JP2004213409A - Image forming apparatus, recording medium reading and writing program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image forming apparatus for preventing a recording medium from being illegally copied, and easily decoding data of the legally copied recording medium, and also to provide a recording medium reading and writing program, and the recording medium. <P>SOLUTION: The image forming apparatus includes: a card port 1110 for reading card information (a) recorded in a memory card (a) and plane data (a) to which an electronic signature (a) enciphered by using the card information (a) is added; a card port 1110 for reading card information (b) recorded in a memory card (b) and plane data (b) to which an electronic signature (b) enciphered by using the card information (b) is added; a non-volatile memory 1019 for storing card information (a) when the card information (a) is inputted; and a CPU 1011 for copying plane data (a) in the memory card (b), and also storing card information (a) in the non-volatile memory 1019. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an image forming apparatus including a system program, an application program, a program constituting firmware from a recording medium such as a memory card, and a unit for reading and writing data referred to by the program, a recording medium read / write program, and a recording medium More specifically, the present invention prevents unauthorized use of a memory card.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, as a technique related to reading a recording medium for executing, adding, or updating a program in an information processing apparatus having a plurality of functions such as a copying machine, an IC card in which the program is written is mounted on the information processing apparatus, There is known a method of transferring a program written on a written IC card to an information processing device.
[0003]
For example, Patent Literature 1 stores a program read from a recording medium such as an IC card storing a program for controlling an image processing apparatus and type data indicating the type of the program, and the stored type data is specified. If the data indicates a program, the transfer of the program is prohibited, and if the stored type data is not data indicating a specific program, the transfer of the program is permitted, and the update according to the version of the program is disclosed. Have been.
[0004]
Japanese Patent Application Laid-Open No. H11-163,086 discloses a technology that detects the version of an update program stored in a disk device such as a hard disk device and updates the program only when the version is newer, thereby easily updating the program.
[0005]
Patent Document 3 discloses that a host device requests version information of a program, a client device transmits version information to the host device in response to the request, and the host device transmits a program based on the transmitted version information. A technique is disclosed in which a client device receives a transmitted program and updates the program.
[0006]
On the other hand, printed circuit boards (Printed Circuit Boards, PCBs) are required to reduce the mounting space occupied by one component with diversifying functions. Therefore, mounting space is reduced by mounting a memory card having a small mounting space instead of an IC card. In addition, since the unit price per bit of the memory card is low, it leads to cost reduction.
[0007]
For example, Patent Literature 4 discloses a technique for updating a control program of the device to a control program stored in a memory card according to the type and version of the program using an update program stored in a memory card. I have.
[0008]
Further, Patent Document 5 discloses that a CPU and an encryption circuit are provided in a memory card to encrypt data, and that reading and writing of data is restricted by setting conditions such as providing an access right for each data. There is disclosed a technology for enhancing security.
[0009]
As a technique for preventing data tampering, Patent Document 6 discloses an authentication technique for detecting tampering or replacement of digital data and transferring the data in a secure manner.
[0010]
Patent Document 7 discloses a technique in which an electronic signature is generated from a plaintext using a secret key and decrypted using a public key.
[0011]
[Patent Document 1]
JP-A-5-216637 (Paragraph Nos. 0068 to 0072, FIG. 7)
[0012]
[Patent Document 2]
JP-A-6-219021 (paragraph numbers 0013 to 0016)
[0013]
[Patent Document 3]
JP-A-2000-194544 (paragraphs 0034 to 0041, FIGS. 3 and 4)
[0014]
[Patent Document 4]
JP-A-2001-34822 (paragraph numbers 0022 to 0024, FIG. 2)
[0015]
[Patent Document 5]
JP-A-2001-51903 (paragraph numbers 0156 to 0163, FIG. 11)
[0016]
[Patent Document 6]
Japanese Patent No. 3219064
[Patent Document 7]
JP-A-11-339045
[Problems to be solved by the invention]
However, since the above-mentioned memory card employs a file system that can be easily read by a general-purpose operating system that is widely used for personal computers, programs recorded on the memory card and data referred to by the program can be easily read. There has been a problem that copying and tampering have occurred, and unauthorized duplication and tampering cannot be prevented.
