JP2014115803A - Information processor, control method of information processor, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To appropriately restrict rewriting of firmware in accordance with a state of an information processor.SOLUTION: A fiscal printer 16 has such a configuration that processing relating to fiscal data cannot be executed before storage of a taxpayer identification number data D1 into a taxpayer identification number storage area 50b being a storage area where data is written and then the written data cannot be rewritten, while the processing relating to fiscal data can be executed after the storage of the data D1, and the fiscal printer 16 is provided with a dip switch 35 for switching between a state for allowing transition to a firmware rewriting mode and a state for inhibiting the transition. In response to an instruction for transition to the firmware rewriting mode, it is determined whether the taxpayer identification number data D1 is stored or not, and the transition of the fiscal printer 16 to the firmware rewriting mode is made regardless of the state of the dip switch 35 if the taxpayer identification number data D1 is not stored.

Description

  The present invention relates to an information processing apparatus that stores fiscal data, a control method for the information processing apparatus, and a program for controlling the information processing apparatus.

  Conventionally, an information processing apparatus (electronic cash register, receipt printer) that is provided in a store that sells products and stores fiscal data including information on transactions (information on sales, information on taxation, etc.) is known. (For example, refer to Patent Document 1).

Japanese Patent Laid-Open No. 05-120567

In cases where fiscal data is stored, such as the information processing device described above, unauthorized rewriting of the firmware, which is the basic control program of the device, will lead to tampering with fiscal data, and other fraud related to fiscal data, thus preventing this. There is a need to. On the other hand, at the manufacturing stage before shipping of the information processing apparatus, there is a need to be able to easily rewrite firmware in order to cope with program correction and testing.
The present invention has been made in view of the above-described circumstances, and an object thereof is to appropriately limit firmware rewriting according to the status of an information processing apparatus.

In order to achieve the above object, the present invention is an information processing apparatus for storing fiscal data, comprising a storage area in which the written data cannot be rewritten after the data is written, and predetermined information is stored in the storage area. Before the processing is performed, the processing related to the fiscal data is disabled. On the other hand, after the predetermined information is stored, the processing related to the fiscal data is performed and the firmware is rewritten. If a switch for switching between a state that permits the transition of the firmware and a state that does not permit the transition is provided and there is an instruction to transition to the mode for rewriting the firmware, whether or not the predetermined information is stored in the storage area If it is determined and not stored, the firmware is rewritten regardless of the state of the switch. Characterized in that row.
According to this configuration, in a situation where the information processing device functions as a device that performs processing related to fiscal data, only when the switch to the mode for rewriting firmware is permitted by switching the switch. Therefore, it is possible to shift to a mode for rewriting firmware, and it is possible to suppress unauthorized rewriting of firmware. In addition, in a situation where the information processing device does not function as a device that performs processing related to fiscal data, including the manufacturing stage, it is possible to shift to a mode for rewriting firmware regardless of the state of the switch. Firmware can be easily rewritten, and work efficiency in the manufacturing stage can be improved. That is, firmware rewriting can be appropriately restricted according to the status of the information processing apparatus. Furthermore, since the predetermined information is stored in a storage area in which the written data cannot be rewritten after the data is written, once the information processing device functions as a device for performing processing related to the fiscal data, the switch is switched. Thus, only when it is in a state of permitting the transition to the mode for rewriting the firmware, the mode can be shifted to the mode for rewriting the firmware, and unauthorized rewriting of the firmware can be suppressed more effectively.

In the invention, it is preferable that the switch is a dip switch mounted on a circuit board provided in a case of the apparatus main body.
According to this configuration, the dip switch can be operated only after the circuit board is exposed after removing the case of the apparatus main body. As a result, it is possible to prevent a third party who does not have specialized knowledge from operating the dip switch, and to more effectively prevent unauthorized rewriting of the firmware.

Further, the present invention is characterized in that the fiscal data is stored in the storage area.
Here, fiscal data is data that must be prevented from being tampered with. And according to the said structure, since both fiscal data and predetermined information are memorize | stored in the memory area which cannot rewrite the written data after data writing, the case where a dedicated memory area is provided for each It is possible to prevent both data from being falsified later while reducing the cost.

In addition, the present invention is characterized in that an instruction to shift to the firmware rewriting mode is issued by a specific control command from a connected external device.
According to this configuration, it is possible to shift to a firmware rewriting mode only when there is an appropriate switch switch and a specific control command is input from an external device. Rewriting can be suppressed.

