Information providing system and authentication medium access control method and computer program

• US 7,472,425 B2
• Filed: 04/04/2003
• Issued: 12/30/2008
• Est. Priority Date: 05/21/2002
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Matsuo, Takashi, Sato, Junichi, Suzuki, Mitsushige
• Primary Examiner(s): Chai; Longbit
• Application Number:
  US10/489,701
• Publication Number:
  US 20050055452A1
• Time in Patent Office: 2,097 Days
• Field of Search: 726/30
• US Class Current: 726/30
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A service provider makes requests to an information processing center for processing for an IC card in card command units. The information processing center issues encrypted card commands that can be interpreted by the IC card itself based on requests received from the service provider and sends these to the IC card via the computer network, client, and card reader/writer device. This enables an IC card connected to a client to be accessed using secure communication.

Claims

1. An information providing system for providing information to a client in possession of an authentication medium capable of being accessed using key information via a communication medium, comprising:

an information providing device configured (1) to perform information providing services for said client via said communication medium, (2) to make requests to an authentication medium access device for processing of the authentication medium in command units, wherein said authentication medium access device is within a information processing center, and (3) to issue commands for said client to the authentication medium access device and receive decrypted client responses from the authentication medium access device;

the authentication medium access device configured to execute accessing processing accompanying information providing services for said authentication medium possessed by said client via said communication medium in response to information providing services performed by said information providing device, to encrypt said commands received from said information providing device and send encrypted commands to the client, and to decrypt encrypted responses received from said client and send the decrypted responses to said information providing device; and

a connection device configured to hand over key information for accessing said authentication medium in advance between said information providing device and said authentication medium access device, wherein the key information are registered for accessing the authentication medium in advance.

2. The information providing system as disclosed in claim 1, wherein said authentication medium access device carries out verification of said authentication medium, authentication processing for said authentication medium, and/or read and write processing of electronic data stored in said authentication medium.

3. The information providing system as disclosed in claim 1, wherein said connection device includes a secure communication path on said communication medium.

4. The information providing system as disclosed in claim 1, wherein said connection device includes a dedicated line.

5. The information providing system as disclosed in claim 1, wherein said authentication medium access device carries out access operations to said authentication medium in response to requests from said information providing device and sequentially returns access results to said information providing device.

6. The information providing system as disclosed in claim 1, wherein said authentication medium access device carries out verification of said authentication medium, authentication processing for said authentication medium and/or read and write processing of electronic data stored in said authentication medium, in response to requests from said information providing device, and returns results of a series of access processes for said authentication medium to said information providing device.

7. The information providing system as disclosed in claim 1, wherein the communication medium is a wide area network.

8. The information providing system as disclosed in claim 1, wherein the authentication medium access device encrypts commands using a secure socket layer (SSL) protocol.

9. A method for an authentication medium access device to control access to an authentication medium capable of being accessed using key information via a communication medium, comprising:

receiving key information for accessing said authentication medium in advance from an information providing device, wherein the key information are registered for accessing the authentication medium in advance;

receiving requests from the information providing device for processing of the authentication medium in command units, wherein said authentication medium access device is within a information processing center, and receiving commands for a client from the information providing device and sending decrypted client responses to the information providing device; and

executing accessing processing accompanying information providing services for said authentication medium possessed by a client via said communication medium in response to information providing services carried out by said information providing device for said client via said communication medium, said executing including encrypting commands received from said information providing device and sending encrypted commands to the client via the communication medium, and decrypting encrypted responses received from said client via the communication medium and sending the decrypted responses to said information providing device.

10. The method for controlling access to an authentication medium as disclosed in claim 9, wherein verification of said authentication medium, authentication processing for said authentication medium, and/or read and write processing of electronic data stored in said authentication medium are carried out in said executing.

11. The method for controlling access to an authentication medium as disclosed in claim 9, wherein said receiving is executed utilizing a secure communication path established on said communication medium.

12. The method for controlling access to an authentication medium as disclosed in claim 9, wherein said receiving is executed on a dedicated line.

13. The method for controlling access to an authentication medium as disclosed in claim 9, wherein access operations to said authentication medium is carried out in response to requests from said information providing device and access results are sequentially returned to said information providing device in said executing.

14. The method for controlling access to an authentication medium as disclosed in claim 9, wherein verification of said authentication medium, authentication processing for said authentication medium and/or read and write processing of electronic data stored in said authentication medium are carried out in response to requests from said information providing device, and results of a series of access processes for said authentication medium are reported to said information providing device in said executing.

15. A computer readable storage medium including computer executable instructions, wherein the instructions, when executed by a processor, cause the processor to perform a method for an authentication medium access device executing control of accessing an authentication medium accessible using an information key via a communication medium on a computer system, the method comprising:

receiving key information for accessing said authentication medium in advance from an information providing device, wherein the key information are registered for accessing the authentication medium in advance;

receiving requests from the information providing device for processing of the authentication medium in command units, wherein said authentication medium access device is within a information processing center, and receiving commands for a client from the information providing device and sending decrypted client responses to the information providing device; and

executing accessing processing accompanying information providing services for said authentication medium possessed by a client via said communication medium in response to information providing services carried out by said information providing device for said client via said communication medium, said executing including encrypting commands received from said information providing device and sending encrypted commands to the client via the communication medium, and decrypting encrypted responses received from said client via the communication medium and sending the decrypted responses to said information providing device.