JP2002073422A - Information processing equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing equipment that protects against being analyzed information in a nonvolatile memory by a third person, in the case a nonvolatile memory which stored classified information like personal information, etc., is illicitly taken off from an equipment body. SOLUTION: Plural memories for saving data are set up. In the case, data are saved, data to be saved are divided into size which has little meaning with a datum, these pieces of data are laid out according to ordinarily on an address of the memories 1, 2,..., n. Besides a detaching detection part 32 which detects that the memories 1, 2,..., n are illicitly taken off. Besides, the detaching detection part 32 which detects that the memories 1, 2,..., n are illicitly taken off and a data eraser part 33 that erases data of the other memories are set up, when a memory in which the detaching detection part 32 is involved is detected to be illicitly taken off.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus having a function such as a facsimile or a network scanner.
The present invention relates to an information processing apparatus provided with a nonvolatile memory for storing confidential information such as personal information such as a fax number and an e-mail address.

[0002]

2. Description of the Related Art Generally, an information processing apparatus as a multifunction peripheral having functions such as a fax and a network scanner stores personal information such as a fax number and an electronic mail address in a removable nonvolatile memory. In such an information processing apparatus in which confidential information such as personal information is stored in a non-volatile memory detachable from the apparatus main body, if the non-volatile memory is illegally taken out of the apparatus main body, the non-volatile memory May be analyzed by a third party.

As a technique for solving the above problem, for example, Japanese Patent Application Laid-Open No. H11-175406 discloses
When the unauthorized removal of the nonvolatile memory is detected, the information stored in the nonvolatile memory is backed up, and then the information in the nonvolatile memory is destroyed.
There is disclosed an auxiliary storage device of an information device that destroys information when the removed nonvolatile memory is reconnected to another device.

Further, Japanese Patent Application Laid-Open No. 2000-99404 discloses that after power is supplied, a program stored in a non-volatile memory is transferred to a volatile memory to erase the contents in the non-volatile memory, There is disclosed a terminal device configured so that power supply to a volatile memory is cut off and information is destroyed when an attempt is made to analyze a program with the body opened.

[0005]

However, in the configuration disclosed in Japanese Patent Application Laid-Open No. H11-175406,
The following problems arise.

In the configuration of the above-mentioned conventional publication, a protection operation (operation for destroying stored information) when a nonvolatile memory is illegally removed is performed using a built-in battery as a power supply. Therefore, when the internal battery is removed or the wiring of the circuit is cut, and the power supply from the internal battery is cut off and the unauthorized removal of the nonvolatile memory is performed, the protection function operates. Will not be.

[0007] The above-mentioned conventional publication also discloses a configuration for encrypting stored data when a nonvolatile memory is illegally removed. However, even if the data is encrypted, all the stored data exists in the nonvolatile memory. For this reason, there is a possibility that data contents may be extracted and analyzed by some means.

Further, the above-mentioned prior art publication discloses a configuration in which when unauthorized removal of a non-volatile memory is detected, data is copied to another area which cannot be normally read, and data in a normally stored area is destroyed. Have been. However, even if it is an area that cannot be read normally, all of the stored information exists in the nonvolatile memory. For this reason, there is a possibility that data contents may be extracted and analyzed by some means.

Further, in the above-mentioned conventional publication, when data is taken out after judging unauthorized removal of the nonvolatile memory, the data is originally stored by a buffer arranged between the storage section and the connection terminal section. There is also disclosed a configuration in which the data is converted to meaningless data different from the contents. However, without making a normal connection through the buffer,
If the data is extracted by removing only the storage unit, there is a problem that the stored contents are analyzed.

Furthermore, the above-mentioned conventional publication also discloses a configuration in which when unauthorized removal of a nonvolatile memory is detected, stored data is destroyed when the nonvolatile memory is reconnected. However, if the auxiliary storage device is connected to a device that cannot detect reconnection, there is a problem that data is fetched. Here, a device that cannot detect reconnection is a device that has the same type of connection terminal but does not have a detection function and can be used for general purposes.

As described above, Japanese Patent Application Laid-Open No. H11-175406
In all of the configurations disclosed in Japanese Patent Application Laid-Open No. H10-264, the data stored when illegally taken out remains in the nonvolatile memory in a complete state. Therefore, there is a possibility that data contents may be extracted and analyzed by some means, and therefore, it is not necessarily safe to protect information.

