JP3993121B2 - Information processing apparatus and program addition method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information processing apparatus. as well as Information processing apparatus for adding a program to a program starting recording medium using a program adding module as well as It relates to the program addition method.
[0002]
[Prior art]
An information processing apparatus such as a personal computer performs various information processing by executing one or more programs respectively corresponding to information processing. In addition, an image forming apparatus (hereinafter referred to as a multi-function apparatus) as an application example of an information processing apparatus is provided with a display unit, a printing unit, an imaging unit, and the like in a single housing, and corresponds to a printer, a copy, a facsimile, and a scanner, respectively. These four types of programs are provided, and the programs are switched to operate as a printer, a copy, a facsimile, and a scanner. Patent Document 1 describes an example of a fusion machine as described above.
[0003]
In such an information processing apparatus or multi-function peripheral, a BIOS (Basic Input / Output System) and a boot loader (Boot Loader) are activated after power is turned on. The boot loader starts up the OS by expanding an operating system (OS) and a root file system on a RAM (Random Access Memory). Then, the OS mounts the root file system. Here, “mount” refers to starting up a file system or peripheral device in an accessible state.
[0004]
After the OS is started, a start program for starting a program such as an application (hereinafter referred to as an application) is started. The activation program is a process that is activated first in the information processing apparatus or the multifunction peripheral.
[0005]
The activation program is necessary for the operation of the information processing apparatus or the multifunction peripheral mounted on the program activation recording medium such as a hard disk device (HDD) or an SD (Secure Digital) card by mounting the file system according to a predetermined setting file. The program is started according to a predetermined setting file.
[0006]
In recent years, there has been an increasing demand for easily adding information processing apparatus and multifunction machine programs to a program start recording medium.
[0007]
[Patent Document 1]
JP 2002-84383 A
[0008]
[Problems to be solved by the invention]
However, since a program start recording medium that can be inserted and removed like an SD card can be used in a personal computer or the like, it is easy to cheat on the program such as falsification or duplication of the program recorded on the program start recording medium.
[0009]
Therefore, in a program start recording medium that can be inserted and removed, there is a possibility that a program newly added to the program start recording medium may be illegally added to an information processing apparatus or a multifunction peripheral that does not have the right (license) to add the program. was there.
[0010]
Therefore, when a program is added to a program start recording medium that can be inserted and removed from an information processing apparatus or a multi-function peripheral, a mechanism is provided to prevent unauthorized use of the program recorded on the program start recording medium. There was a problem that had to be secured.
[0011]
The present invention has been made in view of the above points, and is an information processing apparatus capable of adding a program to a program startup recording medium while ensuring the safety of the program recorded in the insertable program startup recording medium. as well as The purpose is to provide a program addition method.
[0012]
[Means for Solving the Problems]
Therefore, in order to solve the above-described problem, the present invention has a slot into which a plurality of recording media can be inserted and removed, and another one of the slots using a recording medium for program addition inserted into one of the slots. An information processing apparatus for adding a program to a program start recording medium inserted into the slot, a determination means for determining insertion of the program addition recording medium into the slot, and a program adding recording medium into the slot When it is determined that there is an insertion, the identification information of the program start recording medium is acquired and transmitted to a server for creating a file for adding a program to the program start recording medium, while the program is stored in the program start recording medium. When the file for adding the file is received from the server, the file is added according to the result of the authentication check of the file. Yes and additional means to add the trust file to the program starting recording medium The adding means reads the setting file and the first electronic signature file created from the setting file and the identification information of the program starting recording medium from the program adding recording medium, and adds to the program starting recording medium. And a second electronic signature file created from the program and the identification information of the information processing apparatus are received from the server, and an authentication check of the program to be added to the setting file and the program start recording medium is performed. It is characterized by that.
[0013]
Further, the present invention has a slot into which a plurality of recording media can be inserted and removed, and a program activation inserted into the other one of the slots using a recording medium for program addition inserted into one of the slots An information processing apparatus for adding a program to a recording medium, and determining means for determining insertion of a recording medium for adding a program into the slot; and determining that there has been insertion of a recording medium for adding a program into the slot; To acquire identification information of a program start recording medium and send it to a server that creates a part of a file for adding a program to the program start recording medium, while adding a program to the program start recording medium When a part of the file is received from the server, the program starting recording medium is transferred from the program adding recording medium. An adding means for reading a part of a file for adding a program and adding the acquired file to a program start recording medium according to a result of an authentication check of the file acquired from the server or the program adding recording medium; Have The adding means receives the first electronic signature file created from the setting file and the identification information of the program starting recording medium from the server, while the setting file and the program to be added to the program starting recording medium, Then, the second electronic signature file created from the program and the identification information of the information processing apparatus is read from the program addition recording medium, and an authentication check of the program to be added to the setting file and the program start recording medium is performed. It is characterized by that.
[0014]
Further, the present invention has a slot into which a plurality of recording media can be inserted and removed, and a program activation inserted into the other one of the slots using a recording medium for program addition inserted into one of the slots An information processing apparatus for adding a program to a recording medium, and determining means for determining insertion of a recording medium for adding a program into the slot; and determining that there has been insertion of a recording medium for adding a program into the slot; To acquire identification information of a program start recording medium and send it to a server that creates a part of a file for adding a program to the program start recording medium, while adding a program to the program start recording medium When a part of the file is received from the server, the program start recording medium is changed from the program start recording medium. Adding means for reading a part of a file for adding a program and adding the acquired file to the program start recording medium according to a result of an authentication check of the file acquired from the server or the program start recording medium; Have The adding means receives the first electronic signature file created from the setting file and the identification information of the program starting recording medium from the server, while the setting file and the program to be added to the program starting recording medium, Then, the second electronic signature file created from the program and the identification information of the information processing apparatus is read from the program start recording medium, and an authentication check of the program added to the setting file and the program start recording medium is performed. It is characterized by that.
[0015]
According to the present invention, a program addition recording medium for adding a program to the program activation recording medium can be created so that it can be used only by one program activation recording medium corresponding to the program addition recording medium. , A program addition recording medium that prevents a program from being illegally added to a plurality of program start recording media and ensures the safety of the program recorded in the removable program addition recording medium Program can be added to the program start recording medium.
[0016]
DETAILED DESCRIPTION OF THE INVENTION
Next, embodiments of the present invention will be described with reference to the drawings.
[0017]
FIG. 1 is a configuration diagram of an embodiment of an information processing apparatus according to the present invention. The information processing apparatus 1 is configured to include a software group 2, an activation unit 3, and hardware resources 4.
[0018]
The activation unit 3 is executed first when the information processing apparatus 1 is turned on, and activates a program activation unit described later. The program activation unit activates the software group 2 of the information processing apparatus 1. For example, the program activation unit of the activation unit 3 reads the program of the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n from the auxiliary storage device, the SD card, etc. Transfer the program to the memory device and start it.
