Communications method, data processing apparatus, and program

• US 7,272,715 B2
• Filed: 10/30/2002
• Issued: 09/18/2007
• Est. Priority Date: 10/31/2001
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Kubono, Fumio, Sueyoshi, Masahiro, Tateno, Kei
• Primary Examiner(s): Peeso; Thomas R.
• Application Number:
  US10/451,160
• Publication Number:
  US 20040098587A1
• Time in Patent Office: 1,784 Days
• Field of Search: 713/153, 713/161, 713/162, 713/168, 713/182
• US Class Current: 713/156
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273

Abstract

When transferring elements APE forming an application program between SAM units 9a and 9b, management data which specifies identification data of elements, presence of mutual authentication, mode of reference (usage), and a mutual authentication key of each element is prepared and the elements transferred between the SAM units A and 9b based on the management data.

Claims

1. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

storing, at said first data processing apparatus, first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program;

storing, at said second data processing apparatus, second management data indicating a data module permitted to be used by said first application program;

referring to said first management data and sending a request designating said data module intended to be used by said first data processing apparatus to said second data processing apparatus; and

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus from said second data processing apparatus.

2. A communications method as set forth in claim 1, further comprising the steps of,

sending by a first server apparatus a first request to said first data processing apparatus;

and

referring by said first server apparatus to said first management data in accordance with said first request and sending a second request designating said data module intended to be used to said second data processing apparatus,

wherein said first data processing apparatus is connected to said first server apparatus, said second data processing apparatus is connected to a second server apparatus, and said first data processing apparatus and said second data processing apparatus communicate via said first server apparatus and said second server apparatus.

3. A communications method as set forth in claim 2, further comprising the steps of:

confirming whether said data module to be used by said first application program is in a condition usable in said second data processing apparatus;

notifying the confirmed result to said first server apparatus by said second server apparatus; and

sending by said first server apparatus said first request in accordance with said notification to said first data processing apparatus.

4. A communications method as set forth in claim 1, further comprising the steps of:

performing mutual authentication between said first data processing apparatus and said second data processing apparatus; and

sending said request from said first data processing apparatus to said second data processing apparatus.

5. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

having said first data processing apparatus and said second data processing apparatus mutually authenticate each other and, after confirming the legitimacy of the other party, and having said first data processing apparatus send said second data processing apparatus said request; and

holding by said first data processing apparatus said first management data storing key data used for mutual authentication with said second data processing apparatus for using said data module;

holding by said second data processing apparatus said second management data storing key data used for mutual authentication with said first data processing apparatus for causing said data module to be used by said first application program; and

having said first data processing apparatus and said second data processing apparatus mutually authenticate each other using key data stored in said first management data and said second management data.

7. A communications method as set forth in claim 5, further comprising the steps of having said first data processing apparatus end mutual authentication using said key data, then sending said request to said second data processing apparatus, then, without mutual authentication again, sending a request designating another module linked with said key data to said second data processing apparatus.

6. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

having said first data processing apparatus and said second data processing apparatus mutually authenticate each other and, after confirming the legitimacy of the other party, and having said first data processing apparatus send said second data processing apparatus said request;

having said first management data and said second management data store mutual authentication instruction data for designating whether to perform said mutual authentication; and

having said first data processing apparatus and said second data processing apparatus refer to the mutual authentication instruction data to determine whether to perform said mutual authentication.

8. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

holding by said second data processing apparatus said second management data storing data defining a mode of use of said data module to be used by said first application program; and

having said second data processing apparatus refer to said second management data and permit use of said data module by said first application program within the range of mode of use defined.

9. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

holding by said second data processing apparatus said second management data further defining a party permitting the setting of said second management data; and

permitting by said second data processing apparatus the setting of said second management data only to a party defined in said second management data.

10. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

holding by said first data processing apparatus said first management data including tag data indicating the content or application of a data module forming said first application program; and

holding by said second data processing apparatus said second management data including tag data indicating the content or application of a data module forming said second application program.

11. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

holding by said first data processing apparatus said first management data including data for managing use of a port defined in said first application program in response to a right or application;

holding by said second data processing apparatus said second management data including data for managing use of a port defined in said second application program in response to a right or application;

managing by said first data processing apparatus use of a port defined in said first application program in response to a right or application; and

managing by said second data processing apparatus use of a port defined in said second application program in response to a right or application.

12. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

sending by said first data processing apparatus a request designating the type of said data module intended to be used to said second data processing apparatus; and

sending by said second data processing apparatus a data module corresponding to said specified type of data module to said first data processing apparatus.

13. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

sending by said second data processing apparatus together with data module relating to said request, data indicating whether either temporary use or storage and use of said data module by said first data processing apparatus is permitted, to said first data processing apparatus; and

temporarily using or storing and using by said first data processing apparatus a data module received from said second data processing apparatus based on the data.

14. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus;

having said first data processing apparatus and said second data processing apparatus communicate with an integrated circuit via said server apparatus to provide predetermined services; and

having said data module indicate data or a routine for operating a memory area of said integrated circuit.

15. A data processing method for transferring data between a first data processing apparatus executing a first application program and a second data processing apparatus executing a second application program, comprising the steps of:

when said first data processing apparatus holds first management data indicating a data module which said first application program uses among a plurality of data modules forming said second application program and said second data processing apparatus holds second management data indicating a data module allowed to be used for said first application program,

referring to said first management data and sending a request designating said data module intended to be used to said data processing apparatus by said first data processing apparatus;

referring to said second management data in accordance with said request and, when judging that said data module designated by said request is allowed to be used by said first application program, sending the data module specified in said request to said first data processing apparatus by said second data processing apparatus; and

having said first data processing apparatus and said second data processing apparatus simultaneously set a plurality of communication paths for transfer of said data module.

16. A data processing apparatus for transferring data with another data processing apparatus executing a first application program and for executing a second application program, comprising:

an interface for transferring data with said other data processing apparatus,

a memory means for storing a plurality of data modules forming said second application program and management data indicating a data module allowed to be used in said first application program, and

a processing means for referring to said management data in accordance with a request from said other data processing apparatus and, when judging a data module relating to said request is permitted to be used by said first application program, reading out the data module relating to said request from said memory means and sending it to said other data processing apparatus.

17. A data processing apparatus as set forth in claim 16, wherein said processing means performs mutual authentication with said other data processing apparatus and, after they confirm the legitimacy of each other, receives a request from said other data processing apparatus and sends a data module relating to the request to said other data processing apparatus.

18. A data processing apparatus as set forth in claim 16, wherein:

said memory means stores said management data storing data defining a mode of use of said data module by said first application program, and

said processing means refers to said management data and permits use of said data module by said first application program in the range of mode of use defined.

19. A data processing apparatus as set forth in claim 16, wherein:

said processing means communicates with an integrated circuit to provide a predetermined service, and

said memory means stores said data module indicating data or a routine for operating a memory area in said integrated circuit.

20. A program to be executed by a data processing apparatus for transferring data with another data processing apparatus executing a first application program and for executing a second application program, comprising:

a routine receiving from said other data processing apparatus a request for use of a data module,

a routine referring to management data indicating a data module permitted to be used by said first application program in accordance with said request and judging whether to permit said first application program to use the data module relating to said request, and

a routine sending a data module relating to said request to said other data processing apparatus when judging it permissible.