On the other hand, in the configuration disclosed in JP-A-2000-99404, there is no means for restoring erased data. Furthermore, if the power supply from the main power supply is cut off, the backup power supply is always wasted, so that in the case of a device that rarely turns on the main power supply, the stored information is lost. This frequently occurs and is a problem in use.

[0013] The present invention has been made in view of the above-mentioned problems, and when a non-volatile memory storing confidential information such as personal information is illegally removed from the apparatus main body, the contents of the non-volatile memory in the non-volatile memory are removed. It is an object to provide an information processing apparatus that reliably prevents information from being analyzed by a third party.

[0014]

In order to solve the above-mentioned problems, an information processing apparatus according to the present invention stores a plurality of non-volatile memories detachable from an apparatus main body and various data including confidential information. One of them is characterized by comprising information storage control means for dividing into data pieces of a predetermined size which have no meaning as information and for storing continuous data pieces in different nonvolatile memories.

According to the above arrangement, the information storage control means divides the data to be stored into a plurality of data pieces and stores the continuous data pieces in different nonvolatile memories. Even if some of the memory is incorrectly removed, the data is incomplete. That is, in order to obtain complete data, all the nonvolatile memories must be taken out.

[0016] This reduces the risk that the data of the confidential information such as personal information and programs is analyzed by a third party who has illegally removed the non-volatile memory and used improperly.

Further, in order to solve the above problem, an information processing apparatus according to the present invention comprises a detecting means for detecting that each of the nonvolatile memories has been illegally removed, and one of the non-volatile memories by the detecting means. It is preferable to further include a data erasing means for erasing data in the other nonvolatile memory when detecting that the nonvolatile memory has been removed.

According to the above configuration, the data content of the nonvolatile memory to be removed after the removal of a certain nonvolatile memory has been erased by the data erasing means. Therefore, even when all of the nonvolatile memories are illegally removed, it is difficult to obtain complete data because some data pieces have been erased.

Thus, it is possible to more reliably prevent the data of confidential information such as personal information and programs from being analyzed by a third party who has illegally removed the nonvolatile memory.

Further, in order to solve the above-mentioned problem, an information processing apparatus according to the present invention is characterized in that at least two of the nonvolatile memories are arranged in layers and the nonvolatile memories arranged in a lower layer side Preferably, the memory is embedded in the device substrate.

According to the above configuration, when the memory is illegally taken out, the non-volatile memory arranged in the lower layer of the layered non-volatile memories is taken out after the non-volatile memory in the upper layer. . Therefore, all the non-volatile memories are not taken out at the same time, and the data in the non-volatile memory in the lower layer is surely erased by the data erasing means. Therefore, even when all of the nonvolatile memories are illegally taken out, it is difficult to obtain complete data because the data pieces stored in the lower-level nonvolatile memory have been erased.

Thus, it is possible to more reliably prevent the data of confidential information such as personal information and programs from being analyzed by a third party who has illegally removed the nonvolatile memory.

Further, in order to solve the above-mentioned problem, an information processing apparatus according to the present invention is characterized in that an internal power supply used as a power supply for the data erasing means is lower in level than the nonvolatile memory arranged in the lower layer. It is preferable to be disposed on the side and embedded in the device substrate.

According to the above configuration, there is no possibility that the internal power supply is taken out before all the nonvolatile memories are taken out illegally, and the power supply to the data erasing means is cut off.

As a result, it is possible to prevent all the memories from being removed before erasing the data in the nonvolatile memory, thereby preventing complete data from being taken out.

Further, in order to solve the above-mentioned problem, an information processing apparatus according to the present invention comprises:
It is preferable to further include a data output unit that outputs data stored in the nonvolatile memory, and a data restoration unit that reads the data from the terminal.

According to the above configuration, data stored in the nonvolatile memory is output to, for example, a parallel cable or a serial cable (parallel port or serial port) or a terminal connected via a network. In addition, data can be read from these terminals when necessary.

Thus, backup and restoration of data in the nonvolatile memory can be performed.

[0029]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to FIGS.

