Abstract: A cryptographic management apparatus includes a storage unit which stores cryptographic key information containing a cryptographic key and cryptographic process condition information containing the cryptographic key information, a cryptographic process information input unit which receives an input of the object information and cryptographic key search request information, a cryptographic key information acquisition unit which acquires the cryptographic key information from the storage unit based on the search request information, a cryptographic module evaluation description information acquisition unit which acquires evaluation description information of the cryptographic module corresponding to the cryptographic key information, a cryptographic process ID creation unit which attaches an identifier of the cryptographic process condition information to the object information based on the cryptographic key information and the cryptographic module corresponding to the evaluation description information, and an

Abstract: An electronic value exchange system 100 comprises a mobile terminal 10 and a mobile terminal 20. The mobile terminal 10 causes a driver 12 to transmit an exchange offer message of electronic value V1, V2 to the mobile terminal 20. The mobile terminal 20 stores handlers that the driver 12 can execute in relationship to a message in a common table 221, and acquires a handler corresponding to the above-mentioned offer message, and notifies the exchange offer contents based on the handler to an application program 21. If the application program 21 consents to the offer contents according to the operation of a user, the electronic value V2 stored in an IC card 23 is transmitted to an IC card 13 via a driver 22 and the driver 12.

Abstract: A cryptographic client device acquires a cryptographic key from a storage device son the basis of the accepted demand information, acquires a cryptographic evaluation description file from the storage device, acquires a cryptographic module corresponding to this cryptographic evaluation description file, executes a cryptographic process on the subject data to be performed the cryptographic process, and issues the encrypted subject data.

Abstract: A cryptographic module management apparatus searches for cryptographic module meta-information based on the category information of a requested cryptographic module and, if associated cryptographic module category information is contained in this cryptographic module meta-information, searches for the cryptographic module meta-information of an associated cryptographic module, to generate composite type cryptographic module evaluation information based on this cryptographic module meta-information, select a cryptographic module based on this composite type cryptographic module evaluation information, and read this cryptographic module from a cryptographic module storage portion and output such composite type cryptographic module evaluation information.

Abstract: In a cryptographic module distribution system, a cryptographic management server apparatus encrypts a cryptographic module using a key shared by a cryptographic apparatus, and transmits the encrypted cryptographic module to a client apparatus. The client apparatus transmits the encrypted cryptographic module to a cryptographic apparatus. The cryptographic apparatus decrypts the encrypted cryptographic module using the key shared by the cryptographic management server apparatus, and transmits the decrypted cryptographic module to the client apparatus. The client apparatus stores the received cryptographic module.

Abstract: A cryptographic module selecting device includes a cryptographic module evaluation information storage device configured to store identification information of a cryptographic module and cryptographic module evaluation information describing a function and/or performance of the cryptographic module in relation to each other, a condition information acquiring device configured to acquire condition information for specifying the condition of the cryptographic module to be selected, an extracting device configured to extract cryptographic module evaluation information conforming to the acquired condition information, from the stored cryptographic module evaluation information of the cryptographic module, and an output device configured to read out the identification information of the cryptographic module corresponding to the cryptographic module evaluation information selected by the extracting device from the cryptographic module evaluation information storage device and output the read identification informat

Abstract: Between an IC card (1) and a electronic ticket server (2), upon purchasing an electronic ticket a public key cryptosystem is employed for a mutual authentication to keep a strict security, and a shared secret between the electronic ticket and a ticket collecting machine is sent on a secure channel as well as the electronic ticket. Upon usage of the electronic ticket, the IC card (1) and the ticket collecting machine (6) mutually judge whether they carry out the mutual authentication by using a public key cryptosystem or a symmetric key cryptosystem. When they determine to use the symmetric key cryptosystem, they carry out the mutual authentication by using the shared secret exchanged beforehand. When they determine to use the public key cryptosystem, they carry out the mutual authentication by using the same method as that used upon purchasing the electronic ticket.

Abstract: A data processing method using a data processing apparatus on a transmitting side having an application for performing processing using an internal device set in the data processing apparatus, a driver that accepts an access request to the internal device from the application, a handler that performs access processing to the internal device and transmitting a message to an external device set outside the data processing apparatus, and a storage device that stores a device ID as a transmission destination for specifying the internal or external device and the handler in association with each other, and a data processing apparatus on a receiving side that receives the message transmitted from the data processing apparatus on the transmitting side.

Abstract: Realizing a data communication device and a data communication method enabling to specify an IC memory mounted in the communication device and to perform data communication to the communication device in which the IC memory is mounted. A mobile device 100 of transmitting side accepts a domain ID specifying a detachable IC memory uniquely from an application 102, a communication driver 105 obtains an IP address of the device of correspondent on the basis of the accepted domain ID from a name server 300 storing the domain ID and the IP address being associated with each other. Then, the communication driver 105 obtains a port ID which an IC memory of the device of correspondent assigned to an application, and transmits the domain ID and the port ID together with a transmission data to the IP address. The device of correspondent rims the application based on the received port ID and executes an appropriate processing.

Abstract: A Terminal equipment 10 has a message information accepter 12 for accepting message information from terminal program 26, an ID generator 14 for generating a thread ID for identifying the message information, a transmitter 16 for generating a message containing the message information and the thread ID and for transmitting the message to IC card 24, and a receiver 18 for receiving a message from the IC card 24. When the message received from the IC card 24 contains the thread ID inserted in the transmitted message, the message information accepter 12 returns the received message as a return value for the message information to the terminal program 26 and terminates a process attributed to the message information.

