JP5170550B2 - Information communication system and its authentication program - Google Patents

Description

  The present invention relates to an information communication system including an information communication apparatus and an option card thereof, and particularly to mutual authentication when the information communication apparatus or the option card is exchanged.

  It is known to connect an option card to an information communication device. An option card is a computer having a connection interface between a CPU, a memory, and an information communication device, and provides, for example, PDL software in a page printer or document management software in a document management device as an optional function. Optional contracts related to the provision of optional functions are usually made in units of combinations of information communication devices and option cards, and functions that are permitted to be used within the scope of the optional functions that can be provided can be executed for the correct combinations. .

Regarding the provision of optional functions, Patent Document 1: JP1995-191940A describes the range of software or hardware that can be used for an IC card, and proposes to use the IC card by mounting it on a computer. However, in the system of Patent Document 1, there is no option card, the mutual authentication between the option card and the computer is not performed, and there is no description about replacing the option card.
JP1995-191940A

  An object of the present invention is to establish a partner relationship on the spot when an information communication device or an option card is exchanged for repair or the like for a correct combination of an information communication device and an option card.

The information communication system of the present invention is an information communication system comprising an information communication device and an option card connected to the information communication device and providing an optional function,
Secure memory is provided for each information communication device and option card,
Authentication data is stored in each secure memory, and at least data indicating the range of optional functions permitted to be provided from the option card is stored in the secure memory of the option card,
By providing an authentication unit that authenticates the other party using the authentication data in the information communication device and the option card, the authentication data is exchanged between the information communication device and the option card. Authenticate the option card to authenticate the information communication device,
At least one of the information communication device and the option card is provided with an operator authentication unit for authenticating an authorized operator,
Further, at least one of the information communication device and the option card is provided with an exchange detection unit for detecting the exchange of the information communication device or the option card, and the exchange detection unit stores the authentication data of the other party of the information communication device or the option card. If the device that does not store the other party's authentication data is replaced,
When detecting that the information communication device or the option card has been exchanged by the exchange detection unit when the information communication device and the option card are turned on, accepting an authentication request from the operator authenticated by the operator authentication unit, Write the other party's authentication data to each secure memory to establish the partner relationship between the information communication device and the option card, and provide the option card function from the option card to the information communication device within the range of the optional functions that allow the provision It is constituted so that it is made to do.

An authentication program according to the present invention provides an authentication for an information communication system including an information communication device including a secure memory and an option card connected to the information communication device and providing an optional function. A program,
The program is stored in the information communication device and the option card.
A function to store authentication data in each secure memory;
A function for storing at least data indicating a range of optional functions permitted to be provided from the optional card in the secure memory of the optional card;
An authentication function for exchanging the authentication data between the information communication device and the option card, authenticating the option card by the information communication device, and authenticating the information communication device by the option card;
An operator authentication function for authenticating an authorized operator using an information communication device or an option card;
By detecting whether the information communication device and the option card store the other party's authentication data, a detection function for detecting a device that does not store the other party's authentication data as a replaced device is provided,
When it is detected that the information communication device or the option card has been exchanged when the information communication device and the option card are turned on, an authentication request from the operator authenticated by the operator authentication function is accepted, and the respective secure memory is received. The function of writing the partner's authentication data and establishing the partner relationship between the information communication device and the option card is realized.

  In the present invention, for example, a case where the information communication device or its board is removed and replaced for maintenance or the like is detected while the option card to be connected is left as it is. When the option card is maintained and repaired, the information communication apparatus detects the case where the option card is replaced without changing the information card. If any one of the information communication apparatus and the option card is exchanged after establishing the partner relationship, the partner authentication data stored in each secure memory is rewritten to re-establish the partner relationship on the spot. In the present invention, it is not necessary to remove the secure memory of the information communication apparatus or remove the option card and bring it back to the base for data rewriting. Since the data in the secure memory is rewritten by an authenticated operator, it can be rewritten safely.

