Patent Description:
For a contactless IC card, a reading out process or a writing process is performed by proximity wireless communication (NFC: Near Field Communication). For example, in PTL <NUM>, the type of a contactless IC card is determined on the basis of with which of the information, among the pieces of information of plural types of contactless IC cards retained in a reader-writer, the information transmitted from the contactless IC card by proximity wireless communication corresponds, to perform a reading out process or a writing process.

Incidentally, in an information terminal that is used for authentication of a user or the like, a scanner for reading a barcode and a PIN pad for inputting a password are widely used. However, in a case where an information terminal that does not have a short-range wireless communication function (for example, NFC) is used, authentication of a contactless IC card cannot be performed.

Therefore, it is an object of the present technology to provide an information processing apparatus and a portable terminal as well as an information processing method that can perform authentication of an information storage medium for which reading out and writing of information can be performed by short-range wireless communication, by using a specific information terminal that does not have a short-range wireless communication function.

In the following, a mode for carrying out the present technology is described. It is to be noted that the description is given in the following order.

<FIG> depicts an example of a configuration of an information processing system in which a portable terminal and an information processing apparatus of the present disclosure are used. In the example of the configuration depicted in <FIG>, an information processing system <NUM> includes an information storage medium (for example, a contactless IC card) <NUM>, a portable terminal (for example, a smartphone) <NUM>, an information terminal <NUM>, and an information processing apparatus (for example, a server) <NUM>. The information storage medium <NUM> has a short-range wireless communication function (for example, NFC). The portable terminal <NUM> has a short-range wireless communication function and a function of performing communication with equipment connected to a network <NUM>. The information terminal <NUM> does not have a short-range wireless communication function but has a function of performing communication with equipment connected to the network <NUM>. Further, the information processing apparatus <NUM> has a function of performing communication with equipment connected to the network <NUM>. Furthermore, in the information processing system <NUM>, a terminal information presentation unit <NUM> that allows the portable terminal <NUM> to acquire terminal information indicative of the information terminal <NUM> is provided.

The terminal information may indicate not only the information terminal <NUM> but also a shop, an event venue, a station, or the like in which the information terminal <NUM> is installed. For example, in a case where plural information terminals <NUM> are provided in the same shop, the information terminals <NUM> in the shop may be grouped, and the terminal information may be information indicating any of the groups. Further, the terminal information may indicate a manager or the like of a shop, an event venue, a station, or the like in which the information terminal <NUM> is installed. For example, in a case where the information terminals <NUM> are provided in plural affiliated shops, the information terminals <NUM> in plural affiliated shops may be grouped, and the terminal information may be information indicative of any of the groups. It is to be noted that, in the following description, the terminal information is information indicative of the information terminal <NUM>.

The portable terminal <NUM> acquires, from the terminal information presentation unit <NUM>, terminal information indicative of an information terminal <NUM> that performs authentication of the information storage medium <NUM> without performing short-range wireless communication with the information storage medium. For example, the terminal information presentation unit <NUM> includes a wireless tag, an application program provided by a manager of the information terminal <NUM> or by the information processing apparatus <NUM>, or an application program shared by individual information terminals <NUM>, and so forth. The portable terminal <NUM> performs short-range wireless communication with the wireless tag or executes the application program, to acquire the terminal information.

The portable terminal <NUM> issues an authentication process request for an information storage medium to the information processing apparatus <NUM>, by using the acquired terminal information, to acquire, from the information processing apparatus <NUM>, approval information that is to be used when a result of authentication of the information storage medium is to be acquired from the information processing apparatus <NUM> by the information terminal <NUM>, and then performs display based on the acquired approval information.

Further, the portable terminal <NUM> performs short-range wireless communication with the information storage medium <NUM> and outputs, to the information storage medium <NUM>, the authentication information request supplied from the information processing apparatus <NUM> according to the authentication process request, and then acquires an authentication information answer from the information storage medium <NUM> corresponding to the authentication information request. Further, the portable terminal <NUM> outputs the acquired authentication information answer to the information processing apparatus <NUM> such that the information processing apparatus <NUM> performs authentication of the information storage medium of the authentication target in the information terminal <NUM>. Furthermore, the portable terminal <NUM> acquires approval information that is to be used when a result of authentication of the information storage medium is to be acquired from the information processing apparatus <NUM> by the information terminal <NUM>, and performs display based on the approval information.

As the authentication process for the information storage medium <NUM>, the information terminal <NUM> accepts an input using the display based on the approval information of the portable terminal <NUM> by a barcode reader 42a or a PIN (Personal Identification Number) pad 42b thereof and issues an approval information verification request including the inputted permission information and terminal information to the information processing apparatus <NUM>, to acquire a result of verification of the information storage medium <NUM> from the information processing apparatus <NUM>.

