INFORMATION PROCESSING SERVER, INFORMATION PROCESSING APPARATUS, AND INFORMATION PROCESSING METHOD

• US 20100332845A1
• Filed: 06/21/2010
• Published: 12/30/2010
• Est. Priority Date: 06/29/2009
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Asaka, Kotaro
• Application Number:
  US12/819,895
• Publication Number:
  US 20100332845A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Methods and apparatuses for selectively performing at least one of encryption or decryption of data and for requesting a process. An information processing server includes a communication unit configured to receive from an information processing apparatus a processing request and a cryptographic key, and includes first and second storage units configured to temporarily store the received cryptographic key and to store data. The information processing server also includes a process determining unit configured to determine a type of process requested based on the processing request, and an encryption processing unit configured to selectively perform, based on the determined type of process requested, at least one of encryption or decryption on the stored data using the cryptographic key. The cryptographic key temporarily stored in the first storage unit is deleted after the at least one of encryption or decryption on the stored data has been selectively performed.

Claims

1. An information processing server, comprising:

a communication unit configured to receive from an information processing apparatus a processing request and a cryptographic key corresponding to the processing request;

a first storage unit configured to temporarily store the cryptographic key received by the communication unit;

a second storage unit configured to store data;

a process determining unit configured to determine a type of process requested based on the processing request;

an encryption processing unit configured to selectively perform, based on the determined type of process requested, at least one of encryption or decryption on the data stored in the second storage unit using the cryptographic key; and

a cryptographic key control unit configured to delete the cryptographic key temporarily stored in the first storage unit after the at least one of encryption or decryption on the data stored in the second storage unit has been selectively performed by the encryption processing unit.

2. The information processing server according to claim 1, wherein

the process determining unit, the encryption processing unit, and the cryptographic key control unit are included in a single control unit.

3. The information processing server according to claim 1, wherein

the second storage unit is configured to store a plurality of encrypted data associated with a plurality of different information processing apparatuses, the plurality of encrypted data being encrypted using different cryptographic keys.

4. The information processing server according to claim 3, wherein

the communication unit is configured to receive identification information indicating the information processing apparatus that transmitted the processing request;

and

when the encryption processing unit performs the decryption based on the determined type of process requested, the encryption processing unit decrypts the encrypted data associated with the one of the plurality of different information processing apparatuses corresponding to the identification information using the cryptographic key.

5. The information processing server according to claim 1, wherein

the communication unit is configured to receive identification information indicating the information processing apparatus that transmitted the processing request, and

when the encryption processing unit performs the encryption based on the determined type of process requested, the encryption processing unit encrypts the data and stores the encrypted data in the second storage unit in association with the identification information.

6. The information processing server according to claim 1, wherein

the communication unit is configured to relay communications related to a service between the information processing apparatus and a service providing server.

7. The information processing server according to claim 1, wherein

the encryption processing unit is configured to only use the temporarily stored cryptographic key once to selectively perform, based on the determined type of process requested, the at least one of encryption or decryption on the data stored in the second storage unit, before the temporarily stored cryptographic key is deleted by the cryptographic key control unit.

8. The information processing server according to claim 1, wherein

the second storage unit is configured to store encrypted account information for accessing a service provided by a service providing server;

and

when the process determining unit determines that the type of process requested is a service login request,

the encryption processing unit decrypts the encrypted account information for accessing the service, corresponding to the service login request, stored in the second storage unit using the cryptographic key; and

the communication unit transmits the decrypted account information to the service providing server.

9. The information processing server according to claim 1, wherein

when the process determining unit determines the type of process requested includes requesting account information from an external apparatus,

the communication unit is configured to transmit a request for the account information to the external apparatus, and to receive the account information from the external apparatus, and

the encryption processing unit is configured to encrypt the account information received from the external apparatus using the cryptographic key temporarily stored in the first storage unit.

10. An information processing server, comprising:

means for receiving from an information processing apparatus a processing request and a cryptographic key corresponding to the processing request;

means for temporarily storing the cryptographic key received by the means for receiving;

means for storing data;

means for determining a type of process requested based on the processing request;

means for selectively performing, based on the determined type of process requested, at least one of encryption or decryption on the data stored in the means for storing using the cryptographic key; and

means for deleting the cryptographic key temporarily stored in the means for temporarily storing after the at least one of encryption or decryption on the data stored in the means for storing has been selectively performed by the means for selectively performing.

11. A method of using an information processing server for selectively performing at least one of encryption or decryption on data, comprising:

receiving from an information processing apparatus a processing request and a cryptographic key corresponding to the processing request;

temporarily storing the received cryptographic key;

determining, by the information processing server, a type of process requested based on the processing request;

selectively performing, by the information processing server, based on the determined type of process requested, the at least one of encryption or decryption on the data stored in the information processing server using the cryptographic key; and

deleting the temporarily stored cryptographic key after the at least one of encryption or decryption on the data stored in the information processing server has been selectively performed in the selectively performing step.

