Information processing system, information processing method, program, and storage medium

Abstract

To provide an information processing system, an information processing method, a program, and a storage medium, which can improve security.SOLUTION: An information processing system includes a memory system, a host, and an authentication server. When receiving an initialization command, a command generation part transmits a first initialization start command of making the memory system start initialization of a memory, to an initialization processing part. When receiving the first initialization start command, the initialization processing part transmits a first user authentication request which is an instruction of requiring authentication of a user, to a user authentication processing part. When receiving user identification information and the first user authentication request, the user authentication processing part transmits a second user authentication request which is an instruction of requiring the authentication of the user, and the user identification information, to a user authentication processing device. When receiving the second user authentication request and the user identification information, the user authentication processing device generates user authentication result information on the basis of the user identification information.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present embodiment relates to an information processing system, an information processing method, a program, and a storage medium. [Background technology]

[0002] Self-Encrypting Drives (SEDs) that comply with the TCG (Trusted Computing Group) standard are equipped with a revert function that initializes the SED. To make the SED execute the revert function, a character string (Physical presence Security IDentifier (PSID)) printed on the SED may be specified. Because the PSID is printed on the SED, third parties can easily reference the PSID. In this case, third parties can execute the revert function. Therefore, the security of the SED is low. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] U.S. Patent No. 9,626,531 Summary of the Invention [Problem to be solved by the invention]

[0004] An information processing system, an information processing method, a program, and a storage medium capable of improving security are provided. [Means for solving the problem]

[0005] The information processing system according to the present embodiment includes a memory system having a memory for storing data, a host detachably connected to the memory system, and an authentication server provided at a location different from the locations of the memory system and the host. The host includes a user interface for receiving information input by a user, a command generating unit for generating a command related to starting initialization of the memory, and a user authentication processing unit for performing processing related to user authentication between the host and the memory system, in which the input user information is confirmed to match preset information between the host and the authentication server. The memory system includes an initialization processing unit for initializing the memory. The authentication server includes a user authentication processing device for authenticating the user. When the user input is received, the user interface transmits an initialization command to the command generating unit, generates user identification information that is information for identifying the user based on the user input, and transmits the generated user identification information to the user authentication processing unit. When the command generating unit receives the initialization command, it transmits a first initialization start command to the initialization processing unit to cause the memory system to start initialization of the memory. When the initialization processing unit receives the first initialization start command, it transmits a first user authentication request that is a command requesting authentication of the user to the user authentication processing unit. When the user authentication processing unit receives the user identification information and the first user authentication request, it transmits a second user authentication request, which is a command requesting authentication of the user, and the user identification information to the user authentication processing device. When the user authentication processing device receives the second user authentication request and the user identification information, it generates user authentication result information based on the user identification information. [Brief description of the drawings]

[0006] [Figure 1] 1 is a block diagram showing an example of a configuration of an information processing system according to a first embodiment. [Diagram 2] 2 is a block diagram showing an example of a functional configuration of a memory controller and a host control device according to the first embodiment. FIG. [Diagram 3] FIG. 4 is a sequence diagram showing an example of an operation of the information processing system according to the first embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0007] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. In the specification and the drawings, the same elements are denoted by the same reference numerals.

[0008] (First embodiment) FIG. 1 is a block diagram showing an example of the configuration of an information processing system 1 according to the first embodiment.

[0009] The information processing system 1 includes a memory system 2, a host 3, and an authentication server 4. The memory system 2 and the host 3 transmit and receive data via an interface such as NVMe (registered trademark) (PCIe (registered trademark)).

[0010] The memory system 2 is a storage equipped with a data protection function. The memory system 2 is, for example, an SSD (Solid State Drive). The memory system 2 is, for example, an HDD (Hard Disk Drive). The data protection function is a protection function that complies with the TCG (Trusted Computing Group). The data protection function is, for example, a protection function by encryption that encrypts and stores data. The data protection function is, for example, a protection function by locking that prohibits access from anyone other than an individual to an area assigned to the individual. The data protection function is, for example, a protection function by both encryption and locking.

[0011] The host 3 is a processing device external to the memory system. The host 3 is, for example, a server or a PC (personal computer). The host 3 is used to perform revert on the memory system 2. Revert means to initialize the memory 21. Hereinafter, initialization of the memory 21 is also referred to as revert. The host 3 is detachably connected to the memory system 2. The host 3 may be communicably connected to an external network 10.

