JP2006053848A - Information processor and program updating method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processor and a program updating method, capable of reducing defect caused when updating a program. <P>SOLUTION: A storage control part 42a stores a present program stored in a main program storage area 21 in a main program backup area 22 when an input device 1 accepts a new program, and afterwards, stores its new program in the main program storage area 21. A determining part 42b determines whether or not the new program in the main program storage area 21 has an identification marker. An updating control part 42c starts its new program when the determining part 42b determines that the new program has the identification marker, and starts the present program stored in the main program backup area 22 when the determining part 42b determines that the new program does not have the identification marker. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus and a program update method, and more particularly to an information processing apparatus and a program update method for performing update processing of a program such as firmware.

  Conventionally, an information processing apparatus that updates a program such as firmware is known.

  When receiving an update instruction, the information processing apparatus described in Patent Document 1 (Japanese Patent Laid-Open No. 10-83309) stores an old BIOS (Basic Input / Output System: control program group) before update in a spare storage area, Thereafter, the new BIOS is stored in the main storage area. When the new BIOS does not operate well, the information processing apparatus returns the old BIOS stored in the spare storage area to the main storage area.

  The server device described in Patent Document 2 (Japanese Patent Laid-Open No. 10-212183) compares the revision information (version information) of the new BIOS with the revision information of the current BIOS, and based on the comparison result, the validity of the new BIOS Check.

When it is determined that the new BIOS is a valid BIOS, the server device described in Patent Document 2 stores the current BIOS in the data storage device, and then stores the new BIOS in the flash ROM. If the new BIOS is not normally written to the flash ROM, the server device writes the current BIOS stored in the data storage device back to the flash ROM.
JP 10-83309 A Japanese Patent Laid-Open No. 10-212183

  When the new BIOS does not operate well, the information processing apparatus described in Patent Literature 1 returns the old BIOS stored in the spare storage area to the main storage area. For this reason, the information processing apparatus described in Patent Document 1 always starts a new BIOS. Therefore, even when the new BIOS is an unauthorized BIOS, the unauthorized BIOS is activated, and the information processing apparatus described in Patent Literature 1 may not be activated.

  The server device described in Patent Document 2 checks the validity of the new BIOS by comparing the revision information of the new BIOS with the revision information of the current BIOS. For this reason, when the new BIOS is an unauthorized BIOS that does not have revision information, the server device described in Patent Document 2 may not be able to accurately determine whether the new BIOS is an unauthorized BIOS.

  Therefore, when the new BIOS is an unauthorized BIOS, the unauthorized BIOS is activated, and there is a possibility that the server device described in Patent Literature 2 cannot be activated.

  An object of the present invention is to provide an information processing apparatus and a program update method capable of reducing problems that occur during program update.

  In order to achieve the above object, an information processing apparatus of the present invention is an information processing apparatus that performs a program update process, and includes a program storage area for storing a current program, a program backup area, a program processing area, An input unit that receives a new program, and when the input unit receives the new program, the current program stored in the program storage area is stored in the program backup area, and then the new program is stored in the program storage area A storage control unit that stores data in the storage unit, and a determination unit that determines whether or not the new program stored in the program storage area by the storage control unit has a marker indicating that the program is for the information processing device; When the determination unit determines that the new program has the marker Starts the new program after storing the new program stored in the program storage area in the program processing area, and when the determination unit determines that the new program does not have the marker Includes an update control unit that activates the current program after the current program stored in the program backup area is stored in the program processing area.

  The program update method of the present invention is a program update method performed by an information processing apparatus that performs a program update process, and the information processing apparatus includes a program storage area for storing a current program, a program backup area, A program processing area, and an input step for accepting a new program; and when the new program is accepted in the input step, the current program stored in the program storage area is stored in the program backup area, and then A storage control step for storing the new program in the program storage area, and whether the new program stored in the program storage area in the storage control step has a marker indicating that the program is for the information processing apparatus Judgment step to judge whether or not When it is determined in the determining step that the new program has the marker, the new program stored in the program storage area is stored in the program processing area and then the new program is started. When the determination step determines that the new program does not have the marker, an update for starting the current program after storing the current program stored in the program backup area in the program processing area Control steps.

  According to the above invention, it is determined whether or not the new program has a marker indicating that the program is for the information processing apparatus. If the marker is included in the new program, the new program is started. If the marker is not included in the new program, the current program is started. For this reason, it is possible to determine whether or not the new program is an unauthorized program based on whether or not the new program has a marker, thereby preventing the unauthorized program from being activated.

