Target device, method and system for managing device, and external device

Abstract

A device management system is configured with a target device including at least one unit that includes a tamper-resistant chip, a management apparatus that manages or uses the target device, and an authentication apparatus including a database for authentication, connected via a network in a communicable manner. In the target device, each unit is equipped with the tamper-resistant chip that collects device information specific to a unit, stores collected device information, and stores a confidential-key.

1 . (canceled) 
     
     
         2 . (canceled) 
     
     
         3 . (canceled) 
     
     
         4 . (canceled) 
     
     
         5 . (canceled) 
     
     
         6 . (canceled) 
     
     
         7 . (canceled) 
     
     
         8 . (canceled) 
     
     
         9 . (canceled) 
     
     
         10 . (canceled) 
     
     
         11 . (canceled) 
     
     
         12 . (canceled) 
     
     
         13 . (canceled) 
     
     
         14 . (canceled) 
     
     
         15 . (canceled) 
     
     
         16 . (canceled) 
     
     
         17 . A device management system in which a target device configured with plural units that include a tamper-resistant chip, a management apparatus that manages or uses the target device, and an authentication apparatus are connected via a network in a communicable manner, wherein
 the management apparatus includes
 a requesting unit that transmits a unit-information confirmation request to the target device, 
   the target device includes
 a request receiving unit that receives transmitted unit-information confirmation request; 
 a transmitting unit that 
   
       gathers device information including unit information of the units that includes a unit identification number stored in the tamper-resistant chip, encrypts the device information with a confidential key stored in the tamper-resistant chip, and transmits encrypted device information to the authentication apparatus, and
 the authentication apparatus includes
 a device-information receiving unit that receives the device information; and 
 an evaluation unit that decrypts received device information, evaluates whether decrypted device information corresponds to device information that is stored in a database of the authentication apparatus in advance, and transmits a result of evaluation to the target device and the management apparatus. 
 
 
     
     
         18 . A device management system in which a target device configured with plural units that include 
       a tamper-resistant chip, a management apparatus that manages or uses the target device, and an authentication apparatus, wherein the system is connected via a network in a communicable manner, wherein
 the management apparatus includes
 a requesting unit that transmits a unit-program confirmation request to the target device, 
 
 the target device includes
 a request receiving unit that receives transmitted unit-program confirmation request; and a first transmitting unit that gathers device information including unit information of the units that includes a unit identification number stored in the tamper-resistant chip and a program-version information relating to a version of a program that is executed by the unit, encrypts the device information with a confidential key stored in the tamper-resistant chip, and transmits encrypted device information to the authentication apparatus, and 
 
 the authentication apparatus includes
 a device-information receiving unit that receives the device information; and 
 a second transmitting unit that decrypts received device information, evaluates whether a correspondence relationship between the unit identification number and the program-version information included in the device information matches with a correspondence relationship between unit identification number and program-version information stored in a database of the authentication apparatus in advance, when the relationships do not match, acquires a program file corresponding to a correct program version from the database, and transmits acquired program file to the target device. 
 
 
     
     
         19 . A device management system in which a target device configured with plural units that include a tamper-resistant chip including a device-information storing unit that stores device information specific to a unit and a confidential-key storing unit that stores a confidential key, and the system including an external device that manages or uses the target device, wherein the system is connected via a network in a communicable manner, wherein
 the target device includes
 an encrypting unit that gathers stored device information of the units, and encrypts the device information using the confidential key; and 
 a first transmitting unit that transmits encrypted device information to the external device connected to the target device, and 
   the external device includes
 a device-information receiving unit that receives transmitted device information; 
 an evaluating unit that decrypts received device information, and evaluates whether the device information corresponds to device information that is stored in a database in advance; and 
 a second transmitting unit that transmits a result of evaluation by the evaluating unit to the target device. 
   
     
     
         20 . The device management system according to  claim 19 , wherein
 the external device further includes
 an operation-information storing unit that stores operation information corresponding to each piece of information included in the device information; 
 an operation extracting unit that decrypts the received device information, and extracts the operation information corresponding to decrypted device information from the operation-information storing unit; and 
 a third transmitting unit that transmits extracted operation information to the target device or other external device. 
   
     
     
         21 . A device management method for a device management system in which a target device configured with plural units that include a tamper-resistant chip including a device-information storing unit that stores device information specific to a unit and a confidential-key storing unit that stores a confidential key, and the device management system further including an external device that manages or uses the target device, wherein the system is connected via a network in a communicable manner,
 the device management method comprising:
 the target device 
   encrypting information, including the target device gathering the device information of the units, and encrypting the device information using the confidential key;
 transmitting information, including the target device transmitting encrypted device information to the external device connected to the target device; 
 receiving information, including the external device receiving transmitted device information; and 
   the external device evaluating information, including decrypting received device information;   evaluating whether the device information corresponds to device information that is stored in a database in advance; and transmitting a result of evaluation the target device.   
     
     
         22 . The device management method according to  claim 21 , further comprising:
 storing information by the external device, including the external device, including storing operation information corresponding to each piece of information included in the device information;   extracting information by the external device, including decrypting the received device information; and extracting the operation information corresponding to decrypted device information; and   
       transmitting information by the external device, including 
       transmitting extracted operation information to the target device or other external device.