FIG. 1 is a block diagram showing a configuration of an information processing apparatus 1 according to the present embodiment. The information processing apparatus 1 according to the present embodiment is a multifunction peripheral having functions such as a fax and a network scanner.

The information processing apparatus 1 includes a CPU (Centra
l Processing Unit) (information storage control means) 2 and the C
A data storage unit (data storage means) 3 for storing program data executed by the PU 2 and data relating to personal information such as a fax number and an e-mail address is externally connected via a serial port, a parallel port, a network, or the like. A communication unit (communication means) 4 for communicating with each terminal 5 is provided.

The data storage unit 3 includes n memories 1, which are nonvolatile memories such as a flash memory and a ROM.
A memory group 31 composed of 2, 3,..., N is provided. The details of the method of storing data in the memories 1, 2, 3,..., N will be described later. Further, the data storage unit 3 has a function of protecting data stored in the memory group 31 when at least one of the memories 1, 2, 3,. And a memory i (i = 1, 2, 3,..., N)
A data erasing unit (data erasing means) 33 for erasing data in a memory other than the memory i which has not been removed when an unauthorized removal of the data is detected; Is provided.

The communication section 4 includes a data output section (data output means) 41 and a data restoration section as a configuration for storing stored data outside the apparatus or restoring data stored outside. (Data restoration means) 42. As a result, the information processing apparatus 1
Terminal 5 connected by a parallel port or a serial port, or terminal 5 connected by a network such as a LAN
It is possible to exchange data with the like (see FIG. 2).

Next, the details of the method of storing data in the memories 1, 2, 3,..., N will be described with reference to FIG.

FIG. 3 is an explanatory diagram conceptually showing data storage in the memories 1, 2, 3,..., N. The data to be stored is divided by the CPU 2 into a plurality of memories and stored on a memory address based on a certain regularity, for example, a rule formula or a conversion table.

In this embodiment, as shown in the figure, for example, the stored data is divided into data pieces 1, 2,...
Then, the data piece 2 is stored in the memory 2,
Control is performed so that successive data pieces are stored in different memories. In other words, in a single memory, only a few data pieces of the data pieces constituting the stored data are stored. Since this data piece is composed of 1-byte data, it has no meaning as information unless at least a plurality of continuous data pieces are arranged. Therefore, in order to obtain meaningful information, data pieces stored in all the memories 1, 2,..., N constituting the memory group 31 are required. In this embodiment, each data piece is 1
Although the data is byte data, the data piece may have a size that does not make sense by itself, and may be several bytes.

When reading out the stored data from the memory group 31, the CPU 2 checks the table (not shown) in which the regularity is recorded and combines the data pieces to thereby obtain complete data. It is possible to get.

Next, the detailed configuration of the data storage unit 3 will be described in detail with reference to FIG. FIG. 4 is a cross-sectional view of the data storage unit 3 attached to the device substrate 6.

As shown in the figure, the data storage unit 3
Arranged in a concave portion 62 provided on the device substrate surface 61,
It is provided so as to be embedded in the device substrate 6.

In the data storage section 3, the memory group 3
, N are stored in the device substrate surface 61.
Are arranged so as to overlap in layers in a direction substantially parallel to
Each is detachably attached to the side surface 62a of the concave portion 62. .., N
Of the memory 1 exposed on the device substrate surface 61,
, N are arranged in a lower layer than the memory 1. Since the memories 2,..., N other than the memory 1 are provided in a layered manner in the space surrounded by the memory 1 and the concave portion 62 of the device substrate 6, the memory 2,
Unless it is removed from the device substrate 6, it cannot be removed from the device body. That is, in the information processing apparatus 1, all the memories 1, 2,..., N cannot be simultaneously removed from the apparatus main body.

In this case, the upper surface 61 of the device substrate is the upper side, and the lower surface of the recess 62 is the lower side.

The removal detecting section 32 is a switch provided at a portion where each of the memories 1, 2, 3,..., N is attached to the device substrate 6, and each of the memories 1, 2, 3,.
Is removed from the main body of the apparatus, the switch is switched to detect the removal of each of the memories 1, 2, 3,..., N.

