JP2007102338A - Electronic apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent an electronic apparatus sharing parts from being modified illegally. <P>SOLUTION: If either nonvolatile memory is in an initial state, a CPU writes program identification information stored in advance to the initialized nonvolatile memory, and writes a copy flag indicating a new replacement. Before writing the program identification information to either nonvolatile memory, the CPU determines whether the other writing source memory has the copy flag written thereto, and prohibits rewriting the program identification information in response to a determination result (if the copy flag has been written). <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an electronic device apparatus that uses a common semiconductor substrate for a plurality of electronic devices, and selects and operates one of a plurality of operation programs according to a user's application.

  2. Description of the Related Art An electronic device apparatus that uses a common semiconductor substrate for a plurality of electronic devices and selects and operates one of a plurality of operation programs according to the user's application is known. ing.

For example, the above method can be applied to an electronic apparatus such as an ophthalmic optical apparatus that inspects an eye to be examined, and the ophthalmic optical apparatus has a configuration for measuring the cornea shape and eye refractive power of the eye to be examined. As a premise (see Patent Document 1), an eye refractive power measuring device or a cornea of the eye to be examined having a function of measuring eye refractive power of the eye to be examined (hereinafter referred to as ref measurement) based on an operation program selected at the time of initial setting. A corneal shape measuring device that has a function to measure the shape (hereinafter referred to as kerato measurement), or a combined ophthalmic optical device that has both a function to measure eye refractive power and a function to measure the corneal shape of the eye to be examined (refkerato measurement) A method for setting a device has been proposed. In addition, when using such a technique, there is also known a technique for preventing an apparatus from being illegally modified by using an unauthorized substrate. (See Patent Document 2).
Japanese Patent Laid-Open No. 10-216088 JP 2002-264441 A

  However, in the technique disclosed in Patent Document 2, the use of an unauthorized substrate can be suppressed. However, when the replaced substrate is in an initial state, discrimination information (identification information) is newly written. It will be. By transferring the newly written substrate to another apparatus in this way, it becomes possible to operate the same function in another apparatus.

  In view of the above-described problems, an object of the present invention is to provide an electronic device apparatus that can prevent unauthorized modification of an electronic device that is sharing parts.

  In order to solve the above problems, the present invention is characterized by having the following configuration.

(1) In the electronic device in which the function is set based on one operation program selected from a plurality of operation programs prepared corresponding to operation control of a plurality of functions, the selected operation program And a first storage unit comprising a non-volatile memory for storing the operation program identification information, and a non-volatile memory for storing the selected operation program identification information, which are exchanged independently of the first storage unit. A second storage unit composed of a non-volatile memory capable of
A control unit for controlling operation of the apparatus based on the selected operation program stored in the first storage unit, wherein the control unit is either the first storage unit or the second storage unit. An identification information writing means for writing the identification information of the selected operation program stored in one in the initial state together with copy discrimination information in the other storage section in the initial state; and the identification information writing means When the copy determination information is stored in the storage unit that is the writing source during the writing operation by the write operation, the write prohibition that prohibits writing the identification information of the selected operation program in the other storage unit And means.
(2) In the electronic device apparatus of (1), the control unit compares the identification information of the operation program stored in the first storage unit and the second storage unit when power is turned on, and is determined to have a difference. In this case, an operation prohibiting means for prohibiting the operation of the apparatus is provided.
(3) In the electronic device device of (2), calibration information necessary for calibration of the device is stored in the first storage unit and the second storage unit, and the first storage unit or the second storage unit The calibration information is also written in accordance with the identification information and copy discrimination information of the selected operation program during the writing operation by the identification information writing means when the identification information is replaced with the one in the initial state.
(4) In the control device of (2), the control unit includes a time measuring unit that measures a time after the copy determination information is written, and when a time measured by the time measuring unit elapses a predetermined time. The discrimination information is erased.
(5) In the electronic device in which the function is set based on one operation program selected from a plurality of operation programs prepared corresponding to operation control of a plurality of functions,
A first storage unit comprising a non-volatile memory for storing the selected operation program and identification information of the operation program; and a non-volatile memory for storing the identification information of the selected operation program, wherein the first storage unit A second storage unit composed of a non-volatile memory that can be replaced independently of the control unit, and a control unit for controlling the operation of the apparatus based on the selected operation program stored in the first storage unit. The control unit is in an initial state together with copy discrimination information, the identification information of the selected operation program stored in one when either the first or second storage unit is in an initial state The identification information writing means to be written in the other storage unit is compared with the identification information of the operation program stored in the first storage unit and the second storage unit when the power is turned on and the first storage unit If 憶部 and the copy identification information in the second storage unit is determined to be stored, characterized in that it comprises the operation inhibiting means for inhibiting the operation of the device.

