JP5218901B2 - Information communication system and its authentication program - Google Patents

Description

  The present invention relates to an information communication system including an information communication apparatus and an option card thereof, and more particularly to changing the range of optional functions provided by the option card.

  It is known to connect an option card to an information communication device. An option card is a computer having a connection interface between a CPU, a memory, and an information communication device, and provides, for example, PDL software in a page printer or document management software in a document management device as an optional function. Option contracts related to the provision of optional functions are usually made in units of combinations of information processing devices and option cards, and functions that are permitted to be used within the scope of the optional functions that can be provided can be executed for the correct combinations. .

Regarding the provision of optional functions, Patent Document 1: JP1995-191940A describes the range of software or hardware that can be used for an IC card, and proposes to use the IC card by mounting it on a computer. However, in the system of Patent Document 1, there is no option card, the mutual authentication between the option card and the computer is not performed, and there is no description about changing the range of optional functions provided by the option card.
JP1995-191940A

  The problem of the present invention is that when the option contract is changed and the range of the optional functions provided by the option card is changed, the content of the option card is changed on the spot without removing the option card, and the option contract after the change is made. It is to provide a function to be determined.

The information communication system of the present invention is an information communication system comprising an information communication device and an option card connected to the information communication device and providing an optional function,
Secure memory is provided for each information communication device and option card,
Authentication data is stored in each secure memory, and at least data indicating the range of optional functions permitted to be provided from the option card is stored in the secure memory of the option card,
Here, the authentication data is generated by the information communication device based on the unique ID data of the option card and the data of the type of optional function that can be provided from the option card, and depending on both of these data. Based on the first authentication data sent to the option card, unique ID data of the information communication device, and optional function type data supported by the information communication device, and depending on both of these data And the second authentication data generated by the option card and sent to the information communication device,
To an information communication apparatus and option cards, by providing an authentication unit for authenticating the other party by using the authentication data, it sends out a second authentication data from the option card to the information communication apparatus, from the information communication device to option cards Sending the first authentication data, authenticating each other by the authentication unit, providing the option card function from the option card to the information communication device within the range of the option function;
At least one of the information communication device and the option card is provided with an operator authentication unit for authenticating an authorized operator,
Rewriting from an operator authenticated by the operator authenticating unit by providing a rewriting unit for rewriting data indicating the range of the optional function stored in the secure memory of the option card in at least one of the information communication device and the option card The request is accepted, and the data indicating the range of the optional function can be rewritten.

The authentication program of the present invention is an authentication program for an information communication system comprising an information communication device and an option card connected to the information communication device and providing an optional function,
Each information communication device and option card has a secure memory,
A function to store authentication data in each secure memory;
A function for storing at least data indicating a range of optional functions permitted to be provided from the optional card in the secure memory of the optional card;
A function of authenticating the other party by sending the authentication data from the option card or the information communication apparatus to the other party by an authentication unit provided in at least one of the information communication apparatus and the option card;
In the range of the optional function , the information communication system realizes the function of providing the option card function from the option card to the information communication device ,
The authentication data is generated by the information communication device based on the data of the unique ID of the option card and the data of the type of option function that can be provided from the option card, and depending on both of these data, Based on the first authentication data sent to the option card, the data of the unique ID of the information communication device, and the data of the type of the optional function supported by the information communication device, so as to depend on both of these data Second authentication data generated by the option card and sent to the information communication device,
And sending the second authentication data from the option card to the information communication device, sending the first authentication data from the information communication device to the option card, and authenticating each other by the authentication unit,
A function for authenticating an authorized operator to at least one of the information communication device and the option card;
A function for freely rewriting data indicating the range of the option function stored in the secure memory of the option card in response to a rewrite request from an authenticated operator;
The present invention is characterized in that it is realized in a rewriting unit provided in at least one of the information communication device and the option card.

  According to the present invention, at least data indicating the range of functions provided as optional functions of the information communication apparatus is stored in the secure memory of the optional card. If the optional function permitted to be used is changed, the data indicating the range of the optional function of the secure memory can be rewritten.

  Since the range of functions permitted to be provided from the option card is stored at least in the secure memory of the option card, functions that are not permitted are not provided. In addition, only the authorized operator who has been authenticated by the operator authentication unit is allowed to rewrite the range of the optional function.

Since the authenticated operator rewrites the option card while the option card is connected to the information communication apparatus, it is not necessary to bring back the option card to be rewritten. Therefore, the option card is not exchanged, and the combination of the information communication device and the option card can be maintained and rewriting can be performed safely.

