Original data circulation method, system, apparatus, and computer readable medium

An original data circulation method in an original data circulation system for storing or circulating original data which is digital information, the method comprising:

• first sending, by a first apparatus, the original data and accredited information to a second apparatus;
• generating and storing, by the second apparatus, a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the first apparatus;
• second sending, by the first apparatus, originality information and the session information to the second apparatus, the originality information including a fingerprint corresponding to a source apparatus of the original data and second information corresponding to the original data, and
• performing an authentication step of identifying and authenticating, by the second apparatus, the source apparatus, verifying whether the source apparatus is the same as an apparatus corresponding to the fingerprint, and determining that the originality information is valid if the source apparatus is the same as an apparatus corresponding to the fingerprint,
• wherein the first apparatus conceals a private key of the first apparatus, and in the second sending, the first apparatus sends, to the second apparatus, a public:Key certificate and a first signature corresponding to the private key, and a public key of a third party that trusts the first apparatus, wherein the public key certificate is generated by adding, to a public key corresponding to the private key, a second signature of the third party;
• and
• in the authentication, the second apparatus verifies the first signature by using the public key included in the public key certificate, and verifies whether a hash value of the public key of the third party is included in fingerprints of third parties in the accredited information received from the first apparatus, and checks whether the number in the session information is included in numbers stored in the second apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

An original data circulation system for storing or circulating original data which is digital information, the system comprising:

• a first apparatus which includes first sending means for sending, the original data and accredited information to a second apparatus, and second sending means for sending originality information, the originality information including a fingerprint corresponding to a source apparatus of the original data and second information corresponding to the original data;
• and
• a second apparatus which includes means for generating and storing a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the first apparatus, authentication means for identifying and authenticating the source apparatus of the original data, and means for verifying whether the source apparatus is the same as an apparatus corresponding to the fingerprint, and determining that the originality information is valid if the source apparatus is the same as an apparatus corresponding to the fingerprint,
• wherein the second sending means includes means for sending the session information and a third party certificate to the second apparatus, the third party certificate being a certificate representing that the first apparatus is authenticated by a third party;
• and
• the second apparatus authenticates the first apparatus by verifying that the third party certificate authenticates the first apparatus and that a certifier in the third party certificate is included in third parties in the accredited information received from the first apparatus, and checks whether the number in the session information is included in numbers stored in the second apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

An original data circulation system for storing or circulating original data which is digital information, the system comprising:

• a first apparatus which includes first sending means for sending the original data and accredited information to a second apparatus, and second sending means for sending originality information and session information received from the second apparatus, the originality information including a fingerprint corresponding to a source apparatus of the original data and second information corresponding to the original data;
• and
• a second apparatus which includes means for generating and storing a number uniquely indicating a session for the original data, and sending the session information including the number in the session information to the first apparatus, and authentication means for identifying and authenticating the source apparatus of the original data, and means for verifying whether the source apparatus is the same as an apparatus corresponding to the fingerprint, and determining that the originality information is valid if the source apparatus is the same as an apparatus corresponding to the fingerprint,
• wherein the first apparatus conceals a private key of the first apparatus, and the first apparatus sends, to the second apparatus, a public key certificate and a first signature corresponding to the private key, and a public key of a third party that trusts the first apparatus, wherein the public key certificate is generated by adding, to a public key corresponding to the private key, a second signature of the third party;
• and
• the second apparatus verifies the first signature by using the public key included in the public key certificate, and verifies whether a hash value of the public key of the third party is included in fingerprints of third parties in the accredited information received from the first apparatus, and checks whether the number in the session information is included in numbers stored in the second apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

An issuer apparatus in an original data circulation system for storing or circulating original data which is digital information, the issuer apparatus comprising:

• originality information generation means for generating originality information which includes a fingerprint corresponding to the issuer apparatus of the original data and second information corresponding to the original data;
• originality information sending means for sending the originality information;
• and
• accredited information generation means for generating accredited information indicating third parties that are trusted by the issuer apparatus and that ensures validity of user apparatuses, wherein the original data and the accredited information are sent to a user apparatus in the original data circulation system;
• wherein the originality information sending means includes means for sending, in addition to the originality information, session information received from the user apparatus to the user apparatus with a signature of the issuer apparatus, the session information including a number uniquely indicating a session for the original data and a hash value of a verification key of the user apparatus, wherein the number in the session information is deleted from stored numbers in the user apparatus if the number in the session information is included in the stored numbers in the user apparatus.

