Service providing method and integrated circuit

• US 7,519,655 B2
• Filed: 05/24/2002
• Issued: 04/14/2009
• Est. Priority Date: 05/24/2001
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Morita, Tadashi, Arisawa, Shigeru, Fukada, Akira, Nakada, Kenji, Yamagata, Akihiko
• Primary Examiner(s): Maung; Zarni
• Application Number:
  US10/333,869
• Publication Number:
  US 20040054710A1
• Time in Patent Office: 2,517 Days
• Field of Search: 709217-218, 709/203, 709226-230
• US Class Current: 709/203
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor

Abstract

An application program relating to a process of an integrated circuit 21 is stored in a virtual integrated circuit 21 storage area server apparatus 13. Following a mutual authentication between the IC 21 and the virtual IC storage area server apparatus 13 through a portable communication function unit 20, the server apparatus 13 executes the application program. Additionally, through the IC 21, the portable communication function unit 20, a wireless communication line 17, and a network 18, communicate with an IC_R/W apparatus 11 and perform a process relating to a service in collaboration with each other.

Claims

1. A service providing method wherein a communication apparatus and a processing apparatus communicate with each other in response to a service use request issued from the communication apparatus to provide a service to a user of the communication apparatus, comprising the steps of:

performing communication between a server apparatus storing a program defining a process relating to the service and the communication apparatus to judge if use of the program is permitted or not in response to the service use request;

executing the program by the server apparatus when use of the program is permitted; and

performing communication between the server apparatus and the processing apparatus through the communication apparatus in response to the execution of the program by the server apparatus to provide the service to said user.

2. A service providing method as set forth in claim 1, wherein the server apparatus stores the program relating to the service to be provided to a user of the communication apparatus in a storage area allocated in advance to the communication apparatus.

3. A service providing method as set forth in claim 2, wherein the communication apparatus transmits the service use request, which indicates the use of the storage area allocated in advance to the communication apparatus, to the server apparatus.

4. A service providing system comprising:

a communication apparatus;

a processing apparatus that transfers data with the communication apparatus and used in a service to a user of the communication apparatus; and

a server apparatus that stores a program defining a process relating to the service, wherein the server apparatus and the communication apparatus communicate with each other in response to a service use request issued from the communication apparatus to judge if use of the program is permitted or not,

the server apparatus executes the program when use of the program is permitted; and

the server apparatus and said processing apparatus communicate with each other through the communication apparatus in response to the execution of the program by the server apparatus to provide the service to the user.

5. A server apparatus communicating with a communication apparatus and a processing apparatus that transfers data with the communication apparatus and used in a service to a user of the communication apparatus, comprising:

a storing device for storing a program defining a process relating to the service;

a receiving device for receiving a service use request from the communication apparatus;

an authentication device for authenticating if the service use request is legitimate or not; and

when it is judged that the service use request is legitimate, a controlling device for reading a program defining a process relating to the service from the storing device, executing the read program, and while communicating with the processing apparatus through the communication apparatus, performing a process for providing a service to the user in collaboration with the processing apparatus in response to the execution of the program.

6. A communication method performed by a server apparatus to communicate with a communication apparatus and a processing apparatus that transfers data with the communication apparatus and used in a service to a user of the communication apparatus, comprising the steps of:

authenticating if the service use request is legitimate or not when a service use request is received from the communication apparatus;

reading a program defining a process relating to the service from said storing device when judged that the service use request is legitimate; and

executing the read program while communicating with the processing apparatus through the communication apparatus in response to the execution of the program, performing a process for providing a service to the user in collaboration with the processing apparatus.

7. A communication method performing communication using a first communication apparatus including an integrated circuit and a communication circuit, and a processing apparatus that transfers data with the integrated circuit and used in service relating to the integrated circuit, comprising the steps of:

transmitting by the integrated circuit a use request of said program through the communication circuit to a second communication apparatus storing a program defining a process relating to the service and executing the same; and

executing by the second communication apparatus a program relating to the use request when it is judged that the use request is legitimate while the integrated circuit relays communication between the processing apparatus and the second communication apparatus conducted through the communication circuit, performing by the processing apparatus and the second communication apparatus a process relating to the service in collaboration with each other in response to the execution of the program by the second communication apparatus.

8. A communication method as set forth in claim 7, further comprising a step of storing the program relating to the first communication apparatus in a storage area allocated in advance to the first communication apparatus among storage areas in the second communication apparatus.

