Ntt Docomo, Inc.

Other

Toshiba Solutions Corporation

Yokosuka Telecom Research Park, Inc.

The University of Tokyo

Ken Sakamura

Noboru Koshizuka

Kensaku Mori

Sadayuki Hongo

Kazuhiko Ishii

Hiroshi Aono

Masayuki Terada

Koji Okada

Shingo Miyazaki

Shigeyuki Fukushima

Chiaki Ishikawa

Kouya Tochikubo

Takanori Nakamizo

Akito Niwa

Fumihiko Sano

A cryptographic management apparatus includes a storage unit which stores cryptographic key information containing a cryptographic key and cryptographic process condition information containing the cryptographic key information, a cryptographic process information input unit which receives an input of the object information and cryptographic key search request information, a cryptographic key information acquisition unit which acquires the cryptographic key information from the storage unit based on the search request information, a cryptographic module evaluation description information acquisition unit which acquires evaluation description information of the cryptographic module corresponding to the cryptographic key information, a cryptographic process ID creation unit which attaches an identifier of the cryptographic process condition information to the object information based on the cryptographic key information and the cryptographic module corresponding to the evaluation description information, and an output which outputs the identifier and the result of the cryptographic process executed on the object information.

Cryptographic management apparatus, decryption management apparatus and program

An electronic value exchange systemcomprises a mobile terminaland a mobile terminal. The mobile terminalcauses a driverto transmit an exchange offer message of electronic value V, Vto the mobile terminal. The mobile terminalstores handlers that the drivercan execute in relationship to a message in a common table, and acquires a handler corresponding to the above-mentioned offer message, and notifies the exchange offer contents based on the handler to an application program. If the application programconsents to the offer contents according to the operation of a user, the electronic value Vstored in an IC cardis transmitted to an IC cardvia a driverand the driver

Electronic value exchange system, mobile terminal, and electronic value exchange method

A cryptographic client device acquires a cryptographic key from a storage device son the basis of the accepted demand information, acquires a cryptographic evaluation description file from the storage device, acquires a cryptographic module corresponding to this cryptographic evaluation description file, executes a cryptographic process on the subject data to be performed the cryptographic process, and issues the encrypted subject data.

Software module management device and program

A cryptographic module management apparatus searches for cryptographic module meta-information based on the category information of a requested cryptographic module and, if associated cryptographic module category information is contained in this cryptographic module meta-information, searches for the cryptographic module meta-information of an associated cryptographic module, to generate composite type cryptographic module evaluation information based on this cryptographic module meta-information, select a cryptographic module based on this composite type cryptographic module evaluation information, and read this cryptographic module from a cryptographic module storage portion and output such composite type cryptographic module evaluation information.

Cryptographic module management apparatus, method, and program

In a cryptographic module distribution system, a cryptographic management server apparatus encrypts a cryptographic module using a key shared by a cryptographic apparatus, and transmits the encrypted cryptographic module to a client apparatus. The client apparatus transmits the encrypted cryptographic module to a cryptographic apparatus. The cryptographic apparatus decrypts the encrypted cryptographic module using the key shared by the cryptographic management server apparatus, and transmits the decrypted cryptographic module to the client apparatus. The client apparatus stores the received cryptographic module.

Cryptographic module distribution system, apparatus, and program

A cryptographic module selecting device includes a cryptographic module evaluation information storage device configured to store identification information of a cryptographic module and cryptographic module evaluation information describing a function and/or performance of the cryptographic module in relation to each other, a condition information acquiring device configured to acquire condition information for specifying the condition of the cryptographic module to be selected, an extracting device configured to extract cryptographic module evaluation information conforming to the acquired condition information, from the stored cryptographic module evaluation information of the cryptographic module, and an output device configured to read out the identification information of the cryptographic module corresponding to the cryptographic module evaluation information selected by the extracting device from the cryptographic module evaluation information storage device and output the read identification information.

