Information processing device, information processing method, and computer-readable recording medium

• US 8,997,247 B2
• Filed: 02/04/2009
• Issued: 03/31/2015
• Est. Priority Date: 02/12/2008
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Nasu, Masami, Satoh, Jun
• Primary Examiner(s): Kyle, Tamara T
• Application Number:
  US12/365,194
• Publication Number:
  US 20090204809A1
• Time in Patent Office: 2,246 Days
• Field of Search: 713/156, 726/5, 726/6, 726/7, 726/12, 726/27, 726/28, 726/29
• US Class Current: 726/27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

An information processing device is arranged to acquire a first public key certificate and a first secret key from a server device by acquiring an individual identification information which is uniquely discriminable for the information processing device from the information processing device and transmitting the individual identification information to the server device. The information processing device is arranged to determine whether the information processing device is permitted to transmit device information to the server device through an encryption communication using the first public key certificate and the first secret key, by acquiring the individual identification information from the information processing device and comparing the acquired individual identification information with the individual identification information associated with at least one of the first public key certificate and the first secret key.

Claims

1. An information processing device which collects device information from a device connected via a first network and transmits the device information to a center server connected via a second network, the information processing device comprising:

a certificate receiving part configured to receive a first public key certificate and a first secret key from an auxiliary server through the second network after an individual identification information which is uniquely discriminable for the information processing device is received from a memory of the information processing device and the individual identification information is transmitted to the auxiliary server, so that an individual certificate package is stored into the information processing device by the reception of the first public key certificate and the first secret key from the auxiliary server and used to perform the encryption communication between the information processing device and the center server; and

a judging part configured to determine, when a request for starting the device information transmission is received, whether the information processing device is permitted to transmit the device information to the center server through an encryption communication using the first public key certificate and the first secret key, after the individual identification information is received from the memory of the information processing device and a first passphrase of the received individual identification information is compared with a second passphrase associated with at least one of the first public key certificate and the first secret key in the individual certificate package stored in the information processing device,

wherein the individual certificate package contains the second passphrase associated with the at least one of the first public key certificate and the first secret key.

2. The information processing device according to claim 1, further comprising:

a memory part configured to store a second public key certificate and a second secret key which are encrypted by a predetermined key information;

a key information receiving part configured to receive the individual identification information from the memory of the information processing device, transmit a request of the predetermined key information, containing the individual identification information, to the center server through the second network, and receive the predetermined key information which is encrypted based on the individual identification information; and

a decryption part configured to acquire the individual identification information from the memory of the information processing device, decrypt the predetermined key information using the individual identification information, and decrypt the second public key certificate and the second secret key using the decrypted key information,

wherein the certificate receiving part receives the first public key certificate and the first secret key, which are uniquely discriminable for the information processing device, through an encryption communication using the decrypted second public key certificate and the decrypted second secret key.

3. The information processing device according to claim 2, wherein the key information receiving part receives a request identification information which is generated uniquely for each of the encrypted key information and the encrypted request of the predetermined key information,

wherein the information processing device comprises an input part configured to cause a user to input the request identification information, and

wherein the certificate receiving part is inhibited from receiving the first public key certificate and the first secret key when a format of the input request identification information is not in agreement with a predetermined format.

4. An information processing method for use in an information processing device which collects device information from a device connected via a first network and transmits the device information to a center server connected via a second network, the information processing method comprising the steps of:

receiving a first public key certificate and a first secret key from an auxiliary server through the second network after an individual identification information which is uniquely discriminable for the information processing device is received from a memory of the information processing device and the received individual identification information is transmitted to the auxiliary server, so that an individual certificate package is stored into the information processing device by the reception of the first public key certificate and the first secret key from the auxiliary server and used to perform the encryption communication between the information processing device and the center server; and

determining, when a request for starting the device information transmission is received, whether the information processing device is permitted to transmit the device information to the center server through an encryption communication using the first public key certificate and the first secret key, after the individual identification information is received from the memory of the information processing device and a first passphrase of the received individual identification information is compared with a second passphrase associated with at least one of the first public key certificate and the first secret key in the individual certificate package stored in the information processing device,

wherein the individual certificate package contains the second passphrase associated with the at least one of the first public key certificate and the first secret key.

5. The information processing method according to claim 4, further comprising the steps of:

storing a second public key certificate and a second secret key which are encrypted by a predetermined key information;

receiving the individual identification information from the memory of the information processing device;

transmitting a request of the predetermined key information, containing the individual identification information, to the center server through the second network;

receiving the predetermined key information which is encrypted based on the individual identification information;

receiving the individual identification information from the memory of the information processing device;

decrypting the predetermined key information using the individual identification information; and

decrypting the second public key certificate and the second secret key using the decrypted key information,

wherein the step of receiving the first public key certificate and the first secret key receives the first public key certificate and the first secret key, which are uniquely discriminable for the information processing device, through an encryption communication using the decrypted second public key certificate and the decrypted second secret key.

6. The information processing method according to claim 5, wherein the step of receiving the predetermined key information receives a request identification information which is generated uniquely for each of the encrypted key information and the encrypted request of the predetermined key information,

wherein the information processing method comprises a step of causing a user to input the request identification information, and

wherein the step of receiving the first public key certificate and the first secret key is inhibited from being performed when a format of the input request identification information is not in agreement with a predetermined format.

7. A non-transitory computer-readable recording medium storing a program which, when executed by a computer, causes the computer to perform an information processing method for use in an information processing device which collects device information from a device connected via a first network and transmits the device information to a center server connected via a second network, the information processing method comprising the steps of

receiving a first public key certificate and a first secret key from an auxiliary server through the second network after an individual identification information which is uniquely discriminable for the information processing device is received from a memory of the information processing device and the received individual identification information is transmitted to the auxiliary server, so that an individual certificate package is stored into the information processing device by the reception of the first public key certificate and the first secret key from the auxiliary server and used to perform the encryption communication between the information processing device and the center server;

and

determining, when a request for starting the device information transmission is received, whether the information processing device is permitted to transmit the device information to the center server through an encryption communication using the first public key certificate and the first secret key, after the individual identification information is received from the memory of the information processing device and a first passphrase of the received individual identification information is compared with a second passphrase associated with at least one of the first public key certificate and the first secret key in the individual certificate package stored in the information processing device,

wherein the individual certificate package contains the second passphrase associated with the at least one of the first public key certificate and the first secret key.

8. The computer-readable recording medium according to claim 7, wherein the information processing method farther comprises the steps of

storing a second public key certificate and a second secret key which are encrypted by a predetermined key information;

receiving the individual identification information from the memory of the information processing device;

transmitting a request of the predetermined key information, containing the individual identification information, to the center server through the second network;

receiving the predetermined key information which is encrypted based on the individual identification information;

receiving the individual identification information from the memory of the information processing device;

decrypting the predetermined key information using the individual identification information; and

decrypting the second public key certificate and the second secret key using the decrypted key information,

wherein the step of receiving the first public key certificate and the first secret key receives the first public key certificate and the first secret key, which are uniquely discriminable for the information processing device, through an encryption communication using the decrypted second public key certificate and the decrypted second secret key.

9. The computer-readable recording medium according to claim 8, wherein, the step of receiving the predetermined key information receives a request identification information which is generated uniquely for each of the encrypted key information and the encrypted request of the predetermined key information,

wherein the information processing method comprises a step of causing a user to input the request identification information, and

wherein the step of receiving the first public key certificate and the first secret key is inhibited from being performed when a format of the input request identification information is not in agreement with a predetermined format.