9. A communication method as set forth in claim 7, further comprising a step of transmitting the use request, which indicates use of the storage area allocated in advance to the first communication apparatus, to the second communication apparatus.

10. A communication method as set forth in claim 7, further comprising the steps of:

transmitting from the first communication apparatus to the second communication apparatus, a program select instruction specifying a program to be selected and used after the integrated circuit transmits the use request to the second communication apparatus; and

reading and executing a program specified by the program select instruction using the second communication apparatus.

11. A communication method as set forth in claim 7, further comprising the steps of:

outputting the program select instruction, which specifies the program to be selected and used from the processing apparatus, to the integrated circuit;

transmitting the use request together with the program select instruction from the integrated circuit to the second communication apparatus; and

selecting and executing a program specified by the program select instruction second communication apparatus.

12. A communication method as set forth in claim 7, further comprising the steps of:

conducting mutual authentication with the processing apparatus and the second communication apparatus when the integrated circuit receives a use permission instruction confirming the legitimacy of the processing apparatus and the second communication apparatus, wherein the processing apparatus and the second communication apparatus communicate through the integrated circuit and the communication circuit to perform a process relating to the service in collaboration with each other.

13. A communication method as set forth in claim 7, further comprising the steps of:

transmitting from the first communication apparatus to the second communication apparatus a storage area allocation request requesting that the entire or at least a portion of the storage area in the second communication apparatus is to be allocated for use for the first communication apparatus; and

allocating a storage area to the first communication apparatus using the second communication apparatus in response to the storage area allocation request.

14. A communication method as set forth in claim 7, further comprising the steps of:

transmitting intrinsic data of the integrated circuit through the communication circuit to the second communication apparatus after the integrated circuit and the second communication apparatus have authenticated one another'"'"'s legitimacy; and

managing the intrinsic data and the storage area allocated to the first communication apparatus.

15. A communication method as set forth in claim 7, wherein:

the first communication apparatus is a portable type communication apparatus;

the communication circuit is a wireless communication circuit performing communication using a wireless communication network;

the second communication apparatus is connected to a network; and

the integrated circuit communicates with the second communication apparatus through the communication circuit, the wireless communication network, and the network.

16. A communication method as set forth in claim 7, wherein the integrated circuit comprises a first interface for transferring data with the processing apparatus and a second interface for transferring data with the communication circuit.

17. A communication method as set forth in claim 7, wherein the integrated circuit is a tamper-resistant circuit.

18. A communication system comprising:

a first communication apparatus including an integrated circuit and a communication circuit;

a processing apparatus that transfers data with the integrated circuit and is used in a service relating to the integrated circuit; and

a second communication apparatus that stores a program defining a process relating to the service and executes the same, wherein the integrated circuit transmits the program use request through the communication circuit to the second communication apparatus, and wherein the second communication apparatus executes a program relating to the use request after it has been judged that the use request is legitimate, while the integrated circuit relays communication between the processing apparatus and the second communication apparatus conducted through the communication circuit, the processing apparatus and the second communication apparatus perform a process relating to the service in collaboration with each other in response to the execution of the program by the second communication apparatus.

19. A communication apparatus communicating with another communication apparatus comprising an integrated circuit and a communication circuit, and a processing apparatus that transfers data with the integrated circuit and used in a service relating to the integrated circuit, comprising:

a storage device means for storing a program defining a process relating to the service;

a receiving device for receiving a program use request from the integrated circuit through the communication circuit;

an authentication device for authenticating if the use request is legitimate or not; and

when it is judged that the use request is legitimate, a controlling device for reading a program defining a process relating to the service from the storage device, executing the read program, and communicating with the processing apparatus through the communication circuit and the integrated circuit and performing a process relating to the service in collaboration with the processing apparatus in response to the execution of the program.

20. A communication apparatus as set forth in claim 19, wherein among a plurality of storage areas of the storage device, the program relating to the communication apparatus is stored in a storage area allocated in advance to the communication apparatus.

21. A communication apparatus as set forth in claim 19, wherein:

the receiving device receives, from the another communication apparatus, the use request indicating that the storage area allocated in advance to the another communication apparatus will be used; and

the controlling device transmits to the integrated circuit the use permit instruction indicating that use of the storage area by the another communication apparatus is permitted when judged that the use request is legitimate.

22. A communication apparatus as set forth in claim 19, wherein:

the receiving means receives a storage area allocation request requesting that the entire or at least a portion of the storage area of the storage device be allocated for use to the another communication apparatus; and

the controlling device allocates a storage area to the another communication apparatus in response to the storage area allocation request.

