing an internal structure of a secure LSI device according to the present embodiment. In <figref idref="f0001">FIG. 1</figref>, the secure LSI device <b>1</b> can be connected to an external memory (flash memory) <b>100,</b> an external tool <b>110,</b> or the like, through an external bus <b>120.</b> The operation mode of the secure LSI device <b>1</b> can be set by supplying a mode ID to the secure LSI device <b>1.</b>

Major components of the secure LSI device <b>1,</b> which are relevant to the following descriptions, are briefly described.

The secure LSI device <b>1</b> has a secure memory (e.g., secure Flash) <b>10</b> including an unrewritable area <b>11.</b> The unrewritable area <b>11</b> includes an unrewritable area write flag <b>12.</b> When a mode ID is once written in the secure memory <b>10,</b> the flag value of the unrewritable area write flag <b>12</b> is changed from "WRITABLE" to "WRITTEN", and writing in the unrewritable area <b>11</b> is thereafter prohibited. It should be noted that the secure memory <b>10</b> and the external memory <b>100</b> are made of flash memories in the present embodiment, but the present invention is not limited thereto. Any type of memory may be used so long as it is nonvolatile.

A private key arithmetic processing section <b>20</b> includes registers for storing various keys and a program encryption seed and performs encryption processing. A key-generation/update sequencer <b>30</b> includes a mode ID storage register <b>31.</b> The key-generation/update sequencer <b>30</b> controls the operation of the private key arithmetic processing section <b>20,</b> i.e., whether or not various keys can be generated, according to a mode ID stored in the mode ID storage register <b>31.</b> The key-generation/update sequencer <b>30</b> further includes an encryption type identifier storage register <b>32</b> for storing an encryption type identifier. The encryption type identifier indicates what algorithm and key length are used for encrypting a key or program. Furthermore, a program encryption seed <b>33</b> is installed in the key-generation/update sequencer <b>30.</b>

A mode sequencer <b>40</b> also includes a mode ID storage register <b>41.</b> The mode sequencer <b>40</b> controls the operation of an external host interface (I/F) <b>50,</b> i.e., which interface is used for reading a program or data stored in the external memory <b>100,</b> according to a mode ID stored in the mode ID storage register <b>41</b> and the value of a jumper <b>43.</b> With this arrangement, it is possible to control whether or not a raw (binary) program stored in the external memory <b>100</b> can be executed. The mode sequencer <b>40</b> further includes an encryption type identifier storage register <b>42</b> for storing an encryption type identifier. The encryption type identifier indicates what method is used for encrypting a key.

The external host I/F <b>50</b> transmits/receives a program or data to/from the external memory <b>100</b> or the external tool <b>110</b> through one of a through section <b>52,</b> a delay section <b>53</b> and an encryption engine <b>54</b> for program decryption, which are included in a program processing section <b>51,</b> and a through section <b>56</b> and an encryption engine <b>57</b> for content encryption/decryption, which are included in a data processing section <b>55,</b> according to the control by the mode sequencer <b>40.</b>

A program input through the through section <b>52</b> is not executed inside the secure LSI device <b>1</b> except when the secure LSI device <b>1</b> is in an administrator mode (described later). That is, the through section <b>52</b> is activated when a raw (binary) program is encrypted or when an already-encrypted program is encrypted again using another key. The secure LSI device <b>1</b> is structured such that the operation of the secure LSI device <b>1</b> does not proceed to a program which is input through the through section <b>52</b> except when the secure LSI device <b>1</b> is in an administrator mode (described later). Therefore, for example, even when the secure LSI device <b>1</b> completed as a commercial product reads a raw (binary) program through the through section <b>52,</b> the secure LSI device <b>1</b> cannot execute the raw (binary) program. It should be noted that, in order to execute a raw (binary) program, the secure LSI device <b>1</b> reads the raw (binary) program through the delay section <b>53.</b>

A boot ROM <b>60</b> stores a boot program for controlling the boot-up operation of the secure LSI device <b>1.</b> A HASH calculation section <b>70</b> calculates a HASH value for verifying the validity of a program read into the secure LSI device <b>1.</b>

Further, the external memory <b>100</b> stores programs and contents. The external tool <b>110</b> stores various initial values which are to be transferred to and stored in the secure memory <b>10</b> at the time of the first boot-up of the secure LSI device <b>1.</b> The type of the initial value varies depending on a selected operation mode.

