JPH10254784A - Data processor and data processing method for data processor, and storage medium stored with computer-readable program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To securely inhibit illegal access to resources which need to be kept secret by deciding a match between matched information transferred from a connected information processor and identification information stored in an EEPROM and carrying on or quitting a data communication with the information processor which is being connected according to the decision result. SOLUTION: A controller 8 which uses a one-chip microcomputer etc., controls the power source and docking station of the system. The controller 16 controls a connection between the docking station 16 and computer 13. When the computer 13 is connected to the docking station 15, the computer 13 sends some data from the controller 8 to the controller 16. The controller 16 collates the data with data stored in the EEPROM 17 and maintains the connection with the docking station when the data is identical data, but stops the docking operation when different.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data processing apparatus for performing predetermined data processing by connecting a docking station and an information processing apparatus, a data processing method of the data processing apparatus, and a storage storing a computer-readable program. It is about media.

[0002]

2. Description of the Related Art Generally, in a small portable electronic device (information processing device) such as a notebook personal computer, only a minimum number of devices or peripheral devices are required in order to reduce the size and weight according to the application. Not installed. For this purpose, a docking station that can be connected to a notebook personal computer may be provided.

[0005] By connecting the notebook type personal computer to the docking station, it is possible to use a device such as a hard disk or a CD-ROM built in the docking station, or a communication device which can be connected to a network or a modem. become.

[0004]

However, when there are two computers (information processing devices) of the same type for the docking station, the docking station can be connected to either of them.

For example, it is assumed that there is a computer A, a docking station A, and a computer B of the same type as the computer A. In this case, the computer A and the docking station A can be connected, and the hard disk or CD-
Although a device such as a ROM can be used, the computer B can of course be connected to the docking station A. Therefore, the data stored in the hard disk by the user of the computer A can be used by the computer B. File can be read freely by the user, and files and programs unintended by the user of the computer A may be erased, which may cause a problem in security.

As described above, in the docking station, there is no means for identifying the information processing device to be connected.
In addition, since there is no means for authenticating the information processing apparatus to be connected, the docking station has a built-in secondary storage device or the like for storing confidential information, or is connected to a confidential network. In such cases, there is a problem that a security problem occurs.

Further, in a docking station incorporating various peripheral devices, when the information processing device is connected, access to all the peripheral devices incorporated in the information processing device is unconditionally permitted. A problem that an individual use environment cannot be set for each device, and it is not possible to flexibly cope with a request for a use environment such as allowing a peripheral device other than a hard disk, for example, a CD-ROM drive to be driven. There was a point.

The present invention has been made to solve the above problems, and an object of the present invention is to provide a plurality of information processing apparatuses for performing predetermined data processing and a plurality of information processing apparatuses for expanding the functions of each information processing apparatus. By controlling the data communication state with the information processing apparatus or the access state to each resource while authenticating whether the connected data processing apparatus is valid as a connection partner at the time of united connection with an expansion apparatus having resources , Data processing that can establish an access environment that can freely prohibit unauthorized access to any of the resources provided in the expansion unit or data communication with the connected information processing device or allow partial access to any of the resources An object of the present invention is to provide an apparatus, a data processing method of a data processing apparatus, and a storage medium storing a computer-readable program.

[0009]

According to a first aspect of the present invention, a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus are provided. A data processing device that can be united and connected, a storage unit that stores identification information for identifying a user of the information processing device that can be connected to the expansion device, and a connection unit that is connected when each of the information processing devices is connected. Determining means for determining a match between collation information transferred from the information processing apparatus and the identification information stored in the storage means, and data communication with the connected information processing apparatus based on the determination result of the determining means And a control means for continuing or stopping the operation.

According to a second aspect of the present invention, the storage means is constituted by a non-volatile storage medium.

In a third aspect according to the present invention, the resources are:
It includes a secondary storage device, a CD-ROM drive device, and a communication control device.

A fourth invention according to the present invention is such that the control means disables access to any of the resources when the determination means determines that they do not match.

In a fifth aspect according to the present invention, any one of the resources is a secondary storage device.

According to a sixth aspect of the present invention, there is provided a data processing apparatus capable of uniting and connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus. A storage device for storing identification information for identifying an information processing device and a user connectable to the expansion device and a usable resource name; and Determining means for determining a match between collation information transferred from the information processing apparatus and the identification information stored in the storage means, and a resource stored in the storage means when the determination means determines that they match. Control means for setting access to resources other than names to be disabled.