[0019]
The present invention has been made to solve such a problem, and an object of the present invention is to provide an image forming apparatus, a recording medium read / write program, and a recording medium that can prevent unauthorized duplication or falsification of a recording medium. .
[0020]
[Means for Solving the Problems]
In order to solve the above-mentioned problems, a recording medium reading apparatus of the present invention uses first identification information for identifying the first recording medium recorded on a first recording medium, and uses the first identification information. First reading means for reading the first recording information to which the first digital signature encrypted by the first addition is added, and a second reading means for identifying the second recording medium recorded on the second recording medium. Second reading means for reading identification information and second recording information to which a second electronic signature encrypted using the second identification information is added; and wherein the first identification information is input. Then, the identification information storage means for storing the first identification information, the first recording information read by the first reading means is copied onto the second recording medium, and the first identification information is copied. And control means for storing the identification information in the identification information storage means. .
[0021]
According to this configuration, the first recording information copied on the second recording medium can be decrypted using the first identification information stored in the identification information storage means. And falsification can be prevented, and the recording information that is duly copied can be easily decoded.
[0022]
In the recording medium reading apparatus according to the present invention, the control means duplicates the first recording information read by the first reading means on the second recording medium and copies the second identification information to the first recording information. It is characterized in that it is copied on a recording medium, and the first identification information is stored in the identification information storage means.
[0023]
With this configuration, the first recording information read by the first reading unit is duplicated on the second recording medium, the second identification information is duplicated on the first recording medium, and the first identification information is copied. Since the identification information is stored in the identification information storage means, it is possible to leave a history as to which recording medium the first recording information has been copied on, thereby facilitating the management of the recording medium.
[0024]
In the recording medium reading apparatus according to the present invention, the control means duplicates the first recording information read by the first reading means on the second recording medium and copies the second identification information to the first recording information. After duplication on a recording medium, the first recording medium is write-protected, and the first identification information is stored in the identification information storage means.
[0025]
With this configuration, the control unit copies the first recording information read by the first reading unit onto the second recording medium and copies the second identification information onto the first recording medium, and then copies the first identification information to the first recording medium. Since the recording medium is write-protected and the first identification information is stored in the identification information storage means, it is possible to clearly know on which recording medium the first recording information has been duplicated. Can be easily managed.
[0026]
The recording medium reading device of the present invention is characterized in that the first identification information and the second identification information are information unique to the first recording medium and the first recording medium.
[0027]
With this configuration, it is possible to prevent the recording medium to which the copy destination of the first recording information written as the history in the first recording medium has been tampered with.
[0028]
The recording medium reading device of the present invention is characterized in that the identification information storage means is a flash memory.
[0029]
With this configuration, it is possible to reliably store the identification information as a history.
[0030]
An image forming apparatus according to the present invention is characterized in that the identification information storage means is a hard disk.
[0031]
With this configuration, it is possible to reliably store the identification information as a history.
[0032]
The recording medium reading device of the present invention is characterized in that the identification information storage means is a volatile memory backed up by a battery.
[0033]
With this configuration, it is possible to reliably store the identification information as a history.
[0034]
A recording medium read / write program according to the present invention includes: first identification information for identifying the first recording medium recorded on a first recording medium; and a first identification information encrypted using the first identification information. A first reading step of reading the first recording information to which the electronic signature is added, second identification information for identifying the second recording medium recorded on a second recording medium, A second reading step of reading the second record information to which the second electronic signature encrypted by using the identification information of the first identification information is added, and an identification storing the first identification information when the first identification information is input. An information storage step; a control step of copying the first recording information read in the first reading step onto the second recording medium, and storing the first identification information in the identification information storage means. Characterized by causing a computer to execute It is.
[0035]
With this program, the first recording information copied on the second recording medium can be decrypted using the first identification information stored in the identification information storing step, so that the unauthorized duplication of the recording medium is performed. And falsification can be prevented, and the recording information that is duly copied can be easily decoded.
[0036]
In the recording medium read / write program according to the present invention, the control step copies the first recording information read in the first reading step onto the second recording medium and copies the second identification information to the first recording information. And storing the first identification information in the identification information storage step.