<figref idref="f0002">FIG. <b>2</b></figref> shows the entire flow of development and manufacture which use the secure LSI device <b>1</b> of <figref idref="f0001">FIG. <b>1</b></figref><b>.</b> As shown in <figref idref="f0002">FIG. <b>2</b></figref><b>,</b> the secure LSI device <b>1</b> operates in the following four operation modes: administrator mode (mode ID: 00), key-generation mode (mode ID: 01), development mode (mode ID: 10), and product operation mode (mode ID: 11).

When being set to the administrator mode, the secure LSI device <b>1</b> operates as an LSI device for an administrator (hereinafter, referred to as "administrator LSI device"). In the administrator LSI device, a key-generation program is developed, and the developed key-generation program is encrypted using any key-generation key.

When being set to the key-generation mode, the secure LSI device <b>1</b> operates as an LSI device for key generation (hereinafter, referred to as "key-generation LSI device"). In the key-generation LSI device, the encrypted key-generation program generated in the administrator LSI device is installed, and the key-generation program is executed to generate various keys.

When being set to the development mode, the secure LSI device <b>1</b> operates as an LSI device for development (hereinafter, referred to as "development LSI device"). In the development LSI device, an application program which is to be executed in an actual product is developed. The application program is encrypted using the program common key.

When being set to the product operation mode, the secure LSI device <b>1</b> operates as an actual product LSI device. The application program generated in the development LSI device and encrypted with the program common key is installed in the product LSI device for development. Inside the product LSI device, the installed application program is converted to an application program encrypted with a program inherent key. This conversion processing can be executed also in the development LSI device for the purpose of debugging the application program.

Hereinafter, details of the operation of the secure LSI device <b>1</b> are described for each operation mode with reference to flowcharts and dataflows. The secure LSI device <b>1</b> operates as described below by executing the boot program stored in the boot ROM <b>60.</b>

<figref idref="f0003">FIG. <b>3</b></figref> is a flowchart illustrating the entire process of the boot program. When the secure LSI device <b>1</b> is powered on, the boot program stored in the boot ROM <b>60</b> is executed by a CPU <b>65.</b> Referring to <figref idref="f0003">FIG. <b>3</b></figref><b>,</b> each hardware is first initialized (SZ0). Then, various initial values are read from the external tool <b>110</b> and set in the secure memory <b>10</b> (SZ1).

<figref idref="f0022">FIG. <b>22</b></figref> is a flowchart which illustrates the initial value setting processing SZ1. In the first place, at a jumper <b>44,</b> it is determined whether or not the secure memory <b>10</b> is mounted in the LSI device. Next, it is determined whether or not the unrewritable area write flag <b>12</b> indicates "WRITTEN". When it indicates "WRITTEN", the processing S21 is ended because an initial value is already set in the secure memory <b>10.</b> When the unrewritable area write flag <b>12</b> indicates "WRITABLE", initial values are written in the secure memory <b>10.</b> In addition to the mode ID, an encrypted program inherent key, address management information and data inherent key are written in the unrewritable area <b>11</b> of the secure memory <b>10.</b> If the first determination indicates that the secure memory <b>10</b> exists outside the LSI device, the mode ID is overwritten with a value that indicates the product operation mode. As a result, a fraudulent product which has a secure memory <b>10</b> outside its LSI package operates only when it is in the product operation mode.

