JP2019168990A - Information processing apparatus, information processing method, and information processing program - Google Patents

Abstract

To perform security-related processing more appropriately.SOLUTION: The information processing apparatus 1 includes a first CPU 11 and a second CPU 21. The first CPU 11 executes processing based on a first program. The second CPU 21 further executes processing related to security of the information processing apparatus 1 when the first CPU 11 executes processing based on the first program.SELECTED DRAWING: Figure 4

Description

  The present invention relates to an information processing apparatus, an information processing method, and an information processing program.

  Conventionally, an information processing apparatus having a plurality of CPUs (Central Processing Units) is known. In addition, assuming that such an information processing apparatus is attacked by malicious software or the like, a technique is known in which any CPU performs processing related to security when another CPU is stopped (for example, Patent Document 1).

JP 2003-122443 A

By the way, there are programs that are susceptible to attacks from malicious software. For example, it is a program such as a general-purpose OS (Operating System). When both of a plurality of CPUs execute processing of the same program that is susceptible to such an attack, both the CPUs may be hacked at the same time and continue to operate as they are.
However, in general techniques such as the technique disclosed in Patent Document 1, it is assumed that other CPUs are stopped, and such a scene is not assumed.

  The present invention has been made in view of such a situation, and an object of the present invention is to perform processing relating to security more appropriately.

In order to achieve the above object, an information processing apparatus of one embodiment of the present invention provides:
An information processing apparatus,
A first CPU that executes processing based on the first program;
A second CPU that executes processing related to security of the information processing apparatus when the first CPU executes processing based on the first program;
It is characterized by providing.

  According to the present invention, it is possible to perform security-related processing more appropriately.

It is the schematic of the information processing apparatus which is one Embodiment of this invention. It is a block diagram which shows the hardware constitutions of information processing apparatus. It is a schematic diagram which shows the display area of information processing apparatus. It is a schematic diagram which shows the X-X 'cross section in FIG. 3A. It is a functional block diagram which shows the functional structure for performing an apparatus security process among the functional structures of the information processing apparatus of FIG. It is a flowchart explaining the flow of the apparatus security process which the information processing apparatus of FIG. 1 which has the functional structure of FIG. 4 performs.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[Constitution]
FIG. 1 is a schematic diagram of an information processing apparatus 1 according to an embodiment of the present invention.
As shown in FIG. 1, the information processing apparatus 1 according to the present embodiment is configured as a wristwatch type device (for example, a smart watch). In addition, the information processing apparatus 1 includes a first display unit 18 and a second display unit 27 (both described later), and the second display unit 27 is stacked on the first display unit 18. It has become. The second display unit 27 is a transmissive display unit. The transmissive display or the semi-transparent display in which the display area of the first display unit 18 is visible, and the first display unit 18 It is possible to perform both non-transparent display such that the display area cannot be visually recognized.
For this reason, in the information processing apparatus 1, the display of the first display unit 18 and the display of the second display unit 27 are performed by setting at least a part of the first display unit 18 to transmissive display or semi-transmissive display. Can be superimposed and displayed.

FIG. 2 is a block diagram illustrating a hardware configuration of the information processing apparatus 1.
As shown in FIG. 2, the information processing apparatus 1 includes a first CPU (Central Processing Unit) 11, a first ROM (Read Only Memory) 12, a first RAM (Random Access Memory) 13, 1 storage unit 14, RTC (Real Time Clock) unit 15, drive 16, first input unit 17, first display unit 18, second CPU 21, second ROM 22, 2 RAM 23, second storage unit 24, sensor unit 25, second input unit 26, second display unit 27, Bluetooth (registered trademark) antenna 31, Bluetooth module 32, and wireless LAN (Local Area Network) antenna 33, wireless LAN module 34, GPS (Global P And sitioning System) antenna 41, and a GPS module 42, a.

The information processing apparatus 1 functions under the control of the first CPU 11 and the second CPU 21.
Specifically, the first CPU 11 performs various arithmetic processes based on an OS (Operating System) and various programs executed under the management of the OS, and executes various processes based on the results of the arithmetic processes. Thus, a function similar to a smartphone in the information processing apparatus 1 is realized. In the present embodiment, the first CPU 11 causes the first display unit 18 to display an incoming e-mail received via the Bluetooth module 32 or the wireless LAN module 34, a message regarding weather information, and the like. In addition, the first CPU 11 recognizes voice input via the first input unit 17 and performs processing related to various functions implemented as functions similar to a smartphone. In the present embodiment, the first CPU 11 performs arithmetic processing based on a general-purpose OS such as Android (registered trademark), for example.
In the present embodiment, the first CPU 11 acquires a time signal from the RTC unit 15 at a predetermined timing.