  The authentication data of the other party is not stored in the secure memory of the exchanged device, and the initial value remains unchanged. The exchange detection unit can detect whether or not the other party's authentication data is stored and detect whether or not the exchanged device is exchanged. That is, the exchange detection unit assumes that the information communication device has been exchanged when the information communication device does not store the authentication data of the option card and the option card stores the authentication data of the information communication device. If the information communication device stores the authentication data of the option card, but the option card does not store the authentication data of the other party, the two patterns can be detected as the option card has been replaced.

  For example, when it is detected that the information communication device has been exchanged, the authentication data of the information communication device after the replacement is overwritten on the option card, and the authentication of the option card is changed to the initial value or the like for the information communication device. Data can be stored and authenticated to each other to establish a partner relationship.

Since the mutual authentication data is rewritten on the spot when the information communication apparatus is replaced, the secure memory of the information communication apparatus can be made unremovable from the main body. You can also write to option cards on the spot.
When replacing an option card, the removed option card is not reconnected after repair, but a separately prepared option card can be connected to authenticate with the information communication device on the spot. Therefore, an authorized operator can safely rewrite a new combination of the information communication device and the option card.

  Preferably, data indicating a range of optional functions permitted to be provided from an option card is stored in each of the secure memories, and when the exchange detection unit detects that only the option card has been exchanged, The authentication unit overwrites the secure memory of the information communication device with data indicating the optional function that the exchanged option card permits to provide, and establishes a partner relationship between the information communication device and the option card.

When it is detected that the option card has been exchanged, the data indicating the optional function permitted to be provided by the exchanged option card is overwritten in the secure memory of the information communication apparatus. Data indicating the range of functions provided as optional functions of the information communication apparatus is stored in the secure memory of the information communication apparatus and the option card. When the option card is replaced, the data indicating the range of the option function of the secure memory of the information communication apparatus is rewritten with the option function permitted to be used, which is stored in the option card.
Since the range of functions permitted to be provided from the option card is stored at least in the secure memory of the option card, functions that are not permitted are not provided.

  The description relating to the information communication system in this specification also applies to the system authentication program as it is. The terms in this specification are widely interpreted in consideration of known techniques.

  In the following, an optimum embodiment for carrying out the present invention will be shown.

  An example is shown in FIGS. In each figure, reference numeral 2 denotes a multifunction peripheral, which may be a simple printer, a document management apparatus, another server, or a personal computer. 4 is a bus, 5 is a CPU, 6 is a ROM, and 7 is a RAM. Reference numeral 8 denotes a print unit, which may be color or monochrome. Reference numeral 10 denotes an option card, which provides an optional function to the multifunction device 2 and is generally wider than the range provided by the license of the user and manufacturer of the multifunction device 2. The functions can be executed. The option card 10 provides, for example, conversion from PDL data to raster data in PDL (Page Description Language), a document management function in a document management apparatus, various applications, and the like.

  A modem 12 is connected to the public telephone network via the NCU 13 and performs G3 facsimile transmission and reception. The network interface board 14 is an interface with a network such as a LAN (not shown). The scanner unit 15 scans image data and uses it for image copying, image data transmission, facsimile transmission, and the like. The secure memory 16 is a memory that is difficult to be rewritten at least from the outside, and preferably difficult to read from the outside. Access to the secure memory 16 is restricted by a password or other authentication data, and writing and reading are subjected to procedures such as encryption, making access difficult. Reference numeral 17 denotes an operation unit that operates the multifunction device 2 and displays information related to the operation of the multifunction device 2 on the LCD panel 18.

