JP5553124B2 - Information processing apparatus, program, and authentication method - Google Patents

Description

  The present invention relates to an information processing apparatus connected to a server via a network, and more particularly to an information processing apparatus that provides a function by receiving server authentication.

  There is known a network system in which a terminal accessing a server uses a function provided by the server. At this time, since the server permits the function to be provided only to a specific user, it is common to authenticate the user based on the consistency of the ID and password input by the user and transmitted by the terminal (for example, Patent Literature 1).

  In Patent Document 1, when a PC (Personal Computer) stores the contents of a database in a memory card, the database is encrypted with a DB key, and the DB key is encrypted with an encryption password corresponding to the user. When the portable terminal accesses the database from the memory card, the password is received from the user, and the password is encrypted with the password itself, and the encrypted password and the memory card are stored. A data search system is disclosed that permits access to a database when the encrypted password matches.

  By the way, not only a device having a UI (user interface) such as an input unit or a display unit such as a PC or a portable terminal, but also a so-called embedded device is used to provide a service to a user by using a function provided by a server. The form became known. Embedded devices are equipped with a computer system to realize a specific function, and are used everywhere such as home appliances and industrial devices.

  Even in an embedded device, when a server starts providing a service, device authentication may be performed in order to determine whether the service is an object to be provided. In the case of an embedded device that does not have a UI, it is difficult for the user to input an ID or password. Therefore, the embedded device stores some authentication information in a nonvolatile memory, and transmits this authentication information to the server. However, it can be determined whether or not authentication is established.

  However, in such an embedded device authentication method, if a third party copies the program or data in the embedded device together with the authentication information and installs it in another device, other devices that cannot originally receive the service are There is a problem that the service can be received from the server.

  In order to cope with this problem, it is conceivable that when the server requests a password from the embedded device and the user inputs the correct password, the server starts providing the service. However, in the case of small embedded devices, it may not be equipped with a numeric keypad, keyboard, password request message, or password display means entered by the user, which is necessary to enter the password. I can't even do it.

  In view of the above problems, an object of the present invention is to provide an information processing apparatus that can receive authentication without requiring a password from a user.

In view of the above problems, the present invention provides an information processing apparatus that executes a started program and provides a predetermined function , and includes a first storage unit that stores an encrypted program, and first authentication information. Using the second storage means to store and the first authentication information stored in the second storage means, the encrypted program stored in the first storage means is decrypted and activated. And an authentication unit that authenticates with an external device using the first authentication information used for the decryption .

  An information processing apparatus that can be authenticated without requiring a password from a user can be provided.

It is an example of a schematic block diagram of a terminal authentication system. It is an example of the hardware block diagram of a terminal. It is an example of the hardware block diagram of a server. It is an example of the functional block diagram of a terminal authentication system. It is a figure which shows an example of a terminal authentication management table, a terminal management table, and a destination list management table. It is an example of the sequence diagram which shows the procedure from power-on of a terminal to displaying a destination list. It is a figure which shows an example of the destination list which a destination list preparation part produces in step S34. It is an example of a part of hardware configuration diagram of a terminal. It is an example of the figure explaining the outline of the decoding method of HD. It is an example of the figure explaining the outline of the decoding method of HD. It is an example of the figure explaining the starting procedure of a terminal. It is a figure which shows an example of an authentication result determination process. It is a figure which shows the example of the error display displayed on the display.

Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.
FIG. 1 shows an example of a schematic configuration diagram of a terminal authentication system 100 of the present embodiment. The server 50 and the terminal 10 are connected via the communication network 2. The terminal 10 may be any device, but an information processing apparatus equipped with a projector is illustrated as an example. A display 120 is connected to the terminal 10. The server 50 provides various services such as authenticating the terminal 10, transmitting various data, and updating a program stored in the terminal 10.

  The terminals 1 to n may be information processing apparatuses having the same function as the terminal 10 or may be information processing apparatuses having different functions. One or more of the terminal 10 and the terminals 1 to n can transmit and receive data to and from each other via the server 50.

  The communication network 2 is an in-house LAN, a WAN in which LANs are connected to each other via a wide area Ethernet (registered trademark), IP-VPN, or the like, or the Internet connected to a LAN or WAN via a router. Therefore, the terminal 10 and the terminals 1 to n can communicate with each other in-house, between offices, between branches in different countries, and the like. The communication is preferably concealed by SSL (Secure Socket Layer) or the like.