[0012] The authentication server (authentication device) 4 authenticates the user and the memory system 2 in which revert is to be performed. User authentication is to confirm whether or not input user information matches preset information. Memory system 2 authentication is to confirm whether or not the memory 21 of the memory system 2 is revertible. The authentication server 4 is located outside the memory system 2 and the host 3.

[0013] Next, the configuration of the memory system 2 will be described.

[0014] The memory system 2 includes a memory 21 and a memory controller 22 .

[0015] The memory 21 is a memory that stores data in a non-volatile manner, and is, for example, a NAND type flash memory.

[0016] The memory controller 22 is a controller that controls the memory 21. The memory controller 22 may be configured with a single processor or multiple processors. The memory controller 22 is, for example, a CPU (Central Processing Unit).

[0017] Next, the configuration of the host 3 will be described.

[0018] The host 3 includes a user interface 31 and a host control device 32 .

[0019] The user interface 31 is a device that accepts information input by a user. The input by the user is, for example, user identification information, information for identifying the memory system 2 in which the memory 21 is to be initialized, a PSID (Physical presence Security IDentifier), and a revert command. The PSID is a character string unique to the memory system 2. The PSID is, for example, a character string of 32 digits or less. The user interface 31 has, for example, a mouse, a keyboard, a microphone (voice input), or a touchpad.

[0020] The host control device 32 is a control device that transmits and receives information between the memory system 2 and the host 3, transmits and receives information between the authentication server 4 and the host 3, and performs control processing of the host 3. The host control device 32 is, for example, a CPU.

[0021] Next, the configuration of the authentication server 4 will be described.

[0022] +0031 The authentication server 4 has a user identification information database 41, a user authentication processing device 42, a memory identification information database 43, a memory authentication processing device 44, and a history database 45. The user authentication processing device 42 and the memory authentication processing device 44 may be configured with a single processor or multiple processors.

[0023] The user identification information database 41 is a storage device that stores user identification information. The user identification information database (user identification information storage unit) 41 stores the user identification information of a user who is capable of initializing the memory 21. The user identification information is information that identifies a user.

[0024] The user authentication processing device 42 is an information processing device that performs user authentication. The user authentication processing device 42 refers to the user identification information database 41 to perform user authentication.

[0025] The memory identification information database (memory identification information storage unit) 43 is a storage device that stores memory identification information. The memory identification information is information for identifying the memory system 2, such as a serial number.

[0026] The memory authentication processing device 44 is an information processing device that performs authentication of the memory system 2. The memory authentication processing device 44 performs authentication of the memory system 2 by referring to the memory identification information database 43. The memory authentication processing device 44 can also perform authentication for a memory system of a specific manufacturer by using identification information such as a serial number.

[0027] The history database 45 is a storage device that stores management information and a maintenance history of the memory system 2. The maintenance history includes a record of revert execution for each memory system 2. Blockchain technology may be used for the history database 45.

[0028] Next, the functional configurations of the memory controller 22 and the host control device 32 will be described.

[0029] FIG. 2 is a block diagram showing an example of a functional configuration of the memory controller 22 and the host control device 32 according to the first embodiment.

[0030] The host control device 32 includes a revert processing unit 321 , a user authentication processing unit 322 , and a memory authentication processing unit 323 .

[0031] The revert processing unit 321 is a functional unit of the host control device 32 that performs processing related to revert between the host control device 32 and the memory system 2.

[0032] The user authentication processing unit 322 is a functional unit of the host control device 32 that performs processing related to user authentication between the host control device 32 and the authentication server 4.

[0033] The memory authentication processing unit 323 is a functional unit of the host control device 32 that performs processing related to authentication of the memory system 2 between the host control device 32 and the authentication server 4.

[0034] The memory controller 22 includes an initialization processing unit 221 and a memory identification information generating unit 222 .

[0035] The initialization processing unit 221 is a functional unit of the memory controller 22 that initializes the memory 21 .

[0036] The memory identification information generation unit 222 is a functional unit of the memory controller 22 that generates memory identification information.

[0037] Next, the functional units of the revert processing unit 321 will be described.

