A Next-Generation Secure Platform to Protect the Future of the Internet

Our digital society requires faster and more secure communication technologies. This document explains a new information infrastructure technology that protects information from future threats while delivering the speed required by modern services.

Why is New Security Necessary Now?

The Looming Threat of Quantum Computers

The encryption technologies we currently use are considered secure because they would take an extremely long time for even a supercomputer to break. However, the anticipated arrival of “quantum computers” in the near future could dramatically increase computational power, potentially allowing them to break current encryption in an instant.

The “Harvest Now, Decrypt Later” Attack

Anticipating this threat, malicious actors have already begun to collect large volumes of encrypted communication data. They plan to store this data (the “harvest”) and then decrypt it once quantum computers become practical. This is called the “Harvest Now, Decrypt Later” attack. It poses a serious, long-term risk to sensitive government information and personal privacy.

This platform has been developed to directly counter this future threat.

---

A Convenient Future Life Realized by This Technology

This platform does more than just enhance security. By achieving both “speed” and “safety,” it enables services that were previously difficult to realize.

Instant Cashless Payments

Simply by holding your smartphone over a payment terminal, your payment is completed in less than 0.5 seconds. By minimizing communication “latency” to the absolute limit, we can achieve a stress-free, seamless payment experience.

Instant, Secure Access to Nationwide Medical Information

With the user’s consent, you can securely retrieve your own electronic health records and check-up results from hospitals across the country in just a few seconds. This protects your vital, lifelong health information from the risk of future decryption.

Freedom from ID and Password Management

Securely link your My Number Card, bank accounts, and various other service IDs with a single authentication method (such as a passcode or fingerprint authentication). You will no longer need to remember different IDs and passwords for every service.

---

The Mechanism for Achieving Both “Speed” and “Future Security”

The strength of this platform lies in its efficient two-layer structure, which clearly separates the roles of “authentication” and “data transfer.”

Mechanism 1: “Overwhelming Speed” through PSK Authentication

Traditionally, initiating communication required verifying a digital identity document called a “public key certificate” every time. While thorough, this process was time-consuming.

This platform uses a method called PSK (Pre-Shared Key) as its foundation. This is like agreeing on a “password” in advance, allowing communication partners to authenticate using only that password. This eliminates the need for TLS-PKI certificate verification, shortening the connection handshake. Key distribution is automated through initial offline registration and internal updates within an HSM, reducing operational burden.

Mechanism 2: “Future Security” through PQC (Post-Quantum Cryptography)

When creating the “keys” used to encrypt the data being exchanged, we utilize PQC (Post-Quantum Cryptography), a new encryption technology that is resistant to decryption by future quantum computers.

This is a “hybrid method” that combines current standard encryption technologies with PQC. It is an extremely robust design where, even if an unknown vulnerability is discovered in one of the encryption methods, the overall security is maintained as long as the other remains secure.

---

World-Class Security Measures

To protect valuable information, this platform is equipped with multiple layers of defense.

A “Safe” to Physically Protect Keys

The most critical digital keys used for encryption are strictly managed in a physically isolated device called an HSM (Hardware Security Module), which acts like a safe. It is also equipped with a function to instantly self-destruct the internal keys if it detects a malicious attack.

Preparing for Insider Threats and Disasters with “Secret Sharing”

The most important master key is split into multiple pieces, with each piece stored by a different administrator. The key cannot be restored unless all pieces are brought together, structurally preventing risks such as fraud by a single administrator or loss due to a disaster.

Compliance with International Standards

This platform is built on a design philosophy that complies with strict standards such as ISO/IEC 24643 for distributed systems and Japan’s IoT security evaluation system, JC-STAR, objectively guaranteeing its reliability as social infrastructure.

The Truth about FeliCa
Yasunori Tateishi (Author), Koji Fusa (Translator)