  ADVANTAGE OF THE INVENTION According to this invention, the unauthorized modification | reformation with respect to the electronic device which is aiming at common use of components can be prevented.

  Embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram of an electronic device apparatus according to this embodiment. Reference numeral 1 denotes a control circuit that controls the entire electronic device. In this embodiment, the control circuit controls the entire ophthalmic optical device 100 (see FIGS. 2 and 3), which will be described later.

  On the semiconductor substrate 10a of the control circuit 1, a CPU (Central Processing Unit) 20 that controls the entire ophthalmic optical device, a non-volatile memory 21 (flash memory, hereinafter referred to as FM) that stores an operation program for determining the function of the device, A RAM 22 and a non-volatile memory (EEPROM) 23 for temporarily storing data are mounted, and these are configured so that signals can be exchanged via a data bus 25. A display control unit 41 for controlling the display screen of the display monitor 40 is mounted on the substrate 10a. Further, a USB connector 30 is attached to the board 10a, and an operation program can be installed or upgraded via a USB-connected flash memory 50 (hereinafter referred to as a USB memory). The USB memory 50 stores a plurality of operation programs.

  In addition, on the semiconductor substrate 10b, a driving circuit 26 incorporating a semiconductor element for driving each member (details will be described later) provided in the ophthalmic optical apparatus 100, a non-writable nonvolatile memory A memory (EEPROM) 27 is mounted. The non-volatile memory 27 can be replaced independently of the FM 21 because the board mounted on the FM 21 is different. The non-volatile memories 23 and 27 serve as storage means for storing identification information for identifying the selected operation program.

  The configuration of the ophthalmic optical apparatus 100 will be briefly described below. FIG. 2 is an external view of the ophthalmic optical apparatus 100, and includes a base 101, a face support unit 102 attached to the base 101, a moving base 103 movably provided on the base 1, and a moving base 103 is provided so as to be movable, and includes a measurement unit 104 that houses an optical system to be described later. The measuring unit 104 is moved in the XYZ directions with respect to the eye E by the XYZ driving unit 106. The movable table 103 is moved in the X direction and the Z direction on the base 1 by operating the joystick 105. Further, when the examiner rotates the rotary knob 105 a, the measuring unit 104 is moved in the Y direction by the Y driving of the XYZ driving unit 106. On the top of the joystick 105, a measurement start switch 105b is provided. The moving table 103 is provided with a display monitor 40 and a switch unit 108.

  FIG. 3 is a schematic configuration diagram illustrating the configuration of the optical system and the control system of the ophthalmic optical apparatus 100. Reference numeral 110 denotes a kerato measurement optical system (corneal shape measurement optical system), a projection optical system 110a for projecting an index for kerato measurement, and an imaging optical system 110b having an image sensor for capturing an index image projected onto the cornea Ec. Consists of. Reference numeral 111 denotes a reflex measurement optical system (refractive power measurement optical system), a light projecting optical system 111a for projecting a measurement light beam to the fundus Ef to be examined, and a light receiving optical for causing the light receiving element to receive a reflected light beam from the fundus Ef to be examined. It consists of system 111b. Reference numeral 112 denotes a fixation target projection optical system for fixing the eye E. The imaging optical system 110b also serves as an observation optical system for observing the anterior segment of the subject's eye, and the captured anterior segment image is displayed on the display monitor 40. Thereby, the alignment of the measurement unit 104 with respect to the eye E can be performed while viewing the display monitor 40.

  When performing kerato measurement, the ring light source 70 of the kerato measurement optical system 110 is turned on. The ring projection light emitted from the ring light source 70 forms a ring index image on the cornea Ec of the eye to be examined. The light of the ring index image is captured by the two-dimensional image sensor 74 via the dichroic mirror 80, the objective lens 71, the half mirror 72, and the imaging lens 73. Then, the CPU 20 measures the corneal shape of the eye E based on the shape of the ring index image detected by the two-dimensional image sensor 74.