In order to achieve the above object, the present invention is a method for controlling an information processing apparatus comprising a storage area that stores fiscal data and cannot rewrite the written data after the data is written. Before the predetermined information is stored, the process related to the fiscal data cannot be executed.On the other hand, after the predetermined information is stored, the process related to the fiscal data can be executed. Provided with a switch that switches between a state that permits a transition to a mode for rewriting and a state that does not permit a transition, and when there is an instruction to transition to a mode for rewriting the firmware, It is determined whether or not information is stored, and if it is not stored, regardless of the switch state, the firmware Characterized in that it shifts to the mode in which the place of trees.
According to this control method, in a situation where the information processing device functions as a device that performs processing related to fiscal data, when switching to a mode for rewriting firmware by switching a switch is permitted. Only, it is possible to shift to a mode in which firmware is rewritten, and unauthorized rewriting of firmware can be suppressed. In addition, in a situation where the information processing device does not function as a device that performs processing related to fiscal data, including the manufacturing stage, it is possible to shift to a mode for rewriting firmware regardless of the state of the switch. Firmware can be easily rewritten, and work efficiency in the manufacturing stage can be improved. That is, firmware rewriting can be appropriately restricted according to the status of the information processing apparatus. Furthermore, since the predetermined information is stored in a storage area in which the written data cannot be rewritten after the data is written, once the information processing device functions as a device for performing processing related to the fiscal data, the switch is switched. Thus, only when it is in a state of permitting the transition to the mode for rewriting the firmware, the mode can be shifted to the mode for rewriting the firmware, and unauthorized rewriting of the firmware can be suppressed more effectively.

In order to achieve the above object, the present invention includes a storage area that stores fiscal data and cannot rewrite the written data after the data is written, and before the predetermined information is stored in the storage area. The processing relating to the fiscal data is made impossible to execute, and after the predetermined information is stored, the processing relating to the fiscal data is configured to be executable, and the transition to the mode for rewriting the firmware is permitted. Is a program executed by a control unit that controls an information processing apparatus provided with a switch for switching between a state to be enabled and a state not to be permitted, and the control unit is instructed to enter a mode for rewriting the firmware. If the predetermined information is stored in the storage area, it is determined whether or not the predetermined information is stored. Regardless of state, characterized in that shifting to a mode for rewriting the firmware.
According to this program, in the situation where the information processing device functions as a device that performs processing related to fiscal data, only when the switch to the mode for rewriting firmware is permitted by switching the switch. Therefore, it is possible to shift to a mode for rewriting firmware, and it is possible to suppress unauthorized rewriting of firmware. In addition, in a situation where the information processing device does not function as a device that performs processing related to fiscal data, including the manufacturing stage, it is possible to shift to a mode for rewriting firmware regardless of the state of the switch. Firmware can be easily rewritten, and work efficiency in the manufacturing stage can be improved. That is, firmware rewriting can be appropriately restricted according to the status of the information processing apparatus. Furthermore, since the predetermined information is stored in a storage area in which the written data cannot be rewritten after the data is written, once the information processing device functions as a device for performing processing related to the fiscal data, the switch is switched. Thus, only when it is in a state of permitting the transition to the mode for rewriting the firmware, the mode can be shifted to the mode for rewriting the firmware, and unauthorized rewriting of the firmware can be suppressed more effectively.

  According to the present invention, firmware rewriting can be appropriately restricted according to the status of the information processing apparatus.

It is a figure which shows the structure of the information processing system which concerns on this embodiment. It is a flowchart which shows operation | movement of a fiscal printer.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram illustrating a configuration of an information processing system 1 according to the present embodiment.
As shown in FIG. 1, the information processing system 1 includes a fiscal printer 16 (information processing device). The fiscal printer 16 includes a host computer 15 (external device) and a fiscal data reading device 40 (external device). Can be connected.
The fiscal printer 16 issues a receipt under the control of the host computer 15 and stores fiscal data input from the host computer 15.
Fiscal data is information relating to sales transactions of products (information relating to sales, information relating to taxable amount, etc.), which is information predetermined as information to be stored. This fiscal information is used, for example, as information to be referred to by the national institution for grasping the actual state of the transaction at the store when the national institution such as the government collects taxes from the store. In the present embodiment, there are two types of fiscal data: write receipt data 54, which will be described later, and daily sales data 53.
In the following explanation, the receipt output by the fiscal printer 16 is a receipt issued at the checkout counter of the store at the time of customer accounting, and the subtotal amount T1 for each purchased product (the unit price and the purchase price of each product) Amount calculated by product of quantity), total amount T2 (amount calculated by sum of subtotal amount T1), and payment amount T3 (total amount T2 is added to taxes such as consumption tax) Is recorded).

