INFORMATION PROCESSING DEVICE, INFORMATION RECORDING DEVICE, INFORMATION PROCESSING SYSTEM, PROGRAM UPDATE METHOD, PROGRAM, AND INTEGRATED CIRCUIT
According to the prior art, it is difficult to ensure an update of a program when a terminal has already been hacked because in that case, there is a possibility that the reliability of the update module has been lost. A card storing secret information to be used by the terminal includes: a function to store an update program for the terminal and confirm whether or not the terminal is authentic by using information obtained from the terminal; and a function to output the secret information when the terminal is judged to be authentic and output an update program when the terminal is judged not to be authentic. With this structure, when the terminal attempts to use the secret information, the terminal is forced to update the program.
1 . An information processing system comprising an information processing device and a portable information recording device that is attachable and detachable to and from the information processing device, wherein
the information processing device includes:
a first storage unit storing an operation program including a plurality of computer instructions for operating the information processing device;
a measuring unit operable to measure an amount of characteristics of the operation program when the operation program is loaded;
a requesting unit operable to send a request for secret information to the information recording device;
a receiving unit operable to receive either the secret information or an update program, depending on a result of a judgment which is made by the information recording device to confirm whether or not the operation program is authentic; and
an update unit operable to, when the receiving unit has received the update program, update the operation program stored in the first storage unit in accordance with the received update program, and
the information recording device includes:
an information holding unit holding the secret information safely;
a second storage unit storing the update program for updating the operation program;
a receiving unit operable to receive the request for secret information from the information processing device;
a judging unit operable to, when the receiving unit has received the request, judge whether or not the operation program is authentic, using the measured amount of characteristics; and
an output unit operable to output the secret information held by the information holding unit to the information processing device when the judging unit judges that the operation program is authentic, and output the update program stored in the second storage unit to the information processing device when the judging unit judges that the operation program is not authentic.
2 . The information processing system of claim 1 , wherein
the information recording device further includes:
an identifier storage unit storing a device identifier for identifying an information processing device that was connected with the information recording device in past;
a first obtaining unit operable to obtain, from the server device via a network and the information processing device connected with the network, an update program that is associated with the device identifier stored in the identifier storage unit, and write the obtained update program to the second storage unit;
an authenticity information storage unit; and
a second obtaining unit operable to obtain, from the server device via the network and the information processing device connected with the network, authenticity confirmation information that is associated with the update program stored in the second storage unit and is used to confirm authenticity of the operation program, and write the obtained authenticity confirmation information to the authenticity information storage unit, wherein
the judging unit judges whether or not the operation program is authentic, in accordance with the authenticity confirmation information written to the authenticity information storage unit.
3 . A portable information recording device that is attachable and detachable to/from an information processing device, the information recording device comprising:
an information holding unit holding secret information safely;
a program storage unit storing an update program for updating an operation program including a plurality of computer instructions for operating the information processing device;
a receiving unit operable to receive a request for the secret information from the information processing device;
a judging unit operable to, when the receiving unit has received the request, judge whether or not the operation program is authentic using an amount of characteristics of the operation program, the amount of characteristics being measured by and obtained from the information processing device; and
an output unit operable to output the secret information held by the information holding unit to the information processing device when the judging unit judges that the operation program is authentic, and output the update program stored in the program storage unit to the information processing device when the judging unit judges that the operation program is not authentic.
4 . The information recording device of claim 3 further comprising
an authentic information storage unit storing an authentic amount of characteristics being an amount of characteristics of an authentic operation program, wherein
the judging unit judges whether or not the operation program is authentic, by comparing the authentic amount of characteristics with the measured amount of characteristics obtained from the information processing device.
5 . The information recording device of claim 3 , wherein
the program storage unit stores one or more device identifiers for identifying one or more information processing devices that were connected with the information recording device at least in past, and stores one or more update programs for the one or more information processing devices in one-to-one correspondence with the one or more device identifiers, and
the output unit outputs an update program which corresponds to a device identifier for identifying an information processing device that is an issuer of the received request.
6 . The information recording device of claim 5 , wherein
the receiving unit further receives, together with the request, a device identifier for identifying the information processing device that is the issuer of the received request,
the program storage unit stores one or more device identifiers for identifying one or more information processing devices that issued the request in past, and stores one or more update programs for the one or more information processing devices in one-to-one correspondence with the one or more device identifiers, and
the output unit outputs an update program for an information processing device identified by the device identifier received together with the request.
7 . The information recording device of claim 6 , wherein
when the request is received from another information processing device, the program storage unit further stores additionally a device identifier for identifying said another information processing device.
8 . The information recording device of claim 7 further comprising: a transmitting unit operable to transmit a device identifier stored in the program storage unit, to a server device that provides the update program; and
an obtaining unit operable to obtain, from the server device, an update program for an information processing device identified by the transmitted device identifier, wherein
the program storage device stores the obtained update program in association with the device identifier.
9 . The information recording device of claim 3 being a portable memory card.
10 . The information recording device of claim 3 , wherein
the judging unit performs the judgment using a verification process provided by a structure certification technology standardized by Trusted Computing Group (TCG).
11 . An information processing device to which a portable information recording device is attached, the information processing device comprising:
a first storage unit storing an operation program including a plurality of computer instructions for operating the information processing device;
a measuring unit operable to measure an amount of characteristics of the operation program when the operation program is loaded;
a requesting unit operable to send a request for secret information to the information recording device;
a receiving unit operable to receive either the secret
information or an update program, depending on a result of a judgment made by the information recording device to confirm whether or not the operation program is authentic; and
an update unit operable to, when the receiving unit has received the update program, update the operation program stored in the first storage unit in accordance with the received update program.