[0037]
According to this program, the first recording information read in the first reading step is duplicated on the second recording medium, the second identification information is duplicated on the first recording medium, and the first identification information is duplicated on the first recording medium. Since the identification information is stored in the identification information storage step, it is possible to leave a history as to which recording medium the first recording information has been duplicated on, thereby facilitating the management of the recording medium.
[0038]
In the recording medium read / write program according to the present invention, the control step copies the first recording information read in the first reading step onto the second recording medium and copies the second identification information to the first recording information. The first recording medium is write-protected after being copied to the recording medium, and the first identification information is stored in the identification information storage step.
[0039]
With this program, it is possible to clearly know on which recording medium the first recording information has been copied, and to facilitate the management of the recording medium.
[0040]
A computer-readable recording medium according to the present invention stores the recording medium reading program according to any one of claims 8 to 10.
[0041]
With this recording medium, the recording medium read / write program according to any one of claims 8 to 10 can be provided.
[0042]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0043]
First, prior to the description of the embodiments of the present invention, a recording medium applied to the present invention will be described using a memory card as an example.
[0044]
FIG. 2 is a block diagram showing a configuration of the memory card according to the embodiment of the present invention. FIG. 3 is a diagram showing the memory card according to the embodiment of the present invention from the viewpoint of data configuration.
[0045]
As shown in FIG. 2, the memory card 100 includes a control circuit 101, a read only memory (hereinafter simply referred to as a ROM) 102, and a flash memory 103.
[0046]
The control circuit 101 performs transmission / reception and access control of information stored in the ROM 102 and the flash memory 103.
[0047]
The ROM 102 stores in advance a serial ID for identifying the memory card 100 and information about the memory card 100 such as the date and time of manufacture of the memory card 100 (hereinafter, such information is referred to as card information).
[0048]
A file system is constructed in the flash memory 103, and the file system section stores plain data and an encrypted electronic signature added to the plain data for detecting tampering of the plain data. The electronic signature is encrypted in association with the serial ID included in the card information stored in the ROM 102.
[0049]
Next, an image forming apparatus according to the present invention will be described with reference to FIG.
[0050]
FIG. 1 is a block diagram illustrating a configuration of an image forming apparatus 1000 according to an embodiment of the present invention.
[0051]
The image forming apparatus 1000 is connected via a system bus 10 to a central processing unit (hereinafter simply referred to as a CPU) 1011, a ROM 1012 for storing a program executed by the CPU 1011, and a ROM 1012. A memory (Random Access Memory, hereinafter simply referred to as RAM) 1013 for temporarily storing a program and for temporarily storing data used by the program, and a scanner 1014 for reading an image from a document; A hard disk 1015 for storing image data read by the scanner 1014, a plotter 1016 for transferring an image to transfer paper based on the image data read by the scanner 1014, A timer 1017 for counting the timing for synchronizing the CPU 1011 with each unit of the apparatus; displaying various information such as a driving condition, an apparatus state, and an input condition of the image forming apparatus 1000; An operation display unit 1018 including a display device with a touch panel (Liquid Crystal Display, LCD) for performing input operations such as setting input, a non-volatile memory 1019 for storing setting data of the image forming apparatus 1000, and a computer via a network A network interface 1020 for transmitting and receiving control information such as a print command from the apparatus.
[0052]
In the present embodiment, the non-volatile memory 1019 stores in advance a decryption key used to decrypt the encrypted electronic signature stored in the card 100.
[0053]
The image forming apparatus 1000 also includes card ports 1110 and 1120 to which the above-mentioned memory card 100 is detachably mounted, and a memory card interface 1100 interposed between the card ports 1110 and 1120 and the system bus 10. ing.
[0054]
The card ports 1110 and 1120 read information stored in the ROM 102 and the flash memory 103 of the inserted memory card 100. The card ports 1110 and 1120 write data to the flash memory 103 of the memory card 100.
[0055]
Specifically, the memory card 100 storing the program to be executed by the image forming apparatus 1000 is inserted into one or both of the card port 1110 and the card port 1120, and the CPU 1011 reads and executes the program. Has become.