The information processing apparatus <NUM> outputs the authentication information request to the portable terminal <NUM> according to the authentication process request for the information storage medium <NUM> from the portable terminal <NUM> using the terminal information indicative of the information terminal <NUM>, and performs authentication of the information storage medium <NUM> on the basis of an authentication information answer supplied from the portable terminal <NUM>. Then, the information processing apparatus <NUM> outputs approval information that is to be used when a result of authentication of the information storage medium <NUM> is to be acquired from the information processing apparatus <NUM> by the information terminal <NUM>, to the portable terminal <NUM>. Further, the authentication processing unit may generate an encrypted ID code in response to a request for an encrypted ID code from the portable terminal including approval information and encrypted ID code attribute information from the portable terminal and may output the encrypted ID code to the portable terminal. It is to be noted that the encrypted ID code is information that is used when the result of authentication of the information storage medium is to be acquired from the information processing apparatus <NUM> by the information terminal <NUM> and is a code number that can be recognized by the user. Further, the information processing apparatus <NUM> performs verification according to a verification request for the approval information or for an encrypted ID code from the information terminal <NUM>, and generates and outputs a verification answer indicative of the verification result to the information terminal <NUM>.

<FIG> exemplifies a configuration of the information storage medium. It is to be noted that, in the following description, the information storage medium <NUM> is a contactless IC card.

The information storage medium <NUM> includes an antenna <NUM>, a power supply unit <NUM>, a communication unit <NUM>, a storage unit <NUM>, and a control unit <NUM>. The antenna <NUM> is used to establish coupling to the portable terminal <NUM> by electromagnetic induction and perform transmission of information and so forth and transfer of power, and is connected to the power supply unit <NUM> and the communication unit <NUM>.

The power supply unit <NUM> performs conversion of an AC voltage generated in the antenna <NUM> through the coupling to the portable terminal <NUM> by the electromagnetic induction into a DC fixed voltage and supplies power to the communication unit <NUM>, the storage unit <NUM>, and the control unit <NUM>.

The communication unit <NUM> outputs a reception signal obtained by demodulating a wireless signal received by the antenna <NUM> to the control unit <NUM>. Further, the communication unit <NUM> modulates a transmission signal supplied from the control unit <NUM> and transmits the modulated transmission signal as a wireless signal from the antenna <NUM>.

The storage unit <NUM> stores various kinds of information therein. For example, the storage unit <NUM> stores therein medium unique information unique to the information storage medium <NUM>, a use situation of the information storage medium <NUM>, information supplied from the information processing apparatus, and so forth.

The control unit <NUM> performs reading out of information stored in the storage unit <NUM>, writing of information into the storage unit <NUM>, and so forth, according to a command from the portable terminal <NUM>.

<FIG> exemplifies a configuration of the portable terminal. The portable terminal <NUM> includes an inputting unit <NUM>, an NFC unit <NUM>, a network communication unit <NUM>, a storage unit <NUM>, a display unit <NUM>, a position detection unit <NUM>, an image capturing unit <NUM>, and a control unit <NUM>.

The inputting unit <NUM> is configured using a touch panel, switches, inputting keys, and so forth and outputs an operation signal according to a user operation thereof to the control unit <NUM>. For example, on the inputting unit <NUM>, an operation relating to authentication of a contactless IC card, an operation relating to a telephone call, an operation for creation or transmission/reception of an electronic mail, an operation for setting operation of the portable terminal, an operation for changing the operation of the portable terminal, and so forth are performed. The inputting unit <NUM> may otherwise be configured using a microphone or the like and acquires and outputs, for example, speech for instructing various operations or telephone conversation voice to the control unit <NUM>. Furthermore, the inputting unit <NUM> may be configured such that it receives a remote control signal for which infrared rays or other radio waves are used and outputs the reception signal to the control unit <NUM>.

The NFC unit <NUM> performs short-range wireless communication with the information storage medium <NUM> and performs information transmission to and from the information storage medium <NUM> and power supply to the information storage medium <NUM>.

The network communication unit <NUM> performs communication using Bluetooth (registered trademark), communication using Wi-Fi (registered trademark), mobile communication, and so forth.

The storage unit <NUM> is configured using a semiconductor memory and so forth and stores control programs and application programs to be executed by the control unit <NUM>, data to be used when the programs are executed, data generated by execution of the programs, and so forth.

The display unit <NUM> is configured using a liquid crystal display element, an organic EL (Electro Luminescence) display element, or the like. The display unit <NUM> performs display of various menus, display indicating an operation state, a setting state, and so forth, operation display of various applications, display of various kinds of information, and so forth.