As shown in FIG. 1, the fiscal printer 16 includes three substrates: a management substrate 20 (circuit substrate), a printer substrate 21, and a sub substrate 22.
The management board 20 includes a main control unit 25 (control unit), a PC connector 26a, a fiscal connector 26b, a communication IC 27, a ROM 28, an SRAM 29, an RTC 30, an EJ memory 31, and an EJ memory control unit 32. A buffer IC 33, a DIP switch 35, and a communication module 37 are mounted.
The main control unit 25 centrally controls each unit of the fiscal printer 16 and includes a CPU and other peripheral circuits. The PC connector 26 a is a connector to which the host computer 15 is connected during normal use of the fiscal printer 16. The host computer 15 outputs a control command for causing the fiscal printer 16 to perform an operation related to the receipt issuance via the PC connector 26a, and outputs daily sales data 53 described later as fiscal information. The fiscal connector 26b is a connector to which the fiscal data reading device 40 is connected. The fiscal data reading device 40 is a device for reading data stored in the EJ memory 31 and the fiscal memory 50, which will be described later, and has obtained special permission from, for example, a person related to a national organization (government, etc.). Only a person can have it. The host computer 15 described above is maintained connected to the PC connector 26a. However, unlike the host computer 15, the fiscal data reading device 40 is connected to the fiscal connector 26b each time data is read. The
The communication IC 27 is connected to the PC connector 26a and the fiscal connector 26b, and transmits / receives data to / from the host computer 15 and the fiscal data reading device 40 under the control of the main control unit 25. The ROM 28 is a rewritable memory such as an EEPROM and stores various data for the main control unit 25 to perform various controls in a nonvolatile manner so as to be rewritable. The ROM 28 stores firmware that is a basic control program of the fiscal printer 16 so that it can be loaded. The SRAM 29 is a volatile memory that functions as a work area for the CPU of the main control unit 25, and temporarily stores various data. The RTC 30 (Real-time clock) outputs data indicating the current date and time (year / month / day, time) to the main control unit 25. The SRAM 29 and the RTC 30 are supplied with backup power from the battery 34 even when the power of the fiscal printer 16 is turned off.

The EJ memory 31 is a NAND flash memory and can store a large amount of data. In particular, in the present embodiment, the EJ memory 31 is an MLC type NAND flash memory. As is well known, an MLC type NAND flash memory can be increased in capacity at a lower cost than an SLC type. Therefore, as will be apparent later, as a memory for storing the write receipt data 54 that may frequently cause processing related to writing, and that the size of the stored data may increase rapidly. Is suitable.
In the EJ memory 31, the storage area in which the write receipt data 54 and the data associated therewith are written can be rewritten after the data is written by software and / or hardware means. It functions as a memory that cannot be used. That is, data can be written only once to the area indicated by one address on the storage area. As a result, the fiscal data written in the EJ memory 31 is prevented from being edited later, and the fiscal data stored in the EJ memory 31 is prevented from being falsified. The EJ memory control unit 32 includes a CPU, and reads, writes, and erases data with respect to the EJ memory 31 under the control of the main control unit 25. The buffer IC 33 controls a buffer provided to improve the efficiency of reading and writing data to the EJ memory 31.
The EJ memory 31, the EJ memory control unit 32, and the buffer IC 33 are sealed to the management board 20 by an epoxy resin, and the EJ memory 31 is physically removed from the management board 20. The data stored in is prevented from being falsified.

The dip switch 35 is a switch for switching between a state in which the shift to the mode for rewriting the firmware stored in the ROM 28 is permitted and a state in which the transition is not permitted. Here, if the firmware is rewritten illegally, there is a possibility that the written receipt data 54 or the daily sales data 53 may be falsified or otherwise illegal. Further, since the firmware is a group of programs for realizing the basic functions of the fiscal printer 16, if the firmware is not rewritten normally, the fiscal printer 16 may be adversely affected. Based on this, the fiscal printer 16 according to the present embodiment has a mode for rewriting firmware (hereinafter referred to as “firmware rewriting mode”) as an operation mode, and only when the mode is shifted to the mode. The firmware can be rewritten. The dip switch 35 is a switch for switching between a state where the transition to the firmware rewriting mode is permitted and a state where the transition is not permitted. Specifically, when the DIP switch 35 is turned on, a predetermined signal is input to a predetermined port of the CPU of the main control unit 25, and a transition to the firmware rewriting mode is permitted, and the OFF state is set. In this case, the shift to the firmware rewriting mode is not permitted.
Here, the management board 20 is a circuit board provided in the case of the apparatus main body of the fiscal printer 16, and in order to expose the management board 20, it is necessary to remove the case. In particular, in the present embodiment, when the case is removed by unauthorized means, this is detected, and corresponding processing, for example, the fiscal printer 16 is not operated thereafter, or information to that effect is sent to the host computer 15, The data is output to the fiscal data reading device 40 or output to an external server device via the communication module 37. As a configuration for detecting that the case is removed by unauthorized means, for example, when a hole is drilled in the case with a drill or the like, the energization of a part of the signal line stretched around the case is cut off, and the main control unit There are a configuration in which a signal to that effect is input to a port of 25 CPUs, and a configuration in which vibration or tilt exceeding a threshold is detected by a vibration sensor, tilt sensor or the like. Thereby, unauthorized access to the management board 20 is suppressed.
The dip switch 35 is provided on the back side of the management board 20 and is difficult to physically access, for example, a place where the management board 20 is exposed only after the management board 20 is removed by an appropriate procedure. As a result, a third party who does not have specialized knowledge regarding the fiscal printer 16 is prevented from switching the dip switch 35 for an unauthorized purpose, and the operation mode is rewritten by the third party for an unauthorized purpose. Rewriting firmware after switching to the mode is suppressed.
The communication module 37 is a module for communicating with an external device such as a server device managed by the government or the like via a network such as a telephone network or the Internet. The standard for communication with an external device may be anything such as a GPRS standard.