  An option card authentication unit 20 authenticates the option card 10 when a partner between the multifunction device 2 and the option card 10 is established. In the embodiment, when the multifunction peripheral itself is replaced and when the option card is replaced, the option card 10 of a new combination is authenticated. When the authenticated operator starts the exchange mode from the operation unit 17 or the like, the option card 10 is authenticated. The option card authentication unit 20 includes an external media interface 21 and connects an external media 22 having a security function. The external media 22 cannot be read or rewritten except by an operator with special authority. The operator authentication unit 23 authenticates the operator and permits the data read and rewrite from the external media 22. The data in the external medium 22 can be read out when the option card authenticating unit 20 is used for establishing and authenticating a partner relationship. The option list 24 stores various miscellaneous data necessary for authentication of the option card 10, and stores, for example, a list of option cards 10 supported by the multifunction device 2, and the own device corresponds to a data described later, for example. Data such as whether it is an option card is stored. The authentication program storage medium 25 supplies the ROM 6 with a portion to be executed by the multifunction device 2 in the option card authentication program.

  2 shows the configuration of the option card 10. Reference numeral 30 denotes a bus, 31 denotes a CPU, 32 denotes a ROM, and 33 denotes a RAM. The option card 10 and the multifunction device 2 are each a kind of computer. Further, the ROM 32 or the RAM 33 supplies and stores the part to be executed by the option card 10 in the option card authentication program from the authentication program storage medium 40. An external media interface 34 reads and rewrites data from the external media 35. Access to the external medium 35 by an operator or the like is restricted by the operator authentication unit 23 on the multifunction machine 2 side. Reference numeral 36 denotes a secure memory which is difficult to read and rewrite from the outside. The bus interface 37 connects the option card 10 and the bus 4 on the multi-function device 2 side, and the authentication unit 38 authenticates the multi-function device 2 and authenticates the external media 35 based on authentication data from the multi-function device 2 side. The authentication of the multifunction device 2 is performed for a new combination when the multifunction device 2 is replaced or when the option card 10 itself is replaced in addition to the normal partner establishment. The authentication program may be supplied to the MFP 2 and the option card 10 by a carrier wave via the network interface board 14.

  A case will be described in which the consistency between the multifunction device 2 and the option card 10 is confirmed and the partner relationship is once established, and then the main body or the substrate of the multifunction device 2 is replaced by repair or the option card 10 is replaced. In the embodiment, the removed main body (substrate) or the like is not brought back to the base once and then attached again after repair, but is replaced with another main body (substrate) on the spot. After the replacement, when an authorized operator authenticated by the operator authentication unit 23 starts the replacement mode from the multifunction device 2 or the option card 10, the compatibility between the new combination of the multifunction device 2 and the option card 10 is mutually compatible. Confirm.

  FIG. 3 shows authentication data and respective storage locations in the embodiment. In FIG. 3 and the like, the multifunction device 2 may be referred to as a main body. In the external media 35 on the option card side, the unique ID of the option card is described as a data, and the range of functions to be licensed is described as b data. Further, the external media 35 may be provided with a column for setting a flag indicating that it is a discarded medium, and may be provided with a column indicating that a partner relationship has been established or a column indicating rewrite recording. good. The a data of the unique ID of the option card is data that can uniquely identify the option card 10 and is, for example, a combination of a model number, a production lot number, and an individual number in the lot. The b data indicating the range of functions to be licensed describes the range of optional functions to be licensed that the option card 10 provides to the MFP 2 (main body). The option card 10 may be provided with a function to be provided even without a license, and this type of function is provided regardless of the authentication of the option card 10.

  In the normal memory of the option card, for example, the RAM 33, the unique ID of the option card corresponding to the a data is described. This is stored when the option card is manufactured or when the partner relationship with the multifunction device 2 is established. . The a data may be stored in the secure memory 36, or the encrypted a data may be stored in the external medium 35, the RAM 33, or the like.