Next, the unrewritable area write flag <b>12</b> is set to "WRITTEN", whereby rewriting in the unrewritable area <b>11</b> is thereafter prohibited. Further, an encryption type identifier and an installation mode flag are written in general areas <b>13</b> and <b>14.</b> When the mode ID indicates a mode other than the administrator mode, an encrypted common key and key-generation key is written in the general areas <b>13</b> and <b>14</b> in addition to the encryption type identifier and installation mode flag.

Thereafter, preprocessing SZ2 is executed. <figref idref="f0004">FIG. <b>4</b></figref> illustrates a dataflow of preprocessing SZ2. Herein, the mode ID set in the unrewritable area <b>11</b> of the secure memory <b>10</b> is set in the mode ID storage register <b>31</b> of the key-generation/update sequencer <b>30</b> and in the mode ID storage register <b>41</b> of the mode sequencer <b>40.</b> Further, the encryption type identifier set in the general area <b>13</b> of the secure memory <b>10</b> is set in the encryption type identifier storage register <b>32</b> of the key-generation/update sequencer <b>30</b> and in the encryption type identifier storage register <b>42</b> of the mode sequencer <b>40.</b> Furthermore, the address management information stored in the unrewritable area <b>11</b> of the secure memory <b>10</b> is set in a cipher address segment storage register <b>81</b> of an MEMC <b>80.</b> The processes described hereinabove correspond to initial value setting phases PA0, PB0, PC0 and PD0 of <figref idref="f0002">FIG. <b>2</b></figref><b>.</b>

Thereafter, the operation is performed in a mode determined according to the value of the mode ID (SZ3).

<Adminisirator Mode>

When the mode ID is "00", the secure LSI device <b>1</b> is set to the administrator mode to execute raw (binary) program execution processing SA1 or program encryption processing SA2 depending on the value of the jumper <b>43</b> (determined at SAO).

In key-generation program development phase PA1, raw (binary) program execution processing SA1 is executed to generate a key-generation program. The key-generation program is stored in the external memory <b>100.</b>

In key-generation program encryption phase PA2, the key-generation program is executed to encrypt any given key-generation key as illustrated in the dataflow of <figref idref="f0005">FIG. <b>5</b></figref><b>.</b> Specifically, in the external host I/F <b>50,</b> the through section <b>52</b> of the program processing section <b>51</b> is activated by the mode sequencer <b>40.</b> Then, the key-generation program stored in the external memory <b>100</b> is supplied to the CPU <b>65</b> through the through section <b>52</b> and executed by the CPU <b>65.</b> By executing the key-generation program, a key-generation key stored in the external memory <b>100</b> is encrypted by the private key arithmetic processing section <b>20</b> using the program encryption seed installed in the key-generation/update sequencer <b>30.</b>

In the present embodiment, encryption of a key is performed using a first intermediate key and a second intermediate key. Specifically, as a result of the encryption, an encrypted key (herein, Enc (key-generation key, MK1)) is obtained by encrypting a raw (binary) key (herein, key-generation key) using the first intermediate key (herein, MK1), and an encrypted first intermediate key (herein, Enc (MK1, CK)) is obtained by encrypting the first intermediate key using the second intermediate key (herein, CK). As a matter of course, the present invention is not limited to such a key encryption method.

Thereafter, program encryption processing SA2 is executed. <figref idref="f0006">FIG. <b>6</b></figref> is a flowchart of program encryption processing SA2. <figref idref="f0007">FIG. 7</figref> illustrates a dataflow of program encryption processing SA2. In the first place, the encrypted key-generation key Enc (key-generation key, MK1), Enc (MK1, CK), which has been stored in the extemal memory <b>100,</b> is set in the private key arithmetic processing section <b>20</b> through the through section <b>52</b> of the external host I/F <b>50</b> (SA21). The encrypted key-generation key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a key-generation key (SA22). Then, a raw (binary) key-generation program stored in the external memory <b>100</b> is read into the secure LSI device 1 and encrypted using the key-generation key decrypted at SA22, and the encrypted key-generation program is written in the external memory <b>100</b> (SA23). Furthermore, the raw (binary) key-generation program of the external memory <b>100</b> is HASH-calculated by the HASH calculation section <b>70,</b> and the calculated HASH value is written in the external memory <b>100</b> (SA24).

