JP2006259797A - Information processor, and storage means protecting device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processor preventing data leakage more inexpensively. <P>SOLUTION: A composite machine 10 being one type of the information processor is provided with a hard disk 30 which is detachable with respect to a device body part. A lock mechanism 32, and a main control part 26 controlling operation of the lock mechanism 32 are provided so as to prevent improper removal of the hard disk 30. The main control part 26 uses hardware common with a conventional control part controlling a whole of the composite machine. Electric power necessary for hard disk protection is supplied by a second supply path 24, but the second supply path generates electric power necessary for supply by using a power source part 20 the same as a first supply path 22 supplying electric power to the whole of the composite machine. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus provided with a storage means that is detachable from the apparatus main body, and a storage means protection device that prevents unauthorized removal of the storage means that is detachable from the main body of the information processing apparatus. .

  In an information processing apparatus, the safety of data handled is one of the most important problems. For this reason, various data security techniques have been conventionally proposed. Among them, there is a technique for preventing data leakage due to physical theft such as storage means for storing / holding data, such as a hard disk or a memory.

  For example, in the following Patent Document 1, a desorption monitoring device that monitors the removal of a storage device is provided in an information device including a removable storage device. This attachment / detachment monitoring device is provided with a key slot. When a key is inserted into the key slot, the monitoring state of the storage device is released, and the storage device can be removed. On the other hand, when the removal of the storage device is executed without inserting the key, the monitoring device determines that the storage device is improperly attached and detached, and performs processing (for example, encryption) on the data in the storage device. The monitoring device is supplied with power from a secondary battery provided separately from the main power supply of the information device so that the power is supplied even after the information device is turned off. Thereby, even after the main power supply of the information device is turned off, monitoring of the storage device can be continued, and theft can be more reliably prevented.

JP 2004-102665 A

  However, in the technique of Patent Document 1, it is necessary to provide a power supply (secondary battery) dedicated to the monitoring device and a control device dedicated to monitoring, which causes an increase in the cost of the entire information device. Further, in Patent Document 1, since power is constantly supplied to the monitoring device, power consumption increases, resulting in an increase in running cost of information equipment.

  Therefore, an object of the present invention is to provide an information processing apparatus and a storage means protection apparatus that can prevent data leakage at a lower cost.

  An information processing apparatus according to the present invention is an information processing apparatus provided with a storage unit that is detachable from the apparatus main body, and supplies power to the entire information processing apparatus, a protection device that prevents unauthorized removal of the storage unit First supply means for stopping power supply by a user power-off operation of the information processing apparatus by the user, and provided independently for the first supply means, A second supply means for supplying power to the protection device and the storage means, and a power generation means for generating power upon receipt of external power supply. The one supply means and the second supply means generate the power necessary for supply using the same power generation means.

  In a preferred aspect, the apparatus further includes a door that can be opened and closed, and a storage body that houses the storage device. The second supply means monitors the open / closed state of the door of the storage body and the power on / off state of the information processing apparatus. And a battery that constantly supplies drive power to the monitoring means, and the second supply means is the result of monitoring by the monitoring means that the door of the container is open, When is turned off, power supply to the protection device is started. The information processing apparatus further includes temporary storage means for storing data to be maintained even after the information processing apparatus is turned off, and the battery preferably supplies driving power to both the temporary storage means and the monitoring means. .

  In another preferred aspect, the protection device includes a lock mechanism that mechanically inhibits the detachment of the storage device, and a protection control unit that controls the operation of the lock mechanism, and the protection control unit detaches the storage device. The operation content acquisition means for acquiring the content of the detachment operation performed by the user to compare the content of the detachment operation obtained by the operation content acquisition means with the reference operation content set in advance, and the comparison result And determining means for determining whether or not the operation is a detachment operation by a legitimate user, and a lock control means for instructing the lock mechanism to release the lock when it is determined that the operation is a detachment operation by a legitimate user.

  In this case, the detachment operation includes at least a password input operation, and the determination unit determines whether the evacuation operation is performed by a legitimate user by comparing and comparing the password input by the user with a preset password. It is desirable to do. Preferably, the protection control means further includes data processing means for protecting at least a part of the data in the storage device by erasing or moving to another storage means prior to unlocking the lock mechanism.