According to a seventh aspect of the present invention, when the determination means determines that there is a mismatch, the control means effectively sets access to a resource having a predetermined resource name stored in the storage means. Is what you do.

An eighth invention according to the present invention is such that the control means invalidates the access to each resource by the connected information processing device when the determination means determines that they do not match. .

According to a ninth aspect of the present invention, there is provided a data processing apparatus capable of uniting and connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus A data processing method for an apparatus, comprising: a registration step of registering, in a memory, identification information for identifying a user of an information processing apparatus connectable to the expansion apparatus; Determining a match between the collation information transferred from the information processing device and the identification information registered in the memory, and continuing or stopping data communication with the connected information processing device based on the determination result And an establishment step of

According to a tenth aspect of the present invention, a computer capable of unitingly connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus is provided. A storage medium storing a readable program, wherein a registration step of registering identification information for identifying a user of an information processing apparatus connectable to the expansion apparatus in a memory; and Determining a match between collation information transferred from the connected information processing device and the identification information registered in the memory; and performing data communication with the connected information processing device based on the determination result. And an establishment step of continuing or canceling the program. The computer-readable program is stored in a storage medium.

According to an eleventh aspect of the present invention, there is provided a data processing apparatus capable of uniting and connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus A data processing method for a device, comprising: a registration step of registering, in a memory, identification information for identifying an information processing device and a user connectable to the expansion device and a usable resource name in a memory; At the time of connection, a judging step of judging a match between the collation information transferred from the connected information processing device and the identification information registered in the memory, and registering in the memory when the judging step judges that they match. And establishing an access to resources other than the resource name given.

According to a twelfth aspect of the present invention, a computer capable of uniting and connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus is provided. A storage medium storing a readable program, a registration step of registering, in a memory, identification information for identifying an information processing apparatus and a user connectable to the expansion apparatus and a usable resource name, At the time of connection with the processing device, a determination step of determining whether the verification information transferred from the connected information processing device matches the identification information registered in the memory, and when it is determined that the determination step matches, Establishing an access to resources other than the resource names registered in the memory to the storage medium. One in which was stored in.

[0021]

BEST MODE FOR CARRYING OUT THE INVENTION

[First Embodiment] FIG. 1 is a block diagram for explaining the arrangement of a data processing apparatus according to a first embodiment of the present invention. The computer main body and the docking station are connected to each other via a predetermined connector. This corresponds to the case where processing is performed.

In FIG. 1, reference numeral 1 denotes a CPU (Central Processing Unit) for controlling an electronic device system, and 2 denotes a main storage device comprising a RAM or the like, which stores application programs and data. Reference numeral 3 denotes an auxiliary storage device for reading and writing files on a hard disk, a memory card, and the like. Reference numeral 4 denotes a display device for displaying characters to be input. Reference numeral 5 denotes a computer system main body, which includes the CPU 1, the main storage device 2, and the like.

Reference numeral 6 denotes a power supply circuit unit having a function of controlling charging of a DC-DC converter and a battery and supplying power to a docking station. A battery pack (battery) 7 supplies power to the system. Reference numeral 8 denotes a controller using a one-chip microcomputer or the like, which controls docking with a system power supply and a docking station.

Reference numeral 9 denotes an AC adapter for supplying external power to the power supply circuit section 6 of the computer main body 13. A power supply line 10 supplies power to the docking station. Reference numeral 11 denotes a bus line, and a computer body 13 and a docking station body (docking station) 1
5 is communicated. Reference numeral 14 denotes a docking connector, which includes a computer body 13 and a docking station body 15.
Make a physical connection with the

A controller 16 controls a power supply controller of the docking station body 15 and a docking operation. Reference numeral 17 denotes a storage device for storing data such as a password for security, which functions as a non-volatile memory so that stored data is not erased even if power is not supplied.
A ROM is used.

Reference numeral 18 denotes a power supply circuit section,
The power supply 10 receives the power supply 10 from the power supply circuit unit 6 and controls the power supply to the docking station body 15. 19
Denotes an auxiliary storage device, which is constituted by a hard disk or the like provided in the docking station main body 15. 20 is CD
A ROM drive, and the docking station body 15
Drive the CD-ROM set in the CD tray.