In the administrator mode, according to the operation described above, an encrypted key-generation program which is encrypted using a key-generation key, i.e., Enc (key-generation program, key-generation key), the encrypted key-generation key Enc (key-generation key, MK1), Enc (MK1, CK), and the HASH value of the key-generation program are generated.

<Key-Generation Mode>

When the mode ID is "01", the secure LSI device 1 is set to the key-generation mode to execute key generator production processing SB1 or key management/issuance processing SB2 depending on the value of the installation mode flag (determined at SB0).

In key generator production phase PB1, key generator production processing SB1 is executed. <figref idref="f0008">FIG. <b>8</b></figref> is a flowchart of processing SB1. <figref idref="f0009">FIGS. <b>9</b></figref> and <figref idref="f0010"><b>10</b></figref> illustrate a dataflow of processing SB1. The through section <b>52</b> of the program processing section <b>51</b> included in the external host I/F <b>50</b> is activated depending on the mode ID and the value of the installation mode flag.

In the first place, the encrypted program inherent key Enc (program inherent key, MK0), Enc (MK0, CK), which has been stored in the unrewritable area <b>11,</b> is set in an encrypted key storage register of the private key arithmetic processing section <b>20</b> (SB II). The encrypted program inherent key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a program inherent key (SB12). Then, the encrypted key-generation key Enc (key-generation key, MK1), Enc (MK1, CK), which has been set in initial value setting phase PB0, is set in the encrypted key storage register of the private key arithmetic processing section <b>20</b> (SB13). The encrypted key-generation key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a program inherent key (SB14).

Thereafter, the encrypted key-generation program Enc (key-generation program, key-generation key), which has been encrypted using the key-generation key and stored in the external memory <b>100,</b> is taken into the private key arithmetic processing section <b>20</b> through the through section <b>52</b> of the program processing section <b>51</b> included in the external host I/F <b>50</b> (SB15). The encrypted key-generation program read into the private key arithmetic processing section <b>20</b> is decrypted using the key-generation key and then encrypted using the program inherent key, thereby obtaining an encrypted key-generation program Enc (key-generation program, program inherent key) (SB16). The encrypted key-generation program Enc (key-generation program, program inherent key) is written in the external memory <b>100</b> (SB17). Then, the HASH value stored in the external memory <b>100</b> is set in the general area <b>13</b> of the secure memory <b>10</b> through the through section <b>52</b> (SB 18).

Then, the value of the installation mode flag stored in the general area <b>13</b> of the secure memory <b>10</b> is set to "OFF" by the CPU <b>65</b> (SB19). Then, the encrypted key-generation key Enc (key-generation key, MK1), Enc (MK1, CK), which has been stored in the general area <b>13</b> of the secure memory <b>10,</b> is deleted (SB1A). On the other hand, the encrypted key-generation program Enc (key-generation program, key-generation key) and the HASH value, which have been stored in the external memory <b>100,</b> are deleted (SBIB).

In key management/issuance phase PB2, key management/issuance processing SB2 is executed. <figref idref="f0011">FIG. <b>11</b></figref> is a flowchart of processing SB2. <figref idref="f0012">FIGS. <b>12</b></figref> and <figref idref="f0013"><b>13</b></figref> illustrate a dataflow of processing SB2. The encryption engine <b>54</b> for program decryption which is included in the external host I/F <b>50</b> is activated depending on the mode ID and the value of the installation mode flag.