[0038] The revert processing unit 321 includes a command generating unit 3211 and an authentication determining unit 3212 .

[0039] The command generating unit 3211 is a functional unit of the revert processing unit 321 that generates a command related to the start of revert. The command generating unit 3211 generates a first revert start command (first initialization start command) when a revert command (initialization command) input by a user is received. The first revert start command is a command to cause the memory system 2 to generate memory identification information. The memory identification information is information for identifying the memory system 2.

[0040] The authentication determination unit 3212 is a functional unit that performs authentication determination for a user and is part of the revert processing unit 321. The authentication determination unit 3212 determines whether or not the user has been authenticated.

[0041] Next, the operation of the information processing system 1 will be described.

[0042] FIG. 3 is a sequence diagram showing an example of the operation of the information processing system 1 according to the first embodiment.

[0043] Upon receiving an input from the user, the user interface 31 of the host 3 transmits a revert command (initialization command) and a PSID to the command generating unit 3211 (S10).

[0044] Furthermore, the user interface 31 generates user identification information based on the received input from the user (S20). The user identification information is information for identifying the user.

[0045] The user interface 31 transmits the generated user identification information to the user authentication processing unit 322 of the host 3 (S30).

[0046] Upon receiving the revert command and the PSID, the command generating unit 3211 transmits a first revert start command (initialization start command) to the initialization processing unit 221 of the memory system 2 corresponding to the received PSID (S40).

[0047] Upon receiving the first revert start command, the initialization processing unit 221 transmits a first user authentication request to the user authentication processing unit 322 and the memory authentication processing unit 323 of the host 3 (S50). The first user authentication request is a command requesting authentication of the user.

[0048] Furthermore, upon receiving the first revert start command, the initialization processing unit 221 transmits the first revert start command to the memory identification information generating unit 222 (S60).

[0049] When the memory identification information generating unit 222 receives the first revert start command from the initialization processing unit 221, it generates memory identification information of the memory system 2 (S70). The memory identification information is information for identifying the memory system 2. The memory identification information is, for example, a serial number.

[0050] The memory identification information generation unit 222 transmits the generated memory identification information to the memory authentication processing unit 323 of the host 3 (S80).

[0051] Upon receiving the user identification information and the first user authentication request, the user authentication processing unit 322 transmits a second user authentication request and the user identification information to the user authentication processing device 42 of the authentication server 4 (S90). The second user authentication request is a command to request the authentication server 4 to authenticate the user.

[0052] Furthermore, upon receiving the first user authentication request and the memory identification information, the memory authentication processing unit 323 transmits the memory authentication request and the memory identification information to the memory authentication processing device 44 of the authentication server 4 (S100). The memory authentication request is a command to request the authentication server 4 to authenticate the memory system 2.

[0053] Upon receiving the second user authentication request and the user identification information, the user authentication processing device 42 generates user authentication result information based on a comparison between the user identification information previously stored in the user identification information database 41 and the received user identification information (S110). The user authentication result information is information including a user authentication success notification or a user authentication failure notification. The user authentication success notification is information that means that the user authentication has been successful. The user authentication failure notification is information that means that the user authentication has failed.

[0054] The user authentication processing device 42 encrypts the generated user authentication result information (S120). The user authentication processing device 42 performs encryption using a first encryption key stored or obtainable by the user authentication processing device 42. The first encryption key is a common key used for encrypting and decrypting the user authentication result information.

[0055] The user authentication processing device 42 transmits the encrypted user authentication result information to the authentication judgment section 3212 of the host 3 (S130).

[0056] Furthermore, upon receiving the memory authentication request and the memory identification information, the memory authentication processing device 44 generates memory authentication result information based on a comparison between the memory identification information pre-stored in the memory identification information database 43 and the received memory identification information (S140). The memory authentication result information is information including a memory authentication success notification or a memory authentication failure notification. The memory authentication success notification is information that means that the authentication of the memory system 2 has been successful. The memory authentication failure notification is information that means that the authentication of the memory system 2 has failed.

[0057] The memory authentication processing device 44 encrypts the generated memory authentication result information (S150). The memory authentication processing device 44 performs the encryption using a second encryption key that is stored or obtainable by the memory authentication processing device 44. The second encryption key is a common key used to encrypt and decrypt the memory authentication result information.

