INFORMATION PROCESSING APPARATUS, SERVER APPARATUS, MEDIUM RECORDING INFORMATION PROCESSING PROGRAM AND INFORMATION PROCESSING METHOD

• US 20090063853A1
• Filed: 08/26/2008
• Published: 03/05/2009
• Est. Priority Date: 08/28/2007
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Furuta, Toru, KASSAI, Kunihiko
• Granted Patent: US 8,589,690 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys

Abstract

A client PC 10 adapted to be connected to a server apparatus 20 has a first information transmission section that transmits an ID required for authentication by the server apparatus 20 to the server apparatus 20, a second information acquiring section that acquires a master key to be obtained as a result of being authenticated by the server apparatus 20 from the server apparatus 20, a cryptographic key generation section that generates a cryptographic key according to the first information and the second information, an encryption section that encrypts data by means of the cryptographic key and an encrypted data transmission section that transmits the encrypted data encrypted by the encryption section to the server apparatus 20.

Claims

1. An information processing apparatus adapted to be connected to a server apparatus, the apparatus comprising:

a first information transmission section that transmits first information required for authentication by the server apparatus to the server apparatus;

a second information acquiring section that acquires second information to be obtained as a result of being authenticated by the server apparatus from the server apparatus;

a cryptographic key generation section that generates a cryptographic key according to the first information and the second information;

an encryption section that encrypts data to be transmitted to the server apparatus by means of the cryptographic key; and

an encrypted data transmission section that transmits the encrypted data encrypted by the encryption section to the server apparatus.

2. The information processing apparatus according to claim 1, wherein

the first information is information assigned to a single or to each of a plurality of applications.

3. The information processing apparatus according to claim 1, further comprising:

an encrypted data acquisition section that acquires the encrypted data from the server apparatus; and

an decryption section that decrypts the encrypted data encrypted by the cryptographic key generated according to the first information and the second information by means of the cryptographic key.

4. The information processing apparatus according to claim 1, wherein

the second information is encrypted, and

the second information acquisition section has a second information decryption section that decrypts the second information.

5. A server apparatus adapted to make cipher communications with a client apparatus, the apparatus comprising:

an authentication section that authenticates the client apparatus by first information transmitted from the client apparatus and required for the authentication;

a second information transmission section that transmits second information to be utilized by the client apparatus to generate a cryptographic key to the client apparatus; and

a data reception section that receives the encrypted data encrypted by the client apparatus according to the first information and the second information.

6. The server apparatus according to claim 5, wherein

the data reception section stores the received encrypted data.

7. The server apparatus according to claim 6, wherein

the data reception section adds information according to the first information to the encrypted data and stores them.

8. The server apparatus according to claim 6, wherein

the data reception section transmits the stored encrypted data in response to a request.

9. The server apparatus according to claim 5, further comprising:

a second information generation section that generates the second information.

10. The server apparatus according to claim 9, wherein

the second information generation section generates the second information according to the clock time when the server apparatus is installed.

11. The server apparatus according to claim 5, further comprising:

a second information encryption section that encrypts the second information so as to be decrypted by the client apparatus.

12. A medium recording a computer-readable information processing program capable of being connected to a server apparatus, the medium being adapted to cause a computer to execute:

a first information transmission step that transmits first information required for authentication by the server apparatus to the server apparatus;

a second information acquisition step that acquires second information obtained as a result of authentication by the server apparatus from the server apparatus;

a cryptographic key generation step that generates a cryptographic key according to the first information and the second information;

an encryption step that encrypts data to be transmitted to the server apparatus by means of the cryptographic key; and

an encrypted data transmission step that transmits the encrypted data encrypted in the encryption step to the server apparatus.

13. The medium recording an information processing program according to claim 12, wherein

the first information is information assigned to a single or to each of a plurality of applications.

14. The medium recording an information processing program according to claim 12, adapted to cause a computer to execute further:

an encrypted data acquisition step that acquires the encrypted data; and

an decryption step that decrypts the encrypted data encrypted by the cryptographic key generated according to the first information and the second information by means of the cryptographic key.

15. The medium recording an information processing program according to claim 12, wherein

the second information is encrypted, and

the second information acquisition section has a second information decryption step that decrypts the second information.

16. An information processing method for connecting to a server apparatus, the method comprising:

a first information transmission step that transmits first information required for authentication by the server apparatus to the server apparatus;

a second information acquisition step that acquires second information obtained as a result of authentication by the server apparatus from the server apparatus;

a cryptographic key generation step that generates a cryptographic key according to the first information and the second information;

an encryption step that encrypts data to be transmitted to the server apparatus by means of the cryptographic key; and

an encrypted data transmission step that transmits the encrypted data encrypted in the encryption step to the server apparatus.

17. The information processing method according to claim 16, wherein

the first information is information assigned to a single or to each of a plurality of applications.

18. The information processing method according to claim 16, further comprising:

an encrypted data acquisition step that acquires the encrypted data; and

an decryption step that decrypts the encrypted data encrypted by the cryptographic key generated according to the first information and the second information by means of the cryptographic key.

19. The information processing method according to claim 16, wherein

the second information is encrypted, and

the second information acquisition step has a second information decryption step that decrypts the second information.