Information processing apparatus, program loading method, recording medium, program updating method and circuit device

• US 20040006703A1
• Filed: 03/18/2003
• Published: 01/08/2004
• Est. Priority Date: 05/20/2002
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Kitani, Satoshi, Moriichi, Munetoshi
• Application Number:
  US10/391,347
• Publication Number:
  US 20040006703A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 11/1004 to protect a block of data words, e.g. CRC or checksum G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/556 involving covert channels, i.e. data leakage between processes inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

In updating a program, program data leakage needs to be prohibited from occurring. To this end, a controlling unit includes an encrypted program data receiving unit for receiving encrypted program data, obtained on encrypting a second program using a preset encryption key, responsive to a update request for a first program, a decrypting unit for decrypting the encrypted program data, received by the encrypted program data receiving unit, to the preset program, using a preset decoding key, a program write unit for writing the second program, decrypted from the encrypted program data by the decrypting unit, and a takeout limiting unit for limiting the takeout of the second program written in the storage unit from an external device.

Claims

1. An information processing apparatus comprising:

encrypted program data receiving means for receiving encrypted program data obtained on encrypting a preset program using a preset encryption key;

decrypting means for decrypting said encrypted program data, received by said encrypted program data receiving means, to said preset program, using a preset decoding key;

storage means for storing said preset program, decrypted from said encrypted program data by said decrypting means;

program readout means for reading out said preset program stored in said storage means; and

controlling means for controlling a preset operation of the information processing apparatus based on said preset program read out by said readout means.

2. The information processing apparatus according to claim 1 wherein said encrypted program data receiving means receives encrypted program data transmitted from an external device.

3. The information processing apparatus according to claim 1 further comprising:

reproducing means for reproducing a recording medium having recorded thereon encrypted program data which is said preset program encrypted with a preset encryption key;

said encrypted program data receiving means receiving the encrypted program data reproduced by said reproducing means.

4. The information processing apparatus according to claim 1 further comprising:

encrypted program data storage means having stored thereon said encrypted program data; and

encrypted program data readout means for reading out said encrypted program data stored in said encrypted program data storage means;

said encrypted program data receiving means receiving the encrypted program data read out by said encrypted program data readout means.

5. The information processing apparatus according to claim 1 wherein the encrypted program data received by said encrypted program data receiving means includes encrypted verification data obtained on encryption with said preset encryption key of first verification data, calculated by preset calculations from program data of said preset program, and a verification program, which is a program for executing said preset calculations, and an encryption verification program.

6. The information processing apparatus according to claim 5 wherein

in decrypting said encrypted program data, said decrypting means decrypts said encrypted verification data and the encrypted verification program into said first verification data and said verification program, respectively, using said preset decryption key;

said storage means stores said first verification data and the verification program, decrypted by said decrypting means;

said controlling means calculates second verification data, from the program data of said preset program, stored in said storage means, based on said verification program, before executing said preset program, and compares the calculated second verification data to the first verification data stored in said storage means;

said readout means reading out said preset program stored in said storage means responsive to coincidence of the first verification data and the second verification data compared to each other by said controlling means.

7. The information processing apparatus according to claim 1 wherein

the apparatus includes said controlling means, said encrypted program data receiving means, said decrypting means, said storage means and the program readout means in a controlling unit and wherein said controlling unit includes takeout controlling means for limiting the takeout from the external device of said preset program decrypted by said decrypting means and said preset program stored in said storage means.

8. A program loading method for loading a preset program for controlling a preset operation of an information processing apparatus, to said information processing apparatus, comprising:

an encrypted program data receiving step of receiving encrypted program data which is said preset program encrypted with a preset encryption key;

a decrypting step of decrypting said encrypted program data received by said encrypted program data receiving step, using a preset decryption key; and

a storage step of storing said preset program, decrypted from said encrypted program data in said decrypting step, in storage means.

9. The program loading method according to claim 8 wherein said encrypted program data receiving step receives said encrypted program data transmitted from an external device.

10. The program loading method according to claim 8 further comprising:

a reproducing step of reproducing a recording medium, having recorded thereon encrypted program data which is said preset program encrypted using a preset encryption key;

said encrypted program data receiving step receiving said encrypted program data reproduced in said reproducing step.

11. The program loading method according to claim 8 further comprising:

an encrypted program data readout step of reading out said encrypted program data from encrypted program data storage means in said information processing apparatus where said encrypted program data are stored;

said encrypted program data receiving step receiving said encrypted program data read out in said encrypted program data readout step.