The data erasing section 33 is attached to the bottom of the concave portion 62,
,..., N, and each take-out detection unit 32. The data erasing unit 33 is configured to erase the data stored in the remaining memories when the removal detecting unit 32 detects that any of the memories has been removed from the apparatus main body. As described above, in the information processing apparatus 1 according to the present embodiment, it is impossible to remove all the memories 1, 2,..., N constituting the memory group 31 from the apparatus main body at the same time. Therefore, in the information processing apparatus 1, when a certain memory is illegally removed, it is possible to secure a sufficient time for the data erasing unit 33 to erase data in at least one of the remaining memories. it can.

The data erasing section 33 uses the built-in power supply 34 as a power supply. The built-in power supply 34 is disposed in a lower layer than the memory n disposed in the lowermost layer, and the concave section 62 of the device substrate 6 is provided. It is attached to the bottom of. That is, unless the memory n is removed from the device substrate 6,
The internal power supply 34 cannot be removed. This prevents the built-in power supply 34 from being removed before the memories 1, 2,..., N are illegally removed, and the remaining memory from being erased.

In the following, according to the flowchart of FIG.
A data protection operation in the information processing device 1 will be described.

First, when the removal detecting section 32 detects that any of the memories 1, 2,..., N has been illegally taken out (S1), the memory n located at the lowermost layer
Is erased (S2). The memory n located at the lowermost layer is a memory that remains to the end after the other memories 1, 2,..., N−1 are taken out. Therefore, by erasing at least only the data in the memory n, it is possible to reliably prevent the complete data from being taken out.

Next, of the memory that has not been removed,
It is determined whether there is a memory from which data has not yet been erased (S3), and data is erased from other memories from which data has not been erased as long as there is time (S4).

As described above, the information processing apparatus 1 has a configuration in which the stored data is divided and stored in a plurality of memories, and all the information stored in all the memories is not retrieved. ing. Therefore, it is possible to prevent confidential information such as personal information stored in the data storage unit 3 from being illegally taken out.

Further, in the information processing apparatus 1, the data output section 41 of the communication section 4 outputs the data stored in the data storage section 3 to a terminal 5 connected to the outside of the apparatus via a network or the like. The data stored in the information processing apparatus 1 can be held by the external terminal 5. When downloading data to the terminal 5, it is necessary to input a password. Further, the communication unit 4
Is provided with a data restoration unit 42, so that data erased during data protection can be read from the terminal 5.

As described above, the information processing apparatus 1 has an I / O (Input / Output) for storing stored data outside the apparatus or restoring data stored outside.
, A data output unit 41 and a data restoration unit 42 are provided. Therefore, by storing the data stored in the memory group 31 of the information processing apparatus 1 in the terminal 5 connected to the information processing apparatus 1 via a network or the like, even when the memory is illegally retrieved, Even when data in the memory is erased, the erased information can be restored.

The information processing apparatus 1 has a configuration in which all memories 1 to n are arranged in layers.
Since it is sufficient that all the memories 1 to n are not taken out at the same time, at least two memories may be arranged in a layered manner and the lower memory may not be taken out at the same time as the upper memory. .

In the information processing apparatus 1, the data storage section 3 is completely embedded in the substrate (device substrate 6) of the apparatus main body. However, the present invention is not limited to this. .., N provided that at least the memory n disposed in the lowermost layer is completely embedded in the device substrate 6 and is not exposed on the device substrate surface 61. With this configuration, at least the memory n arranged in the lowermost layer is not taken out at the same time as the other memories 1 to n-1, so that all the memories 1 to n-1 other than the lowermost layer are taken out illegally. Even if there is, the data in the lowermost memory n can be erased by the data eraser 33. Thereby, data in at least one memory can be erased, so that all memories 1 to n
Even if is illegally taken out, all data pieces constituting the stored data are not aligned, and there is no danger of analyzing the data contents.

In the information processing apparatus 1, the built-in power supply 34 is configured to be mounted on the bottom surface of the concave portion 62 of the apparatus substrate 6, but is configured to be mounted on the lowermost memory n. Is also possible.

[0054]

As described above, in the information processing apparatus according to the present invention, a plurality of non-volatile memories which can be attached to and detached from the apparatus main body, and various data including confidential information can be realized as information by itself. And an information storage control unit that divides the data pieces into predetermined non-volatile data pieces and stores continuous data pieces in different nonvolatile memories.