12 . The information processing device of claim 11 , wherein
the measuring unit is protected by means of a tamper resistant structure thereof.
13 . The information processing device of claim 11 further comprising
a certifying unit that is structured as a Trusted Platform Module standardized by Trusted Computing Group (TCG), and generates, at least in accordance with the measured amount of characteristics, certificate information for certifying authenticity of the information processing device.
14 . A program update method for use in a portable information recording device that is attachable and detachable to/from an information processing device, the information recording device comprising: an information holding unit holding secret information safely; and a program storage unit storing an update program for updating an operation program including a plurality of computer instructions for operating the information processing device,
the program update method comprising the steps of:
receiving a request for the secret information from the information processing device;
judging, when the receiving unit has received the request, whether or not the operation program is authentic using an amount of characteristics of the operation program, the amount of characteristics being measured by and obtained from the information processing device; and
outputting the secret information held by the information holding unit to the information processing device when the judging step judges that the operation program is authentic, and outputting the update program stored in the program storage unit to the information processing device when the judging step judges that the operation program is not authentic.
15 . A computer program for updating a program that is for use in a portable information recording device that is attachable and detachable to/from an information processing device,
the information recording device comprising: an information holding unit holding secret information safely; and a program storage unit storing an update program for updating an operation program including a plurality of computer instructions for operating the information processing device,
the computer program causing a computer to perform the steps of:
receiving a request for the secret information from the information processing device;
judging, when the receiving unit has received the request, whether or not the operation program is authentic using an amount of characteristics of the operation program, the amount of characteristics being measured by and obtained from the information processing device; and
outputting the secret information held by the information holding unit to the information processing device when the judging step judges that the operation program is authentic, and outputting the update program stored in the program storage unit to the information processing device when the judging step judges that the operation program is not authentic.
16 . An integrated circuit that constitutes a portable information recording device that, is attachable and detachable to/from an information processing device,
the information recording device including: an information holding unit holding secret information safely; and a program storage unit storing an update program for updating an operation program including a plurality of computer instructions for operating the information processing device,
the integrated circuit comprising:
a receiving unit operable to receive a request for the secret information from the information processing device;
a judging unit operable to, when the receiving unit has received the request, judge whether or not the operation program is authentic using an amount of characteristics of the operation program, the amount of characteristics being measured by and obtained from the information processing device; and
an output unit operable to output the secret information held by the information holding unit to the information processing device when the judging unit judges that the operation program is authentic, and output the update program stored in the program storage unit to the information processing device when the judging unit judges that the operation program is not authentic.
17 . An information processing system comprising: a server device; a first information processing device that is connectable with the server device via a network; a second information processing device not having a function to connect with the server device via a network; and a portable information recording device that is attachable and detachable to/from each information processing device, wherein
the second information processing device has been revoked,
the server device stores an update program for updating
an operation program for operating the second information processing device,
the information recording device is attached to the first information processing device, the first information processing device obtains the update program from the server device via the network and outputs the obtained update program to the information recording device,
the information recording device is attached to the second information processing device,
the information recording device includes:
an information holding unit holding secret information safely;
a first storage unit receiving the update program from the first information processing device and storing the received update program;
a receiving unit operable to receive a request for the secret information from the second information processing device;
a judging unit operable to, when the receiving unit has received the request, judge whether or not the operation program stored in the second information processing device is authentic, using an amount of characteristics measured by the second information processing device; and
an output unit operable to output the secret information held by the information holding unit to the second information processing device when the judging unit judges that the operation program is authentic, and output the update program stored in the first storage unit to the second information processing device when the judging unit judges that the operation program is not authentic, and
the second information processing device includes:
a second storage unit storing the operation program including a plurality of computer instructions for operating the second information processing device;
a measuring unit operable to measure the amount of characteristics of the operation program when the operation program is loaded;
a requesting unit operable to send a request for the secret information to the information recording device;
a receiving unit operable to receive either the secret information or an update program, depending on a result of the judgment made, by the information recording device to confirm whether or not the operation program is authentic; and
an update unit operable to, when the receiving unit has received the update program, update the operation program stored in the second storage unit in accordance with the received update program.
18 . An information processing method for use in an information processing system that comprises: a server device; a first information processing device that is connectable with the server device via a network; a second information processing device not having a function to connect with the server device via a network; and a portable information recording device that is attachable and detachable to/from each information processing device, wherein
the second information processing device has been revoked,
the server device stores an update program for updating an operation program for operating the second information processing device,
the information recording device includes an information holding unit holding secret information safely,
the second information processing device includes a storage unit storing the operation program including a plurality of computer instructions for operating the second information processing device, and
the information processing method comprises the steps of:
when the information recording device has been attached to the first information processing device, causing the first information processing device to obtain the update program from the server device via the network, and outputting the obtained update program to the information recording device;
when the information recording device has been attached to the second information processing device, causing the information recording device to obtain the update program from the first information processing device, and storing the obtained update program;
causing the information recording device to receive a request for the secret information from the second information processing device;
when the information recording device has received the request, causing the second information processing device to judge whether or not the operation program stored in the second information processing device is authentic, using an amount of characteristics measured by the second information processing device;
outputting the secret information held by the information holding unit to the second information processing device when the information recording device judges that the operation program is authentic, and outputting the update program stored in the information recording device to the second information processing device when the judging unit judges that the operation program is not authentic;
causing the second information processing device to measure the amount of characteristics of the operation program when the operation program is loaded;
causing the second information processing device to send a request for the secret information to the information recording device;
causing the second information processing device to receive either the secret information or an update program, depending on a result of the judgment made by the information recording device to confirm whether or not the operation program is authentic; and
causing the second information processing device to, when the update program has been received, update the operation program stored in the second storage unit in accordance with the received update program.