INFORMATION PROCESSING DEVICE, INFORMATION PROCESSING METHOD, AND COMPUTER-READABLE RECORDING MEDIUM

• US 20090204809A1
• Filed: 02/04/2009
• Published: 08/13/2009
• Est. Priority Date: 02/12/2008
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Nasu, Masami, Satoh, Jun
• Granted Patent: US 8,997,247 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

An information processing device is arranged to acquire a first public key certificate and a first secret key from a server device by acquiring an individual identification information which is uniquely discriminable for the information processing device from the information processing device and transmitting the individual identification information to the server device. The information processing device is arranged to determine whether the information processing device is permitted to transmit device information to the server device through an encryption communication using the first public key certificate and the first secret key, by acquiring the individual identification information from the information processing device and comparing the acquired individual identification information with the individual identification information associated with at least one of the first public key certificate and the first secret key.

Claims

1. An information processing device which collects device information from a device connected via a first network and transmits the device information to a server device connected via a second network, the information processing device comprising:

a certificate acquiring part configured to acquire a first public key certificate and a first secret key from the server device by acquiring an individual identification information which is uniquely discriminable for the information processing device from the information processing device and transmitting the individual identification information to the server device; and

a judging part configured to determine whether the information processing device is permitted to transmit the device information to the server device through an encryption communication using the first public key certificate and the first secret key, by acquiring the individual identification information from the information processing device and comparing the acquired individual identification information with the individual identification information associated with at least one of the first public key certificate and the first secret key.

2. The information processing device according to claim 1, wherein the certificate acquiring part acquires the first public key certificate and the first secret key which contain a first passphrase generated based on the individual identification information and associated with at least one of the first public key certificate and the first secret key, and

wherein the judging part generates a second passphrase based on the acquired individual identification information, compares the second passphrase with the first passphrase associated with at least one of the first public key certificate and the first secret key, and determines whether the information processing device is permitted to transmit the device information to the server device.

3. The information processing device according to claim 1, further comprising:

a memory part configured to store a second public key certificate and a second secret key which are encrypted by a predetermined key information;

a key information acquiring part configured to acquire the individual identification information from the information processing device, transmit a request of the predetermined key information, containing the individual identification information, to the server device through the second network, and receive the predetermined key information which is encrypted based on the individual identification information; and

a decryption part configured to acquire the individual identification information from the information processing device, decrypt the predetermined key information using the individual identification information, and decrypt the second public key certificate and the second secret key using the decrypted key information,

wherein the certificate acquiring part acquires the first public key certificate and the first secret key, which are uniquely discriminable for the information processing device, through an encryption communication using the decrypted second public key certificate and the decrypted second secret key.

4. The information processing device according to claim 3, wherein the key information acquiring part receives a request identification information which is generated uniquely for each of the encrypted key information and the encrypted request of the predetermined key information,

wherein the information processing device comprises an input part configured to cause a user to input the request identification information, and

wherein the certificate acquiring part does not acquire the first public key certificate and the first secret key when a format of the input request identification information is not in agreement with a predetermined format.

5. An information processing method for use in an information processing device which collects device information from a device connected via a first network and transmits the device information to a server device connected via a second network, the information processing method comprising the steps of:

acquiring a first public key certificate and a first secret key from the server device by acquiring an individual identification information which is uniquely discriminable for the information processing device from the information processing device and transmitting the individual identification information to the server device; and

determining whether the information processing device is permitted to transmit the device information to the server device through an encryption communication using the first public key certificate and the first secret key, by acquiring the individual identification information from the information processing device and comparing the acquired individual identification information with the individual identification information associated with at least one of the first public key certificate and the first secret key.

6. The information processing method according to claim 5, wherein the step of acquiring the first public key certificate and the first secret key acquires the first public key certificate and the first secret key which contain a first passphrase generated based on the individual identification information and associated with at least one of the first public key certificate and the first secret key, and

wherein the step of determining whether the information processing device is permitted generates a second passphrase based on the acquired individual identification information, compares the second passphrase with the first passphrase associated with at least one of the first public key certificate and the first secret key, and determines whether the information processing device is permitted to transmit the device information to the server device.

7. The information processing method according to claim 5, further comprising the steps of:

storing a second public key certificate and a second secret key which are encrypted by a predetermined key information;

acquiring the individual identification information from the information processing device;

transmitting a request of the predetermined key information, containing the individual identification information, to the server device through the second network;

receiving the predetermined key information which is encrypted based on the individual identification information;

acquiring the individual identification information from the information processing device;

decrypting the predetermined key information using the individual identification information; and

decrypting the second public key certificate and the second secret key using the decrypted key information,

wherein the step of acquiring the first public key certificate and the first secret key acquires the first public key certificate and the first secret key, which are uniquely discriminable for the information processing device, through an encryption communication using the decrypted second public key certificate and the decrypted second secret key.

8. The information processing method according to claim 7, wherein the step of receiving the predetermined key information receives a request identification information which is generated uniquely for each of the encrypted key information and the encrypted request of the predetermined key information,

wherein the information processing method comprises a step of causing a user to input the request identification information, and

wherein the step of acquiring the first public key certificate and the first secret key does not acquire the first public key certificate and the first secret key when a format of the input request identification information is not in agreement with a predetermined format.

9. A computer-readable recording medium storing a program which, executed by a computer, causes the computer to perform an information processing method for use in an information processing device which collects device information from a device connected via a first network and transmits the device information to a server device connected via a second network, the information processing method comprising the steps of:

acquiring a first public key certificate and a first secret key from the server device by acquiring an individual identification information which is uniquely discriminable for the information processing device from the information processing device and transmitting the individual identification information to the server device; and

determining whether the information processing device is permitted to transmit the device information to the server device through an encryption communication using the first public key certificate and the first secret key, by acquiring the individual identification information from the information processing device and comparing the acquired individual identification information with the individual identification information associated with at least one of the first public key certificate and the first secret key.

10. The computer-readable recording medium according to claim 9, wherein the step of acquiring the first public key certificate and the first secret key acquires the first public key certificate and the first secret key which contain a first passphrase generated based on the individual identification information and associated with at least one of the first public key certificate and the first secret key, and

wherein the step of determining whether the information processing device is permitted generates a second passphrase based on the acquired individual identification information, compares the second passphrase with the first passphrase associated with at least one of the first public key certificate and the first secret key, and determines whether the information processing device is permitted to transmit the device information to the server device.

11. The computer-readable recording medium according to claim 9, wherein the information processing method further comprises the steps of:

storing a second public key certificate and a second secret key which are encrypted by a predetermined key information;

acquiring the individual identification information from the information processing device;

transmitting a request of the predetermined key information, containing the individual identification information, to the server device through the second network;

receiving the predetermined key information which is encrypted based on the individual identification information;

acquiring the individual identification information from the information processing device;

decrypting the predetermined key information using the individual identification information; and

decrypting the second public key certificate and the second secret key using the decrypted key information,

wherein the step of acquiring the first public key certificate and the first secret key acquires the first public key certificate and the first secret key, which are uniquely discriminable for the information processing device, through an encryption communication using the decrypted second public key certificate and the decrypted second secret key.

12. The computer-readable recording medium according to claim 11, wherein the step of receiving the predetermined key information receives a request identification information which is generated uniquely for each of the encrypted key information and the encrypted request of the predetermined key information,

wherein the information processing method comprises a step of causing a user to input the request identification information, and

wherein the step of acquiring the first public key certificate and the first secret key does not acquire the first public key certificate and the first secret key when a format of the input request identification information is not in agreement with a predetermined format.