[0019]
The hardware resource 4 includes hardware resources such as an input device, a display device, an auxiliary storage device, a memory device, an interface device, and an SD card slot. The software group 2 includes programs of an SD card check unit 11, a program addition unit 12, a system control unit 13, and applications 14-1 to 14-n activated on an OS such as UNIX (registered trademark). The OS performs parallel control of the programs of the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n as processes.
[0020]
An API (Application Program Interface) 15 is used to receive requests from the applications 14-1 to 14-n by a predefined function. The engine I / F 16 is used to transmit a request for the hardware resource 4 by a predefined function. Details of the SD card check unit 11, the program addition unit 12, the system control unit 13, and the program activation unit will be described later.
[0021]
Next, the hardware configuration of the information processing apparatus 1 will be described. FIG. 2 is a hardware configuration diagram of an embodiment of an information processing apparatus according to the present invention.
[0022]
2 includes an input device 21, a display device 22, an auxiliary storage device 23, a memory device 24, an arithmetic processing device 25, an interface device 26, and an SD card slot 27, which are mutually connected by a bus B. It is comprised so that it may have.
[0023]
The input device 21 includes a keyboard and a mouse, and is used to input various operation instructions. The display device 22 displays various windows and data necessary for operation. The interface device 26 is an interface for connecting the information processing device 1 to a network, and includes a modem, a router, and the like.
[0024]
The SD card slot 27 is a slot into which an SD card can be inserted and removed, and performs an interrupt in response to the insertion or removal of the SD card to an SD card driver described later. The auxiliary storage device 23 stores various files and data.
[0025]
The SD card and the auxiliary storage device 23 inserted into the SD card slot 27 are an SD card check unit 11, a program addition unit 12, a system control unit 13, and applications 14-1 to 14 that perform processing related to the information processing device 1. In addition to storing programs such as -n, various files and data necessary for processing the programs are stored.
[0026]
The memory device 24 includes an SD card check unit 11, a program addition unit 12, a system control unit 13, and applications 14-1 from the SD card inserted into the SD card slot 27 and the auxiliary storage device 23 when the information processing device 1 is activated. A program such as 14-n is read and stored. The arithmetic processing unit 25 executes processing according to programs such as the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n stored in the memory device 24.
[0027]
Next, the configuration of the compound machine 31 will be described as an application example of the information processing apparatus 1 according to the present invention. In this embodiment, the processing of the multi-function apparatus 31 will be mainly described, but the processing of the information processing apparatus 1 is the same.
[0028]
FIG. 3 is a block diagram of an embodiment of the compound machine according to the present invention. The multi-function machine 31 is configured to include a software group 32, a multi-function machine activation unit 33, and hardware resources 34.
[0029]
The software group 32 includes an application layer 35 and a platform 36 activated on an OS such as UNIX (registered trademark). The hardware resources 34 include a monochrome laser printer (B & W LP) 41, a color laser printer (Color LP) 42, and other hardware resources 43 such as a scanner and a facsimile.
[0030]
The application layer 35 includes a printer application 51, a copy application 52, a fax application 53, a scanner application 54, and a net file application that perform processing specific to each user service related to image formation such as a printer, copy, fax, and scanner. 55.
[0031]
Further, the platform 36 interprets the processing request from the application layer 35 and generates a hardware resource 34 acquisition request, and manages the hardware resource 34 and acquires the acquisition request from the control service layer 37. Including a system resource manager (SRM) 69 that arbitrates and a handler layer 38 that manages hardware resources 34 in response to an acquisition request from the SRM 69.
[0032]
The control service layer 37 includes a network control service (NCS) 61, a delivery control service (DCS) 62, an operation panel control service (OCS) 63, a fax control service (FCS) 64, an engine control service (ECS) 65, and a memory control service. (MCS) 66, user information control service (UCS) 67, system control service (SCS) 68, and the like are configured to include one or more service modules.
[0033]
The platform 36 is configured to have an API 81. The OS executes the software of the application layer 35 and the platform 36 in parallel as processes.
[0034]
The process of the NCS 61 distributes data received by each protocol from the network side to each application, and mediates when data from each application is transmitted to the network side. For example, the NCS 61 controls data communication with a client connected to the multi-function apparatus 31 via a network.
[0035]
The process of the DCS 62 performs control such as delivery of document data stored in the compound machine. The process of the OCS 63 controls an operation panel serving as information transmission means between the operator and the main body control.
[0036]
The FCS64 process provides APIs for sending and receiving faxes using the PSTN or ISDN network from the application layer 35, registering / quoting various fax data managed in the backup memory, reading faxes, receiving fax printing, etc. To do.
[0037]
The ECS 65 process controls engine units such as the monochrome laser printer 41, the color laser printer 42, and the hardware resource 43. The process of the MCS 66 performs memory control such as acquisition and release of memory, use of the HDD, compression and decompression of image data. The UCS 67 process manages user information.
[0038]
The process of the SCS 68 performs processing such as application management, operation unit control, system screen display, LED display, hardware resource management, and interrupt application control.
[0039]
The SRM 69 process controls the system and manages the hardware resources 34 together with the SCS 68. For example, the process of the SRM 69 performs execution control in accordance with an acquisition request from an upper layer using the hardware resource 34.
[0040]
Specifically, the process of the SRM 69 determines whether the requested hardware resource 34 is available (whether it is not used by another acquisition request), and if it is available, the requested hardware is obtained. The upper layer is notified that the resource 34 is available.
[0041]
In addition, the process of the SRM 69 performs scheduling for using the hardware resource 34 in response to an acquisition request from an upper layer, and the request contents (for example, paper conveyance and image forming operation by the printer engine, memory allocation, file generation, etc.) Has been implemented directly.
[0042]
The handler layer 38 includes a fax control unit handler (FCUH) 70 that manages a fax control unit (FCU), which will be described later, and an image memory handler (IMH) that allocates a memory area to the process and manages the memory area allocated to the process. 71. The SRM 69 and the FCUH 70 use the engine I / F 82 to make a processing request for the hardware resource 34. With the configuration shown in FIG. 3, the multi-function apparatus 31 can centrally process the processes commonly required for each application by the platform 36.
[0043]
Next, the hardware configuration of the compound machine 31 will be described. FIG. 4 is a hardware configuration diagram of an embodiment of the compound machine according to the present invention.
[0044]
The multi-function machine 31 includes a controller 100, an operation panel 120, an FCU 121, and an engine unit 122. The controller 100 includes a CPU 101, a system memory 102, a north bridge (NB) 103, a south bridge (SB) 104, an ASIC 106, a local memory 107, an HDD 108, a network interface card (NIC) 109, and an SD card. Slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113.