[0058] The memory authentication processing device 44 transmits the encrypted memory authentication result information to the authentication judging unit 3212 of the host 3 (S160).

[0059] Upon receiving the encrypted user authentication result information and the encrypted memory authentication result information, the authentication judgment unit 3212 decrypts the encrypted user authentication result information (S170). The authentication judgment unit 3212 performs the decryption using a first encryption key that is stored or available in the authentication judgment unit 3212.

[0060] The authentication determination unit 3212 determines whether the decrypted user authentication result information includes a user authentication success notification or a user authentication failure notification (S180).

[0061] If the decrypted user authentication result information includes a user authentication failure notification (S180 [user authentication failure notification]), the authentication judgment unit 3212 transmits the user authentication failure notification to the initialization processing unit 221 (S190). After transmitting the user authentication failure notification, the authentication judgment unit 3212 terminates its operation. When the initialization processing unit 221 receives the user authentication failure notification, it terminates its operation.

[0062] If the decrypted user authentication result information includes a user authentication success notification (S180 [User authentication success notification]), the authentication judgment unit 3212 transmits the user authentication success notification and the encrypted memory authentication result information to the initialization processing unit 221 of the memory system 2 (S200).

[0063] Upon receiving the user authentication success notification and the encrypted memory authentication result information, the initialization processing unit 221 decrypts the encrypted memory authentication result information (S210). The initialization processing unit 221 performs the decryption using a second encryption key that is stored or obtainable by the initialization processing unit 221.

[0064] The initialization processing unit 221 judges whether the decrypted memory authentication result information includes a memory authentication success notification or a memory authentication failure notification (S220). The initialization processing unit 221 judges, for example, whether the memory identification information of the decrypted memory authentication result information matches the memory identification information stored in the memory system 2.

[0065] When the decrypted memory authentication result information includes a memory authentication failure notification (S220 [Memory authentication failure notification]), the initialization processing unit 221 transmits the memory authentication failure notification to the authentication judgment unit 3212 (S230). The revert start request is a command requesting the generation of a second revert start command. The second revert start command is a command to cause the memory system 2 to start initialization of the memory 21. After transmitting the memory authentication failure notification, the initialization processing unit 221 terminates operation. When the authentication judgment unit 3212 receives the memory authentication failure notification, it terminates operation.

[0066] When the decrypted memory authentication result information includes a memory authentication success notification (S220 [Memory authentication success notification]), the initialization processing unit 221 transmits the memory authentication success notification and a revert start request (initialization start request) to the authentication judgment unit 3212 of the host 3 (S240). The revert start request is a command requesting the generation of a second revert start command. The second revert start command is a command to cause the memory system 2 to start initialization of the memory 21.

[0067] Upon receiving the memory authentication success notification and the revert start request, the authentication judging unit 3212 transmits a second revert start command to the initialization processing unit 221 of the memory system 2 (S250).

[0068] Upon receiving the second revert start command, the initialization processing unit 221 starts the initialization of the memory 21. As a result, the revert sequence is executed (S250).

[0069] After the revert sequence is completed, the initialization processing unit 221 transmits a revert completion notification to the host 3 (S260). This completes the operation of the information processing system 1 for revert.

[0070] As described above, according to the first embodiment, the authentication server 4 is provided at a location different from the locations of the memory system 2 and the host 3. The user authentication processing device 42 performs authentication of the user upon receiving a user authentication request command. The memory authentication processing device 44 performs authentication of the memory system 2 upon receiving a memory authentication request command.

[0071] A third party can easily refer to the PSID because the PSID is printed on the housing of the memory system 2. In the first embodiment, by performing user authentication, it is possible to prevent a third party from easily executing the revert function, thereby improving the security of the memory system 2.

[0072] Moreover, in the first embodiment, the authentication server 4 is disposed outside the host 3 and the memory system 2. As described above, the host 3 may be, for example, a general-purpose server or PC that can be used by an unspecified number of users. In this case, the security of the memory system 2 is low. In the first embodiment, authentication of a user who performs revert is performed outside the host 3 and the memory system 2. This can improve security compared to a case where user authentication is completed by the host 3 and the memory system 2.

