An information storage apparatus, comprising: a flash memory unit including a general purpose area to which access is permitted without performing an access right confirmation process; an interface that is configured to communicate with an information processing apparatus connected to the information storage apparatus, wherein the information storage apparatus is configured to perform mutual authentication with the information processing apparatus via the interface; a first controller that is configured to read first identification information from the flash memory unit, and to control a process to provide the first identification information to the information processing apparatus via the interface on the condition that mutual authentication between the information processing apparatus and the first controller is satisfied, wherein the first controller and the flash memory unit are two separate, independent entities within the information storage apparatus; and a second controller included in the flash memory unit that is configured to read second identification information from the flash memory unit, and to control a process to provide the second identification information to the information processing apparatus via the interface in response to an external instruction received from the information processing apparatus via the interface and on the condition that mutual authentication between the information processing apparatus and the second controller is satisfied, wherein the second identification information may only be read by the second controller, wherein the first controller is configured to write a verification value, which is generated by applying the first identification information and the second identification information and is received from the information processing apparatus via the interface, into the general purpose area of the flash memory unit. a flash memory unit including a general purpose area to which access is permitted without performing an access right confirmation process; an interface that is configured to communicate with an information processing apparatus connected to the information storage apparatus, wherein the information storage apparatus is configured to perform mutual authentication with the information processing apparatus via the interface; a first controller that is configured to read first identification information from the flash memory unit, and to control a process to provide the first identification information to the information processing apparatus via the interface on the condition that mutual authentication between the information processing apparatus and the first controller is satisfied, wherein the first controller and the flash memory unit are two separate, independent entities within the information storage apparatus; and a second controller included in the flash memory unit that is configured to read second identification information from the flash memory unit, and to control a process to provide the second identification information to the information processing apparatus via the interface in response to an external instruction received from the information processing apparatus via the interface and on the condition that mutual authentication between the information processing apparatus and the second controller is satisfied, wherein the second identification information may only be read by the second controller, wherein the first controller is configured to write a verification value, which is generated by applying the first identification information and the second identification information and is received from the information processing apparatus via the interface, into the general purpose area of the flash memory unit.