[0045]
The operation panel 120 is connected to the ASIC 106 of the controller 100. Further, the FCU 121 and the engine unit 122 are connected to the ASIC 106 of the controller 100 via the PCI bus 123.
[0046]
In the controller 100, a local memory 107, an HDD 108, and the like are connected to the ASIC 106, and the CPU 101 and the ASIC 106 are connected to each other via the NB 103 of the CPU chip set. The controller 100 corresponds to the case where the interface of the CPU 101 is not disclosed by connecting the CPU 101 and the ASIC 106 via the NB 103. The ASIC 106 and the NB 103 are connected via an AGP (Accelerated Graphics Port) 105.
[0047]
Thus, in order to control the execution of one or more processes forming the application layer 35 and the platform 36 in FIG. 3, the ASIC 106 and the NB 103 are connected via the AGP 105 instead of the low-speed PCI bus to prevent performance degradation. It is out.
[0048]
The CPU 101 performs overall control of the compound machine 31. For example, the CPU 101 starts and executes NCS61, DCS62, OCS63, FCS64, ECS65, MCS66, UCS67, SCS68, SRM69, FCUH70, and IMH71 as processes on the OS, and at the same time, the printer application 51 that forms the application layer 35, the copy The application 52, the fax application 53, the scanner application 54, and the net file application 55 are activated and executed.
[0049]
The NB 103 is a bridge for connecting the CPU 101, system memory 102, SB 104, ASIC 106, NIC 109, SD card slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113.
[0050]
The SB 104, NIC 109, SD card slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113 are connected to the NB 103 via the PCI bus 114. The SB 104 is a bridge for connecting the PCI bus 114 to the ROM, peripheral devices, and the like.
[0051]
The system memory 102 is a memory used as a drawing memory of the multi-function apparatus 31. The local memory 107 is a memory used as a copy image buffer and a code buffer.
[0052]
The ASIC 106 is an IC for image processing applications having hardware elements for image processing. The HDD 108 is an example of a storage (auxiliary storage device) that stores image data, document data, programs, font data, forms, and the like.
[0053]
The NIC 109 is an interface device that connects the compound machine 31 to a network. The SD card slot 110 is a slot into which an SD card can be inserted / removed, and an interrupt corresponding to the insertion / extraction of the SD card is performed to an SD card driver described later. The USB device 111, the IEEE 1394 device 112, and the Centronics 113 are interfaces conforming to the respective standards.
[0054]
The operation panel 120 is an operation unit that accepts an input operation from an operator and performs display for the operator. The FCU 121 has a memory. The memory of the FCU 121 is used for temporarily storing facsimile data received when the power of the multi-function apparatus 31 is OFF, for example.
[0055]
The compound machine starting unit 33 in FIG. 3 is executed first when the compound machine 1 is turned on, and activates the application layer 35 and the platform 36. FIG. 5 shows a configuration diagram of an example of the compound machine starting unit. The multi-function apparatus activation unit 33 includes a ROM monitor 130 and a program activation unit 131.
[0056]
The BIOS and the ROM monitor 130 as a boot loader are executed when the power is turned on, and perform initialization of hardware, diagnosis of the controller 100, initialization of software, and the like. The ROM monitor 130 expands the OS and the root file system on the system memory 102 and activates the OS. Then, the OS mounts the root file system.
[0057]
The program activation unit 131 is called from the OS and secures a memory area on the system memory 102 and the local memory 107. The program activation unit 131 is a process that is activated first in the multifunction machine 1 and mounts a file system according to a predetermined setting file.
[0058]
The program activation unit 131 reads out the programs of the application layer 35 and the platform 36 necessary for the operation of the multi-function apparatus 31 from the HDD 108, the SD card, the ROM, and the like according to a predetermined setting file. The process of the application layer 35 and the platform 36 is started by expanding the memory area secured above.
[0059]
Furthermore, the process of the program starting part 131 is demonstrated. The program activation unit 131 reads a predetermined master setting file at the time of activation, and mounts a file system and activates a process according to the read master setting file. Further, when there is a mount description in the read master setting file, the program activation unit 131 executes a mount process according to the mount description.
[0060]
Further, the program activation unit 131 sets a predetermined setting when a predetermined setting file exists at the root of the mounted file system or when a predetermined directory including a file with a predetermined extension exists at the root of the mounted file system. A file or a file with a predetermined extension is read to mount the file system.
[0061]
A file system that can be mounted by the program activation unit 131 includes “gzromfs”. The file system “gzromfs” expands and mounts a gzip compressed ROMFS format file on a RAM.
[0062]
Hereinafter, an embodiment in which a program is added to an application activation SD card as a program activation recording medium using a program addition module will be described with reference to the drawings.
[0063]
(First embodiment)
The program addition method according to the first embodiment of the present invention is an example in which a program is added to an application activation SD card using an application addition SD card as a program addition recording medium.
[0064]
FIG. 6 is a schematic diagram illustrating an example of a program addition method according to the first embodiment of the present invention. The compound machine 31 has an application activation SD card 141 inserted into one of the SD card slots 110.
[0065]
In step S100, the application adding SD card 140 is inserted into the other SD card slot 110 of the multi-function apparatus 31, and the program adding unit 133 is read by the program adding module read from the application adding SD card 140. It is activated. The program adding unit 133 acquires the serial ID of the application activation SD card 141 and encrypts it with the public key.
[0066]
In step S200, the program adding unit 133 of the compound machine 31 connects to the server 150 via the network 200 such as the Internet or a LAN, and establishes a session with the server 150 through a necessary procedure such as authentication processing. The program adding unit 133 transmits the encrypted serial ID of the application activation SD card 141 to the server 150.
[0067]
In step S <b> 300, the program adding unit 133 transmits model information and application information to the server 150 in response to a request from the server 150. Here, the model information is information unique to the compound machine 31. The application information is information on an application to be added to the application activation SD card 141 of the multi-function apparatus 31. The program adding unit 133 acquires model information and application information from the application adding SD card 140.
[0068]
In step S400, the server 150 decrypts the serial ID of the encrypted application activation SD card 141 acquired in step S300 with the secret key, and the serial ID of the application activation SD card 141 and the model received in step S300. Using the information and the application information, a file for adding a program to the application activation SD card 141 is created.
[0069]
In step S500, the server 150 transmits a file for adding a program to the application activation SD card 141 created in step S400 to the program adding unit 133 of the MFP 31 via the network 200. In step S600, the program adding unit 133 performs an authentication check as will be described later on the file for adding the program to the application activation SD card 141 of the multi-function apparatus 31.
[0070]
If the authentication check is OK, the program adding unit 133 performs the process of step S700. In step S700, the program addition unit 133 adds a program to the application activation SD card 141 using the file for adding a program to the application activation SD card 141 received in step S500.
