Abstract: An update device includes processing circuitry configured to store package management information that includes associations between files and packages including the files and information indicating existence/non-existence of dependence relationships among the packages, and an access control list that includes associations between the files and access source files permitted to access the files, refer, when a combination of a file and an access source file is specified, to the package management information to identify a package including the file and a package including the access source file, and add, when the identified package including the file and the identified package including the access source file are the same or are mutually in a dependence relationship, the specified combination to the access control list.

Abstract: A trusted application (TA) operates on a trusted execution environment (TEE) and generates a screen. Further, the TA transmits certification information for certifying validity of the TA to a verification device. The verification device verifies whether the TA is valid on the basis of the certification information. Further, the verification device authenticates a display device when the validity of the TA is certified and when the verification device is capable of confirming the facts that a picture is being output and that a device outputting the picture is the display device. Further, the verification device outputs a random number code when the display device is authenticated. Further, the verification device transmits the random number code to the display device when the display device is authenticated. Further, the display device receives the random number code from the verification device and displays the same.

Abstract: An information processing device includes processing circuitry configured to determine whether or not there is integrity in predetermined data regarding a boot sequence of an Operating System (OS) during execution of shutdown of the OS, arid suspend shutdown of the OS when it is determined that there is no integrity in the predetermined data.

Abstract: A storage unit stores a size of a free area of storage of target equipment, and software saved in the storage. The generation unit generates a graph including a number of nodes according to the size of the free area of the storage, and transmits the graph to the target equipment. The calculation unit calculates a hash value corresponding to each software block saved in the storage. The verification unit verifies the presence or absence of tampering of the storage of the target equipment using the hash value corresponding to the block calculated, a response calculated using the graph returned to a challenge that specifies a node of the graph, and a hash value corresponding to the block returned as the response to the challenge that specifies the block.

Abstract: An update device includes processing circuitry configured to store package management information that includes associations between files and packages including the files and information indicating existence/non-existence of dependence relationships among the packages, and an access control list that includes associations between the files and access source files permitted to access the files, refer, when a combination of a file and an access source file is specified, to the package management information to identify a package including the file and a package including the access source file, and add, when the identified package including the file and the identified package including the access source file are the same or are mutually in a dependence relationship, the specified combination to the access control list.

Abstract: A management system includes processing circuitry configured to acquire, from a device configured to store shared common definition information indicating a definition of a common list serving as a list of files and directories likely to be described in the collation information and a definition of an element attribute serving as conditions for determining elements of a list of files and directories in the collation information in an individual file management device, first common definition information corresponding to identification information of the first common definition information input to the acquisition device, compare the first common definition information acquired with the file managed to distinguish whether there is a file satisfying all the conditions of the first common definition information, and output, to the generation device, second common definition information corresponding to the file managed among the first common definition information acquired based on a distinction result.

Abstract: A TA operates on a TEE and generates a screen. Further, the TA transmits certification information for certifying validity of the TA to a verification device. The verification device verifies whether the TA is valid on the basis of the certification information. Further, the verification device authenticates a display device when the validity of the TA is certified and when the verification device is capable of confirming the facts that a picture is being output and that a device outputting the picture is the display device. Further, the verification device outputs a random number code when the display device is authenticated. Further, the verification device transmits the random number code to the display device when the display device is authenticated. Further, the display device receives the random number code from the verification device and displays the same.

Abstract: In a detection system (1) including a sensor (2) and a controller (3), an acquisition unit (2a) in the sensor (2) acquires sensor data, a calculation unit (2b) calculates, by using the sensor data, a MAC value from which non-tampering of the sensor data is verifiable, and a transmission unit (2d) transmits the sensor data to the controller (3) or transmits the MAC value to the controller (3) in place of the sensor data when the calculation unit (2b) has calculated the MAC value. In the controller (3), a reception unit (3a) receives the sensor data or the MAC value transmitted from the sensor (2), and when the reception unit (3a) has received the MAC value, a verification unit (3b) verifies the MAC value by using the sensor data last received by the reception unit (3a).

Abstract: A protection device includes a memory, and processing circuitry coupled to the memory and configured to acquire a list of file paths of predetermined protection target files, and perform an operation of protecting data of a file corresponding to a file path included in the list.