JP2015152998A - Printer and control method of the same - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a printer storing fiscal data and, especially, being capable of effectively detecting an illegal alteration of a program with a relatively simple device configuration, and further to provide the like.SOLUTION: A printer storing fiscal data includes: a storage section storing a start program and a fiscal data control program; a first control section starting by the start program and performing control of the printer by a control program including the fiscal data control program; and a smart card comprising a second control section determining whether or not the fiscal data control program transmitted from the first control section is a legitimate program before the first control section starts the control by the fiscal data control program.

Description

  The present invention relates to a printer or the like that stores fiscal data, and more particularly to a printer and a printer control method capable of efficiently detecting unauthorized modification of a program with a relatively simple device configuration.

  Conventionally, in the retail sales business, a register (so-called cash register) is often used for accounting at the time of sale of goods, and a receipt is printed as a record of accounting and delivered to a customer. The receipt printer is provided integrally with the cash register or connected to the cash register.

  Such accounting records related to product sales (sales information) need to be properly stored for tax payments, but in some countries, so-called Fiscals are used as cash register printers in order to prevent illegal actions by store owners. A printer may be used.

  Such fiscal printers have different functions and information to be recorded in accordance with the laws and regulations of each country, but usually record fiscal data (sales information such as information output on receipts) in an independent memory provided in the printer. The recorded information is later used for tax collection.

  In such a fiscal printer, it is necessary to prevent falsification of the recorded fiscal data in order to prevent illegal acts. So far, the structure of the memory for storing the fiscal data and the encryption of the data itself are required. Some proposals have been made on a housing for housing a memory.

  In the following Patent Document 1, a case for housing a substrate on which a memory for storing data including fiscal information is mounted is proposed.

JP 2011-140203 A

  However, there is a risk that the firmware (control program) of the fiscal printer may be tampered with, and it is also necessary to take measures to prevent such a tampered program from being activated at an early stage. There is.

  In addition, such a program check (detection) may be performed by using a sub CPU provided in the printer control unit separately from the main CPU. However, all printers have a sub CPU. Not always.

  Accordingly, an object of the present invention is to provide a printer that stores fiscal data, and in particular, a printer that can efficiently detect unauthorized modification of a program with a relatively simple device configuration.

  In order to achieve the above object, according to one aspect of the present invention, a printer that stores fiscal data is activated by the activation program and a storage unit that stores an activation program and a fiscal data control program, and the fiscal data control is performed. A first control unit for controlling the printer by a control program including a program, and the fiscal data control transmitted from the first control unit before the first control unit starts control by the fiscal data control program. And a smart card having a second control unit that determines whether or not the program is a legitimate program.

  Further, in the above invention, according to one preferable aspect, the second control unit returns a result of the determination to the first control unit, and the first control unit is a program in which the fiscal data control program is a regular program. In some cases, control by the fiscal data control program is started, and when the fiscal data control program is not a regular program, control by the fiscal data control program is not started.

  Furthermore, in the above invention, a preferred aspect is characterized in that the second control unit disables the second control unit when the fiscal data control program is not a regular program.

  Furthermore, in the above invention, one preferable aspect is that the second control unit stores in advance regular information based on a code of the regular fiscal data control program, and the fiscal data control program transmits from the first control unit. When the actual information is generated based on the code of the fiscal data control program, and the actual information matches the regular information, the fiscal data control program is determined to be a regular program, and the actual information If it does not match the regular information, it is determined that the fiscal data control program is not a regular program.

  Furthermore, in the above-mentioned invention, one preferable aspect is that the regular information is information stored in advance by the second control unit by encrypting or summarizing the code of the fiscal data control program by a predetermined method. The information is information obtained by encrypting or summarizing the code of the fiscal data processing program by the predetermined method when the fiscal data control program is transmitted from the first control unit. It is characterized by that.

  Furthermore, in the above invention, one preferable aspect is that the predetermined method is to give a code to a hash function.