Reference numeral 21 denotes an external communication device such as a network or a modem, which executes data communication processing according to a predetermined protocol. A docking connector 22 makes a physical connection between the docking station body 15 and the computer body 13.

FIG. 2 is a timing chart showing an example of a data communication process between the controller 8 and the controller 16 shown in FIG.
This is an example in which certain data is output to the controller 8 and the controller 16 outputs data to the controller 8 in response to the data.

In this embodiment, it is assumed that the controller 8 and the controller 16 are connected by two systems of a clock signal line 34 and a bidirectional input / output signal line 35. Also,
Computer body 13 and docking station body 1
5 is connected, first, only power supply to the controller 16 is performed so that the controller 8 can operate.

In FIG. 2, reference numeral 30 denotes data, which indicates an address designation or command from the controller 8. 31
Is data, which is output corresponding to the address or command output by the controller 8 as data 30.

In this embodiment, it is assumed that the controller 16 outputs the corresponding data after, for example, three clocks after the output of the data and the command from the controller 8 is completed.
Reference numeral 33 denotes data, which is output from the controller 16 to the controller 8 in response to the communication from the controller 8.

FIG. 3 is a view for explaining a map of password data stored in the EEPROM 17 shown in FIG.
EEPRO for storing the password equipped in the 5
It corresponds to the storage data of M17.

In the figure, reference numeral 36 denotes a password registration management information storage unit in which data for indicating whether password information is registered or not is set. In this embodiment, if the information stored in the password registration management information storage unit 36 is “0000”, the password is EEPR.
It is assumed that the password is registered in the OM 17. If the password is “FFFF”, the password has not been registered. A password information storage unit 37 stores password information.

In the data processing apparatus configured as described above, that is, in a docking station having devices such as a CD-ROM and a hard disk, and a computer having a function of connecting the docking station, the computer and the docking station A controller for controlling the connection between the docking station and the computer; an EEPROM 17 connected to the controller 16 of the docking station for storing data; and When connecting to the docking station, the controller 8
Sends certain data to the controller 16 from
The controller 16 checks the data stored in the EEPROM 17 and continues the docking operation if the data is the same, but stops the docking operation if the data is different. This ensures that only the computer user who has registered the password cannot use resources such as the hard disk 19 and other devices provided in the docking station, and that data in the hard disk 19 is read or erased. This can be prevented.

Hereinafter, the characteristic configuration of this embodiment will be described with reference to FIG.

In the data processing device configured as described above, that is, a plurality of information processing devices (computer body 13 and equivalent computer body not shown) for performing predetermined data processing and the functions of each information processing device are extended. Storage means for storing identification information for identifying a user of an information processing device connectable to the expansion device in a data processing device capable of being unitedly connected to an expansion device (docking station main body 15) having a plurality of resources. (EEPROM 17) and a judging unit (in the controller 16) for judging whether the collation information transferred from the connected information processing device coincides with the identification information stored in the storage unit when the information processing device is connected. CPU executes a control program stored in a memory medium such as a ROM (not shown) to perform the determination process. ) And, CP in the control means to continue or discontinue data communications with the determination means determines the result information processing apparatus being connected on the basis of (the controller 16
U controls and executes a control program stored in a memory medium such as a ROM (not shown)) in the expansion device.

The storage means is constituted by a non-volatile storage medium (EEPROM 17).

Further, the resources are a secondary storage device, a CD,
-It includes the ROM drive 20 and the external communication device 21.

The control means disables access to any of the resources (secondary storage device (hard disk 19)) when the determination means determines that they do not match.

Hereinafter, the first data processing operation in the data processing device according to the present invention will be described with reference to the flowchart shown in FIG.

FIG. 4 is a flowchart showing an example of a first data processing procedure in the data processing apparatus according to the present invention. It is assumed that the program according to this flowchart is stored in a storage device built in the controller 8. (1) to (11) show each step.

First, when the program for the docking operation is started in step (1), the controller 8 makes a connection for communicating with the controller 16 in step (2). Next, in step (3), the password registration management information storage section 36 of the EEPROM 17 provided in the docking station is read via the controller 16, and in step (4), the password is registered from the password registration management information storage section 36. It is determined whether or not the password registration management information storage unit 36 has a value of “0000”. If the value of the password registration management information storage unit 36 is “FFF”, the process proceeds to step (8).
If F ", the process proceeds to step (5) to register the password as unregistered.