Abstract: A portable terminal, when receiving an exchange offer message of electronic values from a portable terminal, notifies an application program of an exchange offer content based on a listener corresponding to the message. When the application program accepts this offer content and when electronic values are determined as exchange objects, the portable terminal returns an exchange confirmation message of the electronic values. When the portable terminal receives the exchange confirmation message, it notifies an application program of an exchange content based on a listener corresponding to the message. When the application program accepts the exchange content, the exchange transaction of electronic values is started.

Abstract: Each IC card 1 notifies a server 3 of the ID of the IC card and the connection information of a terminal device to which the IC card is connected. The server 3 stores the ID and the connection information in a database 4 while associating the ID and the connection information with each other. When an IC card 1 communicates with another IC card, the IC card 1 requests the connection information concerning the destination IC card from the server 3 while specifying the ID of this IC card. The server 3 searches the database 4 for the connection information corresponding to the ID specified by the request, and notifies the requesting IC card 1 of the acquired connection information. This enables communications between IC cards even if the terminal device to which a destination IC card is connected has been changed in the past.

Abstract: A cryptographic module selecting device includes a cryptographic module evaluation information storage device configured to store identification information of a cryptographic module and cryptographic module evaluation information describing a function and/or performance of the cryptographic module in relation to each other, a condition information acquiring device configured to acquire condition information for specifying the condition of the cryptographic module to be selected, an extracting device configured to extract cryptographic module evaluation information conforming to the acquired condition information, from the stored cryptographic module evaluation information of the cryptographic module, and an output device configured to read out the identification information of the cryptographic module corresponding to the cryptographic module evaluation information selected by the extracting device from the cryptographic module evaluation information storage device and output the read identification informat

Abstract: A folder containing at least one file can be created in a file storage (17) in response to a folder creation request from an owner (30) of an IC card (10), and an access authority to the folder can be set as an access control list (18A) of the folder in response to an access authority setting request from the owner (30). Then access to the file is controlled not only on the basis of the access authority to the file set by an issuer of a voucher (issuer of the file), but also on the basis of the access authority to the folder set by the owner (30).

Abstract: Between an IC card (1) and a electronic ticket server (2), upon purchasing an electronic ticket a public key cryptosystem is employed for a mutual authentication to keep a strict security, and a shared secret between the electronic ticket and a ticket collecting machine is sent on a secure channel as well as the electronic ticket. Upon usage of the electronic ticket, the IC card (1) and the ticket collecting machine (6) mutually judge whether they carry out the mutual authentication by using a public key cryptosystem or a symmetric key cryptosystem. When they determine to use the symmetric key cryptosystem, they carry out the mutual authentication by using the shared secret exchanged beforehand. When they determine to use the public key cryptosystem, they carry out the mutual authentication by using the same method as that used upon purchasing the electronic ticket.

Abstract: When an application issues an access request to a device via a driver, the application can immediately perform other processing. An IC memory 12 for performing predetermined processing such as encryption processing and decryption processing, an application for performing processing using the IC memory 12, an IC memory handler 14 for performing access processing to the IC memory 12, and a driver 12 that invokes the IC memory handler 14 according to an instruction from the application and returns a response to the effect that the instruction has been accepted to the application, are provided.

Abstract: In a cryptographic module distribution system, a cryptographic management server apparatus encrypts a cryptographic module using a key shared by a cryptographic apparatus, and transmits the encrypted cryptographic module to a client apparatus. The client apparatus transmits the encrypted cryptographic module to a cryptographic apparatus. The cryptographic apparatus decrypts the encrypted cryptographic module using the key shared by the cryptographic management server apparatus, and transmits the decrypted cryptographic module to the client apparatus. The client apparatus stores the received cryptographic module.

Abstract: A cryptographic client device acquires a cryptographic key from a storage device son the basis of the accepted demand information, acquires a cryptographic evaluation description file from the storage device, acquires a cryptographic module corresponding to this cryptographic evaluation description file, executes a cryptographic process on the subject data to be performed the cryptographic process, and issues the encrypted subject data.

Abstract: A cryptographic management apparatus includes a storage unit which stores cryptographic key information containing a cryptographic key and cryptographic process condition information containing the cryptographic key information, a cryptographic process information input unit which receives an input of the object information and cryptographic key search request information, a cryptographic key information acquisition unit which acquires the cryptographic key information from the storage unit based on the search request information, a cryptographic module evaluation description information acquisition unit which acquires evaluation description information of the cryptographic module corresponding to the cryptographic key information, a cryptographic process ID creation unit which attaches an identifier of the cryptographic process condition information to the object information based on the cryptographic key information and the cryptographic module corresponding to the evaluation description information, and an

Abstract: A cryptographic module management apparatus searches for cryptographic module meta-information based on the category information of a requested cryptographic module and, if associated cryptographic module category information is contained in this cryptographic module meta-information, searches for the cryptographic module meta-information of an associated cryptographic module, to generate composite type cryptographic module evaluation information based on this cryptographic module meta-information, select a cryptographic module based on this composite type cryptographic module evaluation information, and read this cryptographic module from a cryptographic module storage portion and output such composite type cryptographic module evaluation information.