  In another preferred aspect, the protection control means further includes a history storage means for storing a history of the detachment operation obtained by the operation content acquisition means. In another preferred aspect, the lock control unit instructs the lock mechanism to lock if the storage unit is mounted again after the storage unit is detached. The protection control unit is preferably the same as the main control unit that controls the entire information processing apparatus.

  Another storage means protection apparatus according to the present invention is a storage means protection apparatus that prevents unauthorized removal of a storage means that is detachable from the main body of the information processing apparatus, and prevents unauthorized removal of the storage means. And a protective supply means for supplying power to the protective device and the storage means when a predetermined warning condition including power-off of the information processing apparatus is satisfied. Electric power required for supply is generated using the same power generation means as the normal supply means for supplying electric power to the whole.

  According to the present invention, the power generation means for generating the operating power of the multifunction peripheral generates power for operating the protection device that prevents unauthorized removal of the storage means. Therefore, it is possible to provide an information processing apparatus with high data security at low cost as a whole.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a schematic block diagram of a multifunction machine 10 according to an embodiment of the present invention. In FIG. 1, a solid arrow indicates a control signal flow, and a broken arrow indicates a power flow.

  The multifunction machine 10 of the present embodiment is a complex printer having a plurality of functions such as a printing function, a copying function, and a facsimile function. The multifunction machine 10 also functions as an information processing apparatus that handles various data, and is also provided with a hard disk 30 for storing various data. The multifunction machine 10 of the present embodiment employs a characteristic configuration in order to prevent physical theft of the hard disk 30. Hereinafter, the multifunction machine 10 will be described in detail.

  The multifunction machine 10 includes a printer unit 12, a scanner unit 14, a communication unit 16, and the like that are units for realizing a printing function, a copying function, a facsimile function, and the like. A known technique can be applied to any of these. For example, the printer unit 12 can be composed of well-known members necessary for image printing, such as a photoreceptor, toner, and a paper conveyance path. Similarly, the scanner unit 14 and the communication unit 16 can have various configurations based on well-known techniques, but the description thereof is omitted here. All of these functional units 12, 14, and 16 are driven in accordance with an instruction from a main control unit 26 described later. In addition, the hard disk 30 is accessed as appropriate, and necessary data is read, corrected, and new data is added.

  The user interface 18 includes input means for receiving an instruction from the user and presentation means for presenting information to the user. As the input means, a keyboard, a mouse, a touch panel, or the like can be used. Moreover, a liquid crystal panel, a speaker, etc. can be utilized as a presentation means. The user interface 18 passes an instruction input from the user to the main control unit, and the main control unit executes various processes based on the instruction. And a control part passes the content of a process result to a presentation means as needed, and a presentation means shows this to a user.

  The power supply unit 20 is a power generation unit that receives AC power input from the outside and generates power necessary for driving the multifunction machine 10. The generated electric power is supplied to each part by the first supply path 22 or the second supply path 24. The first supply path 22 is a power supply path that supplies power to each unit necessary for using the multifunction machine 10, such as the main control unit 26, the user interface 18, the hard disk 30, and the functional units 12, 14, and 16. The first supply path 22 is turned on or off according to an on / off operation of a main switch (not shown) of the multifunction machine 10.

  On the other hand, the second supply path 24 is a power supply path that supplies power generated by the power supply unit 20 only to the main control unit 26, the hard disk 30, and the user interface 18. The second supply path 24 is provided logically independent of the first supply path 22 and starts power supply when it is determined that the operation of detaching the hard disk 30 has been started. Note that the second supply path 24 only needs to be logically independent of the first supply path 22, and may be partially physically common. That is, the second supply path 24 may partially use the same power line as the first supply path 22. Whether or not the power supply by the second supply path 24 is started, that is, whether or not the operation of detaching the hard disk 30 is started is determined by a power supply monitoring unit described later.

  The hard disk 30 functions as a storage means for storing and holding data, and is detachable from the multifunction device main body. In the present embodiment, the hard disk 30 is arranged inside a storage box 28 having an openable / closable door. Since the storage box 28 is fixed to the multifunction device main body, the door of the storage box 28 must be opened when the hard disk 30 is detached from the multifunction device main body. That is, the open / closed state of the door of the storage box 28 is one of important determination criteria in determining whether or not the hard disk 30 detachment operation is started.