A user apparatus in an original data circulation system for storing or circulating original data which is digital information, the user apparatus comprising:

• receiving means for receiving the original data and accredited information from another apparatus;
• means for generating and storing a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the another apparatus;
• originality information receiving means for receiving originality information, the session information and a third party certificate from the another apparatus the originality information including a fingerprint corresponding to a source apparatus of the original data and second information corresponding to the original data, the third party certificate being a certificate representing that the another apparatus is authenticated by a third party;
• identifying means for identifying the source apparatus of the originality information;
• authentication means for determining that the originality information is valid if the source apparatus is authenticated and an apparatus corresponding to the fingerprint and the source apparatus are the same;
• and
• storing means for storing the originality information if the authentication means determines that the originality information is valid,
• the authentication means authenticates the another apparatus by verifying that the third party certificate authenticates the another apparatus and that a certifier of the third party certificate is included in third parties stored in the accredited information received from the another apparatus and checks whether the number in the session information is included in numbers stored in the user apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

A collector apparatus in an original data circulation system for storing or circulating original data which is digital information, the collector apparatus comprising:

• first receiving means for receiving the original data and accredited information from a user apparatus;
• means for generating and storing a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the user apparatus;
• second receiving means for receiving, from the user apparatus, originality information, the session information and a third party certificate, the originality information including a fingerprint corresponding to a source apparatus of the original data and second information corresponding to the original data, and the third party certificate representing that the user apparatus is authenticated by a third party,
• identifying means for identifying a source apparatus of originality information;
• authentication means for authenticating the source apparatus;
• and
• data processing means for performing a process corresponding to the original data if the authentication means determines that the originality information which is sent to the collector apparatus is valid;
• wherein the collector apparatus authenticates the user apparatus by verifying that the third party certificate authenticates the user apparatus and that a certifier of the third party certificate is included in third parties stored in the accredited information received from the user apparatus and checks whether the number in the session information is included in numbers stored in the collector apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

An original data circulation system for storing or circulating original data which is digital information, the original data circulation system comprising:

• an issuer apparatus which includes means for generating originality information and sending the originality information, the originality information including a fingerprint corresponding to the issuer apparatus of the original data and second information corresponding to the original data;
• and
• a user apparatus which includes means for verifying validity of a source apparatus of the originality information and means for storing the originality information when the validity is verified;
• and
• a collector apparatus which includes means for verifying validity of a source apparatus of the originality information and data processing means for performing a process on the original data if the validity is verified,
• wherein the issuer apparatus further includes accredited information generation means for generating accredited information indicating third parties that are trusted by the issuer apparatus and that ensures validity of user apparatuses, wherein the accredited information and the originality information are sent to the user apparatus in the original data circulation system, and
• wherein the user apparatus generates and stores a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the issuer apparatus in response to receiving the original data from the issuer apparatus;
• and the issuer apparatus sends the originality information and the session information to the user apparatus;
• and the user apparatus checks whether the number in the session information is included in numbers stored in the user apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

An original data circulation system for storing or circulating original data which is digital information, the original data circulation system comprising:

