INFORMATION PROCESSING APPARATUS, PROGRAM, STORAGE MEDIUM AND INFORMATION PROCESSING SYSTEM

• US 20110029779A1
• Filed: 07/13/2010
• Published: 02/03/2011
• Est. Priority Date: 07/29/2009
• Status: Active Grant

• Current Assignee: FeliCa Networks, Inc
• Original Assignee: FeliCa Networks, Inc
• Inventors: Watanabe, Keitarou, Hanaki, Naofumi, Kato, Shinichi, Kamino, Itsuki, Sekiya, Shuichi
• Granted Patent: US 8,892,889 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

Provided is an information processing apparatus including a reception unit that receives a request for access to an IC chip from an application having access right information for accessing to the IC chip, an acquisition unit that acquires an authentication information for authenticating the application from an external server based on the access right information contained the request for access received by the reception unit, an authentication unit that authenticates the application based on the authentication information obtained by the acquisition unit, and a control unit that controls an access of the application to the IC chip based on an authentication result by the authentication unit.

Claims

1. An information processing apparatus comprising:

a reception unit that receives a request for access to an IC chip from an application having access right information for accessing to the IC chip;

an acquisition unit that acquires an authentication information for authenticating the application from an external server based on the access right information contained the request for access received by the reception unit;

an authentication unit that authenticates the application based on the authentication information obtained by the acquisition unit; and

a control unit that controls an access of the application to the IC chip based on an authentication result by the authentication unit.

2. The information processing apparatus according to claim 1, further comprising:

a verification unit that has a first public key of a key pair having a first secret key and the first public key,

wherein the access right information contains a first digital signature using the first secret key of the first key pair,

wherein the authentication information contains a second digital signature using the first secret key of the first key pair, and

wherein the verification unit verifies the first digital signature contained in the access right information, and verifies the second digital signature contained in the authentication information.

3. The information processing apparatus according to claim 1,

wherein the acquisition unit obtains binary data of the application from the application,

wherein the authentication information contains a signature value of the application using a second secret key of a second key pair that has the second secret key and a second public key, and the second public key of the second key pair, and

wherein the authentication unit authenticates the application by comparing the binary data of the application obtained by the acquisition unit, and a decrypted data that is the signature value of the application contained in the authentication information decrypted using the second public key of the second key pair contained in the authentication information.

4. The information processing apparatus according to claim 1,

wherein the application has a third public key of a third key pair having a third secret key and the third public key, and a third digital signature using the third secret key of the third key pair,

wherein the acquisition unit obtains the third public key of the third key pair from the application,

wherein the authentication information contains the third public key of the third key pair, and

wherein the authentication unit authenticates the application by comparing the third public key of the third key pair obtained by the acquisition unit, and the third public key of the third key pair contained in the authentication information.

5. The information processing apparatus according to claim 1, further comprising:

a storage unit that stores command information for access to the IC chip, which is included in the access right information contained by the application that has been authenticated by the authentication unit,

wherein the control unit permits the application to access to the IC chip when a command for access to the IC chip from the application is contained in the command information for access, which is stored in the storage unit, and

wherein the control unit prevents the application from accessing to the IC chip when the command for access to the IC chip from the application is not contained in the command information for access, which is stored in the storage unit.

6. The information processing apparatus according to claim 5,

wherein the storage unit further stores accessible area information of the IC chip, which is included in the access right information contained by the application that has been authenticated by the authentication unit, and

wherein the control unit restricts an accessible area of the IC chip to be accessed by the application based on the accessible area information stored in the storage unit.

7. The information processing apparatus according to claim 1, further comprising:

a retention unit that retains the authentication information obtained by the acquisition unit,

wherein the authentication unit authenticates the application based on the authentication information retained by the retention unit.

8. A program for causing a computer to function as:

a reception unit that receives a request for access to an IC chip from an application having an access right information for accessing to the IC chip;

an acquisition unit that acquires an authentication information for authenticating the application from an external server based on the access right information contained in the request for access received by the reception unit;

an authentication unit that authenticates the application based on the authentication information obtained by the acquisition unit; and

a control unit that controls an access of the application to the IC chip based on an authentication result by the authentication unit.

9. A storage medium storing a program that causes a computer to function as:

a reception unit that receives a request for access to an IC chip from an application having an access right information for accessing to the IC chip;

an acquisition unit that acquires an authentication information for authenticating the application from an external server based on the access right information contained in the request for access received by the reception unit;

an authentication unit that authenticates the application based on the authentication information obtained by the acquisition unit; and

a control unit that controls an access of the application to the IC chip based on an authentication result by the authentication unit.

10. An information processing system comprising:

an information processing apparatus; and

an external server that is capable of communication with the information processing apparatus,

wherein the information processing apparatus including;

a reception unit that receives a request for access to an IC chip from an application having access right information for accessing to the IC chip;

an acquisition unit that acquires an authentication information for authenticating the application from the external server based on the access right information contained in the request for access received by the reception unit;

an authentication unit that authenticates the application based on the authentication information obtained by the acquisition unit; and

a control unit that controls an access of the application to the IC chip based on an authentication result by the authentication unit.