In the information communication system of the present invention, it is preferable that an external medium in which unique data related to the option card and data indicating the range of the optional function are stored is freely connectable to the option card,
An external media authentication unit for authenticating external media with the unique data is provided in the option card,
The authentication data stored in the secure memory of the option card is generated using the unique data or the unique data,
The rewriting unit is configured to overwrite data indicating a range of optional functions stored in a secure memory of the optional card from the external medium.

  By storing the data specific to the option card and the data indicating the range of optional functions on the external media, and downloading the range of optional functions to be provided from the external media to the option card, the scope of the license can be changed afterwards. Can do. For example, if you insert an external medium with data indicating the range of optional functions after changing the contract into the option card, the secure memory of the option card is rewritten with this data, so the range of optional functions to be provided can be controlled by the external medium . Since authentication of the external media is performed using unique data, the correct external media can be connected to the option card, and the secure memory of the option card is securely rewritten using data within the range of optional functions provided by the external media.

  More preferably, the rewriting unit freely rewrites data indicating a range of optional functions stored in the external medium, and data indicating a range of optional functions stored in the secure memory of the option card with the rewritten data. Configure to overwrite. The range of optional functions to be provided can be changed later by updating external media data.

  Preferably, in the combination of the information processing apparatus and the option card authenticated by the authentication unit, data indicating a range of optional functions stored in the secure memory of the option card rewritten by the rewriting unit is stored in the authentication Sends to the secure memory of the information communication apparatus.

  When the range of the option function of the option card is rewritten, the data related to the option function of the information communication apparatus connected to the option card is also rewritten. The authenticated information communication device provides an optional function within the permitted range according to the rewritten data.

  The description relating to the information communication system in this specification also applies to the system authentication program as it is. The terms in this specification are widely interpreted in consideration of known techniques.

  In the following, an optimum embodiment for carrying out the present invention will be shown.

  1 to 6 show an embodiment. In each figure, reference numeral 2 denotes a multifunction peripheral, which may be a simple printer, a document management apparatus, another server, or a personal computer. 4 is a bus, 5 is a CPU, 6 is a ROM, and 7 is a RAM. Reference numeral 8 denotes a print unit, which may be color or monochrome. Reference numeral 10 denotes an option card, which provides an optional function to the multifunction device 2 and is generally wider than the range provided by the license of the user and manufacturer of the multifunction device 2. The functions can be executed. The option card 10 provides, for example, conversion from PDL data to raster data in PDL (Page Description Language), a document management function in a document management apparatus, various applications, and the like.

  A modem 12 is connected to the public telephone network via the NCU 13 and performs G3 facsimile transmission and reception. The network interface board 14 is an interface with a network such as a LAN (not shown). The scanner unit 15 scans image data and uses it for image copying, image data transmission, facsimile transmission, and the like. The secure memory 16 is a memory that is difficult to be rewritten at least from the outside, and preferably difficult to read from the outside. Access to the secure memory 16 is restricted by a password or other authentication data, and writing and reading are subjected to procedures such as encryption, making access difficult. Reference numeral 17 denotes an operation unit that operates the multifunction device 2 and displays information related to the operation of the multifunction device 2 on the LCD panel 18.

  An option card authentication unit 20 authenticates the option card 10 and re-authenticates the option card 10 after rewriting. Also, an instruction from the authenticated operator is accepted from the operation unit 17 or the like, and a rewrite mode for the option card 10 is activated. The option card authentication unit 20 includes an external media interface 21 and connects an external media 22 having a security function. The external media 22 cannot be read or rewritten except by an operator with special authority. The operator authentication unit 23 authenticates the operator and permits the data read and rewrite from the external media 22. The data in the external medium 22 can be read out when the option card authenticating unit 20 is used for establishing and authenticating a partner relationship. The option list 24 stores various miscellaneous data necessary for authentication of the option card 10, and stores, for example, a list of option cards 10 supported by the multifunction device 2, and the own device corresponds to a data described later, for example. Data such as whether it is an option card is stored. The authentication program storage medium 25 supplies the ROM 6 with a portion to be executed by the multifunction device 2 in the option card authentication program.