12. The program loading method according to claim 8 wherein said encrypted program data receiving step receives said encrypted program data including encrypted verification data, obtained on encrypting, using said preset encryption key, first verification data calculated by preset calculations from program data of said preset program, and a verification program which is a program for executing said preset calculations, and an encryption verification program.

13. The program loading method according to claim 12 wherein said decrypting step decrypts, in decrypting said encrypted program data, said decrypting step decrypts said encrypted verification data and the encrypted verification program into said first verification data, and said verification program, using said preset decryption key;

said storage step stores said first verification data and the verification program, decrypted by said decrypting step, in said storage medium;

said controlling step including a verification data calculating step of calculating second verification data, from the program data of said preset program, stored in said storage step, based on said verification program, before executing said preset program, and a verification data comparing step of comparing the calculated second verification data to the first verification data stored in said storage step;

said readout step reading out said preset program stored in said storage step responsive to coincidence of the first verification data and the second verification data compared to each other by said verification data comparing step.

14. The program loading method according to claim 8 further comprising:

a takeout limiting step of limiting takeout from said external device of said decrypted preset program.

15. A recording medium having recorded thereon a program for loading a preset program, configured for controlling a preset operation of an information processing apparatus, to said information processing apparatus, said program comprising:

an encrypted program data receiving step of receiving encrypted program data obtained on encrypting said preset program using a preset encryption key;

a decrypting step of decrypting said encrypted program data, received by said encrypted program data receiving step, to said preset program, using a preset decoding key; and

a storage step of storing said preset program, decrypted from said encrypted program data by said decrypting step.

16. The recording medium according to claim 15 having recorded thereon a program wherein said encrypted program data receiving step receives encrypted program data transmitted from an external device.

17. The recording medium according to claim 15 having recorded thereon a program further comprising a reproducing step for reproducing a recording medium having recorded thereon encrypted program data which is said preset program encrypted with a preset encryption key, and an encrypted program data receiving step receiving the encrypted program data reproduced by said reproducing step.

18. The recording medium according to claim 15 having recorded thereon a program further comprising an encrypted program data readout step of reading out said encrypted program data from encrypted program data storage means in said information processing apparatus where said encrypted program data are stored;

said encrypted program data receiving step receiving said encrypted program data read out in said encrypted program data readout step.

19. The recording medium according to claim 15 having recorded thereon a program wherein said encrypted program data receiving step receives said encrypted program data including encrypted verification data, obtained on encrypting, using said preset encryption key, first verification data calculated by preset calculations from program data of said preset program, and a verification program which is a program for executing said preset calculations and an encryption verification program.

20. The recording medium according to claim 19 having recorded thereon a program wherein said decrypting step decrypts, in decrypting said encrypted program data, said encrypted verification data and the encrypted verification program into said first verification data and said verification program, respectively, using said preset decryption key;

said storage step stores said first verification data and the verification program, decrypted by said decrypting step, in said storage means;

said controlling step includes a verification data calculating step of calculating second verification data, from the program data of said preset program, stored in said storage means, based on said verification program, before executing said preset program; and

a verification data comparing step of comparing said second verification data, calculated in said verification data calculating step, to said first verification data stored in said storage means;

said readout step reading out said preset program stored in said storage means responsive to coincidence of the first verification data and the second verification data compared to each other by said verification data comparing step.

21. The recording medium according to claim 15 wherein the program recorded on said recording medium further includes a takeout limiting step of limiting takeout of said decrypted preset program from said external device.

22. The recording medium according to claim 15 wherein the information processing apparatus includes, in a controlling unit, said storage means and controlling means for controlling the preset operation of said information processing apparatus based on a program stored in said storage means;

said program recorded on said recording medium further including a program transmitting step of transmitting said preset program decrypted by said decrypting step to the controlling unit, a program receiving step of receiving said preset program transmitted by said program transmitting step to said controlling unit and a program writing step of writing said preset program received by said program receiving step in said storage means.

23. An information processing apparatus having a controlling unit including storage means having stored therein a first program and controlling means for reading out the first program stored in said storage means and for controlling the preset operation of the information processing apparatus based on said first program read out, comprising:

encrypted program data receiving means for receiving encrypted program data which is a second program encrypted using a preset encryption key;

decoding means for decoding said encrypted program data, received by said encrypted program data receiving means, using a preset decoding key; and

program transmitting means for transmitting said second program, decrypted by said decrypting means from said encrypted program data, to said controlling unit;

said controlling unit including program receiving means for receiving said second program transmitted by said transmitting means; and

program writing means for writing said second program received by said program receiving means in said storage means.