• an issuer apparatus including:
• first originality information generation means for generating originality information which includes a fingerprint corresponding to the issuer apparatus of the original data and second information corresponding to the original data;
• and
• first originality information sending means for sending the originality information;
• a user apparatus including:
• first originality information sending means for sending the originality information;
• first identifying means for identifying a source apparatus of the originality information;
• first authentication means for determining that the originality information is valid if the source apparatus is authenticated and an apparatus corresponding to the fingerprint and the source apparatus are the same;
• and
• storing means for storing the originality information when the first authentication means determines that the originality information is valid;
• and
• a collector apparatus including:
• second identifying means for identifying a source apparatus of originality information;
• second authentication means for authenticating the source apparatus;
• and
• data processing means for performing a process corresponding to the original data if the second authentication means determines that the originality information which is sent to the collector apparatus is valid,
• wherein the issuer apparatus further includes accredited information generation means for generating accredited information indicating third parties that are trusted by the issuer apparatus and that ensures validity of user apparatuses, wherein the accredited information and the originality information are sent to the user apparatus in the original data circulation system;
• wherein the user apparatus generates and stores a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the issuer apparatus in response to receiving the original data from the issuer apparatus;
• and the issuer apparatus sends the originality information and the session information to the user apparatus;
• and the user apparatus checks whether the number in the session information is included in numbers stored in the user apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

A computer readable medium storing program code for causing a computer in an original data circulation system to store or circulate original data which is digital information, the computer being used as an issuer apparatus, the computer readable medium comprising:

• originality information generation program code means for generating originality information which includes a fingerprint corresponding to the issuer apparatus of the original data and second information corresponding to the original data;
• originality information sending program code means, for sending the originality information;
• and
• accredited information generation program code means for generating accredited information indicating third parties that are trusted by the issuer apparatus and that ensures validity of user apparatuses, wherein the original data and the accredited information are sent to a user apparatus in the original data circulation system;
• wherein originality information sending program includes sending program code means for sending, in addition to the originality information, session information received from the user apparatus to the user apparatus with a signature of the issuer apparatus, the session information including a number uniquely indicating a session for the original data and a hash value of a verification key of the user apparatus, wherein the number in the session information is deleted from stored numbers in the user apparatus if the number in the session information is included in the stored numbers in the user apparatus.

A computer readable medium storing program code for causing a computer in an original data circulation system to store or circulate original data which is digital information, the computer being used as a user apparatus, the computer readable medium comprising:

• receiving program code means for receiving the original data and accredited information from another apparatus;
• program code means for generating and storing a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the another apparatus;
• originality information receiving program code means for receiving originality information, the session information and a third party certificate from the another apparatus the originality information including a fingerprint corresponding to a source apparatus of the original data and second information corresponding to the original data, the third party certificate being a certificate representing that the another apparatus is authenticated by a third party;
• identifying program code means for identifying the source apparatus of the originality information;
• authentication program code means for determining that the originality information is valid if the source apparatus is authenticated and an apparatus corresponding to the fingerprint and the source apparatus are the same;
• and
• storing program code means for storing the originality information if the authentication program code means determines that the originality information is valid,
• wherein the authentication program code means authenticates the another apparatus by verifying that the third party certificate authenticates the another apparatus and that a certifier of the third party certificate is included in third parties stored in the accredited information received from the another apparatus and checks whether the number in the session information is included in numbers stored in the user apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.

A computer readable medium storing program code for causing a computer in an original data circulation system to store or circulate original data which is digital information, the computer being used as a collector apparatus, the computer readable medium comprising:

• first receiving program code means for receiving the original data and accredited information from a user apparatus;
• program code means for generating and storing a number uniquely indicating a session for the original data, and sending session information including the number in the session information to the user apparatus;
• second receiving program code means for receiving, from the user apparatus, originality information, the session information and a third party certificate from the user apparatus, the originality information including a fingerprint corresponding to a source apparatus of the original data and second information corresponding to the original data, and the third party certificate representing that the user apparatus is authenticated by a third party,
• identifying program code means for identifying a source apparatus of originality information;
• authentication program code means for authenticating the source apparatus;
• and
• data processing program code means for performing a process corresponding to the original data if the authentication program code means determines that the originality information which is sent to the collector apparatus is valid;
• wherein the authentication program code means authenticates the user apparatus by verifying that the third party certificate authenticates the user apparatus and that a certifier of the third party certificate is included in third parties stored in the accredited information received from the user apparatus and checks whether the number in the session information is included in numbers stored in the collector apparatus and deletes the number in the session information from the stored numbers if the number in the session information is included in the stored numbers.