JP4649096B2 - Information processing system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information processing system. To In particular, an information processing system capable of authenticating a set of the information processing device and the disk array device and reading information from the disk device To Related.
[0002]
[Prior art]
In recent years, hard disk devices have attracted attention as removable media capable of high-speed access and large-capacity recording. In addition to personal computers, this type of hard disk device is also widely used as a medium for home appliances such as copying and printing devices and AV equipment.
[0003]
Further, there is an advantage that unauthorized access can be prevented by removing a hard disk device storing important information from the information processing device, and security can be improved.
[0004]
Further, the hard disk device is used as a so-called system disk that stores a program for booting a connected information processing device and a system program (operating system) for managing and controlling hardware resources and software resources of the booted information processing device. There are many cases.
[0005]
In this case, when an unauthorized system disk is installed in the information processing device,
(1) The hardware resources and software resources of the information processing device are illegally used or altered.
(2) An unauthorized entry into the network system via the information processing device
The danger that occurs.
[0006]
Therefore, in an information processing system composed of an information processing device and a hard disk device, it is required to start the information processing system after authenticating whether or not the combination of the information processing device and the hard disk device is valid.
[0007]
Therefore, for example, in Japanese Patent Laid-Open No. 7-114501, the identification number stored in the main body of the information processing apparatus matches the identification number stored in the medium (disk) of the hard disk device attached to the information processing apparatus. In this case, a technique for starting up an information processing apparatus using the hard disk device is disclosed.
[0008]
[Patent Document 1]
Japanese Patent Laid-Open No. 7-114501
[0009]
[Problems to be solved by the invention]
However, in the above publication, before the information processing device reads the identification number from the hard disk device to be mounted and compares it with the identification number held by the device itself, the hard disk device is set up so that data on the disk can be read. It is necessary to keep. The hard disk device setup process includes a disk spin-up process and the like, and it takes a long time to authenticate the pair of the information processing apparatus and the hard disk device.
[0010]
For example, when searching for a hard disk device to be installed and used in an information processing device from a plurality of hard disk devices, the hard disk device must be attached and detached many times. Since time is required, a lot of time must be spent searching for a desired hard disk drive.
[0011]
In addition, a RAID ((Redundant Arrays of Inexpensive Disks)) technology for distributing and storing data with redundancy in a disk array composed of a plurality of hard disk devices for the purpose of increasing the reliability and capacity of the hard disk devices has been generalized. Yes.
[0012]
However, as a matter of course, a technique for quickly authenticating a set of a disk array device storing such a plurality of hard disk devices and an information processing device to which the disk array device is mounted has not been realized.
[0013]
The present invention has been made to solve the above-described problems, and the problem is that a set of a disk array device that houses a plurality of disk devices and an information processing device to which the disk array device is mounted can be quickly established. Authenticated information processing system The It is to provide.
[0014]
[Means for Solving the Problems]
In order to solve the above problems, an information processing system according to the present invention provides: A disk array device that is not electrically connected to the information processing device by being removed from the information processing device, A storage unit for storing a plurality of disk devices; a cover unit for covering the plurality of disk devices stored in the storage unit; When it is not electrically connected to the information processing device by being removed from the information processing device Recording means for recording the opening / closing history of the cover part. Said A disk array device; When the disk array device is mounted on the information processing device, the recording means The disk array device and Said An acquisition unit that acquires an opening / closing history of the cover unit in a state in which the information processing apparatus is not electrically connected, and that the opening / closing history of the cover unit acquired by the acquisition unit is recorded. The information processing apparatus includes a connection control unit that does not transmit / receive an electric signal to / from the disk device when the information processing apparatus is activated.
[0021]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0022]
“First Embodiment”
FIG. 1 is an external view for explaining a usage form of an information processing system according to an embodiment of the present invention, in which 100 is a cartridge device, and 102 is an information processing device that houses and connects the cartridge device 100. The cartridge device 100 can store a plurality of hard disk devices 101a to 101d. In the following description, the plurality of hard disk devices 101a to 101d may be collectively referred to as the hard disk device 101.
