JP4231313B2 - Information processing apparatus, image forming apparatus, and program addition method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information processing apparatus, an image forming apparatus, and a program addition method, and more particularly to an information processing apparatus, an image forming apparatus, and a program addition method for adding a program to a program start recording medium using a program addition recording medium.
[0002]
[Prior art]
An information processing apparatus such as a personal computer performs various information processing by executing one or more programs respectively corresponding to information processing. In addition, an image forming apparatus (hereinafter referred to as a multifunction machine) as an application example of an information processing apparatus is provided with a display unit, a printing unit, an imaging unit, and the like in a single housing, and corresponds to a printer, a copy, a facsimile, and a scanner, respectively. These four types of programs are provided, and the programs are switched to operate as a printer, a copy, a facsimile, and a scanner. Patent Document 1 describes an example of a fusion machine as described above.
[0003]
In such an information processing apparatus or multi-function apparatus, a basic input / output system (BIOS) and a boot loader (boot loader) are activated after the power is turned on. The boot loader starts up the OS by expanding an operating system (OS) and a root file system on a RAM (Random Access Memory). Then, the OS mounts the root file system. Here, “mount” refers to starting up a file system or peripheral device in an accessible state.
[0004]
After the OS is started, a start program for starting a program such as an application (hereinafter referred to as an application) is started. The activation program is a process that is activated first in the information processing apparatus or the multifunction peripheral.
[0005]
The activation program is necessary for the operation of the information processing apparatus or the multifunction peripheral mounted on the program activation recording medium such as a hard disk device (HDD) or an SD (Secure Digital) card by mounting the file system according to a predetermined setting file. The program is started according to a predetermined setting file.
[0006]
In recent years, there has been an increasing demand to add programs for information processing apparatuses and multifunction peripherals to a program start recording medium using a program addition recording medium such as an SD card.
[0007]
[Patent Document 1]
JP 2002-84383 A
[0008]
[Problems to be solved by the invention]
However, since a recording medium for program addition using a removable recording medium such as an SD card can be used in order by one or more information processing apparatuses or multifunction peripherals, there is no right (license) to add the program. There is a risk that a program may be added to the information processing apparatus or the multifunction peripheral.
[0009]
Therefore, when a program is added from an insertable / unpluggable recording medium for program addition to a recording medium for program start of an information processing apparatus or a multifunction machine, a mechanism is provided to prevent unauthorized use of the program recorded on the recording medium for program addition. There was a problem that the safety of the program had to be ensured.
[0010]
The present invention has been made in view of the above points, and adds a program from a recording medium for program addition to a recording medium for program startup while ensuring the safety of the program recorded on the removable recording medium for program addition. An object is to provide an information processing apparatus, an image forming apparatus, and a program addition method.
[0011]
[Means for Solving the Problems]
Therefore, in order to solve the above-described problem, the present invention has a slot into which a plurality of recording media can be inserted and removed, and another one of the slots using a recording medium for program addition inserted into one of the slots. A program to the program start recording medium inserted in An information processing device Determining means for determining insertion of the program addition recording medium into the slot, and determining that the program addition recording medium has been inserted into the slot, obtains identification information of the program start recording medium and adds the program Writing means for writing to the recording medium When it is determined that the program addition recording medium in which the file for adding the program to the slot is written is inserted, the file is read from the program addition recording medium, and the file is checked according to the result of the authentication check. Adding means for adding a file read from the program addition recording medium to the program activation recording medium; Have The determination means is a monitoring means for monitoring insertion / extraction of the recording medium with respect to the slot, and an authentication check means for performing an authentication check for determining whether the recording medium inserted into the slot is a recording medium for program addition. And the writing means is read from the recording medium for program addition and activated by an instruction from the judging means when it is determined that the recording medium for program addition has been inserted into the slot. It is characterized by that.
[0013]
Further, the present invention is a program addition method for a system including a server for creating a program addition recording medium and an information processing apparatus for adding the program to the program activation recording medium using the program addition recording medium, An identification information writing step in which the information processing apparatus writes identification information of a program activation recording medium to a program addition recording medium, and the server reads identification information of the program activation recording medium from the program addition recording medium, A file writing step of creating an electronic signature file of the predetermined file using the identification information and writing the predetermined file and the electronic signature file to the recording medium for program addition; and File and digital signature file were read and digital signature file was used According to the authentication result of the check in the constant file, and having a program additional step of adding a predetermined file, and an electronic signature file read from the program additional recording medium program starting recording medium.
[0014]
The present invention is also a program addition method for a system including a server for creating a program addition recording medium and an image forming apparatus for adding a program to a program activation recording medium using the program addition recording medium, An identification information writing step in which the image forming apparatus writes identification information of a program start recording medium to a program addition recording medium, and the server reads the identification information of the program start recording medium from the program addition recording medium, A file writing step of creating an electronic signature file of a predetermined file using the identification information, and writing the predetermined file and the electronic signature file to a program addition recording medium, and the image forming apparatus from the program addition recording medium File and digital signature file were read and digital signature file was used According to the authentication result of the check in the constant file, and having a program additional step of adding a predetermined file, and an electronic signature file read from the program additional recording medium program starting recording medium.
