Service providing apparatus and method that allow an apparatus to access unique information stored in transportable recording medium

• US 7,792,755 B2
• Filed: 03/07/2006
• Issued: 09/07/2010
• Est. Priority Date: 01/14/2000
• Status: Expired due to Fees

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Inventors: Matsushima, Hideki, Kozuka, Masayuki
• Primary Examiner(s): Augustin; Evens J
• Assistant Examiner(s): KUCAB, JAMIE R
• Application Number:
  US11/368,536
• Publication Number:
  US 20060178996A1
• Time in Patent Office: 1,645 Days
• Field of Search: 705/18, 705/50, 705/51, 713/185, 713/201, 726/7, 726/16, 726/26, 726/27
• US Class Current: 705/51
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction

Abstract

A transportable recording medium includes an area for storing encrypted cookie information. The same cookie information is thus easy to use in different terminals and the cookie information becomes unique to respective users instead of respective terminals. A Web site reads the encrypted cookie information, decrypts the encrypted cookie information using a secret key stored in the Web site, customizes a requested service according to the decrypted cookie information, and provides the customized service to a terminal. If the Web site stores non-encrypted user information, the recording medium stores a media identification. The Web site stores the user information so that the user information of the user assigned to the recording medium is searched for according to the media identification. The Web site reads the media identification from the recording medium, searches for user information corresponding to the media identification, and customizes a requested service according to the user information.

Claims

1. A service providing method of providing a current user of a first apparatus with each service provided by one or more other apparatuses via a network, wherein the first apparatus is able to communicate with each of the one or more other apparatuses via the network and is locally connectable to a transportable recording medium assigned to the current user from among a plurality of transportable recording media that are assigned to users of the first apparatus, each of the plurality of transportable recording media has recorded thereon a media identifier unique thereto, and the transportable recording medium includes a non-secure data area for storing encrypted user information which is generated by encrypting user information assigned to the current user based on the media identifier, the service providing method comprising:

a service requesting operation of the first apparatus requesting a second apparatus to provide a service desired by the current user, the second apparatus being one of the one or more other apparatuses;

a reading operation of, when the transportable recording medium of the current user is locally connected to the first apparatus, the second apparatus reading the media identifier unique to the transportable recording medium assigned to the current user and the encrypted user information assigned to the current user, from the transportable recording medium locally connected to the first apparatus via the network, the user information assigned to the current user being associated with the media identifier unique to the transportable recording medium assigned to the current user by encrypting the user information based on the media identifier, the encrypted user information associating the user information assigned to the current user with the media identifier unique to the transportable recording medium assigned to the current user, the transportable recording medium including a secure data area and the non-secure data area, the encrypted user information being stored in the non-secure data area, the media identifier being stored in the secure data area and requiring an authentication between the first apparatus and the transportable recording medium in order to access the media identifier; and

a service providing operation of the second apparatus of

(i) generating a decryption key based on the media identifier read in said reading operation,

(ii) generating user information by decrypting the encrypted user information read in said reading operation by using the generated decryption key,

(iii) customizing the desired service according to the generated user information, and

(iv) transmitting the customized service to the first apparatus.

2. The service providing method of claim 1, further comprising:

a user information updating operation, which is performed after said reading operation, of the second apparatus, when the user information inherent to the current user needs to be updated, updating the user information and generating encrypted updated user information by encrypting updated user information, and overwriting the encrypted user information in the locally connected transportable recording medium with the encrypted updated user information via the network and the first apparatus.

3. The service providing method of claim 2, wherein in said user information updating operation, which is performed after said reading operation, the second apparatus:

generates updated decrypted user information by updating the decrypted user information,

generates encrypted updated user information by encrypting the updated decrypted user information such that the encrypted user information can be decrypted with use of the generated decryption key, and

overwrites the encrypted user information in the locally connected transportable recording medium with the encrypted updated user information.

4. The service providing method of claim 3, wherein:

the network is the Internet;

the first apparatus is an Internet terminal operable to run a specialized Internet browser;

each of the one or more other apparatuses is a Web site;

the user information includes cookie information used through the Internet browser; and

each transportable recording medium stores the cookie information as a file.

