Patent ID: 7783884
Filing Date: 2010-08-24
Classification: H04L

Abstract:
1. An information processing device for receiving services from at least one server connected thereto via a network, the information processing device using an application program from among a plurality of application programs that securely communicates with the at least one server, the information processing device comprising: a storing unit for storing the plurality of application programs; a private key generating unit operable to generate private keys respectively associated with the plurality of application programs stored in the storing unit, and write the generated private keys in the storing unit; a public key generating unit operable to generate public keys respectively corresponding to the private keys; a public key transmitting unit operable to transmit the generated public keys to the at least one server from which the information processing device receives the services using the plurality of application programs respectively corresponding to the transmitted public keys; a public key certification acquiring unit operable to acquire a plurality of public key certifications each including a corresponding one of the public keys from the at least one server and write the public key certifications in the storing unit; and a program execution unit operable to read one of the plurality of application programs and execute the read application program, wherein each of the plurality of application programs includes: a key sharing program for securely sharing a shared key with the at least one server based on a public key cryptosystem; a communication program for receiving and transmitting data encrypted based on the shared key from and to the at least one server; and an encryption program for encrypting data to be transmitted and decrypting received data, wherein the program execution unit reads, from the storing unit, one of the private keys associated with the read application program and the corresponding public key, wherein the program execution unit executes the key sharing program, the communication program, and the encryption program to: securely share the shared key with the at least one server based on the read private key and the read corresponding public key by using the public key cryptosystem; transmit and receive data encrypted based on the shared key to and from the at least one server; encrypt data to be transmitted to the at least one server; and decrypt data received from the at least one server, wherein the storing unit further stores an initial private key that is unique to the information processing device, and an initial certification that includes a public key corresponding to the initial private key and signature data issued by a certificate authority relating to the public key corresponding to the initial private key, wherein the public key transmitting unit uses the initial private key and the initial certification to securely transmit the public keys to the at least one server, wherein the public key certification acquiring unit uses the initial private key and the initial certification to securely receive the public key certifications from the at least one server, and wherein the public key certification acquiring unit judges whether to add signature data of the information processing device, and if judging affirmatively, generates the signature data based on the initial private key, adds the generated signature data to the public key certifications, and stores the public key certifications in the storing unit.