Data processing method and system of same portable device data processing apparatus and method of same and program

A data processing system for processing data so that a portable device including an integrated circuit for storing key memory area division data and first area management key data is authorized to perform at least one of a write operation to a memory area of said integrated circuit and a rewrite operation to the memory area on the condition that the first area management key data makes a second service provider provide a service using part of said memory area of said integrated circuit when issued by a first service provider using said memory area, wherein the system has

• a memory area operation processing apparatus used by a memory area operation unit which manages the memory area division data,
• a first service provider processing apparatus used by the issuer of the portable device which is the first service provider, and
• a second service provider processing, apparatus used by the first service provider;
• wherein:
• the memory area operation processing apparatus encrypts first module data including second area management key data by the memory area division data and sends the same to the first service provider processing apparatus;
• the first service provider processing apparatus encrypts second module data including the received encrypted first module using the first area management key data and sends the same to the memory area operation processing apparatus;
• the memory area operation processing apparatus provides the received encrypted second module data to the integrated circuit;
• and
• the integrated circuit decrypts the second module data by using the first area management key data, decrypts the first module data in the decrypted second module by using the memory area division data, and divides the memory area to a first memory area to be used for service of the first service provider and a second memory area to be used for service of the second service provider using the second area management key data obtained by the decrypting the data under control of the memory area operation unit.

A portable device mounting an integrated circuit used for a first service provider providing a service, wherein the integrated circuit comprises;

• a memory means or storing key memory area division data managed by a memory area operation unit performing processing to make a second service provider provide a service using a part of a memory area of the integrated circuit and first area management key data;
• an input means for inputting a module including second area management key data issued by the memory area operation unit which is encrypted by the memory area operation unit using the memory area division data and furthermore encrypted by the first service provider by using the first area management key data;
• and
• a processing means for decrypting the input module by using the memory area division data and the first area management key data, dividing a memory area of the memory means to a first memory area and a second memory area by using the second area management key data in the decrypted modules authorizing at least one of a write operation to the first memory area and a rewrite operation in the memory area on the condition that the first area management key data is used and authorizing at least one of a write operation to the second memory area and a rewrite operation in the memory area on the condition that the second area management key data is used.

A data processing apparatus for processing data so that a portable device including a integrated circuit for storing distribution key data, a system code for identifying a first service provider, and first area management key data which is authorized to perform at least one of a write operation to a memory area of said integrated circuit and a rewrite operation to the memory area on the condition that the first area management key data makes a second service provider provide a service using part of said memory area of said integrated circuit when issued by a first service provider providing a first service using said memory area, wherein

• the apparatus has a memory means processing means, and input/output means;
• the memory means stores rejection information specifying a service provider which can provide service by the same integrated circuit indicated by the first service provider and the second service provider;
• the processing means encrypts a first module including second management key data by using the key memory area division data;
• the input/output means outputs the encrypted first module to provide it to the first service provider, receives as input a second module including the encrypted first module and encrypted in the first service provider by using the first area management key data and outputs the second module to provide it to a memory area division apparatus for dividing the memory area under control of the second service provider so that a part of the memory area of the integrated circuit can be used by the second service provider;
• the processing means generates a registerable system code list indicating the system code added to the first service provider which can provide service by the same integrated circuit as the second service provider biased on the rejection information;
• and
• the input/output means outputs the system code list to provide it to the memory area division apparatus.

A data processing apparatus for processing data so that a portable device including an integrated circuit for storing distribution key data, a system code for identify a first service provider, and first area management key data which is authorized to perform at least one of a write operation to a memory area of said integrated circuit and a rewrite operation to the memory area on the condition that the first area management key data makes a second service provider provide a service using part of said memory area of said integrated circuit when issued by a first service provider providing a first service using said memory area, wherein the apparatus has a memory means, input/output means, and processing means;

• the memory means stores a module including second area management key data issued by a memory area operation unit for managing processing of the data processing apparatus and encrypted by the memory area operation unit using the key memory area division data and a registerable system code list indicating the system code added to the first service provider which can provide service by the same integrated circuit as the second service provider;
• the input/output means receives as input the system code from the integrated circuit;
• and
• the processing means outputs the module to the integrated circuit via the input/output means when it judges that the input system code is indicated in the registerable system code list.

A data processing apparatus for performing processing to write file data in a second memory area of an integrated circuit having a first memory area wherein at least one of a write operation and rewrite operation of file data used for providing a first service is authorized on the condition that first area management key data is used and a second memory area wherein at least one of a write operation and rewrite operation of file data used for providing a second service is authorized on the condition that second area management key data is used,

• when a plurality of third memory areas are defined in the second memory area, third memory management key data used for performing at least one of a write operation of data to a third memory area and a rewrite operation of data in the third memory area is defined for each of the plurality of third memory areas, and said integrated circuit stores said third area management key data,
• said data processing apparatus, comprising:
• a memory means storing third area management data and file key data which is issued by the second service provider, used at the time of writing the file data to a third memory area, and encrypted by the third area management key data;
• an output means for outputting the encrypted file key data to the integrated circuit;
• and
• a writing means for writing file data to be used for providing the second service to the second memory area of the integrated circuit by using the file key data.

A program stored in a computer readable medium for making a computer execute processing so that a portable device including an integrated circuit for storing memory area division data, a system code for identifying a first service provider, and first area management key data which is authorized to perform at least one of a write operation to a memory area of said integrated circuit and a rewrite operation to the memory area on the condition that the first area management key data makes a second service provider provide a service using part of said memory area of said integrated circuit when issued by a first service provider providing a first service using said memory area, comprising making the computer execute

• a routine for receiving as input the system code from the integrated circuit;
• a routine for referring to a registerable system code list indicating the system code given to the first service provider which can provide a service by the same integrated circuit as the second service provider and judging whether the input system code is indicated in the registerable system code list;
• and
• a routine for outputting to the integrated circuit a module including second area management data issued by a memory area operation unit managing execution of the program and encrypted by the memory area operation unit by using the key memory area division data and further encrypted by the first service provider by using the first area management key data when judging that the input system code is indicated in the registerable system code list.

A data processing method of processing so that a portable device including an integrated circuit for storing distribution key data, a system code for identifying a first service provider, and first area management key data which is authorized to perform at least one of a write operation to a memory area of said integrated circuit and a rewrite operation to the memory area on the condition that the first area management key data makes a second service provider provide a service using part of said memory area of said integrated circuit when issued by a first service provider providing a first service using said memory area, comprising:

• inputting the system code from the integrated circuit;
• referring to a registerable system code list indicating the system code given to the first service provider which can provide service by the same integrated circuit as the second service provider and judging whether the input system code is indicated in the registerable system code list;
• and
• outputting to the integrated circuit a module including second area management data issued by a memory area operation unit managing execution of the program and encrypted by the memory area operation unit by using the distribution key data and further encrypted by the first service provider using the first area management key data when it judges that the input system code is indicated in the registerable system code list.