  The second CPU 21 performs various arithmetic processes based on a specific program such as an embedded program, and performs a process based on the result of the arithmetic process, thereby giving a display instruction to the second display unit 27. In addition, the detection results of various sensors are acquired, and other processes related to various functions implemented as wristwatch functions are performed. In the present embodiment, the second CPU 21 calculates time based on the time signal input from the first CPU 11 and displays the time, day of the week, date, or the like on the second display unit 27. The processing of a specific program (such as time calculation) executed by the second CPU 21 is simpler than the processing of the OS executed by the first CPU 11, so that the processing load is small and executed with low power consumption. Is possible. For this reason, the hardware specifications required for the second CPU 21 are lower than those of the first CPU 11. Accordingly, when only the function of the wristwatch is required, the second CPU 21 is operated, while most of the functions of the first CPU 11 are stopped and the so-called sleep state is established, so that the entire information processing apparatus 1 is Power consumption can be reduced. Thereby, the information processing apparatus 1 can be driven for a long time by a battery (not shown) built in the information processing apparatus 1.

  The first ROM 12 can read data from the first CPU 11 and stores various programs executed by the first CPU 11 and initial setting data. For example, the first ROM 12 stores an OS program executed by the first CPU 11 and various programs executed under the management of the OS.

  The first RAM 13 can read and write data from the first CPU 11, provides a working memory space to the first CPU 11, and stores working temporary data. For example, the first RAM 13 provides a system area and a work area when the first CPU 11 executes the OS and the like.

  The first storage unit 14 is a non-volatile memory that can read and write data from the first CPU 11 and is, for example, a flash memory or an EEPROM (Electrically Erasable and Programmable Read Only Memory). The first storage unit 14 stores various data (such as data of various setting contents) generated by various functions similar to a smartphone realized by the control by the first CPU 11.

  A removable medium 51 composed of a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is appropriately attached to the drive 16. The removable medium 51 can read and write data from the first CPU 11 and can store various data such as data detected by various sensors.

The 1st display part 18 is comprised by the organic electroluminescent display (OLED: Organic Electro-Luminescence), and displays various information on a display screen according to control of 1st CPU11.
The first input unit 17 includes a microphone that converts sound into an electrical signal, and outputs a signal indicating the input sound (such as a sound command for operation) to the first CPU 11.

The Bluetooth antenna 31 is an antenna that transmits and receives electromagnetic waves based on the Bluetooth standard, and includes, for example, a monopole antenna. The Bluetooth antenna 31 transmits an electric signal of wireless communication input from the Bluetooth module 32 as an electromagnetic wave, or converts the received electromagnetic wave into an electric signal and outputs the electric signal to the Bluetooth module 32.
The Bluetooth module 32 transmits a signal to another device via the Bluetooth antenna 31 in accordance with an instruction from the first CPU 11. Further, the Bluetooth module 32 receives a signal transmitted from another device and outputs information indicated by the received signal to the first CPU 11.

The wireless LAN antenna 33 is an antenna that can receive radio waves having a frequency corresponding to the wireless communication used by the wireless LAN module 34, and is configured by, for example, a loop antenna or a rod antenna. The wireless LAN antenna 33 transmits an electric signal of wireless communication input from the wireless LAN module 34 as an electromagnetic wave, or converts the received electromagnetic wave into an electric signal and outputs the electric signal to the wireless LAN module 34.
The wireless LAN module 34 transmits a signal to another device via the wireless LAN antenna 33 in accordance with an instruction from the first CPU 11. Further, the wireless LAN module 34 receives a signal transmitted from another device and outputs information indicated by the received signal to the first CPU 11.

  The first RAM 13 can read and write data from the first CPU 11, provides a working memory space to the first CPU 11, and stores working temporary data. For example, the first RAM 13 provides a system area and a work area when the first CPU 11 executes the OS and the like.

  The second ROM 22 can read data from the second CPU 21 and stores a specific program executed by the second CPU 21 and initial setting data. For example, the second ROM 22 stores a built-in program for realizing the function of a wristwatch and a program for realizing a function for performing device security processing (described later).

  The second RAM 23 can read and write data from the second CPU 21, provides a work memory space to the second CPU 21, and stores work temporary data. For example, the second RAM 23 provides a storage area when the second CPU 21 executes an embedded program or the like.

  The second storage unit 24 is a non-volatile memory that can read and write data from the second CPU 21, and is, for example, a flash memory or an EEPROM. The second storage unit 24 stores various data (such as data of various setting contents) generated in the function of the wristwatch.