[0015]
According to the present invention, a program addition recording medium for adding a program to the program activation recording medium can be created so that it can be used only by one program activation recording medium corresponding to the program addition recording medium. Starting a program from a program addition recording medium while preventing unauthorized addition of a program to a plurality of program startup recording media and ensuring the safety of the program recorded on the removable program addition recording medium A program can be added to the recording medium.
[0016]
DETAILED DESCRIPTION OF THE INVENTION
Next, embodiments of the present invention will be described with reference to the drawings.
[0017]
FIG. 1 is a configuration diagram of an embodiment of an information processing apparatus according to the present invention. The information processing apparatus 1 is configured to include a software group 2, an activation unit 3, and hardware resources 4.
[0018]
The activation unit 3 is executed first when the information processing apparatus 1 is turned on, and activates a program activation unit described later. The program activation unit activates the software group 2 of the information processing apparatus 1. For example, the program activation unit of the activation unit 3 reads the program of the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n from the auxiliary storage device, the SD card, etc. Transfer the program to the memory device and start it.
[0019]
The hardware resource 4 includes hardware resources such as an input device, a display device, an auxiliary storage device, a memory device, an interface device, and an SD card slot. The software group 2 includes programs of an SD card check unit 11, a program addition unit 12, a system control unit 13, and applications 14-1 to 14-n activated on an OS such as UNIX (registered trademark). The OS performs parallel control of the programs of the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n as processes.
[0020]
An API (Application Program Interface) 15 is used to receive requests from the applications 14-1 to 14-n by a predefined function. The engine I / F 16 is used to transmit a request for the hardware resource 4 by a predefined function. Details of the SD card check unit 11, the program addition unit 12, the system control unit 13, and the program activation unit will be described later.
[0021]
Next, the hardware configuration of the information processing apparatus 1 will be described. FIG. 2 is a hardware configuration diagram of an embodiment of an information processing apparatus according to the present invention.
[0022]
2 includes an input device 21, a display device 22, an auxiliary storage device 23, a memory device 24, an arithmetic processing device 25, an interface device 26, and an SD card slot 27, which are mutually connected by a bus B. It is comprised so that it may have.
[0023]
The input device 21 includes a keyboard and a mouse, and is used to input various operation instructions. The display device 22 displays various windows and data necessary for operation. The interface device 26 is an interface for connecting the information processing device 1 to a network, and includes a modem, a router, and the like.
[0024]
The SD card slot 27 is a slot into which an SD card can be inserted and removed, and performs an interrupt in response to the insertion or removal of the SD card to an SD card driver described later. The auxiliary storage device 23 stores various files and data.
[0025]
The SD card and the auxiliary storage device 23 inserted into the SD card slot 27 are an SD card check unit 11, a program addition unit 12, a system control unit 13, and applications 14-1 to 14 that perform processing related to the information processing device 1. In addition to storing programs such as -n, various files and data necessary for processing the programs are stored.
[0026]
The memory device 24 includes an SD card check unit 11, a program addition unit 12, a system control unit 13, and applications 14-1 from the SD card inserted into the SD card slot 27 and the auxiliary storage device 23 when the information processing device 1 is activated. A program such as 14-n is read and stored. The arithmetic processing unit 25 executes processing according to programs such as the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n stored in the memory device 24.
[0027]
Next, the configuration of the compound machine 31 will be described as an application example of the information processing apparatus 1 according to the present invention. In this embodiment, the processing of the multi-function apparatus 31 will be mainly described, but the processing of the information processing apparatus 1 is the same.
[0028]
FIG. 3 is a block diagram of an embodiment of the compound machine according to the present invention. The multi-function machine 31 is configured to include a software group 32, a multi-function machine activation unit 33, and hardware resources 34.
[0029]
The software group 32 includes an application layer 35 and a platform 36 activated on an OS such as UNIX (registered trademark). The hardware resources 34 include a monochrome laser printer (B & W LP) 41, a color laser printer (Color LP) 42, and other hardware resources 43 such as a scanner and a facsimile.
[0030]
The application layer 35 includes a printer application 51, a copy application 52, a fax application 53, a scanner application 54, and a net file application that perform processing specific to user services related to image formation such as a printer, copy, fax, and scanner. 55.
[0031]
Further, the platform 36 interprets the processing request from the application layer 35 and generates a hardware resource 34 acquisition request, and manages the hardware resource 34 and acquires the acquisition request from the control service layer 37. Including a system resource manager (SRM) 69 that arbitrates and a handler layer 38 that manages hardware resources 34 in response to an acquisition request from the SRM 69.
[0032]
The control service layer 37 includes a network control service (NCS) 61, a delivery control service (DCS) 62, an operation panel control service (OCS) 63, a fax control service (FCS) 64, an engine control service (ECS) 65, and a memory control service. (MCS) 66, user information control service (UCS) 67, system control service (SCS) 68, and the like are configured to include one or more service modules.
[0033]
The platform 36 is configured to have an API 81. The OS executes the software of the application layer 35 and the platform 36 in parallel as processes.
[0034]
The process of the NCS 61 distributes data received by each protocol from the network side to each application, and mediates when data from each application is transmitted to the network side. For example, the NCS 61 controls data communication with a client connected to the multi-function apparatus 31 via a network.
[0035]
The process of the DCS 62 performs control such as delivery of document data stored in the compound machine. The process of the OCS 63 controls an operation panel serving as information transmission means between the operator and the main body control.