[0023]
FIGS. 1A, 1B, and 1C are external views when the cartridge device 100 is viewed from the upper front obliquely, and FIG. 1E is a view of the cartridge device 100 viewed from the lower front front. It is an external view in the case. 1D is an overview of the information processing apparatus 102 that stores and connects the cartridge apparatus 100, and FIG. 1F is an external view of the hard disk apparatus 101 that is stored in the cartridge apparatus 100. .
[0024]
First, the cartridge apparatus 100 will be described. The cartridge device 100 includes a circuit unit 105 that controls a part of various operations of the cartridge device 100. The circuit unit 105 includes a first control unit 200 (see FIG. 2) described later. The external appearance of the cartridge device 100 is as shown in FIG. 1A when it is inserted and connected to the insertion port 109 of the information processing apparatus 102 shown in FIG.
[0025]
When the user removes the cartridge device 100 from the insertion port 109 of the information processing device 102, as shown in FIG. 1B, the handle 104 is easily raised by pulling the handle 104 from the cartridge device 100. Can be removed.
[0026]
The cartridge device 100 can store a plurality of hard disk devices 101. In the present embodiment, the cartridge device 100 can store a maximum of four hard disk devices 101. When the hard disk device 101 is inserted into or removed from the cartridge device 100, the cover 103 of the cartridge device 100 is opened and closed as shown in FIG.
[0027]
In this embodiment, as shown in FIG. 1C, four hard disk devices 101a, 101b, 101c, and 101d are mounted on the cartridge device 100, and the cartridge device 100 is used as a disk array device. In this case, since each hard disk device 101a, 101b, 101c, 101d stores important information such as a system program for operating the information processing device 102, the information is stored in RAID (Redundant Arrays of Inexpensive Disks). Protected by technology.
[0028]
As shown in FIG. 1F, the hard disk device 101 (101a, 101b, 101c, 101d), as a connector for connecting to the information processing device 102, a communication connector 106 for communicating various signals, A power connector 107 for supplying power from the information processing apparatus 102 to the hard disk apparatus 101 is provided.
[0029]
As shown in FIG. 1E, the lower surface (ie, the connection surface with the information processing apparatus 102: bottom surface) side of the cartridge device 100 is opened in the same manner as the upper surface side, and the hard disk devices 101a, 101b, 101c, and 101d are opened. When inserted into the cartridge device 100, the communication connector 106 and the power connector 107 of the hard disk devices 101 a, 101 b, 101 c, and 101 d are exposed to the outside from the bottom surface of the cartridge device 100, and the connector ( (Not shown) can be connected.
[0030]
A connector 108 for exchanging various types of information between the circuit unit 105 in the cartridge apparatus 100 and the information processing apparatus 102 is also provided on the bottom surface of the cartridge apparatus 100. Although not shown, on the bottom surface of the insertion port 109 of the information processing apparatus 102, each of the communication connectors 106, the power supply connectors 107, and the circuit connectors 108 of the hard disk devices 101a, 101b, 101c, and 101d. A connector is provided.
[0031]
As a preferred form of use of the information processing system, when the user starts using the information processing apparatus 102, the cartridge apparatus 100 containing the hard disk device 101 is attached to the information processing apparatus 102 and the information processing apparatus 102 is used. Is finished, the cartridge apparatus 100 is removed from the information processing apparatus 102. The removed cartridge device 100 contains the hard disk device 101 storing important information, and therefore is strictly stored in a safe or the like.
[0032]
Thereby, the information stored in each hard disk device 101 accommodated in the cartridge device 100 can be protected from theft and tampering. Further, since the cartridge apparatus 100 is removed from the information processing apparatus 102 when the authorized user does not use it, it is possible to prevent the information processing apparatus 102 from being used illegally.
[0033]
Hereinafter, the state in which the cartridge device 100 is removed from the information processing device 102 is referred to as an offline state for convenience of explanation.
[0034]
The above is the description of the appearance of the information processing system according to the embodiment of the present invention and the usage pattern of the user.
[0035]
Next, the configuration and operation of the information processing system according to the present embodiment will be described.