[0073] The user authentication processing device 42 encrypts the user authentication result information. This makes it possible to prevent rewriting of the user authentication result information and to prevent user spoofing. As a result, security can be improved. The encryption is performed according to, for example, AES (Advanced Encryption Standard). Furthermore, the authentication judgment unit 3212 decrypts the encrypted user authentication result information.

[0074] The memory authentication processing device 44 encrypts the memory authentication result information. This makes it possible to prevent the memory authentication result information from being rewritten. As a result, security can be improved. The encryption is performed according to, for example, AES. Furthermore, the initialization processing unit 221 decrypts the encrypted memory authentication result information.

[0075] Incidentally, the host 3 can also cause the authentication server 4 to start authentication of the memory system 2 after the user authentication is completed.

[0076] At least a part of the information processing method in the information processing system 1 according to the present embodiment may be configured by software. In this case, a program that realizes at least a part of the functions of the information processing method may be stored in a storage medium such as a flexible disk or a CD-ROM. The storage medium is not limited to a removable one such as a magnetic disk or an optical disk, and may be a fixed type storage medium such as a hard disk device or a memory. Information stored in the storage medium can be read by, for example, a computer. The storage medium may have any storage format. For example, the computer reads the program from the storage medium and causes the CPU to execute instructions described in the program based on the program. In addition, a program that realizes at least a part of the functions of the information processing method may be distributed via a communication line (including wireless communication) such as the Internet. Furthermore, the program may be encrypted, modulated, or compressed and distributed via a wired line or wireless line such as the Internet, or stored in a storage medium.

[0077] The embodiments are illustrative and the scope of the invention is not limited thereto. [Explanation of symbols]

[0078] 1. Information Processing Systems 2. Memory System 3 Host 4 Authentication Server 10 External Network 21 Memory 22 Memory Controller 31 User Interface 32 Host control device 41 User Identification Information Database 42 User authentication processing device 43 Memory Identification Information Database 44 Memory authentication processing device 45 History Database 221 Initialization processing section 222 Memory identification information generation unit 321 Revert Processing Unit 322 User authentication processing unit 323 Memory authentication processing unit 3211 Command Generation Unit 3212 Certification Judgment Department

Claims

1. a memory system having a memory for storing data; a host removably connected to the memory system; an authentication server provided at a location different from the locations of the memory system and the host; The host is a user interface that accepts input of information by a user; a command generating unit that generates a command related to the start of initialization of the memory; a user authentication processing unit that performs processing related to user authentication between the authentication server and the user authentication server to confirm whether input user information matches preset information; the memory system includes an initialization processing unit that initializes the memory; The authentication server has a user authentication processing device that performs user authentication, The user interface includes: When an input from a user is received, an initialization command is sent to the command generating unit; generating user identification information that identifies the user based on the user's input; The generated user identification information is transmitted to the user authentication processing unit; When the command generation unit receives the initialization command, the command generation unit transmits a first initialization start command to the initialization processing unit to cause the memory system to start initialization of the memory; When the initialization processing unit receives the first initialization start command, the initialization processing unit transmits a first user authentication request, which is a command requesting authentication of a user, to the user authentication processing unit; Upon receiving the user identification information and the first user authentication request, the user authentication processing unit transmits a second user authentication request, which is a command requesting authentication of a user, and the user identification information to the user authentication processing device; when receiving the second user authentication request and the user identification information, the user authentication processing device generates user authentication result information based on the user identification information. Information processing system.

2. the user authentication processing device performs authentication of the user based on a comparison between user identification information stored in advance in a user identification information storage unit and the received user identification information; The information processing system according to claim 1 .

3. The host further includes an authentication determination unit for performing authentication determination of a user, The user authentication processing device encrypts the generated user authentication result information, the user authentication processing device transmits the encrypted user authentication result information to the authentication determination unit; Upon receiving the encrypted user authentication result information, the authentication determination unit decrypts the encrypted user authentication result information. The information processing system according to claim 1 .