  2 shows the configuration of the option card 10. Reference numeral 30 denotes a bus, 31 denotes a CPU, 32 denotes a ROM, and 33 denotes a RAM. The option card 10 and the multifunction device 2 are each a kind of computer. Further, the ROM 32 or the RAM 33 supplies and stores the part to be executed by the option card 10 in the option card authentication program from the authentication program storage medium 40. An external media interface 34 reads and rewrites data from the external media 35. Access to the external medium 35 by an operator or the like is restricted by the operator authentication unit 23 on the multifunction machine 2 side. Reference numeral 36 denotes a secure memory which is difficult to read and rewrite from the outside. The bus interface 37 connects the option card 10 and the bus 4 on the multi-function device 2 side, and the authentication unit 38 authenticates the multi-function device 2 and authenticates the external media 35 based on authentication data from the multi-function device 2 side. The authentication program may be supplied to the MFP 2 and the option card 10 by a carrier wave via the network interface board 14.

  An optional function rewriting unit 42 rewrites the range of functions stored in the secure memory 36 if there is a change in the range of licensed functions. In the embodiment, the range of optional functions is stored as b data. The authenticated operator activates the rewrite mode from the operation unit 17 or the like, and inputs b data indicating the range of the optional function after the change. The operator may input b data manually or may receive a file describing the b data with the multifunction device 2 and use it. Then, the rewriting unit 42 first rewrites the b data of the external medium 35 with the input b data, downloads it to the option card 10 and overwrites the b data of the secure memory 36. b Match the data. Note that although the operator instructs the rewrite mode from the multifunction device 2 side, it may be performed on the option card 10 side.

  In the embodiment, the external medium 35 is connected to the option card 10. First, the external medium 35 is rewritten, and the rewritten data is downloaded to the option card 10. The external media 35 that stores the range of the optional functions after the contract change is replaced with the old external media and inserted into the option card 10. After the consistency between the inserted external media 35 and the option card 10 is confirmed, the external media 35 35 data may be downloaded to the option card 10.

  FIG. 3 shows authentication data and respective storage locations in the embodiment. In FIG. 3 and the like, the multifunction device 2 may be referred to as a main body. In the external medium 35 on the option card side, the unique ID of the option card is described as a data, and the range of optional functions to be licensed is described as b data. In addition, the external medium 35 may be provided with a column describing the history of rewriting, and in addition, a column indicating that the partner relationship has been established or a column indicating that the medium has been discarded may be provided. The a data of the unique ID of the option card is data that can uniquely identify the option card 10 and is, for example, a combination of a model number, a production lot number, and an individual number in the lot. The b data indicating the range of optional functions to be licensed describes the range of optional functions that the option card 10 provides to the multifunction device 2 (main body). The option card 10 may be provided with a function to be provided even without a license, and this type of function is provided regardless of the authentication of the option card 10.

  In the normal memory of the option card, for example, the RAM 33, the unique ID of the option card corresponding to the a data is described. This is stored when the option card is manufactured or when the partner relationship with the multifunction device 2 is established. . The a data may be stored in the secure memory 36, or the encrypted a data may be stored in the external medium 35, the RAM 33, or the like. Further, b data is written from the external medium 35 to the secure memory 36 of the option card. When rewriting the b data in the secure memory 36, the rewriting unit 42 first rewrites the b data in the external medium 35, downloads the data to the secure memory 36, and rewrites the b data in the secure memory 36.

  Further, the secure memory 36 is provided with a field for setting a flag indicating that the specification for rewriting the b data is being changed. A field for setting the specification change flag may be provided in the secure memory 16 on the main body side.

  In the external medium 22 on the MFP main body side, the unique ID of the MFP main body is stored as A data, and the range of functions supported by the MFP main body is described as B data. “Support” means that the multi-function peripheral can be supported, and “license” means that the provision of the function is permitted. The unique ID of the MFP main body is a combination of, for example, a model number, a manufacturing lot number, and an individual number in the lot, and uniquely specifies the MFP main body. Further, the external medium 22 may be provided with a column indicating the history of rewriting, and a column indicating that the partner relationship has been established or a column indicating that the partner has been discarded. The A data is written into the secure memory 16 or the normal memory on the main body side when the partner relationship is established or at the time of manufacture. Then, B data is written from the external medium 22, and (E, C, D) data is written to the secure memory 16 and (e, c, d) data is written to the secure memory 36 in the process of establishing the partner relationship. Written.