[0036]
FIG. 2 is a block diagram illustrating a schematic configuration of the information processing system according to the present embodiment. The information processing system includes the hard disk devices 101a to 101d, the cartridge device 100 that accommodates the hard disk devices 101a to 101d, and the information processing device. 102.
[0037]
The cartridge device 100 includes a first control unit 200. The first control unit 200 is driven by a battery 206 and can execute a predetermined process in an off-line state. The first control unit 200 includes an MPU 201, a cover sensor 202, an interface control unit 203, and a nonvolatile memory 204 that are connected to each other via a bus 205.
[0038]
The MPU 201 incorporates a ROM 201a and executes a program stored in the ROM 201a to control the first control unit 200. The ROM 201a also stores a program for realizing predetermined processing steps in the flowcharts shown in FIGS.
[0039]
The cover sensor 202 detects opening / closing of the cover 103. Since the cover sensor 202 is supplied with power from the battery 206, the cover sensor 202 can detect the opening and closing of the cover 103 even in an offline state. The interface control unit 203 exchanges various information with the information processing apparatus 102 via the interface line 207.
[0040]
The non-volatile memory 204 stores the opening / closing history of the cover 103 in the offline state (cover opening / closing history 226) and ID information 225 used for authentication with the information processing apparatus 102. The ID information 225 is acquired from a second control unit 208 (described later) in the information processing apparatus 102 via the interface line 207 and stored in the nonvolatile memory 204.
[0041]
With the above configuration, the cartridge device 100 can detect the opening / closing of the cover 103 and retain information such as the ID information 225 and the cover opening / closing history 226 without receiving power supply from the information processing device 102.
[0042]
The information processing apparatus 102 includes a second control unit 208, a third control unit 209, and a power supply unit 215 that supplies power to the second control unit 208 and the third control unit 209.
[0043]
Here, a startup procedure of the information processing apparatus 102 will be described.
[0044]
First, when a power switch (not shown) is turned on, power is supplied to the second control unit 208 via the power line 216, and the second control unit 208 is activated. The second control unit 208 activated by the power supply sends an instruction to the power supply unit 215 through the control line 230 to start the power supply from the power supply line 217 to the third control unit 209. Receiving the power supply, the third control unit 209 performs various processes by loading and executing the operating system and application programs from the hard disks 101a to 101d.
[0045]
Next, the configuration of the second control unit 208 and the third control unit 209 will be described.
[0046]
The second control unit 208 includes an MPU 210, an interface control unit 212, and a nonvolatile memory 211 that are connected to each other via a bus 213.
[0047]
The MPU 210 has a built-in ROM 210a and controls the second control unit 208 by executing a program stored in the ROM 210a. The ROM 210a also stores programs corresponding to the flowcharts shown in FIGS.
[0048]
The interface control unit 212 exchanges various types of information with the third control unit 209 via the interface line 214, and transmits various types of information with the first control unit 200 via the interface line 207. Give and receive.
[0049]
The nonvolatile memory 211 stores ID information 227 and the like used when authentication with the cartridge device 100 is performed. Here, as the ID information 227 stored in the non-volatile memory 211, information input from the operation panel 228 by a predetermined administrator or information received and managed by a management device (not shown) on the network 229 is used. May be.
[0050]
The ID information 227 (225) may be automatically generated by the second control unit 208 or the third control unit 209. In the case of automatic generation, after the cartridge apparatus 100 is mounted and authenticated, it is changed to ID information different from the authenticated ID information and used as ID information 227 (225), so that security is further improved. improves.
[0051]
The ID information 227 in the nonvolatile memory 211 is sent to the first control unit 200 by the interface control unit 212 when the administrator operates the operation panel 228. On the first control unit 200 side, the received ID information 227 is stored in the nonvolatile memory 204 as ID information 225.
[0052]
When the ID information 227 is automatically generated / changed by the second control unit 208 or the third control unit 209, the ID information 227 is generated based on the operation of the operation panel 228. It is desirable to save the user's trouble by automatically transmitting and storing the data in the non-volatile memory 204 without transmitting it to the non-volatile memory 204.