[0036]
The FCS64 process provides APIs for sending and receiving faxes using the PSTN or ISDN network from the application layer 35, registering / quoting various fax data managed in the backup memory, reading faxes, receiving fax printing, etc. To do.
[0037]
The ECS 65 process controls engine units such as the monochrome laser printer 41, the color laser printer 42, and the hardware resource 43. The process of the MCS 66 performs memory control such as acquisition and release of memory, use of the HDD, compression and decompression of image data. The UCS 67 process manages user information.
[0038]
The process of the SCS 68 performs processing such as application management, operation unit control, system screen display, LED display, hardware resource management, and interrupt application control.
[0039]
The SRM 69 process controls the system and manages the hardware resources 34 together with the SCS 68. For example, the process of the SRM 69 performs execution control in accordance with an acquisition request from an upper layer using the hardware resource 34.
[0040]
Specifically, the process of the SRM 69 determines whether the requested hardware resource 34 is available (whether it is not used by another acquisition request), and if it is available, the requested hardware is obtained. The upper layer is notified that the resource 34 is available.
[0041]
In addition, the process of the SRM 69 performs scheduling for using the hardware resource 34 in response to an acquisition request from an upper layer, and the request contents (for example, paper conveyance and image forming operation by the printer engine, memory allocation, file generation, etc.) Has been implemented directly.
[0042]
The handler layer 38 includes a fax control unit handler (FCUH) 70 that manages a fax control unit (FCU), which will be described later, and an image memory handler (IMH) that allocates a memory area for the process and manages the memory area allocated to the process. 71. The SRM 69 and the FCUH 70 use the engine I / F 82 to make a processing request for the hardware resource 34. With the configuration shown in FIG. 3, the multi-function apparatus 31 can centrally process the processes commonly required for each application by the platform 36.
[0043]
Next, the hardware configuration of the compound machine 31 will be described. FIG. 4 is a hardware configuration diagram of an embodiment of the compound machine according to the present invention.
[0044]
The multi-function machine 31 includes a controller 100, an operation panel 120, an FCU 121, and an engine unit 122. The controller 100 includes a CPU 101, a system memory 102, a north bridge (NB) 103, a south bridge (SB) 104, an ASIC 106, a local memory 107, an HDD 108, a network interface card (NIC) 109, and an SD card. Slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113.
[0045]
The operation panel 120 is connected to the ASIC 106 of the controller 100. Further, the FCU 121 and the engine unit 122 are connected to the ASIC 106 of the controller 100 via the PCI bus 123.
[0046]
In the controller 100, a local memory 107, an HDD 108, and the like are connected to the ASIC 106, and the CPU 101 and the ASIC 106 are connected to each other via the NB 103 of the CPU chip set. The controller 100 corresponds to the case where the interface of the CPU 101 is not disclosed by connecting the CPU 101 and the ASIC 106 via the NB 103. The ASIC 106 and the NB 103 are connected via an AGP (Accelerated Graphics Port) 105.
[0047]
Thus, in order to control the execution of one or more processes forming the application layer 35 and the platform 36 in FIG. 3, the ASIC 106 and the NB 103 are connected via the AGP 105 instead of the low-speed PCI bus to prevent performance degradation. It is out.
[0048]
The CPU 101 performs overall control of the compound machine 31. For example, the CPU 101 starts and executes NCS61, DCS62, OCS63, FCS64, ECS65, MCS66, UCS67, SCS68, SRM69, FCUH70, and IMH71 as processes on the OS, and at the same time, the printer application 51 that forms the application layer 35, the copy The application 52, the fax application 53, the scanner application 54, and the net file application 55 are activated and executed.
[0049]
The NB 103 is a bridge for connecting the CPU 101, system memory 102, SB 104, ASIC 106, NIC 109, SD card slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113.
[0050]
The SB 104, NIC 109, SD card slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113 are connected to the NB 103 via the PCI bus 114. The SB 104 is a bridge for connecting the PCI bus 114 to the ROM, peripheral devices, and the like.
[0051]
The system memory 102 is a memory used as a drawing memory of the multi-function apparatus 31. The local memory 107 is a memory used as a copy image buffer and a code buffer.
[0052]
The ASIC 106 is an IC for image processing applications having hardware elements for image processing. The HDD 108 is an example of a storage (auxiliary storage device) that stores image data, document data, programs, font data, forms, and the like.
[0053]
The NIC 109 is an interface device that connects the compound machine 31 to a network. The SD card slot 110 is a slot into which an SD card can be inserted / removed, and an interrupt corresponding to the insertion / extraction of the SD card is performed to an SD card driver described later. The USB device 111, the IEEE 1394 device 112, and the Centronics 113 are interfaces conforming to the respective standards.
[0054]
The operation panel 120 is an operation unit that accepts an input operation from an operator and performs display for the operator. The FCU 121 has a memory. The memory of the FCU 121 is used for temporarily storing facsimile data received when the power of the multi-function apparatus 31 is OFF, for example.
[0055]
The compound machine starting unit 33 in FIG. 3 is executed first when the compound machine 1 is turned on, and activates the application layer 35 and the platform 36. FIG. 5 shows a configuration diagram of an example of the compound machine starting unit. The multi-function apparatus activation unit 33 includes a ROM monitor 130 and a program activation unit 131.