The position detection unit <NUM> is configured using a position measurement signal reception unit, a gyro sensor, an acceleration sensor, and so forth, and detects a current position of the portable terminal on the basis of a position measurement signal and a sensor signal and outputs a result of the detection to the control unit <NUM>.

The image capturing unit <NUM> is configured using a lens, an image capturing element, and so forth and outputs a captured image signal to the control unit <NUM>.

The control unit <NUM> is configured using, for example, a CPU (Central Processing Unit) and so forth. The control unit <NUM> executes the programs stored in the storage unit <NUM>. Further, the control unit <NUM> controls the associated components on the basis of an operation signal from the inputting unit <NUM> such that operation according to a user operation is performed by the portable terminal <NUM>. Further, the control unit <NUM> performs operation as an information acquisition unit that uses terminal information indicative of an information terminal <NUM>, which performs authentication of the information storage medium <NUM> without performing short-range wireless communication with the information storage medium <NUM>, to perform authentication process request for the information storage medium <NUM> to the information processing apparatus <NUM> and acquires, from the information processing apparatus <NUM>, approval information that is to be used when a result of authentication of the information storage medium <NUM> is acquired from the information processing apparatus <NUM> by the information terminal <NUM>.

Now, a configuration of the information terminal is described. <FIG> exemplifies a configuration of the information terminal. The information terminal <NUM> includes an inputting unit <NUM>, a permission information acquisition unit <NUM>, a network communication unit <NUM>, a storage unit <NUM>, a display unit <NUM>, and a control unit <NUM>.

The inputting unit <NUM> is configured using a touch panel, inputting keys, and so forth and outputs an operation signal according to a user operation to the control unit <NUM>. For example, on the inputting unit <NUM>, an operation for setting the operation of the information terminal, an operation for changing the operation of the information terminal, and so forth are performed.

The permission information acquisition unit <NUM> is configured using at least one of a barcode reader 42a for reading a one-dimensional or two-dimensional barcode and a PIN pad 42b. The permission information acquisition unit <NUM> reads a barcode displayed on the portable terminal <NUM> or the like or accepts an input of an encrypted ID code by the PIN pad and outputs approval information indicative of the read code or the inputted code to the control unit <NUM>.

The network communication unit <NUM> performs communication using Wi-Fi (registered trademark), communication using a wired LAN, or the like to perform communication of information with the information processing apparatus <NUM>.

The storage unit <NUM> is configured using a semiconductor memory and so forth. The storage unit <NUM> may otherwise be configured using, for example, a magnetic storage device such as a hard disk drive (HDD: Hard Disk Drive), an optical storage device, a magnetooptical storage device, or the like. The storage unit <NUM> stores programs to be executed by the control unit <NUM>, pieces of data that are used when the programs are executed, data generated by execution of the programs, and so forth.

The display unit <NUM> is configured using a liquid crystal display device, an organic EL (Electro Luminescence) display element, or the like. The display unit <NUM> performs display of an operation state or a setting state of the information terminal <NUM>, an operation setting menu, and so forth.

The control unit <NUM> is configured using, for example, a CPU (Central Processing Unit) or the like. The control unit <NUM> executes programs stored in the storage unit <NUM>. Further, the control unit <NUM> controls the associated components on the basis of an operation signal from the inputting unit <NUM> such that operation according to the user operation is performed by the information terminal <NUM>. Furthermore, the control unit <NUM> issues an approval information verification request including inputted permission information and terminal information to the information processing apparatus <NUM>, and acquires a result of authentication of the information storage medium <NUM> from the information processing apparatus <NUM>.

Now, a configuration of the information processing apparatus is described. <FIG> exemplifies a configuration of the information processing apparatus. The information processing apparatus <NUM> includes a network communication unit <NUM>, a database <NUM>, an inputting unit <NUM>, a display unit <NUM>, and an authentication processing unit <NUM>.

The network communication unit <NUM> is provided in order to perform communication with the portable terminal <NUM> or the information terminal <NUM>. The network communication unit <NUM> receives a request, for example, from the portable terminal <NUM> and outputs the request to the authentication processing unit <NUM>, to transmit, to the portable terminal <NUM>, information generated by processing performed by the authentication processing unit <NUM> according to the request. Further, the network communication unit <NUM> receives a request from the information terminal <NUM> and outputs the request to the authentication processing unit <NUM>, to transmit, to the portable terminal <NUM>, information generated by processing executed by the authentication processing unit <NUM> according to the request.

The database <NUM> has stored therein various kinds of information regarding users of contactless IC cards, information of individual information terminals, and so forth.

The inputting unit <NUM> is configured using a keyboard, a touch panel, a pointing device, and so forth and outputs an operation signal according to a user operation to the authentication processing unit <NUM>. For example, on the inputting unit <NUM>, operations for setting the operation of an information processing unit, a checking operation of an operation situation, checking or update of information stored in the database <NUM>, and so forth are performed.