The sensor unit 25 is a set of a plurality of sensors that measure various information. The sensor unit 25 includes, for example, a pulse sensor, a geomagnetic sensor, an acceleration sensor, a gyro sensor, and an illuminance sensor.
The pulse sensor is installed on the back side of the information processing apparatus 1 (the side facing the user's arm), detects the pulse of the user wearing the information processing apparatus 1, and displays information indicating the detected pulse on the second CPU 21. Output to.
The geomagnetic sensor detects the direction of geomagnetism and outputs information indicating the detected direction of geomagnetism to the second CPU 21.
The acceleration sensor detects acceleration in the triaxial direction in the information processing apparatus 1 and outputs information indicating the detected acceleration to the second CPU 21.
The gyro sensor detects angular velocities in the three-axis directions in the information processing apparatus 1 and outputs information indicating the detected angular velocities to the second CPU 21.

The illuminance sensor is installed, for example, at a predetermined location on the back surface side of the first display unit 18 or a predetermined location on the bezel portion of the information processing apparatus 1 and detects brightness (illuminance) in the display area of the information processing apparatus 1. Then, information indicating the detected brightness is output to the second CPU 21.
The second CPU 21 outputs information detected by these various sensors to the first CPU 11 as necessary. The first CPU 11 uses information detected by these various sensors, for example, by a function similar to a smartphone. For example, the first CPU 11 adjusts the luminance of the display screen of the first display unit 18 based on the brightness detected by the illuminance sensor.
The second input unit 26 includes various buttons, and inputs various types of information according to user instruction operations.

The second display unit 27 includes a PN (Polymer Network) liquid crystal display capable of transmitting light partially or entirely, and displays various information on the display screen (here, the segment) according to the control of the second CPU 21. indicate.
The positional relationship between the second display unit 27 and the first display unit 18 will be described with reference to FIGS. 3A and 3B.
FIG. 3A is a schematic diagram illustrating an installation form of the illuminance sensor 29 in the display area of the information processing apparatus 1. FIG. 3B is a schematic diagram showing a cross section taken along line XX ′ in FIG. 3A.

As shown in FIG. 3A, the display area of the first display unit 18 and the display area of the second display unit 27 are arranged so as to overlap each other.
As shown in FIG. 3B, the display area of the information processing apparatus 1 is laminated in the order of the cover glass CG, the second display unit 27, the first display unit 18, the black sheet BS, and the main substrate MB from the front side. It has a cross-sectional structure. Among these, the black sheet BS is a member that adjusts the color development when viewed through the second display unit 27 and the first display unit 18, and in the present embodiment, black is visually recognized. It has become. Further, the hardware described with reference to FIG. 2 is arranged on the main board MB, and signal lines for connecting the hardware are arranged.

  In this embodiment, as shown in FIG. 3B, the PN liquid crystal display that is the second display unit 27 is stacked on the display screen of the organic EL display that is the first display unit 18 described above. In this PN liquid crystal display, liquid crystal molecules are irregularly arranged at a portion where no electric potential is applied, and reflects light. That is, the display by the PN liquid crystal display is performed at a portion where this potential is not applied. In this case, for example, a colored (for example, white) display may be performed on the entire display area of the second display unit 27 so that the display on the first display unit 18 cannot be visually recognized by the user. it can. Hereinafter, such a display in the display area of the second display unit 27 for making the display by the first display unit 18 invisible to the user is referred to as “non-transparent display”.

  On the other hand, the liquid crystal molecules are aligned vertically with respect to the display screen at a portion to which a potential is applied, so that light can be transmitted. That is, since the light from the above-mentioned organic EL display can be transmitted at the portion where this potential is applied, the display by the organic EL display can be visually recognized through the PN liquid crystal display. That is, in the display area of the information processing apparatus 1, the display by the second display unit 27 can be displayed in a state where the display by the first display unit 18 is superimposed on the display by the first display unit 18.

  In addition, as shown to FIG. 3B, the display direction of the 1st display part 18 and the 2nd display part 27 is a direction which goes to a cover glass from each display part. This corresponds to the direction from the back of the paper surface to the front in FIG. 3A.

Returning to FIG. 2, the GPS antenna 41 receives radio waves transmitted from satellites in GPS and converts them into electrical signals, and outputs the converted electrical signals (hereinafter referred to as “GPS signals”) to the GPS module 42. .
The GPS module 42 detects the position (for example, latitude, longitude, and altitude) of the information processing apparatus 1 and the current time indicated by the GPS based on the GPS signal input from the GPS antenna 41. Further, the GPS module 42 outputs information indicating the detected position and the current time to the second CPU 21.

Next, a functional configuration of the information processing apparatus 1 will be described.
FIG. 4 is a functional block diagram showing a functional configuration for executing the device security process among the functional configurations of the information processing apparatus 1 of FIG.
The device security process is a series of processes for the second CPU 21 to improve the security of the entire information processing apparatus 1 including the first CPU 11.