[0053]
The operation panel 228 includes an operation button and a display unit (not shown), receives an operation using the operation button, and displays a guide message on the display unit.
[0054]
Further, the second control unit 208 has a function of detecting that the cartridge device 100 is mounted on the information processing device 102. For example, when the cartridge apparatus 100 is mounted on the information processing apparatus 102, the mounting detection function detects a change in the signal level by causing some signal lines of the interface line 207 to be terminated from open to ground. This can be achieved.
[0055]
The third control unit 209 includes an MPU 218, a disk controller 219, a RAM 220, a ROM 221, an interface control unit 222, and a network control unit 223 that are connected to each other via a bus 224.
[0056]
The MPU 218 controls the third control unit 209 by developing a program or the like stored in the ROM 221 in the RAM 220 and executing it. The ROM 221 also stores a program for realizing predetermined processing steps of the flowcharts shown in FIGS.
[0057]
The interface control unit 222 exchanges information with the second control unit 208 via the interface line 214. The disk controller 219 performs RAID control on the disk array including the hard disk devices 101a to 101d connected via the disk interface 224 (for example, a serial ATA interface).
[0058]
A program loaded from the hard disk devices 101 a to 101 d is also appropriately developed in the RAM 220, and this program is executed by the MPU 218. The ROM 221 also stores a BIOS program that is first executed by the MPU 218 after the third control unit 209 is activated. This BIOS program loads the operating system stored in the hard disk devices 101 a to 101 d into the RAM 220.
[0059]
The network control unit 223 controls data communication performed with other devices via the network 229.
[0060]
Note that, as described above, the configuration in which the control unit of the information processing apparatus 102 is divided into the first control unit 208 and the second control unit 209 receives the BIOS program from another manufacturer and the present invention. This is useful for a manufacturer who manufactures the information processing apparatus 102 according to the above, and who is difficult to modify the BIOS program into a desired mode.
[0061]
Next, the operation when the second control unit 208 activates the third control unit will be described based on the flowchart of FIG.
[0062]
Based on the program stored in the ROM 210a, the MPU 210 of the second control unit 208 first determines whether or not the cartridge device 100 is attached to the information processing device 102 (step S301), and the cartridge device 100 is attached. If YES, go to step S302.
[0063]
In step S <b> 302, the interface control unit 212 acquires ID information 225 from the nonvolatile memory 204 of the first control unit 200. In step S303, the ID information 225 acquired in step S302 and the ID information 227 held in the information processing apparatus 102 (nonvolatile memory 211) are collated to determine whether or not they match. As a result, if they do not match, the process proceeds to step S304.
[0064]
In step S304, an authentication operation by the user is requested, and it is determined whether or not the user is a valid user based on the authentication information input from the operation panel 228. The authentication information to be input may be ID information 227 or a password stored in advance in the nonvolatile memory 211.
[0065]
In step S305, it is determined whether or not the authentication in step S304 is successful. If the authentication is successful, the process proceeds to step S307, and the third control unit 209 starts by supplying power to the third control unit 209. 209 is started.
[0066]
If the authentication in step S304 fails, the process proceeds to step S306, a warning message to that effect is displayed on the display of the operation panel 228, and the process ends.
[0067]
If it is determined in step S303 that the ID information 225 acquired in step S302 matches the ID information 227 held in the information processing apparatus 102, the process proceeds to step S307, and the third control unit 209 as described above. The third control unit 209 is activated by starting the power supply to.
[0068]
When the third control unit 209 is activated by the second control unit 208, the third control unit 209 immediately supplies power to the hard disk device 101 to activate the hard disk device 101, and installs the operating system stored in the hard disk device 101. Load to RAM 220.