[0056]
The BIOS and the ROM monitor 130 as a boot loader are executed when the power is turned on, and perform initialization of hardware, diagnosis of the controller 100, initialization of software, and the like. The ROM monitor 130 expands the OS and the root file system on the system memory 102 and activates the OS. Then, the OS mounts the root file system.
[0057]
The program activation unit 131 is called from the OS and secures a memory area on the system memory 102 and the local memory 107. The program activation unit 131 is a process that is activated first in the multifunction machine 1 and mounts a file system according to a predetermined setting file.
[0058]
The program activation unit 131 reads out the programs of the application layer 35 and the platform 36 necessary for the operation of the multi-function apparatus 31 from the HDD 108, the SD card, the ROM, etc. according to a predetermined setting file, and the read programs are the system memory 102 and the local memory 107. The process of the application layer 35 and the platform 36 is started by expanding the memory area secured above.
[0059]
Furthermore, the process of the program starting part 131 is demonstrated. The program activation unit 131 reads a predetermined master setting file at the time of activation, and mounts a file system and activates a process according to the read master setting file. Further, when there is a mount description in the read master setting file, the program activation unit 131 executes a mount process according to the mount description.
[0060]
Further, the program activation unit 131 sets a predetermined setting when a predetermined setting file exists at the root of the mounted file system or when a predetermined directory including a file with a predetermined extension exists at the root of the mounted file system. A file or a file with a predetermined extension is read to mount the file system.
[0061]
A file system that can be mounted by the program activation unit 131 includes “gzromfs”. The file system “gzromfs” expands and mounts a gzip compressed ROMFS format file on a RAM.
[0062]
Hereinafter, an example of adding a program from an application adding SD card as a program adding recording medium to an application starting SD card as a program starting recording medium will be described.
[0063]
FIG. 6 is a schematic diagram illustrating an example of processing for adding a program from the application addition SD card to the application activation SD card. The multi-function apparatus 31 has an application activation SD card 141 inserted in one of the SD card slots 110, and is an apparatus that adds a program to the application activation SD card 141 using the application addition SD card 140. is there. The server 150 is a device that creates a file for adding a program to the application activation SD card 141 and writes the file to the application addition SD card 140.
[0064]
In step S100, the application addition SD card 140 is inserted into the SD card slot 110 of the multi-function apparatus 31, and the encrypted serial ID of the application activation SD card 141 is written into the application addition SD card 140.
[0065]
In step S200, the application addition SD card 140 in which the serial ID of the encrypted application activation SD card 141 is written is taken to the installation location of the server 150 by, for example, a service person who performs maintenance of the multi-function apparatus 31. . The application addition SD card 140 in which the serial ID of the encrypted application activation SD card 141 is written may be mailed to the installation location of the server 150.
[0066]
In step S300, the application addition SD card 140 is inserted into the SD card slot of the server 150, and the serial ID of the encrypted application activation SD card 141 written in the application addition SD card 140 is the server 150. Is read out. The server 150 creates a file for adding a program to the application activation SD card 141 and writes the file to the application addition SD card 140.
[0067]
In step S400, the application addition SD card 140 in which a file for adding a program is written to the application activation SD card 141 is held by the service person who performs maintenance of the multi-function apparatus 31, for example, up to the installation position of the multi-function apparatus 31. To go. Note that the application addition SD card 140 in which a file for adding a program to the application activation SD card 141 is written may be mailed to the installation location of the compound machine 31.
[0068]
In step S500, an application addition SD card 140 in which a file for adding a program to the application activation SD card 141 is inserted into the SD card slot 110 of the multi-function apparatus 31, and an authentication check as described later is performed. Done. If the authentication check is OK, the program is added to the application activation SD card 141 using the file for adding the program to the application activation SD card 141 written in the application addition SD card 140.
[0069]
Next, the processing in steps S100, S300, and S500 in FIG. 6 will be described in detail. FIG. 7 is an explanatory diagram of an example of the process of step S100. In the explanatory diagram of FIG. 7, a configuration necessary for the description of the configuration of the multi-function apparatus 31 is shown, and a configuration unnecessary for the description is omitted.
[0070]
In step S101, the application adding SD card 140 is inserted into the SD card slot 110 of the multi-function apparatus 31. The SD card slot 110 interrupts the SD card driver 137 in accordance with the insertion of the application adding SD card 140.
[0071]
In step S <b> 102, the OS 136 notifies the program activation unit 131 of SD card insertion detection in response to an interrupt to the SD card driver 137. In step S103, the program activation unit 131 activates the SD card check unit 132. In step S104, the SD card checking unit 132 mounts the application adding SD card 140, notifies the program starting unit 131 that the application adding SD card 140 has been mounted, and stops the processing.
[0072]
When it is notified that the application addition SD card 140 has been mounted, the process proceeds to step S105, where the program activation unit 131 performs an authentication check of the application addition SD card 140 using the electronic authentication check library 134.
[0073]
The authentication check in step S105 includes, for example, a setting file authentication check shown in FIG. 8 and a mount target module authentication check shown in FIG.
[0074]
For example, the authentication check of the setting file is performed as in the flowchart shown in FIG. FIG. 8 is a flowchart of an example of a setting file authentication check process.
[0075]
In step S <b> 600, the program activation unit 131 determines whether or not the application addition SD card 140 has a target file to be used for the setting file authentication check. The target file used for the authentication check of the setting file includes the setting file and an electronic signature file created from the setting file and a message digest (hereinafter referred to as MD) of the serial ID of the application adding SD card 140.
