JP6205343B2 - Information processing apparatus and return control program - Google Patents

Description

  Embodiments described herein relate generally to an information processing apparatus and a return control program.

  An information processing apparatus such as a personal computer has a power saving function for suppressing power consumption. The power saving function shifts to a power saving mode when, for example, a state of not being used for a certain period of time is detected, and stops power supply to some devices such as a hard disk device. In addition, the power saving function can maintain the previous working state before stopping the power supply, and can return to the state immediately before the power supply is stopped when returning from the power saving mode. As a result, the information processing apparatus can suppress power consumption without terminating or restarting an OS (Operating System) or application program.

  On the other hand, some storage devices such as a hard disk device are equipped with a function for ensuring data security. For example, some storage devices have a function of recording encrypted data. When the power supply is cut off, the storage device having the encryption function disables the encryption function and decrypts the data recorded by encryption so that it cannot be read out. Thereby, even if only the storage device is removed and connected to another system, the encrypted data stored in the storage device cannot be used.

JP 2010-79572 A

  Conventionally, when a storage device equipped with an encryption function is attached to an information processing device having a power saving function, when the power supply to the storage device is stopped by shifting to the power saving mode, the encryption function of the storage device is become invalid. Therefore, even after shifting from the power saving mode to the normal operation state, normal data access to the storage device cannot be performed. Therefore, the system is returned to the state immediately before the shift to the power saving mode and the processing is continued. Can not be.

  Conventionally, in order to validate the encryption function of the storage device, an external storage medium (USB or the like) equipped with a system for releasing encryption (enabling the encryption function) is used. The information processing apparatus causes the system stored in the external storage medium to execute, and after the encryption of the storage apparatus is released on this system, the information processing apparatus shifts to the operation of the original system.

  As described above, the conventional information processing apparatus is not only a storage device for storing data, but another external storage in which a system for releasing encryption of the storage device is mounted when returning from the power saving mode. It was necessary to provide a medium. For this reason, the increase in cost was caused.

  The problem to be solved by the present invention is to provide an information processing apparatus and a return control program capable of returning the system from the power saving mode and ensuring the security of the storage device without increasing the cost. .

  According to the embodiment, the information processing apparatus includes encryption storage means, process execution order determination means, process registration means, process processing means, and decryption means. The encryption storage unit includes an encryption function unit that encrypts and writes data, decrypts the encrypted data, and outputs the encrypted data when in the valid state. The process execution order determination means determines the execution order of a plurality of processes. The process registration means activates the encryption function unit when returning from the power saving mode immediately before power supply to the storage device is stopped in order to shift to the power saving mode by the power saving function. Therefore, the decryption process is registered in the process execution order determination unit so that the decryption process is executed with priority. The process processing means preferentially executes the decryption process when returning from the power saving mode. The decryption unit makes the encryption function unit valid by executing the decryption process.

The block diagram which shows the structure of the information processing apparatus of this embodiment. The block diagram showing the functional composition of the encryption storage device in this embodiment. The block diagram showing the functional composition of the return control part in this embodiment. The flowchart shown about operation | movement of the information processing apparatus in this embodiment. The figure which shows an example of the some process registered into the process execution order determination part immediately before transfering to power saving mode. The figure for demonstrating the descrambling process registration part in this embodiment. The figure for demonstrating the descrambling process execution determination part in this embodiment. The figure for demonstrating the cancellation | release of the encryption by the encryption cancellation | release process in this embodiment. The figure for demonstrating the execution procedure return part in this embodiment.

Hereinafter, the present embodiment will be described with reference to the drawings.
FIG. 1 is a block diagram illustrating a configuration of the information processing apparatus 1 according to the present embodiment. The information processing apparatus 1 is realized by a personal computer, for example. Note that the information processing apparatus 1 is not limited to a personal computer, and may be realized by another apparatus having a computer function, such as an MFP (Multi Function Peripheral), a television, or an HDD recorder. Furthermore, the information processing apparatus 1 may be configured only by a board such as an embedded board mounted on another apparatus.

  The information processing apparatus 1 in this embodiment has a power saving function. For example, when the state of not being used continues for a certain period of time or longer, the information processing apparatus 1 shifts to the power saving mode by the power saving function and stops the power supply of some of the components constituting the information processing apparatus 1.

