CONTENTS PROCESSING DEVICE AND CONTENTS PARTIAL INTEGRITY ASSURANCE METHOD

• US 20110078458A1
• Filed: 09/20/2010
• Published: 03/31/2011
• Est. Priority Date: 09/25/2009
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: FURUKAWA, Kazuyoshi, TAKENAKA, Masahiko, YASUDA, Masaya, IZU, Tetsuya
• Application Number:
  US12/885,886
• Publication Number:
  US 20110078458A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

A contents processing device includes a management data storage unit to store an updater identifier and a private key, an accepting unit to accept a content which is divided into a plurality of blocks, an updating type indicating a type of an updating as to the content, an updated block to be updated of the content, and an updated position, an inserting unit to generate an updated content by inserting the updating block into the updated position of the content, a first hash value calculating unit to calculate a hash value as to the updated block, a signature unit to read out the updater identifier and the private key from the management data storage unit to generate a digital signature using the private key as to updating record information including the updater identifier, the updated position, the hash value as to the updated block, and the updating type.

Claims

1. A contents processing device, comprising:

a management data storage unit configured to store an updater identifier and a private key in a correlated manner;

an accepting unit configured to accept a content which is divided into a plurality of blocks, an updating type indicating a type of updating as to the content, an updated block of the content, and an updated position;

an inserting unit configured to generate an updated content by inserting an updating block into the updated position of the content in an event that the updating type is an insertion;

a first hash value calculating unit configured to calculate a hash value as to the updated block;

a signature unit configured to read out the updater identifier and the private key from the management data storage unit to generate a digital signature using the private key as to updating record information including the updater identifier, the updated position, the hash value as to the updated block, and the updating type; and

an output unit configured to output the updated content, the updating record information, and the digital signature.

2. The contents processing device according to claim 1, comprising:

a receiving unit configured to receive the updated content, and the updating record information and the digital signature corresponding to the updated content from another contents processing device;

a second hash value calculating unit configured to calculate a hash value as to each block included in the received updated content;

a key obtaining unit configured to obtain a public key corresponding to the updater identifier included in the received updating record information;

a signature verifying unit configured to verify the received digital signature using the received updating record information and the public key; and

an inserting operation verifying unit configured to confirm, in the event that the updating type included in the received updating record information is the insertion, by comparing the hash value as to the block of the updated position included in the updating record information of the calculated hash values, and the hash value included in the updating record information, a validity of the block of the updated position.

3. The contents processing device according to claim 2, wherein the receiving unit receives a hash value list before updating including the hash value corresponding to each of the plurality of blocks included in the content before block updating, and a digital signature before updating generated by the private key of a creator of the content as to the hash value list before updating;

and

wherein the signature verifying unit uses the received hash value list before updating, and the public key of the creator to verify the received digital signature before updating; and

wherein the inserting operation verifying unit confirms a validity of a block other than the updated block by comparing, regarding each block other than the updated block, included in the updated content, the hash value of the block calculated by the second hash value calculating unit, and the hash value included in the hash value list before updating, and also corresponding to the block.

4. A contents processing device, comprising:

a management data storage unit configured to store an updater identifier and a private key in a correlated manner;

an accepting unit configured to accept a content which is divided into a plurality of blocks, an updating type indicating a type of updating as to the content, an updated block of the content, and an updated position;

an inserting unit configured to generate an updated content by inserting the updated block into the updated position of the content in an event that the updating type is an insertion;

a first hash value list calculating unit configured to calculate the hash value of each block included in the generated updated content to generate a hash value list including the hash value of each of the blocks;

a signature unit configured to read out the updater identifier and the private key from the management data storage unit to generate a digital signature using the private key as to updating record information including the updater identifier, the updated position, and the updating type, and the hash value list; and

an output unit configured to output the updated content, the updating record information, and the digital signature.

5. The contents processing device according to claim 4, comprising:

a receiving unit configured to receive the updated content, and the updating record information, the digital signature corresponding to the updated content, the digital signature, and a digital signature before updating generated by the private key of a creator of the content as to a hash value list including the hash value corresponding to each of the plurality of blocks included in the content before block updating, from another contents processing device;

a key obtaining unit configured to obtain a public key corresponding to the updater identifier included in the received updating record information;

a second hash value list generating unit configured to calculate the hash value of each block included in the received updated content to generate a hash value list including the hash value of each of the blocks; and

a signature verifying unit configured to verify, in the event that the updating type included in the received updating record information is the insertion, the received digital signature using the hash value list generated by the second hash value list generating unit, the updating record information, and the public key, and also to verify the digital signature before updating using a hash value list obtained by removing the hash value corresponding to the updated block from the hash value list generated by the second hash value generating unit, and the public key of the creator.

6. An information processing method of partial integrity assurance of contents, comprising:

accepting a content which is divided into a plurality of blocks, an updating type indicating the type of updating as to the content, an updated block to be updated of the content, and an updated position;

generating an updated content by inserting the updated block into the updated position of the content in an event that the updating type is an insertion;

calculating a hash value for calculating a hash value as to the updated block;

reading out the updater identifier and the private key from the management data storage unit which stores an updater identifier and a private key in a correlated manner to generate a digital signature using the private key as to updating record information including the updater identifier, the updated position, the hash value as to the updated block, and the updating type; and

outputting the updated content, the updating record information, and the digital signature.

7. An information processing method of partial integrity assurance of contents, comprising:

accepting a content which is divided into a plurality of blocks, an updating type indicating the type of updating as to the content, an updated block to be updated of the content, and an updated position;

generating an updated content by inserting the updated block into the updated position of the content in an event that the updating type is an insertion;

generating a first hash value list for calculating the hash value of each block included in the generated updated content to generate a hash value list including the hash value of each of the blocks;

reading out the updater identifier and the private key from the management data storage unit which stores an updater identifier and a private key in a correlated manner to generate a digital signature using the private key as to updating record information including the updater identifier, the updated position, and the updating type, and the hash value list; and

outputting the updated content, the updating record information, and the digital signature.

8. A computer-readable recording medium which stores a program causing a computer to execute a process of partial integrity assurance of contents, the process comprising:

accepting a content which is divided into a plurality of blocks, an updating type indicating the type of updating as to the content, an updated block to be updated of the content, and an updated position;

generating an updated content by inserting the updated block into the updated position of the content in an event that the updating type is an insertion;

calculating a hash value for calculating a hash value as to the updated block;

reading out the updater identifier and the private key from the management data storage unit which stores an updater identifier and a private key in a correlated manner to generate a digital signature using the private key as to updating record information including the updater identifier, the updated position, the hash value as to the updated block, and the updating type; and

outputting the updated content, the updating record information, and the digital signature.

9. A computer-readable recording medium which stores a program causing a computer to execute a process of partial integrity assurance of contents, the process comprising:

accepting a content which is divided into a plurality of blocks, an updating type indicating the type of updating as to the content, an updated block to be updated of the content, and an updated position;

generating an updated content by inserting the updated block into the updated position of the content in an event that the updating type is an insertion;

generating a first hash value list for calculating the hash value of each block included in the generated updated content to generate a hash value list including the hash value of each of the blocks;

reading out the updater identifier and the private key from the management data storage unit which stores an updater identifier and a private key in a correlated manner to generate a digital signature using the private key as to updating record information including the updater identifier, the updated position, and the updating type, and the hash value list; and

outputting the updated content, the updating record information, and the digital signature.