[0076]
FIG. 9 is an image diagram of an example of a target file recorded on the application adding SD card. In the example of FIG. 9, “inst.cnf” represents the setting file, “inst.lic” represents the electronic signature file used for the authentication check of the setting file, and “inst.mod” represents the module file to be mounted. , “Inst.mac” represents an electronic signature file used for the authentication check of the mount target module.
[0077]
If it is determined that there is a target file used for the authentication check of the setting file (YES in S600), the program activation unit 131 acquires the setting file and the electronic signature file used for the authentication check of the setting file from the application adding SD card 140. Then, the process proceeds to step S601.
[0078]
In step S <b> 601, the program activation unit 131 acquires a serial ID from the application adding SD card 140. In step S603, the program activation unit 131 creates MD1 of the setting file acquired in step S600 and the serial ID of the application addition SD card 140 acquired in step S601. In step S603, the program activation unit 131 creates MD2 by decrypting the electronic signature file acquired in step S600 with a public key.
[0079]
In step S604, the program activation unit 131 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S604), the program activation unit 131 proceeds to step S605, and determines that the setting file authentication check is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S24), the program activation unit 131 proceeds to step S606 and determines that the setting file authentication check is NG.
[0080]
This is because, if MD1 and MD2 are not equal, the file recorded on the application adding SD card 140 is likely to be illegally copied. If it is determined that the target file to be used for the setting file authentication check does not exist (NO in S600), the program activation unit 131 proceeds to step S606 and determines that the setting file authentication check is NG.
[0081]
For example, the authentication check of the mount target module is performed as in the flowchart shown in FIG. FIG. 10 is a flowchart of an example of the authentication check process for the mount target module.
[0082]
In step S610, the program activation unit 131 determines whether or not a target file to be used for the authentication check of the mount target module exists in the application adding SD card 140. The target file used for the authentication check of the mount target module includes a mount target module file and an electronic signature file created from the module file and the MD of the model information unique to the multi-function apparatus 31.
[0083]
If it is determined that there is a target file to be used for the authentication check of the mount target module (YES in S610), the program activation unit 131 is used for the authentication check of the mount target module file and the mount target module file from the application adding SD card 140. The electronic signature file to be acquired is acquired, and the process proceeds to step S611.
[0084]
In step S <b> 611, the program activation unit 131 acquires model information unique to the multifunction machine 31. In step S612, the program activation unit 131 creates MD1 of the module file acquired in step S610 and the model information unique to the MFP 31 acquired in step S611. In step S613, the program activation unit 131 creates MD2 by decrypting the electronic signature file acquired in step S610 with the public key.
[0085]
In step S614, the program activation unit 131 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S614), the program activation unit 131 proceeds to step S615 and determines that the authentication check of the mount target module is OK.
[0086]
On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S614), the program activation unit 131 proceeds to step S616 and determines that the authentication check of the mount target module is NG.
[0087]
This is because, if MD1 and MD2 are not equal, the file recorded on the application adding SD card 140 is likely to have been illegally copied or tampered. If it is determined that the target file to be used for the authentication check of the mount target module does not exist (NO in S610), the program activation unit 131 proceeds to step S616 and determines that the authentication check of the mount target module is NG.
[0088]
Returning to FIG. 7, if the authentication check of the application adding SD card 140 is OK, the program activation unit 131 proceeds to step S106, and if it is NG, the program activation unit 131 returns to the event waiting state.
[0089]
In step S <b> 106, the program activation unit 131 activates the program addition unit 133 using the program addition module in the application addition SD card 140.
[0090]
In step S107, the program adding unit 133 acquires the serial ID of the application activation SD card 141 from the application activation SD card 141. The program adding unit 133 encrypts the acquired serial ID of the application activation SD card 141 with a public key.
[0091]
In step S108, the program addition unit 133 writes the encrypted serial ID of the application activation SD card 141 into the application addition SD card 140 as shown in FIG. 11, and ends the process.
[0092]
FIG. 11 is an image diagram of an example of an application addition SD card in which the serial ID of the encrypted application activation SD card is recorded. In the example of FIG. 11, “sdid.dat” represents the serial ID of the application activation SD card 141 encrypted. According to the process of FIG. 7, the application adding SD card 140 as shown in FIG. 11 in which the serial ID of the encrypted application starting SD card 141 is recorded can be created.
[0093]
FIG. 12 is an explanatory diagram of an example of the process of step S300. In step S301, the server 150 reads the encrypted serial ID 152 of the application activation SD card 141 from the application addition SD card 140 inserted into the SD card slot 151. In step S302, the server 150 acquires model information 153 and application information 154 input from an input device or the like.
[0094]
The model information 153 is information unique to the compound machine 31. The application information 154 is information on an application to be added to the application activation SD card 141 of the multi-function apparatus 31 using the application addition SD card 140.
[0095]
In step S303, the server 150 decrypts the serial ID 152 read in step S301 with the secret key. In step S304, the server 150 uses the setting file “apl.cnf” corresponding to the model information 153 and the application information 154, the mount target module “apl.mod”, and the electronic signature file used for the authentication check of the mount target module. Select the group 155 of “apl.mac”.