In addition, a printer control unit 45 is mounted on the printer substrate 21, and the printer control unit 45 controls the recording mechanism 46 based on a control command output from the host computer 15 and issues a receipt.
The recording mechanism 46 includes a thermal head 46a that records an image by applying heat to the printing surface of the roll paper, a transport mechanism 46b that transports the roll paper, a cutting mechanism 46c that cuts the roll paper at a predetermined position, and the like. Under the control of the printer control unit 45, these mechanisms and devices are operated to issue a receipt.
The printer board 21 is provided with a printer-side connector 42, and the management board 20 is provided with a management-side connector 43. By connecting the printer-side connector 42 and the management-side connector 43, management is performed. The substrate 20 and the printer substrate 21 are connected.
In this embodiment, when a receipt is issued, first, the host computer 15 connected to the fiscal printer 16 generates a control command and outputs the generated control command to the main control unit 25 via the PC connector 26a. The main control unit 25 to which the control command is input outputs the input control command to the printer control unit 45.

A fiscal memory 50 and a fiscal memory control unit 51 are mounted on the sub-board 22.
The fiscal memory 50 is a so-called serial flash memory using an element employing a serial bus. As is well known, the serial flash memory is characterized in that the stored data is more reliable and the number of times data can be written is larger than that of the NAND flash memory.
Fiscal memory 50 stores fiscal writing date / time data 52 and daily sales data 53, which will be described later.
In the fiscal memory 50, it is a storage area in which daily sales data 53 and data associated therewith are written. The daily sales data storage area 50a and the taxpayer number storage area 50b function as a memory in which the written data cannot be rewritten after writing the data by software and / or hardware means. . That is, data can be written only once to the area indicated by one address on the storage area. Thereby, the fiscal data written in the fiscal memory 50 is prevented from being edited later, and the fiscal data stored in the fiscal memory 50 is prevented from being falsified.
The fiscal memory control unit 51 includes a CPLD (Complex programmable logic device) which is a device in which a programmable logic circuit is written, and reads / writes data from / to the fiscal memory 50 under the control of the main control unit 25. .
The fiscal memory 50 and the fiscal memory control unit 51 are sealed to the sub-board 22 by an epoxy resin. For example, the fiscal memory 50 is physically removed from the sub-board 22 and then stored in the fiscal memory 50. Tampering with stored data is prevented.

Next, the write receipt data 54 stored in the EJ memory 31 and the daily sales data 53 stored in the fiscal memory 50 will be described. As described above, these data correspond to fiscal data.
The write receipt data 54 is data indicating information recorded on a receipt issued by the fiscal printer 16 and is data predetermined as data to be stored. For example, on the receipt, for each product purchased by the customer, information indicating the product, information indicating the unit price of the product, information indicating the number of the product purchased, information indicating the purchase price of each product, all products In the case where information indicating the total purchase price is recorded, and data indicating these information is predetermined as data to be stored, the data indicating these information corresponds to the write receipt data 54 .
As described above, in the present embodiment, when a receipt is issued by the fiscal printer 16, a control command is generated by the host computer 15, this control command is output to the main control unit 25, and the control command is further transmitted to the main control unit. 25 to the printer control unit 45. At that time, the main control unit 25 extracts information to be stored as the write receipt data 54 from the control command, generates the write receipt data 54 based on the extracted information, and generates the generated write receipt data 54. Is stored in the EJ memory 31 by controlling the EJ memory control unit 32.
In the present embodiment, the written receipt data 54 includes a subtotal amount T1, a total amount T2, and a payment amount T3 in the receipt. That is, as described above, the receipt issued by the fiscal printer 16 according to the present embodiment records the subtotal amount T1, the total amount T2, and the payment amount T3. At least these three pieces of information are extracted from the command and stored in the EJ memory 31 as write receipt data 54.