When the device security process is executed, as shown in FIG. 4, the first program processing unit functions in the first CPU 11. When the device security process is executed, as shown in FIG. 4, in the second CPU 21, the second program processing unit 211, the output suppression processing unit 212, the operation control processing unit 213, and the authentication processing unit 214 functions.
In addition, authentication information 241 is stored in one area of the second storage unit 24.

  The 1st program processing part 111 implement | achieves the function similar to a smart phone by performing various arithmetic processing based on a 1st program, and controlling various hardware based on the result of an arithmetic processing. The first program is the general-purpose OS described above. In addition, as described above, the first CPU 11 may be in a stopped state (or a sleep state). In this case, the first program processing unit 111 has stopped processing based on the first program. Transition to.

  The second program processing unit 211 performs various arithmetic processing based on a program different from the first program, and controls various hardware based on the result of the arithmetic processing, thereby realizing a watch function. The second program is the above-described embedded program. The second program processing unit 211 is activated when the information processing apparatus 1 is turned on, and continues to operate regardless of the operating state of the first program processing unit 111.

  The output suppression processing unit 212 performs processing for suppressing the output of the first CPU 11. For example, the output suppression processing unit 212 prevents the user from visually recognizing the display that the first CPU 11 outputs to the first display unit 18. For this purpose, the output suppression processing unit 212 performs processing for performing the above-described non-transparent display in the display area of the second display unit 27. For example, the output suppression processing unit 212 outputs a control signal for displaying a color (for example, white) in the display area of the second display unit 27 to the second display unit 27.

  The operation control processing unit 213 performs processing for stopping the operation of the first CPU 11. In the present embodiment, the first CPU 11 can transition between a stopped state (or a sleep state) and an activated state based on a control signal from the second CPU 21. Therefore, the operation control processing unit 213 outputs, for example, a control signal for transitioning to the stop state (or sleep state) to the first CPU 11.

  The processing for suppressing the output of the first CPU 11 by the output suppression processing unit 212 and the processing for stopping the operation of the first CPU 11 by the operation control processing unit 213 are collectively described below as “security related”. This is referred to as “processing”.

  The authentication processing unit 214 performs authentication processing. This authentication process is a process for authenticating that the user who is currently using the information processing apparatus 1 is a valid user. Here, the legitimate user is, for example, the owner of the information processing apparatus 1 or a person who has obtained use permission from the owner. On the other hand, a third party who has acquired the information processing apparatus 1 lost by a legitimate user or a malicious person who has stolen the information processing apparatus 1 is not a legitimate user but an unauthorized user.

  For example, the authentication processing unit 214 performs authentication based on an operation input to the second input unit 26 by the user. In this case, the authentication processing unit 214 determines a predetermined operation procedure for performing authentication in advance, and stores this predetermined operation procedure in the second storage unit 24 as authentication information 241. When the authentication processing unit 214 receives an operation input to the second input unit 26 from a user who is currently using the information processing apparatus 1 during the authentication process, the procedure of the operation is changed to the authentication information. It is determined whether or not it matches the predetermined operation procedure stored as 241.

  If it matches the predetermined operation procedure, the user who is currently trying to use the information processing apparatus 1 is considered to be a legitimate user who has grasped the predetermined operation procedure, and thus the authentication is successful. In this case, the authentication processing unit 214 stops the security-related processing executed by the output suppression processing unit 212 and the operation control processing unit 213 so that a legitimate user can freely use the functions of the information processing apparatus 1.

On the other hand, if it does not match the predetermined operation procedure, the user who is currently trying to use the information processing apparatus 1 is considered to be an unauthorized user who does not grasp the predetermined operation procedure, and thus authentication fails. . In this case, the authentication processing unit 214 continues the security-related processing executed by the output suppression processing unit 212 and the operation control processing unit 213 so that an unauthorized user cannot freely use the functions of the information processing apparatus 1.
The predetermined operation procedure is a predetermined operation such as pressing a plurality of buttons included in the second input unit 26 in a predetermined order, pressing a predetermined button for a long time, or Morse code. The button may be pressed at the timing of, or a combination thereof.

[Operation]
FIG. 5 is a flowchart for explaining the flow of device security processing executed by the information processing device 1 of FIG. 1 having the functional configuration of FIG.
The device security process is executed when the first CPU 11 executes the process. That is, the device security process is executed when the first program processing unit 111 executes various arithmetic processes based on the first program.

  In step S11, the output suppression processing unit 212 and the operation control processing unit 213 start processing related to security. That is, the output suppression processing unit 212 starts a process for suppressing the output of the first CPU 11. In addition, the operation control processing unit 213 starts a process for stopping the operation of the first CPU 11.