12. A non-transitory computer-readable storage medium having embedded therein instructions, which when executed by a processor, cause the processor to perform a method for selectively performing at least one of encryption or decryption on data, comprising:

receiving from an information processing apparatus a processing request and a cryptographic key corresponding to the processing request;

temporarily storing the received cryptographic key;

determining a type of process requested based on the processing request;

selectively performing, based on the determined type of process requested, the at least one of encryption or decryption on the data stored in the information processing server using the cryptographic key; and

deleting the temporarily stored cryptographic key after the at least one of encryption or decryption on the data stored in the information processing server has been selectively performed in the selectively performing step.

13. An information processing apparatus, comprising:

a storage unit configured to store at least one cryptographic key for at least one of encryption or decryption;

a communication unit configured to send a processing request to an information processing server, and to send a stored cryptographic key corresponding to the processing request to the information processing server based on whether the processing request requires the information processing server to perform the at least one of encryption or decryption on data stored in the information processing server, wherein

the communication unit sends the stored cryptographic key to the information processing server when the processing request sent by the communication unit requires the information processing server to perform the at least one of encryption or decryption on the data stored in the information processing server.

14. The information processing apparatus according to claim 13, further comprising:

a processing unit configured to generate the processing request.

15. The information processing apparatus according to claim 13, wherein

the communication unit sends the stored cryptographic key to the information processing server each time the processing request sent by the communication unit requires the information processing server to perform the at least one of encryption or decryption on the data stored in the information processing server.

16. The information processing apparatus according to claim 13, further comprising:

an encryption processing unit configured to generate the at least one cryptographic key for the at least one of the encryption or decryption.

17. A method of using an information processing apparatus for requesting an information processing server to perform a process, the method comprising:

storing at least one cryptographic key for at least one of encryption or decryption;

sending, by the information processing apparatus, a processing request and a stored cryptographic key corresponding to the processing request to the information processing server based on whether the processing request requires the information processing server to perform the at least one of encryption or decryption on data stored in the information processing server, wherein

the sending step includes sending the stored cryptographic key to the information processing server when the processing request requires the information processing server to perform the at least one of encryption or decryption on the data stored in the information processing server.

18. A non-transitory computer-readable storage medium having embedded therein instructions, which when executed by a processor, cause the processor to perform a method for requesting an information processing server to perform a process, the method comprising:

storing at least one cryptographic key for at least one of encryption or decryption;

sending a processing request and a stored cryptographic key corresponding to the processing request to the information processing server based on whether the processing request requires the information processing server to perform the at least one of encryption or decryption on data stored in the information processing server, wherein

the sending step includes sending the stored cryptographic key to the information processing server when the processing request requires the information processing server to perform the at least one of encryption or decryption on the data stored in the information processing server.

19. An information processing system, comprising:

an information processing apparatus, including

a first storage unit configured to store at least one cryptographic key for at least one of encryption or decryption, and

a first communication unit configured to send a processing request to an information processing server, and to send a stored cryptographic key corresponding to the processing request to the information processing server based on whether the processing request requires the information processing server to perform the at least one of encryption or decryption on data stored in the information processing server; and

the information processing server, including

a second communication unit configured to receive from the information processing apparatus the processing request and the cryptographic key corresponding to the processing request,

a second storage unit configured to temporarily store the cryptographic key received by the second communication unit,

a third storage unit configured to store the data;

a process determining unit configured to determine a type of process requested based on the processing request,

an encryption processing unit configured to selectively perform, based on the determined type of process requested, the at least one of encryption or decryption on the data stored in the third storage unit using the cryptographic key, and

a cryptographic key control unit configured to delete the cryptographic key temporarily stored in the second storage unit after the at least one of encryption or decryption on the data stored in the third storage unit has been selectively performed by the encryption processing unit.

20. A method of using an information processing system, including an information processing apparatus and an information processing server, for selectively performing at least one of encryption or decryption on data, comprising:

storing at least one cryptographic key for the at least one of encryption or decryption;

sending, by the information processing apparatus, a processing request and a stored cryptographic key corresponding to the processing request to the information processing server based on whether the processing request requires the information processing server to perform the at least one of encryption or decryption on the data stored in the information processing server;

receiving, by the information processing server, the processing request and the cryptographic key corresponding to the processing request;

temporarily storing, by the information processing server, the received cryptographic key;

determining, by the information processing server, a type of process requested based on the processing request;

selectively performing, by the information processing server, based on the determined type of process requested, the at least one of encryption or decryption on the data stored in the information processing server using the cryptographic key; and

deleting the temporarily stored cryptographic key after the at least one of encryption or decryption on the data stored in the information processing server has been selectively performed in the selectively performing step.