Therefore, to obtain complete data,
All non-volatile memories must be removed, and even if some of the non-volatile memories are incorrectly removed, the data is incomplete. As a result, there is an effect that the data of the confidential information such as the personal information and the program is analyzed by a third party who has illegally removed the non-volatile memory, and the possibility of the unauthorized use is reduced.

Further, the information processing apparatus according to the present invention comprises a detecting means for detecting that each of the nonvolatile memories has been illegally removed, and a detecting means for detecting that any of the nonvolatile memories has been removed by the detecting means. Then, it is preferable that the configuration further includes a data erasing unit for erasing data in the other nonvolatile memory.

Therefore, even when all of the nonvolatile memories are illegally removed, it is difficult to obtain complete data because some data pieces have been erased. As a result, it is possible to more reliably prevent the data of confidential information such as personal information and programs from being analyzed by a third party who has illegally removed the nonvolatile memory.

Further, in the information processing apparatus according to the present invention, at least two of the nonvolatile memories are arranged in layers, and the nonvolatile memories arranged in the lower layer are embedded in the device substrate. It is preferable that the configuration is such that:

Therefore, even if all of the nonvolatile memories are illegally taken out, it is difficult to obtain complete data because the data pieces stored in the lower-level nonvolatile memory have been erased. is there. As a result, it is possible to more reliably prevent the data of confidential information such as personal information and programs from being analyzed by a third party who has illegally removed the nonvolatile memory.

Further, in the information processing apparatus according to the present invention, the built-in power supply used as the power supply for the data erasing means is located on a lower layer side than the nonvolatile memory arranged on the lower layer side. It is preferable that the configuration is such that it is embedded and arranged inside.

Therefore, there is no possibility that the internal power supply is taken out before all the non-volatile memories are taken out illegally, and the power supply to the data erasing means is cut off. As a result, there is an effect that it is possible to prevent that all the memories are removed before the data in the nonvolatile memory is erased and complete data is taken out.

Further, the information processing apparatus according to the present invention comprises a data output means for outputting data stored in the nonvolatile memory to an externally connected terminal, and a data recovery means for reading out the data from the terminal. It is preferable that the configuration further includes means.

As a result, there is an effect that the data in the nonvolatile memory can be backed up and restored.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an information processing apparatus according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram conceptually showing a state of connection between the information processing device and an external terminal.

FIG. 3 shows a data storage method of the information processing apparatus,
FIG. 4 is an explanatory diagram showing how saved data is arranged on a memory.

FIG. 4 is a cross-sectional view illustrating a state where a data storage unit of the information processing device is attached to a device substrate.

FIG. 5 is a flowchart showing a data protection operation of the information processing apparatus.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Information processing apparatus 2 CPU (information storage control means) 3 Data storage part (data storage means) 4 Communication part (communication means) 5 Terminal 6 Device board 32 Removal detection part (detection means) 33 Data deletion part (data deletion means) 34 Built-in power supply 41 Data output unit (data output unit) 42 Data restoration unit (data restoration unit)

Claims (5)

[Claims] A plurality of non-volatile memories detachable from an apparatus main body, and various data including confidential information are divided into data pieces of a predetermined size which are not meaningful as information. An information storage control means for storing pieces in non-volatile memories different from each other. 2. A detecting means for detecting that each of the nonvolatile memories has been removed improperly, and detecting that one of the nonvolatile memories has been removed by the detecting means. 2. The information processing apparatus according to claim 1, further comprising a data erasing unit for erasing data. 3. The non-volatile memory according to claim 1, wherein at least two of the non-volatile memories are arranged in layers, and the non-volatile memories arranged in a lower layer are embedded in a device substrate. 3. The information processing device according to 2. 4. A built-in power supply used as a power supply for said data erasing means is disposed on a lower layer side than a nonvolatile memory disposed on said lower layer side and is embedded in a device substrate. The information processing apparatus according to claim 3, wherein: 5. A data output means for outputting data stored in the nonvolatile memory to a terminal connected to the outside, and a data restoring means for reading the data from the terminal. The information processing apparatus according to any one of claims 1 to 4, wherein