[0056]
Further, the CPU 1011 is configured to copy data between the memory cards 100 mounted on the two card ports 1110 and 1120. The duplication of this data will be described later in detail.
[0057]
The image forming apparatus 1000 is a printer that receives image data from a computer via a network interface 1020 and transfers the image to transfer paper by a plotter 1016, and an image read by a scanner 1014, in addition to constituting a copying machine. A scanner device that transmits data to a computer device via the network interface 1020, or a multifunction machine that forms the above-described copier, printer, and scanner may be configured.
[0058]
In the present embodiment, two card ports, the card port 1110 and the card port 1120, are provided, but the number of card ports is not limited to two, and may be three or more. In this case, the memory cards 100 corresponding to the number of card ports can be simultaneously inserted, and the programs recorded on the plurality of memory cards 100 can be executed simultaneously without replacing the memory cards 100.
[0059]
FIG. 4 is a diagram showing a memory configuration of the nonvolatile memory 1019. In the nonvolatile memory 1019, as shown in FIG. 4, a card information area 1019a for storing card information read from the ROM 102 of the memory card 100 is provided. The card information stored in the ROM 102 of the memory card 100 is information on the serial ID of the memory card 100 and the date and time of manufacture of the memory card 100, and is used as identification information for identifying each memory card 100. The card information area 1019a is used to store a plurality of card information held by a plurality of memory cards 100, such as a card information area 1, a card information area 2, a card information area 3,... Necessary and sufficient numbers are provided.
[0060]
Hereinafter, the operation of the image forming apparatus 1000 will be described with reference to a flowchart. In this embodiment, the image forming apparatus 1000 performs a card verification operation for verifying whether the plane data stored in the memory card 100 has been tampered with, and performs a data verification between the two memory cards 100 mounted on the card ports 1110 and 1120. A data duplication operation for duplicating the data is performed.
[0061]
First, with reference to the flowchart shown in FIG. 5, a card verification operation for verifying whether the plane data stored in the memory card 100 attached to either the card port 1110 or the card port 1120 has not been falsified will be described. .
[0062]
First, the CPU 1011 acquires card information stored in the ROM 102 of the memory card 100 (Step S1).
[0063]
Next, using the obtained card information and the decryption key stored in the nonvolatile memory 1019 in advance, the digital signature added to the plane data stored in the flash memory 103 of the memory card 100 and encrypted is decrypted, and the digital signature is decrypted. Then, the card information contained in is retrieved (step S2).
[0064]
Next, it is determined whether or not the card information obtained in step S1 matches the card information included in the electronic signature decrypted in step S2 (step S3). If the two card information do not match, the card verification operation ends.
[0065]
If the card information matches in the determination in step 3, it is checked whether the digital data decrypted in step S2 has falsified the plane data (step S4).
[0066]
Next, it is determined whether the collation result in step S is “falsified (plain data NG)” or “not falsified (plain data OK)” (step S5), and “falsified” ( If it is (step S5, NO), the card verification operation is terminated, and if it is "not falsified" (step S5, YES), the plane data stored in the memory card 100 is regarded as valid (step S5). Step S6). The plane data positioned as valid is executed by the CPU 1011.
[0067]
In the present embodiment, it is determined whether or not the two card information matches in step S3 based on whether or not the serial IDs included in the two card information match.
[0068]
Next, a data copying operation for copying data between the memory cards 100 mounted on both the card port 1110 and the card port 1120 will be described with reference to the flowchart shown in FIG. In order to distinguish between the card port 1110 and the memory card 100 mounted on the card port 1120, the memory card mounted on the card port 1110 is referred to as a memory card 100a, and the memory card mounted on the card port 1120 is referred to as a memory card 100b. This will be described below. Also, regarding the components of the memory card 100, for example, the ROM of the memory card 100a is denoted by the symbol of the ROM 102a, and the card information stored in the ROM 102a of the memory card 100a is denoted by card information a.
[0069]
First, the CPU 1011 performs the above-described card verification operation from step S1 to step S6 on the memory card 100a attached to the card port 1110, and determines whether the memory card 100a is positioned as valid (step S11). If not valid, the data copying operation is terminated (step S11, NO).