  Furthermore, in the above invention, one preferable aspect is characterized in that the second control unit makes the determination when the printer is turned on.

  In order to achieve the above object, according to another aspect of the present invention, in a printer control method for storing fiscal data, the printer includes a storage unit for storing a startup program and a fiscal data control program, and the startup program. A first control unit that starts and controls the printer by the fiscal data control program; and a smart card that includes a second control unit, wherein the first control unit performs control by the fiscal data control program. Before starting, the fiscal data control program is transmitted to the second control unit, and the second control unit determines whether or not the transmitted fiscal data control program is a regular program. is there.

  Further objects and features of the present invention will become apparent from the embodiments of the invention described below.

1 is a configuration diagram according to an embodiment of a fiscal printer to which the present invention is applied. FIG. It is a functional block diagram of the secure control part 23 grade | etc.,. 6 is a flowchart illustrating a processing procedure from starting to stopping of the fiscal printer 2.

  Embodiments of the present invention will be described below with reference to the drawings. However, such an embodiment does not limit the technical scope of the present invention. In the drawings, the same or similar elements are denoted by the same reference numerals or reference symbols.

  FIG. 1 is a configuration diagram according to an embodiment of a fiscal printer to which the present invention is applied. A fiscal printer 2 shown in FIG. 1 is a printer to which the present invention is applied. The printer stores a hash value of a regular fiscal data control program (firmware) of the printer in advance, and is configured with a so-called smart card at startup. The secure control unit 23 to be executed obtains the hash value and compares it with the stored normal hash value before the fiscal data control program 212 stored at that time is started. It is determined whether or not 212 is regular. This makes it possible to efficiently detect unauthorized modification of the program in the fiscal printer with a relatively simple device configuration. As a result, it is possible to prevent activation of an unauthorized program, and to effectively prevent unauthorized acts such as falsification of fiscal data.

  As shown in FIG. 1, a fiscal printer 2 according to the present embodiment is connected to a host computer 1 that is a host device, and is disposed at a cash register of a store or the like. The host computer 1 is embodied as a register of the POS system, and the fiscal printer 2 prints a receipt after the accounting process by the register. Further, the fiscal printer 2 stores information on each accounting process (information included in each receipt), daily sales information, and the like as fiscal data. The stored fiscal data is used for tax collection and the like.

  The host computer 1 sends the receipt print data to the Fiscal Printer 2 every time an accounting process is performed for the customer, instructs the printing of the receipt, and displays the daily sales information etc. 2 to send.

  A fiscal data reading device 3 shown in FIG. 1 is a device that reads fiscal data stored in the fiscal printer 2 and is owned by a person who has obtained special permission from the government or the like. The fiscal data read using the fiscal data reading device 3 is used for tax collection and the like. Further, the fiscal data may be transmitted from the host computer 1 or the fiscal printer 2 to a server such as the government via a communication network without using the fiscal data reading device 3.

  Next, the fiscal printer 2 has a schematic configuration as shown in FIG. 1, but includes a communication interface, an operation device, a display device, and the like, which are not shown.

  First, the ROM 21 stores a control program (firmware) for the fiscal printer 2.

The main control unit 22 (first control unit) includes a CPU, a RAM, and other peripheral circuits, and is a part that centrally controls each unit of the fiscal printer 2. Specifically, in accordance with an instruction from the host computer 1, an instruction for print processing, an instruction for storage processing of fiscal data, and the like are executed. These control processes by the main control unit 22 are executed by reading a control program stored in the ROM 21 and operating the CPU according to the program. Further, the main control unit 22 determines whether or not to start the control process based on the determination result of the secure control unit 23 described below.