In the first place, the encrypted program inherent key Enc (program inherent key, MK0), Enc (MK0, CK), which has been stored in the unrewritable area <b>11</b> of the secure memory <b>10,</b> is set in an encrypted key storage register of the private key arithmetic processing section <b>20</b> (SB21). The encrypted program inherent key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a program inherent key (SB22). Then, the obtained program inherent key is set in a program inherent key storage register of the encryption engine <b>54</b> for program decryption which is included in the external host I/F <b>50</b> (SB23).

Thereafter, the encrypted key-generation program Enc (key-generation program, program inherent key), which has been encrypted using the program inherent key and stored in the external memory <b>100,</b> is decrypted through the encryption engine <b>54</b> for program decryption which is included in the program processing section <b>51</b> of the external host I/F <b>50.</b> The decrypted key-generation program is taken into the HASH calculation section <b>70</b> to calculate the HASH value (SB24). The calculated HASH value is compared with the HASH value stored in the general area <b>13</b> of the secure memory <b>10</b> to check whether or not the key-generation program is tampered (SB25). If the HASH values are equal to each other (No at SB26), the process proceeds to the key-generation program Enc (key-generation program, program inherent key) stored in the external memory <b>100</b> to execute generation of a key (SB27). If the HASH values are not equal to each other (Yes at SB26), it is determined that some fraud has been committed, and a fraudulent access control procedure is executed (SB28).

In the key-generation mode, the through section <b>52</b> is activated for inputting a program therethrough, or the encryption engine <b>54</b> for program decryption is activated to decrypt and input an encrypted program, but nothing else is executed. Thus, the operation of the secure LSI device <b>1</b> is restricted such that execution of a raw (binary) program is prohibited.

<Development Mode>

When the mode ID is "10", the secure LSI device <b>1</b> is set to the development mode to execute program encryption processing SC1, raw (binary) program execution processing SC2, program installation processing SC3, or encrypted program execution processing SC4 depending on the value of the jumper <b>43</b> (determined at SC0).

In application program development phase PC1, the delay section <b>53</b> is activated to execute raw (binary) program execution processing SC2, whereby an application program is developed. The developed application program is stored in the external memory <b>100.</b>

In application program encryption phase PC2, program encryption processing SC1 is executed. <figref idref="f0014">FIG. <b>14</b></figref> is a flowchart of program encryption processing SC1. <figref idref="f0015">FIG. <b>15</b></figref> illustrates a dataflow of processing SC1. In the first place, common key information, i.e., the encrypted program common key Enc (program common key, MK2), Enc (MK2, CK), which has been stored in the general areas <b>14</b> of the secure memory <b>10,</b> is set in the private key arithmetic processing section <b>20</b> (SC11). The encrypted program common key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a program common key (SC12). Then, a raw (binary) application program stored in the external memory <b>100</b> is read into the secure LSI device <b>1</b> and encrypted using the program common key decrypted at SC12, and the encrypted application program is written in the external memory <b>100</b> (SC13). Furthermore, the raw (binary) application program of the external memory <b>100</b> is HASH-calculated by the HASH calculation section <b>70,</b> and the calculated HASH value is written in the external memory <b>100</b> (SC14).

As a result of the operation described above, the encrypted application program which is encrypted using the program common key, i.e., Enc (application program, program common key), and the HASH value of the application program are generated.

In application program installation phase PC3, program installation processing SC3 is executed. In application program debug phase PC4, encrypted program execution processing SC4 is executed. These processing are the same as processing SD1 and SD2 in the product operation mode, respectively, and therefore, details thereof will be described later.

As described above, an LSI device <b>1,</b> which has a secure memory <b>10</b> including an unrewritable area <b>11</b> and which possesses high confidentiality, is employed as an environment for developing a program by changing the operation mode of the LSI device <b>1</b> from the installation mode to the development mode, whereby the security of the program development environment is improved as compared with conventional techniques.