  In the external medium 22 on the MFP main body side, the unique ID of the MFP main body is stored as A data, and the range of functions supported by the MFP main body is described as B data. “Support” means that the multi-function peripheral can be supported, and “license” means that the provision of the function is permitted. The unique ID of the MFP main body is a combination of, for example, a model number, a manufacturing lot number, and an individual number in the lot, and uniquely specifies the MFP main body. Further, the external medium 22 may be provided with a flag for setting a flag indicating that it has been discarded, and may be provided with a column indicating that the partner relationship has already been established, a column indicating the history of rewriting, and the like. The A data is written into the secure memory 16 or the normal memory on the main body side when the partner relationship is established or at the time of manufacture. Then, B data is written from the external medium 22, and (E, C, D) data is written to the secure memory 16 and (e, c, d) data is written to the secure memory 36 in the process of establishing the partner relationship. Written.

  Explaining the data on the option card side, e data is sent from the secure memory 16 and is substantially the same data as B data, and c data is generated by the authentication unit 38 from the A data and B data sent from the main body side. Data, for example, A data itself, converted A data, or data that depends on both A data and B data. The d data is the same data as the C data, and is data used by the option card to authenticate the multifunction device. The E data in the secure memory 16 on the main body side is data generated by the option card authentication unit 20 from the b data on the option card side, indicates the range of functions to be licensed, and may be the same data as the b data. The C data is generated from (a, b) data on the option card side, and is, for example, a data itself, a converted a data, or data depending on two data (a, b). The D data is, for example, the same data as the c data sent from the option card side.

  Data (e, c, d) and data (E, C, D) are generated by exchanging (a, b) data and (A, B) data between the secure memories 16, 36. Remembering this is called establishing a partner relationship. Of these, the data used for actual authentication is two sets of data (c, d) and (C, D). Data for authenticating the external media 35 and 22 with the option card 10 and the MFP main body is a data and A data. The range of functions provided by the option card is stored in b data and E data. Then, the function provided by the option card authentication unit 20 is limited to this range, or the function provided by the authentication unit 38 on the option card 10 side is limited. Further, when the external media 22 and 35 are exchanged due to a change in the license range or the like, the discarded flag is set. The external media 22 and 35 in which the discarded flag is set cannot be used in the multifunction device 2 and the option card 10.

  Further, in order to prevent the external media 35 and 22 pulled out from the option card 10 or the multifunction device 2 from being used in another option card or another multifunction device or the like by a method other than the a data and the A data, A flag indicating whether the partner relationship has been established in the media 35 and 22 or a column indicating the history of rewriting may be provided.

  4 and 5 show a partner relationship establishment procedure and an authentication procedure at power-on in the embodiment. FIG. 4 starts with the process of establishing a partner relationship. An option card is set in the multifunction device main body, and an external medium is set in the multifunction device main body and the option card. In addition, the operator writes the a data and the A data or data corresponding to these into the option card and the normal memory of the multifunction machine. Next, on the option card side, it is checked whether the a data of the external medium is consistent with the a data written in the normal memory or the like. Similarly, the main body also checks whether the A data of the external medium is consistent with the A data written in the normal memory or the like.

  Next, the option card sends a data to the main body side, and the main body side uses the option list 24 or the like to determine whether it is an option card that can be supported by its own device. To do. On the option card side, from the part indicating the model in the received A data, it is determined whether or not it is a multi-function device main body corresponding to the own device, and if it corresponds, b data is transmitted. If an error has occurred so far, replace the error code.

  The b data is data transferred from the external medium to the secure memory of the option card, and the received b data is stored in the secure memory as E data as it is, for example, on the multifunction machine main body side. On the multifunction device side, B data obtained from an external medium connected to the main body side is transmitted to the option card side, and on the option card side, the B data is stored in the secure memory as e data. On the option card side, it is checked whether or not the received B data (e data) corresponds to the own device, and this check may be omitted. Next, c data is generated from A data or A data and a data, and is sent to the multifunction device main body, and is stored as D data in the secure memory on the multifunction device main body. On the multifunction device main body side, C data is generated from a data or a data and A data and sent to the option card side. On the option card side, C data is stored in the secure memory as d data. After that, the c data is sent from the option card side, and it is checked whether it matches the D data on the multi-function device body side, and whether the C data sent from the multi-function device side matches the d data on the option card side. And establish a partnership.