  In step S <b> 12, the authentication processing unit 214 determines whether or not there has been an operation input to the second input unit 26 from a user who is currently using the information processing apparatus 1. If there is an operation input to the second input unit 26, it is determined Yes in step S12, and the process proceeds to step S13. On the other hand, when there is no operation input into the 2nd input part 26, it determines with No in step S12, and step S12 is repeated with a predetermined | prescribed period.

  In step S13, the authentication processing unit 214 attempts authentication. Specifically, the authentication processing unit 214 determines whether or not the operation procedure input to the second input unit 26 matches a predetermined operation procedure stored as the authentication information 241. Try to authenticate.

In step S14, the authentication processing unit 214 determines whether or not the authentication is successful. If the authentication is successful (that is, if the input operation procedure matches the predetermined operation procedure), the determination in Step S14 is Yes, and the process proceeds to Step S15. On the other hand, when the authentication fails (that is, when the input operation procedure does not match the predetermined operation procedure), it is determined No in step S14, and the process returns to step S12 again.
Note that the security-related processing started in step S11 is still ongoing at the time of step S14.

  In step S15, the authentication processing unit 214 instructs the output suppression processing unit 212 and the operation control processing unit 213 to stop processing related to security. Further, the output suppression processing unit 212 and the operation control processing unit 213 stop the security-related processing in response to this instruction. Thus, a legitimate user who has succeeded in authentication includes information processing including a function similar to a smartphone realized by the first program processing unit 111 in addition to a wristwatch function realized by the second program processing unit 211. All functions of the device 1 can be freely used.

[Effects of this embodiment]
Through such processing, in the information processing apparatus 1, all functions of the information processing apparatus 1 can be freely used by an authorized user. On the other hand, it is possible to secure the security of the information processing apparatus 1 by restricting the use of a function similar to a smartphone realized by the first program processing unit 111 by processing related to security for an unauthorized user. it can. For example, it is possible to prevent an unauthorized user from referring to personal information such as a telephone directory or performing unintended communication by a function similar to a smartphone.
That is, it is possible to perform security-related processing more appropriately.

  Moreover, in this embodiment, both the process for stopping operation | movement of 1st CPU11 and the process for suppressing the output of 1st CPU11 are performed as a process regarding security. As a result, even if the first CPU 11 is hacked or the like and the control signal for stopping the operation of the first CPU 11 is invalidated, the output of the first CPU 11 is suppressed. By the process for doing so, the output of the first CPU 11 can be suppressed. For example, even when the control signal for stopping the operation of the first CPU 11 has been invalidated, the first CPU 11 causes the first display unit 18 to perform non-transparent display. It is possible to prevent the information displayed on the screen from being visually recognized by the user. That is, even in a state where the unintended operation of the first CPU 11 cannot be controlled, the security of the information processing apparatus 1 can be ensured regardless.

  In addition, since the first program that is controlled by the first CPU 11 is a general-purpose OS that is widely distributed, there is a high possibility that the first program is targeted for malicious attacks. In addition, the first CPU 11 communicates with an external device through communication using Bluetooth or wireless LAN, reads data stored in a removable medium, and updates frequently. It is likely to be the target of an attack.

On the other hand, since the second program controlled by the second CPU 21 is an embedded program that is not widely distributed, it may be a target of a malicious attack compared to a general-purpose OS. Relatively low. The second CPU 21 only inputs the output from the sensor unit 25 and the GPS module 42, does not communicate with an external device, does not read data stored in a removable medium, and is frequently In this respect, the possibility of being a target of a malicious attack is relatively low as compared to the general-purpose OS. Therefore, it can be said that the second CPU 21 is more secure than the first CPU 11.
As described above, in the information processing apparatus 1, the second CPU 21 whose safety is ensured performs processing related to security with respect to the second CPU 21 that is relatively likely to be a target of a malicious attack. By doing so, the information processing apparatus 1 can be more reliably protected.

[Modification 1]
In the above-described embodiment, the authentication processing unit 214 performs authentication based on an operation input from the user to the second input unit 26. However, the authentication is not limited to this, and other methods may be used.
For example, the second storage unit 24 stores a predetermined gesture operation as the authentication information 241. Reference numeral 241 recognizes a user's gesture operation using an acceleration sensor, a gyro sensor, and the like included in the sensor unit 25. Then, 241 may make the authentication successful when the recognized gesture operation matches a predetermined gesture operation stored as the authentication information 241.