  In addition, the information processing apparatus 1 is provided with a storage device (a hard disk device (HDD) 14 described later) having a function (encryption function unit) for ensuring the security of programs and data. The encryption function unit encrypts and writes the data and decrypts and outputs the encrypted data when in the valid state. The encryption function encrypts the storage device (invalidates the encryption function) when power supply to the storage device is stopped. Thus, even if the storage device is detached from the information processing device 1 and mounted on another information processing device, normal data access cannot be performed.

  The information processing apparatus 1 according to the present embodiment enables the encryption function when the power supply to the storage device is stopped by shifting to the power saving mode and the encryption function of the storage device is invalidated. The system can be restored from the power saving mode without using an external storage device (such as USB) in which the system is mounted.

  As shown in FIG. 1, the information processing apparatus 1 includes a CPU 10, a memory 12, an HDD 14, an external storage device 15, a display device 16, a power supply controller 17, a communication interface (I / F) 18, an input device 19, and a power button 20. Have. The CPU 10, the memory 12, the HDD 14, the external storage device 15, the display device 16, the power supply controller 17, and the communication I / F 18 are connected via a bus 21.

  The CPU 10 is a processor that controls the operation of each component of the information processing apparatus 1. The CPU 10 executes various programs loaded from the HDD 14 to the memory 12. The program includes an operating system (OS) 14B and various application programs. The OS 14B includes a return control program 14C for realizing a function for enabling the encryption function of the HDD 14 when the information processing apparatus 1 is returned from the power saving mode.

  The memory 12 includes a RAM (Random Access Memory) and a ROM (Read Only Memory). The memory 12 stores programs and data and is accessed by the CPU 10. In the present embodiment, the memory 12 continues to be supplied with power even when the information processing apparatus 1 shifts to the power saving mode by the power saving function, and the stored programs and data are backed up.

  The HDD 14 records programs and data on a storage medium (hard disk) under the control of the CPU 10. The HDD 14 has an encrypted storage device 14A (details of the encrypted storage device 14A will be described later (FIG. 2)). The encryption storage device 14A has an encryption function unit that encrypts and writes data, and decrypts and outputs the encrypted data.

  In the present embodiment, the security of the data stored in the HDD 14 is ensured, but it is also possible to target a removable magnetic storage device or semiconductor storage device instead of the HDD 14.

  The external storage device 15 is a device that stores data or the like in a hard disk, a DVD (Digital Versatile Disc), a USB memory or the like different from the HDD 14.

  The display device 16 is an LCD (Liquid Crystal Display), for example, and displays various types of information under the control of the CPU 10.

  The power controller 17 is a controller for managing the power of the information processing apparatus 1. In addition to power management, the power controller 17 has functions of managing the input device 19 and managing power on / off according to the operation on the power button 20. The input device 19 includes, for example, a keyboard, a touch pad, various buttons, a sensor, and the like. The power controller 17 controls power supply in cooperation with a power supply unit (not shown) that supplies power to each component constituting the information processing apparatus 1. In the present embodiment, the power supply controller 17 continues to supply power even when the information processing apparatus 1 shifts to the power saving mode by the power saving function. Therefore, the power supply controller 17 can detect the input from the input device 19 or the power button 20 in the power saving mode, and can start processing for returning the system from the power saving mode. Note that the power supply controller 17 can also start processing for returning the system by detecting access from the electronic device 24 through the communication I / F 18 in the power saving mode.

  The communication I / F 18 communicates with other electronic devices 24 via a network 23 such as a LAN (Local Area Network) under the control of the CPU 10.

FIG. 2 is a block diagram showing a functional configuration of the encryption storage device 14A provided in the HDD 14 in the present embodiment.
The encrypted storage device 14 </ b> A has a function for ensuring the security of data recorded in the HDD 14. The encryption storage device 14A includes an encryption stop unit 30, an encryption unit 31, and an encryption function unit 32. Each unit may be realized by dedicated hardware, or may be realized by executing a program by a processor or the like.

  The encryption stopping unit 30 stops (invalidates) the encryption function unit 32 when power supply from the information processing apparatus 1 (power supply unit) to the HDD 14 is stopped. That is, the encryption stopping unit 30 keeps the HDD 14 in an encrypted state so that the data recorded in the HDD 14 cannot be used as it is. When the power supply is stopped, the HDD 14 can operate only for a short time using the power stored therein. The encryption stop unit 30 invalidates the encryption function unit 32 within the operable time so that data cannot be used. As a result, even if the HDD 14 is detached from the information processing apparatus 1 and connected to another system, the data recorded in the HDD 14 cannot be accessed.