[0096]
In step S305, the server 150 reads the setting file “apl.cnf” 157 from the group 155 selected in step S304. In step S306, the server 150 creates an MD 158 from the decrypted serial ID 156 of the application activation SD card 141 and the setting file 157 read in step S305.
[0097]
In step S307, the server 150 encrypts the MD 158 created in step S306 with a secret key, and creates an electronic signature file “apl.lic” 159 that is used for a setting file authentication check. In step S308, the server 150 creates a new group 160 in which the electronic signature file 159 created in step S307 is added to the group 155. In step S309, the server 150 writes the group 160 created in step S307 on the application addition card 140 as shown in FIG. 13 and ends the process.
[0098]
FIG. 13 is an image diagram of an example of an application adding SD card in which a file for adding a program to the application starting SD card 141 is recorded. In the example of FIG. 13, “apl.cnf” represents a setting file, “apl.lic” represents an electronic signature file used for authentication check of the setting file, “apl.mod” represents a module to be mounted, “Apl.mac” represents an electronic signature file used for an authentication check of the mount target module.
[0099]
12, the application adding SD card 140 as shown in FIG. 13 in which a file for adding a program is recorded in the application starting SD card 141 can be created.
[0100]
FIG. 14 is an explanatory diagram of an example of the process of step S500. In the explanatory diagram of FIG. 14, a configuration necessary for the description of the configuration of the compound machine 31 is shown, and a configuration not necessary for the description is omitted.
[0101]
In step S501, the application adding SD card 140 as shown in FIG. 14 is inserted into the SD card slot 110 of the multi-function apparatus 31. The SD card slot 110 interrupts the SD card driver 137 in accordance with the insertion of the application adding SD card 140.
[0102]
In step S <b> 502, the OS 136 notifies the program activation unit 131 of SD card insertion detection in response to an interrupt to the SD card driver 137. In step S503, the program activation unit 131 activates the SD card check unit 132. In step S504, the SD card checking unit 132 mounts the application adding SD card 140, notifies the program starting unit 131 that the application adding SD card 140 has been mounted, and stops the processing.
[0103]
When it is notified that the application addition SD card 140 has been mounted, the process proceeds to step S505, and the program activation unit 131 notifies the SCS 68 that the application addition SD card 140 has been mounted.
[0104]
In step S506, the SCS 68 uses the setting file “apl.cnf” under the directory “addmod” from the application addition SD card 140, the electronic signature file “apl.lic” used for the authentication check of the setting file, and the module to be mounted. “Apl.mod” and the electronic signature file “apl.mac” used for the authentication check of the mount target module are read, and the authentication check is performed using the electronic authentication check library 138.
[0105]
The authentication check in step S506 includes, for example, a setting file authentication check shown in FIG. 8 and a mount target module authentication check shown in FIG. Details of the authentication check in step S506 will be described with reference to FIGS. 8 and 10 described above.
[0106]
In step S600 of FIG. 8, in the case of the target file used by the SCS 68 for the authentication check of the setting file in the application addition SD card 140, for example, the application addition SD card 140 of FIG. It is determined whether or not the electronic signature file “apl.lic” used for the file authentication check exists.
[0107]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the setting file exist (YES in S600), the SCS 68 proceeds to step S601.
[0108]
In step S <b> 601, the SCS 68 acquires the serial ID from the application activation SD card 141 instead of the application addition SD card 140. In step S602, the SCS 68 creates MD1 of the setting file “apl.cnf” and the serial ID of the application activation SD card 141 acquired in step S601. In step S603, the SCS 68 creates MD2 by decrypting the electronic signature file “apl.lic” used for the authentication check of the setting file with the public key.
[0109]
In step S604, the SCS 68 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S604), the SCS 68 proceeds to step S605 and determines that the setting file authentication check is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S24), the SCS 68 proceeds to step S606 and determines that the setting file authentication check is NG.
[0110]
If MD1 and MD2 are not equal, the file recorded in the application adding SD card 140 is not the application starting SD card 141 that acquired the serial ID in step S601, but the other application starting SD card. This is because the possibility of being created for the addition is high.
[0111]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the setting file authentication check do not exist (NO in S600), the SCS 68 proceeds to step S606, and the setting file authentication check is performed. Is determined to be NG.
[0112]
In step S610 of FIG. 10, in the case of the target file used by the SCS 68 for the authentication check of the module to be mounted on the application addition SD card 140, for example, the application addition SD card 140 of FIG. 13, the module “apl.mod” to be mounted. It is determined whether or not the electronic signature file “apl.mac” used for the authentication check of the mount target module exists.
[0113]
If it is determined that the module “apl.mod” to be mounted and the electronic signature file “apl.mac” used for the authentication check of the module to be mounted exist (YES in S610), the SCS 68 proceeds to step S611. In step S611, the SCS 68 acquires model information unique to the multi-function apparatus 31. In step S612, the SCS 68 creates an MD1 of the module “apl.mod” to be mounted and the model information unique to the multi-function apparatus 31 acquired in step S611.
[0114]
In step S613, the SCS 68 decrypts the electronic signature file “apl.mac” used for the authentication check of the mount target module with the public key, and creates MD2.
[0115]
In step S614, the SCS 68 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S614), the SCS 68 proceeds to step S615 and determines that the authentication check of the mount target module is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S614), the SCS 68 proceeds to step S616 and determines that the authentication check of the mount target module is NG.