24. The information processing apparatus according to claim 23 wherein said encrypted program data receiving means receives said encrypted program data transmitted from an external device.

25. The information processing apparatus according to claim 23 further comprising:

reproducing means for reproducing a recording medium having recorded thereon encrypted program data which is said second program encrypted with a preset encryption key;

said controlling means controlling said reproducing means for reproducing said recording medium responsive to a program update request;

said encrypted program data receiving means receiving the encrypted program data reproduced by said reproducing means.

26. The information processing apparatus according to claim 23 wherein

a wiring interconnecting said program transmitting means and said program receiving means is provided on an inner layer of a multi-layered substrate.

27. The information processing apparatus according to claim 23 wherein said controlling unit is a ball grid array.

28. The information processing apparatus according to claim 23 wherein the encrypted program data received by said encrypted program data receiving means includes encrypted verification data obtained on encryption of first verification data, calculated by preset calculations from program data of said second program, and a verification program, which is a program for executing said preset calculations, using said preset encryption key, and an encryption verification program.

29. The information processing apparatus according to claim 28 wherein

in decrypting said encrypted program data, said decrypting means decrypts said encrypted verification data and the encrypted verification program into said first verification data and said verification program, using said preset decryption key;

said program writing means writing said first verification data and the verification program, decrypted by said decrypting means, in said storage means;

said controlling means calculating second verification data, from the program data of said second program, stored in said storage means, based on said verification program, before executing said second program, and comparing the calculated second verification data to the first verification data stored in said storage means;

said controlling means reading out said second program stored in said storage means responsive to coincidence of the first verification data and the second verification data compared to each other.

30. A program updating method for an information processing apparatus having a controlling unit including storage means having stored therein a first program and controlling means for reading out said first program stored in said storage means and for controlling a preset operation of said information processing apparatus based on said first program as read out, comprising:

an encrypted program data receiving step of receiving encrypted program data, which is a second program encrypted using a preset encryption key, responsive to a program update request requesting the updating of said first program;

a decrypting step of decrypting said encrypted program data, received by said encrypted program data receiving step, to said second program, using a preset decrypting key;

a program transmitting step of transmitting said second program, decrypted from said encrypted program data by said decrypting step;

a program receiving step of receiving said second program transmitted to said controlling unit by said program transmitting step; and

a program writing step of writing said second program, received by said program receiving step, in said storage means.

31. The program updating method according to claim 30 wherein said encrypted program data receiving step receives encrypted program data transmitted from an external device.

32. The program updating method according to claim 30 further comprising:

a reproducing step of reproducing a recording medium, having recorded thereon encrypted program data which is said second program encrypted using a preset encryption key;

said reproducing step reproducing said recording medium responsive to receipt of said program update request;

said encrypted program data receiving step receiving said encrypted program data reproduced by said reproducing step.

33. The program updating method according to claim 30 wherein said encrypted program data receiving means receives said encrypted program data including encrypted verification data, obtained on encryption of first verification data, calculated by preset calculations from program data of said second program, and a verification program, which is a program for executing said preset calculations, using said preset encryption key, and an encryption verification program.

34. The program updating method according to claim 33 wherein

in decrypting said encrypted program data, said decrypting step decrypts said encrypted verification data and the encrypted verification program into said first verification data and said verification program, using said preset decryption key;

said program writing step writing said first verification data, decrypted by said decrypting step, and said verification program, in said storage means;

said method further comprising;

a verification data calculating step of calculating second verification data, from the program data of said second program, stored in said storage means, based on said verification program, before executing said second program;

a verification data comparing step of comparing the second verification data calculated in said verification data calculating step to the first verification data stored in said storage means; and

a program readout step of reading out said second program stored in said storage means responsive to coincidence of the first verification data and the second verification data compared to each other by said verification data comparing step.

35. An information processing apparatus having a data processing unit for performing preset data processing;

said data processing unit including

encrypted program data receiving means for receiving encrypted program data which is a preset program encrypted using a preset encryption key;

decoding means for decoding said encrypted program data, received by said encrypted program data receiving means, to said preset program, using a preset decrypting key;

storage means for storing said preset program, decrypted from said encrypted program data by said decrypting means;

program readout means for reading out said preset program stored in said storage means;

first controlling means for controlling a preset data processing operation in said data processing unit, based on said preset program read out by said program readout means; and

takeout limiting means for limiting the takeout from an external device of said preset program decrypted by said decrypting means and said preset program stored in said storage means.