  FIG. 2 shows an example of a hardware configuration diagram of the terminal 10. The terminal 10 includes a CPU (Central Processing Unit) 101 that controls the operation of the entire terminal 10, a ROM (Read Only Memory) 102 that stores a program used to drive the CPU 101 such as an IPL (Initial Program Loader), and a work area of the CPU 101. RAM (Random Access Memory) 103 used as a memory, an HD 122 for storing a terminal program and a request source terminal ID, an HDD (Hard Disk Drive) 121 for controlling reading or writing of various data to the HD 122 according to the control of the CPU 101, video A flash memory 104 for storing various data such as data and audio data, an SSD (Solid State Drive) 105 for controlling reading or writing of various data to the flash memory 104 according to the control of the CPU 101, and a data for a recording medium 106 such as a flash memory. A media drive 107 that controls reading or writing (storage) of data, an operation button 108 that is operated when a destination of the terminal 10 is selected, a power switch 109 for switching on / off the power of the terminal 10, and a communication network 2 A network I / F (Interface) 111 for data transmission using the BIOS, and a BIOS ROM 123 storing a program for performing the lowest level input / output with the hardware.

  The terminal 10 also includes a built-in camera 112 that captures an image of a subject under the control of the CPU 101 to obtain image data, an image sensor I / F 113 that controls driving of the camera 112, a built-in microphone 114 that inputs sound, and sound. The built-in speaker 115 for outputting the sound, the sound input / output I / F 116 for processing the input / output of the sound signal between the microphone 114 and the speaker 115 according to the control of the CPU 101, and the image data on the external display 120 according to the control of the CPU 101. A display I / F 117 for transmission, an external device connection I / F 118 for connecting various external devices, and a bus line 110 such as an address bus and a data bus for electrically connecting the above components are provided. .

  The display 120 is a display unit configured by a liquid crystal or an organic EL that displays an image of a subject, an operation icon, and the like. A touch panel can be mounted. The display 120 is connected to the display I / F 117 by a cable 120c. The cable 120c may be an analog RGB (VGA) signal cable, a component video cable, HDMI (High-Definition Multimedia Interface (registered trademark)), or DVI (Digital Video Interactive). ) A signal cable may be used.

  The camera 112 includes a lens and a solid-state image sensor that converts light into electric charges and digitizes a subject image (video). As the solid-state image sensor, a CMOS (Complementary Metal Oxide Semiconductor) or a CCD (Charge Coupled Device) Etc. are used.

  External devices such as an external camera and an external speaker can be connected to the external device connection I / F 118 by a USB (Universal Serial Bus) cable or the like. When an external camera is connected, the external camera is driven in preference to the built-in camera 112 under the control of the CPU 101. Similarly, when an external microphone is connected or when an external speaker is connected, each of the external microphones and the built-in speaker 115 is given priority over the internal microphone 114 and the internal speaker 115 according to the control of the CPU 101. An external speaker is driven.

  The recording medium 106 is detachable from the terminal 10. Further, as long as it is a non-volatile memory that reads or writes data according to the control of the CPU 101, not only the flash memory 104 but also an EEPROM (Electrically Erasable and Programmable ROM) or the like may be used.

  Further, the terminal program may be recorded in a computer-readable recording medium such as the recording medium 106 and distributed as a file in an installable or executable format. The terminal program may be stored in the ROM 102 instead of the HD 122.

  FIG. 3 is an example of a hardware configuration diagram of the server 50. The server 50 includes a CPU 201 that controls the operation of the entire server, a ROM 202 that stores programs used to drive the CPU 201 such as an IPL, a RAM 203 that is used as a work area for the CPU 201, and an HD 204 that stores various data such as server programs. A HDD (Hard Disk Drive) 205 that controls reading or writing of various data to the HD 204 according to the control of the CPU 201, a media drive 207 that controls reading or writing (storage) of data to a recording medium 206 such as a flash memory, a cursor, and a menu , A display 208 that displays various information such as windows, characters, or images, a network I / F 209 for transmitting data using the communication network 2, input of characters, numerical values, various instructions, and the like A keyboard 211 having a plurality of keys, a mouse 212 for selecting and executing various instructions, selecting a processing target, moving a cursor, and the like, and a CD-ROM (Compact Disc Read Only Memory) as an example of a removable recording medium ) A CD-ROM drive 214 for controlling reading or writing of various data with respect to 213, and a bus line 210 such as an address bus and a data bus for electrically connecting each component.

