Abstract: In an embodiment, an information processing apparatus is connected to external apparatuses. The information processing apparatus includes: a device key storage unit configured to store a device key; a shared key storage unit configured to store one or more shared keys shared by the external apparatuses; a key generating unit configured to generate a media key from the device key and media key blocks; and an updating unit configured to generate the shared keys as generated shared keys, which is updated, based upon the media key and the shared keys stored in the shared key storage unit, and to store the generated shared keys into the shared key storage unit.

Abstract: According to an embodiment, a communication control device is connected to communication devices and includes a storage, a generator, and an output unit. The storage is configured to store group information containing a group ID of a group and device IDs of the communication devices belonging to the group. The generator is configured to generate compressed information in which the device IDs are compressed. The output unit is configured to output, when the group information is updated, to all communication devices identified by the device IDs included in the group information after updating and to a plurality of communication devices including one or more of the communication devices identified by the device IDs not included in the group information after updating, output information containing identification information for identifying the group after updating and compressed information in which the device IDs included in the group information after updating are compressed.

Abstract: According to an embodiment, a communication control device includes a receiving unit, a generating unit, and an output unit. The receiving unit receives input of a binary tree in which each of leaf nodes has an index assigned thereto, and receives input of a node ID that enable identification of a leaf node belonging to a group. The generating unit generates set information indicating a set of a predetermined number of partial trees of the binary tree. Each partial tree includes only the leaf node identified by the node ID. The generating unit generates range information of the indexes assigned to one or more leaf nodes of each partial tree included in the set. The output unit outputs the set information and the range information at least to a communication device corresponding to a leaf node belonging to the group.

Abstract: A communication control device includes an extracting unit and an output unit. The extracting unit extracts, from a media key block containing a plurality of elements, partial information that contains elements which can be processed by a communication device having a device ID thereof identified in identification information for identifying one or more device IDs. The output unit outputs a group ID for identifying a group, the identification information, and the partial information, to a plurality of the communication devices that include all of the communication devices belonging to the group.

Abstract: A management apparatus according to an embodiment is connected to a measurement apparatus deployed for each user via a first network. The management apparatus is connected to a service providing apparatus via a second network. The management apparatus includes a first communication device, a second communication device and one or more first processors. The first processors generate seed information using a service providing apparatus identifier. The first processors generate a user key using a measurement apparatus individual key, and the seed information. The first communication device transmits the generated seed information to the measurement apparatus via the first network. The second communication device transmits the generated user key to the service providing apparatus via the second network.

Abstract: A communication control device includes an extracting and an output unit. One or more communication devices belong to a first-type group, and one or more communication devices belong to a second-type group. From a media key block containing a plurality of elements, the extracting unit extracts partial information containing an element which is processible by each communication device belonging to a subset of the second-type group. To the communication devices belonging to the second-type group that is identified by identification information corresponding to the partial information; the output unit outputs a group ID that indicates the first-type group, the identification information, and the partial information.

Abstract: According to an embodiment, a communication control device includes a generating unit and a sending unit. The generating unit refers to specification information, which specifies the communication device belonging to a group from among a plurality of communication devices, and generates identification information, which enables identification of the communication device specified in the specification information, by implementing, from among a plurality of generation methods for generating the identification information, a generation method in which the size of the generated identification information is smaller than the other generation methods. The sending unit sends the identification information to a plurality of communication devices.

Abstract: In an embodiment, an information processing apparatus is connected to external apparatuses. The information processing apparatus includes: a device key storage unit configured to store a device key; a shared key storage unit configured to store one or more shared keys shared by the external apparatuses; a key generating unit configured to generate a media key from the device key and media key blocks; and an updating unit configured to generate the shared keys as generated shared keys, which is updated, based upon the media key and the shared keys stored in the shared key storage unit, and to store the generated shared keys into the shared key storage unit.

Abstract: According to an embodiment, a communication device includes a version storage unit, a receiving unit, a determining unit, and a command processing unit. The version storage unit is configured to store therein the first version information. The receiving unit is configured to receive a command including the second version information. The determining unit is configured to determine whether a version represented by the second version information is a next version after a version represented by the first version information. The command processing unit is configured to, based on a determination result of the determining unit and decision information that defines processes corresponding to a command and the determination result, execute processes corresponding to a received command.

Abstract: In an embodiment, an information processing apparatus is connected to external apparatuses. The information processing apparatus includes: a device key storage unit configured to store a device key; a shared key storage unit configured to store one or more shared keys shared by the external apparatuses; a key generating unit configured to generate a media key from the device key and media key blocks; and an updating unit configured to generate the shared keys as generated shared keys, which is updated, based upon the media key and the shared keys stored in the shared key storage unit, and to store the generated shared keys into the shared key storage unit.