  Therefore, in the present embodiment, an open / close sensor 34 that detects the open / close state of the door of the storage box 28 is provided, and the open / close state is detected. Although various types of sensors can be used as the opening / closing sensor 34, a switch that is turned on / off by an opening / closing operation of the door can be used as the opening / closing sensor as the simplest configuration. For example, if a micro switch is provided in a portion that comes into contact with the door when the door is closed, the open / closed state of the door can be detected based on the pressed state of the micro switch. Alternatively, the first contact is provided at a part of the door, and the second contact is provided at a portion that contacts the first contact when the door is closed, and the open / closed state of the door is determined by the continuity between the first contact and the second contact. It may be detected. Alternatively, door accessories such as screws or hinges used when closing the door may be used as part of the switch. In any case, the result detected by the open / close sensor 34 is passed to the main control unit 26.

  Further, a lock mechanism 32 that physically hinders the detachment of the hard disk 30 is provided so that the hard disk 30 cannot be easily removed even after the storage box door is opened. Various forms can be applied as the lock mechanism 32. For example, a claw member, a chain, or the like that restrains the hard disk 30 on the main body of the multifunction machine can be used. In any case, it is desirable to have such a rigidity that it cannot be easily broken. Further, the shape and arrangement position of the lock mechanism 32 are not particularly limited, but it is desirable that the lock mechanism 32 has such a shape and arrangement position that the hard disk 30 is also destroyed when the lock mechanism 32 is destroyed. This is to prevent leakage of data in the hard disk 30 when the hard disk 30 is stolen due to physical destruction of the lock mechanism 32. The operation of the lock mechanism 32 is electrically controlled, and the locked state is maintained unless a lock release instruction is issued from the main control unit 26 described later.

  In FIG. 1, one hard disk 30 and one storage box 28 are illustrated, but a plurality of hard disks 30 and storage boxes 28 may be provided. That is, a plurality of hard disks 30 may be provided inside the single storage box 28, or a single hard disk 30 may be provided inside the plurality of storage boxes 28. In any case, one storage box 28 is always provided with one or more open / close sensors 34, and one hard disk 30 is always provided with one or more lock mechanisms 32.

  The main control unit 26 controls the entire multifunction machine 10 and can be configured by, for example, a microcomputer including a CPU and a memory. The main control unit 26 exchanges control signals with each of the functional units 12, 14, 16 and the user interface 18 in order to execute processing in accordance with an instruction from the user, like the main control unit in the conventional multifunction peripheral. And control. Since a specific well-known technique can be used as a specific control method, description thereof is omitted here.

  The main control unit 26 of the present embodiment also performs operation control for preventing the hard disk 30 from being stolen. This will be described with reference to FIG. FIG. 2 is a block diagram showing a functional configuration around the main control unit 26 and the hard disk 30. In practice, the main control unit 26 is also provided with a control unit for controlling each of the functional units 12, 14, 16, etc., but these are not shown in FIG.

  The main control unit 26 is provided with a power management unit 36, a lock control unit 44, an operation content acquisition unit 40, a data processing unit 46, a nonvolatile memory 42, and the like for preventing the hard disk 30 from being stolen. Among these, the power management unit 36 outputs an instruction to the power supply unit 20 as necessary to control power supply to each unit. The power management unit 36 receives the detection result of the open / close sensor 34 and the power state of the multifunction machine 10. As described, the detection result of the open / close sensor 34 indicates the open / closed state of the door of the storage box 28. The power state of the multifunction device 10 indicates whether or not the user has turned off the power of the multifunction device, in other words, whether or not the power supply through the first supply path 22 is interrupted.

  Then, the power management unit 36 instructs the power supply unit 20 to start power supply in the second supply path 24 when the door of the storage box 28 is in the open state and the multifunction device power supply is in the off state. To do. The reason why the power supply is started under such conditions is that these conditions are conditions under which it is possible to determine that the operation of detaching the hard disk 30 has been started. That is, when the hard disk 30 is detached from the multifunction machine main body, the multifunction machine power is always turned off, and then the storage box 28 is opened. As described above, when the operation of removing the hard disk 30 is started, it is necessary to start supplying power to the lock control unit 44 and the like in order to prevent the unauthorized user from leaving. Therefore, the power management unit 36 instructs the power supply unit 20 to start power supply when the above conditions are satisfied.