  Note that the server program may be recorded in a computer-readable recording medium such as the recording medium 206 or the CD-ROM 213 and distributed as a file in an installable or executable format. The server program may be stored in the ROM 202 instead of the HD 204.

<Functional configuration of terminal>
FIG. 4 is an example of a functional block diagram of the terminal authentication system 100.
The terminal 10 includes a transmission / reception unit 11, a login request unit 13, a voice input unit 15a, a voice output unit 15b, a destination list creation unit 20, an activation unit 17, an operation input reception unit 12, an imaging unit 14, and a display control unit 16. have. Each of these units is a function realized by any one of the constituent elements shown in FIG. 3 being operated by an instruction from the CPU 101 that has executed the terminal program developed from the HD 122 onto the RAM 103, or effectively. Means.

  The transmission / reception unit 11 of the terminal 10 is realized by an instruction from the CPU 101 and a network I / F 111, and transmits / receives various data (or information) to / from other terminals, devices, or servers 50 via the communication network 2.

  The operation input receiving unit 12 is realized by a command from the CPU 101, the operation button 108, and the power switch 109, and receives various inputs by the user. For example, when the user turns on the power switch 109, the operation input receiving unit 12 receives the power ON and supplies power from the power source to each unit.

  The login request unit 13 is realized by a command from the CPU 101, and triggered by an ON operation of the power switch 109, the login request information, the request source terminal ID, and the request source are sent from the transmission / reception unit 11 to the server 50 via the communication network 2. The current IP address of the terminal (terminal 10aa) is automatically transmitted.

  The imaging unit 14 is realized by a command from the CPU 101, the camera 112, and the imaging element I / F 113, images a subject, and outputs image data obtained by the imaging.

  The voice input unit 15a is realized by a command from the CPU 101 and a voice input / output I / F 116. After the user's voice is converted into a voice signal by the microphone 114, voice data related to the voice signal is input. The audio output unit 15 b is realized by a command from the CPU 101 and the audio input / output I / F 116, and outputs an audio signal related to the audio data to the speaker and causes the speaker 115 to output the audio.

  The display control unit 16 is realized by a command from the CPU 101 and the display I / F 117 and performs control for transmitting image data to the external display 120.

  The destination list creation unit 20 creates and updates a destination list as shown in FIG. 7 based on destination list information described later and the status information of the terminal 10 as each destination candidate received from the server 50.

The terminal ID of this embodiment indicates identification information such as a language, a character, a symbol, or various signs used to uniquely identify the terminal 10. Further, the terminal ID and the relay device ID may be identification information in which at least two of a language, characters, symbols, and various indicia are combined.
When the activation input is notified from the operation input reception unit 12, the activation unit 17 starts a series of activation processes until the terminal program is activated.

<Functional configuration of server>
The server 50 includes a transmission / reception unit 51, a terminal authentication unit 52, a state management unit 53, a terminal extraction unit 54, and a terminal state acquisition unit 55. Each of these units is enabled or enabled by any one of the constituent elements shown in FIG. 3 operating according to a command from the CPU 201 according to the server program developed from the HD 204 onto the RAM 203. Means. The HD 204 includes a terminal authentication management DB 5002, a terminal management DB 5003, and a destination list management DB 5004.

(Terminal authentication management table)
FIG. 5A is a diagram illustrating an example of a terminal authentication management table stored in the terminal authentication management DB 5002. In the terminal authentication management table, each password is associated and managed in association with each terminal ID of all terminals 10 managed by the server 50. For example, the terminal authentication management table shown in FIG. 5A indicates that the terminal ID of the terminal 10aa is “01aa” and the password is “aaaa”.

(Terminal management table)
FIG. 5B is a diagram illustrating an example of a terminal management table stored in the terminal management DB 5003. In the terminal management table, for each terminal ID of each terminal 10, a destination name when each terminal 10 is a communication destination, an operating state of each terminal 10, a reception date and time when login request information described later is received by the server 50, The IP address of the terminal 10 is managed in association with it.

