Authentication-permission system, information processing apparatus, equipment, authentication-permission method and program

An information processing apparatus that generates respective private keys for a plurality of devices that mutually execute authentication and permission granting among each other, the information processing apparatus comprising:

• a memory, and
• a processor configured to execute
• generating a private key for each device among the plurality of devices, from an extension identifier that includes an identifier to identify said each device and permission information on said each device;
• and
• delivering the private key and the extension identifier to said each device.

A device that executes authentication and permission granting with another device, the device comprising:

• a memory, and
• a processor configured to execute
• mutual authentication with said another device, by using a private key generated from an extension identifier that includes an identifier to identify the device and permission information on the device;
• and
• permitting said another device a request to the device in accordance with the permission information included in the extension identifier of said another device, in response to successful execution of the mutual authentication with said another device.

An authentication-permission method used in an authentication-permission system including a plurality of devices each including a memory and a processor;

• and a server that includes a memory and a processor configured to generate a private key for each device among the plurality of devices, and to deliver an extension identifier that includes an identifier to identify said each device and permission information on said each device, the authentication-permission method comprising:
• steps executed by the server configured to hold the identifier of said each device and the permission information on said each device, including
• generating the private key of said each device from the extension identifier that includes the identifier to identify said each device and the permission information on said each device, and
• delivering the private key generated by the generating, and the extension identifier to said each device, and
• steps executed by said each device among the plurality of devices, including
• executing mutual authentication with another device, by using the extension identifier and the private key of said each device, and
• permitting said another device a request to said each device, in accordance with the permission information included in the extension identifier of said another device, in response to the mutual authentication with said another device successfully executed by the authentication unit.