  An example of the circuit configuration of the power management unit 36 is shown in FIG. The power management unit 36 includes a first circuit 50 connected to the sensor switch 34 a that functions as the open / close sensor 34, a second circuit 52 connected to the first supply path 22, and first and second circuits 50, 52. The determination circuit 54 determines whether or not to start power supply based on the output value.

  The first circuit 50 is connected to the battery 38 and the sensor switch 34a, and outputs a predetermined voltage signal to the determination circuit 54 when the sensor switch 34a is in a closed state. The sensor switch 34a is used as the door opening / closing sensor 34 of the storage box, and is a switch that is closed when the door is open. The battery 38 is a power source independent of the power source unit 20 and can always supply predetermined power to the first circuit 50 regardless of the power state of the multifunction machine 10. As a result, the first circuit 50 always outputs a signal (1) having a predetermined voltage value when the sensor switch 34a is in a closed state, in other words, when the door of the storage box 28 is in an open state. Conversely, when the door of the storage box 28 is closed, a signal (0) having a voltage value of 0 is output.

  The second circuit 52 is connected to the first supply path 22 and outputs 1 to the determination circuit when the first supply path 22 is in an energized state. In other words, the second circuit 52 outputs a predetermined 1 only when the multifunction machine power is on, and outputs 0 when the multifunction machine power is off.

  The determination circuit 54 includes a NOR circuit 54a and an AND circuit 54b. Output signals of the first circuit and the second circuits 50 and 52 are input to the NOR circuit 54a. The NOR circuit 54a outputs 1 only when the output values of the first circuit and the second circuits 50 and 52 are different from each other. The AND circuit 54b receives the output signals of the NOR circuit 54a and the first circuit 50, and outputs 1 only when the output values of the first circuit 50 and the NOR circuit 54a are both 1. The output value of the AND circuit 54b is output to the power supply unit 20 as the output value of the determination circuit 54 as a whole. That is, the determination circuit 54 outputs 1 only when the output values of the first circuit 50 and the second circuit 52 are different and the output value of the first circuit 50 is 1. In other words, 1 is output only when the door of the storage box 28 is in the open state (output value 1 of the first circuit 50) and the multifunction device power supply is in the off state (output value 0 of the second circuit 52). . The power supply unit 20 starts power supply through the second supply path 24 when a signal of 1 (a signal having a predetermined voltage value) is input from the determination circuit 54.

  As a result, the power management unit 36 having the circuit configuration as shown in FIG. 3 can always monitor the open / closed state of the storage box 28 and the power state of the multifunction machine 10, and the multifunction machine power off state. Thus, when the storage box 28 is opened, power supply via the second supply path 24 can be started immediately. Needless to say, the configuration of the power management unit 36 described above is merely an example, and other configurations may be used as long as the same function is achieved. The battery 38 in the power management unit 36 may be a battery backup battery of a volatile memory. That is, information processing apparatuses such as multifunction peripherals are usually provided with temporary storage means (memory) for storing data that should be maintained even after the power is turned off. In this temporary storage means, for example, setting information of the information processing device, FAX shortening information in the case of a multifunction machine, and the like are stored. These pieces of information are information that should be maintained even after the information processing apparatus is turned off. Information to be maintained even after the power is turned off is generally stored in a volatile memory such as SRAM, and the stored data is maintained by receiving power supply from the battery. Currently, many information processing apparatuses include such a volatile temporary storage unit and a battery that supplies power to the temporary storage unit. By using this existing battery for monitoring the open / closed state of the storage box, the number of parts can be reduced, and a great design change is not required.

  Returning to FIG. 2 again, the configuration of the main control unit 26 will be described. The main control unit 26 is activated in a warning mode when power is supplied through the second supply path 24, that is, when the door of the storage box 28 is opened while the multifunction machine power is off. The alert mode is a special operation mode in which security is enhanced to prevent unauthorized removal of the hard disk 30. When activated in the alert mode, each unit of the main control unit 26 executes only limited operations as described below.