4. the memory system further includes a memory identification information generation unit that generates memory identification information that is information for identifying the memory system; The host further includes a memory authentication processing unit that performs processing related to authentication of the memory system, for confirming, with the authentication server, whether or not the memory can be initialized; the authentication server further includes a memory authentication processing device for authenticating the memory system; when the initialization processing unit receives the first initialization start command, the initialization processing unit transmits the first user authentication request to the memory authentication processing unit; When the initialization processing unit receives the first initialization start command, the initialization processing unit transmits the first initialization start command to the memory identification information generation unit; the memory identification information generation unit generates the memory identification information upon receiving the first initialization start command; the memory identification information generation unit transmits the generated memory identification information to the memory authentication processing unit; When the memory authentication processing unit receives the memory identification information and the first user authentication request, the memory authentication processing unit transmits a memory authentication request, which is a command requesting authentication of the memory system 2, and the memory identification information to the memory authentication processing device; when the memory authentication processing device receives the memory authentication request and the memory identification information, the memory authentication processing device performs authentication of the memory system based on the memory identification information to generate memory authentication result information; The information processing system according to claim 1 .

5. the memory authentication processing device performs authentication of the memory system based on a comparison between memory identification information stored in advance in a memory identification information storage unit and the received memory identification information; 5. The information processing system according to claim 4.

6. The memory authentication processing device encrypts the generated memory authentication result information, the memory authentication processing device transmits the encrypted memory authentication result information to the initialization processing unit; When the initialization processing unit receives the encrypted memory authentication result information, the initialization processing unit decrypts the encrypted memory authentication result information.

5. The information processing system according to claim 4.

7. The host further includes an authentication determination unit for performing authentication determination of a user, The initialization processing unit determines whether the generated memory authentication result information includes a memory authentication success notification or a memory authentication failure notification; When the generated memory authentication result information includes the memory authentication success notification, the initialization processing unit transmits an initialization start request to the authentication judgment unit to request generation of a second initialization start command for causing the memory system to start initialization of the memory.

5. The information processing system according to claim 4.

8. When the user interface receives an input from a user, the user interface transmits the initialization command and a PSID (Physical presence Security IDentifier) ​​to the command generating unit; when receiving the initialization command and the PSID, the command generation unit transmits to the initialization processing unit a first initialization start command for causing the memory system corresponding to the received PSID to start initialization of the memory; The information processing system according to claim 1 .

9. a memory system having a memory for storing data; a host removably connected to the memory system; an authentication server provided at a location different from the locations of the memory system and the host; The host is a user interface that accepts input of information by a user; a command generating unit that generates a command related to the start of initialization of the memory; a user authentication processing unit that performs processing related to user authentication between the authentication server and the user authentication server to confirm whether input user information matches preset information; the memory system includes an initialization processing unit that initializes the memory; The authentication server has a user authentication processing device that performs user authentication. An information processing method for an information processing system, comprising: The user interface When an input from a user is received, an initialization command is sent to the command generating unit; generating user identification information that identifies the user based on the user's input; The generated user identification information is transmitted to the user authentication processing unit; When the command generating unit receives the initialization command, the command generating unit transmits a first initialization start command to the initialization processing unit, the first initialization start command causing the memory system to start initializing the memory; When the initialization processing unit receives the first initialization start command, the initialization processing unit transmits a first user authentication request, which is a command requesting authentication of a user, to the user authentication processing unit; when the user authentication processing unit receives the user identification information and the first user authentication request, transmits a second user authentication request, which is a command requesting authentication of a user, and the user identification information to the user authentication processing device; when the user authentication processing device receives the second user authentication request and the user identification information, it generates user authentication result information based on the user identification information. An information processing method comprising:

10. a memory system having a memory for storing data; a host removably connected to the memory system; an authentication server provided at a location different from the locations of the memory system and the host; The host is a user interface that accepts input of information by a user; a command generating unit that generates a command related to the start of initialization of the memory; a user authentication processing unit that performs processing related to user authentication between the authentication server and the user authentication server to confirm whether input user information matches preset information; the memory system includes an initialization processing unit that initializes the memory; The authentication server has a user authentication processing device that performs user authentication. In the host computer of the information processing system, When an input from a user is received, an initialization command is transmitted to the command generating unit; generating user identification information that identifies the user based on the user's input; The generated user identification information is transmitted to the user authentication processing unit; When the initialization command is received, a first initialization start command is transmitted to the initialization processing unit to cause the memory system to start initializing the memory; when receiving the user identification information and a first user authentication request which is a command requesting authentication of a user, transmitting a second user authentication request which is a command requesting authentication of a user and the user identification information to the user authentication processing device; program.

11. A storage medium storing the program according to claim 10.

Images