  Further, when the reflex measurement is performed, the measurement light source 60 of the light projecting optical system 111a is turned on. The measurement light emitted from the light source 60 is projected onto the fundus oculi Ef via the relay lens 61, the hall mirror 62, the objective lens 63, and the dichroic mirror 80, and forms a spot-like point light source image on the fundus oculi Ef. Then, the light of the point light source image formed on the fundus oculi Ef is reflected / scattered and emitted from the eye E, collected by the objective lens 63, reflected by the hall mirror 62, then the relay lens 64, all The light is condensed again on the aperture of the light receiving stop 66 via the reflection mirror 65, converted into a substantially parallel light beam (in the case of a normal eye) by the collimator lens 67, taken out as a ring-shaped light beam by the ring lens 68, and converted into a ring image. The light is received by the dimension light receiving element 69. Then, the CPU 20 measures the eye refractive power of the eye E based on the shape of the ring image detected by the two-dimensional light receiving element 69. The detailed configuration and operation are not described since they are not related to the present invention (for details, refer to Japanese Patent Laid-Open No. 10-216088). The measurement result measured as described above is displayed on the display monitor 40.

  The XYZ driving unit 106, the joystick 105, the light source 70 and the image sensor 74 of the kerato measurement optical system 110, the light source 60 and the light receiving element 69 of the reflex measurement optical system 111 are controlled by the CPU 20 via the drive circuit 26 described above. Is done.

  In the ophthalmic optical apparatus 100 as described above, when a predetermined function is set as an initial setting at the time of shipment, the USB memory 50 shown in FIG. 1 is used. In the USB memory 50, a plurality of operation programs for operating the functions of the ophthalmic optical apparatus are stored for each function, and the function of the ophthalmic optical apparatus 100 is selected by selecting one operation program at the time of initial setting. Settings can be made. For example, when there is a program AR for operating as an eye refractive power measuring device having a reflex measurement function and a program ARK for operating as a combined ophthalmic optical instrument having both a reflex measurement function and a kerato measurement function, By selecting the program AR at the time of setting, the ophthalmic optical device 100 can be set as an eye refractive power measuring device. On the other hand, by selecting the program ARK at the initial setting, the ophthalmic optical apparatus 100 can be set as a combined ophthalmic optical apparatus having both the reflex measurement function and the kerato measurement function.

  FIG. 4 is a flowchart showing the processing procedure of this embodiment. When the power of the ophthalmic optical device 100 is turned on by the operator, the CPU 20 checks whether the USB memory 50 is inserted into the connector 30. When the USB memory 50 is detected, the CPU 20 activates program installation software. Then, the CPU 20 reads the nonvolatile memory 27, and if it is in an initial state (empty state), the CPU 20 shifts to an initial setting. At this time, the CPU 20 causes the display monitor 40 to display a password input screen, and when the correct password is input by the switch unit 108 from the operator, the operation program selection screen is displayed. If the nonvolatile memory 27 is not in the initial state, the program selection screen is displayed directly.

  Here, when one program is selected, the CPU 20 starts installing the selected operation program and stores it in the FM 21. After the installation program is completed, the function setting of the ophthalmic optical apparatus 100 as described above is completed by turning on the power again. The initial setting operation is usually performed by a manufacturer who manufactures the ophthalmic optical apparatus 100.

  If the USB memory 50 is not detected, the CPU 20 checks whether an operation program is written in the FM 21 (step A). Here, when the FM 21 is in an initial state (in this embodiment, only an installation program for software installation and upload is stored), the operation of the apparatus is stopped because there is no operation program to read. If the FM 21 is not in the initial state, the CPU 20 reads the nonvolatile memory 23 and the nonvolatile memory 27 and confirms whether both are in the initial state (the state in which the identification information of the selected operation program is not written).

  When the function setting of the ophthalmic optical device 100 is performed immediately after the initial setting, the nonvolatile memory 23 and the nonvolatile memory 27 are in the initial state. In that case, the CPU 20 writes the identification information (identification information corresponding to the set function) of the operation program selected in the initial setting in the nonvolatile memory 23, and further writes the written identification information in the nonvolatile memory 27. Migrate to If identification information is stored in both memories, the process proceeds to step B as it is.

  On the other hand, if both the memory 23 and the memory 27 are not in the initial state and one of them is in the initial state, the process proceeds to step F. In the case of proceeding to Step F, the initially set ophthalmic optical device 100 is purchased, and the substrate 10a or 10b is replaced with a new substrate (memory) for the purpose of failure of the substrate 10a or the substrate 10b at the purchase destination or fraudulent purpose. 23 or the memory 27 is replaced with an initial board). In this case, if the memory 23 is in the initial state, the CPU 20 writes the program identification information in the memory 23. Then, determination information for determining that the memory 23 is newly replaced (replicated) is written into the newly replaced memory 23 (a copy flag is written). If the memory 27 is in the initial state, the CPU 20 writes the program identification information stored in the memory 23 into the memory 27. Then, determination information for determining that the memory 27 is newly replaced (replicated) is written in the newly replaced memory 27.