(Destination list management table)
FIG. 5C is a diagram illustrating an example of a destination list management table stored in the destination list management DB 5004. In the destination list management table, a destination terminal registered as a destination terminal candidate in association with a terminal ID of a request source terminal that requests the start of a call in a video conference (hereinafter, may be referred to as a request source terminal ID). All terminal IDs are managed in association with each other. For example, destination terminal candidates that can request the start of a call in a video conference from a request source terminal (terminal 10aa) whose terminal ID is “01aa” are registered by the terminal ID.

  The transmission / reception unit 51 is executed by a command from the CPU 201 and the network I / F 209, and transmits / receives various data (or information) to / from the terminal 10, the device, or the system via the communication network 2.

  The terminal authentication unit 52 is realized by an instruction from the CPU 201 and uses the request source terminal ID and password included in the login request information received via the transmission / reception unit 51 as search keys, and the same terminal in the terminal authentication management DB 5002 Terminal authentication is performed by determining whether the ID and password are managed.

  The state management unit 53 is realized by a command from the CPU 201, and in order to manage the operation state of the request source terminal that has requested the login, the terminal management DB 5003 makes a login request with the terminal ID, operation state, and server 50 of the request source terminal. The reception date and time when the information is received and the IP address of the request source terminal are stored and managed in association with each other. Further, the state management unit 53 switches the terminal management DB 5003 based on the state information sent from the terminal 10 to turn off the power when the user turns off the power switch 109 of the terminal 10 from the ON state. The operation state indicating the ON line is changed to the OFF line.

  The terminal extraction unit 54 is realized by a command from the CPU 201, searches the destination list management DB 5004 using the terminal ID of the request source terminal that requested the login as a key, and is a candidate destination terminal that can make a call with the request source terminal. The terminal ID is extracted by reading the ID. Further, the terminal extraction unit 54 searches the destination list management DB 5004 using the terminal ID of the request source terminal that has requested login as a key, and other request sources that have registered the terminal ID of the request source terminal as candidates for the destination terminal. The terminal ID of the terminal is also extracted.

  The terminal state acquisition unit 55 searches the terminal management DB 5003 using the destination terminal candidate terminal ID extracted by the terminal extraction unit 54 as a search key, and reads the operating state for each terminal ID extracted by the terminal extraction unit 54. . Thereby, the terminal state acquisition unit 55 can acquire the operating state of the candidate destination terminal that can make a call with the request source terminal that has requested the login. In addition, the terminal state acquisition unit 55 searches the terminal management DB 5003 using the terminal ID extracted by the terminal extraction unit 54 as a search key, and also acquires the operating state of the request source terminal that has requested login.

[From power on to destination list display]
FIG. 6 is an example of a sequence diagram illustrating a procedure from turning on the terminal 10 to displaying a destination list. The terminal 10 to be powered on is referred to as terminal 10aa.

  First, when the user turns on the power switch 109, the operation input receiving unit 12 receives the power ON and turns on the power (S21). Then, the starting part 17 performs the starting process mentioned later (S21-2).

  When the startup process is completed, the login request unit 13 automatically transmits login request information indicating a login request from the transmission / reception unit 11 to the server 50 via the communication network 2 when the power switch 109 is turned on. (S22). This login request information includes a request source terminal ID for identifying the terminal 10aa that is the own terminal as the request source, and a password. This password is a password stored in the BIOS ROM 123, and one of the features is that the user does not need to input it. When the login request information is transmitted from the terminal 10aa to the server 50, the server 50 that is the receiving side can grasp the IP address of the terminal 10aa that is the transmitting side.

  Next, the terminal authentication unit 52 of the server 50 uses the request source terminal ID and password included in the login request information received via the transmission / reception unit 51 as a search key, and stores the same terminal ID and password in the terminal authentication management DB 5002. The terminal authentication is performed by determining whether or not the set is managed (S23).

  Then, the transmission / reception unit 51 of the server 50 transmits the authentication result information indicating the authentication result obtained by the terminal authentication unit 52 to the request source terminal (terminal 10aa) that requested the login via the communication network 2. (S25). In the present embodiment, it is assumed that the terminal authentication unit 52 determines that the terminal has a valid usage right.

  Thereafter, the login request unit 13 executes an “authentication result determination process” to be described later (S25-2).