  The secure control unit 23 (second control unit) executes processing for preventing fraud in the fiscal printer 2 and ensuring proper handling of fiscal data. Specifically, processing such as determination of whether or not the control program stored in the ROM 21 is authentic, encryption of fiscal data, and addition of a digital signature to the fiscal data is executed. The secure control unit 23 is configured with a so-called smart card. A smart card is also called an IC card (ICC: Integrated Circuit Card) or chip card, and is a card that incorporates an integrated circuit for data recording and calculation. Here, calculation processing is possible within the card. Means a good card. Therefore, the secure control unit 23 (smart card) includes a semiconductor memory such as RAM, ROM, EPROM, and a processor such as a CPU. Smart cards are generally safe against fraud because it is difficult for third parties to understand the internal configuration.

  Next, an EJ (electric journal) memory control unit 24 is a part that controls reading and writing of data to the EJ memory 25 under the control of the main control unit 22. The EJ memory control unit 24 includes a CPU, and stores fiscal data on which secure processing such as encryption has been executed by the secure control unit 23 in the EJ memory 25. Fiscal data stored in the EJ memory 25 is information included in a receipt issued every time accounting processing is performed by the host computer 1. For example, for each product purchased by a customer, a product code, a product unit price, This is information such as the number of purchases, product price, and total purchase price of the product.

  The EJ memory 25 is a part that stores fiscal data relating to such a receipt, and is constituted by a flash memory, for example. The storage process in the EJ memory 25 is performed every time a receipt is issued.

  Next, the fiscal memory control unit 26 is a part that controls the reading and writing of data to the fiscal memory 27 under the control of the main control unit 22. The fiscal memory control unit 26 includes a CPU, and stores fiscal data in which secure processing such as encryption is executed by the secure control unit 23 in the fiscal memory 27. The fiscal data stored in the fiscal memory 27 is daily sales data, for example, total sales data for each day of the store.

  The fiscal memory 27 is a part for storing fiscal data relating to daily sales in this way, and is constituted by, for example, a flash memory. Note that the storage process in the fiscal memory 27 is performed at the end of the business day.

  Next, the print control unit 28 is a so-called printer controller, and causes the print execution unit 29 to print a receipt based on print data transmitted from the host computer 1. Although not shown, the print control unit 28 includes a CPU, a RAM, a ROM, an ASIC, and the like.

  The print execution unit 29 is a part that executes printing of a receipt. When the printing method is a thermal method using thermal paper, the print execution unit 29 includes a thermal head including a heating element, a platen, a paper transport device, and the like. The

FIG. 2 shows a functional configuration diagram of the secure control unit 23 and the like. As shown in FIG. 2, the ROM 21 (storage unit) stores a boot program 211 (startup program) and a fiscal data control program 212 (application program) as the above-described control programs. The boot program 211 is a program for the boot unit 221 of the main control unit 22, and the fiscal data control program 212 is a program for the fiscal data control unit 222 of the main control unit 22.

  The main control unit 22 includes a boot unit 221 and a fiscal data control unit 222 as functional configurations. The boot unit 221 is a part that performs a startup process of the fiscal printer 2, and the fiscal data control unit 222 is a part that performs the above-described processes executed by the main control unit 22.

  The secure control unit 23 includes a transmission / reception unit 231, a hash calculation unit 232, a normal hash value storage unit 234, a determination unit 233, and the like as functional configurations. Note that FIG. 2 does not show a functional configuration related to fiscal data encryption processing performed by the secure control unit 23.

  The transmission / reception unit 231 is a part responsible for communication with the main control unit 231, and the hash calculation unit 232 is a hash value (hereinafter referred to as current hash value (real information)) from the code (data) of the fiscal data control program 212. Is the part that calculates The determination unit 233 is a part that determines whether or not the fiscal data control program 212 is a regular program based on the calculated hash value and a hash value of a regular program that is obtained in advance. The normal hash value storage unit 234 stores the hash value of the normal program, more specifically, the ROM 21 as the fiscal data control program 212, and the correct program code as a program for controlling the operation of the fiscal data control unit 222. This is a part for storing a hash value (hereinafter referred to as a normal hash value (normal information)). The current hash value and the normal hash value are obtained using the same hash function. The regular hash value is stored in advance in the secure control unit 23 when the fiscal printer 2 is manufactured or installed.