Abstract: A management apparatus according to an embodiment is connected to a measurement apparatus deployed for each user via a first network. The management apparatus is connected to a service providing apparatus via a second network. The management apparatus includes a first communication device, a second communication device and one or more first processors. The first processors generate seed information using a service providing apparatus identifier. The first processors generate a user key using a measurement apparatus individual key, and the seed information. The first communication device transmits the generated seed information to the measurement apparatus via the first network. The second communication device transmits the generated user key to the service providing apparatus via the second network.

Abstract: According to an embodiment, a communication control device includes a generating unit and a sending unit. The generating unit refers to specification information, which specifies the communication device belonging to a group from among a plurality of communication devices, and generates identification information, which enables identification of the communication device specified in the specification information, by implementing, from among a plurality of generation methods for generating the identification information, a generation method in which the size of the generated identification information is smaller than the other generation methods. The sending unit sends the identification information to a plurality of communication devices.

Abstract: According to an embodiment, a key management device includes a key exchange processing unit, a transmission unit, and an update unit. The key exchange processing unit is configured to perform a key exchange process for executing an exchange of a shared key together with authentication between the key management device and a communication device. The transmission unit is configured to transmit update information for updating a device key of the communication device authenticated to the communication device, when the communication device has not been authenticated before performing the key exchange process, and not to transmit the update information, otherwise. The update unit is configured to update the device key using the update information, when the communication device has not been authenticated before performing the key exchange process, and not to update the device key, otherwise.

Abstract: According to an embodiment, a communication control device includes a receiving unit, a generating unit, and an output unit. The receiving unit receives input of a binary tree in which each of leaf nodes has an index assigned thereto, and receives input of a node ID that enable identification of a leaf node belonging to a group. The generating unit generates set information indicating a set of a predetermined number of partial trees of the binary tree. Each partial tree includes only the leaf node identified by the node ID. The generating unit generates range information of the indexes assigned to one or more leaf nodes of each partial tree included in the set. The output unit outputs the set information and the range information at least to a communication device corresponding to a leaf node belonging to the group.

Abstract: According to one embodiment, an information processing apparatus, which is connected to an external apparatus, includes a device key storage unit, a creating unit, a calculating unit, a communication unit, and a key calculating unit. The device key storage unit stores therein a device key. The creating unit creates a media key from the device key and a media key block. The calculating unit calculates first output information on the basis of first inherent information inherent to the information processing apparatus and public information. The communication unit transmits the first output information to the external apparatus and receives second output information calculated by the external apparatus from the external apparatus. The key calculating unit calculates a shared key shared between the information processing apparatus and the external apparatus on the basis of the media key, the first inherent information, and the second output information.

Abstract: According to one embodiment, a memory chip, which is connected to a controller that controls reading and writing of data in response to a request from an external device, includes: a memory including a special area that is a predetermined data storage area; a key storage unit that stores therein a second key that corresponds to a first key used by the external device to convert the data; a converting unit that receives, from the controller, data to be written into the special area and generates converted data by converting the data to be written using the second key; and a writing unit that writes the converted data into the special area.

Abstract: According to an embodiment, a data converting device is connected to a power meter configured to add up power consumptions of electrical equipment. The device includes a receiving unit configured to receive power consumptions per predetermined unit time added up by the power meter; and a calculating unit configured to calculate a second sequence to be stored as added up power consumptions in a storage unit from a first sequence containing the power consumptions per unit time received by the receiving unit in time series by using a conversion rule for converting a value of a second element in the second sequence based on a value of a first element in the first sequence. The second sequence has no privacy information and, the second sequence can be used for calculating a total value of the first sequence.

Abstract: According to one embodiment, a memory chip, which is connected to a controller that controls reading and writing of data in response to a request from an external device, includes: a memory including a special area that is a predetermined data storage area; a key storage unit that stores therein a second key that corresponds to a first key used by the external device to convert the data; a converting unit that receives, from the controller, data to be written into the special area and generates converted data by converting the data to be written using the second key; and a writing unit that writes the converted data into the special area.

Abstract: According to one embodiment, an information processing apparatus, which is connected to an external apparatus, includes a device key storage unit, a creating unit, a calculating unit, a communication unit, and a key calculating unit. The device key storage unit stores therein a device key. The creating unit creates a media key from the device key and a media key block. The calculating unit calculates first output information on the basis of first inherent information inherent to the information processing apparatus and public information. The communication unit transmits the first output information to the external apparatus and receives second output information calculated by the external apparatus from the external apparatus. The key calculating unit calculates a shared key shared between the information processing apparatus and the external apparatus on the basis of the media key, the first inherent information, and the second output information.

Abstract: A communication control device includes an extracting and an output unit. One or more communication devices belong to a first-type group, and one or more communication devices belong to a second-type group. From a media key block containing a plurality of elements, the extracting unit extracts partial information containing an element which is processible by each communication device belonging to a subset of the second-type group. To the communication devices belonging to the second-type group that is identified by identification information corresponding to the partial information; the output unit outputs a group ID that indicates the first-type group, the identification information, and the partial information.