Information processing device, computer program product, and access control system

A computer program product comprising a computer-readable medium including programmed instructions, wherein the instructions, when executed by a computer, cause the computer to perform:

• generating a key set including at least a public key and a master key;
• generating different secret keys for each server device accessing the information processing device by using the master key included in the key set;
• providing each of the secret keys generated at the generating the secret key to a corresponding server device;
• and
• providing the public key to a verification device to make the verification device verify signature information generated by using the secret key in each of the server devices.

An access control system comprising:

• an information processing device;
• a server device;
• and
• a data holding device, wherein
• the information processing device includes:
• a key set generating unit configured to generate a key set including at least a public key and a master key;
• a public key providing unit configured to provide a public key included in the key set to the data holding device;
• a secret key generating unit configured to generate different secret keys for each server device by using the master key included in the key set;
• and
• a secret key providing unit configured to provide each of the secret keys generated by the secret key generating unit to a corresponding server device,
• the server device includes:
• a signature information generating unit configured to generate signature information of request information requesting to obtain data stored in the data holding device by using the secret key on the request information;
• and
• a transmitting unit configured to transmit a command containing the request information and the signature information to the data holding device, and
• the data holding device includes:
• a storage unit configured to store predetermined data;
• a receiving unit configured to receive the command from the server device;
• a signature verifying unit configured to verify the signature information included in the command by using the public key to determine authenticity of the request information contained in the command;
• and
• a data providing unit configured to provide data stored in the storage unit to the server device when the authenticity of the request information is confirmed by the signature verifying unit.