  When the encryption unit 31 returns from the power saving mode, the encryption unit 31 validates the encryption function unit 32 with the encryption key in accordance with execution of the decryption process by the return control unit 26 (encryption release unit 45) described later. To do. That is, the encryption unit 31 releases the encrypted state of the HDD 14 so that the data recorded in the HDD 14 can be read / written.

  The encryption function unit 32 records the encrypted data obtained by encrypting plain text data in the HDD 14 in response to the write request from the CPU 10 when the encryption unit 31 is enabled, and responds to the read request from the CPU 10. The plaintext data obtained by decrypting the encrypted data recorded in the HDD 14 is output.

  FIG. 3 is a block diagram showing a functional configuration of the return control unit 26 realized by the OS 14B (return control program 14C) in the present embodiment. The return control unit 26 is a function realized by the cooperation of the CPU 10 and the OS 14B (return control program 14C) stored in the memory 12. The CPU 10 implements the following functions by executing the return control program 14C.

  The return control unit 26 includes a process execution order determination unit 40, an execution process storage unit 41, a process processing unit 42, an decryption process registration unit 43, an decryption process execution determination unit 44, an decryption unit 45, and an execution procedure. And a return unit 46.

  The process execution order determination unit 40 determines the execution order of a plurality of processes (processes) executed by the information processing apparatus 1. In general, the information processing apparatus 1 executes a plurality of application programs and the like in parallel. Accordingly, the process execution order determination unit 40 determines the execution order of processes corresponding to a plurality of application programs executed in parallel.

  The execution process storage unit 41 is moved by the decryption process execution determination unit 44 when the information processing apparatus 1 returns from the power saving mode, and is other than the decryption process registered in the process execution order determination unit 40 Save the process.

  The process processing unit 42 executes processes in the execution order determined by the process execution order determining unit 40. When the information processing apparatus 1 is returned from the power saving mode, the process processing unit 42 preferentially executes the decryption process for making the encryption function unit 32 valid.

  The decryption process registration unit 43 sets the encryption function unit 32 to the valid state when returning from the power saving mode immediately before the power supply to the HDD 14 is stopped in order to shift to the power saving mode by the power saving function. The decryption process is registered in the process execution order determination unit 40 so that the decryption process for performing the processing is performed with priority.

  The decryption process execution determination unit 44 is registered by the decryption process registration unit 43 among the processes registered in the process execution order determination unit 40 when the information processing apparatus 1 returns from the power saving mode. Processes other than the decryption process are moved to the process processing unit 42.

The decryption unit 45 decrypts the encryption of the HDD 14 through the encryption unit 31 by the encryption process executed by the process processing unit 42 (enables the encryption function unit 32).
The execution procedure return unit 46 returns the process stored in the execution process storage unit 41 to the process execution order determination unit 40.

Next, the operation of the information processing apparatus 1 in this embodiment will be described with reference to the flowchart shown in FIG.
When the power controller 17 of the information processing apparatus 1 detects a power-on instruction by operating the power button 20 (ACT A1), the power supply unit starts power supply to each component (ACT A2).

  When power is supplied to the HDD 14 by a normal power-on operation, the encryption function unit 32 of the encryption storage device 14A cancels (enables) encryption and reads / writes data to / from the HDD 14 (storage medium). Write is enabled (ACT A3).

  When the encryption of the HDD 14 is released, the CPU 10 reads the OS 14B stored in the HDD 14 and stores it in the memory 12 (ACT A4). Hereinafter, the CPU 10 activates the information processing apparatus 1 according to the function of the OS 14B (ACT A5).

  The CPU 10 executes various applications and the like under the control of the OS 14B. A process for executing each application is registered in the process execution order determination unit 40 and executed by the CPU 10. When a plurality of applications are activated, the CPU 10 sequentially executes processes corresponding to the applications in parallel. The CPU 10 reads / writes data from / to the HDD 14 according to the process accompanying the execution of the process (ACT A8). The HDD 14 records the encrypted data obtained by encrypting the plain text data in the HDD 14 by the encryption function unit 32 in response to the write request from the CPU 10, and the encryption recorded in the HDD 14 in response to the read request from the CPU 10. Outputs plaintext data obtained by decrypting the data.

  When executing the process according to the operation by the user, the CPU 10 continues to read / write data according to the process to the HDD 14 (ACT A7, A8).