36. The information processing apparatus according to claim 35 further comprising:

encrypted program data storage means having stored therein said encrypted program data;

said first controlling means reading out said encrypted program data stored in said encrypted program data storage means;

said encrypted program data receiving means receiving said encrypted program data read out by said first controlling means.

37. The information processing apparatus according to claim 35 further comprising:

second controlling means for reading out said encrypted program data stored in said encrypted program data storage means;

said encrypted program data receiving means receiving said encrypted program data read out by said second controlling means.

38. The information processing apparatus according to claim 35 wherein said encrypted program data receiving means receives encrypted program data transmitted from an external device.

39. The information processing apparatus according to claim 35 further comprising:

reproducing means for reproducing a recording medium having recorded thereon encrypted program data which is said preset program encrypted with a preset encryption key;

said first controlling means controlling said reproducing means for reproducing said recording medium;

said encrypted program data receiving means receiving the encrypted program data reproduced by said reproducing means.

40. The information processing apparatus according to claim 35 wherein the encrypted program data received by said encrypted program data receiving means includes encrypted verification data, obtained on encryption of first verification data, calculated by preset calculations from program data of said preset program, and a verification program, which is a program for executing said preset calculations, using said preset encryption key, and an encryption verification program.

41. The information processing apparatus according to claim 40 wherein

in decrypting said encrypted program data, said decrypting means decrypts said encrypted verification data and the encrypted verification program into said first verification data and said verification program, using said preset decryption key;

said storage means stores said first verification data and the verification program, decrypted by said decrypting means;

said first controlling means calculates second verification data, from the program data of said preset program, stored in said storage means, based on said verification program, before executing said preset program, and compares the calculated second verification data to the first verification data stored in said storage means;

said program readout means reading out said preset program stored in said storage means responsive to coincidence of the first verification data and the second verification data compared to each other by said first controlling means.

42. A program loading method in a data processing unit provided in an information processing apparatus, said data processing unit executing preset data processing, said method comprising:

an encrypted program data receiving step of receiving encrypted program data which is a preset program encrypted using a preset encryption key, said preset program being a program for executing the preset data processing in said data processing unit;

a decrypting step of decrypting said encrypted program data, received in said encrypted program data receiving step, into said preset program, using a preset decryption key;

a takeout limiting step of limiting takeout of said decrypted preset program from an external device; and

a storage step of storing said preset program, decrypted in said decrypting step from said encrypted program data, in storage means.

43. The program loading method according to claim 42 wherein said controlling step reads out said encrypted program data from said encrypted program data storage means in the information processing apparatus where said encrypted program data is stored;

said encrypted program data receiving step receiving said encrypted program data as read out.

44. The program loading method according to claim 42 wherein said encrypted program data receiving step receives encrypted program data transmitted from said external device.

45. The program loading method according to claim 42 further comprising:

a reproducing step of reproducing a recording medium having recorded thereon encrypted program data which is said preset program encrypted using a preset encryption key;

said encrypted program data receiving step receiving said encrypted program data reproduced by said reproducing step.

46. The program loading method according to claim 42 wherein said encrypted program data receiving step receives said encrypted program data including encrypted verification data, obtained on encryption of first verification data, calculated by preset calculations from program data of said preset program, and a verification program, which is a program for executing said preset calculations, using said preset encryption key, and an encryption verification program.

47. The program loading method according to claim 46 wherein

in decrypting said encrypted program data, said decrypting step decrypts said encrypted verification data and the encrypted verification program into said first verification data and said verification program, using said preset decryption key;

said storage step stores said first verification data and the verification program, decrypted by said decrypting step, in said storage means;

a verification data calculating step in said controlling step of calculating second verification data, from the program data of said preset program, stored in said storage means, based on said verification program, before executing said preset program; and

a verification data comparing step in said controlling step of comparing the second verification data, calculated by said verification data calculating step, to the first verification data stored in said storage step;

said program readout step reading out said preset program stored in said storage step responsive to coincidence of the first verification data and the second verification data compared to each other by said verification data comparing step.

48. A recording medium having recorded thereon a program for loading a preset program in a data processing unit provided in an information processing apparatus, said data processing unit executing preset data processing;

the program stored in said recording medium including

an encrypted program data receiving step of receiving encrypted program data which is a preset program encrypted using a preset encryption key, said preset program being a program for executing a preset data processing operation in said data processing unit;

a decrypting step of decrypting said encrypted program data, received in said encrypted program data receiving step, into said preset program, using a preset decryption key;

a takeout limiting step of limiting the takeout of said decrypted preset program from an external device; and

a storage step of storing said preset program, decrypted in said decrypting step from said encrypted program data, in storage means.