Explaining the data on the option card side, e data is sent from the secure memory 16 and is substantially the same data as B data, and c data is generated by the authentication unit 38 from the A data and B data sent from the main body side. Data that depends on both A data and B data. The d data is the same data as the C data, and is data used by the option card to authenticate the multifunction device. The E data in the secure memory 16 on the main body side is data generated by the option card authentication unit 20 from the b data on the option card side, indicates the range of functions to be licensed, and may be the same data as the b data. The C data is generated from the data (a, b) on the option card side and depends on the two data (a, b) . The D data is, for example, the same data as the c data sent from the option card side.

  Data (e, c, d) and data (E, C, D) are generated by exchanging (a, b) data and (A, B) data between the secure memories 16, 36. Remembering this is called establishing a partner relationship. Of these, the data used for actual authentication is two sets of data (c, d) and (C, D). Data for authenticating the external media 35 and 22 with the option card 10 and the MFP main body is a data and A data. The range of functions provided by the option card is stored in b data and E data. Then, the function provided by the option card authentication unit 20 is limited to this range, or the function provided by the authentication unit 38 on the option card 10 side is limited. When the b data in the secure memory 36 is rewritten, the data (a, b) and the data (A, B) are exchanged between the secure memories 16 and 36 even when the partner relationship is reestablished after the rewriting. Data (e, c, d) and data (E, C, D) are regenerated and stored, and E data, C data, etc. are rewritten using the rewritten b data.

  FIG. 4 shows a procedure for establishing a partner relationship in the embodiment. FIG. 4 starts with the process of establishing a partner relationship. An option card is set in the multifunction device main body, and an external medium is set in the multifunction device main body and the option card. In addition, the operator writes the a data and the A data or data corresponding to these into the option card and the normal memory of the multifunction machine. Next, on the option card side, it is checked whether the a data of the external medium is consistent with the a data written in the normal memory or the like. Similarly, the main body also checks whether the A data of the external medium is consistent with the A data written in the normal memory or the like.

  Next, the option card sends a data to the main body side, and the main body side uses the option list 24 or the like to determine whether it is an option card that can be supported by its own device. To do. On the option card side, from the part indicating the model in the received A data, it is determined whether or not it is a multi-function device main body corresponding to the own device, and if it corresponds, b data is transmitted. If an error has occurred so far, replace the error code.

The b data is data transferred from the external medium to the secure memory of the option card, and the received b data is stored in the secure memory as E data as it is, for example, on the multifunction machine main body side. On the multifunction device side, B data obtained from an external medium connected to the main body side is transmitted to the option card side, and on the option card side, the B data is stored in the secure memory as e data. On the option card side, it is checked whether or not the received B data (e data) corresponds to the own device, and this check may be omitted. Next , c data is generated from the A data and the B data , sent to the multifunction device main body, and stored in the secure memory as D data on the multifunction device main body. On the multifunction device main unit side, C data is generated from the a data and the b data and sent to the option card side. On the option card side, C data is stored in the secure memory as d data. After that, the c data is sent from the option card side, and it is checked whether it matches the D data on the multi-function device body side, and whether the C data sent from the multi-function device side matches the d data on the option card side And establish a partnership.

In the above procedure, C data and c data were generated when the partner relationship was established . If C data and c data are generated when the partner relationship is established, authentication data for each combination of the multifunction machine main unit and the option card is obtained, and more reliable authentication can be performed. Even when the b data is rewritten, the partner relationship is re-established in the same manner as described above.

  The second half of FIG. 4 shows an authentication procedure after establishing a partner relationship, which is executed each time the power is turned on. This authentication procedure is also performed after the rewrite mode is started to rewrite the b data, and it is confirmed that there is no change in the combination of the option cart 10 and the multifunction device 12. Although not shown in FIG. 4, in order to confirm that the external media 22 and 35 are set in the multi-function device 2 and the option card 10, the A data and the a data are read from the external media 22 and 35 when the power is turned on. It is checked whether or not it matches the data stored in the normal memories 7 and 33 or the secure memories 16 and 36.

  When the power is turned on, the c data and C data are exchanged between the option card and the MFP main body (step 1), and it is checked whether c = D is established on the main body side (step 2), and d on the option card side. It is checked whether or not = C is satisfied (step 3). If either of these is not true, the LCD panel 18 of the multi-function device main body indicates that the combination of the option card and the main body is inappropriate, and the multi-function device main body is displayed with the optional function stopped. Operate (Step 4, Step 5). Here, regardless of whether there is a license or not, if there is a function to be provided from the option card, such a function is provided. If authentication is successful in both step 2 and step 3, the partner relationship is reconstructed, and an optional function is provided from the option card within the range recognized as b data and E data (step 6). As described above, in the embodiment, the authentication is successful only for the correct combination of the option card and the main body, and the license ranges are stored in the option card and the multi-function device main body by b data and E data, respectively.