  Here, for example, when there is no processing corresponding to the input operation for a predetermined time or longer (ACT A7), the CPU 10 determines that the power saving function is set to shift to the power saving mode. Note that the transition to the power saving mode may be executed in accordance with, for example, an operation on the power button 20 by an operating user other than when there is no processing for a certain period of time.

When the CPU 10 enters the state of shifting to the power saving mode, the CPU 10 executes processing by the return control unit 26 together with processing for shifting to the power saving mode.
When it is determined that the power supply to the HDD 14 is stopped by the power saving function, the decryption process registration unit 43 saves the decryption process for releasing the encryption of the HDD 14 when returning from the power saving mode. Immediately before the power supply to the HDD 14 is stopped by the power function, it is registered in the process execution order determination unit 40 (ACT A9).

FIG. 5 is a diagram illustrating an example of a plurality of processes 40A (processes 1 to n) registered in the process execution order determination unit 40 immediately before shifting to the power saving mode.
As shown in FIG. 6, the decryption process registration unit 43 additionally registers the decryption process 40A1 in the process 40A registered in the process execution order determination unit 40 immediately before the power supply to the HDD 14 is stopped. .

  Thereafter, the power saving function stops the power supply from the power supply unit to each component under the control of the power supply controller 17 (ACT A11). (“ACT A10” shown in FIG. 4 will be described later). In the power saving mode in the present embodiment, power supply to the power controller 17 and the memory 12 is continued. Therefore, the process registered in the process execution order determination unit 40 is held in the memory 12 in the power saving mode.

  When the power supply from the power supply unit is stopped, the HDD 14 invalidates the encryption function unit 32 by the encryption stop unit 30. That is, the HDD 14 is encrypted so that the data stored in the HDD 14 cannot be used.

  The power saving mode is canceled when a preset return event occurs. Examples of the return event include an operation on the input device 19 and the power button 20, access from another electronic device 24 detected by the communication I / F 18, elapse of a predetermined time, and the like. There may be other return events.

  When the power supply controller 17 detects that a return event has occurred (ACT A12), the power supply unit 17 starts power supply from the power supply unit to each component in order to return the system from the power saving mode (ACT A13).

  When the power supply is resumed, the descrambling process execution determination unit 44 stores the processes registered in advance in the process execution order determination unit 40 in the execution process storage unit 41 as shown in FIG. A14). However, as shown in FIG. 7, the decryption process execution determination unit 44 moves processes other than the decryption process 40A1 for decrypting the HDD 14 to the process processing unit 42, and performs the decryption process 40A1. Are left in the process execution order determination unit 40.

  Thereafter, as shown in FIG. 8, the return control unit 26 executes the decryption process 40A1, thereby decrypting the encryption function unit 32 encrypted by the power supply interruption (ACT A15). .

  First, the process processing unit 42 executes the descrambling process 40A1 registered in the process execution order determination unit 40. The decryption process 40A1 is a process in which the encryption function unit 32 is decrypted (validated) through the encryption unit 31 of the HDD 14 by the decryption unit 45.

  The decryption unit 45 makes the encryption unit 31 validate the encryption function unit 32. The encryption unit 31 releases encryption associated with the interruption of the power supply to the encryption function unit 32 so that the data recorded in the HDD 14 can be read / written.

  After the encryption function unit 32 is validated, the execution procedure return unit 46 returns the process stored in the process processing unit 42 to the process execution order determination unit 40 (ACT A16), as shown in FIG. That is, the state immediately before shifting to the power saving mode is set.

  Thereafter, the CPU 10 executes the process returned to the process execution order determination unit 40 to return to a state in which a plurality of applications before executing the power saving mode are being executed in parallel. In this way, the return control unit 26 can release the encryption by shifting the power saving mode to the HDD 14 without using a system mounted on an external storage medium or the like, and can return the system.

  In the above description, the encryption function unit 32 is invalidated by the encryption stop unit 30 installed in the HDD 14 by stopping the power supply to the HDD 14 when shifting to the power saving mode. In the present embodiment, the encryption function unit 32 may be invalidated by an encryption stop program (software) executed by the CPU 10 instead of the encryption stop unit 30 installed in the HDD 14. In this case, it is executed at the timing of ACT A10 shown in FIG. As a result, the same processing as described above can be performed.

