Abstract: A trusted application (TA) operates on a trusted execution environment (TEE) and generates a screen. Further, the TA transmits certification information for certifying validity of the TA to a verification device. The verification device verifies whether the TA is valid on the basis of the certification information. Further, the verification device authenticates a display device when the validity of the TA is certified and when the verification device is capable of confirming the facts that a picture is being output and that a device outputting the picture is the display device. Further, the verification device outputs a random number code when the display device is authenticated. Further, the verification device transmits the random number code to the display device when the display device is authenticated. Further, the display device receives the random number code from the verification device and displays the same.

Abstract: An information processing apparatus includes a normal user interface (NUI) functional unit, a secure user interface (SUI) functional unit having a protection level higher than that of the NUI functional unit, and an input/output unit that receives an input of information and displays and outputs the information. The NUI functional unit causes the input/output unit to display a NUI screen which receives an input of a query and transmits, as a query, the query input via the NUI screen to the SUI functional unit. The SUI functional unit produces a summary corresponding to the query on the basis of certification data including a query and a summary corresponding to the query and causes the input/output unit to display a SUI screen having the query and the summary.

Abstract: An information processing apparatus (1) includes a NUI functional unit (30), a SUI functional unit (20) having a protection level higher than that of the NUI functional unit (30), and an input/output unit (11) that receives an input of information and displays and outputs the information. The NUI functional unit (30) causes the input/output unit (11) to display a NUI screen which receives an input of a query Q0 and transmits, as a query Q1, the query Q0 input via the NUI screen to the SUI functional unit 20. The SUI functional unit (20) produces a summary M1 corresponding to the query Q1 on the basis of certification data (50) including a query and a summary corresponding to the query and causes the input/output unit (11) to display a SUI screen having the query Q1 and the summary M1.

Abstract: A TA operates on a TEE and generates a screen. Further, the TA transmits certification information for certifying validity of the TA to a verification device. The verification device verifies whether the TA is valid on the basis of the certification information. Further, the verification device authenticates a display device when the validity of the TA is certified and when the verification device is capable of confirming the facts that a picture is being output and that a device outputting the picture is the display device. Further, the verification device outputs a random number code when the display device is authenticated. Further, the verification device transmits the random number code to the display device when the display device is authenticated. Further, the display device receives the random number code from the verification device and displays the same.

Abstract: An information processing device includes a memory, and processing circuitry coupled to the memory and configured to acquire, from a storage of a security module with tamper resistance, information related to a verification key and ID information of the configuration file for verifying a digital signature for a configuration file, and use the acquired information related to the verification key and ID information to cause an application program to execute processing of verifying integrity of configuration data of the configuration file, acquire registration version information from the storage of the security module, and use the acquired registration version information to cause the application program to execute processing of verifying a configuration version of the configuration file, and update the registration version information to the version of the configuration version when the configuration version of the configuration file and the registration version information satisfy a predetermined condition.

Abstract: A protection device includes a memory, and processing circuitry coupled to the memory and configured to acquire a list of file paths of predetermined protection target files, and perform an operation of protecting data of a file corresponding to a file path included in the list.