[0070]
If it is determined in step S11 that the memory card 100a is positioned as valid (step S11, YES), the CPU 1011 performs the above-described card verification operation from step S1 to step S6 to the card port 1120. The process is performed for the memory card 100b, and it is determined whether the memory card 100b is determined to be valid (step S12). If the memory card 100b is not valid, the data copying operation ends (step S, NO).
[0071]
When it is determined in step S12 that the memory card 100a is positioned as valid (step S12, YES), the CPU 1011 stores the plane data a stored in the flash memory 103a of the memory card 100a in the flash memory card 100b. A copy is made on the memory 103b (step S13). That is, the plane data a stored in the flash memory 103a of the memory card 100a is read, and the plane data a is written to the flash memory 103b of the memory card 100b.
[0072]
Next, the CPU 1011 reads out the electronic signature a stored in the ROM 102a of the memory card 100a and copies it on the flash memory 103b of the memory card 100b (Step S14).
[0073]
Next, the CPU 1011 reads out the card information b stored in the ROM 102b of the memory card 100b and copies it to the flash memory 103a of the memory card 100a (Step S15). The card information b copied to the flash memory 103a of the memory card 100a is provided as a "write history" indicating that the plane data a of the memory card 100a has been written to the memory card 100b.
[0074]
Next, the CPU 1011 reads out the card information a stored in the ROM 102a of the memory card 100a and stores it in any one of the card information area 109a (see FIG. 4) in the nonvolatile memory 1019, after the card information area 1 (step S16). ).
[0075]
Finally, the CPU 1011 prohibits the writing of the memory card 100a (step S17). More specifically, a semiconductor fuse in the memory card 100a is blown or the like to permanently disable writing to the flash memory 103a of the memory card 100a.
[0076]
FIGS. 7A and 7B respectively show data of the memory card 100a and the memory card 100b after the above-described data duplication operation is completed. Before the data duplication operation, the plane data a stored in the flash memory 103a of the memory card 100a in FIG. 7A and the digital signature a added to the encrypted plane data a are encrypted by the data duplication operation as shown in FIG. (B) is copied in the memory card 100b. Further, the card information b stored in the memory card 100b is written as a write history to the flash memory 103a of the memory card a by a data duplication operation. The memory card 100a after the data copying operation is write-protected.
[0077]
As described above, in the present embodiment, when the plane data a encrypted in association with the card information a of the memory card 100a is copied onto the memory card 100b, the card information a is stored in the nonvolatile memory of the image forming apparatus 1000. Since the data is copied on the memory 1019, the plane data a copied on the memory card 100b can be decrypted using the card information a copied on the non-volatile memory 1019. And falsification can be prevented, and the legitimately copied plane data a can be easily decoded.
[0078]
Further, since the card information b read from the memory card b is added to the memory card a, it is possible to leave a history as to which memory card the plane data a in the memory card a has been copied on, Card management can be facilitated.
[0079]
Further, since the serial ID included in the card information b is used as a history, it is possible to clearly know on which memory card the plane data a in the memory card a has been copied, and Management can be facilitated.
[0080]
Further, since the memory card 100a is write-protected after the plane data a of the memory card 100a is duplicated on the memory card 100b, the copy destination of the plane data a written as a history to the memory card 100a is any memory card. Can be prevented from being tampered with.
[0081]
In the present embodiment, the card information a, which is the identification information of the copy source memory card a, is stored in the non-volatile memory 1019, but the card information a is stored in the hard disk 1015 instead of the non-volatile memory 1019. You may do so. Further, the card information a may be stored in a volatile memory that is backed up by a battery.
[0082]
The image forming apparatus 1000 described in the present embodiment may cause a computer to execute the programs described above for the respective operations described above.
[0083]
That is, the step of reading the card information a recorded on the memory card 100a and the plain data a to which the electronic signature a encrypted by the card information a is added, and the step of reading the card information b recorded on the memory card 100b Reading the plane data b to which the digital signature b encrypted by the card information b is added, storing the card information a when the card information a is input, and storing the plain data a in the memory card. The program may be copied to the non-volatile memory 1019 and stored in the nonvolatile memory 1019.
