Abstract: There is provided a program for making a computer perform a first procedure for verifying whether an platform guaranteeing that device identification data for identifying a communication device cannot be rewritten by the user is provided in the communication device, a second procedure for verifying whether the device identification data included in a registration request received from the communication device is not yet registered, and a third procedure for registering the device identification data included in the registration request and issuing user identification data to the user when the program determines in the first procedure that the platform is provided and determines in the second procedure that the device identification data is not yet registered.

Abstract: A system to manage and control usage rights for cryptographic keys. A kernel process is provided with secure and exclusive authorization to access certain keys in a key hierarchy. Special authorization is required for other processes or users to access keys used by the kernel. A persistent storage area is used to hold a Kernel Authorization Data field for the root key and/or other keys used by the kernel or other specialized processes. The authorization data, and the keys it protects, can be used to protect other portions of, or the entire, key structure. The persistent storage area is reserved in a TPM or similar security hardware.

Abstract: A system to manage and control usage rights for cryptographic keys. A kernel process is provided with secure and exclusive authorization to access certain keys in a key hierarchy. Special authorization is required for other processes or users to access keys used by the kernel. A persistent storage area is used to hold a Kernel Authorization Data field for the root key and/or other keys used by the kernel or other specialized processes. The authorization data, and the keys it protects, can be used to protect other portions of, or the entire, key structure. The persistent storage area is reserved in a TPM or similar security hardware.

Abstract: There is provided a program for making a computer perform a first procedure for verifying whether an platform guaranteeing that device identification data for identifying a communication device cannot be rewritten by the user is provided in the communication device, a second procedure for verifying whether the device identification data included in a registration request received from the communication device is not yet registered, and a third procedure for registering the device identification data included in the registration request and issuing user identification data to the user when the program determines in the first procedure that the platform is provided and determines in the second procedure that the device identification data is not yet registered.

Abstract: A program capable of protecting private data with a small processing amount appropriately with high reliability, by which a server apparatus transmits hash data of an booted program to a client apparatus, the client apparatus transmits the hash data and encoded private data to the server apparatus after negotiation, and the server apparatus performs matching of the hash data to use the private data.

Abstract: The present invention provides an information processing apparatus of space-saved type that can execute the processing corresponding to a security function module. A security function module storing a device key is integrally arranged in an MPU chip, the secret data including programs and data to be applied to the data processing to be executed in the security function module are encrypted with the device key or attached with a falsification verification value and the resultant programs and data are stored in an external storage section. This novel configuration can significantly reduce the amount of data to be stored in the security function module and therefore eliminate the necessity for a large-capacity flash memory. Consequently, the security function module can be integrally arranged in the MPU chip having the main CPU, thereby significantly reducing the packaging area and the production cost.

Abstract: The present invention provides a memory protective administrative apparatus for a computer for protecting memory access between programs. A virtual address administrative apparatus constituting the first mentioned apparatus receives size of a memory region prepared, and assigns a virtual address region larger than the size. At this time, a top address of a region smaller than size S1 covered by 1-entry of the minimum segment table performs virtual address assigning so as to be aligned to the size S1. In a region of size larger than the S1, hierarchies in which the size can be covered by 1-entry are searched from bottom, and likewise, a virtual address aligned is assigned. A page table is variable in length and has a page entry for a size part. The page table is linked to entry corresponding to the top virtual address of a segment table of a hierarchy used for alignment.

Abstract: The present invention provides a memory protective administrative apparatus for a computer for protecting memory access between programs. A virtual address administrative apparatus constituting the first mentioned apparatus receives size of a memory region prepared, and assigns a virtual address region larger than the size. At this time, a top address of a region smaller than size S1 covered by 1-entry of the minimum segment table performs virtual address assigning so as to be aligned to the size S1. In a region of size larger than the S1, hierarchies in which the size can be covered by 1-entry are searched from bottom, and likewise, a virtual address aligned is assigned. A page table is variable in length and has a page entry for a size part. The page table is linked to entry corresponding to the top virtual address of a segment table of a hierarchy used for alignment.