  When the request source terminal (terminal 10aa) receives the authentication result information indicating the result determined to be the terminal 10 having the right to use, the transmission / reception unit 11 sends the destination to the server 50 via the communication network 2. Destination list request information indicating that a list is requested is transmitted (S26). Thereby, the transmission / reception unit 51 of the server 50 receives the destination list request information.

  The terminal extraction unit 54 searches the destination list management DB 5004 using the terminal ID “01aa” of the request source terminal (terminal 10aa) that requested the login as a search key, and can make a call with the request source terminal (terminal 10aa). The candidate terminal ID and the destination name corresponding to the terminal ID are read out (S27).

  The terminal extraction unit 54 of the server 50 reads the record associated with the candidate terminal ID from the terminal management table, and generates “destination list information (destination list frame, terminal ID, destination name)” from the record (S28). ). The transmission / reception unit 51 of the server 50 transmits the destination list information to the request source terminal (terminal 10aa) (S29).

  Thereby, in the request source terminal (terminal 10aa), the transmission / reception unit 11 receives the destination list information and stores the destination list information in the RAM 103 (S30).

  Further, the terminal status acquisition unit 55 of the server 50 uses the terminal IDs (“01ab”, “01ba”, “01db”,...) Of the destination terminal candidates extracted by the terminal extraction unit 54 as a search key to manage terminals. The DB 5003 is searched, and the corresponding operating status is read for each terminal ID extracted by the terminal extracting unit 54, thereby acquiring each operating status of the terminal (10ab, 10ba, 10bb,...) As a destination candidate (step) S31).

  Next, the transmission / reception unit 51 includes the terminal ID “01ab” as the search key used in step S27 and the operating state “ON line (call possible)” of the corresponding destination terminal (terminal 10ab). "Terminal status information" is transmitted to the requesting terminal (terminal 10aa) via the communication network 2 (step S32).

  Next, the request source terminal (terminal 10aa) sequentially stores the state information of the terminal 10 received from the server 50 in the RAM 103 (step S33). Therefore, the request source terminal (terminal 10aa) receives the status information of each of the terminals, so that each of the current times of the terminal 10ab and the like that are candidates for the destination terminal that can talk to the request source terminal (terminal 10aa) is obtained. The operating state can be acquired.

  Next, the destination list creation unit 20 of the request source terminal (terminal 10aa) creates a destination list based on the destination list information stored in the RAM 103, and the display control unit 16 The timing for displaying the destination list is controlled (S34). At this time, it is possible to exclude destination candidates that have not been activated from the destination list and reflect in the destination list that they have not been activated.

  FIG. 7 is a diagram illustrating an example of the destination list created by the destination list creation unit 20 in step S34. For each destination, “icon indicating terminal status”, “destination status information”, “destination name (upper) / terminal ID (lower)” are displayed.

  The last line of the destination list in FIG. 7 displays the destination name and terminal ID of the terminal itself. In addition, an image captured by the imaging unit 14 of the terminal is displayed at the right end of the last row. The destination list creation unit 20 arranges and displays the destination name, terminal ID, and video of the terminal itself on the screen data. By displaying the video in this manner, the user can adjust and prepare for the shooting position before the terminal calls the partner.

<Startup process>
As illustrated in S22 of FIG. 6, the terminal 10aa transmits the request source terminal ID and the password to the server 50, but the terminal 10 may not have a password input unit. Further, even if the terminal 10 has a password input means, if the user is requested to input a password, the operability may be lowered. Therefore, the terminal 10 of the present embodiment stores the password in advance, so that the terminal 10 can be authenticated by the server 50 even if the user does not input the password.

  FIG. 8 shows a part of the hardware configuration diagram of the terminal 10. FIG. 8 is an excerpt of blocks used for the activation process from FIG. The BIOS ROM 123 stores a BIOS program 402 executed first after power-on and a password 401 transmitted to the server 50 as login request information.

  The HD 122 stores a dedicated boot loader 403, a decryption key 404, a request source terminal ID 405, screen data 406, an activation program 407 and a terminal program 408. However, the request source terminal ID 405, the screen data 406, the activation program 407, and the terminal program 408 stored in the HD 122 of the terminal 10 are encrypted by an encryption technique so that a third party cannot decrypt them. For this reason, a malicious third party cannot copy these data in the HD 122 to use or tamper with the data.