Here, when the main control unit 25 writes the write receipt data 54 in the EJ memory 31, the main control unit 25 acquires data indicating the current date and time (date + time) from the RTC 30, and indicates the date based on the acquired data. The EJ writing date / time data 55 is generated, and the writing receipt data 54 and the EJ writing date / time data 55 are written in association with each other. That is, each of the write receipt data 54 is stored in the EJ memory 31 in association with the EJ write date / time data 55 which is data indicating the date / time written in the EJ memory 31.
Furthermore, when writing the write receipt data 54, the main control unit 25 obtains a hash value based on a predetermined hash function using the write receipt data 54 as original data, and the obtained hash value is unique to the fiscal printer 16. The EJ digital signature 56 as a digital signature is generated by encrypting with the private key, and the write receipt data 54 and the EJ digital signature 56 are written in association with each other. That is, each of the write receipt data 54 is stored in the EJ memory 31 in association with the EJ digital signature 56 generated based on each data.
An apparatus (for example, a server apparatus managed by the government) that examines and inspects fiscal data stored in the fiscal data reading device 40 and other fiscal printers 16, when each fiscal printer 16 generates the EJ digital signature 56. And a public key corresponding to the secret key of each fiscal printer 16, and the write receipt data 54 received from a certain fiscal printer 16 and the corresponding EJ digital signature 56. Based on the above, it is possible to detect alteration of the written receipt data 54.
Note that one reason for storing the EJ writing date / time data 55 and the writing receipt data 54 in association with each other is that, depending on the country, this is required by law or regulation.

The daily sales data 53 is the total sales of “1 day” obtained by the accounting in which the receipt is issued by the fiscal printer 16. In the present embodiment, “one day” is a period from opening to closing in a store to which the information processing system 1 is applied.
That is, the total data is data related to information obtained by totaling the accounting information (sales amount) included in the receipt.
The host computer 15 controls the fiscal printer 16 for each transaction performed at the checkout counter and issues a receipt, and cumulatively stores the sales amount for each transaction (= payment amount T3 in the receipt). Then, after closing the store, the host computer 15 is based on the sales amount for each transaction stored cumulatively at a predetermined timing (for example, when a person in charge has instructed or at a predetermined time). The total sales for “one day” related to the corresponding fiscal printer 16 are calculated, and the daily sales data 53 is generated based on the calculated total sales. The generated daily sales data 53 is stored in the main control unit 25. Output. When the daily sales data 53 is input, the main control unit 25 controls the fiscal memory control unit 51 to write the daily sales data 53 into a predetermined storage area of the fiscal memory 50.
Here, when writing the daily sales data 53 to the fiscal memory 50, the main control unit 25 causes the RTC 30 to output data indicating the current date and time, and acquires and acquires the date and time of writing based on this data. The daily sales data 53 is written in the fiscal memory 50 in a state where the fiscal writing date / time data 52 (aggregated data), which is data indicating the date / time, and the daily sales data 53 are associated with each other. That is, each of the daily sales data 53 is stored in the fiscal memory 50 in association with the fiscal writing date / time data 52 which is data indicating the date / time written in the fiscal memory 50.
Further, when writing the daily sales data 53, the main control unit 25 generates a fiscal digital signature 58 that is a digital signature based on the daily sales data 53, and generates the daily sales data 53 and the fiscal digital signature 58. Write in association. That is, each of the daily sales data 53 is stored in the fiscal memory 50 in association with the fiscal digital signature 58 generated based on each data.
In this example, the hash function and secret key used when generating the fiscal digital signature 58 are the same as those used when generating the EJ digital signature 56, but they may be different. Good.
As described above, in the present embodiment, the fiscal writing date / time data 52 and the daily sales data 53 are stored in association with each other, but this is required by law or regulation in some countries. Because.

On the other hand, the host computer 15 includes a host control unit 44. The host control unit 44 includes a CPU, ROM, RAM, and other peripheral circuits, and centrally controls each unit of the host computer 15, and includes an application execution unit 44a and a printer driver execution unit 44b. Yes.
The application execution unit 44a reads out and executes an application program stored in a predetermined storage unit included in the host computer 15, thereby generating application output data including information to be recorded in a receipt to be issued. The output data is output to the printer driver execution unit 44b. For example, the application execution unit 44a specifies a product code of a product purchased by a customer based on an input value from a bar code reader (not shown), accesses a predetermined database, and uses the product code to Various information including the subtotal amount, the total amount, and the payment amount are acquired by acquiring the unit price and the product name, and the application output data is generated based on the acquired information.
The printer driver execution unit 44b reads out and executes a printer driver stored in a predetermined storage unit included in the host computer 15, thereby executing a command of the fiscal printer 16 based on the application output data input from the application execution unit 44a. In accordance with the specification, a control command for causing the fiscal printer 16 to perform a series of operations related to the receipt issuance is generated and output to the fiscal printer 16.
The control command includes, for example, a command for instructing start of image recording, a command for instructing to drive the thermal head 46a, a command for instructing to feed a roll paper by a predetermined amount in the transport direction, and a cutting mechanism 46c. Various commands such as a command for instructing cutting of the roll paper are included.