[0069]
As described above, in the first embodiment, when a plurality of hard disk devices 101 are used as a disk array device, the information processing device 102 can acquire the stored contents in the cartridge device 100 that houses the disk array device. A non-volatile memory 204 is provided, and ID information 225 for authenticating a pair with the information processing apparatus 102 is stored in the non-volatile memory 204. On the other hand, on the information processing apparatus 102 side, the ID information 225 is acquired from the nonvolatile memory 204 of the mounted cartridge apparatus 100 and collated with the ID information 227 held by the own apparatus, and the disk array apparatus is based on the collation result. It is determined whether to start (hard disk device 101), that is, whether to load a system program or the like.
[0070]
As a result, it is possible to authenticate whether the disk array device is valid in a short time without activating the hard disk device 101 in the cartridge device 100.
[0071]
For example, in order to search for a valid cartridge device from a plurality of cartridge devices, even when the cartridge devices are mounted on the information processing device one by one and checked, the hard disk device in the cartridge device can be collated without starting each time. Therefore, it becomes possible to quickly find a valid cartridge device.
[0072]
[Second Embodiment]
Next, a second embodiment, which is a partial improvement of the first embodiment, will be described with a focus on differences from the first embodiment.
[0073]
In the first embodiment, when the ID information 225 held by the cartridge device 100 attached to the information processing apparatus 102 matches the ID information 227 held by the second control unit 208, authentication by the user is performed. The third control unit 209 (that is, the hard disk device 101) for realizing the main function without being requested is activated.
[0074]
In the second embodiment, even when the ID information 225 held by the cartridge device 100 matches the ID information 227 held by the second control unit 208, the cover 103 of the cartridge device 100 is opened and closed in an offline state. If there is a possibility that the user authentication has been performed, user authentication for activating the third control unit 209 (hard disk device 101) is requested.
[0075]
FIG. 4 is a flowchart illustrating an operation when the second control unit 208 activates the third control unit in the second embodiment.
[0076]
The difference from the flowchart of FIG. 3 according to the first embodiment is that the process of step S302 is replaced with the process of step S401, and the process of step S402 is newly added after the affirmative determination of step S303. . Therefore, only step S401 and step S402 will be described here, and description of other steps will be omitted.
[0077]
First, in step S <b> 401, the cover opening / closing history 226 is acquired together with the ID information 225 from the first control unit 200.
[0078]
In step S402, based on the cover opening / closing history 226 acquired in step S401, it is determined whether or not the cover 103 of the cartridge apparatus 100 is opened and closed in an offline state. If it is determined that the cover 103 is opened and closed in an offline state, In step S304, an authentication operation by the user is requested.
[0079]
If it is determined that the cover 103 of the cartridge device 100 is not opened or closed, the process proceeds to step S307, and the third control unit 209 is activated by starting the supply of power to the third control unit 209.
[0080]
Thus, in the second embodiment, even if the ID information 225 and 227 match each other, if there is a trace that the cover 103 has been opened in an off-line state, it is the contents of the cartridge device 100. Since it is determined that there is a possibility that the hard disk device 101 has been illegally handled, an authentication operation by the user is requested, so that the information processing device 102 can be more reliably prevented from being loaded by loading an unauthorized program or data. be able to.
[0081]
Further, since the possibility of unauthorized handling of the hard disk device 101 is determined based on the opening / closing history of the cover 103 detected by the cover sensor 202, the configuration of the cartridge device 100 can be simplified without complicating the configuration. Therefore, it is possible to determine the possibility of illegal handling of the hard disk device 101.
[0082]
The present invention is not limited to the first and second embodiments described above, and various application modifications can be made.
[0083]
For example, in the first and second embodiments, whether or not the third control unit 209 may be activated, that is, whether or not the information stored in the hard disk device 101 may be loaded into the third control unit 209. The second control unit 208, which is different from the third control unit 209 that performs the activation (loading), performs the authentication process for determining whether or not.
[0084]
However, the process of loading the information stored in the hard disk device 101 into the third control unit 209 is executed by the BIOS program stored in the ROM 221 of the third control unit 209.
[0085]
Therefore, the BIOS program of the third control unit 209 may execute the authentication process that has been executed by the second control unit 208. In this case, the process of acquiring the ID information 225 from the nonvolatile memory 204 of the first control unit 200 may be performed by either the first control unit 208 or the second control unit 209.