  In the above procedure, the C data and the c data are generated when the partner relationship is established, but those previously written on the external medium may be used. However, if C data and c data are generated when the partner relationship is established, authentication data for each combination of the MFP main body and the option card is obtained, and more reliable authentication can be performed.

  The latter half of FIG. 4 and FIG. 5 show the authentication procedure after the partner relationship is established. This procedure is executed each time the power is turned on, for example. Although not shown in FIGS. 4 and 5, in order to confirm that the external media 22 and 35 are set in the multifunction device 2 and the option card 10, the A data and the a data are transmitted from the external media 22 and 35 when the power is turned on. Is checked to see if it matches the data stored in the normal memory 7, 33 or the secure memory 16, 36 or the like.

  FIG. 5 shows processing when the MFP and the option card have already been authenticated with each other when the power is turned on, and the combination is not new. The c data and C data are exchanged between the option card and the MFP main body (step 1), and it is checked whether c = D is established on the main body side (step 2), and d = C is set on the option card side. It is checked whether it is established (step 3). If either of these is not true, the LCD panel 18 of the multi-function device main body indicates that the combination of the option card and the main body is inappropriate, and the multi-function device main body is displayed with the optional function stopped. Operate (Step 4, Step 5). Here, regardless of whether there is a license or not, if there is a function to be provided from the option card, such a function is provided. If authentication is successful in both step 2 and step 3, the partner relationship is reconstructed, and an optional function is provided from the option card within the range recognized as b data and E data (step 6).

  The above processing is summarized as shown in FIG. The a data and b data are supplied from the external medium 35 to the secure memory of the option card 10 and stored, and the A data and B data are supplied from the external medium 22 to the secure memory of the MFP main body and stored. It is checked whether the MFP body and the option card match each other, and the license range is confirmed using the b data. Next, c data and C data are generated, exchanged with each other, and stored as D data and d data. The partner relationship is established as described above, and thereafter, for example, every time the power is turned on and when the power is turned on after the main unit or the option card is replaced, it is executed once it is detected that the partner relationship has been established. Here, two sets of authentication data (C data and c data) are exchanged, the option card authenticates the main body side, and the subject side authenticates the option card side. Therefore, the authentication is successful only for the correct combination of the option card and the main body, and the range of the license is stored in the option card and the multi-function device main body by b data and E data, respectively.

  FIG. 7 shows an authentication procedure after the MFP or option card in the embodiment is replaced and each power source is turned on. In the figure, the main body side checks whether the (E, C, D) data of the secure memory is an initial value or the like, and detects whether the main body is the one after replacement (S10). If the (E, C, D) data is an initial value or the like, the main body is exchanged. If the data is not the initial value or the like, the multifunction device has established a partner relationship with the option card. Similarly, the option card side is also checked to detect whether the option card has been exchanged (S11).

  The authentication procedure between the multifunction device and the option card branches in four ways depending on the combination of whether (E, C, D) data and (e, c, d) data are initial values or not. If (E, C, D) data and (e, c, d) data are stored in the multifunction device and the option card, respectively, it is assumed that the multifunction device or option card has not been replaced. Each other is authenticated according to the procedure, that is, the procedure shown in the second half of FIG. 4 (FIG. 5) (S12). If (E, C, D) data and (e, c, d) data are initial values or the like, a new partner relationship is established (the first half of FIG. 4).

  If the multifunction device stores (E, C, D) data and the option card does not store (e, c, d) data, the option card is replaced, and vice versa. Re-authenticate each other as being. If it is detected that the MFP has been replaced, the partner is authenticated by the procedure shown in FIG. 8 (S14). Conversely, if it is detected that the option card has been exchanged, a partner relationship is established by the procedure shown in FIG. 9 (S15).

