Patent ID: 7360088
Filing Date: 2008-04-15
Classification: G06Q,G07F,H04L

Abstract:
1. A substitute server computer used for a computer system for executing client-server-type business processing, the substitute server computer comprising: an integrated circuit card reader/writer connected to an IC card having business executing information used for execution of a client processing part of the client-server-type business processing and having first mutual authentication key; a hardware security module having a tamper resistance; and a control computer connected to the integrated circuit card, the hardware security module, a business server computer for executing the server processing part of the business processing, and an authentication server computer having a second mutual authentication key, wherein the hardware security module is configured to receive a first session encryption key generated by using the first and second mutual authentication keys and by performing the mutual authentication with the IC card from the authentication server, to establish a first secure channel between the hardware security module and the integrated circuit card by using a second session encryption key generated from the integrated circuit card when performing the mutual authentication and from the received first session encryption key, to receive the business executing data from the IC card, to establish a second secure channel by using the business server receiving the first session encryption key and the second session encryption key, and to perform predetermined business processing with the hardware security module and the business server computer by using the business executing data, wherein the hardware security module has a third mutual authentication key and is further configured to perform mutual authentication with the authentication server by using the third mutual authentication key and a fourth mutual authentication key of the authentication server computer to establish a third secure channel before the mutual authentication between the integrated circuit card and the authentication server computer, and to receive a first session encryption key from the authentication server through the third secure channel.