[0071]
Next, the process of FIG. 6 will be described in detail. FIG. 7 is an explanatory diagram of an example of the process of step S100. In the explanatory diagram of FIG. 7, a configuration necessary for the description of the configuration of the multi-function apparatus 31 is shown, and a configuration unnecessary for the description is omitted.
[0072]
In step S101, the application adding SD card 140 is inserted into the SD card slot 110 of the multi-function apparatus 31. The SD card slot 110 interrupts the SD card driver 137 in accordance with the insertion of the application adding SD card 140.
[0073]
In step S <b> 102, the OS 136 notifies the program activation unit 131 of SD card insertion detection in response to an interrupt to the SD card driver 137. In step S103, the program activation unit 131 activates the SD card check unit 132. In step S104, the SD card checking unit 132 mounts the application adding SD card 140, notifies the program starting unit 131 that the application adding SD card 140 has been mounted, and stops the processing.
[0074]
When it is notified that the application addition SD card 140 has been mounted, the process proceeds to step S105, where the program activation unit 131 performs an authentication check of the application addition SD card 140 using the electronic authentication check library 134.
[0075]
The authentication check in step S105 includes, for example, a setting file authentication check shown in FIG. 8 and a mount target module authentication check shown in FIG.
[0076]
For example, the authentication check of the setting file is performed as in the flowchart shown in FIG. FIG. 8 is a flowchart of an example of a setting file authentication check process.
[0077]
In step S800, the program activation unit 131 determines whether or not the application addition SD card 140 has a target file to be used for a setting file authentication check. The target file used for the authentication check of the setting file includes the setting file and an electronic signature file created from the setting file and a message digest (hereinafter referred to as MD) of the serial ID of the application adding SD card 140.
[0078]
FIG. 9 is an image diagram of an example of a target file recorded on the application adding SD card. In the example of FIG. 9, “inst.cnf” represents the setting file, “inst.lic” represents the electronic signature file used for the authentication check of the setting file, and “inst.mod” represents the module file to be mounted. , “Inst.mac” represents an electronic signature file used for the authentication check of the mount target module.
[0079]
If it is determined that there is a target file to be used for the setting file authentication check (YES in S800), the program activation unit 131 acquires the setting file and the electronic signature file to be used for the setting file authentication check from the application addition SD card 140. Then, the process proceeds to step S801.
[0080]
In step S <b> 801, the program activation unit 131 acquires a serial ID from the application adding SD card 140. In step S803, the program activation unit 131 creates MD1 of the setting file acquired in step S800 and the serial ID of the application adding SD card 140 acquired in step S801. In step S803, the program activation unit 131 creates MD2 by decrypting the electronic signature file acquired in step S800 with a public key.
[0081]
In step S804, the program activation unit 131 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S804), the program activation unit 131 proceeds to step S805, and determines that the setting file authentication check is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S804), the program activation unit 131 proceeds to step S806 and determines that the setting file authentication check is NG.
[0082]
This is because, if MD1 and MD2 are not equal, the file recorded on the application adding SD card 140 is likely to be illegally copied. If it is determined that the target file to be used for the setting file authentication check does not exist (NO in S800), the program activation unit 131 proceeds to step S806 and determines that the setting file authentication check is NG.
[0083]
For example, the authentication check of the mount target module is performed as in the flowchart shown in FIG. FIG. 10 is a flowchart of an example of the authentication check process for the mount target module.
[0084]
In step S810, the program activation unit 131 determines whether or not a target file to be used for the authentication check of the mount target module exists in the application addition SD card 140. The target file used for the authentication check of the mount target module includes a mount target module file and an electronic signature file created from the module file and the MD of the model information unique to the multi-function apparatus 31.
[0085]
If it is determined that there is a target file to be used for the authentication check of the mount target module (YES in S810), the program activation unit 131 is used for the authentication check of the mount target module file and the mount target module file from the application addition SD card 140. The electronic signature file to be acquired is acquired, and the process proceeds to step S811.
[0086]
In step S811, the program activation unit 131 acquires model information unique to the multi-function apparatus 31. In step S812, the program activation unit 131 creates MD1 of the module file acquired in step S810 and the model information unique to the multi-function peripheral 31 acquired in step S811. In step S813, the program activation unit 131 creates MD2 by decrypting the electronic signature file acquired in step S810 with a public key.
[0087]
In step S814, the program activation unit 131 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S814), the program activation unit 131 proceeds to step S815 and determines that the authentication check of the mount target module is OK.
[0088]
On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S814), the program activation unit 131 proceeds to step S816 and determines that the authentication check of the mount target module is NG.
[0089]
This is because, if MD1 and MD2 are not equal, the file recorded on the application adding SD card 140 is likely to have been illegally copied or tampered. If it is determined that the target file to be used for the authentication check of the mount target module does not exist (NO in S810), the program activation unit 131 proceeds to step S816 and determines that the authentication check of the mount target module is NG.
[0090]
Returning to FIG. 7, if the authentication check of the application adding SD card 140 is OK, the program activation unit 131 proceeds to step S106, and if it is NG, the program activation unit 131 returns to the event waiting state.
[0091]
In step S <b> 106, the program activation unit 131 activates the program addition unit 133 using the program addition module in the application addition SD card 140.
[0092]
In step S107, the program adding unit 133 acquires the serial ID of the application activation SD card 141 from the application activation SD card 141. The program adding unit 133 encrypts the acquired serial ID of the application activation SD card 141 with a public key.
[0093]
In step S108, the program adding unit 133 transmits the encrypted serial ID of the application activation SD card 141 to the server 150 via the NCS 61 and the network 200. According to the processing in FIG. 7, the encrypted serial ID of the application activation SD card 141 can be transmitted to the server 150.
[0094]
FIG. 11 is an explanatory diagram of an example of the process of step S400. The encrypted serial ID 152 of the application activation SD card 141 is the one received from the multi-function apparatus 31 in the process of step S200. The model information 153 and the application information 154 are received from the multi-function apparatus 31 in the process of step S300.
[0095]
In step S401, the server 150 decrypts the encrypted serial ID 152 with the secret key. In step S402, the server 150 uses the setting file “apl.cnf” corresponding to the model information 153 and the application information 154, the mount target module “apl.mod”, and the electronic signature file used for the authentication check of the mount target module. Select the group 155 of “apl.mac”.
[0096]
In step S403, the server 150 reads the setting file “apl.cnf” 157 from the group 155 selected in step S402. In step S404, the server 150 creates an MD 158 from the decrypted serial ID 156 of the application activation SD card 141 and the setting file 157 read in step S403.
[0097]
In step S405, the server 150 encrypts the MD 158 created in step S404 with a secret key, and creates an electronic signature file “apl.lic” 159 that is used for an authentication check of the setting file. In step S406, the server 150 creates a new group 160 in which the electronic signature file 159 created in step S405 is added to the group 155.