The display unit <NUM> is configured using a liquid crystal display element, an organic EL (Electro Luminescence) display element, or the like. The display unit <NUM> performs display of an operation state or a setting state of the information processing apparatus <NUM> or information stored in the database <NUM>, update screen image display, and so forth.

The authentication processing unit <NUM> controls the associated components on the basis of an operation signal from the inputting unit <NUM>, to perform information processing according to a user operation. For example, the authentication processing unit <NUM> performs processing using information stored in the database <NUM>, according to a request received by the network communication unit <NUM>, to generate an answer according to the request, and outputs the answer to the network communication unit <NUM>. Further, the authentication processing unit <NUM> performs update of information stored in the database <NUM>, registration of information into the database <NUM>, and so forth on the basis of the information received by the network communication unit <NUM>. Further, the authentication processing unit <NUM> performs processes of outputting an authentication information request to the portable terminal <NUM>, according to an authentication process request for the information storage medium <NUM> from the portable terminal <NUM> using terminal information indicative of the information terminal <NUM>, performing authentication of the information recording medium on the basis of an authentication information answer supplied from the portable terminal <NUM>, outputting approval information that is to be used when a result of authentication of the information storage medium <NUM> is to be acquired from the information processing apparatus <NUM> by the information terminal <NUM>, and so forth.

Further, the authentication processing unit <NUM> generates an encrypted ID code, according to a request for an encrypted IC code from a portable terminal including the approval information and the encrypted ID code attribute information from the portable terminal <NUM>, and outputs the encrypted ID code to the portable terminal. Furthermore, the authentication processing unit performs verification according to an approval information verification request or an encrypted IC code verification request from the information terminal and notifies the information terminal of a verification answer indicative of a result of authentication of the information storage medium.

Now, operation of the information processing system is described. In the information processing system <NUM>, approval information to be used when the information terminal <NUM> acquires a result of authentication of the information storage medium <NUM> from the information processing apparatus <NUM> is generated according to a configuration of the permission information acquisition unit <NUM> in the information terminal <NUM>. For example, in a case where the permission information acquisition unit <NUM> is configured using the barcode reader 42a, the information processing apparatus <NUM> generates approval information by using the approval code method and then generates an approval code. On the other hand, in a case where the permission information acquisition unit <NUM> is configured using the PIN pad, the information processing apparatus <NUM> generates approval information by using the encrypted ID code method and then generates an encrypted ID code.

In the following, operation where the approval code method is used is described as first operation of the information processing system, and operation where the encrypted ID code method is used is described as second operation of the information processing system. It is to be noted that, in the following description, a case in which a wireless tag is used as the terminal information presentation unit <NUM> is exemplified.

<FIG> is a sequence diagram exemplifying the first operation of the information processing system. In step ST1, the portable terminal <NUM> performs polling. The portable terminal <NUM> performs polling in order to detect a terminal information presentation unit (wireless tag) <NUM> with which it can perform short-range wireless communication.

In step ST2, the terminal information presentation unit <NUM> performs an answer process in response to the polling from the portable terminal <NUM>. The terminal information presentation unit <NUM> has stored in advance therein terminal information that is generated by the information processing apparatus <NUM>, and the terminal information presentation unit <NUM> outputs the terminal information to the portable terminal <NUM> in response to the polling. The terminal information includes an information terminal identification ID unique to the information terminal set for the information terminal <NUM>.

In step ST3, the portable terminal <NUM> issues an authentication process request for an information storage medium to the information processing apparatus <NUM>. The portable terminal <NUM> places the terminal information acquired from the terminal information presentation unit <NUM> in step ST2 into the authentication process request to make it possible for the information processing apparatus <NUM> to determine that the authentication process request is an authentication process request for an information storage medium of an authentication target in the information terminal <NUM> indicated by the terminal information.

In step ST4, the information processing apparatus <NUM> outputs the authentication information request to the portable terminal <NUM>. The information processing apparatus <NUM> generates a command of an authentication information request for reading out information necessary for authentication from the information storage medium of the authentication target in the information terminal <NUM> indicated by the terminal information and outputs the command to the portable terminal <NUM>.

In step ST5, the portable terminal <NUM> performs polling for detecting an information storage medium <NUM> with which it can perform short-range wireless communication. Here, the user of the portable terminal <NUM> adjusts the distance between the information storage medium <NUM> and the portable terminal <NUM> so as to enable short-range wireless communication between the information storage medium <NUM> and the portable terminal <NUM>, thereby allowing the information storage medium <NUM> to give an answer to the polling.