  Further, in the above description, after power supply is started (ACT A13) so that the decryption process 40A1 is preferentially executed when the power saving mode is restored, the processes other than the decryption process 40A1 are performed. The process is moved to the process processing unit 42 (ACT A14). In the present embodiment, the process may be moved at a timing different from that of ACT A14. For example, in ACT A9, before the decryption process 40A1 is registered in the process execution order determination unit 40, or before the power supply after the decryption process 40A1 is registered is stopped (ACT A11), The process may be moved to the process processing unit 42.

  In the above description, when returning from the power saving mode, a process other than the decryption process 40A1 is moved to the process processing unit 42 in order to execute the decryption process 40A1. Thus, the decryption process 40A1 may be executed.

  For example, when the decryption process execution determination unit 44 registers the decryption process 40A1 in the process execution order determination unit 40, the decryption process execution determination unit 44 registers the decryption process 40A1 to be executed with the highest priority. Thereby, the process execution order determination unit 40 can cause the process processing unit 42 to execute the decryption process 40A1 even if other processes are registered. In this case, the process of moving the process by the decryption process execution determining unit 44 and the process of returning the process by the execution procedure return unit 46 can be omitted.

  In this way, the information processing apparatus according to the present embodiment shifts to the power saving mode in order to save power, and even when the power supply to the HDD 14 is stopped, the HDD 14 accompanying the stop of the power supply. Can be released without using a system stored in another external storage medium when returning to the power saving mode. Therefore, it is possible to restore the system from the power saving mode and increase the security of the HDD 14 without increasing the cost.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

  In addition, the processing described in the above-described embodiment is performed as a program (for example, OS) that can be executed by a computer, such as a magnetic disk (flexible disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), a semiconductor, etc. It can be written in a storage medium such as a memory and provided to various devices. It is also possible to transmit to a variety of devices by transmitting via a communication medium. The computer reads the program recorded in the storage medium or receives the program via the communication medium, and the operation is controlled by this program, thereby executing the above-described processing.

  DESCRIPTION OF SYMBOLS 30 ... Encryption stop part, 40 ... Process execution order determination part, 41 ... Execution process preservation | save part, 42 ... Process processing part, 43 ... Decryption process registration part, 44 ... Decryption process execution decision part, 45 ... Encryption Release unit, 46... Execution procedure return unit.

Claims (6)

An encryption storage unit having an encryption function unit for encrypting and writing data and decrypting and outputting the encrypted data when in the valid state;
Process execution order determining means for determining the execution order of a plurality of processes;
Encryption for enabling the encryption function unit when returning from the power saving mode immediately before the power supply to the encryption storage unit is stopped in order to shift to the power saving mode by the power saving function Process registration means for registering the descrambling process in the process execution order determination means so that the release process is preferentially executed;
A process processing means for preferentially executing the decryption process when returning from the power saving mode;
An information processing apparatus comprising: an encryption release unit that activates the encryption function unit by executing the decryption process. Execution process storage means for storing a process other than the decryption process registered in the process execution order determination means when returning from the power saving mode;
The information according to claim 1, further comprising: an execution order return unit that registers the process stored in the execution process storage unit in the process execution order determination unit after the decryption process is executed by the process processing unit. Processing equipment. The encrypted storage means includes
When the power supply from the information processing apparatus is stopped, the encryption stop unit that disables the encryption function unit;
The information processing apparatus according to claim 1, further comprising: an encryption unit that activates the encryption function unit by executing the decryption process by the decryption unit.   The information processing apparatus according to claim 1, further comprising an encryption stop unit that disables the encryption function unit immediately before power supply to the encryption storage unit is stopped by the power saving function. An encryption storage device having an encryption function unit for encrypting and writing data and decrypting and outputting the encrypted data and a computer having a power saving function when in an effective state,
Process execution order determining means for determining the execution order of a plurality of processes;
An encryption for enabling the encryption function unit when returning from the power saving mode immediately before power supply to the encryption storage device is stopped in order to shift to the power saving mode by the power saving function. Process registration means for registering the decryption process in the process execution order determination means so that the decryption process is executed preferentially;
A process processing means for preferentially executing the decryption process when returning from the power saving mode;
A program for causing the encryption function unit to function as an encryption release unit that is enabled by executing the encryption release process. Execution process storage means for storing a process other than the decryption process registered in the process execution order determination means when returning from the power saving mode;
6. The function for further functioning as an execution order return means for registering a process stored in the execution process storage means in the process execution order determination means after the decryption process is executed by the process processing means. Program.

Images