Cryptographic module selecting device and program

Between an IC card () and a electronic ticket server (), upon purchasing an electronic ticket a public key cryptosystem is employed for a mutual authentication to keep a strict security, and a shared secret between the electronic ticket and a ticket collecting machine is sent on a secure channel as well as the electronic ticket. Upon usage of the electronic ticket, the IC card () and the ticket collecting machine () mutually judge whether they carry out the mutual authentication by using a public key cryptosystem or a symmetric key cryptosystem. When they determine to use the symmetric key cryptosystem, they carry out the mutual authentication by using the shared secret exchanged beforehand. When they determine to use the public key cryptosystem, they carry out the mutual authentication by using the same method as that used upon purchasing the electronic ticket. This method of mutual authentication can dynamically switch cryptosystems for cryptographic communication between the IC cards or between the IC card and a tamper resistant device having an equivalent function to an IC card installed in related servers or the ticket collecting machine, based on their judgment of the types of bearers, the required degree of security and the required processing speed.

IC card and authentication method in electronic ticket distribution system

A data processing method using a data processing apparatus on a transmitting side having an application for performing processing using an internal device set in the data processing apparatus, a driver that accepts an access request to the internal device from the application, a handler that performs access processing to the internal device and transmitting a message to an external device set outside the data processing apparatus, and a storage device that stores a device ID as a transmission destination for specifying the internal or external device and the handler in association with each other, and a data processing apparatus on a receiving side that receives the message transmitted from the data processing apparatus on the transmitting side.

Data processing device and data processing method

Realizing a data communication device and a data communication method enabling to specify an IC memory mounted in the communication device and to perform data communication to the communication device in which the IC memory is mounted. A mobile deviceof transmitting side accepts a domain ID specifying a detachable IC memory uniquely from an application, a communication driverobtains an IP address of the device of correspondent on the basis of the accepted domain ID from a name serverstoring the domain ID and the IP address being associated with each other. Then, the communication driverobtains a port ID which an IC memory of the device of correspondent assigned to an application, and transmits the domain ID and the port ID together with a transmission data to the IP address. The device of correspondent rims the application based on the received port ID and executes an appropriate processing.

Data communication apparatus and data communication method

A Terminal equipmenthas a message information accepterfor accepting message information from terminal program, an ID generatorfor generating a thread ID for identifying the message information, a transmitterfor generating a message containing the message information and the thread ID and for transmitting the message to IC card, and a receiverfor receiving a message from the IC card. When the message received from the IC cardcontains the thread ID inserted in the transmitted message, the message information accepterreturns the received message as a return value for the message information to the terminal programand terminates a process attributed to the message information.

Terminal equipment

A portable terminal, when receiving an exchange offer message of electronic values from a portable terminal, notifies an application program of an exchange offer content based on a listener corresponding to the message. When the application program accepts this offer content and when electronic values are determined as exchange objects, the portable terminal returns an exchange confirmation message of the electronic values. When the portable terminal receives the exchange confirmation message, it notifies an application program of an exchange content based on a listener corresponding to the message. When the application program accepts the exchange content, the exchange transaction of electronic values is started.

Electronic value exchange system and electronic value exchange method

Each IC cardnotifies a serverof the ID of the IC card and the connection information of a terminal device to which the IC card is connected. The serverstores the ID and the connection information in a databasewhile associating the ID and the connection information with each other. When an IC cardcommunicates with another IC card, the IC cardrequests the connection information concerning the destination IC card from the serverwhile specifying the ID of this IC card. The serversearches the databasefor the connection information corresponding to the ID specified by the request, and notifies the requesting IC cardof the acquired connection information. This enables communications between IC cards even if the terminal device to which a destination IC card is connected has been changed in the past.

Connection information management system for managing connection information used in communications between IC cards

A folder containing at least one file can be created in a file storage () in response to a folder creation request from an owner () of an IC card (), and an access authority to the folder can be set as an access control list (A) of the folder in response to an access authority setting request from the owner (0). Then access to the file is controlled not only on the basis of the access authority to the file set by an issuer of a voucher (issuer of the file), but also on the basis of the access authority to the folder set by the owner ().

IC card and access control method

An electronic value transferring device such as a high speed and large capacity computer or mobile terminal device is disclosed that can function as a contactless IC card performing electronic value operations. The device is connectable to an IC card that performs electronic value operations, and includes a microprocessor for transmitting and receiving data to and from the IC card: an interface circuit for providing an IC card interface to allow the IC card to send and receive electronic values to and from other IC cards by radio; an antenna; and the microprocessor having a memory for temporarily storing plural electronic values.

Growing community of inventors

Tokyo, Japan

Noboru Koshizuka