In step ST6, the information storage medium <NUM> performs an answer process for the polling from the portable terminal <NUM> and outputs medium unique information (for example, a card identifier CID) to the portable terminal <NUM>. It is to be noted that the information storage medium <NUM> which has given an answer to the polling is an information storage medium of the authentication target in the information terminal <NUM>.

In step ST7, the portable terminal <NUM> outputs the authentication information request supplied from the information processing apparatus <NUM>, to the information storage medium <NUM> by short-range wireless communication.

In step ST8, the information storage medium <NUM> generates an authentication information response to the command of the authentication information request and outputs the authentication information response to the portable terminal <NUM> by short-range wireless communication.

In step ST9, the portable terminal <NUM> outputs an authentication information answer to the information processing apparatus <NUM>. The portable terminal <NUM> generates an authentication information answer including the medium unique information acquired in step ST6 and the authentication information response acquired in step ST8 and outputs the authentication information answer to the information processing apparatus <NUM>.

In step ST10, the information processing apparatus <NUM> performs an information storage medium authentication process. The information processing apparatus <NUM> verifies the validity of the authentication information response by using, for example, preliminarily-registered key information corresponding to the medium unique information indicated by the authentication information answer. Further, the information processing apparatus <NUM> generates approval information in response to the validity being verified. Further, the information processing apparatus <NUM> registers the terminal information indicative of the information terminal <NUM>, the medium unique information indicative of the authenticated information storage medium <NUM>, and the generated approval information, in association with one another into the database.

By performing such processes as described above, the information processing apparatus <NUM> is able to determine whether the information storage medium of the authentication target in the information terminal <NUM> is a registered storage medium, through the portable terminal <NUM>.

In step ST11, the information processing apparatus <NUM> outputs the approval information. The information processing apparatus <NUM> outputs the approval information generated in step ST10 to the portable terminal <NUM>.

In step ST12, the portable terminal <NUM> performs an approval information displaying process. The display unit <NUM> of the portable terminal <NUM> performs rendering of the approval information acquired from the information processing apparatus <NUM>, to generate a barcode image that can be read by the permission information acquisition unit <NUM> of the information terminal <NUM>, and displays the barcode image.

In step ST13, the information terminal <NUM> performs a code reading process. The barcode reader 42a of the permission information acquisition unit <NUM> of the information terminal <NUM> scans the barcode image displayed on the portable terminal <NUM> and acquires the approval information. <FIG> depicts the code reading process, and a user of the information terminal <NUM> acquires the permission information by reading the barcode image GB displayed on the portable terminal <NUM> with use of the barcode reader 42a.

In step ST14, the information terminal <NUM> outputs an approval information verification request to the information processing apparatus <NUM>. The information terminal <NUM> places the terminal information indicative of the information terminal <NUM> itself and the permission information acquired in step ST13 into the approval information verification request.

In step ST15, the information processing apparatus <NUM> performs a permission information verification process. The information processing apparatus <NUM> determines whether the permission information and the terminal information that are indicated by the approval information verification request are registered in association with each other in the database. In a case where the permission information and the terminal information that are indicated by the approval information verification request are registered in association with each other in the database, the information processing apparatus <NUM> generates a permission information verification answer indicative of information (for example, an ID token) indicating the user of the information storage medium. On the other hand, in a case where the permission information and the terminal information that are indicated by the approval information verification request are not registered in association with each other in the database, the information processing apparatus <NUM> generates a permission information verification answer indicating that the information storage medium is not permitted.

In step ST16, the information processing apparatus <NUM> outputs the permission information verification answer. The information processing apparatus <NUM> outputs the permission information verification answer generated in step ST15 to the information terminal <NUM>.

If such processes as described above are performed, even the information terminal <NUM> that cannot perform short-range wireless communication with the information storage medium <NUM> is able to perform authentication of the information storage medium <NUM> by using the portable terminal <NUM> that can perform short-range wireless communication with the information storage medium <NUM> and the information processing apparatus <NUM>.

<FIG> is a sequence diagram exemplifying the second operation of the information processing system. In step ST21, the portable terminal <NUM> performs polling. The portable terminal <NUM> performs polling for detecting a terminal information presentation unit (wireless tag) <NUM> with which it can perform short-range wireless communication.

In step ST22, the terminal information presentation unit <NUM> performs an answer process in response to the polling from the portable terminal <NUM>. The terminal information presentation unit <NUM> has stored therein in advance terminal information that has been generated by the information processing apparatus <NUM>. The terminal information presentation unit <NUM> outputs the terminal information to the portable terminal <NUM> in response to the polling. The terminal information includes the information terminal identification ID unique to the information terminal set for the information terminal <NUM> and the encrypted ID code attribute information. The encrypted ID code attribute information indicates, for example, an expiration date and a code length of the encrypted ID code.