By the way, as described above, the fiscal printer 16 according to the present embodiment has a firmware rewrite mode as an operation mode, and the firmware can be rewritten only during the transition to the mode. Then, the dip switch 35 for switching between the state permitting the transition to the firmware rewriting mode and the state not permitting is mounted on the management board 20, and the firmware rewriting is performed only when the transition to the firmware rewriting mode is permitted. Transition to mode is possible. As described above, the dip switch 35 is provided in a place that is difficult for a third party who does not have specialized knowledge to access, and effectively prevents the third party from rewriting firmware for illegal purposes. Has been.
As described above, in the situation where the fiscal printer 16 is installed in a store or the like and functions as a device that executes processing related to fiscal data, unauthorized rewriting of firmware is accurately prevented.
On the other hand, the fiscal printer 16 has a need to be able to easily rewrite firmware in order to cope with program correction and testing in the manufacturing stage before shipment. If it is necessary to switch the dip switch 35 every time the firmware is rewritten in the manufacturing stage, the dip switch 35 is provided in a place that is difficult to access, so that efficient work in the manufacturing stage is possible. It is because it inhibits.
Based on the above, the fiscal printer 16 executes the following processing.

First, an operation performed before the fiscal printer 16 according to the present embodiment is installed in a store or the like and functions as an apparatus that performs processing related to fiscal data will be described. Performing this work is a prerequisite for the operation of the fiscal printer 16 described later.
The fiscal printer 16 according to the present embodiment is an apparatus assumed to be installed in the following countries and regions. That is, a unique taxpayer number is assigned by a government or other organization related to the country or region, and data indicating the given taxpayer number (predetermined information; hereinafter referred to as “taxpayer number data D1”). The law (for example, the so-called fiscal law) or the like determines that the fiscal printer 16 can execute processing related to fiscal data including storage of fiscal data only when it is stored in the fiscal printer 16. Country, region. This taxpayer number is given only to legitimate fiscal printers 16 that meet the standards set by the government and the like.
Then, after the fiscal printer 16 is shipped, a taxpayer number is given by the government or other organization before it is installed in a store or the like and functions as a device that performs processing related to fiscal data. Taxpayer number data related to the given taxpayer number is a taxpayer number storage area formed in the fiscal memory 50 under the control of the host computer 15, the fiscal data reading device 40, a server device managed by the government, etc. 50b.
In this way, the fiscal printer 16 stores the taxpayer number data D1 after shipping and before use in the store. In other words, the fiscal printer 16 is in a manufacturing stage before shipping. In this case, the taxpayer number is not given by the government or the like, and therefore the taxpayer number data D1 is not stored in the taxpayer number storage area 50b.
When the host computer 15 instructs the issuance of receipt or storage of fiscal data, the main control unit 25 of the fiscal printer 16 determines whether or not the taxpayer number data D1 is stored in the taxpayer number storage area 50b. If it is determined and not stored, the processing is not executed. With such a configuration, the fiscal printer 16 is prevented from executing processing related to fiscal data when the taxpayer number data D1 is not stored.
As described above, the taxpayer number storage area 50b is a storage area in which the written data cannot be rewritten after the data is written by software and / or hardware. For this reason, once the taxpayer number data D1 is written in the taxpayer number storage area 50b, the data cannot be modified. In this embodiment, the taxpayer number data D1 is not stored in a dedicated memory, but is stored in the fiscal memory 50 that stores the daily sales data 53. Accordingly, the taxpayer ID data D1 can be appropriately stored in the storage area where the written data cannot be rewritten after the data is written, using the existing fiscal memory 50.
In some cases, it is stipulated by law or the like that the taxpayer number data D1 should be stored in such a non-rewritable storage area.