  In FIG. 8, the operator is first authenticated (S20), and only authorized operators are allowed to rewrite the secure memory. When the authenticated operator activates the exchange mode for rewriting the secure memory, the exchange flag of the main body is set to enable rewriting (S21).

  In FIG. 8, since the main unit is exchanged, the (e, c, d) data of the option card is regenerated from the unique ID (A data) of the new multifunction device main unit and the range of supported functions (B data). And overwrite the secure memory. Then, the MFP main body generates (E, C, D) data from the unique ID (a data) of the option card and the range of the function licensed by the option card (b data), etc. (S22). That is, by exchanging the data (a, b) and the data (A, B) between the secure memories 16, 36 using the A data and B data of the MFP after the exchange, the data (e, c, d ) And data (E, C, D) are generated and stored. Next, the procedure shown in the country half of FIG. 4 confirms the establishment of the partner relationship at the time of power-on (S23) (S24). If the partner confirmation is successful (S25), the replacement flag is reset and the MFP main body is reset. The authentication after the exchange is finished (S26).

  FIG. 9 shows an authentication procedure performed when the option card is replaced. Even when the option card is replaced, only the authorized operator is allowed to rewrite the secure memory (S30). When the authenticated operator activates the exchange mode for rewriting the secure memory, an option card exchange flag is set to enable rewriting (S31).

  If the option function provided by the replaced option card is changed, the E data stored on the main body side is different from the b data stored on the option card. Since the main unit data is not stored in the secure memory of the option card, D data ≠ c data. Therefore, the E data of the main body is overwritten with the b data of the option card after replacement (S32, S33), the c data is generated with the (A, B) data, and the D data is overwritten. Also, C data is newly generated using the (a, b) data (S34), and the (e, c, d) data of the option card is also rewritten (S35). In the embodiment, if E data = b data is established, the data is not overwritten and (e, c, d) data is stored (S35), but the contents of the option card before the exchange are transferred to the new option card as they are. If so, the process of S35 may not be performed.

  (E, c, d) After storing the data, turn on the power again (S36) to confirm the establishment of the partner relationship (S37), and if the partner confirmation is successful (S38), reset the replacement flag and replace the option card The subsequent authentication is terminated (S39).

  In the embodiment, when the option card is replaced, the external media removed from the original option card is inserted into the replaced option card. . Then, when establishing the partner relationship between the option card and the multifunction peripheral, the a data (unique ID of the option card) after replacement is overwritten on the external medium by the authenticated operator.

  Similarly, when the multifunction device is replaced, the external media inserted in the original multifunction device is used for the replaced multifunction device. When the partner relationship between the option card and the multifunction device is established, the A data after replacement (unique ID of the multifunction device) is stored in the external medium. Alternatively, the external media may be replaced at the same time when the multifunction device is replaced.

In the embodiment, the following effects can be obtained.
・ When a multifunction device or option card is replaced after the multifunction device and option card have once established a partner relationship, the operator is authenticated on the spot for the new combination after the replacement, and the partner relationship is established. Optional functions can be provided for the correct combination target MFP.
・ When the MFP itself is replaced, the authentication data is written to each other's secure memory on the spot to establish a partner relationship. Therefore, it is not necessary to make the secure memory removable, and the secure memory is not removed and misused.
・ For new combinations, there is no need to rewrite the data by bringing the option card back to the base.
-Instead of bringing the removed option card back to the site and reconnecting it after repairs, you can install another option card and establish a partner relationship immediately after replacement.
-When the option card is replaced, it is confirmed whether there is any change in the option function provided by the replaced option card, and if there is a change, the secure memory of the main body can be rewritten using the new b data.
Since writing to the secure memory is performed with an authorized operator starting the exchange mode and the exchange flag is turned on, the contents of the secure memory can be safely rewritten. Unauthorized persons cannot exchange without permission.

