Abstract: Provided is a new system for content use and settlement. A user requests a mobile telephone charge management server (3000) to perform proxy settlement for goods purchased using mobile telephones 1 (4100), 2 (4200) and 3 (4300). The mobile telephone charge management server (3000) makes an inquiry to a registration server (3100) as to whether or not proxy settlement is possible. When proxy settlement is not possible, the mobile telephone performs settlement using electronic money that has been deposited therein.

Abstract: A mobile telephone includes a CPU that obtains and decodes instructions included in an OS, a nonsecure program, a switch device driver, and a secure program, and operates according to the decoding results. A memory includes a controlled area and an uncontrollable area. The OS has only the controlled area as its access space, and includes an instruction for mediating access of the nonsecure program to the controlled area and an instruction for instructing the switch device driver to make a switch to the secure program. The nonsecure program includes an instruction to access the controlled area via the OS. The switch device driver includes an instruction to make a switch from execution of the OS to execution of the secure program in response to an instruction of the OS. The secure program has only the uncontrollable area as its access space, and includes an instruction to access the uncontrollable area.

Abstract: A content playback device of the present invention includes a playback unit 200 operable to play back a content; a normal storage unit 250 that is not tamper-resistant; a secure storage unit 350 that is tamper-resistant; a first control sub-unit 230 that writes playback records indicating elapsed playback time of the content into the normal storage unit one by one at regular time intervals; and a second control sub-unit 330 that (i) writes monitoring records with respect to the playback records into the secure storage unit 350 one by one at irregular time intervals and (ii) determines that the playback records stored in the normal storage unit 250 have not been tampered with if a prescribed relation is satisfied between a specific time point obtained according to a latest one of the monitoring records and one of the playback records corresponding to the specific time point.

Abstract: The present invention offers an electronic device that reduces the amount of data for communication required when files pertaining to software are to be updated, as compared to the conventional devices, and performs tamper detection. The present invention is an electronic device having an application file pertaining to an operation of application software and updating the application file via a network. The electronic device (i) stores therein the application file including one or more data pieces, (ii) receives, from an external apparatus via the network, update data and location information indicating a location, within the application file, which is for rewrite with the update data, (iii) rewrites only part of the application file by writing over a data piece present at the indicated location with the update data, to update the application file, and (iv) examines whether the updated application file has been tampered with.

Abstract: A recording/playback apparatus is capable of using pre-image-converted content in a case of transferring an image-converted content to another device, then back from transfer-destination device to the recording/playback apparatus. The recording/playback apparatus includes a storage unit that stores a first encrypted content generated by encrypting the content, a second encrypted content generated by performing an irreversible compression to convert the content, thereby obtaining a converted content, and by encrypting the converted content, and a content key for decryption of the first and second encrypted contents, a key transfer unit that writes the content key to the external recording medium, and erases the content key stored in the storage unit, and a content transfer unit that, after the content key has been erased, writes the second encrypted content to the external recording medium, and erases the second encrypted content from the storage unit.

Abstract: The recorder/reproducer, when moving a first content data, writes a second content data, which is obtained by re-coding the first content data recorded in a first recording medium, into a second recording medium instead of the first content data, writes one or more first partial information extracted from the first content data into the second recording medium, and makes the first content data irreproducible, using one or more first invalidated partial information having one-to-one correspondence with the extracted one or more first partial information. When restoring the first content data, it makes the irreproducible first content data reproducible, using the one or more first partial information recorded in the second recording medium.

Abstract: In a data processing apparatus that switches between a secure mode and a normal mode during execution, the secure mode allowing access to secure resources to be protected, the normal mode not allowing access to the secure resources, when the secure resources increase in the secure mode, the load on a protection mechanism for protecting the resources becomes large. Thus, there is a demand for data processing apparatuses that are able to reduce secure resources. The present invention relates to a data processing apparatus that stores therein a secure program including one or more processing procedures which use secure resources and a call instruction for calling a normal program to be executed in a normal mode. While executing the secure program, the data processing apparatus calls the normal program with the call instruction and operates according to the called normal program.

Abstract: A key terminal apparatus includes a crypto-processing LSI that performs predetermined crypto-processing. Unique information identifying the crypto-processing LSI is embedded in the crypto-processing LSI. A predetermined master key corresponding to a predetermined key is embedded in the crypto-processing LSI. The crypto-processing LSI (a) receives an encrypted manufacturer key from the manufacturer key storage unit, (b) decrypts the encrypted manufacturer key using the predetermined master key to generate a manufacturer key, (c) generates a unique manufacturer key identical to the predetermined unique manufacturer key, based on the unique information embedded in the crypto-processing LSI and the generated manufacturer key, and (d) decrypts the received encrypted device key using the generated identical unique manufacturer key to generate a predetermined device key.

Abstract: An encrypted-data decrypting apparatus that provides enhanced security protection for programs and data while they are in the processes of decryption to execution after having been encrypted. When a decrypted partial program needs to be loaded into the shared memory M, the controlling unit 11 loads it into an area indicated by the memory location information. According to the memory location information, a plurality of partial programs are sequentially loaded into an area so that one partial program gets overwritten by another; therefore, none of the partial programs exists in the memory for a long time, and thus there is less possibility of having the partial programs referred to illegitimately. In addition, since every time some data is decrypted, the decryption support program authenticating unit 13 confirms authenticity of the decryption support program P, it is possible to prevent having illegitimate references in which the decryption support program is abused.