FIG. 2 is a flowchart showing the operation of the fiscal printer 16, particularly the operation when an instruction to shift to the firmware rewriting mode is given.
First, the main control unit 25 of the fiscal printer 16 gives an instruction to shift to the firmware rewriting mode from an external device such as the host computer 15, the fiscal data reading device 40, or a server device capable of communication via the communication module 37. It is monitored whether or not a specific control command to be input is input (step SA1).
As described above, in this embodiment, the instruction to shift to the firmware rewriting mode is issued by the control command from the connected external device. Because of this configuration, it is possible to shift to the mode for rewriting firmware only when the DIP switch 35 is appropriately switched and a specific control command is input from an external device, and the position of the DIP switch 35 is known. Even a third party who does not know the data structure of the specific control command, the rule of the parameter, etc. cannot rewrite the firmware, and can more effectively suppress the illegal rewriting of the firmware.
When a specific control command is input (step SA1: YES), the main control unit 25 determines whether or not the taxpayer number data D1 is stored in the taxpayer number storage area 50b (step SA2).
When the taxpayer number data D1 is not stored in the taxpayer number storage area 50b (step SA2: NO), the main control unit 25 shifts the operation mode to the firmware rewrite mode (step SA3).
As described above, in this embodiment, when the taxpayer number data D1 is not stored, the state of the dip switch 35 is not determined, that is, regardless of the state of the dip switch 35, the shift to the firmware rewriting mode is performed. In response to the instruction, the firmware rewrite mode is entered. This is due to the following reason.
That is, the fact that the taxpayer number data D1 is not stored means that, as described above, the taxpayer number is not assigned to the fiscal printer 16, and the fiscal printer 16 performs processing related to the fiscal data at a store or the like. It is not the situation that is functioning as. In other words, the fiscal printer 16 is in a situation including a manufacturing stage before shipment. Under such circumstances, since the situation such as falsification of fiscal data cannot occur, in the fiscal printer 16 according to the present embodiment, regardless of the state of the dip switch 35, in response to an instruction to shift to the firmware rewriting mode, Shifting to the firmware rewrite mode, the work efficiency in the manufacturing stage is greatly improved.

On the other hand, when it is determined in step SA2 that the taxpayer number data D1 is stored in the taxpayer number storage area 50b (step SA2: YES), the main control unit 25 determines whether or not the dip switch 35 is on. (Step SA4).
When the dip switch 35 is turned on (step SA4: YES), the main control unit 25 shifts the operation mode to the firmware rewriting mode (step SA3). As described above, since the dip switch 35 is provided at a position where it is difficult for a third party who does not have specialized knowledge about the fiscal printer 16 to operate, the firmware rewrite mode is maintained with the dip switch 35 turned on. When there is an input of a specific control command for instructing the transition to, there is a very high probability that the firmware is properly rewritten by a person having a legitimate authority.
On the other hand, when it is determined in step SA4 that the dip switch 35 is not on (step SA4: NO), the main control unit 25 ends the process without shifting the operation mode to the firmware rewriting mode (step SA5). . This appropriately prevents a third party who cannot switch the DIP switch 35 from rewriting the firmware for an unauthorized purpose.

As described above, the fiscal printer 16 (information processing apparatus) according to the present embodiment stores the taxpayer number data D1 (in the taxpayer number storage area 50b, which is a storage area in which the written data cannot be rewritten after the data is written). Before the predetermined information) is stored, the processing related to the fiscal data is impossible to execute. On the other hand, after the taxpayer number data D1 is stored, the processing related to the fiscal data can be executed. . In addition, the management board 20 of the fiscal printer 16 is provided with a dip switch 35 for switching between a state where the shift to the firmware rewriting mode is permitted and a state where the shift is not permitted. Then, the main control unit 25 of the fiscal printer 16 determines whether or not the taxpayer number data D1 is stored in the taxpayer number storage area 50b when there is an instruction to shift to the firmware rewriting mode. If not stored, the operation mode is shifted to the firmware rewriting mode regardless of the state of the dip switch 35.
According to this configuration, in a situation where the fiscal printer 16 functions as a device that performs processing related to fiscal data in a store or the like, the switch to the firmware rewriting mode is permitted by switching the dip switch 35. Only in this case, it is possible to shift to the firmware rewriting mode, and it is possible to suppress unauthorized rewriting of firmware. In addition, in a situation where the fiscal printer 16 is not functioning as a device that performs processing related to fiscal data, including the manufacturing stage, the firmware rewriting mode can be entered regardless of the state of the dip switch 35. Can be easily rewritten, and work efficiency can be improved in the manufacturing stage. That is, firmware rewriting can be appropriately restricted according to the status of the fiscal printer 16.
Further, since the taxpayer number data D1 is stored in the taxpayer number storage area 50b, which is a storage area in which the written data cannot be rewritten after the data is written, the fiscal printer 16 temporarily performs processing related to the fiscal data. After functioning as a device, it is possible to enter the firmware rewrite mode only when the switch to the firmware rewrite mode is permitted by switching the DIP switch 35, and the illegal rewriting of the firmware can be performed more effectively. Can be suppressed.