  In the information processing apparatus, the determination unit determines whether a new program stored in the program storage area has the marker in a specific area of the new program, and the update control unit When the determination unit determines that the new program has the marker in the specific area, the new program is stored after the new program stored in the program storage area is stored in the program processing area. When the determination unit determines that the new program does not have the marker in the specific area, the current program stored in the program backup area is stored in the program processing area. It is desirable to launch the current program later.

  In the program update method, the determination step determines whether a new program stored in the program storage area has the marker in a specific area of the new program, and the update control step includes: When it is determined in the determination step that the new program has the marker in the specific area, the new program stored in the program storage area is stored in the program processing area and then the new program is stored. In addition, when it is determined in the determination step that the new program does not have the marker in the specific area, the current program stored in the program backup area is stored in the program processing area. It is desirable to launch the current program later.

  According to the above invention, it is possible to determine whether or not the new program is an illegal program based on whether or not a marker exists in a specific area of the new program. For this reason, it becomes possible to further improve the accuracy of the determination as to whether or not the new program is an unauthorized program.

  In addition, when the current program stored in the program backup area is stored in the program processing area, it is preferable that the current program is also stored in the program storage area.

  According to the above invention, the current program stored in the program processing area is also stored in the program storage area. Therefore, the current program stored in the program storage area can be used for backup of the current program in the program processing area.

  The information processing apparatus may further include a reception unit that receives a restart command indicating that the restart is to be performed, and the determination unit may execute the determination when the reception unit receives the restart command. desirable.

  The program update method may further include a reception step of receiving a restart command indicating that restart is performed, and the determination step may execute the determination when the restart command is received in the reception step. desirable.

  According to the above invention, when a restart command is accepted, it is determined whether or not the new program has a marker. Therefore, it is possible to determine whether or not the new program has a marker only when necessary.

  According to the present invention, it is possible to prevent an unauthorized program from being activated.

  The reason is that based on whether or not the new program has a marker, it is determined whether or not the new program is an illegal program. If the marker is included in the new program, the new program is started. If the marker is not included in the new program, the current program is activated.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram showing an information processing apparatus according to an embodiment of the present invention.

  In FIG. 1, the information processing apparatus includes an input device 1, a storage unit 2, a memory 3, and a control unit 4. The storage unit (for example, flash ROM) 2 includes a main program storage area 21 and a main program backup area 22. The control unit 4 includes a program processing area (for example, RAM) 41 and a CPU 42. The CPU 42 includes a storage control unit 42a, a determination unit 42b, and an update control unit 42c. For example, the storage control unit 42a, the determination unit 42b, and the update control unit 42c are realized by the CPU 42 executing an operation program.

  The input device 1 as an input unit and a reception unit receives a new program and a restart command indicating that a restart is performed.

  The storage unit 2 stores a program currently executed by the information processing apparatus (specifically, the CPU 42), that is, a current program and a new program received by the input apparatus 1. In this embodiment, firmware is used as a program stored in the storage unit 2. The program stored in the storage unit 2 is not limited to firmware and can be changed as appropriate.

  The main program storage area 21 stores a current program or a new program accepted by the input device 1. The main program backup area 22 stores the current program stored in the main program storage area 21.

  The memory 3 stores a startup program 31.

  The program processing area 41 is used as a processing area for the CPU 42 and stores a program to be processed by the CPU 42.

  The CPU 42 reads an operation program, for example, a startup program 31 stored in the memory 3 and a program stored in the program processing area 41, and executes various functions by executing the read program.

  When the input device 1 receives a new program, the storage control unit 42 a stores the current program stored in the main program storage area 21 in the main program backup area 22, and then stores the new program in the main program storage area 21. To do.

  Based on the activation program 31, the determination unit 42b is an identification marker (for example, identification data such as a numerical value or a character string) indicating that the new program stored in the main program storage area 21 is a program for the information processing apparatus. ) Is determined.

  In the present embodiment, when the input device 1 receives a restart command, the determination unit 42b determines whether or not the new program stored in the main program storage area 21 has an identification marker.

  When the determination unit 42b determines that the new program has an identification marker, the update control unit 42c activates the new program, and the determination unit 42b does not have the identification marker. If it is determined, the current program stored in the main program backup area 22 is activated.

  Note that the determination unit 42b has an identification marker in a new program stored in the main program storage area 21 in a specific area of the new program (for example, a specific area such as the first, last or first 10 bytes of the new program). It is desirable to determine whether or not

  Further, when the determination unit 42b determines that the new program has an identification marker in the specific area, the update control unit 42c activates the new program, and the determination unit 42b determines that the new program is in the specific area. When it is determined that there is no identification marker, it is desirable to start the current program stored in the main program backup area 22.