  If the decryption key 404 remains in plain text, the encrypted data in the HD 122 can be decrypted relatively easily, so the decryption key 404 is encrypted with the password 401. Note that it may be encrypted by another key stored in the BIOS ROM 123 instead of the password 401. The security strength can be increased by making the password 401 transmitted to the server 50 and the key for decrypting the decryption key 404 different.

  In the present embodiment, the HD 122 is described as the startup disk, but the same applies when the CPU 101 starts up from the flash memory 104 via the SSD 105.

  9 and 10 are examples of diagrams for explaining the outline of the HD 122 decoding method. Track 0 has an MBR, and track 0 stores a dedicated boot loader and a decryption key 404. The dedicated boot loader can call the decryption program from track 0. The decryption program may or may not be encrypted. If it is not encrypted, it may be stored anywhere such as the flash memory 104.

  Since the request source terminal ID, the activation program 407, and the decryption key 404 necessary for decrypting the terminal program 408 are encrypted with the password 401, even if a third party extracts only the HD 122, these data are read out. It is not possible.

  FIG. 11 is an example of a diagram illustrating the startup procedure of the terminal 10.

  When the user turns on the power (S501), the CPU 101 starts executing the BIOS program 402 stored in the BIOS ROM 123 (502). First, the BIOS program 402 initializes peripheral devices that require initialization, such as the RAM 103, and diagnoses each peripheral device. Then, the drive to be activated is determined according to the priority order of the activation drives stored in the BIOS ROM 123. For example, the priority of activation is set by the user from a CD-ROM, a floppy (registered trademark) disk, a hard disk, or a USB memory.

  Next, the BIOS program 402 searches whether or not a medium is loaded from a boot drive with a high priority. If a medium is loaded in the boot device, the code in the MBR of the medium is copied to the RAM 103. At the same time, the head address of the code is set in the program counter of the CPU 101 (S503). In this embodiment, description will be made assuming that the startup drive is the HD 122. As a result, the CPU 101 shifts from BIOS control to disk control.

  The code executed by the CPU 101 is an instruction for jumping to the dedicated boot loader 403. As a result, the dedicated boot loader 403 is copied to the RAM 103, and the CPU 101 can execute the dedicated boot loader 403 (S504). The reason why the dedicated boot loader 403 is not stored directly in the MBR is that the capacity of the MBR is small and it is difficult to store the dedicated boot loader 403. Therefore, if there is no such restriction, the dedicated boot loader 403 is stored directly in the MBR. May be.

  First, the dedicated boot loader 403 reads the password 401 stored in the BIOS ROM 123 (S505). Since the password 401 is stored at a fixed address, the dedicated boot loader 403 sets the address in the register of the CPU 101 and reads the password 401. The password 401 is stored in the RAM 103.

  Next, the dedicated boot loader 403 reads the decryption key 404 stored at a fixed address in the track 0 and decrypts it with the password 401 (S506). The decrypted decryption key 404 is stored in the RAM 103.

  The dedicated boot loader 403 reads the decryption program stored in Track 0 into the RAM 103. The decryption program is executed by an interruption in which the CPU 101 reads data from the HD 122 and decrypts the data using the decryption key 404.

Next, the dedicated boot loader 403 performs a setup process for decryption.
FIG. 10 is an example of a diagram for explaining the setup process. Since the BIOS ROM 123 provides a unified interface for input / output of various peripheral devices, every time the CPU 101 accesses the HD 122, a software interrupt for using the BIOS ROM 123 is generated. Hereinafter, an input / output function provided by the BIOS ROM 123 is referred to as a BIOS function.

  The BIOS function 4021 is copied to a predetermined area (640 kbytes to 1024 kbytes) of the RAM 103 by the BIOS program 402. The BIOS function 4021 can be called from a program executed by the CPU 101. Specifically, the BIOS function 4021 can be called by setting an argument of the BIOS function 4021 in a predetermined register of the CPU 101 and executing an instruction “INT”. For example, the CPU 101 executes a command starting with “INT13” for accessing the disk. Thus, when an interrupt vector of “0x13” is designated, the CPU 101 executes the function body corresponding to the interrupt vector by an internal interrupt (software interrupt).

  In the present embodiment, the dedicated boot loader 403 hooks the interrupt to the interrupt vector of “0x13”, and therefore writes the decoded interrupt vector to “0x13”. This is the setup process.

