Patent ID: 8266436

Claim:
A service providing system including: an area management server holding a first encryption key and a first decryption key corresponding to the first encryption key; a service providing server; and a client device connected to the service providing server, configured to access a tamper-resistant secure chip and holding a second decryption key, wherein the area management server comprises: a first memory storing computer instructions and a first processor configured to execute the computer instructions such that the area management server is configured to: generate an access control list, the access control list specifying a memory area of the secure chip accessible to the client device, generate a first digital signature by using the first encryption key to encrypt a value based on the access control list, generate a service providing server certificate that includes a name of the service providing server, the access control list and the first digital signature; and the service providing server comprises: a second memory storing computer instructions and a second processor configured to execute the computer instructions such that the service providing server is configured to: generate an instruction set described in a script language to be executed by the client device, and transmit the name of the service providing; and the client device comprises: a third memory storing computer instructions and a third processor configured to execute the computer instructions such that the client device is configured to: obtain an area management server certificate that includes the first decryption key and a second digital signature generated from the first decryption key and which can be decrypted by the second decryption key, the service providing server certificate, the instruction set and the name of the service providing server, verify the area management server certificate by using the second decryption key, verify the service providing server certificate by using the first decryption key extracted from the area management server certificate, verify the name of the service providing server by using the name of the service providing server extracted from the service providing server certificate, and execute the instruction set only when the area management server certificate, the service providing server certificate, and the name of the service providing server are properly verified, and further, the memory area of the secure chip to be accessed according to the instruction set is included in the memory area of the secure chip specified by the access control list extracted from the service providing server certificate.