[0098]
The group 160 created in step S406 is transmitted to the compound machine 31 in the process of step S500. According to the process of FIG. 11, a file for adding a program to the application activation SD card 141 can be transmitted to the multi-function apparatus 31.
[0099]
FIG. 12 is an explanatory diagram of an example of the process of step S600. In the explanatory diagram of FIG. 12, a configuration necessary for the description of the configuration of the multi-function apparatus 31 is shown, and a configuration not necessary for the description is appropriately omitted.
[0100]
The program adding unit 133 sets the setting file “apl.cnf” as the file for adding the program from the server 150 to the application activation SD card 141 in the process of step S500, and the electronic signature file “ “apl.lic”, the mount target module “apl.mod”, and the electronic signature file “apl.mac” used for the authentication check of the mount target module are received.
[0101]
In step S600, the program adding unit 133 receives the setting file “apl.cnf” received in step S500, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted, and The electronic signature file “apl.mac” used for the authentication check of the mount target module is checked using the electronic authentication check library 135.
[0102]
The authentication check in step S600 includes, for example, a setting file authentication check shown in FIG. 8 and a mount target module authentication check shown in FIG. Details of the authentication check in step S506 will be described with reference to FIGS. 8 and 10 described above.
[0103]
In step S800 of FIG. 8, the program adding unit 133 uses the target file used for the authentication check of the setting file among the files received in step S500, for example, the setting file “apl.cnf”, and is used for the authentication check of the setting file. It is determined whether or not the electronic signature file “apl.lic” exists.
[0104]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the setting file exist (YES in S800), the program adding unit 133 proceeds to step S801.
[0105]
In step S <b> 801, the program adding unit 133 acquires a serial ID from the application activation SD card 141 instead of the application addition SD card 140. In step S802, the program adding unit 133 creates MD1 of the setting file “apl.cnf” and the serial ID of the application activation SD card 141 acquired in step S801. In step S803, the program adding unit 133 generates MD2 by decrypting the electronic signature file “apl.lic” used for the authentication check of the setting file with the public key.
[0106]
In step S804, the program adding unit 133 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S804), the program adding unit 133 proceeds to step S805, and determines that the setting file authentication check is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S24), program adding unit 133 proceeds to step S806 and determines that the setting file authentication check is NG.
[0107]
If MD1 and MD2 are not equal, the file received from the server 150 in step S500 is to add a program to another application activation SD card instead of the application activation SD card 141 that acquired the serial ID in step S801. This is because it is highly possible that the file was created.
[0108]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the setting file do not exist (NO in S800), the program adding unit 133 proceeds to step S806, and the setting file Is determined to be NG.
[0109]
In step S810 of FIG. 10, the program adding unit 133 includes a target file used for the authentication check of the mount target module in the file received in step S500, for example, the mount target module “apl.mod”, and the mount target module authentication. It is determined whether or not the electronic signature file “apl.mac” used for the check exists.
[0110]
When it is determined that the mount target module “apl.mod” and the electronic signature file “apl.mac” used for the authentication check of the mount target module exist (YES in S810), the program adding unit 133 proceeds to step S811. In step S811, the program adding unit 133 acquires model information unique to the multi-function apparatus 31. Proceeding to step S812, the program adding unit 133 creates MD1 of the module “apl.mod” to be mounted and the model information unique to the MFP 31 acquired at step S811.
[0111]
In step S813, the program adding unit 133 creates MD2 by decrypting the electronic signature file “apl.mac” used for the authentication check of the mount target module with the public key.
[0112]
In step S814, the program adding unit 133 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S814), the program adding unit 133 proceeds to step S815 and determines that the authentication check of the mount target module is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S814), the program adding unit 133 proceeds to step S816 and determines that the authentication check of the mount target module is NG.
[0113]
If MD1 and MD2 are not equal, the file received from the server 150 in step S500 was created to add a program to another compound machine, not the compound machine 31 that acquired the unique model information in step S811. This is because the possibility is high.
[0114]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the mount target module do not exist (NO in S810), the program adding unit 133 proceeds to step S816 and mounts. The authentication check of the target module is determined as NG.
[0115]
Returning to FIG. 12, if the authentication check in step S600 is OK, the program adding unit 133 proceeds to step S700, and if not, returns to the event waiting state. In step S700, the program adding unit 133 receives the setting file “apl.cnf” received in step S500, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted, and A program is added to the application activation SD card 141 using the electronic signature file “apl.mac” used for the authentication check of the mount target module.
[0116]
According to the processing of FIG. 12, the setting file “apl.cnf”, the electronic signature file “apl.lic” used for the authentication check of the setting file, the mount target module “apl.mod”, and the mount target module authentication check An application activation card 141 as shown in FIG. 13 in which the electronic signature file “apl.mac” to be used is written can be created.
[0117]
FIG. 13 is an image diagram of an example of an application activation SD card to which a program is added. In the example of FIG. 13, “apl.cnf” under the directory “init.d” represents a setting file, and “apl.lic” represents an electronic signature file used for an authentication check of the setting file. Further, “apl.mod” under the directory “module” represents a module to be mounted, and “apl.mac” represents an electronic signature file used for an authentication check of the module to be mounted.
[0118]
(Second embodiment)
The program addition method according to the second embodiment of the present invention is an example of adding a program to the application activation SD card 141 using the application addition SD card 140 as a program addition recording medium. The program addition method of the second embodiment differs from the program addition method of the first embodiment in the files recorded on the application addition SD card 140.
[0119]
FIG. 14 is an image diagram of an example of an application addition SD card used in the program addition method of the second embodiment. In the example of FIG. 14, “inst.cnf” represents the setting file for the program addition module, “inst.lic” represents the electronic signature file used for the authentication check of the setting file, and “inst.mod” represents the mount target "Inst.mac" represents an electronic signature file used for the authentication check of the program addition module, and "apl.cnf" represents a program setting file to be added to the application activation SD card 141. "Apl.lic" represents the electronic signature file used for the authentication check of the setting file, "apl.mod" represents the module to be mounted, and "apl.mac" is used for the authentication check of the mount target module. Represents an electronic signature file.
[0120]
FIG. 15 is a schematic diagram illustrating an example of a program addition method according to the second embodiment of the present invention. The compound machine 31 has an application activation SD card 141 inserted into one of the SD card slots 110.
[0121]
The processing in steps S100 to S300 is the same as the processing in steps S100 to S300 in FIG. In step S400, the server 150 decrypts the encrypted serial ID of the application activation SD card 141 acquired in step S300 with the secret key, and the serial ID of the application activation SD card 141 and the model received in step S300. Using the information and the application information, an electronic signature file “apl.lic” used for an authentication check of the setting file “apl.cnf” is created in the application activation SD card 141.
