Information processing apparatus and method, recording medium,and program

• US 20030126440A1
• Filed: 11/14/2002
• Published: 07/03/2003
• Est. Priority Date: 11/15/2001
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Kurihara, Akira, Go, Naomi
• Granted Patent: US 7,178,028 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

The present invention relates to an information processing apparatus by which a communication channel providing a high degree of privacy is established between a PDA and a data communication server. In the information processing apparatus, first, the PDA and a memory card are connected to each other, and perform mutual authentication. Data encrypted with a temporary key shared by the PDA and the memory card as a result of the authentication is transferred from the PDA to the memory card, decrypted by the shared temporary key, and then stored in the memory card. Next, a PC and the memory card are connected to each other, and perform mutual authentication. The data encrypted with a temporary key shared by the PC and the memory card as a result of the authentication is transferred from the memory card to the PC, decrypted by the shared temporary key, and then stored in the PC. Then, the PC and the data communication server are connected to each other, and perform mutual authentication. The data encrypted with a temporary key shared by the PC and the data communication server as a result of the authentication is transmitted from the PC to the data communication server via a broadband network.

Claims

1. An information processing apparatus for transmitting and receiving data to and from an other information processing apparatus or a portable type information terminal apparatus via an information storing medium, said information processing apparatus comprising:

first authentication means for being connected to said information storing medium storing data recorded in said portable type information terminal apparatus and performing authentication;

reading means for reading said data stored in said information storing medium when the authentication has been performed by said first authentication means;

second authentication means for being connected to said other information processing apparatus via a network and performing authentication;

encrypting means for encrypting said data read by said reading means when the authentication has been performed by said second authentication means; and

transmitting means for transmitting said data encrypted by said encrypting means to said other information processing apparatus via said network.

2. An information processing apparatus as claimed in claim 1, further comprising decrypting means for decrypting said data with a temporary key generated by said first authentication means.

3. An information processing apparatus as claimed in claim 1,

wherein said encrypting means encrypts said data with a temporary key generated by said second authentication means.

4. An information processing apparatus as claimed in claim 1,

wherein said data stored in said information storing medium is decrypted with a temporary key generated when said information storing medium and said portable type information terminal apparatus are authenticated, and then stored.

5. An information processing apparatus as claimed in claim 1,

wherein said network is a broadband network.

6. An information processing method of an information processing apparatus, said information processing apparatus transmitting and receiving data to and from an other information processing apparatus or a portable type information terminal apparatus via an information storing medium, said information processing method comprising:

a first authentication step of being connected to said information storing medium storing data recorded in said portable type information terminal apparatus and performing authentication;

a reading control step of controlling reading of said data stored in said information storing medium when the authentication has been performed by the processing of said first authentication step;

a second authentication step of being connected to said other information processing apparatus via a network and performing authentication;

an encrypting step of encrypting said data read in said reading control step when the authentication has been performed by the processing of said second authentication step; and

a transmitting step of transmitting said data encrypted by the processing of said encrypting step to said other information processing apparatus via said network.

7. A recording medium having a computer readable program recorded thereon, said program controlling an information processing apparatus for transmitting and receiving data to and from an other information processing apparatus or a portable type information terminal apparatus via an information storing medium, said program comprising:

a first authentication step of being connected to said information storing medium storing data recorded in said portable type information terminal apparatus and performing authentication;

a reading control step of controlling reading of said data stored in said information storing medium when the authentication has been performed by the processing of said first authentication step;

a second authentication step of being connected to said other information processing apparatus via a network and performing authentication;

an encrypting step of encrypting said data read in said reading control step when the authentication has been performed by the processing of said second authentication step; and

a transmitting step of transmitting said data encrypted by the processing of said encrypting step to said other information processing apparatus via said network.

8. A program executed by a computer, said computer controlling an information processing apparatus for transmitting and receiving data to and from an other information processing apparatus or a portable type information terminal apparatus via an information storing medium, said program comprising:

a first authentication step of being connected to said information storing medium storing data recorded in said portable type information terminal apparatus and performing authentication;

a reading control step of controlling reading of said data stored in said information storing medium when the authentication has been performed by the processing of said first authentication step;

a second authentication step of being connected to said other information processing apparatus via a network and performing authentication;

an encrypting step of encrypting said data read in said reading control step when the authentication has been performed by the processing of said second authentication step; and

a transmitting step of transmitting said data encrypted by the processing of said encrypting step to said other information processing apparatus via said network.