  The fiscal printer 2 according to the present embodiment having the above-described configuration is characterized by control program fraud detection processing at the time of startup, and the processing contents from startup to stop will be described below focusing on this processing. To do. FIG. 3 is a flowchart illustrating a processing procedure from starting to stopping of the fiscal printer 2.

  First, when the power of the fiscal printer 2 is turned on (turned on) (step S1 in FIG. 3), the main control unit 22 reads the boot program 211 of the ROM 21 into the working memory, and the boot unit 221 is activated (FIG. 3). Step S2).

  Next, the boot unit 221 reads the fiscal data control program 212 in the ROM 21 and securely controls the code (data) of the fiscal data control program 212 without starting the fiscal data control unit 222 (before starting up). It transmits to the part 23 (step S3 of FIG. 3).

  In the secure control unit 23, the transmission / reception unit 231 receives the code of the fiscal data control program 212 and passes the code to the hash calculation unit 232. The hash calculator 232 calculates a hash value (current hash value) of the code of the received fiscal data control program 212 (step S4 in FIG. 3). Specifically, the code of the fiscal data control program 212 is given to a predetermined hash function, and the result value is set as the current hash value.

Next, the calculated current hash value is transferred from the hash calculation unit 232 to the determination unit 233, and the determination unit 233 determines whether the fiscal data control program 212 stored in the ROM 21 is a legitimate program ( Step S5 in FIG. Specifically, the received current hash value is compared with the normal hash value stored in the normal hash value storage unit 234, and if they match, the fiscal data control program 212 stored in the ROM 21 is the normal program. If they do not match, it is determined that the fiscal data control program 212 stored in the ROM 21 is not a regular program.

  As a result of the determination, if the current hash value matches the normal hash value (“match” in step S5 in FIG. 3), the determination unit 233 determines that the fiscal data control program 212 stored in the ROM 21 is a normal program. Is transmitted to the main control unit 22 via the transmission / reception unit 231, and a response to the reception of the fiscal data control program 212 is made (step S6 in FIG. 3).

  In the main control unit 22 that has received the response, the boot unit 221 reads the fiscal data control program 212 into the working memory and activates the fiscal data control unit 222 (step S7 in FIG. 3).

  As a result, the fiscal printer 2 is activated in a processable manner, so that the respective units operate under the control of the fiscal data control unit 222 and normal processing of the fiscal printer 2 is executed. Specifically, the receipt printing process according to the print data transmitted from the host computer 1, the storage process of the fiscal data related to the receipt, and the like are repeatedly executed. When the business hours end and the storage processing of fiscal data related to daily sales is completed, the process proceeds to step S12.

  On the other hand, if the current hash value and the normal hash value do not match in the determination (S5) (“mismatch” in step S5 in FIG. 3), the determination unit 233 locks the secure control unit 23, that is, cannot operate. The state is set (step S9 in FIG. 3).

  Thereafter, the determination unit 233 transmits information that the fiscal data control program 212 stored in the ROM 21 is not a legitimate program to the main control unit 22 via the transmission / reception unit 231, and receives the fiscal data control program 212. Is responded to (step S10 in FIG. 3).

  In the main control unit 22 that has received the response, the boot unit 221 does not activate the fiscal data control unit 222 (step S11 in FIG. 3). As a result, the fiscal printer 2 is not activated after the power is turned on. Thereafter, the process proceeds to step S12.

  In step S12, the power is turned off to stop the start of the fiscal printer 2, or the power is turned off because the fiscal printer 2 cannot be started, so the power of the fiscal printer 2 is turned off (turned off). )

  Thus, the operation of the fiscal printer 2 is completed.

  In the above description, a hash value (hash function) is used to check whether the fiscal data control program 212 is a legitimate program. However, this is merely an example, and other encryption techniques, Summarization techniques may be used.