23. A communication apparatus as set forth in claim 19, wherein:

the receiving means device intrinsic data of the integrated circuit from the integrated circuit through the communication circuit after the authentication device authenticates with the integrated circuit one another'"'"'s legitimacy; and

the controlling device manages the intrinsic data and the storage area allocated to the another communication apparatus.

24. A communication apparatus as set forth in claim 19, wherein:

the another communication apparatus is a portable type communication apparatus;

the communication circuit is a wireless communication circuit performing communication using a wireless communication network; and

a transmitting means and the receiving means transfers a request and data through a network.

25. A communication method wherein a communication apparatus comprising an integrated circuit and a communication circuit communicates with a processing apparatus that transfers data with the integrated circuit and used in a service relating to the integrated circuit, comprising the steps of:

receiving a use request of a program from the integrated circuit through the communication circuit;

reading an application program relating to the use request from a storage device;

executing the read program; and

communicating with the processing apparatus through the communication circuit and the integrated circuit in response to the execution of the program and performing a process relating to the service in collaboration with the processing apparatus.

26. A processing apparatus that transfers data with a first communication apparatus and used in a service provided to a user of the first communication apparatus, wherein,

after a second communication apparatus storing a program defining a process relating to the service and executing the same, and the first communication apparatus have authenticated one another'"'"'s legitimacy by a mutual authentication conducted through the communication circuit, the processing apparatus, while communicating with the second communication apparatus through the first communication apparatus, performs a process relating to the service in collaboration with the second communication apparatus.

27. A processing apparatus as set forth in claim 26, wherein in response to a use request of the program from the first communication apparatus to the second communication apparatus, the processing apparatus transmits, to the second communication apparatus through the first communication apparatus, an instruction selecting a program relating to the service to be executed by the second communication apparatus when use permission is received from the second communication apparatus through the first communication apparatus.

28. An integrated circuit access apparatus transferring data between an integrated circuit built into a first communication apparatus and a processing apparatus used in a service provided to a user of the first communication apparatus, wherein

after a second communication apparatus storing a program defining a process relating to the service and executing the same, and the first communication apparatus have authenticated one another'"'"'s legitimacy by a mutual authentication conducted through the communication circuit, transfers data between the integrated circuit and the processing apparatus to relay communication between the second communication apparatus and the processing apparatus performed through the integrated circuit.

29. A processing method transferring data with a first communication apparatus comprising an integrated circuit and a communication circuit and used in a service relating to the integrated circuit, comprising the steps of:

conducting mutual authentication of a second communication apparatus storing a program defining a process relating to the service and executing the same, and the integrated circuit through the communication circuit, and after one another'"'"'s legitimacy is authenticated by the mutual authentication;

relaying the integrated circuit; and

while communicating with the second communication apparatus executing the program, performs a process relating to the service in collaboration with the second communication apparatus.

30. A communication method performing communication using a first communication apparatus comprising an integrated circuit and a communication circuit, a second communication circuit used in a service relating to the integrated circuit, and a third communication apparatus storing a program defining a process relating to the integrated circuit and executing the same, comprising the steps of:

transmitting a use request of the program from the integrated circuit to the third communication apparatus through the communication circuit;

conducting mutual authentication between the integrated circuit and the third communication apparatus through the communication circuit; and

conducting mutual authentication between the second communication apparatus and the third communication apparatus when the legitimacy of the integrated circuit and the third communication apparatus has been authenticated by the mutual authentication thereof, and

when the second communication apparatus and the third communication apparatus have authenticated one another'"'"'s legitimacy by the mutual authentication,

executing by the third communication apparatus the program relating to the use request, whereby the second communication apparatus and the third communication apparatus communicate to perform a process relating to the service in collaboration with each other in response to the execution of the program.

31. A communication method as set forth in claim 30, further comprising the steps of:

transmitting from the second communication apparatus to the first communication apparatus a program select instruction for instructing a program to be selected and used;

transmitting by the first communication apparatus on the basis of the program select instruction a program select instruction to the third communication instruction; and

executing by the third communication apparatus a program specified by the program select instruction received from the first communication apparatus.