In step ST23, the portable terminal <NUM> issues an authentication process request for an information storage medium to the information processing apparatus <NUM>. The portable terminal <NUM> places the terminal information acquired from the terminal information presentation unit <NUM> in step ST22 into the authentication process request such that the information processing apparatus <NUM> can determine that the authentication process request is an authentication process request for the information storage medium of the authentication target in the information terminal <NUM> indicated by the terminal information. Further, in a case where the terminal information includes encrypted ID code attribute information, the portable terminal <NUM> determines that the encrypted ID code method is applied and issues an encrypted ID code request as indicated by step ST32 described later.

In step ST24, the information processing apparatus <NUM> outputs an authentication information request to the portable terminal <NUM>. The information processing apparatus <NUM> generates a command of an authentication information request for reading out information necessary for authentication from the information recording medium of the authentication target in the information terminal <NUM> indicated by the terminal information, and outputs the command to the portable terminal <NUM>.

In step S25, the portable terminal <NUM> performs polling in order to detect an information storage medium <NUM> with which it can perform short-range wireless communication. Here, the user of the portable terminal <NUM> adjusts the distance between the information storage medium <NUM> and the portable terminal <NUM> so as to enable short-range wireless communication between the information storage medium <NUM> and the portable terminal <NUM>, thereby allowing the information storage medium <NUM> to give an answer to the polling.

In step S26, the information storage medium <NUM> performs an answer process in response to the polling from the portable terminal <NUM> and outputs medium unique information (for example, a card identifier CID) to the portable terminal <NUM>. It is to be noted that the information storage medium <NUM> that has given an answer to the polling is the information storage medium of the authentication target in the information terminal <NUM>.

In step ST27, the portable terminal <NUM> outputs the authentication information request supplied from the information processing apparatus <NUM>, to the information storage medium <NUM> by short-range wireless communication.

In step ST28, the information storage medium <NUM> generates an authentication information response to the command of the authentication information request and outputs the authentication information response to the portable terminal <NUM> by short-range wireless communication.

In step ST29, the portable terminal <NUM> outputs an authentication information answer to the information processing apparatus <NUM>. The portable terminal <NUM> generates the authentication information answer including the medium unique information acquired in step ST26 and the authentication information response acquired in step ST28 and outputs it to the information processing apparatus <NUM>.

In step ST30, the information processing apparatus <NUM> performs an information storage medium authentication process. The information processing apparatus <NUM> verifies the validity of the authentication information response, for example, using preliminarily-registered key information corresponding to the medium unique information indicated by the authentication information answer. Further, the information processing apparatus <NUM> generates approval information in response to the validity being verified. Further, the information processing apparatus <NUM> registers the terminal information indicative of the information terminal <NUM>, medium unique information indicative of the authenticated information storage medium <NUM>, and generated approval information, in association with one another into the database.

By performing such processes as described above, the information processing apparatus <NUM> is able to determine through the portable terminal <NUM> whether the information storage medium of the authentication target in the information terminal <NUM> is a registered information storage medium.

In step S31, the information processing apparatus <NUM> outputs the approval information. The information processing apparatus <NUM> outputs the approval information generated in step ST30 to the portable terminal <NUM>.

In the second operation, since the encrypted ID code method is used, the portable terminal <NUM> issues an encrypted ID code request to the information processing apparatus <NUM> in step ST32. The portable terminal <NUM> places the terminal information indicative of the information terminal <NUM>, approval information acquired in step ST31, and encrypted ID code attribute information acquired from the terminal information presentation unit <NUM> in step ST22 into the encrypted ID code request, to enable the information processing apparatus <NUM> to generate an encrypted ID code having an expiration date and a code length indicated by the encrypted ID code attribute information and corresponding to the approval information.

In step ST33, the information processing apparatus <NUM> performs an encrypted ID code generation process. The information processing apparatus <NUM> generates, according to the encrypted ID code request, an encrypted ID code having an expiration date and a code length indicated by the encrypted ID code attribute information and corresponding to the approval information and outputs the encrypted ID code to the portable terminal <NUM>. Further, the information processing apparatus <NUM> registers the terminal information indicative of the information terminal <NUM>, approval information, encrypted ID code attribute information, and the generated encrypted ID code, in association with one another into the database.

By performing such processes as described above, the information processing apparatus <NUM> is able to determine whether an encrypted ID code verification request subsequently supplied from the information terminal <NUM> is a verification request from a registered information terminal and is a request for verification of an encrypted ID code generated on the basis of permission information.

In step ST34, the information processing apparatus <NUM> outputs the encrypted ID code. The information processing apparatus <NUM> outputs the encrypted ID code generated in step ST33 to the portable terminal <NUM>.