  Next, the operation will be described.

  FIG. 2 is a flowchart for explaining the operation of the storage control unit 42a. Hereinafter, the operation of the storage control unit 42a will be described with reference to FIG.

  In step A1, when the input device 1 receives a new program, the storage control unit 42a stores the current program stored in the main program storage area 21 in the main program backup area 22.

  For example, when the input device 1 receives a new program, the storage control unit 42a first erases the data stored in the main program backup area 22, and then stores the current program stored in the main program storage area 21. The read current program is stored in the main program backup area 22. Subsequently, the storage control unit 42a deletes the current program in the main program storage area 21. The storage control unit 42a executes Step A2 after completing Step A1.

  In step A <b> 2, the storage control unit 42 a stores the new program accepted by the input device 1 in the main program storage area 21.

  FIG. 3 is a flowchart for explaining operations of the determination unit 42b and the update control unit 42c. Hereinafter, operations of the determination unit 42b and the update control unit 42c will be described with reference to FIG.

  In step B1, when the input device 1 accepts a restart command in a state where step A2 in FIG. 2 has been completed, the determination unit 42b determines whether or not the new program stored in the main program storage area 21 is an unauthorized program. Check.

  Specifically, the determination unit 42b is based on whether the new program stored in the main program storage area 21 has an identification marker in a specific area of the new program (for example, the top area of the new program). Thus, it is determined whether or not the new program is a malicious program.

  If an identification marker exists in a specific area of the new program, the determination unit 42b determines that the new program is a genuine program and there is no problem, and if there is no identification marker in the specific area of the new program, the new program Is a malicious program and is considered problematic.

  Note that when the identification marker 42b includes an identification marker somewhere in the new program, the determination unit 42b determines that the new program is a genuine program and there is no problem, and the identification marker is included anywhere in the new program. If not, the new program may be determined to be a malicious program and problematic.

  The determination unit 42b provides the determination result to the update control unit 42c. When the determination result is supplied from the determination unit 42b, the update control unit 42c executes Step B2.

  In step B2, the update control unit 42c executes step B3 when the determination result of the determination unit 42b is satisfactory, and executes step B5 when the determination result of the determination unit 42b is problematic.

  In step B <b> 3, the update control unit 42 c first erases the data stored in the program processing area 41, and then copies the new program stored in the main program storage area 21 to the program processing area 41. For example, after erasing data stored in the program processing area 41, the update control unit 42 c reads a new program stored in the main program storage area 21 and stores the read new program in the program processing area 41. To do. The update control unit 42c executes Step B4 after completing Step B3.

  In step B4, the update control unit 42c activates a new program stored in the program processing area 41. For example, the update control unit 42c restarts the CPU 42 so that the CPU 42 reads a new program stored in the program processing area 41 and executes the read new program.

  In step B5, the update control unit 42c first erases the data stored in the main program storage area 21, and then copies the current program backed up in the main program backup area 22 to the main program storage area 21. To do. For example, after deleting the data stored in the main program storage area 21, the update control unit 42 c reads the current program stored in the main program backup area 22, and reads the read current program into the main program storage area 21. To store.

  Subsequently, the update control unit 42c erases the data stored in the program processing area 41, and then copies the current program stored in the main program storage area 21 to the program processing area 41. Starts the current program stored by.

  For example, after deleting the data stored in the program processing area 41, the update control unit 42 c reads the current program stored in the main program storage area 21 and stores the read current program in the program processing area 41. Thereafter, the CPU 42 reads the current program stored in the program processing area 41 and restarts the CPU 42 so as to execute the read current program.

  According to the present embodiment, it is determined whether or not the new program has an identification marker. If the identification marker is included in the new program, the new program is activated and the identification marker is not included in the new program. If so, the current program is launched. For this reason, based on whether the new program has an identification marker, it is possible to determine whether the new program is an unauthorized program, thereby preventing the unauthorized program from being activated. It becomes possible.

  Further, when determining whether or not the new program is an illegal program based on whether or not an identification marker exists in a specific area of the new program, it is possible to determine whether or not the new program is an illegal program. The accuracy can be further improved. For example, when authentic firmware (new program) is created, even if the firmware version changes, if the identification marker is always placed at the same position in the firmware, it is determined whether the new firmware is an illegal program. Can be performed with high accuracy.

  The current program stored in the program processing area 41 is also stored in the main program storage area 21. Therefore, the current program stored in the main program storage area 21 can be used as a backup for the current program in the program processing area 41.

