Information processing apparatus, information processing method, and computer program product

An information processing method implemented by a computer provided with a first processing application, a second processing application, a third processing application, and an Operating System (OS), the method comprising:

• issuing, by the first processing application, being a secure application executed in a secure environment ensuring tamper resistance a command to call a function by the second processing application;
• linking, by the first processing application, the command to a verification rule;
• transmitting, to the second processing application by the first processing application, a command execution request including command identification information that identifies the command;
• receiving, from the second processing application by the first processing application, an execution log including an execution result of the command identified by the command identification information;
• verifying, by the first processing application, correctness of the received execution log in accordance with the verification rule;
• verifying, by the first processing application using a key for detecting tampering, a code generated from the execution log;
• capturing, by the third processing application, execution of the command by the OS;
• recording, by the third processing application and as the execution log, the execution captured by the third processing application;
• executing, by the OS, the command;
• adding, by the OS, the code to the execution log;
• acquiring, by the second processing application, the execution log from the third processing application;
• and
• upon receiving the command execution request from first processing application, transmitting, by the second processing application, the execution log acquired by the second processing application to the first processing application, wherein
• the method further includes performing information processing by employing the function by the first processing application, the function by the second processing application, the function by the third processing application, and the function by the OS.

A computer program product comprising a non-transitory computer-readable recording medium, on which an executable program is recorded, the program instructing a computer provided with a first processing application and a second processing application, a third processing application, and an Operating System (OS), to perform:

• issuing, by the first processing application being a secure application executed in a secure environment ensuring tamper resistance, a command to call a function by the second processing application;
• linking, by the first processing application, the command to a verification rule;
• transmitting, to the second processing application by the first processing application, a command execution request including command identification information that identifies the command;
• receiving, from the second processing application by the first processing application, an execution log including an execution result of the command identified by the command identification information;
• verifying, by the first processing application, correctness of the received execution log in accordance with the verification rule;
• verifying, by the first processing application using a key for detecting tampering, a code generated from the execution log;
• capturing, by the third processing application, execution of the command by the OS;
• recording, by the third processing application and as the execution log, the execution captured by the third processing application;
• executing, by the OS, the command;
• adding, by the OS, the code to the execution log;
• acquiring, by the second processing application, the execution log from the third processing application;
• and
• upon receiving the command execution request from first processing application, transmitting, by the second processing application, the execution log acquired by the second processing application to the first processing application, wherein
• information processing is performed by employing the function by the first processing application, the function by the second processing application, the function by the third processing application, and the function by the OS.