| 摘要 |
<P>PROBLEM TO BE SOLVED: To provide a method and system for changing authorized persons of an IC card on-line. <P>SOLUTION: In this method for changing the authorized persons of an IC card on-line, a plurality of authorized person candidate devices are prepared in addition to an authorized person device having authority of issuing, managing, operating, or the like a card. A division key obtained by dividing a performance authority key by the number of candidate devices is given to to each authorized person candidate device. When the authorized person device has to be deprived of the authority, a new authorized person device is determined among the authorized person candidate devices by mutual agreement of the authorized person candidate devices. The new authorized person device receives from other authorized person candidate devices their own division keys, combines the division keys to prepare a performance authority key and holds the performance authority key. The new authorized person device requests an authentication station to change the authorized persons, abolishes the registration of the former authorized person device, and registers the new authorized person device itself as a new authorized person. The new authorized person device notifies the IC card and a performer device that the new authorized person device has become the authorized person. The device establishes access right so that the IC card and the performer device can not perform all or a portion of the commands without the signature of the new device. <P>COPYRIGHT: (C)2004,JPO |