  The decoding interrupt vector is an interrupt vector for the CPU 101 to execute the decoding program. With the setup process, when the CPU 101 accesses the HD 122, the software interrupt for reading using the BIOS function 4021 can be hooked by the decoding interrupt vector, and the decoding process can be performed. The processing procedure when the CPU 101 accesses the HD 122 uses the set-up interrupt vector.

  Next, the dedicated boot loader 403 reads the address where the activation program 407 is stored in order to execute the activation program 407 from the HD 122, and starts executing the activation program 407 (S508). The activation program 407 is a program for activating the terminal program 408. In addition, since the area where the address of the activation program 407 is stored in the HD 122 is encrypted, the CPU 101 uses the generation of an interrupt for reading to perform a decryption process on the area where the address of the activation program 407 is stored. Run.

  If the processes from S501 to S507 are normally executed, the activation program 407 is activated, the terminal program 408 is decrypted and activated, and the terminal 10 transmits the login request information of S22 to the server 50.

  In the processes from S501 to S507, when the dedicated boot loader 403 fails to read the password 401 (S505), or when the decryption key 404 is read or decrypted using the password 401 (S506), the dedicated boot loader 403 reads the activation program 407. The address cannot be decoded correctly. As a result, since the CPU 101 sets the address of the erroneous activation program 407 in the program counter and starts execution, the activation program 407 cannot be executed. In this case, the dedicated boot loader automatically stops due to a program runaway or freeze (S509). That is, the process ends without notifying the user of the reason for not starting with an error message or the like. By doing so, it is possible to prevent a third party from being notified that a password is required for activation. Therefore, even if the data of the HD 122 is copied to another device, it is possible to prevent a third party without usage authority from using the function of the terminal 10 or the function of the server 50.

  For example, the request source terminal ID 405 in the login request information transmitted to the server 50 by the terminal program 408 (login request unit 13) in step S22 is encrypted and stored in the HD 122. The three parties cannot decrypt the data of the request source terminal ID 405 and cannot receive the authentication of the server 50.

[Authentication result judgment processing]
Even if the terminal program 408 starts normally, security can be further strengthened by providing an authentication result determination process (S25-2).

FIG. 12 is a diagram illustrating an example of the authentication result determination process.
In step S25, when the login request unit 13 receives the authentication result, the login request unit 13 determines whether this result is a valid usage right (S2501).
If the authentication result is a valid usage right, the process proceeds to step S26.
If the authentication result is an unauthorized use authority, the login request unit 13 displays an error dialog on the display 120 and stops the processing (S2502).

  FIG. 13 is a diagram illustrating an example of an error display displayed on the display 120. As shown in FIG. 13, a message 1401 “Authentication failed” and an OK button 1402 that can be pressed by the user are displayed. The screen data 406 includes character information and icons necessary for displaying this dialog. The screen data 406 is stored in the HD 122 of the terminal 10, and the login request unit 13 accesses the HD 122 and requests the display control unit 16 to display it. Since this screen data 406 is also stored in the HD 122 in an encrypted state, when the login request unit 13 reads the screen data 406, a decryption process by a software interrupt is performed.

  When the user presses the OK button 1402, the login request unit 13 deletes the dialog. Alternatively, in order to prevent a malicious third party from using the terminal 10, when the user presses the OK button 1402, an end process may be immediately performed and the power may be turned off.

  As described above, the terminal authentication system 100 according to the present embodiment encrypts the activation program 407 of the terminal 10 and decrypts the activation program 407 using the password 401 stored in the BIOS ROM 123. Even if a certain third party takes out the HD 122 of the terminal 10 having a valid use right and tries to use it on another device, the terminal program 408 cannot be activated. In addition, since the authentication process of the terminal 10 is performed after the terminal program 408 is activated, the authentication of the terminal 10 can be made stronger.

  Further, since it is not necessary for the user to input the password 401, security can be maintained even in a small terminal 10 that does not have a UI for inputting the password 401.

  In this embodiment, the video conference server 50 and the terminal 10 that participates in the conference have been described as examples. However, the present invention is not limited to this, and the server 50 that provides various services and the terminal 10 that receives the services. Can be applied.

