Information processing apparatus, data generation method, information processing method, and information processing system for updating and verifying software programs

• US 9,231,927 B2
• Filed: 03/14/2013
• Issued: 01/05/2016
• Est. Priority Date: 05/17/2012
• Status: Active Grant

• Current Assignee: Sony Interactive Entertainment Inc. (Sony Group Corp.)
• Original Assignee: Sony Computer Entertainment America LLC (Sony Group Corp.), Sony Corporation (Sony Group Corp.)
• Inventors: Obinata, Hiroyuki, Yasuda, Yasunori
• Primary Examiner(s): Okeke, Izunna
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US13/804,319
• Publication Number:
  US 20130311765A1
• Time in Patent Office: 1,027 Days
• Field of Search: 713/150
• US Class Current: 1/1
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065

Abstract

A differencing generator generates difference data between a first data set and a second data set. An encryption unit encrypts data. An electronic signature generator generates the electronic signature of data. A transmission data generator generates transmission data. The encryption unit encrypts the difference data generated by the differencing generator so as to generate encrypted difference data. The transmission data generator generates transmission data containing both the encrypted difference data generated by the encryption unit and the electronic signature of the second data set as generated by the electronic signature generator.

Claims

1. An information processing apparatus operating as a managing server on a computer network comprising a microprocessor coupled to a computer memory containing a computer program, the microprocessor operating under the control of the computer program, comprising:

a differencing generator configured to generate difference data between a first data set and a second data set;

an encryption engine configured to encrypt the difference data generated by the differencing generator so as to generate encrypted difference data;

an electronic signature generator configured to generate an electronic signature of the difference data generated by the differencing generator, and to generate an electronic signature of the second data set; and

a transmission data generator configured to generate transmission data for transmission to a terminal on the network, wherein the transmission data generator generates transmission data containing the encrypted difference data generated by the encryption unit, the electronic signature of the difference data generated by the electronic signature generator, and the electronic signature of the second data set generated by the electronic signature generator.

2. An information processing apparatus according to claim 1, wherein the microprocessor operates under the control of the computer program to implement further processing elements, comprising:

a request receiver configured to receive a data transmission request from another information processing apparatus that stores the first data set; and

a transmitter configured to transmit the transmission data generated by the transmission data generator to the other information processing apparatus.

3. A data generation method executable by a processor of a managing server on a computer network, the method comprising:

generating difference data between a first data set and a second data set;

encrypting the generated difference data so as to generate encrypted difference data;

generating an electronic signature of the difference data and an electronic signature of the second data set; and

generating transmission data containing the encrypted difference data, the electronic signature of the difference data, and the electronic signature of the second data set, the transmission data for transmission to a terminal on the network.

4. A non-transitory computer-readable medium encoded with a computer program, executable by a computer of a managing server on a computer network, the program comprising:

a difference data generating module operative to generate difference data between a first data set and a second data set;

an encryption module operative to encrypt the difference data generated by the difference data generating module so as to generate encrypted difference data;

an electronic signature generating module operative to generate an electronic signature of the difference data, and to generate an electronic signature of the second data set; and

a transmission data generating module operative to generate transmission data containing the encrypted difference data, the electronic signature of the difference data, and the electronic signature of the second data set, the transmission data for transmission to a terminal on the network.

5. An information processing apparatus comprising a microprocessor coupled to a computer memory containing a computer program, the microprocessor operating under the control of the computer program comprising:

a storage configured to store a first data set;

an acquiring unit configured to acquire data containing an electronic signature of a second data set, encrypted difference data between the first data set and the second data set, and an electronic signature of the difference data;

a difference applying unit configured to generate a data set based on the first data set and the difference data; and

a verification engine configured to verify the generated data set to match the second data set by using the electronic signature of the second data set acquired by the acquiring unit,

wherein the difference data is generated by a differencinq generator of a further information processing apparatus in communication with the information processing apparatus,

wherein the encrypted difference data is generated by an encryption engine of the further information processing apparatus, and

wherein the electronic signature of the second data set and the electronic signature of the of the difference data are generated by an electronic signature generator of the further information processing apparatus.

6. An information processing apparatus according to claim 5, wherein:

when the verification engine fails to verify the second data set, the verification engine verifies the difference data acquired by the acquiring unit by using the electronic signature of the difference data acquired by the acquiring unit.

7. An information processing method executable by a processor of an information processing apparatus, the method comprising:

acquiring data containing an electronic signature of a second data set and, encrypted difference data between the a first data set and the second data set, and an electronic signature of the difference data;

generating a data set based on the first data set and the difference data; and

verifying the generated data set matches the second data set by using the acquired electronic signature of the second data set,

wherein the difference data is generated by a differencinq generator of a further information processing apparatus in communication with the information processing apparatus,

wherein the encrypted difference data is generated by an encryption engine of the further information processing apparatus, and

wherein the electronic signature of the second data set and the electronic signature of the of the difference data are generated by an electronic signature generator of the further information processing apparatus.

8. A non-transitory computer-readable medium encoded with a computer program, executable by a computer of an information processing apparatus, the program comprising:

an acquiring module operative to acquire data containing an electronic signature of a second data set, encrypted difference data between the a first data set and the second data set, and an electronic signature of the difference data;

a generating module operative to generate a data set based on the first data set and the difference data; and

a verification module operative to verify the generated data set, matches the second data set by using the electronic signature of the second data set acquired by the acquiring module

wherein the difference data is generated by a differencinq generator of a further information processing apparatus in communication with the information processing apparatus,

wherein the encrypted difference data is generated by an encryption engine of the further information processing apparatus, and

wherein the electronic signature of the second data set and the electronic signature of the of the difference data are generated by an electronic signature generator of the further information processing apparatus.

9. An information processing system, comprising:

a server comprising;

a differencing generator configured to generate difference data between a first data set and a second data set,

an encryption engine configured to encrypt the difference data generated by the differencing generator so as to generate encrypted difference data,

an electronic signature generator configured to generate an electronic signature of the difference data generated by the differencing generator, and to generate an electronic signature of the second data set, and

a transmission data generator configured to generate transmission data containing the encrypted difference data generated by the encryption unit, the electronic signature of the difference data generated by the electronic signature generator, and the electronic signature of the second data set generated by the electronic signature generator; and

an information processing apparatus operating to receive the transmission data from the server via a network, and configured to store the first data set,

wherein the information processing apparatus operates to generate a data set based on the first data set and the difference data, and the information processing apparatus verifies, by using the electronic signature of the second data set received from the server, the data set matches the second data set.

10. An information processing method, comprising:

at a first information processing apparatus;

(i) generating difference data between a first data set and a second data set;

(ii) encrypting the generated difference data so as to generate encrypted difference data;

(iii) generating an electronic signature of the difference data and an electronic signature of the second data set;

(iv) generating transmission data containing the encrypted difference data, the electronic signature of the difference data, and the electronic signature of the second data set; and

(v) transmitting the transmission data to a second information processing apparatus over a network;

at the second information processing apparatus;

(i) storing the first data set;

(ii) receiving the transmission data via the network;

(iii) generating a data set based on the first data set and the difference data, and (iv) verifying, by using the electronic signature of the second data set received over the network, the data set matches the second data set.