  FIG. 5 shows a procedure for rewriting b data in the embodiment. If the function provided by the option card 10 is changed due to the contract change, the authenticated operator activates the rewrite mode from the multifunction device 2 or the option card 10. The operator first overwrites the b data indicating the range of the optional function based on the new contract on the b data of the external medium 35. Note that the external media 35 in which the b data based on the new contract is written may be exchanged with the old external media and inserted into the option card 10 to use the b data.

  When the b data of the external medium 35 is rewritten, it is confirmed that there is no change in the combination between the multifunction machine 2 and the option card 10 in the procedure shown in the latter half of FIG. Then, it is checked whether the a data stored in the external medium 35 matches the a data stored in the secure memory 36 of the option card 10, and the consistency between the external medium 35 and the option card 10 is confirmed.

  If the correct external medium 35 is connected, the b data of the external medium 35 is sent to the option card 10 and overwritten on the b data of the secure memory 36. After overwriting, the partner relationship between the MFP 2 and the option card 10 is re-established by the procedure shown in the first half of FIG. That is, by exchanging the data (a, b) and the data (A, B) between the secure memories 16 and 36 using the rewritten b data, the data (e, c, d) and the data ( E, C, D) are generated and stored.

  FIG. 6 shows a procedure for overwriting b data. The external media is inserted in the option card, and the authenticated operator starts up the b data rewrite mode from the multifunction peripheral. In the transition to the rewrite mode (S10), the operator rewrites the b data stored in the external medium (S11). Then, it is confirmed whether there is any change in the combination of the MFP main body and the option card (S12), and the consistency between the option card and the external medium is checked using a data. (S13). If the connected external medium is not correct, the rewriting process ends with an error (S14, S15). In addition, when exchanging an external medium for storing new data with an old external medium, the consistency with the option card is confirmed using a data for the inserted new external medium.

  If the consistency of the external medium can be confirmed (S14), the b data rewritten to the external medium is overwritten in the b data area of the option card (S16). The b data before overwriting is temporarily saved and stored, and a specification change flag is set to indicate that the data is being rewritten (S17). Then, it is checked whether the b data of the option card and the external medium are the same, and it is confirmed that the overwriting of the b data is correctly performed on the option card (S18). If the data cannot be rewritten correctly, the saved b data is returned to the original b data area and the process ends with an error (S18, S15).

  If the b data of the option card is correctly rewritten, the data (e) is exchanged between the secure memories 16 and 36 using the rewritten b data, and the data (e , C, d) and data (E, C, D) are generated and stored, and the partner relationship is re-established (S19). Then, after confirming whether the partner confirmation can be normally performed by turning on the power (S20), the rewriting of the b data is finished (S22).

In the embodiment, the b data of the external medium inserted into the option card is first rewritten, and the b data is downloaded from here to rewrite the option card.
Alternatively, the external media in which the b data is rewritten in accordance with the contract change may be replaced with the old external media and inserted into the option card, and the b data may be downloaded to the secure memory of the option card. In addition, an authenticated operator may directly rewrite the secure memory of the option card without using an external medium.

In the embodiment, the following effects can be obtained.
(1) If the b data indicating the function provided from the option card is changed due to the contract change, the b data of the option card can be rewritten on the spot. Therefore, there is no need to take back an option card.
(2) Since the authenticated operator rewrites the b data, the range of optional functions can be changed safely.
(3) Furthermore, since the b data is downloaded to the option card from an external medium whose consistency has been confirmed, it can be safely rewritten.
(4) Since data is exchanged between the option card and the multifunction peripheral after rewriting, the optional function after the change can be provided to the correct combination target multifunction peripheral.

Block diagram of the MFP of the embodiment Block diagram of option card in the embodiment Diagram showing authentication data used in the embodiment The figure which shows the establishment procedure of the partner relationship and the certification procedure at the time of power-on in the embodiment The figure which shows the rewriting procedure of b data in an Example The flowchart which shows the process at the time of b data rewriting in an Example

Explanation of symbols

2 MFP 4,30 Bus 5,31 CPU
6,32 ROM
7,33 RAM
8 Print section 10 Option card 12 Modem 13 NCU
14 Network Interface Board 15 Scanner Unit 16, 36 Secure Memory 17 Operation Unit 18 LCD Panel 20 Option Card Authentication Unit 21, 34 External Media Interface 22, 35 External Media 23 Operator Authentication Unit 24 Option List 25, 40 Authentication Program Storage Medium 37 Bus interface 38 Authentication unit 42 Option function rewriting unit