In addition, for example, the second storage unit 24 includes position information (for example, latitude and longitude information) indicating a place (for example, a workplace site) where the information processing apparatus 1 can be used as the authentication information 241. Remember. Further, 241 acquires information (for example, latitude and longitude information) indicating the current position measured by the GPS module 42. Then, if the acquired information indicating the current position matches the position information indicating the location where the information processing apparatus 1 stored as the authentication information 241 can be used, the authentication is successful. May be.
In addition, for example, when the sensor unit 25 includes a biometric sensor, the second storage unit 24 may perform authentication by biometric authentication.

It should be noted that these authentication methods may be appropriately combined, and other authentication methods may be used.
According to this modification, it is possible to select an appropriate authentication method according to the type of sensor included in the information processing apparatus 1 and the required security level.

[Modification 2]
In the above-described embodiment, the output suppression processing unit 212 performs a process for performing non-transparent display as a process related to security. Further, the operation control processing unit 213 performs a process for outputting a control signal for transitioning to a stop state (or a sleep state) to the first CPU 11 as a process related to security. The present invention is not limited to this, and security-related processing may be performed by other methods.

  For example, the operation control processing unit 213 may stop power supply to the first CPU 11 by controlling a switch that cuts off a path for supplying power to the first CPU 11. Thereby, even if the first CPU 11 is in a state where it does not accept a control signal for transitioning to the stop state (or sleep state), the operation of the first CPU 11 can be forcibly stopped. . Further, the operation control processing unit 213 may be configured not to activate the first CPU 11 by not accepting a button operation or a gesture operation that triggers the activation of the first CPU 11.

  In addition, the output suppression processing unit 212 may suppress the output of the first CPU 11 by controlling the hardware of the output destination of the first CPU 11, for example. For example, the output of the first CPU 11 may be suppressed by stopping the communication hardware such as the Bluetooth module 32 and the wireless LAN module 34 and the function of the first display unit 18. Further, when the output destination of the first CPU 11 includes other hardware such as a speaker, the output of the first CPU 11 is suppressed by stopping the function of the other hardware. You may make it do.

[Modification 3]
In the above-described embodiment, the device security process illustrated in FIG. 5 is performed when the first CPU 11 executes the process. However, the present invention is not limited to this, and the apparatus security processing may be performed at other timings for the purpose of improving security.
For example, the apparatus security process may be performed even in a stopped state (or a sleep state). That is, the apparatus security process may be performed even when the first program processing unit 111 does not perform various arithmetic processes based on the first program. In this way, security can be enhanced in advance in case the first CPU 11 starts processing at an unintended timing.
In addition, for example, it may be performed when the first CPU 11 returns from the stopped state (or the sleep state) and transitions to the activated state. That is, after the device security process is performed, it may be changed to the activated state.
In addition, for example, the device security processing may be performed at a predetermined cycle. That is, the apparatus security process may be performed every time the information processing apparatus 1 is used for a predetermined time after the apparatus security process is performed at the time of power-on.

[Modification 4]
The information processing apparatus 1 may further include hardware different from the above-described embodiment. For example, a touch panel may be provided on the second display unit 27. Thereby, in the information processing apparatus 1, the display of the second display unit 27 can be displayed so as to overlap the display of the first display unit 18, and the display content can be touch-operated. Become.
In this case, the touch panel can be realized by a capacitive type or resistive film type touch panel provided on the display screen of the second display unit 27. The touch panel detects a user's touch operation position and operation content on the operation surface, generates a signal corresponding to the operation, and outputs the signal to the first CPU 11 as an input signal.

[Modification 5]
Further, the process related to security may be performed regardless of the apparatus security process. For example, when the information processing apparatus 1 includes a camera as hardware, the camera captures the eyes of the user. Then, by analyzing the captured image, it is determined whether or not the user is viewing each display unit. Then, when the user visually recognizes each display unit, the security-related processing may not be performed, and when the user does not visually recognize each display unit, the security-related processing may be performed.

The information processing apparatus 1 configured as described above includes a first CPU 11 and a second CPU 21.
The first CPU 11 executes processing based on the first program.
The second CPU 21 further executes a process related to security of the information processing apparatus 1 when the first CPU 11 executes the process based on the first program.
As a result, it is possible to prevent a plurality of CPUs from executing the same program and processing the same program, and both the CPUs being hacked at the same time and continuing the operation as they are. Accordingly, it is possible to perform security-related processing more appropriately.

The second CPU 21 stops the process related to security when the predetermined process executed by the second CPU 21 is successful.
Thereby, for example, it is possible to provide all functions of the information processing apparatus 1 to a legitimate user.

The second CPU 21 performs a process for stopping the operation of the first CPU 11 as a process related to security.
Thereby, it becomes possible to restrict the use of the function provided by the first CPU 11.