[0116]
If MD1 and MD2 are not equal, the file recorded on the application adding SD card 140 is not for the MFP 31 that acquired the unique model information in step S611, but for adding a program to another MFP. This is because the possibility of being created is high. If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the mount target module do not exist (NO in S610), the SCS 68 proceeds to step S616, and the mount target module It is determined that the authentication check is NG.
[0117]
Returning to FIG. 14, the SCS 68 proceeds to step S507 if the authentication check in step S506 is OK, and returns to the event waiting state if it is NG. In step S507, the SCS 68 reads the setting file “apl.cnf” read from the application adding SD card 140, the electronic signature file “apl.lic” used for the authentication check of the setting file, and the mount target module “apl.mod”. A program is added to the application activation SD card 141 using the electronic signature file “apl.mac” used for the authentication check of the mount target module.
[0118]
In step S507, the SCS 68 uses the setting file “apl.cnf”, the electronic signature file “apl.lic” used for the setting file authentication check, the mount target module “apl.mod”, and the mount target module authentication check. The electronic signature file “apl.mac” to be written is written in the application activation card 141 as shown in FIG.
[0119]
FIG. 15 is an image diagram of an example of an application activation SD card to which a program has been added by the application addition SD card. In the example of FIG. 15, “apl.cnf” under the directory “init.d” represents the setting file, and “apl.lic” represents the electronic signature file used for the authentication check of the setting file. Further, “apl.mod” under the directory “module” represents a module to be mounted, and “apl.mac” represents an electronic signature file used for an authentication check of the module to be mounted.
[0120]
In the present embodiment, the processing of the multi-function apparatus 31 has been mainly described. However, application to the information processing apparatus 1 illustrated in FIGS. 1 and 2 is easy. Further, the present invention is not limited to the specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims.
[0121]
【The invention's effect】
As described above, according to the present invention, it is possible to add a program from a program addition recording medium to a program activation recording medium while ensuring the safety of the program recorded on the removable program addition recording medium.
[0122]
[Brief description of the drawings]
FIG. 1 is a configuration diagram of an embodiment of an information processing apparatus according to the present invention.
FIG. 2 is a hardware configuration diagram of an embodiment of an information processing apparatus according to the present invention.
FIG. 3 is a block diagram of an embodiment of a compound machine according to the present invention.
FIG. 4 is a hardware configuration diagram of an embodiment of a compound machine according to the present invention.
FIG. 5 shows a configuration diagram of an example of a compound machine starting unit.
FIG. 6 is a schematic diagram illustrating an example of processing for adding a program from an application addition SD card to an application activation SD card.
FIG. 7 is an explanatory diagram illustrating an example of a process in step S100.
FIG. 8 is a flowchart of an example of a setting file authentication check process;
FIG. 9 is an image diagram of an example of a target file recorded on an application adding SD card.
FIG. 10 is a flowchart illustrating an example of authentication check processing for a mount target module;
FIG. 11 is an image diagram of an example of an application adding SD card in which the serial ID of the encrypted application starting SD card is recorded.
FIG. 12 is an explanatory diagram of an example of a process in step S300.
13 is an image diagram of an example of an application adding SD card in which a file for adding a program is recorded in the application starting SD card 141. FIG.
FIG. 14 is an explanatory diagram illustrating an example of a process in step S500.
FIG. 15 is an image diagram of an example of an application activation SD card to which a program has been added by an application addition SD card.
[Explanation of symbols]
1 Information processing equipment
2,32 software group
3 Starter
4 Hardware resources
11,132 SD card check section
12,133 Program addition part
13 System controller
27,110 SD card slot
31 Fusion machine
33 Fusion machine starting part
34 Hardware resources
68 SCS
131 Program starter
136 Operating System (OS)
137 SD card driver
140 SD card for application addition
141 SD card for starting applications
150 servers

Claims (15)

A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An information processing apparatus to be added,
Determining means for determining insertion of a program-adding recording medium into the slot;
When it is determined that the program addition recording medium has been inserted into the slot, writing means for acquiring the identification information of the program starting recording medium and writing it to the program adding recording medium ;
When it is determined that the program addition recording medium in which the file for adding the program to the slot is written has been inserted, the file is read from the program addition recording medium, and according to the result of the authentication check of the file, and have a <br/> additional means for adding a file read from the program additional recording medium program starting recording medium,
The determination means includes monitoring means for monitoring insertion / extraction of a recording medium with respect to the slot;
Authentication check means for performing an authentication check for determining whether the recording medium inserted in the slot is a recording medium for program addition;
Have
It said writing means, when it is determined that the insertion of additional program recording medium into said slot, said read out from the program additional recording medium according to an instruction from the determination unit is activated, characterized in Rukoto Information processing device. The authentication check means includes a setting file, a first electronic signature file created from the setting file and identification information of the recording medium for program addition, a program for starting the writing means, the program, and the information The second electronic signature file created from the model information of the processing device is read from a program addition recording medium, and an authentication check of a setting file and a program for starting the writing unit is performed. 1. An information processing apparatus according to 1 . The adding means includes a setting file, a first electronic signature file created from the setting file and identification information of the program start recording medium, a program to be added to the program start recording medium, the program, and the information processing apparatus read from the second digital signature file and the program for the additional recording medium prepared from the identification information, according to claim 1, characterized in that the authentication check program to be added to the configuration files and program starting recording medium Information processing device. The information processing apparatus according to any one of claims 1 to 3, wherein the program addition recording medium and the program activation recording medium can be hot-plugged. A slot having a plurality of recording media that can be inserted and removed, and using a recording medium for program addition inserted in one of the slots, a program is recorded on the recording medium for program startup inserted in the other one of the slots. An image forming apparatus to be added,
Determining means for determining insertion of a program-adding recording medium into the slot;
When it is determined that the program addition recording medium has been inserted into the slot, writing means for acquiring the identification information of the program starting recording medium and writing it to the program adding recording medium ;