  In addition, when a restart command is accepted, if it is determined whether or not the new program has an identification marker, it is determined whether or not the new program has an identification marker only when necessary. Can be performed.

  Further, the determination unit 42b may determine whether the new program is a genuine program by appropriately combining the following determinations with the determinations described below.

  For example, when firmware data (new program data) is input to the information processing apparatus, when a checksum of firmware data (a value obtained by summing firmware data as numerical values) is input from the input device 1, The determination unit 42b calculates the checksum of the firmware data stored in the main program storage area 21, compares the calculation result with the checksum input from the input device 1, and confirms the validity of the firmware data.

  When the checksum of the firmware data is added to the beginning or end of the firmware data and is input to the information processing apparatus, the determination unit 42b determines the checksum of the data portion obtained by removing the added checksum from the firmware data. And the result of the calculation is compared with the added checksum to confirm the validity of the firmware data.

  In addition, when the firmware data size is determined in advance, and the firmware version changes, dummy data is attached so that the firmware data size does not change. The validity of the firmware data is confirmed by checking the size.

  It should be noted that the present invention can be applied to uses such as enhancing safety when updating a firmware program in software.

  In the embodiment described above, the illustrated configuration is merely an example, and the present invention is not limited to the configuration.

It is the block diagram which showed the information processing apparatus of one Example of this invention. 3 is a flowchart for explaining an operation of the information processing apparatus illustrated in FIG. 1. 3 is a flowchart for explaining an operation of the information processing apparatus illustrated in FIG. 1.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Input device 2 Storage part 21 Main program storage area 22 Main program backup area 3 Memory 31 Start-up program 4 Control part 41 Program processing area 42 CPU
42a Storage control unit 42b Judgment unit 42c Update control unit

Claims (8)

An information processing apparatus for performing program update processing,
A program storage area for storing the current program; and
Program backup area,
A program processing area;
An input unit for accepting a new program;
When the input unit accepts the new program, a storage control unit that stores the current program stored in the program storage area in the program backup area and then stores the new program in the program storage area;
A determination unit that determines whether or not the new program stored in the program storage area by the storage control unit has a marker indicating that the program is for the information processing apparatus;
When the determination unit determines that the new program has the marker, the new program stored in the program storage area is stored in the program processing area, and then the new program is started. When the determination unit determines that the new program does not have the marker, the current program stored in the program backup area is stored in the program processing area and then the current program is activated. An information processing device including a control unit. The information processing apparatus according to claim 1,
The determination unit determines whether a new program stored in the program storage area has the marker in a specific area of the new program,
When the determination unit determines that the new program has the marker in the specific area, the update control unit stores the new program stored in the program storage area in the program processing area. The new program is activated later, and when the determination unit determines that the new program does not have the marker in the specific area, the current program stored in the program backup area is An information processing apparatus that activates the current program after being stored in a processing area. The information processing apparatus according to claim 1 or 2,
The update control unit stores the current program in the program storage area when the current program stored in the program backup area is stored in the program processing area. The information processing apparatus according to any one of claims 1 to 3,
A reception unit that receives a restart command indicating that the restart is to be performed;
The determination unit is an information processing apparatus that executes the determination when the reception unit receives the restart command. A program update method performed by an information processing apparatus that performs a program update process,
The information processing apparatus includes a program storage area for storing a current program, a program backup area, and a program processing area,
An input step for accepting a new program;
When the new program is received in the input step, a storage control step of storing the current program stored in the program storage area in the program backup area and then storing the new program in the program storage area;
A determination step of determining whether or not the new program stored in the program storage area in the storage control step has a marker indicating that the program is for the information processing apparatus;
When it is determined in the determining step that the new program has the marker, the new program stored in the program storage area is stored in the program processing area and then the new program is started. When the determination step determines that the new program does not have the marker, an update for starting the current program after storing the current program stored in the program backup area in the program processing area A program update method including a control step. In the program update method of Claim 5,
The determining step determines whether a new program stored in the program storage area has the marker in a specific area of the new program;
In the update control step, when the determination step determines that the new program has the marker in the specific area, the new program stored in the program storage area is stored in the program processing area. The new program is activated later, and when it is determined in the determining step that the new program does not have the marker in the specific area, the current program stored in the program backup area is A program update method of starting the current program after storing in a processing area. In the program update method according to claim 5 or 6,
The update control step, in which when the current program stored in the program backup area is stored in the program processing area, the current program is also stored in the program storage area. The program update method according to any one of claims 5 to 7,
And further including a reception step of accepting a restart command indicating that the restart is to be performed,
The program update method, wherein the determination step executes the determination when the restart command is received in the reception step.

Images