Information processing apparatus, authentication device, and recording medium
AssigneeFujitsu Limited
InventorMasato SUZUKI
Life of this patent
Estimating the term…
Abstract
An information processing apparatus includes a first signing unit which digitally signs device information and environment information, a first generator which generates a first digital envelope as data including the signed device information and the signed environment information, a second signing unit which digitally signs biometric authentication information and the first digital envelope, a second generator which generates a second digital envelope as data including the signed biometric authentication information and the signed first digital envelope, a transmitter which transmits the second digital envelope, and a receiver which receives authentication results.
Claims13
An information processing apparatus, comprising:
- a first signing unit configured to digitally sign, with a first private key, device information including identification information of the information processing apparatus and environment information related to a use environment of the information processing apparatus;
- a first generator configured to generate a first digital envelope as data including the digitally signed device information and the digitally signed environment information;
- a second signing unit configured to digitally sign, with a second private key, biometric authentication information related to biometric authentication, and the first digital envelope;
- a second generator configured to generate a second digital envelope as data including the digitally signed biometric authentication information and the digitally signed first digital envelope;
- a transmitter configured to transmit the second digital envelope generated by the second generator to another apparatus;
- and
- a receiver configured to receive authentication results responsive to the transmitted second digital envelope.
An authentication device for authenticating an information processing apparatus, comprising:
- an authentication memory configured to store information related to authentication;
- an envelope receiver configured to receive from the information processing apparatus a second digital envelope, the second digital envelope including first data and second data, the first data being obtained by digitally signing with a second private key a first digital envelope, the first digital envelope including device information digitally signed with a first private key, and environment information digitally signed with the first private key, and the second data being obtained by digitally signing biometric authentication information with the second private key;
- a first verifying unit configured to verify, with a second public key corresponding to the second private key, the digital signature of the biometric authentication information and the first digital envelope by the second private key, within the second digital envelope received by the envelope receiver;
- a biometric determining unit configured to determine whether information related to the authentication corresponding to the biometric authentication information received by the envelope receiver is stored on the authentication memory when the first verifying unit has successfully verified the digital signature;
- a second verifying unit configured to verify, with a first public key corresponding to the first private key, the digital signature of the device information and the environment information by the first private key within the first digital envelope when the biometric determining unit determines that the information is stored;
- and
- an authentication unit configured to perform an authentication operation based on the verification results.
A computer readable recording medium storing a program to be executed by an information processing apparatus, the program causing the information processing apparatus to execute a process comprising:
- digitally signing, with a first private key, device information including identification information of the information processing apparatus and environment information related to a use environment of the information processing apparatus;
- generating a first digital envelope as data including the digitally signed device information and the digitally signed environment information;
- digitally signing, with a second private key, biometric authentication information related to biometric authentication and the first digital envelope;
- generating a second digital envelope as data including the digitally signed biometric authentication information and the digitally signed first digital envelope;
- transmitting the generated second digital envelope to another apparatus;
- and
- receiving authentication results responsive to the transmitted second digital envelope.
Dependencies are inferred from the claim text.