[0084]
In that case, the first recording information copied on the second recording medium can be decrypted using the first identification information stored in the identification information storing step. It is possible to prevent falsification and to easily decode the duly copied recorded information.
[0085]
Further, in the present embodiment, an example in which the present invention is applied to an image forming apparatus has been described. However, the present invention is not limited to the image forming apparatus. The present invention can also be applied to a processing device.
[0086]
【The invention's effect】
According to the present invention, it is possible to prevent unauthorized duplication or falsification of a recording medium, and easily decode recording information of a recording medium that has been duly copied.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a configuration of an image forming apparatus according to an embodiment of the present invention.
FIG. 2 is a block diagram illustrating a configuration of a memory card mounted on the image forming apparatus according to the embodiment.
FIG. 3 is a diagram illustrating contents of data stored in a memory card mounted on the image forming apparatus according to the embodiment;
FIG. 4 is an explanatory diagram showing a configuration of a storage area of a nonvolatile memory according to one embodiment.
FIG. 5 is a flowchart illustrating a card verification operation of the image forming apparatus according to the embodiment.
FIG. 6 is a flowchart illustrating a data copying operation of the image forming apparatus according to the embodiment;
FIGS. 7A and 7B are diagrams showing contents of data stored in a memory card after a data copying operation.
[Explanation of symbols]
10 System bus 100, 100a, 100b Memory card 101, 101a, 101b Control circuit 102, 102a, 102b ROM
103, 103a, 103b Flash memory 1000 Image forming apparatus 1011 CPU
1012 ROM
1013 RAM
1014 Scanner 1015 Hard disk 1016 Plotter 1017 Timer 1018 Operation display unit 1019 Non-volatile memory 1020 Network interface 1100 Memory card interface 1110, 1120 Card port

Claims (11)

A first identification information identifying the first recording medium recorded on the first recording medium, and a first identification information added with a first electronic signature encrypted using the first identification information. First reading means for reading recorded information;
A second identification information for identifying the second recording medium recorded on the second recording medium, and a second identification information added with a second electronic signature encrypted using the second identification information. Second reading means for reading the recorded information;
Identification information storage means for storing the first identification information when the first identification information is input;
Control means for copying the first recording information read by the first reading means on the second recording medium, and for storing the first identification information in the identification information storage means. Characteristic image forming apparatus. The control means copies the first recording information read by the first reading means on the second recording medium and copies the second identification information on the first recording medium, The image forming apparatus according to claim 1, wherein the first identification information is stored in the identification information storage unit. The control means copies the first recording information read by the first reading means on the second recording medium and copies the second identification information on the first recording medium, The image forming apparatus according to claim 1, wherein the first recording medium is write-protected, and the first identification information is stored in the identification information storage unit. 4. The apparatus according to claim 1, wherein the first identification information and the second identification information are information unique to the first recording medium and the first recording medium. The image forming apparatus according to any one of the preceding claims. The image forming apparatus according to claim 1, wherein the identification information storage unit is a flash memory. The image forming apparatus according to claim 1, wherein the identification information storage unit is a hard disk. The image forming apparatus according to claim 1, wherein the identification information storage unit is a volatile memory that is backed up by a battery. A first identification information identifying the first recording medium recorded on the first recording medium, and a first identification information added with a first electronic signature encrypted using the first identification information. A first reading step of reading recorded information;
A second identification information for identifying the second recording medium recorded on the second recording medium, and a second identification information added with a second electronic signature encrypted using the second identification information. A second reading step of reading the recorded information;
An identification information storing step of storing the first identification information when the first identification information is input, and copying the first recording information read in the first reading step onto the second recording medium; And a control step of storing the identification information in the identification information storage means. The control step includes: copying the first recording information read in the first reading step onto the second recording medium, copying the second identification information onto the first recording medium, 9. The recording medium read / write program according to claim 8, wherein one identification information is stored in the identification information storage step. The control step includes: copying the first recording information read in the first reading step onto the second recording medium; and copying the second identification information onto the first recording medium. 10. The recording medium read / write program according to claim 8, wherein the recording medium is write-protected and the first identification information is stored in the identification information storage step. A computer-readable recording medium on which the recording medium read / write program according to claim 8 is recorded.

Images