Furthermore, an encrypted common key (common key information) stored in the secure memory <b>10</b> is decrypted into a raw common key, and encryption of a raw (binary) program is performed using the raw common key. Thus, encryption of a raw (binary) program can be executed while keeping the raw common key secret from a program developer.

Further still, decryption into a raw common key and encryption of a raw (binary) program with the raw common key are executed not by an external instruction but by a boot program. Thus, encryption of the raw (binary) program can be executed while surely keeping the raw common key secret from a program developer.

<Product Operation Mode>

When the mode ID is "11", the secure LSI device <b>1</b> is set to the product operation mode to execute program installation processing SD1 or normal boot processing SD2 depending on the value of the installation mode flag (determined at SD0).

In product installation phase PD1, program installation processing SD1 is executed. <figref idref="f0016">FIG. <b>16</b></figref> is a flowchart of processing SD1. <figref idref="f0017">FIGS. <b>17</b></figref> and <figref idref="f0018"><b>18</b></figref> illustrate a dataflow of processing SD1. The through section <b>52</b> of the program processing section <b>51</b> included in the external host I/F <b>50</b> is activated depending on the mode ID and the value of the installation mode flag.

In the first place, inherent key information, i.e., the encrypted program inherent key Enc (program inherent key, MK0), Enc (MK0, CK), which has been stored in the unrewritable area <b>11</b> of the secure memory <b>10,</b> is set in the encrypted key storage register of the private key arithmetic processing section <b>20</b> (SD11). The encrypted program inherent key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a program inherent key (SD12). Then, common key information, i.e., the encrypted program common key Enc (program common key, MK2), Enc (MK2, CK), which has been set in initial value setting phase PD0, is set in the encrypted key storage register of the private key arithmetic processing section <b>20</b> (SD13). The encrypted program common key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a program common key (SD14).

Thereafter, the encrypted application program Enc (application program, program common key), which has been encrypted with the program common key and stored in the external memory <b>100,</b> is taken into the private key arithmetic processing section <b>20</b> through the through section <b>52</b> of the program processing section <b>51</b> included in the external host I/F <b>50</b> (SD15). After being read into the private key arithmetic processing section <b>20,</b> the encrypted application program is decrypted with the program common key and then encrypted with the program inherent key to obtain an encrypted application program Enc (application program, program inherent key) (SD16). The encrypted application program Enc (application program, program inherent key) is written in the external memory <b>100</b> (SD17). Then, the HASH value stored in the external memory <b>100</b> is set in the general area <b>13</b> of the secure memory 10 through the through section <b>52</b> (SD18).

Then, the value of the installation mode flag stored in the general area <b>13</b> of the secure memory <b>10</b> is set to "OFF" by the CPU <b>65</b> (SD19). Then, the encrypted program common key Enc (program common key, MK1), Enc (MK1, CK), which has been stored in the general area <b>13</b> of the secure memory <b>10,</b> is deleted (SD1A). On the other hand, the encrypted application program Enc (application program, program common key) and the HASH value, which have been stored in the external memory <b>100,</b> are deleted (SD1B).

That is, before being installed in a system, the common key-encrypted program is converted to an inherent key-encrypted program by switching the key for encryption from the common key to the inherent key. As a result, programs installed in different products of users are programs encrypted with different inherent keys, and thus, the confidentiality of the programs is improved. Furthermore, even if a cipher (encryption) is broken, the number of products to be damaged is restricted, and therefore, the security level is improved as compared with conventional techniques.

The inherent key may be generated based on an inherent ID. Specifically, for example, a unique inherent ID is installed as inherent key information in the secure memory <b>10</b> of each secure LSI device <b>1.</b> In product installation phase PD1, an inherent key may be generated from the installed inherent ID by a boot program.