49. The recording medium according to claim 48 wherein said controlling step reads out said encrypted program data from said encrypted program data storage means provided in the information processing apparatus where said encrypted program data is stored;

said encrypted program data receiving step receiving said encrypted program data as read out by said controlling step.

50. The recording medium according to claim 48 having recorded thereon a program wherein said encrypted program data receiving step receives encrypted program data transmitted from said external device.

51. The recording medium having recorded thereon a program according to claim 48, said program further comprising:

a reproducing step of reproducing a recording medium having recorded thereon encrypted program data which is said preset program encrypted using a preset encryption key;

said encrypted program data receiving step receiving said encrypted program data reproduced b said reproducing step.

52. The program loading method according to claim 48 wherein the encrypted program data received by said encrypted program data receiving step receives said encrypted program data including encrypted verification data obtained on encryption of first verification data, calculated by preset calculations from program data of said preset program, and a verification program, which is a program for executing said preset calculations, using said preset encryption key, and an encryption verification program.

53. The recording medium according to claim 52 wherein

in decrypting said encrypted program data, said decrypting step decrypts said encrypted verification data and the encrypted verification program into said first verification data and said verification program, using said preset decryption key;

said storage step storing said first verification data and the verification program, decrypted by said decrypting step, in said storage means;

a verification data calculating step in said controlling step of calculating second verification data, from the program data of said preset program, stored in said storage means, based on said verification program, before executing said preset program; and

a verification data comparing step in said controlling step of comparing the second verification data calculated by said verification data calculating step to the first verification data stored in said storage means;

said program readout step reading out said preset program stored in said storage means responsive to coincidence of the first verification data and the second verification data compared to each other by said verification data comparing step.

54. A circuit device which is an integration of data processing means of an information processing apparatus adapted for performing preset data processing;

comprising, in an integrated form;

encrypted program data receiving means for receiving encrypted program data which is a preset program encrypted with a preset encryption key;

decrypting means for decrypting said encrypted program data, received by said encrypted program data receiving means, into said preset program, using a preset decryption key;

storage means for storing said preset program decrypted from said encrypted program data by said decrypting means;

program readout means for reading out said preset program stored in said storage means; and

takeout limiting means for limiting the takeout of said preset program decrypted by said decrypting means and said preset program stored in said storage means.

55. The circuit device according to claim 54 further comprising:

controlling means for controlling preset data processing operations in said data processing means based on said preset program read out by said program readout means.

56. The circuit device according to claim 54, provided to an information processing apparatus including encrypted program data storage means having stored therein said encrypted program data;

said controlling means reading out said encrypted program data stored in said encrypted program data storage means;

said encrypted program data receiving means receiving said encrypted program data read out by said controlling means.

57. The circuit device according to claim 54, provided to said information processing apparatus, including encrypted program data storage means, having stored therein said encrypted program data, and second controlling means;

said second controlling means reading out said encrypted program data stored in said encrypted program data storage means;

said encrypted program data receiving means receiving said encrypted program data read out by said second controlling means.

58. The circuit device according to claim 54 wherein said encrypted program data receiving means receives encrypted program data transmitted from an external device.

59. The circuit device according to claim 54, provided to an information processing apparatus including reproducing means for reproducing a recording medium having recorded thereon encrypted program data which is said preset program encrypted using a preset encryption key;

said controlling means controlling said reproducing means for reproducing said recording medium;

said encrypted program data receiving means receiving said encrypted program data reproduced by said reproducing means.

60. The circuit device according to claim 54 wherein the encrypted program data received by said encrypted program data receiving means includes encrypted verification data obtained on encryption of first verification data, calculated by preset calculations from program data of said preset program, and a verification program, which is a program for executing said preset calculations, using said preset encryption key, and an encryption verification program.

61. The circuit device according to claim 60 wherein

in decrypting said encrypted program data, said decrypting means decrypts said encrypted verification data and the encrypted verification program into said first verification data and said verification program, respectively, using said preset decryption key;

said storage means storing said first verification data and the verification program, decrypted by said decrypting means;

said controlling means calculating second verification data, from the program data of said preset program, stored in said storage means, based on said verification program, before executing said preset program, and comparing the second verification data calculated to the first verification data stored in said storage means;

said program readout means reading out said preset program stored in said storage means responsive to coincidence of the first verification data and the second verification data compared to each other by said first controlling means.