DESCRIPTION OF SYMBOLS 10 Terminal 11, 51 Transmission / reception part 12 Operation input reception part 13 Login request part 17 Starting part 20 Destination list creation part 50 Server 52 Terminal authentication part 53 State management part 54 Terminal extraction part 55 Terminal state acquisition part 100 Terminal authentication system 101 CPU
103 RAM
120 display 121 HDD
122 HD
123 BIOS ROM
401 Password 402 BIOS program 403 Dedicated boot loader 404 Decryption key 405 Request source terminal ID
406 Screen data 407 Startup program 408 Terminal program

Japanese Patent No. 3945088

Claims (20)

An information processing apparatus that executes a started program and provides a predetermined function,
First storage means for storing an encrypted program;
Second storage means for storing first authentication information;
An activation unit that decrypts and activates the encrypted program stored in the first storage unit using the first authentication information stored in the second storage unit;
An information processing apparatus comprising: a program activated by the activation unit; and an authentication unit that performs authentication with an external device using first authentication information used for the decryption.   The authentication unit, wherein the activated program requests authentication from an external device using first authentication information used for the decryption, and acquires an authentication result of authentication establishment from the external device. The information processing apparatus according to 1.   The predetermined function is provided by executing the activated program after the authentication unit authenticates with the external device using the first authentication information. 2. The information processing apparatus according to 2.   The authentication means is an authentication means for executing authentication by the information processing apparatus when authentication with the external apparatus is established, and when the authentication by the information processing apparatus is established, executing the program by executing the program The information processing apparatus according to any one of claims 1 to 3, wherein the information processing apparatus is provided.   5. The information according to claim 1, wherein the predetermined function is a function of acquiring a terminal list from which the information processing apparatus can communicate with the external apparatus and displaying the list as a list. Processing equipment.   The activation means executes an unencrypted decryption program, and the encryption stored in the first storage means by using the first authentication information stored in the second storage means by the decryption program 6. The information processing apparatus according to claim 1, wherein the program is decrypted and activated. The first storage means stores second authentication information,
7. The information processing according to claim 1, wherein the authentication unit requests the external device to perform authentication using the first authentication information and the second authentication information. apparatus.   The information processing apparatus according to claim 7, wherein the first authentication information is a password, and the second authentication information is apparatus specific information. The first storage means encrypts and stores the second authentication information,
8. The authentication unit requests authentication of the external device using the first authentication information and the second authentication information decrypted using the first authentication information. Or the information processing apparatus of 8. Third storage means for storing a decryption key encrypted by the first authentication information;
The authentication means requests the external device to authenticate using the first authentication information and the second authentication information decrypted with the decryption key decrypted using the first authentication information. The information processing apparatus according to any one of claims 7 to 9. The activation means decrypts the decryption key stored in the third storage means using the first authentication information, decrypts the program with the decrypted decryption key, and activates the program.
The information processing apparatus according to claim 10. It further has an input means,
The information processing apparatus according to claim 1, wherein when the input is performed by the input unit, the activation unit activates the program.   The information processing apparatus according to claim 12, wherein the input unit is a power button of the information processing apparatus.   The information processing apparatus according to any one of claims 1 to 13, wherein the second storage unit is a BIOS ROM (Basic Input Output Read Only Memory). If the startup means cannot start the program, terminate the process of starting the program without providing information indicating that the program cannot be started,
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus.   The information processing apparatus according to claim 1, wherein the authentication unit provides information indicating that the authentication has not been established when the authentication has not been established. In the information processing device,
Using the first authentication information stored in the second storage means possessed by the information processing apparatus, the encrypted program stored in the first storage means possessed by the information processing apparatus is decrypted and activated. A startup step;
A program that causes the program activated by the activation step to execute an authentication step of requesting authentication from an external device using the first authentication information used for the decryption.   The authentication method further includes a step of providing a predetermined function by executing the activated program after authentication with the external device using the first authentication information is performed in the authentication step. Item 18. The program according to Item 17. An authentication method executed by an information processing device,
The information processing apparatus is
Using the first authentication information stored in the second storage means included in the information processing apparatus, the encrypted program stored in the first storage means included in the information processing apparatus is decrypted and activated . Steps ,
Authentication method the started program is using the first authentication information to be used before Symbol decoding, and executes the step of requesting authentication to an external device. The information processing apparatus further includes:
The step of providing a predetermined function is executed by executing the started program after authentication with the external device is performed using the first authentication information. Authentication method.

Images