The first CPU 11 continues to execute the process regardless of the security-related process.
The second CPU 21 performs processing for suppressing output from the first CPU 11 as processing related to security.
Thereby, it becomes possible to restrict the use of the function provided by the first CPU 11.

A first display unit 18 corresponding to the first CPU 11;
A second display unit 27 that corresponds to the second CPU 21 and is arranged so as to overlap the display area of the first display unit 18 and capable of non-transparent display;
The second CPU 21 performs a process for causing the second display unit 27 to perform non-transparent display as a process related to security.
Thereby, even if unintended information is displayed on the first display unit 18 corresponding to the first CPU 11, it is possible to prevent the unintended information from being visually recognized by the user due to non-transparent display. It becomes.

The first program is an operating system.
As a result, it is possible to perform security-related processing on the first CPU 11 corresponding to the operating system that is susceptible to malicious attacks.

The second CPU 21 further executes processing of a second program that is a program different from the first program.
Thereby, the second CPU 21 can execute processes other than the security-related processes. Since the second program is different from the first program, a plurality of CPUs execute the same program for the same program, and both CPUs are hacked at the same time and continue to operate as they are. The effect that it can be prevented is also continued.

The second CPU 21 performs processing related to security not only when the first CPU 11 operates but also when the first CPU 11 stops operating.
This makes it possible to perform security-related processing without asking whether or not the first CPU 11 is operating.

  In addition, this invention is not limited to the above-mentioned embodiment and its modification, The deformation | transformation in the range which can achieve the objective of this invention, improvement, etc. are included in this invention.

Further, in the above-described embodiment and its modifications, the information processing apparatus 1 to which the present invention is applied has been described by taking a digital camera wristwatch type device (such as a smart watch) as an example, but is not particularly limited thereto.
For example, the present invention can be applied to general electronic devices having a brightness adjustment function. Specifically, for example, the present invention can be applied to a stationary personal computer, a notebook personal computer, a smartphone, a mobile phone, a portable game machine, a digital camera, a video camera, a portable navigation device, a multifunction machine, and the like. is there.

The series of processes described above can be executed by hardware or can be executed by software.
In other words, the functional configuration of FIG. 4 is merely an example, and is not particularly limited. That is, it is sufficient that the information processing apparatus 1 has a function capable of executing the above-described series of processing as a whole, and what functional block is used to realize this function is not particularly limited to the example of FIG. .
In addition, one functional block may be constituted by hardware alone, software alone, or a combination thereof.
The functional configuration in the present embodiment and its modifications is realized by a processor that executes arithmetic processing. The processors that can be used in this embodiment and its modifications include single processors, multiprocessors, multicore processors, and the like. In addition to what is constituted by various processing devices alone, those in which these various processing devices are combined with processing circuits such as ASIC (Application Specific Integrated Circuit) and FPGA (Field-Programmable Gate Array) are included.

When a series of processing is executed by software, a program constituting the software is installed on a computer or the like from a network or a recording medium.
The computer may be a computer incorporated in dedicated hardware. The computer may be a computer capable of executing various functions by installing various programs, for example, a general-purpose personal computer.

  The recording medium including such a program is not only constituted by the removable medium 51 of FIG. 2 distributed separately from the apparatus main body in order to provide the program to the user, but also in a state of being incorporated in the apparatus main body in advance. The recording medium etc. provided in The removable medium 51 is composed of, for example, a magnetic disk (including a floppy disk), an optical disk, a magneto-optical disk, or the like. The optical disc is composed of, for example, a CD-ROM (Compact Disk-Read Only Memory), a DVD (Digital Versatile Disc), a Blu-ray (registered trademark) Disc (Blu-ray Disc), and the like. The magneto-optical disk is configured by an MD (Mini-Disk) or the like. Further, the recording medium provided to the user in a state of being incorporated in the apparatus main body in advance is, for example, the first ROM 12 and the second ROM 22 in FIG. 2 in which the program is recorded, or the first storage unit in FIG. 14 and a semiconductor memory included in the second storage unit 24.

  In the present specification, the step of describing the program recorded on the recording medium is not limited to the processing performed in chronological order according to the order, but is not necessarily performed in chronological order, either in parallel or individually. The process to be executed is also included.

  As mentioned above, although embodiment of this invention and its modification were demonstrated, this embodiment and its modification are only illustrations, and do not limit the technical scope of this invention. The present invention can take other various embodiments and modifications thereof, and various modifications such as omission and replacement can be made without departing from the gist of the present invention. This embodiment and its modifications, and modifications thereof are included in the scope and gist of the invention described in this specification and the like, and are included in the invention described in the claims and the equivalents thereof.

