Secure system, secure device, terminal apparatus, method and program therefor

A secure device connected to a terminal apparatus, and holding confidential data, said secure device comprising:

• a rule storage unit operable to store an extra-domain usage rule for said secure device with respect to a terminal apparatus outside of a domain;
• a judgment unit operable to judge, according to the extra-domain usage rule, whether or not use of said secure device is permitted;
• and
• a control unit operable to enable the use of said secure device in said terminal apparatus in the case where said judgment unit judges that the use is permitted.

A terminal apparatus to which a secure device holding confidential data is connected, said terminal apparatus comprising:

• a storage unit operable to store an extra-domain usage rule which is a usage rule for said secure device with respect to a terminal apparatus outside the domain;
• a judgment unit operable to judge, according to the extra-domain usage rule, whether or not use of said secure device is permitted;
• and
• a control unit operable to enable the use of said secure device in said terminal apparatus in the case where said judgment unit judges that the use is permitted.

A secure system including a content distribution apparatus, a content use apparatus, and a secure device,

• wherein said content distribution apparatus includes a transmission unit operable to transmit, to a content use apparatus, an extra-domain usage rule which is a usage rule for use of said secure device in a content use apparatus outside of a domain,
• said secure device includes a supply unit operable to supply an encryption key to a content use apparatus belonging to a domain made up of content use apparatuses which share said secure device, the encryption key enabling content use,
• said content use apparatus includes a reception unit for receiving the extra-domain usage rule from said transmission unit,
• one of said content use apparatus and said secure device includes:
• a first storage unit operable to store domain information defining the domain of said secure device and said terminal apparatus;
• a second storage unit operable to store the extra-domain usage rule received by said reception unit;
• a first judgment unit operable to judge whether one of said secure device and said terminal apparatus is currently inside the domain or outside the domain;
• and
• a second judgment unit operable to judge, according to the extra-domain usage rule, whether or not use of said secure device is permitted, in the case where it is judged by said first judgment unit to be outside the domain, and
• said supply unit is further operable to supply the encryption key to a content use apparatus outside the domain, in the case where said judgment unit judges that the use is permitted.

A method for using a secure device in a secure system including the secure device which holds confidential data, and a terminal apparatus to which the secure device is connected, said method comprising:

• a step of reading-out, from a memory, domain information defining a domain of a secure device and a terminal apparatus, the memory being included in one of the secure device and the terminal apparatus;
• a step of judging, according to the read-out domain information, whether one of the secure device and the terminal apparatus is currently inside the domain or outside the domain;
• a step of reading out, from a memory, an extra-domain usage rule which is a rule for use of the secure device outside the domain, the memory being included in one of the secure device and the terminal apparatus;
• a step of judging, according to the read-out extra-domain usage rule, whether or not use of the secure device is permitted, in the case where it is judged by said first judgment unit to be outside the domain;
• and
• a control step of enabling use of the secure device in the terminal apparatus in any of:
• the case where it is judged to be inside the domain;
• and the case where it is judged that use is permitted.

A computer executable program for use in a secure system including a secure device which holds confidential data, and a terminal apparatus to which the secure device is connected, said program causing a computer to execute:

• a step of reading-out, a memory, domain information defining a domain of a secure device and a terminal apparatus, the memory being included in one of the secure device and the terminal apparatus;
• a step of judging, according to the read-out domain information, whether one of the secure device and the terminal apparatus is currently inside the domain or outside the domain;
• a step of reading out, a memory, an extra-domain usage rule which is a rule for use of the secure device outside the domain, the memory being included in one of the secure device and the terminal apparatus;
• a step of judging, according to the read-out extra-domain usage rule, whether or not use of the secure device is permitted, in the case where it is judged by the first judgment unit to be outside the domain;
• and
• a control step of enabling use of the secure device in the terminal apparatus in any of:
• the case where it is judged to be inside the domain;
• and the case where it is judged that use is permitted.