SAFETY JUDGMENT METHOD, SAFETY JUDGMENT SYSTEM, SAFETY JUDGMENT APPARATUS, FIRST AUTHENTICATION APPARATUS, AND COMPUTER PROGRAM PRODUCT

• US 20100031327A1
• Filed: 02/04/2008
• Published: 02/04/2010
• Est. Priority Date: 11/06/2002
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: KOTANI, Seigo
• Granted Patent: US 8,032,929 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

Security of an information processing apparatus is ensured by performing biological information authentication and collecting the environment information about the information processing apparatus. The information processing apparatus transmits the collected environment information to a first authentication apparatus. An electronic certificate issued by a second authentication apparatus and information encrypted with a secret key issued by the second authentication apparatus are transmitted to the first authentication apparatus. The first authentication apparatus acquires the public key of the second authentication apparatus and the public key of the information processing apparatus so as to decrypt the encrypted information, and judges whether or not the decrypted information is proper. The first authentication apparatus refers to an environment information database and the transmitted information, and judges whether or not the transmitted environment information is proper. When all the authentications by the biological information authentication, environment information authentication and electronic certificate authentication are successful, the information processing apparatus is judged to be safe.

Claims

1. A safety judgment method for judging safety of an information processing apparatus connected to an authentication apparatus through a communication network, comprising:

transmitting order information from the information processing apparatus to the authentication apparatus;

collecting environment information including at least one kind of information about the information processing apparatus, information about peripheral equipment connected to the information processing apparatus, and information about software installed in the information processing apparatus;

transmitting the collected environment information from the information processing apparatus to the authentication apparatus;

authenticating the environment information by the authentication apparatus by judging whether the transmitted environment information is proper with respect to the transmitted order information, referring to an environment information database which stores conditions of the environment information, the conditions being related to the order information; and

judging the information processing apparatus as being safe by the authentication apparatus when the authentication of the environment information is successful.

2. A safety judgment system for judging safety of an information processing apparatus connected to an authentication apparatus through a communication network,

wherein the information processing apparatus comprises a processor capable of performing the operations of:

collecting environment information including at least one kind of information about the information processing apparatus, information about peripheral equipment connected to the information processing apparatus, and information about software installed in the information processing apparatus; and

transmitting order information and the collected environment information to the authentication apparatus, and

wherein the authentication apparatus comprises a processor capable of performing the operations of;

receiving the transmitted order information and the transmitted environment information from the information processing apparatus;

authenticating the environment information by judging whether the received environment information is proper with respect to the received order information, referring to an environment information database which stores conditions of the environment information, the conditions being related to the order information; and

judging the information processing apparatus as being safe when the authentication of the environment information is successful.

3. An authentication apparatus for judging safety of an information processing apparatus connected to the authentication apparatus through a communication network, comprising:

a processor capable of performing the operations of;

receiving order information and environment information which includes at least one kind of information about the information processing apparatus, information about peripheral equipment connected to the information processing apparatus, and information about software installed in the information processing apparatus, the order information and the environment information being transmitted from the information processing apparatus;

authenticating the environment information by judging whether the received environment information is proper with respect to the received order information, referring to an environment information database, which stores conditions of the environment information, the conditions being related to the order information; and

judging the information processing apparatus as being safe when the authentication of the environment information is successful.

4. A computer-readable recording medium which stores a computer-executable computer program for judging safety of an information processing apparatus connected to a computer as an authentication apparatus through a communication network, the computer program, when executed, causing a the computer to perform a method comprising:

receiving order information and environment information which includes at least one kind of information about the information processing apparatus, information about peripheral equipment connected to the information processing apparatus, and information about software installed in the information processing apparatus, the order information and the environment information being transmitted from the information processing apparatus;

authenticating the environment information by judging whether the received environment information is proper with respect to the received order information, referring to an environment information database, which stores conditions of the environment information, the conditions being related to the order information; and

judging the information processing apparatus as being safe when said authenticating of the environment information is successful.

5. A safety judgment apparatus for judging safety of an information processing apparatus connected to an authentication apparatus through a communication network, comprising:

a processor capable of performing the operations of;

receiving order information from the information processing apparatus;

collecting environment information including at least one kind of information about the information processing apparatus, information about peripheral equipment connected to the information processing apparatus, and information about software installed in the information processing apparatus;

transmitting the received order information and the collected environment information to the authentication apparatus; and

when receiving a judging result as to whether the transmitted environment information is proper with respect to the transmitted order information, from the authentication apparatus, judging the information processing apparatus as being safe.