Data processing system, memory device, data processor, data processing method, and program

A memory device having data storage means and data control means, the device comprising:

• an application program, which is stored, for executing data processing to which the memory device is applied;
• and
• an issue certificate having a digital signature by a private key peculiar to a parent memory device, which is the other memory device, for data including a service code for identifying the application program.

A data processing unit capable of communication with a memory device,

• wherein authentication processing is executed with the first memory on the condition that at least either the second memory device issue processing, or the second memory issue certificate issue processing is executed.

A data processing unit capable of communication with a memory device,

• wherein authentication processing is executed with the memory device by a public-key system, a public certificate, which is stored in the memory device, of a parent memory device, which is the other memory device, is obtained on the condition of the authentication approval, validity check of the parent memory device based on the public-key certificate is executed by checking against a revocation list, which is an illegal device identification list, and application control is performed of the application stored in the memory device on the condition of validity check of the parent memory device.

A data processing unit capable of communication with a memory device,

• wherein authentication processing is executed with the memory device by a public-key system, a public certificate, which is stored in the memory device, of a parent memory device, which is the other memory device, is obtained on the condition that a service code in the issue certificate and a service code corresponding to an application stored in the memory device are identical.

A data processing method for executing issue processing of a second memory device, or storage processing of an issue certificate for a second memory device based on a first memory device storage data, the method comprising:

• determining step of whether or not a second memory device issue processing based on an issue-management table, which is stored in the first memory device, concerning the second memory device, or storage processing of an issue certificate for a second memory device is allowed;
• and
• creating step of an issue certificate on which a digital signature is executed by a private-key peculiar to the first memory device for data including a service code for identifying the application program stored in a second memory device, and storing step of the certificate in the second memory device.

A data processing method in a data processing unit capable of communication with a memory device,

• wherein authentication processing is executed with the first memory on the condition that at least either the second memory device issue processing, or the second memory issue certificate issue processing is executed.

A data processing method in a data processing unit capable of communication with a memory device,

• wherein authentication processing is executed with the memory device by a public-key system, a public certificate, which is stored in the memory device, of a parent memory device, which is the other memory device, is obtained on the condition of the authentication approval, validity check of the parent memory device based on the public-key certificate is executed by checking against a revocation list, which is an illegal device identification list, and application control is performed of the application stored in the memory device on the condition of validity check of the parent memory device.

A data processing method in a data processing unit capable of communication with a memory device,

• wherein authentication processing is executed with the memory device by a public-key system, a public certificate, which is stored in the memory device, of a parent memory device, which is the other memory device, is obtained on the condition that a service code in the issue certificate and a service code corresponding to an application stored in the memory device are identical.

A program which executes data processing, on a computer system, for executing issue processing of a second memory device, or storage processing of an issue certificate for a second memory device based on a first memory device storage data, the program comprising:

• determining step of whether or not a second memory device issue processing based on an issue-management table, which is stored in the first memory device, concerning the second memory device, or storage processing of an issue certificate for a second memory device is allowed;
• and
• creating step of an issue certificate on which a digital signature is executed by a private-key peculiar to the first memory device for data including a service code for identifying the application program stored in a second memory device, and storing step of the certificate in the second memory device.

A program which executes data processing in a data processing unit capable of communication with a memory device on a computer system, the program comprising:

• execution step of authentication processing with the first memory;
• and
• execution step of at least either second memory device issue processing or second memory issue certificate issue processing on the condition of the authentication completion.

A program which executes data processing in a data processing unit capable of communication with a memory device on a computer system, the program comprising:

• execution step of authentication processing with the memory device by a public-key system;
• and
• execution step of obtaining a public certificate, which is stored in the memory device, of a parent memory device, which is the other memory device, on the condition that a service code in the issue certificate and a service code corresponding to an application stored in the memory device are identical.

A data processing unit for executing read processing of each public-key certificate from both of a first memory device as a parent card storing a public-key certificate and a second memory device as a child card storing a public-key certificate, and for executing validation processing of each public-key certificate which has been read,

• wherein on the condition that validity of each memory device is confirmed based on the validation processing,
• tied information is generated based on the storage information of the first memory device and the second memory device, and storage processing is executed of the generated tied information and digital signature data for the tied information in the second memory device as the child card.