32. A communication method as set forth in claim 30, further comprising the steps of:

transmitting from the second communication apparatus to the first communication apparatus a program select instruction for instructing a program to be selected and used;

judging by the integrated circuit if a program to be used in a service performed using the second communication apparatus is stored or not in response to the program select instruction;

when the integrated circuit judges the program is stored, executing by the integrated circuit the program, and performing a process relating to the service by the integrated circuit and the second communication apparatus in collaboration with each other in response to the execution of the program; and

when the integrated circuit judges the program is not stored, transmitting by the first communication apparatus a program select instruction to the third communication apparatus, executing by the third communication apparatus a program specified by a program select instruction received from the first communication apparatus, and performing a process relating to the service by the second communication apparatus and the third communication apparatus in collaboration with each other in response to the execution of the program.

33. A communication method as set forth in claim 30, wherein:

the first communication apparatus is a portable type communication apparatus;

the communication circuit is a wireless communication circuit performing communication using a wireless communication network;

the second communication apparatus and third communication apparatus are connected to a network;

the integrated circuit communicates with the second communication apparatus and the third communication apparatus through the communication circuit, the wireless communication network, and the network; and

the second communication apparatus and the third communication apparatus communicate through the network.

34. A communication system comprising:

a first communication apparatus comprising an integrated circuit and a communication circuit;

a second communication apparatus used in a service relating to the integrated circuit; and

a third communication apparatus storing a program defining a process relating to the service and executing the same, wherein;

a use request of the program is transmitted from the integrated circuit to the third communication apparatus through the communication circuit;

mutual authentication is conducted between the integrated circuit and the third communication apparatus through the communication circuit;

when the integrated circuit and the third communication apparatus have authenticated one another'"'"'s legitimacy by the mutual authentication, the second communication apparatus and the third communication apparatus conducts mutual authentication; and

when the second communication apparatus and the third communication apparatus have authenticated one another'"'"'s legitimacy by the mutual authentication, the third communication apparatus executes the program relating to the use request, and the second communication apparatus and the third communication apparatus communicate in response to the execution of the program to perform a process relating to the service in collaboration with each other.

35. A communication apparatus communicating with a first communication apparatus comprising an integrated circuit and a communication circuit, and a second communication apparatus storing a program defining a process relating to a service and used in a service relating to the integrated circuit, comprising:

an authentication device for authenticating with the second communication apparatus after the integrated circuit and the second communication apparatus have authenticated one another'"'"'s legitimacy by a mutual authentication; and

a control device for communicating with the second communication apparatus executing the program to perform a process relating to the service in collaboration with each other after one another'"'"'s legitimacy with the second communication apparatus has been authenticated by a mutual authentication through the authentication device.

36. A communication method performed between a first communication apparatus including an integrated circuit and a communication circuit, and a second communication apparatus storing a program defining a process relating to a service to be provided using the integrated circuit and executing the same, comprising the steps of:

conducting mutual authentication with the second communication apparatus after the integrated circuit and the second communication apparatus have authenticated one another'"'"'s legitimacy by a mutual authentication; and

communicating with the second communication apparatus executing the program to perform a process relating to the service in collaboration with each other after one another'"'"'s legitimacy with the second communication apparatus has been authenticated by the mutual authentication with the second communication apparatus.

37. A communication apparatus communicating with a first communication apparatus including an integrated circuit and a communication circuit, and a second communication apparatus used in a service relating to the integrated circuit, comprising:

a storage device for storing a program defining a process relating to the service;

a receiving device for receiving a use request of the program from the integrated circuit through the communication circuit;

an authentication device for conducting mutual authentication with the integrated circuit through the communication circuit in response to the use request and after one another'"'"'s legitimacy has been authenticated by the mutual authentication, conducting mutual authentication with the second communication apparatus; and

when one another'"'"'s legitimacy with the second communication apparatus has been authenticated by the mutual authentication, a controlling means for reading the program relating to the use request from the storing means and executing the same, and communicating with the second communication apparatus in response to the execution of the program to perform a process relating to the service in collaboration with each other.

38. A communication method wherein a first communication apparatus comprising an integrated circuit and a communication circuit, and a second communication apparatus used in a service relating to the integrated circuit communicates, comprising the steps of:

receiving a use request of a program defining a process relating to the service from the integrated circuit through the communication circuit;

conducting mutual authentication with the integrated circuit through the communication circuit in response to the use request, and after one another'"'"'s legitimacy has been authenticated by the mutual authentication, conducting mutual authentication with the second communication apparatus;

reading a program relating to the use request from a storage device and executing the same when one another'"'"'s legitimacy with the second communication apparatus has been authenticated by the mutual authentication; and

communicating with the second communication apparatus in response to the execution of the program to perform a process relating to the service in collaboration with each other.