In step ST35, the portable terminal <NUM> performs an encrypted ID code displaying process. The portable terminal <NUM> displays the encrypted ID code acquired from the information processing apparatus <NUM> on the display unit <NUM>.

In step S36, the information terminal <NUM> performs acceptance of a code input. The permission information acquisition unit <NUM> of the information terminal <NUM> acquires an encrypted ID code by accepting an inputting operation of the encrypted ID code using the PIN pad. <FIG> depicts acceptance of a code input, and the user of the information terminal <NUM> acquires permission information by inputting the encrypted ID code GC displayed on the portable terminal <NUM>, with use of the PIN pad 42b.

In step ST37, the information terminal <NUM> outputs an encrypted ID code verification request to the information processing apparatus <NUM>. The information terminal <NUM> places the terminal information indicative of the information terminal <NUM> and the encrypted ID code acquired in step ST35 into the encrypted ID code verification request.

In step ST38, the information processing apparatus <NUM> performs an encrypted ID code verification process. The information processing apparatus <NUM> determines whether the encrypted ID code and the terminal information that are indicated by the encrypted ID code verification request are registered in association with each other in the database and the expiration date of the encrypted ID code has not passed. In a case where the encrypted ID code and the terminal information that are indicated by the encrypted ID code verification request are registered in association with each other in the database and the expiration date of the encrypted ID code has not passed, the information processing apparatus <NUM> generates an encrypted ID code verification answer indicative of information (for example, an ID token) indicating the user of the information storage medium. On the other hand, in a case where the encrypted ID code and the terminal information that are indicated by the encrypted ID code verification request are not registered in association with each other in the database, the information processing apparatus <NUM> generates an encrypted ID code information verification answer indicating that the information storage medium is not permitted. However, in a case where the encrypted ID code and the terminal information that are indicated by the encrypted ID code verification request are registered in association with each other in the database but the expiration date of the encrypted ID code has passed, the information processing apparatus <NUM> generates an encrypted ID code verification answer indicating that the expiration date has passed.

In step ST39, the information processing apparatus <NUM> outputs the encrypted ID code verification answer. The information processing apparatus <NUM> outputs the encrypted ID code verification answer generated in step ST38 to the information terminal <NUM>.

Incidentally, in a case where the expiration date of the encrypted ID code has passed, the information terminal <NUM> cannot acquire information indicative of the user of the information storage medium. In this case, the information terminal <NUM> may instruct the user of the portable terminal <NUM> to perform an operation for acquiring again an encrypted ID code from the information processing apparatus <NUM>.

<FIG> depicts a sequence diagram that exemplifies operation when the encrypted ID code information verification answer indicates that the expiration date has passed and an encrypted ID code is to be acquired again.

In step ST41, the information terminal <NUM> issues a re-acquisition operation instruction. In a case where the encrypted ID code verification answer outputted from the information processing apparatus <NUM> indicates that the expiration date has passed, the information terminal <NUM> performs, for example, display that inputting of a new encrypted ID code is necessary because the expiration date has passed.

In step ST42, the portable terminal <NUM> issues an encrypted ID code request to the information processing apparatus <NUM>. The portable terminal <NUM> performs a process similar to that in step ST32 described hereinabove, to issue an encrypted ID code request to the information processing apparatus <NUM>.

In step ST43, the information processing apparatus <NUM> performs an encrypted ID code generation process. The information processing apparatus <NUM> generates, in response to the encrypted ID code request, a new encrypted ID code having the expiration date and the code length indicated by the encrypted ID code attribute information and corresponding to the approval information. Further, the information processing apparatus <NUM> registers the terminal information indicative of the information terminal <NUM>, the approval information, the encrypted ID code attribute information, and the generated new encrypted ID code, in association with one another into the database. It is to be noted that the new encrypted ID code is a code different from the encrypted ID code generated in the preceding step ST33.

By performing such processes as described above, the information processing apparatus <NUM> is enabled to determine whether an encrypted ID code verification request subsequently supplied from the information terminal <NUM> is a verification request from a registered information terminal and is a request for verification of a new encrypted ID code generated on the basis of permission information.

In step ST44, the information processing apparatus <NUM> outputs the encrypted ID code. The information processing apparatus <NUM> outputs the encrypted ID code generated in step ST43 to the portable terminal <NUM>.

In step ST45, the portable terminal <NUM> performs an encrypted ID code displaying process. The portable terminal <NUM> displays the new encrypted ID code acquired from the information processing apparatus <NUM> on the display unit <NUM>.

In step ST46, the information terminal <NUM> performs acceptance of a code input. The permission information acquisition unit <NUM> of the information terminal <NUM> acquires a new encrypted ID code by accepting an inputting operation of the encrypted ID code using the PIN pad.