In product operation phase PD2, normal boot processing SD2 is executed. <figref idref="f0019">FIG. <b>19</b></figref> is a flowchart of processing SD2. <figref idref="f0020">FIGS. <b>20</b></figref> and <figref idref="f0021"><b>21</b></figref> illustrate a dataflow of processing SD2. The encryption engine <b>54</b> for program decryption which is included in the external host I/F <b>50</b> is activated depending on the mode ID and the value of the installation mode flag.

In the first place, the encrypted program inherent key Enc (program inherent key, MK0), Enc (MK0, CK), which has been stored in the unrewritable area <b>11</b> of the secure memory <b>10,</b> is set in the encrypted key storage register of the private key arithmetic processing section <b>20</b> (SD21). The encrypted program inherent key is decrypted using the program encryption seed installed in the key-generation/update sequencer <b>30</b> to obtain a program inherent key (SD22). The obtained program inherent key is set in the program inherent key storage register of the encryption engine <b>54</b> for program decryption which is included in the external host I/F <b>50</b> (SD23).

Thereafter, a data inherent ID stored in the unrewritable area <b>11</b> of the secure memory <b>10</b> is set in the inherent ID storage register of the private key arithmetic processing section <b>20</b> (SD24). Then, random numbers are generated by the CPU <b>65</b> and set in a random number storage register (SD25). The private key arithmetic processing section <b>20</b> generates a data inherent key from the data inherent ID and the random numbers (SD26).

Thereafter, the encrypted application program Enc (application program, program inherent key), which has been encrypted with the program inherent key and stored in the external memory <b>100,</b> is decrypted through the encryption engine <b>54</b> for program decryption which is included in the program processing section <b>51</b> of the external host I/F <b>50.</b> The decrypted application program is transferred to the HASH calculation section <b>70,</b> and the HASH value thereof is calculated (SD27). The calculated HASH value is compared with the HASH value stored in the general area <b>13</b> of the secure memory <b>10</b> to check whether or not the application program is tampered (SD28). If the HASH values are equal to each other (No at SD29), the process proceeds to the application program Enc (application program, program inherent key) stored in the external memory <b>100</b> to execute its application (SD2A). If the HASH values are not equal to each other (Yes at SD29), it is determined that some fraud has been committed, and a fraudulent access control procedure is executed (SD2B).

In the product operation mode, the through section <b>52</b> is activated for inputting a program therethrough, or the encryption engine <b>54</b> for program decryption is activated to decrypt and input an encrypted program, but nothing else is executed. Thus, the operation of the secure LSI device <b>1</b> is restricted such that execution of a raw (binary) program is prohibited.

In the development mode and the product operation mode, if it is attempted to externally execute a process of generating a key using the private key arithmetic processing section <b>20,</b> such an attempt from the outside is discriminated and prohibited by the key-generation/update sequencer <b>30.</b> That is, in the development mode and the product operation mode, the key-generation/update sequencer <b>30</b> restricts the operation of the secure LSI device <b>1</b> such that the program encryption seed cannot be used except at the time of boot-up of the secure LSI device <b>1.</b> Thus, a process of generating a key cannot be executed.

According to the present embodiment, programs and data are stored in the external memory <b>100</b> while initial values to be set in the secure memory <b>10</b> are stored in the external tool <b>110.</b> However, according to the present invention, the programs, data and initial values may be stored in any of the external memory <b>100</b> and the external tool <b>110.</b> For example, no problem would occur even if the programs and data are read from the external tool <b>110</b> and re-encrypted.

In the present embodiment, each processing is executed by a boot program, but the present invention is not limited thereto. A portion or the entirety of the processing may be executed by some other means. However, it should be noted that the security can be improved by executing the processing not by an external instruction but by the boot program.

As described above, according to the present invention, an LSI device, which has a secure memory including an unrewritable area and which possesses high confidentiality, is employed as an environment for developing a program by changing the operation mode of the LSI device from the installation mode to the development mode, whereby the security of the program development environment is improved as compared with conventional techniques.