  The operation content acquisition unit 40 of the main control unit 26 acquires the operation content performed by the user. Specifically, the input content input by the user via the user interface 18 is acquired. The detection result of the open / close sensor 34, that is, the open / closed state of the door of the storage box 28 is also sent to the operation content acquisition unit 40. The operation content acquisition unit 40 records the obtained operation content in the nonvolatile memory 42 as an operation history. By leaving such an operation history, even if the hard disk 30 is removed illegally, the operation content can be confirmed at a later date. The recorded operation contents include door opening / closing time, unlocking time, user account at that time, and the like. The operation content acquisition unit 40 also transmits the acquired operation content to the lock control unit 44.

  The lock control unit 44 controls the operation of the lock mechanism 32 based on the operation content acquired by the operation content acquisition unit 40. The lock control unit 44 compares the operation content acquired by the operation content acquisition unit 40 with a preset reference operation content, and determines whether or not the current user is a valid user. More specifically, the user is requested to input a password, and the password input by the user is compared with a password stored in advance. And when both correspond, it judges that it is operation by a legitimate user. After that, when a hard disk replacement request is made by a legitimate user, the lock control unit 44 instructs the lock mechanism 32 to release the lock. Furthermore, when the hard disk 30 is replaced by a legitimate user and the installation of a new hard disk 30 is detected, the lock control unit 44 instructs the lock mechanism 32 to lock again. On the other hand, if it is determined that the user is an unauthorized user, the lock mechanism 32 maintains the lock state without outputting the lock release instruction even if the hard disk replacement is requested. By executing password authentication in this manner, unlocking by an unauthorized user can be prevented, and as a result, unauthorized removal of the hard disk 30 can be prevented. Even if the password authentication is successful, it is possible to refer to the operation history stored in the non-volatile memory 42 and confirm whether or not authentication failures have continuously occurred before this authentication success. desirable. Then, if the authentication failure has occurred a predetermined number of times or more within a predetermined time, it is determined that the password is cracked by an unauthorized user, and thereafter, until a certain time (for example, several hours) elapses, It is desirable not to release the lock even if the authentication is successful.

  The data processing unit 46 protects or saves data in the hard disk 30 prior to unlocking the lock mechanism 32. Prior to releasing the lock mechanism 32, the lock control unit 44 always notifies the data processing unit 46 of the fact. When receiving this notification, the data processing unit 46 erases or moves at least part of the data in the hard disk 30 to another hard disk. By erasing or moving the data, it is possible to prevent data leakage even if the hard disk 30 is removed by an unauthorized person. When the data erasure is completed, the data processing unit 46 outputs a message to that effect to the power supply unit 20 and the lock control unit 44. Upon receiving the notification, the power supply unit 20 cuts off the power supply to the hard disk 30. Further, the lock control unit 44 outputs a lock release instruction when the data erasure or the like is completed.

  As is clear from the above description, in the present embodiment, the power supply and the main control unit, which are essential to the multifunction machine, are used as they are for protecting the hard disk. That is, almost no dedicated hardware is required to prevent hard disk theft. Therefore, it is possible to provide a multifunction machine with high safety at low cost. In addition, the design change can be saved greatly. In this embodiment, a battery that supplies power to the power management unit 36 is required as a dedicated power source for protecting the hard disk. This battery has a recognizable voltage value (for example, 5 V). It is sufficient if a signal can be generated, and a general-purpose battery can be used as it is. Therefore, it can be configured at a relatively low cost without causing a significant increase in cost.

  Next, the flow of hard disk replacement in the multifunction machine 10 will be described with reference to FIG. FIG. 4 is a flowchart showing the flow of hard disk replacement.

  The power management unit 36 constantly monitors the power state of the multifunction machine 10 and the door open / closed state (S10, S12). When the power is on or the door is open, the monitoring is continued and power supply is not started. On the other hand, when the multifunction machine 10 is turned off and the door of the storage box 28 is in the open state, it is determined that the hard disk 30 detachment operation has started. Then, power supply to the power supply unit 20 using the second supply path 24, that is, power supply to only a part of the multifunction machine 10 such as the main control unit 26, the hard disk 30, and the user interface 18 is started. Instruct (S14).