  As described above, when one of the nonvolatile memories is in the initial state, the CPU 20 writes the program identification information already stored in the nonvolatile memory in the initial state and writes it in the nonvolatile memory in the initial state. Writes that the program identification information is copy information (in other words, it is not the nonvolatile memory provided on the board from the initial setting, but the non-volatile memory that has been replaced with a new one for some reason) Write a replication flag for this). Thereafter, the process proceeds to step B.

  Hereinafter, step B will be described. The CPU 20 compares the program identification information stored in the memory 23 with the program identification information stored in the memory 27. If there is a mismatch, the CPU 20 displays a message indicating a mismatch on the display monitor 40 so that the operation of the ophthalmic optical apparatus 100 is not performed. Thereby, remodeling as an ophthalmic optical apparatus having a different operation program can be prevented. When selecting and installing the above-mentioned operation program, a message indicating a mismatch is displayed on the display monitor 40 when the selected operation program and the program identification information stored in the memory 27 do not match. The operation of the apparatus may be prohibited (including the prohibition of installation of the operation program).

  If they match, the CPU 20 determines whether or not the above-described duplication flag is written in both the memory 23 and the memory 27 (step C). Here, when it is determined that the replication flag is written in both memories, a message indicating that the substrates 10a and 10b are newly replaced is displayed on the display monitor 40, and the operation of the ophthalmic optical apparatus 100 is performed. Do not let the. Further, when it is determined that the replication flag is not written in either memory, or the replication flag is written only in one of the memories, the CPU 20 regards it as OK, and the ophthalmic optical apparatus 100 Enable operation.

  In this way, using the fact that the program identification information is written when the memory 23 or the memory 27 initialized as described above is replaced with a new one, the ophthalmic optical apparatus 100 separately prepared, A combination of a separately prepared initial semiconductor substrate 10a and a new substrate 10b having a memory 27 in which program identification information is written, or a separately prepared initial substrate 10b and a new one. In combination with the substrate 10b having the memory 23 in which the program identification information is missing, or the substrate 10a having the memory 23 in which the program identification information is written after being replaced with a new one, the program identification information is replaced with a new one. In combination with the board 10b having the written memory 27, the function is illegally changed. (See, for example, FIGS. 5 and 6. FIG. 5 shows a case where unauthorized modification is made. FIG. 6 shows an unauthorized modification as shown in FIG. 5.) It is a figure showing a case where it prevents by using the above-mentioned duplication flag).

  In this case, before writing the program identification information in the memory 23 or 27 through the step F, it is determined whether or not the copy flag is written in the writing source memory, and based on the determination result (the determination information is written). Rewriting of program identification information may be prohibited (if it is done). In this case, it is possible to prevent the creation of a memory that may be used for unauthorized modification in advance.

  In addition, when the memory 23 is replaced with a new one, in this embodiment, since the board 10a having the FM 21 storing the operation program is replaced, it is necessary to select the program again and install it in the FM 21. Therefore, when the CPU 20 determines that the replication flag is written in the memory 27 provided on the different board 10b when the memory 27 at the time of installation is read (step G) using this, the display monitor 40 May display a message indicating that the boards 10a and 10b have been newly replaced, thereby prohibiting the operation of the apparatus (including prohibition of installation).

  In addition, program identification information and discrimination information (duplicate flag) are stored in the storage unit (the flash memory 21 in the present embodiment) itself for storing the operation program, and can be replaced with a new one independently of this. The present invention can also be applied to a combination of the memory 27 that stores program identification information. In this case, a type in which a storage unit and an IC connector are mounted on the semiconductor substrate 10a and the memory 27 is mounted on the semiconductor substrate 10a via the IC connector is included.

  Note that the time after the duplication flag is written in the memory 23 or the memory 27 may be measured, and when the predetermined time has elapsed, the determination information may be deleted. That is, the time measurement program is stored in the FM 21, and the CPU 20 starts time measurement after the copy flag is written in the memory 23 or the memory 27. For example, the cumulative time during which the power is turned on after the duplication flag is written is measured, and the cumulative time is stored in the memory 23 and the memory 27 when the power is turned off. Then, when a predetermined time (for example, the accumulated time reaches one week) has elapsed after the start of time measurement, the replication flag written in the memory 23 or the memory 27 is deleted. As a result, the memory 23 or the memory 27 is determined as a memory having no duplication flag after a predetermined time has elapsed. As a result, when one of the memory 23 and the memory 27 having undergone the initial setting is replaced with a new one, and after the predetermined time has elapsed, it is necessary to replace the other memory with a new one. In addition, it is possible to avoid the prohibition of operation. That is, the examiner can replace the other memory with a new one after a predetermined time has elapsed after replacing one of the memory 23 and the memory 27 with a new one. In this way, it becomes possible to replace the memory for a valid reason that is not illegal. It should be noted that the predetermined time from when the copy flag is written to the memory until it is erased may be determined in consideration of the balance between preventing fraud and allowing a valid exchange. Note that the time to be measured includes measuring the number of times the ophthalmic optical apparatus 100 is used (the number of times of measurement), the number of times of power-on, etc.