Abstract: A secure processing device having a power saving mode, which is used for built-in apparatuses, calculates a hash value of secure data that needs to be saved when switching to the power saving mode, stores the calculated hash value in a protection storage unit whose data is not lost even in the power saving mode, encrypts the secure data and stores the encrypted data in an external memory when switching to the power saving mode. When switching back to the normal power mode, the secure processing device decrypts the encrypted data, calculates a hash value of the decrypted data and compares the hash value with the hash value stored in the protection storage unit. The decrypted data is restored to the protection storage unit when the hash values are identical, but discarded together with the encrypted data stored in the external memory when the hash values are not identical.

Abstract: To aim to provide an information processing device capable of improving a processing capability and securely handling programs and data to be protected. According to a system LSI 100 including a plurality of CPUs, when a CPU-1 102 switches to a protection mode, the CPU-1 102 and a CPU-2 103 are reset. While the CPU-1 102 operates in the protection mode, only the CPU-1 102 executes a protection program and the CPU-2 103 is stopped by continuing outputting a reset signal to the CPU-2 103.

Abstract: A data storage apparatus is provided that realizes a measure against deterioration of a flash memory in which integrity check data is stored. A content playback apparatus (1000) uses a hash value of playback history information as integrity check data (confirmation data) for confirming whether the playback history information has been falsified. A first address calculation unit (1004) and a second address calculation unit (1006) determine a read-in address and a storage destination address for the integrity check data, with use of the hash value. Accordingly, the storage destination addresses can be diffused, thus enabling preventing deterioration of the flash memory.

Abstract: A data processing apparatus controls execution of debugging of a program performed by a debugger. The program includes a verification value used for judgment on whether to permit the debugging, and an access control list that shows whether to permit an access to each of parts constituting the program. The data processing apparatus acquires a debugger ID of the debugger from the debugger, and the verification value and the access control list included in the program. The data processing apparatus judges whether to permit the debugging, according to the result of comparison between the debugger ID and the verification value. The data processing apparatus permits an access to a part of the program to be debugged when the access control list shows that the access is permitted. The data processing apparatus does not permit the access to the part when the access control list shows that the access is not permitted.

Abstract: An authenticator apparatus which makes it difficult for an unauthorized user to masquerade and enhances safety includes an authenticating information holding unit (102) previously stores characteristic information indicating an input and output characteristic involving an environment change of an authentic authenticatee apparatus entitled to be authentic, an authenticating information transmitting unit (107) which transmits authenticating information to a portable medium (2), a response information receiving unit (108) which receives response information outputted from the portable medium (2) in response to an input of the authenticating information, an environment selecting unit (105) which identifies an environment of the portable medium (2), and a response information confirming unit (109) which determines whether or not the authenticating information and the response information satisfy the input and output characteristic indicated in the characteristic information stored in the authenticating information

Abstract: An authentication system that can show having an authentic computer program, can certify the authenticity of itself, and can verify the certification. The authentication system is composed of a terminal (requesting device) and a card (verifying device). The card stores secret information to be used by the terminal, and an update program for the terminal. The card verifies authenticity of the terminal using information obtained from the terminal. When it judges that the terminal is authentic, the card outputs the secret information to the terminal. When it judges that the terminal is not authentic, the card outputs the update program. With this structure, the terminal is forced to update the program when it attempts to use the secret information.

Abstract: The present invention offers an electronic device that reduces the amount of data for communication required when files pertaining to software are to be updated, as compared to the conventional devices, and performs tamper detection. The present invention is an electronic device having an application file pertaining to an operation of application software and updating the application file via a network. The electronic device (i) stores therein the application file including one or more data pieces, (ii) receives, from an external apparatus via the network, update data and location information indicating a location, within the application file, which is for rewrite with the update data, (iii) rewrites only part of the application file by writing over a data piece present at the indicated location with the update data, to update the application file, and (iv) examines whether the updated application file has been tampered with.

Abstract: To provide a highly user-friendly content moving device which prevents unauthorized copying of content and, when content that has been irreversibly converted and moved to a recording medium is moved back to a move source, can use the content in its form before irreversible conversion. A partial information extraction unit extracts, from content stored on a content storage unit, partial data necessary for playback of the content, and a write/read unit writes the partial data to a partial information storage unit and overwrites a portion of the content corresponding to the partial data with different data, while a conversion unit transcodes the content and writes the transcoded content and the partial data to the recording medium.

Abstract: There is disclosed a method for ink jet printing, which is suitable for image formation on an inorganic substrate by an ink jet method, and a method for ink jet printing on an inorganic base substrate which can obtain a printed article having a high-density and bleeding-free image. In ink jet printing on an inorganic substrate employing an ink comprising an inorganic pigment and a dispersion medium, the method includes arranging an ink receptive layer on the inorganic substrate employing a treatment liquid containing a nonmetal salt, a glass frit, and an organic binder as indispensable components, and conducting ink jet printing and further baking.

Abstract: A mobile telephone 10 includes: a CPU 102 that fetches and decodes instructions included in an OS, a nonsecure program, a switch device driver, and a secure program, and operates according to the decoding results; and a memory 107 including a controlled area and an uncontrollable area. The OS has only the controlled area as its access space, and includes an instruction for mediating access of the nonsecure program to the controlled area and an instruction for instructing the switch device driver to make a switch to the secure program. The nonsecure program includes an instruction to access the controlled area via the OS. The switch device driver includes an instruction to make a switch from execution of the OS to execution of the secure program in response to an instruction of the OS. The secure program has only the uncontrollable area as its access space, and includes an instruction to access the uncontrollable area.

Abstract: In a data nullification device for nullifying target data recorded on a recording medium, target data is made up of a plurality of data blocks. A judging unit judges, in units of data blocks, whether the target data needs to be nullified. A nullifying unit nullifies, when a predetermined number of data blocks are judged as needing to be nullified or when one or more data blocks whose total amount of data reaches a predetermined amount are judged as needing to be nullified, the judged data blocks.