Target device, method and system for managing device, and external device

A device management system in which a target device configured with at least one unit that includes a tamper-resistant chip, a management apparatus that manages or uses the target device, and an authentication apparatus are connected via a network in a communicable manner, wherein the management apparatus includes

• a requesting unit that transmits a unit-information confirmation request to the target device,
• the target device includes
• a request receiving unit that receives transmitted unit-information confirmation request;
• and
• a transmitting unit that encrypts device information including unit information that includes a unit identification number stored in the tamper-resistant chip with a confidential key stored in the tamper-resistant chip, and transmits encrypted device information to the authentication apparatus, for each unit, and
• the authentication apparatus includes
• a device-information receiving unit that receives the device information;
• and
• an evaluation unit that decrypts received device information, evaluates whether decrypted device information corresponds to device information that is stored in a database of the authentication apparatus in advance, and transmits a result of evaluation to the target device and the management apparatus.

A device management system in which a target device configured with at least one unit that includes a tamper-resistant chip, a management apparatus that manages or uses the target device, and an authentication apparatus are connected via a network in a communicable manner, wherein

• the management apparatus includes
• a requesting unit that transmits a unit-program confirmation request to the target device,
• the target device includes
• a request receiving unit that receives transmitted unit-program confirmation request;
• and
• a first transmitting unit that encrypts device information including unit information that includes a unit identification number stored in the tamper-resistant chip and program-version information relating to a version of a program that is executed by the unit with a confidential key stored in the tamper-resistant chip, and transmits encrypted device information to the authentication apparatus, for each unit, and
• the authentication apparatus includes
• a device-information receiving unit that receives the device information;
• and
• a second transmitting unit that decrypts received device information, evaluates whether a correspondence relationship between the unit identification number and the program-version information included in the device information matches with a correspondence relationship between unit identification number and program-version information stored in a database of the authentication apparatus in advance, when the relationships do not match, acquires a program file corresponding to a correct program version from the database, and transmits acquired program file to the target device.

A device management system in which a target device configured with at least one unit that includes a tamper-resistant chip including a device-information storing unit that stores device information specific to a unit and a confidential-key storing unit that stores a confidential key, and an external device that manages or uses the target device are connected via a network in a communicable manner, wherein

• the target device includes
• an encrypting unit that encrypts stored device information using the confidential key;
• and
• a first transmitting unit that transmits encrypted device information to the external device connected to the target device, and
• the external device includes
• a device-information receiving unit that receives transmitted device information;
• an evaluating unit that decrypts received device information, and evaluates whether the device information corresponds to device information that is stored in a database in advance;
• and
• a second transmitting unit that transmits a result of evaluation by the evaluating unit to the target device.

A device management method for a device management system in which a target device configured with at least one unit that includes a tamper-resistant chip including a device-information storing unit that stores device information specific to a unit and a confidential-key storing unit that stores a confidential key, and an external device that manages or uses the target device are connected via a network in a communicable manner, the device management method comprising:

• encrypting including the target device encrypting the device information using the confidential key;
• transmitting including the target device transmitting encrypted device information to the external device connected to the target device;
• receiving including the external device receiving transmitted device information;
• evaluating including
• the external device decrypting received device information;
• the external device evaluating whether the device information corresponds to device information that is stored in a database in advance;
• and
• the external device transmitting a result of evaluation the target device.

An external device that manages or uses a target device that is configured with at least one unit that includes a tamper-resistant chip including a device-information storing unit that stores device information specific to a unit and a confidential-key storing unit that stores a confidential key, the external device being connected to the target device via a network in a communicable manner, the external device comprising:

• a device-information receiving unit that receives, upon the target device encrypting stored device information using the confidential key and transmitting encrypted device information, transmitted device information;
• an evaluating unit that decrypts received device information, and evaluates whether the device information corresponds to device information that is stored in a database in advance;
• and
• a first transmitting unit that transmits a result of evaluation by the evaluating unit to the target device.