  When the ophthalmic optical apparatus 100 is operated, it is necessary to store calibration data (calibration data of the apparatus) relating to eye refractive power or corneal shape measurement in the ophthalmic optical apparatus 100. In this case, a model eye serving as a reference for calibration is prepared, and the apparatus is calibrated so that a measurement error does not occur between the eye refraction value (or corneal curvature) of the model eye and the actual measurement value. Here, the CPU 20 may write the acquired calibration data in the nonvolatile memories 23 and 27 together with the identification information of the operation program. In this way, even if one non-volatile memory is replaced with a new one, the calibration data stored in the other non-volatile memory only needs to be written into the initial non-volatile memory. The trouble of performing again can be saved.

It is a block diagram of the electronic device apparatus which concerns on this embodiment. It is an external view of an ophthalmic optical apparatus. It is a schematic block diagram explaining the structure of the optical system and control system of ophthalmic optical equipment. It is the flowchart which showed the process sequence of this embodiment. It is a figure explaining the case where unauthorized modification is made. It is a figure which shows the case where the illegal modification shown in FIG. 5 is prevented by writing a duplication flag.

Explanation of symbols

1 Control circuit 10a, 10b Semiconductor substrate 20 CPU
21 Nonvolatile memory (FM)
23 Nonvolatile memory (EEPROM)
27 Nonvolatile memory (EEPROM)
DESCRIPTION OF SYMBOLS 100 Ophthalmic optical instrument 110 Kerat measurement optical system 111 Ref measurement optical system

Claims (5)

In the electronic device in which the function is set based on one operation program selected from a plurality of operation programs prepared corresponding to operation control of a plurality of functions,
A first storage unit comprising a non-volatile memory for storing the selected operation program and identification information of the operation program;
A non-volatile memory for storing identification information of the selected operation program, a second storage unit comprising a non-volatile memory that can be replaced independently of the first storage unit;
A control unit for performing operation control of the device based on the selected operation program stored in the first storage unit,
The controller is
When either the first storage unit or the second storage unit is in the initial state, the identification information of the selected operation program stored in one is written in the other storage unit in the initial state together with the copy determination information Information writing means;
When the copy determination information is stored in the storage unit serving as a writing source during the writing operation by the identification information writing unit, the identification information of the selected operation program is written in the other storage unit. And a write prohibiting means for prohibiting the electronic device. 2. The electronic device apparatus according to claim 1, wherein the control unit compares identification information of operation programs stored in the first storage unit and the second storage unit when power is turned on, and determines that there is a difference. An electronic device apparatus comprising operation prohibiting means for prohibiting the operation of the electronic device. 3. The electronic device device according to claim 2, wherein calibration information necessary for calibration of the device is stored in the first storage unit and the second storage unit, and the first storage unit or the second storage unit is in an initial state. An electronic device apparatus, wherein the calibration information is also written in accordance with the identification information and copy discrimination information of the selected operation program during a writing operation by the identification information writing means when the identification information is replaced. 3. The control device according to claim 2, wherein the control unit includes a time measuring unit that measures a time after the copy determination information is written, and the determination is performed when a predetermined time has elapsed. An electronic apparatus apparatus characterized by erasing information. In the electronic device in which the function is set based on one operation program selected from a plurality of operation programs prepared corresponding to operation control of a plurality of functions,
A first storage unit comprising a non-volatile memory for storing the selected operation program and identification information of the operation program;
A non-volatile memory for storing identification information of the selected operation program, a second storage unit comprising a non-volatile memory that can be replaced independently of the first storage unit;
A control unit for performing operation control of the device based on the selected operation program stored in the first storage unit,
The controller is
When either the first storage unit or the second storage unit is in the initial state, the identification information of the selected operation program stored in one is written in the other storage unit in the initial state together with the copy determination information Information writing means;
When the power is turned on, the identification information of the operation program stored in the first storage unit and the second storage unit is compared, and it is determined that the copy determination information is stored in the first storage unit and the second storage unit. An electronic device apparatus comprising an operation prohibiting means for prohibiting the operation of the apparatus.

Images