  When the main control unit 26 receives power supply from the second supply path 24, the main control unit 26 starts in the alert mode. In the alert mode, the operation contents that can be selected by the user are limited. That is, in the alert mode, only operations necessary for specific maintenance work such as hard disk replacement, replacement of other parts, and memory expansion work are accepted.

  The alert mode requires input of a password at the time of activation. When the password is input by the user, the lock control unit 44 compares and collates the input password with a previously stored password (S16). As a result, if the two match, it is determined that the operation is performed by the authorized user, and the subsequent operation reception is continued. On the other hand, if the passwords do not match, it is determined that the operation is performed by an unauthorized user. Then, the power supply is stopped and the protection operation is ended (S28). At this time, since the power supply is interrupted without outputting the lock release instruction by the lock control unit 44, the lock of the hard disk 30 by the lock mechanism 32 is naturally maintained. Therefore, it is difficult for an unauthorized user to steal the hard disk 30, and the safety of data is ensured.

  If the passwords match, the user is then inquired whether or not to replace the hard disk 30 (S18). If the user does not select hard disk replacement, power supply to the main control unit 26 and the hard disk 30 is stopped (S28). In this state, the user performs a desired operation such as component replacement or memory expansion. Also in this case, since the lock by the lock mechanism 32 is maintained, the safety of data is ensured.

  On the other hand, when replacement of the hard disk 30 is selected, data protection by the data processing unit 46 is executed (S20). That is, part or all of the data in the hard disk 30 is protected by a method such as erasing or moving.

  When the data protection operation is completed, the power supply unit 20 is instructed to stop the power supply to the hard disk 30. Further, the lock control unit 44 outputs a lock release instruction to the lock mechanism 32 (S22). Upon receiving this instruction, the lock mechanism 32 releases the lock. In this state, the user removes the hard disk 30 and installs a new hard disk 30. At this time, the data of the removed hard disk 30 is protected by erasure or movement. Therefore, even if the hard disk 30 is removed by an unauthorized user, data leakage can be prevented.

  If the operation content acquisition unit 40 confirms the re-installation of the hard disk 30 (S24), the operation content acquisition unit 40 passes the result to the lock control unit 44. Remounting of the hard disk 30 can be detected by a sensor or the like provided in the vicinity of the hard disk connector. When the lock control unit 44 receives notification from the operation content acquisition unit 40 that the hard disk has been remounted, the lock control unit 44 instructs the lock mechanism 32 to re-lock (S26). As a result, since the hard disk 30 is physically hindered from being detached, it is possible to prevent unauthorized removal. If re-locking is possible, power supply through the second supply path 24 is terminated after executing predetermined processing such as re-moving the moved data to the hard disk 30 (S28). Then, the power management unit 36 again monitors the door open / close state and the multifunction device power state.

  As described above, according to the present embodiment, since the lock is not released unless the password authentication is successful, it is possible to reduce the possibility of the unauthorized user leaving the hard disk 30. In addition, since data is protected by erasing or moving before unlocking, it is possible to prevent data leakage even if it is illegally removed.

  In the present embodiment, the main control unit 26 that controls the entire multifunction peripheral is used as a protection control unit that controls the operation of the lock mechanism 32. The power necessary for protecting the hard disk is generated by the power supply unit 20 that generates the driving power for the multifunction machine 10. This eliminates the need for a hard disk protection dedicated control means and power generation means, and as a result, hard disk protection can be realized at low cost.

  Further, according to the present embodiment, when the power supply by the second supply path 24 is not performed, the lock by the lock mechanism 32 is always maintained. Therefore, even if the power is forcibly cut off by pulling out the outlet, the unauthorized removal of the hard disk 30 can be prevented. Further, since the power supply by the second supply means is performed only when the door of the storage box 28 is opened, the power consumption as a whole is small, and as a result, the running cost can be kept low.

  Here, a multi-function device is used as an example of the information processing apparatus. However, as long as the information processing apparatus includes a detachable storage unit, the information processing apparatus naturally includes, for example, a personal computer. It can also be applied to various home appliances equipped with information processing functions. In addition, although a hard disk is mentioned as the storage means, a flash memory, a magnetic tape, an optical disk, or the like may be used as long as it can store and hold various data.