In step ST47, the information terminal <NUM> outputs an encrypted ID code verification request to the information processing apparatus <NUM>. The information terminal <NUM> places the terminal information indicative of the information terminal <NUM> and the new encrypted ID code acquired in step ST46 into the encrypted ID code verification request.

In step ST48, the information processing apparatus <NUM> performs an encrypted ID code verification process. The information processing apparatus <NUM> determines whether the new encrypted ID code and the terminal information that are indicated by the encrypted ID code verification request are registered in association with each other in the database and the expiration date of the new encrypted ID code has not passed. In a case where the new encrypted ID code and the terminal information that are indicated by the encrypted ID code verification request are registered in association with each other in the database and the expiration date of the new encrypted ID code has not yet passed, the information processing apparatus <NUM> generates an encrypted ID code verification answer indicative of information (for example, an ID token) indicating the user of the information storage medium.

In step ST49, the information processing apparatus <NUM> outputs the encrypted ID code verification answer. The information processing apparatus <NUM> outputs the encrypted ID code verification answer generated in step ST48 to the information terminal <NUM>.

If such processes as described above are performed, then the information processing apparatus <NUM> is able to provide, to the information terminal <NUM>, information indicative of the user of the information storage medium <NUM>, by using the portable terminal <NUM> that can perform short-range wireless communication with the information storage medium <NUM> and the information processing apparatus <NUM>.

The operation of the information processing system <NUM> of the present technology is not limited to that described above. For example, in a case where the permission information acquisition unit <NUM> is configured using the barcode reader 42a and the PIN pad 42b, the information processing apparatus <NUM> may perform generation of permission information by using any one of the methods.

Further, the terminal information presentation unit <NUM> may output, to the portable terminal <NUM>, method identification information indicative of with which one of the permission code method and the encrypted ID code method the information terminal <NUM> is compatible. Further, the terminal information presentation unit <NUM> may perform provision of terminal information by using not only a wireless tag but also an information presentation image, information presentation sound, or the like. In this case, the portable terminal <NUM> may capture an information presentation image by the image capturing unit <NUM> or may take in information presentation sound by the inputting unit <NUM>, to acquire terminal information. For example, an information presentation image may be provided in a shop or information presentation sound may be outputted as guide speech in a shop such that terminal information can be acquired from the information presentation image or the information presentation sound. Further, in a case where the information terminal <NUM> is provided at an entrance gate or the like of a shop, an event venue, transportation facilities, or the like, the information terminal <NUM> may be configured such that terminal information can be acquired from a Web page of the shop, event venue, transportation facilities or the like through the network communication unit <NUM>.

The portable terminal <NUM> may display, when it has acquired permission information and an encrypted ID code, a barcode image GB and an encrypted ID code GC based on the permission information on the same screen image as depicted in <FIG>.

It is possible to execute the series of processes described in the specification by hardware, by software, or by a composite configuration of them. In the case where the series of processes is executed by software, a program in which the processing sequence is recorded is installed into a memory in a computer incorporated in hardware for exclusive use and is executed by the computer. Otherwise, the program can be installed into and executed by a computer for universal use that can execute various processes.

For example, it is possible to record in advance the program on or in a hard disk, an SSD (Solid State Drive), or a ROM (Read Only Memory) as a recording medium. Alternatively, it is possible to store (record) the program temporarily or permanently on a removable recording medium such as a flexible disk, a CD-ROM (Compact Disc Read Only Memory), an MO (Magneto optical) disk, a DVD (Digital Versatile Disc), a BD (Blu-Ray Disc (registered trademark)), a magnetic disk, or a semiconductor memory card. Such a removable recording medium as just described can be provided as what is generally called packet software.

Further, the program may not only be installed from a removable recording medium into a computer but may also be transferred from a download site to a computer by wireless or wired transfer through a network such as a LAN (Local Area Network) or the Internet. The computer can receive the programs transferred in such a manner and install the program into a recording medium such as a built-in hard disk.

Claim 1:
A portable terminal (<NUM>) comprising:
an information acquisition unit (<NUM>) configured to issue, over a network (<NUM>) using terminal information indicative of an information terminal (<NUM>) that performs authentication of an information storage medium (<NUM>), an authentication process request for the information storage medium to an information processing apparatus (<NUM>) and acquire, over the network from the information processing apparatus, approval information that is to be used when a result of authentication of the information storage medium is to be acquired from the information processing apparatus by the information terminal; and
a display unit (<NUM>) configured to perform display based on the approval information acquired by the information acquisition unit; wherein
the information acquisition unit is configured to perform short-range wireless communication with the information storage medium, output, to the information storage medium, an authentication information request supplied over the network from the information processing apparatus in response to the authentication process request, and output, over the network to the information processing apparatus, an authentication information answer from the information storage medium corresponding to the authentication information request.