[0122]
In step S500, the server 150 transmits the electronic signature file “apl.lic” created in step S400 to the program adding unit 133 of the multi-function peripheral 31 via the network 200. In step S510, the program adding unit 133 uses the setting file “apl.cnf”, the mount target module “apl.mod”, and the mount target module “apl.mod” from the application adding SD card 140 for authentication check. The electronic signature file “apl.mac” is read.
[0123]
In step S600, the program adding unit 133 performs the authentication check as described above for the file for adding the program to the application activation SD card 141 of the multi-function apparatus 31 acquired in steps S500 and S510.
[0124]
If the authentication check is OK, the program adding unit 133 performs the process of step S700. In step S700, the program adding unit 133 authenticates the setting file “apl.cnf”, the mount target module “apl.mod”, and the mount target module “apl.mod” recorded in the application adding SD card 140. Using the electronic signature file “apl.mac” used for the check and the electronic signature file “apl.lic” used for the authentication check of the setting file “apl.cnf” received in step S500, the application activation SD card 141 adds a program.
[0125]
According to the process of FIG. 15, the download load from the server 150 to the multi-function apparatus 31 can be reduced as compared with the process of FIG. Next, the processing different from that in FIG. 6 in the processing in FIG. 15 will be described in detail.
[0126]
FIG. 16 is an explanatory diagram of another example of the process of step S400. The encrypted serial ID 152 of the application activation SD card 141 is the one received from the multi-function apparatus 31 in the process of step S200. The model information 153 and the application information 154 are received from the multi-function apparatus 31 in the process of step S300.
[0127]
In step S401, the server 150 decrypts the encrypted serial ID 152 with the secret key. In step S402, the server 150 selects the setting file “apl.cnf” 157 corresponding to the model information 153 and the application information 154.
[0128]
In step S403, the server 150 reads the setting file “apl.cnf” 157 selected in step S402. In step S404, the server 150 creates an MD 158 from the decrypted serial ID 156 of the application activation SD card 141 and the setting file 157 read in step S403.
[0129]
In step S405, the server 150 encrypts the MD 158 created in step S404 with a secret key, and creates an electronic signature file “apl.lic” 159 that is used for an authentication check of the setting file. The electronic signature file “apl.lic” 159 created in step S405 is transmitted to the multi-function apparatus 31 in the process of step S500. According to the processing of FIG. 16, the electronic signature file “apl.lic” 159 can be transmitted to the multi-function apparatus 31.
[0130]
FIG. 17 is an explanatory diagram of another example of the process of step S600. In the explanatory diagram of FIG. 17, a configuration necessary for the description of the configuration of the multi-function apparatus 31 is shown, and a configuration not necessary for the description is appropriately omitted.
[0131]
The program adding unit 133 receives the electronic signature file “apl.lic” from the server 150 in the process of step S500. In step S510, the program adding unit 133 performs an authentication check of the setting file “apl.cnf” under the directory “addmod”, the mount target module “apl.mod”, and the mount target module from the application adding SD card 140. The electronic signature file “apl.mac” to be used is read out.
[0132]
In step S600, the program adding unit 133 receives the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S510, the mount target module “apl.mod”, and the electronic signature file. “Apl.mac” is subjected to an authentication check using the electronic authentication check library 135 as described above.
[0133]
The program addition unit 133 proceeds to step S700 if the authentication check in step S600 is OK, and returns to the event waiting state if it is NG. In step S700, the program adding unit 133 receives the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S510, the mount target module “apl.mod”, and the electronic signature file. A program is added to the application activation SD card 141 using “apl.mac”.
[0134]
According to the processing of FIG. 17, the setting file “apl.cnf”, the electronic signature file “apl.lic” used for the authentication check of the setting file, the mount target module “apl.mod”, and the mount target module authentication check An application activation card 141 as shown in FIG. 13 in which the electronic signature file “apl.mac” to be used is written can be created.
[0135]
(Third embodiment)
The program addition method according to the third embodiment of the present invention is an example in which a program is added to the application activation SD card 141 using the application addition SD card 140 as a program addition recording medium. Note that the program addition method of the third embodiment differs from the program addition method of the first embodiment in that the files recorded in advance on the application activation SD card 141 are different.
[0136]
FIG. 18 is an image diagram of an example of an application activation SD card used in the program addition method of the third embodiment. In the example of FIG. 18, “apl.cnf” represents a setting file of a program to be added to the application activation SD card 141, “apl.lic” represents an electronic signature file used for an authentication check of the setting file, and “apl. “.Mod” represents a module to be mounted, and “apl.mac” represents an electronic signature file used for an authentication check of the module to be mounted.
[0137]
FIG. 19 is a schematic diagram illustrating an example of a program adding method according to the third embodiment of the present invention. The compound machine 31 has an application activation SD card 141 inserted into one of the SD card slots 110.
[0138]
The processing in steps S100 to S500 is the same as the processing in steps S100 to S500 in FIG. In step S520, the program adding unit 133 reads the setting file “apl.cnf”, the mount target module “apl.mod”, and the electronic signature file “apl.mac” from the application activation SD card 141.
[0139]
In step S600, the program adding unit 133 performs the above-described authentication check on the file for adding a program to the application activation SD card 141 of the multi-function apparatus 31 acquired in steps S500 and S520.
[0140]
If the authentication check is OK, the program adding unit 133 performs the process of step S700. In step S700, the program adding unit 133 reads the setting file “apl.cnf” read in step S520, the mount target module “apl.mod”, the electronic signature file “apl.mac”, and the setting file received in step S500. A program is added to the application activation SD card 141 using the electronic signature file “apl.lic” used for the authentication check of “apl.cnf”.
[0141]
According to the process of FIG. 19, the download load from the server 150 to the multi-function apparatus 31 can be reduced as compared with the process of FIG. Next, in the processing of FIG. 19, the processing different from that of FIGS. 6 and 15 will be mainly described.
[0142]
FIG. 20 is an explanatory diagram of another example of the process of step S600. In the explanatory diagram of FIG. 20, a configuration necessary for the description of the configuration of the multi-function apparatus 31 is shown, and a configuration unnecessary for the description is appropriately omitted.
[0143]
The program adding unit 133 receives the electronic signature file “apl.lic” from the server 150 in the process of step S500. In step S520, the program adding unit 133 performs an authentication check of the setting file “apl.cnf” under the directory “addmod”, the mount target module “apl.mod”, and the mount target module from the application activation SD card 141. The electronic signature file “apl.mac” to be used is read out.
[0144]
In step S600, the program adding unit 133 receives the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S520, the mount target module “apl.mod”, and the electronic signature file. “Apl.mac” is subjected to an authentication check using the electronic authentication check library 135 as described above.