In the present embodiment, the dip switch 35 is mounted on the management board 20 (control circuit) provided in the case of the apparatus main body. More specifically, the dip switch 35 is provided on the back side of the management board 20 and is difficult to physically access, for example, a place where the management board 20 is exposed only after the management board 20 is removed by an appropriate procedure. ing.
As a result, a third party who does not have specialized knowledge regarding the fiscal printer 16 is prevented from switching the dip switch 35 for an unauthorized purpose, and the operation mode is rewritten by the third party for an unauthorized purpose. Rewriting firmware after switching to the mode is suppressed. That is, according to the above configuration, the dip switch 35 can be operated only after the circuit board is exposed after removing the case of the apparatus main body. Thereby, it is possible to suppress a third party who does not have specialized knowledge from operating the DIP switch 35, and to more effectively prevent unauthorized rewriting of the firmware.

In the present embodiment, the taxpayer number data D1 is stored in the fiscal memory 50, which is a memory in which daily sales data 53 as fiscal data is stored.
According to this configuration, both the fiscal data and the taxpayer ID data D1 are stored in a storage area in which the written data cannot be rewritten after the data is written. It is possible to prevent both data from being falsified later while reducing the cost.

In the present embodiment, the instruction to shift to the firmware rewriting mode is issued by a control command from the connected external device.
Because of this configuration, it is possible to shift to the mode for rewriting firmware only when the DIP switch 35 is appropriately switched and a specific control command is input from an external device, and the position of the DIP switch 35 is known. Even a third party who does not know the data structure of the specific control command, the rule of the parameter, etc. cannot rewrite the firmware, and can more effectively suppress the illegal rewriting of the firmware.

The above-described embodiment is merely an aspect of the present invention, and can be arbitrarily modified and applied within the scope of the present invention.
For example, in the above-described embodiment, the write receipt data 54 and the fiscal writing date / time data 52 are exemplified as the fiscal information (fiscal data), but it goes without saying that the fiscal information is not limited to these data. Further, for example, each functional block shown in FIG. 1 can be arbitrarily realized by cooperation of hardware and software, and does not suggest a specific hardware configuration. In addition, the function of each functional block may be provided in another externally connected device, and for the various operations described, by executing a program stored in an externally connected storage medium, You may make it perform.

  DESCRIPTION OF SYMBOLS 1 ... Information processing system, 15 ... Host computer (external device), 16 ... Fiscal printer (information processing apparatus), 20 ... Management board, 25 ... Main control part (control part), 35 ... Dip switch (switch), 37 ... Communication module 40 ... Fiscal data reading device (external device) 50 ... Fiscal memory (storage area) 50b ... Taxpayer number storage area (storage area) 53 ... Daily sales data (Fiscal data) 54 ... Writing Receipt data (Fiscal data), D1... Taxpayer number data (predetermined information).

Claims (6)

An information processing apparatus for storing fiscal data,
After writing data, it has a storage area that can not be rewritten,
A configuration in which the processing related to the fiscal data cannot be executed before the predetermined information is stored in the storage area, and the processing related to the fiscal data can be executed after the predetermined information is stored age,
A switch is provided to switch between a state that allows transition to a mode for rewriting firmware and a state that does not allow
When there is an instruction to shift to the mode for rewriting the firmware, it is determined whether or not the predetermined information is stored in the storage area, and if not, regardless of the state of the switch, An information processing apparatus that shifts to a mode for rewriting the firmware.   The information processing apparatus according to claim 1, wherein the switch is a dip switch mounted on a circuit board provided in a case of the apparatus main body.   The information processing apparatus according to claim 1, wherein the fiscal data is stored in the storage area.   4. The information processing apparatus according to claim 1, wherein an instruction to shift to a mode for rewriting the firmware is given by a specific control command from a connected external device. A method of controlling an information processing apparatus having a storage area that stores fiscal data and cannot rewrite the written data after the data is written,
A configuration in which the processing related to the fiscal data cannot be executed before the predetermined information is stored in the storage area, and the processing related to the fiscal data can be executed after the predetermined information is stored And after providing a switch that switches between a state that allows transition to a mode for rewriting firmware and a state that does not allow
When there is an instruction to shift to the mode for rewriting the firmware, it is determined whether or not the predetermined information is stored in the storage area, and if not, regardless of the state of the switch, A control method for an information processing apparatus, wherein the mode is changed to a mode in which the firmware is rewritten. While storing fiscal data, and having a storage area in which the written data cannot be rewritten after the data is written, the processing related to the fiscal data is made impossible before the predetermined information is stored in the storage area. After the predetermined information is stored, the processing related to the fiscal data is configured to be executed, and a switch is provided to switch between a state in which the transition to the mode for rewriting the firmware is permitted and a state in which the firmware is not permitted. A program executed by a control unit that controls the information processing apparatus,
In the control unit,
When there is an instruction to shift to the mode for rewriting the firmware, it is determined whether or not the predetermined information is stored in the storage area, and if not, regardless of the state of the switch, A program for shifting to a mode for rewriting the firmware.

Images