Information processing apparatus

摘要

A hardware TPM has a plurality of registers, and performs data protection by encryption of data associated with the value of one of the plurality of registers. A register number manager manages, for each application, a register number used for the data protection. During execution of an application, an application executor issues a data protection request that designates a register number preset in the application. A software TPM transfers, to the hardware TPM, the data protection request in which the register number designated in the data protection request has been replaced with the register number managed by the register number manager.

主权项

1. An information processing apparatus comprising:
a memory storing code; and a processor, wherein upon execution of the stored code the processor functions as
a trusted device which has a plurality of registers and performs data protection by encryption of data associated with a value of one of the plurality of registers;a management unit that, for each application, manages an association between the respective application and a first register number used by that application for performing the data protection;an application execution unit that, during execution of an application, issues a data protection request that designates a second register number preset in the application; anda protection unit that, when a data protection request is issued for an application, (i) obtains the first register number that is associated with that application, (ii) replaces, in the data protection request, the second register number that is preset in the application with the first register number that is associated with the application, and (iii) transfers to the trusted device the data protection request in which the second register number has been replaced with the first register number.