[0086]
In addition, as in the first and second embodiments, the second control unit 208 transmits the ID information 225 to the first control unit 200 without starting the third control unit 209 after successful authentication. After being acquired from the non-volatile memory 204 (when the second control unit 208 acquires the ID information 225) or immediately after the second control unit 208 is activated (the third control unit 209 acquires the ID information 225). In the case of acquisition), it is necessary to activate the third control unit 209.
[0087]
Even when the third control unit 209 performs the authentication process, the third control unit 209 supplies power to the hard disk device 101 only when the authentication is successful, starts the hard disk device 101, and executes a system program or the like. Needless to say, loading.
[0088]
The present invention is also applicable to a case where the system program is stored in a hard disk device or the like built in the information processing apparatus, and the system program is not stored in the hard disk device in the disk array device.
[0089]
Further, the present invention is also applicable when the information processing apparatus is not divided into a plurality of control units as in the first and second embodiments.
[0090]
Furthermore, the present invention may be applied to a disk array device (cartridge device) that stores a plurality of disk-shaped storage media such as magneto-optical disk devices other than hard disk devices.
[0091]
Another object of the present invention is to supply a storage medium (or recording medium) on which a program code of software that realizes the functions of the above-described embodiments is recorded to a system or apparatus, and to perform computer (or CPU or MPU) of the system or apparatus. Needless to say, this is also achieved by reading and executing the program code stored in the storage medium.
[0092]
In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention. Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an operating system (OS) running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.
[0093]
Further, after the program code read from the storage medium is written in a memory provided in a function expansion card inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the CPU or the like provided in the card or the function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing. When the present invention is applied to the storage medium, the storage medium stores program codes corresponding to all or part of the flowcharts shown in FIGS.
[0094]
【The invention's effect】
As described above, according to the present invention, an information processing system capable of quickly authenticating a set of a disk array device storing a plurality of disk devices and an information processing device to which the disk array device is mounted. The This makes it possible to provide convenience.
[Brief description of the drawings]
FIG. 1 is an external view for explaining a use form of an information processing system in an embodiment of the present invention.
FIG. 2 is a block diagram showing a schematic configuration of the information processing system.
FIG. 3 is a flowchart showing the operation of the information processing apparatus unique to the first embodiment of the present invention.
FIG. 4 is a flowchart showing the operation of the information processing apparatus unique to the second embodiment of the present invention.
[Explanation of symbols]
100: Cartridge device
101, 101a, 101b, 101c, 101d... Disk device
102: Information processing apparatus
103 ... cover
200 ... 1st control part
201, 210, 218 ... MPU
201a, 210a, 221 ... ROM
204, 211 ... Nonvolatile memory
206 ... Battery
208: Second control unit
209 ... Third control unit
220 ... RAM
228 ... Operation panel
229 ... Disk controller

Claims (3)

A disk array device that is not electrically connected to the information processing device by being removed from the information processing device, the storage unit storing a plurality of disk devices, and the storage unit A cover that covers the plurality of disk devices, and a record that records an opening / closing history of the cover when the information processing device is not electrically connected to the information processing device by being removed from the information processing device. It said disk array device and a means,
Wherein when the disk array device is mounted on the information processing apparatus, acquiring means for acquiring the closing history of the cover portion in a state in which the the recording means and the disk array device and the information processing apparatus is not electrically connected And a connection that does not transmit / receive electrical signals to / from the disk device when the information processing device is started up, when the fact that the cover is opened is recorded in the opening / closing history of the cover unit acquired by the acquisition means An information processing system comprising: the information processing apparatus including a control unit.   The information processing apparatus has authentication information input means for inputting user authentication information based on a manual operation of a user, and the connection control means is based on the opening / closing history and the authentication information acquired by the acquisition means. The information processing system according to claim 1, wherein transmission / reception of an electric signal with the disk device stored in the storage unit is controlled.   The information processing apparatus according to claim 1, wherein the information processing apparatus includes a warning unit that issues a warning when the connection control unit does not transmit / receive an electric signal to / from the disk device. system.

Images