Block diagram of the MFP of the embodiment Block diagram of option card in the embodiment Diagram showing authentication data used in the embodiment The figure which shows the establishment procedure of the partner relationship and the certification procedure at the time of power-on in the embodiment The figure which shows the certification procedure when power is turned on in the embodiment Schematic diagram of partner establishment and authentication procedures in the example The figure which shows the certification procedure of the compound machine or option card in the example Flowchart showing authentication at the time of replacement of the MFP in the embodiment The flowchart which shows the authentication at the time of replacement | exchange of the option card in an Example

Explanation of symbols

2 MFP 4,30 Bus 5,31 CPU
6,32 ROM
7,33 RAM
8 Print section 10 Option card 12 Modem 13 NCU
14 Network Interface Board 15 Scanner Unit 16, 36 Secure Memory 17 Operation Unit 18 LCD Panel 20 Option Card Authentication Unit 21, 34 External Media Interface 22, 35 External Media 23 Operator Authentication Unit 24 Option List 25, 40 Authentication Program Storage Medium 37 Bus interface 38 authentication unit

Claims (4)

An information communication system comprising an information communication device and an option card connected to the information communication device and providing an optional function,
Secure memory is provided for each information communication device and option card,
Authentication data is stored in each secure memory, and at least data indicating the range of optional functions permitted to be provided from the option card is stored in the secure memory of the option card,
By providing an authentication unit that authenticates the other party using the authentication data in the information communication device and the option card, the authentication data is exchanged between the information communication device and the option card. Authenticate the option card to authenticate the information communication device,
At least one of the information communication device and the option card is provided with an operator authentication unit for authenticating an authorized operator,
Further, at least one of the information communication device and the option card is provided with an exchange detection unit for detecting the exchange of the information communication device or the option card, and the exchange detection unit stores the authentication data of the other party of the information communication device or the option card. If the device that does not store the other party's authentication data is replaced,
When detecting that the information communication device or the option card has been exchanged by the exchange detection unit when the information communication device and the option card are turned on, accepting an authentication request from the operator authenticated by the operator authentication unit, Write the other party's authentication data to each secure memory to establish the partner relationship between the information communication device and the option card, and provide the option card function from the option card to the information communication device within the range of the optional functions that allow the provision An information communication system, characterized in that: When the data indicating the range of the optional functions permitted to be provided from the option card is stored in the respective secure memories, and the exchange detection unit detects that only the option card has been exchanged,
The authentication unit of the information communication device overwrites the secure memory of the information communication device with data indicating the optional function that the exchanged option card permits to provide, and establishes a partner relationship between the information communication device and the option card The information communication apparatus according to claim 1, wherein: An authentication program for an information communication system, comprising: an information communication device including a secure memory; and an option card connected to the information communication device to provide an optional function and including a secure memory,
The program is stored in the information communication device and the option card.
A function to store authentication data in each secure memory;
A function for storing at least data indicating a range of optional functions permitted to be provided from the optional card in the secure memory of the optional card;
An authentication function for exchanging the authentication data between the information communication device and the option card, authenticating the option card by the information communication device, and authenticating the information communication device by the option card;
An operator authentication function for authenticating an authorized operator using an information communication device or an option card;
By detecting whether the information communication device and the option card store the other party's authentication data, a detection function for detecting a device that does not store the other party's authentication data as a replaced device is provided,
When it is detected that the information communication device or the option card has been exchanged when the information communication device and the option card are turned on, an authentication request from the operator authenticated by the operator authentication function is accepted, and the respective secure memory is received. An authentication program for an information communication system that realizes a function of writing authentication data of the other party and establishing a partner relationship between the information communication apparatus and the option card. The authentication program is:
A function for storing data indicating a range of optional functions permitted to be provided from the optional card in the respective secure memories;
When it is detected that only the option card has been replaced, the function that overwrites the secure memory of the information communication device with the data indicating the optional function that the option card after replacement replaces,
4. The authentication program according to claim 3, wherein a function for establishing a partner relationship between the information communication apparatus and the option card is realized.

Images