[0145]
The program addition unit 133 proceeds to step S700 if the authentication check in step S600 is OK, and returns to the event waiting state if it is NG. In step S700, the program adding unit 133 receives the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S520, the mount target module “apl.mod”, and the electronic signature file. A program is added to the application activation SD card 141 using “apl.mac”.
[0146]
According to the process of FIG. 20, the setting file “apl.cnf”, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted, and the authentication check of the mount target module An application activation card 141 as shown in FIG. 13 in which the electronic signature file “apl.mac” to be used is written can be created.
[0147]
In the first to third embodiments described above, when the application adding SD card 140 is inserted into the SD card slot 110 of the multi-function apparatus 31, the processing according to the program adding method of the present invention is started. The process according to the program addition method of the present invention is started by an operation from the operation panel 120 or an operation from a PC or the like connected directly to the multi-function apparatus 31 via USB or the like via the network 200. Also good.
[0148]
In this case, for example, the application adding SD card 140 may be used as in the first to third embodiments described above, or the file recorded on the application adding SD card 140 is downloaded via the network 200. You may do it.
[0149]
Further, the application adding SD card 140 may be created using a predetermined server for recording a file on the application adding SD card 140, for example, or a device having a function of connecting to the predetermined server (for example, You may create by recording the file downloaded using a mobile phone, PDA, etc.).
[0150]
In the present embodiment, the processing of the multi-function apparatus 31 has been mainly described. However, application to the information processing apparatus 1 illustrated in FIGS. 1 and 2 is easy. Further, the present invention is not limited to the specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims.
[0151]
【The invention's effect】
As described above, according to the present invention, it is possible to add a program to the program start recording medium while ensuring the safety of the program recorded on the insertable and removable program start recording medium.
[0152]
[Brief description of the drawings]
FIG. 1 is a configuration diagram of an embodiment of an information processing apparatus according to the present invention.
FIG. 2 is a hardware configuration diagram of an embodiment of an information processing apparatus according to the present invention.
FIG. 3 is a block diagram of an embodiment of a compound machine according to the present invention.
FIG. 4 is a hardware configuration diagram of an embodiment of a compound machine according to the present invention.
FIG. 5 shows a configuration diagram of an example of a compound machine starting unit.
FIG. 6 is a schematic diagram illustrating an example of a program addition method according to the first embodiment of the present invention.
FIG. 7 is an explanatory diagram illustrating an example of a process in step S100.
FIG. 8 is a flowchart of an example of a setting file authentication check process;
FIG. 9 is an image diagram of an example of a target file recorded on an application adding SD card.
FIG. 10 is a flowchart illustrating an example of authentication check processing for a mount target module;
FIG. 11 is an explanatory diagram of an example of a process in step S400.
FIG. 12 is an explanatory diagram of an example of a process in step S600.
FIG. 13 is an image diagram of an example of an application activation SD card to which a program is added.
FIG. 14 is an image diagram of an example of an application addition SD card used in the program addition method of the second embodiment.
FIG. 15 is a schematic diagram illustrating an example of a program addition method according to the second embodiment of the present invention.
FIG. 16 is an explanatory diagram of another example of the process of step S400.
FIG. 17 is an explanatory diagram of another example of the process in step S600.
FIG. 18 is an image diagram of an example of an application activation SD card used in the program addition method of the third embodiment.
FIG. 19 is a schematic diagram illustrating an example of a program addition method according to a third embodiment of the present invention.
FIG. 20 is an explanatory diagram of another example of the process in step S600.
[Explanation of symbols]
1 Information processing equipment
2,32 software group
3 Starter
4 Hardware resources
11,132 SD card check section
12,133 Program addition part
13 System controller
27,110 SD card slot
31 Fusion machine
33 Fusion machine starting part
34 Hardware resources
61 NCS
68 SCS
110 SD card slot
120 Operation panel
131 Program starter
136 Operating System (OS)
137 SD card driver
140 SD card for application addition
141 SD card for application launch
150 servers

Claims (18)

A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
Determining means for determining insertion of a program-adding recording medium into the slot;
If it is determined that the program addition recording medium has been inserted into the slot, the identification information of the program activation recording medium is acquired and transmitted to a server that creates a file for adding a program to the program activation recording medium on the other hand,
When a file for adding a program to the program start recording medium is received from the server, there is an adding means for adding the received file to the program start recording medium according to the result of the authentication check of the file. And
The adding means reads the setting file and the first electronic signature file created from the setting file and the identification information of the program starting recording medium from the program adding recording medium, and adds the program to the program starting recording medium And a second electronic signature file created from the program and the identification information of the information processing apparatus is received from the server, and an authentication check of the program added to the setting file and the program start recording medium is performed. Information processing apparatus. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
Determining means for determining insertion of a program-adding recording medium into the slot;
A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program addition recording medium , in response to said authentication result of the check of the file obtained from the server or program additional recording medium, possess an additional means for adding said acquired file to the program starting recording medium,
The adding means receives the first electronic signature file created from the identification information of the setting file and the program start recording medium from the server, while adding the setting file and the program to the program start recording medium, A second electronic signature file created from the program and the identification information of the information processing apparatus is read from the program addition recording medium, and an authentication check of the program added to the setting file and the program start recording medium is performed. Information processing apparatus. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
Determining means for determining insertion of a program-adding recording medium into the slot;
A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program start recording medium , in response to said authentication check result file obtained from the server, or program starting recording medium, possess an additional means for adding said acquired file to the program starting recording medium,
The adding means receives the first electronic signature file created from the identification information of the setting file and the program start recording medium from the server, while adding the setting file and the program to the program start recording medium, A second electronic signature file created from the program and the identification information of the information processing apparatus is read from the program start recording medium, and an authentication check of the program added to the setting file and the program start recording medium is performed. Information processing apparatus. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  If it is determined that the program addition recording medium has been inserted into the slot, the identification information of the program activation recording medium is acquired and transmitted to a server that creates a file for adding a program to the program activation recording medium on the other hand,
  When a file for adding a program to the program start recording medium is received from the server, an adding means for adding the received file to the program start recording medium according to a result of an authentication check of the file;
Have
  The determination means includes monitoring means for monitoring insertion and removal of the recording medium with respect to the slot;
  Authentication check means for performing an authentication check for determining whether the recording medium inserted in the slot is a recording medium for program addition;
Have
  The authentication check means includes a setting file, a first electronic signature file created from identification information of the setting file and a recording medium for adding a program, a program for starting a writing means, the program, and the information processing An information processing apparatus which reads a second electronic signature file created from the identification information of the apparatus from a recording medium for program addition and performs an authentication check of a program for starting the setting file and the writing means . A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program addition recording medium Adding means for adding the acquired file to the program start recording medium according to the result of the authentication check of the file acquired from the server or the program addition recording medium;
Have
  The determination means includes monitoring means for monitoring insertion / extraction of a recording medium with respect to the slot;
  Authentication check means for performing an authentication check for determining whether the recording medium inserted in the slot is a recording medium for program addition;
Have
