Patent ID: 8214639
Filing Date: 2012-07-03
Classification: G06F,G06Q

Abstract:
1. An application executing device for reading an application from a non-transitory recording medium, the non-transitory recording medium storing therein a disc root certificate, a first root certificate, the application, a credential information which specifies a provider ID identifying a provider organization that gives the application an authorization to use a target file, and which specifies a file path, of the target file, containing the provider ID, a leaf certificate containing the provider ID, and a second root certificate associated with the leaf certificate, the disc root certificate being a third root certificate issued by a root certificate authority and assigned to the recording medium, and an organization ID corresponding to the application being different from the provider ID, the application executing device comprising: a drive unit operable to drive the non-transitory recording medium to read information from the non-transitory recording medium or operable to eject the non-transitory recording medium; and a management unit operable to verify authenticity of the application by judging whether the disc root certificate matches the first root certificate; an execution unit operable to execute the application if the authenticity of the application is verified by the management unit; and a storage unit having; and a first domain area specified by a path that uses a hash value of the disc root certificate, and a second domain area specified by a path that uses a hash value of the second root certificate, wherein if the authenticity of the application is verified by the management unit, the application executing device allocates the first domain area to the application, when the application being executed issues a request to access the target file by specifying the file path containing the provider ID specified in the credential information, the application executing device (i) converts the file path into a file path that uses the specified provider ID and the hash value of the second root certificate associated with the leaf certificate containing the provider ID, and (ii) gives the application authorization to use the target file specified by the file path obtained by the conversion, in the second domain area.