  Further, the secure control unit 23 configured with a smart card may be detachable from the fiscal printer 2. In this case, a specific administrator manages the smart card, attaches the smart card to the fiscal printer 2 when the store is opened, and removes the smart card from the fiscal printer 2 after the store is closed. Store in a safe place when not in use.

  As described above, in the fiscal printer 2 according to the present embodiment, the secure control unit 23 composed of a smart card is operated by the fiscal data control program before the fiscal data control program 212 that performs substantial processing is started. It is determined whether or not 212 is regular. Therefore, an unauthorized program can be detected, and the unauthorized program can be prevented from starting. In addition, since the secure control unit 23 is configured with a smart card, it is difficult for a third party to decipher the inside of the secure control unit 23. In this respect, it is possible to prevent fraud, and the device configuration is relatively simple. can do.

  Further, when it is determined that the fiscal data control program 212 is an unauthorized program, both the fiscal data control unit 222 and the secure control unit 23 of the main control unit 22 are not operated, so that illegal acts can be reliably ensured. Can be prevented.

  In addition, since the hash value is used for detecting an illegal program, the illegal program can be detected almost certainly.

  The present invention can also be applied to a printer that is not a fiscal printer.

  The protection scope of the present invention is not limited to the above-described embodiment, but covers the invention described in the claims and equivalents thereof.

1 Host computer, 2 Fiscal printer, 3 Fiscal data reading device, 21 ROM, 22 Main control unit, 23 Secure control unit (smart card), 24 EJ memory control unit, 25 EJ memory, 26 Fiscal memory control unit, 27 Fiscal memory 28 print control unit, 29 print execution unit, 211
Boot program, 212 Fiscal data control program, 221 Boot unit, 222 Fiscal data control unit, 231 Transmission / reception unit, 232 Hash calculation unit, 233 Judgment unit, 234 Normal hash value storage unit

Claims (8)

A printer that stores fiscal data,
A storage unit for storing a startup program and a fiscal data control program;
A first control unit that is activated by the activation program and that controls the printer by a control program including the fiscal data control program;
A second control unit for determining whether or not the fiscal data control program transmitted from the first control unit is a regular program before the first control unit starts control by the fiscal data control program; And a smart card equipped with the printer. In claim 1,
The second control unit returns the result of the determination to the first control unit,
The first control unit starts control by the fiscal data control program when the fiscal data control program is a legitimate program, and when the fiscal data control program is not a legitimate program, the first control unit A printer characterized by not starting control by a control program. In claim 1 or 2,
The printer, wherein the second control unit disables the second control unit when the fiscal data control program is not a regular program. In any one of Claims 1 thru | or 3,
The second control unit stores in advance regular information based on the code of the regular fiscal data control program, and when the fiscal data control program is transmitted from the first control unit, the code of the fiscal data control program If the actual information matches the regular information, it is determined that the fiscal data control program is a regular program. If the actual information does not match the regular information, the fiscal data is determined. A printer characterized by determining that the control program is not a legitimate program. In claim 4,
The regular information is information stored in advance by the second control unit by encrypting or summarizing the code of the fiscal data control program by a predetermined method,
The actual information is obtained by encrypting or summarizing the code of the fiscal data processing program by the predetermined method when the fiscal data control program is transmitted from the first control unit. The printer characterized by being. In claim 5,
The printer is characterized in that the predetermined method is to give a code to a hash function. In any one of Claims 1 thru | or 6,
The printer according to claim 2, wherein the second control unit performs the determination when the printer is powered on. A printer control method for storing fiscal data,
Smart including a storage unit that stores a startup program and a fiscal data control program in the printer, a first control unit that is started by the startup program and controls the printer by the fiscal data control program, and a second control unit A card, and
Before the first control unit starts control by the fiscal data control program, the fiscal data control program is transmitted to the second control unit,
The printer control method, wherein the second control unit determines whether or not the transmitted fiscal data control program is a regular program.

Images