  The authentication check means includes a setting file, a first electronic signature file created from identification information of the setting file and a recording medium for adding a program, a program for starting a writing means, the program, and the information processing An information processing apparatus which reads a second electronic signature file created from the identification information of the apparatus from a recording medium for program addition and performs an authentication check of a program for starting the setting file and the writing means . A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program start recording medium Adding means for adding the acquired file to the program start recording medium according to the result of the authentication check of the file acquired from the server or the program start recording medium;
Have
  The determination means includes monitoring means for monitoring insertion / extraction of a recording medium with respect to the slot;
  Authentication check means for performing an authentication check for determining whether the recording medium inserted in the slot is a recording medium for program addition;
Have
  The authentication check means includes a setting file, a first electronic signature file created from identification information of the setting file and a recording medium for adding a program, a program for starting a writing means, the program, and the information processing An information processing apparatus which reads a second electronic signature file created from the identification information of the apparatus from a recording medium for program addition and performs an authentication check of a program for starting the setting file and the writing means . A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  If it is determined that the program addition recording medium has been inserted into the slot, the identification information of the program activation recording medium is acquired and transmitted to a server that creates a file for adding a program to the program activation recording medium on the other hand,
  When a file for adding a program to the program start recording medium is received from the server, an adding means for adding the received file to the program start recording medium according to a result of an authentication check of the file;
Have
  When it is determined that the program addition recording medium has been inserted into the slot, the adding means is activated by the addition module read from the program adding recording medium according to an instruction from the determination means. A characteristic information processing apparatus. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program addition recording medium Adding means for adding the acquired file to the program start recording medium according to the result of the authentication check of the file acquired from the server or the program addition recording medium;
Have
  When it is determined that the program addition recording medium has been inserted into the slot, the adding means is activated by the addition module read from the program adding recording medium according to an instruction from the determination means. A characteristic information processing apparatus. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program start recording medium Adding means for adding the acquired file to the program start recording medium according to the result of the authentication check of the file acquired from the server or the program start recording medium;
Have
  When it is determined that the program addition recording medium has been inserted into the slot, the adding means is activated by the addition module read from the program adding recording medium according to an instruction from the determination means. A characteristic information processing apparatus. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  If it is determined that the program addition recording medium has been inserted into the slot, the identification information of the program activation recording medium is acquired and transmitted to a server that creates a file for adding a program to the program activation recording medium on the other hand,
  When a file for adding a program to the program start recording medium is received from the server, an adding means for adding the received file to the program start recording medium according to a result of an authentication check of the file;
Have
  The information processing apparatus, wherein the adding unit is activated by an adding module read from a program adding recording medium when an instruction from an operator using an input device of the information processing apparatus is received. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots An information processing apparatus to be added,
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program addition recording medium Adding means for adding the acquired file to the program start recording medium according to the result of the authentication check of the file acquired from the server or the program addition recording medium;
Have
  The information processing apparatus, wherein the adding unit is activated by an adding module read from a program adding recording medium when an instruction from an operator using an input device of the information processing apparatus is received. One of the slots has a slot into which a plurality of recording media can be inserted and removed. An information processing apparatus for adding a program to a program start recording medium inserted in another one of the slots using a program addition recording medium inserted in
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program start recording medium Adding means for adding the acquired file to the program start recording medium according to the result of the authentication check of the file acquired from the server or the program start recording medium;
Have
  The information processing apparatus, wherein the adding unit is activated by an adding module read from a program adding recording medium when an instruction from an operator using an input device of the information processing apparatus is received. 13. The information processing apparatus according to claim 1, wherein a file received from a server is used instead of using a file recorded on the program addition recording medium. 13. The information processing apparatus according to claim 1, wherein the program addition recording medium and the program activation recording medium can be hot-plugged. The information processing apparatus according to claim 1, wherein the information processing apparatus is an image forming apparatus having a printing unit and an imaging unit. A program addition method for a system having a server for creating a program addition recording medium and an information processing apparatus for adding the program to the program activation recording medium using the program addition recording medium,
  The information processing apparatus is
  Determining means for determining insertion of a program-adding recording medium into the slot;
  If it is determined that the program addition recording medium has been inserted into the slot, the identification information of the program activation recording medium is acquired and transmitted to a server that creates a file for adding a program to the program activation recording medium on the other hand,
  When a file for adding a program to the program start recording medium is received from the server, an adding means for adding the received file to the program start recording medium according to a result of an authentication check of the file;
Have
The adding means reads the setting file and the first electronic signature file created from the setting file and the identification information of the program starting recording medium from the program adding recording medium, and adds the program to the program starting recording medium And a second electronic signature file created from the program and the identification information of the information processing apparatus is received from the server, and an authentication check of the program added to the setting file and the program start recording medium is performed. How to add a program. A program addition method for a system having a server for creating a program addition recording medium and an information processing apparatus for adding the program to the program activation recording medium using the program addition recording medium,
  The information processing apparatus is
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program starting recording medium is received from the server, the program starting recording medium is transferred from the program adding recording medium. Means for reading a part of a file for adding a program to the server and adding the acquired file to the program starting recording medium according to the result of the authentication check of the file acquired from the server or the program adding recording medium When
Have
  The adding means receives the first electronic signature file created from the identification information of the setting file and the program start recording medium from the server, while adding the setting file and the program to the program start recording medium, A second electronic signature file created from the program and the identification information of the information processing apparatus is read from the program addition recording medium, and an authentication check of the program added to the setting file and the program start recording medium is performed. How to add a program. A program addition method for a system having a server for creating a program addition recording medium and an information processing apparatus for adding the program to the program activation recording medium using the program addition recording medium,
  The information processing apparatus is
  Determining means for determining insertion of a program-adding recording medium into the slot;
  A server that obtains identification information of a program start recording medium and creates a part of a file for adding a program to the program start recording medium when it is determined that a program addition recording medium is inserted into the slot While sending to
  When a part of a file for adding a program to the program start recording medium is received from the server, a part of the file for adding a program to the program start recording medium is read from the program start recording medium Adding means for adding the acquired file to the program start recording medium according to the result of the authentication check of the file acquired from the server or the program start recording medium;
Have
  The adding means receives the first electronic signature file created from the identification information of the setting file and the program start recording medium from the server, while adding the setting file and the program to the program start recording medium, A second electronic signature file created from the program and the identification information of the information processing apparatus is read from the program start recording medium, and an authentication check of the program added to the setting file and the program start recording medium is performed. How to add a program.

Images