5. The service providing method of claim 1, wherein:

the user information stored in each transportable recording medium includes the media identifier of the transportable recording medium;

the second apparatus stores user information so that user information assigned to each user is associated with the media identifier of the transportable recording medium assigned to the user; and

said service providing operation includes;

a user information finding operation of the second apparatus finding user information associated with the media identifier that has been read in said reading operation, and

a customizing operation of the second apparatus customizing the desired service for the current user according to the user information found in said user information finding operation.

6. The service providing method of claim 1, further comprising:

a transportable recording medium connection operation, which is performed before said service requesting operation, of locally connecting the first apparatus to the transportable recording medium assigned to the current user.

7. The service providing method of claim 1, wherein:

each transportable recording medium includes a secure data area; and

said reading operation includes;

a device authentication operation of performing a device authentication between the first apparatus and the locally connected transportable recording medium, and

a reading prohibition operation of, when the device authentication performed in said device authentication operation has ended in failure, prohibiting the second apparatus from reading the media identifier and data from the secure data area of the locally connected transportable recording medium.

8. A service providing method used by a first apparatus operable to receive each service provided by one or more other apparatuses via a network and provide the received service to a current user of the first apparatus, wherein the first apparatus is able to communicate with each of the one or more other apparatuses via the network and is locally connectable to a transportable recording medium assigned to the current user from among a plurality of transportable recording media that are assigned to users of the first apparatus, each of the plurality of transportable recording media has recorded thereon a media identifier unique thereto, and the transportable recording medium includes a non-secure data area for storing encrypted user information which is generated by encrypting user information assigned to the current user based on the media identifier, the service providing method comprising:

a service requesting operation of the first apparatus requesting a second apparatus to provide a service desired by the current user, the second apparatus being one of the one or more other apparatuses;

a transmitting operation of, when the transportable recording medium of the current user is locally connected to the first apparatus and stores encrypted user information assigned to the current user, the first apparatus reading the media identifier unique to the transportable medium assigned to the current user and the encrypted user information assigned to the current user, from the transportable recording medium locally connected to and transmitting the read media identifier and encrypted user information to the second apparatus via the network, the user information assigned to the current user being associated with the media identifier unique to the transportable recording medium assigned to the current user by encrypting the user information based on the media identifier, the encrypted user information associating the user information assigned to the current user with the media identifier unique to the transportable recording medium assigned to the current user, the transportable recording medium including a secure data area and the non-secure data area, and the encrypted user information being stored in the non-secure data area, the media identifier being stored in the secure data area and requiring an authentication between the first apparatus and the transportable recording medium in order to access the media identifier; and

a service providing operation of the first apparatus receiving a service that has been customized by the second apparatus from the second apparatus and providing the received service to the current user, wherein the second apparatus generates the customized service by

(i) generating a decryption key based on the media identifier that has been transmitted to the second apparatus in said transmitting operation,

(ii) generating user information by decrypting, by using the generated decryption key, the encrypted user information that has been transmitted to the second apparatus, and

(iii) customizing a desired service according to the generated user information.

9. The service providing method of claim 8, further comprising:

a user information updating operation, which is performed after said transmitting operation, of the first apparatus, when the user information assigned to the current user needs to be updated, receiving information based on updated user information from the second apparatus and overwriting the encrypted user information in the locally connected transportable recording medium with the updated user information.

10. The service providing method of claim 9, wherein in said user information updating operation, the first apparatus receives encrypted user information that has been encrypted by the second apparatus such that the encrypted user information can be decrypted with use of the generated decryption key, and overwrites the encrypted user information in the locally connected transportable recording medium with the received encrypted user information.

11. The service providing method of claim 10, wherein:

the network is the Internet;

the first apparatus is an Internet terminal operable to run a specialized Internet browser;

each of the one or more other apparatuses is a Web site;

the user information includes cookie information used through the Internet browser; and

each transportable recording medium stores the cookie information as a file.