  In the present embodiment, the power supply start condition for the second supply path is that the multifunction machine is turned off and the storage box door is open, but naturally the power supply is started under other conditions. May be. For example, power supply in the second supply path may be automatically started when the multifunction device power is turned off.

1 is a schematic block diagram of a multifunction machine according to an embodiment of the present invention. It is a block diagram which shows the function structure of a main control part and a hard disk periphery. It is a figure which shows an example of the circuit structure of a power management part. It is a flowchart which shows the flow of hard disk replacement | exchange.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 MFP, 18 User interface, 20 Power supply part, 22 First supply path, 24 Second supply path, 26 Main control part, 28 Storage box, 30 Hard disk, 32 Lock mechanism, 34 Opening / closing sensor, 34a Sensor switch, 36 Power management unit, 38 battery, 40 operation content acquisition unit, 42 nonvolatile memory, 44 lock control unit, 46 data processing unit, 50 first circuit, 52 second circuit, 54 judgment circuit.

Claims (10)

An information processing apparatus having storage means that is detachable from the apparatus main body,
A protective device to prevent unauthorized removal of the storage means;
First supply means for supplying power to the entire information processing apparatus, the first supply means for stopping power supply by a power-off operation of the information processing apparatus by a user;
A second supply means that is provided independently of the first supply means and supplies power to the protection device and the storage means when a predetermined warning condition including power-off of the information processing device is satisfied;
Power generation means for receiving power from outside and generating power;
Have
An information processing apparatus, wherein the first supply unit and the second supply unit generate power necessary for supply using the same power generation unit. The information processing apparatus according to claim 1, further comprising:
Provided with a door that can be opened and closed, and a housing for housing the storage device.
The second supply means is
Monitoring means for monitoring the open / closed state of the door of the container and the power on / off state of the information processing device;
A battery that constantly supplies drive power to the monitoring means;
And the second supply means starts power supply to the protection device when the container door is open and the information processing apparatus is powered off as a result of monitoring by the monitoring means. An information processing apparatus characterized by that. The information processing apparatus according to claim 2, further comprising:
Temporary storage means for storing data to be maintained even after the information processing apparatus is powered off,
An information processing apparatus characterized in that the battery supplies driving power to both the temporary storage means and the monitoring means. The information processing apparatus according to any one of claims 1 to 3,
The protective device
A lock mechanism that mechanically obstructs the detachment of the storage device;
Protection control means for controlling the operation of the locking mechanism;
And the protection control means
Operation content acquisition means for acquiring the content of the detachment operation performed by the user to detach the storage device;
A determination unit that compares the content of the disengagement operation obtained by the operation content acquisition unit with a reference operation content set in advance, and determines whether the operation is a disengagement operation by a legitimate user based on the comparison result;
A lock control means for instructing the lock mechanism to release the lock when it is determined that the release operation is performed by a legitimate user;
An information processing apparatus comprising: The information processing apparatus according to claim 4,
The withdrawal operation includes at least a password input operation,
An information processing apparatus characterized in that the determination means determines whether or not the operation is a detachment operation by a legitimate user by comparing and collating a password input by the user with a preset password. An information processing apparatus according to claim 4 or 5,
The protection control means further includes:
An information processing apparatus comprising data processing means for protecting at least a part of data in a storage device by erasing or moving to another storage means prior to unlocking the lock mechanism. The information processing apparatus according to any one of claims 4 to 6,
The protection control means further includes:
An information processing apparatus comprising history storage means for storing a history of a detachment operation obtained by an operation content acquisition means. The information processing apparatus according to any one of claims 4 to 7,
An information processing apparatus, wherein the lock control means instructs the lock mechanism to lock if the storage means is mounted again after the storage means is detached. The information processing apparatus according to any one of claims 4 to 8,
The information processing apparatus characterized in that the protection control means is the same as the main control means for controlling the entire information processing apparatus. A storage means protection device for preventing unauthorized removal of a storage means that is detachable from the main body of the information processing apparatus,
A protective device to prevent unauthorized removal of the storage means;
A protection supply means for supplying power to the protection device and the storage means when a predetermined warning condition including power-off of the information processing device is satisfied;
Have
The storage supply protection device, wherein the protection supply means generates power necessary for supply using the same power generation means as the normal supply means for supplying power to the entire information processing apparatus.

Images