The invention described in the scope of claims at the beginning of the filing of the present application will be appended.
[Appendix 1]
An information processing apparatus,
A first CPU that executes processing based on the first program;
A second CPU that further executes security-related processing of the information processing apparatus when the first CPU executes processing based on the first program;
An information processing apparatus comprising:
[Appendix 2]
The information processing apparatus according to appendix 1, wherein the second CPU stops the process related to the security when a predetermined process executed by the second CPU is successful.
[Appendix 3]
The information processing apparatus according to appendix 1 or 2, wherein the second CPU performs a process for stopping the operation of the first CPU as the process related to the security.
[Appendix 4]
The first CPU continues to execute the process regardless of the process related to the security,
The information processing apparatus according to any one of appendices 1 to 3, wherein the second CPU performs a process for suppressing an output from the first CPU as a process related to the security.
[Appendix 5]
A first display unit corresponding to the first CPU;
A second display unit corresponding to the second CPU and arranged to overlap the display area of the first display unit and capable of non-transparent display;
The information processing apparatus according to any one of appendices 1 to 4, wherein the second CPU performs a process for causing the second display unit to perform non-transparent display as the process related to the security.
[Appendix 6]
The information processing apparatus according to any one of appendices 1 to 5, wherein the first program is an operating system.
[Appendix 7]
The information processing apparatus according to any one of appendices 1 to 6, wherein the second CPU further executes processing of a second program which is a program different from the first program.
[Appendix 8]
The second CPU performs the process related to the security not only when the first CPU is operating but also when the first CPU is stopped. 7. Information processing device.
[Appendix 9]
An information processing method performed by an information processing apparatus including a first CPU and a second CPU,
The first CPU executing a process based on a first program;
The second CPU further executing a process related to security of the information processing apparatus when the first CPU executes the process based on the first program;
An information processing method comprising:
[Appendix 10]
In an information processing apparatus including a first CPU and a second CPU,
A function in which the first CPU executes processing based on a first program;
A function in which the second CPU further executes a process related to security of the information processing apparatus when the first CPU executes a process based on the first program;
An information processing program characterized by realizing the above.

  DESCRIPTION OF SYMBOLS 1 ... Information processing apparatus, 11 ... 1st CPU, 12 ... 1st ROM, 13 ... 1st RAM, 14 ... 1st memory | storage part, 15 ... RTC Part, 16 ... drive, 17 ... first input part, 18 ... first display part, 21 ... second CPU, 22 ... second ROM, 23. 2 RAM, 24... Second storage section, 25... Sensor section, 26... Second input section, 27... Second display section, 31. ... Bluetooth module, 33 ... Wireless LAN antenna, 34 ... Wireless LAN module, 41 ... GPS antenna, 42 ... GPS module, 51 ... Removable media 111 ... First program Processing unit 211... Second program processing unit 212. Output suppression processing unit, 213... Operation control processing unit, 214... Authentication processing unit, 241... Authentication information, CG .. cover glass, BS .. black sheet, MB. substrate,

Claims (10)

An information processing apparatus,
A first CPU that executes processing based on the first program;
A second CPU that executes processing related to security of the information processing apparatus when the first CPU executes processing based on the first program;
An information processing apparatus comprising:   The information processing apparatus according to claim 1, wherein the second CPU stops the process related to security when a predetermined process executed by the second CPU is successful.   The information processing apparatus according to claim 1, wherein the second CPU performs a process for stopping the operation of the first CPU as the process related to the security. The first CPU continues to execute the process regardless of the process related to the security,
The information processing apparatus according to any one of claims 1 to 3, wherein the second CPU performs a process for suppressing an output from the first CPU as the process related to the security. A first display unit corresponding to the first CPU;
A second display unit corresponding to the second CPU and arranged to overlap the display area of the first display unit and capable of non-transparent display;
5. The information processing according to claim 1, wherein the second CPU performs a process for causing the second display unit to perform non-transparent display as the process related to the security. 6. apparatus.   The information processing apparatus according to claim 1, wherein the first program is an operating system.   The information processing apparatus according to claim 1, wherein the second CPU further executes processing of a second program that is a program different from the first program.   8. The process according to claim 1, wherein the second CPU performs the security-related processing not only when the first CPU operates but also when the first CPU stops operating. The information processing apparatus described in 1. An information processing method performed by an information processing apparatus including a first CPU and a second CPU,
The first CPU executing a process based on a first program;
The second CPU further executing a process related to security of the information processing apparatus when the first CPU executes the process based on the first program;
An information processing method comprising: In an information processing apparatus including a first CPU and a second CPU,
A function in which the first CPU executes processing based on a first program;
A function in which the second CPU further executes a process related to security of the information processing apparatus when the first CPU executes a process based on the first program;
An information processing program characterized by realizing the above.

Images