12. The service providing method of claim 8, wherein:

the second apparatus stores user information so that user information inherent to each user is associated with the media identifier of the transportable recording medium assigned to the user; and

the customized service that is received and provided in said service providing operation is generated at the second apparatus by finding user information associated with the media identifier transmitted in said transmitting operation and customizing the desired service for the current user according to the found user information.

13. The service providing method of claim 8, further comprising:

a transportable recording medium connection operation, which is performed before said service requesting operation, of locally connecting the first apparatus to the transportable recording medium assigned to the current user.

14. The service providing method of claim 13, wherein:

each transportable recording medium includes a secure data area;

the media identifier of each transportable recording medium is stored in the secure data area of the transportable recording medium; and

said transmitting operation includes;

a device authentication operation of performing a device authentication between the first apparatus and the locally connected transportable recording medium, and

a transmitting prohibition operation of, if the device authentication performed in said device authentication operation has ended in failure, prohibiting the first apparatus from transmitting the media identifier and data to the secure data area of the locally connected transportable recording medium.

15. A service providing method of providing a current user of a first apparatus with each service provided by one or more other apparatuses via a network, wherein the first apparatus is able to communicate with each of the one or more other apparatuses via the network and includes a recording medium assigned to the current user, each of the plurality of the recording media has recorded thereon a media identifier unique thereto, and the recording medium includes a non-secure data area for storing encrypted user information which is generated by encrypting user information assigned to the current user based on the media identifier, the service providing method comprising:

a service requesting operation of the first apparatus requesting a second apparatus to provide a service desired by the current user, the second apparatus being one of the one or more other apparatuses;

a reading operation of the second apparatus reading the media identifier unique to the medium assigned to the current user and the encrypted user information assigned to the current user, from the recording medium via the network, the user information assigned to the current user being associated with the media identifier unique to the recording medium assigned to the current user by encrypting the user information based on the media identifier, the encrypted user information associating the user information assigned to the current user with the media identifier unique to the recording medium assigned to the current user, the recording medium including a secure data area and the non-secure data area, the encrypted user information being stored in the non-secure data area, the media identifier being stored in the secure data area and requiring an authentication between the first apparatus and the transportable recording medium in order to access the media identifier; and

a service providing operation of the second apparatus of

(i) generating a decryption key based on the media identifier read in said reading operation,

(ii) generating user information by decrypting the encrypted user information read in said reading operation by using the generated decryption key,

(iii) customizing the desired service according to the generated user information, and

(iv) transmitting the customized service to the first apparatus.

16. A service providing method of providing a current user of a first apparatus with each service provided by one or more other apparatuses via a network, wherein the first apparatus is able to communicate with each of the one or more other apparatuses via the network and is locally connectable to a transportable recording medium assigned to the current user from among a plurality of transportable recording media that are assigned to users of the first apparatus, each of the plurality of transportable recording media has recorded thereon a media identifier unique thereto, and the transportable recording medium includes a non-secure data area for storing encrypted user information which is generated by encrypting user information assigned to the current user based on the media identifier, the service providing method comprising:

a service requesting operation of the first apparatus requesting a second apparatus to provide a service desired by the current user, the second apparatus being one of the one or more other apparatuses;

a reading operation of, when the transportable recording medium of the current user is locally connected to the first apparatus, the second apparatus reading the media identifier unique to the transportable medium assigned to the current user and the encrypted user information assigned to the current user, from the transportable recording medium locally connected to the first apparatus via the network, the user information assigned to the current user being associated with the media identifier unique to the transportable recording medium assigned to the current user by encrypting the user information based on the media identifier, the encrypted user information associating the user information assigned to the current user with the media identifier unique to the transportable recording medium assigned to the current user, the transportable recording medium including a secure data area and the non-secure data area, and the encrypted user information being stored in the non-secure data area, the media identifier being stored in the secure data area and requiring an authentication between the first apparatus and the transportable recording medium in order to access the media identifier; and

a service providing operation of the second apparatus

(i) generating a decryption key based on the media identifier read in said reading operation,

(ii) generating user information by decrypting the encrypted user information read in said reading operation by using the generated decryption key,

(iii) customizing the desired service according to the generated user information, and

(iv) transmitting the customized service to the first apparatus.