Client apparatus, device verification apparatus, and verification method

• US 20060190987A1
• Filed: 02/03/2006
• Published: 08/24/2006
• Est. Priority Date: 02/04/2005
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Inamura, Hiroshi, Takeshita, Atsushi, Ohta, Ken
• Granted Patent: US 7,693,835 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

A client apparatus for utilizing services by executing service programs includes a policy holding unit, a verification unit, a verification result holding unit, and a verification result notification unit. The policy holding unit holds a service-specific verification policy pre-checked by a device verification apparatus. The verification unit verifies an operation and configuration of the client apparatus itself by using the verification policy when the service program is executed. The verification result notification unit notifies the verification result to the device verification apparatus, which requests the verification result.

Claims

1. A client apparatus for utilizing services by executing a provided service program, the client apparatus, comprising:

a policy holding unit configured to hold a service-specific verification policy pre-checked by a device verification apparatus;

a verification unit configured to verify an operation of the client apparatus itself by using the verification policy when the service program is executed;

a verification result holding unit configured to hold a verification result of the verification unit; and

a verification result notification unit configured to notify the verification result to the device verification apparatus which requests the verification result.

2. The client apparatus of claim 1, wherein the policy holding unit checks security of the verification policy.

3. The client apparatus of claim 1, wherein the policy holding unit obtains the update of a policy from the device verification apparatus to update the policy.

4. The client apparatus of claim 1, wherein the verification unit executes the verification upon reception of a notification from an external device.

5. The client apparatus of claim 1, further comprising a monitoring unit configured to monitor the operation and configuration information of the client apparatus, and notifies monitoring information to the verification unit.

6. The client apparatus of claim 1, wherein the verification result notification unit notifies the verification result to the device verification apparatus at the timing designated by the verification policy.

7. The client apparatus of claim 1, wherein the verification policy contains a command of calling a function of the client apparatus, and the verification unit calls the function according to the verification result.

8. A device verification apparatus comprising:

a policy holding unit configured to hold a verification policy corresponding to a service program;

a policy verification unit configured to check security of the verification policy;

a policy deployment unit configured to deploy the verification policy pre-checked by the policy verification unit according to a request of a client apparatus which executes the service program; and

a verification result holding unit configured to hold a verification result obtained from the client apparatus which checks its own operation by using the verification policy when the service program is executed.

9. The device verification apparatus of claim 8, further comprising a service provisioning control unit configured to decide permission of access from the client apparatus to a service apparatus based on the verification result.

10. The device verification apparatus of claim 8, wherein the policy holding unit obtains an updated verification policy from the server apparatus to update the policy.

11. The device verification apparatus of claim 8, further comprising a verification result requesting unit configured to request the client apparatus to report the verification result.

12. The device verification apparatus of claim 11, wherein the verification result requesting unit requests the client apparatus to report the verification result upon reception of a request from an external device.

13. A verification method for verifying a client apparatus for utilizing services by executing service programs, the verification method, comprising:

checking security of the verification policy corresponding to the service program;

deploying the verification policy, which is pre-checked by the checking step, in a client apparatus which executes the service program;

checking an operation of the client apparatus itself by using the verification policy when the service program is executed; and

notifying the verification result to a device verification apparatus which requests the verification result.