When it is determined that the program addition recording medium in which the file for adding the program to the slot is written has been inserted, the file is read from the program addition recording medium, and according to the result of the authentication check of the file, and have a <br/> additional means for adding a file read from the program additional recording medium program starting recording medium,
The determination means includes monitoring means for monitoring insertion / extraction of a recording medium with respect to the slot;
Authentication check means for performing an authentication check for determining whether the recording medium inserted in the slot is a recording medium for program addition;
Have
It said writing means, when it is determined that the insertion of additional program recording medium into the slot, is invoked is read from the program additional recording medium according to an instruction from the determination means and said Rukoto Image forming apparatus. The authentication check means includes a setting file, a first electronic signature file created from the setting file and identification information of the recording medium for program addition, a program for starting the writing means, the program, and the image The second electronic signature file created from the model information of the forming apparatus is read from a recording medium for program addition, and an authentication check of the program for starting the setting file and the writing unit is performed. 5. The image forming apparatus according to 5 . The adding means includes a setting file, a first electronic signature file created from the setting file and identification information of the program start recording medium, a program to be added to the program start recording medium, the program, and the image forming apparatus read from the second digital signature file and the program for the additional recording medium prepared from the identification information, according to claim 5, characterized in that the authentication check program to be added to the configuration files and program starting recording medium Image forming apparatus. Program additional recording medium and program starting recording medium, the image forming apparatus according to claim 5 or 7 to any one of claims characterized in that it is a possible hot swapping. A program addition method for a system having a server for creating a program addition recording medium and an information processing apparatus for adding the program to the program activation recording medium using the program addition recording medium,
An identification information writing step in which the information processing apparatus writes the identification information of the program start recording medium to the program addition recording medium;
The server reads the identification information of the program activation recording medium from the program addition recording medium, creates an electronic signature file of the predetermined file using the identification information, and uses the predetermined file and the electronic signature file as the program addition recording medium. A file writing stage to write to,
The information processing apparatus reads the predetermined file and the electronic signature file from the program addition recording medium, and reads the predetermined file and the electronic file read from the program addition recording medium according to the result of the authentication check of the predetermined file using the electronic signature file. A program adding method comprising: adding a signature file to a program start recording medium. The file writing step wherein the server reads identification information of a program start recording medium from a program addition recording medium;
The server acquires model information of the information processing apparatus and identification information of a program to be added to the program start recording medium, and selects a predetermined file according to the model information of the information processing apparatus and the program identification information; ,
The server includes a step of creating an electronic signature file of a predetermined file using identification information of a program start recording medium, and writing the predetermined file and the electronic signature file to the program addition recording medium. 9. The program addition method according to 9 . The program adding recording medium after the predetermined file and the electronic signature file are written in the file writing step is a first electronic signature file created from the setting file and the identification information of the setting file and the program starting recording medium If programs and program to be added to start recording medium, the program adds the program and claim 9 or 10 further characterized in that a second electronic signature file created from the model information of the information processing apparatus Method. The program adding step includes a setting file, a first electronic signature file created from the setting file and identification information of the program start recording medium, a program to be added to the program start recording medium, the program, and the information processing The second electronic signature file created from the device identification information is read from the program addition recording medium, and the authentication check of the program added to the setting file and the program start recording medium is performed. If the result of the authentication check is normal 10. The program adding method according to claim 9 , wherein the setting file, the first electronic signature file, the program, and the second electronic signature file read from the program adding recording medium are added to the program starting recording medium. . A program addition method for a system having a server for creating a program addition recording medium and an image forming apparatus for adding a program to a program activation recording medium using the program addition recording medium,
An identification information writing step in which the image forming apparatus writes identification information of a program start recording medium on a program addition recording medium; and
The server reads the identification information of the program activation recording medium from the program addition recording medium, creates an electronic signature file of the predetermined file using the identification information, and uses the predetermined file and the electronic signature file as the program addition recording medium. A file writing stage to write to,
The image forming apparatus reads the predetermined file and the electronic signature file from the program addition recording medium, and reads the predetermined file and the electronic file read from the program addition recording medium according to the result of the authentication check of the predetermined file using the electronic signature file. A program adding method comprising: adding a signature file to a program start recording medium. The file writing step wherein the server reads identification information of a program start recording medium from a program addition recording medium;
The server acquires model information of the image forming apparatus and identification information of a program to be added to a program start recording medium, and selects a predetermined file according to the model information of the image forming apparatus and the program identification information; ,
The server includes a step of creating an electronic signature file of a predetermined file using identification information of a program start recording medium, and writing the predetermined file and the electronic signature file to the program addition recording medium. 14. The program addition method according to 13 . Program additional recording medium and program starting recording medium according to claim 9 or 14 any program additional method of one claim, characterized in that it is possible hot swapping.

Images