Claims (7)

An information communication system comprising an information communication device and an option card connected to the information communication device and providing an optional function,
Secure memory is provided for each information communication device and option card,
Authentication data is stored in each secure memory, and at least data indicating the range of optional functions permitted to be provided from the option card is stored in the secure memory of the option card,
Here, the authentication data is generated by the information communication device based on the unique ID data of the option card and the data of the type of optional function that can be provided from the option card, and depending on both of these data. Based on the first authentication data sent to the option card, unique ID data of the information communication device, and optional function type data supported by the information communication device, and depending on both of these data And the second authentication data generated by the option card and sent to the information communication device,
To an information communication apparatus and option cards, by providing an authentication unit for authenticating the other party by using the authentication data, it sends out a second authentication data from the option card to the information communication apparatus, from the information communication device to option cards Sending the first authentication data, authenticating each other by the authentication unit, providing the option card function from the option card to the information communication device within the range of the option function;
At least one of the information communication device and the option card is provided with an operator authentication unit for authenticating an authorized operator,
Rewriting from an operator authenticated by the operator authenticating unit by providing a rewriting unit for rewriting data indicating the range of the optional function stored in the secure memory of the option card in at least one of the information communication device and the option card An information communication system, wherein a request is accepted and data indicating the range of the optional function is rewritable. An external medium in which unique data related to the option card and data indicating the range of the optional function are stored can be freely connected to the option card,
An external media authentication unit for authenticating external media with the unique data is provided in the option card,
The authentication data stored in the secure memory of the option card is generated using the unique data or the unique data,
2. The information communication system according to claim 1, wherein the rewriting unit is configured to overwrite data indicating a range of an option function stored in a secure memory of the option card from the external medium. The rewriting unit can freely rewrite data indicating a range of optional functions stored in the external medium, and overwrites data indicating a range of optional functions stored in a secure memory of the option card with the rewritten data. The information communication system according to claim 2, wherein the information communication system is configured. In the combination of the information processing device and the option card authenticated by the authentication unit,
4. The authentication unit sends data indicating a range of an optional function stored in the secure memory of the option card rewritten by the rewriting unit to the secure memory of the information communication device. Any information communication system. An authentication program for an information communication system comprising an information communication device and an option card connected to the information communication device and providing an optional function,
Each information communication device and option card has a secure memory,
A function to store authentication data in each secure memory;
A function for storing at least data indicating a range of optional functions permitted to be provided from the optional card in the secure memory of the optional card;
A function of authenticating the other party by sending the authentication data from the option card or the information communication apparatus to the other party by an authentication unit provided in at least one of the information communication apparatus and the option card;
In the range of the optional function , the information communication system realizes the function of providing the option card function from the option card to the information communication device ,
The authentication data is generated by the information communication device based on the data of the unique ID of the option card and the data of the type of option function that can be provided from the option card, and depending on both of these data, Based on the first authentication data sent to the option card, the data of the unique ID of the information communication device, and the data of the type of the optional function supported by the information communication device, so as to depend on both of these data Second authentication data generated by the option card and sent to the information communication device,
And sending the second authentication data from the option card to the information communication device, sending the first authentication data from the information communication device to the option card, and authenticating each other by the authentication unit,
A function for authenticating an authorized operator to at least one of the information communication device and the option card;
A function for freely rewriting data indicating the range of the option function stored in the secure memory of the option card in response to a rewrite request from an authenticated operator;
An authentication program implemented in a rewriting unit provided in at least one of an information communication apparatus and an option card. An external medium in which unique data related to the option card and data indicating the range of the optional function are stored can be freely connected to the option card,
The authentication data stored in the secure memory of the option card is generated using the unique data or the unique data,
The authentication program is:
A function of authenticating external media with the unique data by an external media authentication unit provided in the option card;
A function of overwriting data indicating a range of option functions stored in the secure memory of the option card from the external medium by the rewriting unit;
6. The authentication program according to claim 5, wherein the authentication program is implemented in the option card. A function of allowing the rewriting unit to rewrite data indicating a range of optional functions stored in the external medium and overwriting data indicating a range of optional functions stored in a secure memory of the option card with the rewritten data. ,
The authentication program according to claim 6, wherein the authentication program is implemented in the option card.

Images