Application authentication system

An application authentication system that comprises a terminal and an authentication module, wherein

• the terminal includes a download section to download an application;
• and
• a TRM access library section that performs a processing for application authentication on condition that the TRM access library section itself is authenticated by the authentication module, and
• the authentication module includes:
• a TRM section that holds TRM access library section authentication information, which is information to perform authentication for the TRM access library, in a tamper-resistant region;
• and
• a TRM access library section authenticating section that performs authentication for the TRM access library section of the terminal based on the TRM access library section authentication information.

An application authentication system that comprises a terminal, an authentication module, and a server that downloads an application to the terminal, wherein

• the terminal includes:
• a download section to download the application;
• and
• a TRM access library section that performs a processing for application authentication on condition that the TRM access library section itself is authenticated by the authentication module,
• the authentication module includes:
• a TRM section that holds TRM access library section authentication information, which is information for authenticating the TRM access library section, in a tamper-resistant region;
• and
• a TRM access library section authenticating section that performs authentication for the TRM access library section of the terminal based on the TRM access library section authentication information, and
• the server includes a server TRM access library section authenticating section, which determines that authentication for the TRM access library section has succeeded on condition that authentication for the TRM section of the authentication module succeeds via the TRM access library section of the terminal.

An application authentication system that comprises a terminal, an authentication module, and a server that downloads an application to the terminal, wherein

• the terminal includes:
• a download section to download the application;
• digest for signature generating means that generates a digest for signature from the application;
• downloaded application signature obtaining means that obtains a signature downloaded along with the application;
• and
• a TRM access library section that has application authentication data output means that transmits the obtained signature and the digest for signature generated by the digest for signature generating means,
• the authentication module includes:
• a TRM section that holds TRM access library section authentication information, which is information for authenticating the TRM access library section, in a tamper-resistant region;
• and
• a TRM access library section authenticating section that performs authentication for the TRM access library section based on the TRM access library section authentication information, and
• the server includes:
• a server TRM access library section authenticating section, which determines that authentication for the TRM access library section has succeeded on condition that authentication for the TRM section of the authentication module succeeds via the TRM access library section of the terminal;
• an application authentication data input section that enters the digest for signature and the signature, which have been output from application authentication data output means of the TRM access library section whose authentication by the server TRM access library section authenticating section is determined to have succeeded;
• and
• a server application authenticating section that performs authentication for the application based on the digest for signature and the signature input to the application authentication input section.

An application authentication system that comprises a terminal, an authentication module, and a server that downloads an application to the terminal, wherein

• the terminal includes:
• a download section to download the application;
• and
• a TRM access library section having:
• authentication success information generating means that generates authentication success information showing success of application authentication;
• and
• application authentication success information output means that outputs the authentication success information generated in the authentication success information generating means,
• the authentication module includes:
• a TRM section that holds TRM access library section authentication information, which is information for authenticating the TRM access library section, in a tamper-resistant region;
• and
• a TRM access library section authenticating section that performs authentication for the TRM access library section based on the TRM access library section authentication information, and
• the server includes:
• a server TRM access library section authenticating section, which determines that authentication for the TRM access library section has succeeded on condition that authentication for the TRM section of the authentication module succeeds via the TRM access library section of the terminal;
• an authentication success information input section that enters the authentication success information that has been output from the authentication success information output means of the TRM access library section, whose authentication by the server TRM access library section authenticating section is determined to have succeeded;
• and
• a server application authenticating section that performs authentication for the application based on the authentication success information input to the authentication success information input section.

An application program that comprises an application main body and an application definition file, wherein

• the application definition file includes an optional region that a creator of the application can freely use in an attribute information storage area, which is an area to store information showing the attribute of the application main body, and stores signature data of the application main body in the optional region, said application program causing a computer to execute procedures for:
• obtaining the signature data from the optional region;
• and
• verifying the signature using the signature data obtained.

A data structure of an application program, comprising:

• a JAR file section that stores a JAR file, which is a compression file of code and data;
• and
• an ADF file section that stores an ADF file, which is a definition file of an application, wherein
• the ADF file has AppParam that stores main-class starting parameter, and
• a signature of the JAR file is stored in the AppParam.

A terminal that includes an authentication module to hold information in a tamper-resistant region and to perform a processing for authentication using the information, said terminal comprising:

• a download section that downloads an application;
• and
• a TRM access library section that performs processing for application authentication on condition that the authentication module authenticates the TRM access library section itself, wherein
• said authentication module comprises:
• a TRM section that holds a TRM access library section authentication information, which is information for authenticating said TRM access library section, in said tamper-resistant region;
• and
• a TRM access library section authenticating section that perform authentication for said TRM access library section based on the TRM access library section authentication information.

An application authentication system that comprises a primary equipment and an authentication module, wherein

• the primary equipment has:
• an application storage section that stores an application;
• and
• a TRM access library section that performs a processing for application authentication on condition that the primary equipment itself is authenticated by the authentication module, and
• the authentication module has:
• a TRM section that holds TRM access library section authentication information, which is information for authenticating the TRM access library section, in a tamper-resistant region;
• and
• a TRM access library section authenticating section that performs authentication for the TRM access library section of the primary equipment based on the TRM access library section authentication information.

An application authentication system that comprises (N+1) pieces of equipment, which is formed by connecting a first equipment through an (N+1)th equipment in series, wherein

• the first equipment has:
• a TRM section that holds authentication information, which is information for authenticating a second equipment, in a tamper-resistant region;
• and
• a first authentication processing section that performs authentication for the second equipment based on said authentication information,
• an i-th equipment, when any one of the second equipment to an N-th equipment is set to be said i-th equipment, has:
• an i-th authentication processing section;
• and
• the i-th authentication processing section performs authentication for an (i+1)th equipment on condition that the i-th authentication processing section itself is authenticated by an (i−1)th authentication processing section, and
• the (N+1)th equipment has:
• an application storage section that stores an application;
• and
• an (N+1)th authentication processing section that performs a processing for authenticating said application on condition that the (N+1)th equipment itself is authenticated by an N-th authentication processing section.