In step (5), the controller 8 instructs the controller 16 to register the password information in the EEPROM 17, and in step (6) the password information stored in the
The EPROM 17 is written via the controller 16. Then, in step (7), "FFFF" is written into the password registration management information storage section 36 of the EEPROM 17, the docking station main body 15 assumes that the password information has been registered, and returns to step (3).

On the other hand, if it is determined in step (4) that the password has been registered, the password information registered in advance in the controller 8 is output to the controller 16 in step (8). Then, in step (9), the controller 16 reads the password information from the password registration management information storage unit 36 of the EEPROM 17, compares it with the password information of the controller 8, and if it is determined that they match, proceeds to step (11). Proceed to step (10) if it is determined that they do not match.

In step (11), it is assumed that the docking station main body 15 has been registered by the connected computer 13, and the other docking operation is continuously performed.

On the other hand, in step (10), the docking station main unit 15 determines that the password has been registered by another computer, stops the docking operation, and does not perform any other processing in the docking operation. And

FIG. 5 is a flowchart showing an example of the data processing procedure on the docking station main body 15 side shown in FIG. 1, and corresponds to the data processing procedure on the controller 16 side. In addition, (1) to (12) indicate each step.

First, the docking operation process is started in step (1), and the controller 16 makes a connection for communicating with the controller 8 in step (2). Then, in step (3), the docking station body 15
A command to read the password registration management information storage section 36 of the EEPROM 17 provided in the
And output the command, and when the command is output, proceed to step (4).

In step (4), the password registration management information storage section 36 of the EEPROM 17 reads the information, and outputs the information to the controller 8 in step (5).
Next, in step (6), input of a command as to whether or not to perform the password registration process from the controller 8 is awaited. If the registration process is to be performed, the process proceeds to step (7). Proceed to).

In step (7), the password information output from the controller 8 is written in the EEPROM 17 and the password registration management information is rewritten to "0000". This processing is performed in steps (5) and (5) shown in FIG. 6) and (7). When the registration process is completed, the process returns to step (3).

Next, in step (8), the process waits until the password information is output from the controller 8, and when the password information is output, the process proceeds to step (9) to execute the EEP.
The password information is read from the password information storage unit 37 of the ROM 17, and the password information from the controller 8 is compared with the password information of the EEPROM 17 in step (10). If they match, the process proceeds to step (13). If so, proceed to step (11).

In step (11), it is determined that the passwords do not match, the docking operation and other processing are stopped, and the flow advances to step (12) to proceed to step (1).
In 2), the program for the docking operation is completed.

On the other hand, in step (13), the power supply circuit section 18 of the docking station is instructed to supply power to the docking station main body 15, and in step (14), the present program is terminated. Other processing is continued.

As described above, the programs according to the flowcharts shown in FIGS.
By storing and operating in the storage device in the storage device, only unintended, that is, only data processing access from the docking station main body 15 registered with a password is permitted, and access from another docking station not registered with another password is permitted. Data processing access can be restricted.

[Second Embodiment] In the first embodiment, when the password information set in the controller 8 is different from the password information in the EEPROM 17 provided in the docking station, the docking operation is stopped and the docking station main body is stopped. Has been described in order to protect the data in an auxiliary storage device such as a hard disk, but when the password information is different, the operation of only the auxiliary storage device in the docking station is stopped and the CD-ROM or external communication Devices such as appliances may be configured to be usable. Hereinafter, the embodiment will be described.

FIG. 6 is a block diagram for explaining a main configuration of a data processing apparatus according to a second embodiment of the present invention. In FIG. 6, the same components as those in FIG. 1 are denoted by the same reference numerals.

In the figure, reference numeral 50 denotes a switch unit, which electrically disconnects the hard disk 19 from the system unit. Reference numeral 51 denotes an HDD_ENV * signal, which functions as a signal output from the controller 16 for controlling the switch unit 50. When the HDD_ENV * signal 51 is Low Le
In the case of “vel”, the hard disk 19 is made usable, and the HDD_ENV * signal 51 is set to High Level.
In the case of "el", the hard disk 19 is disabled. Other configurations are the same as those of the above-described first embodiment.

FIG. 7 is a block diagram showing a detailed configuration of the switch unit 50 shown in FIG. 6, and the same components as those in FIG. 6 are denoted by the same reference numerals.

In the figure, reference numeral 61 denotes a switch unit composed of, for example, an FET, which controls turning on / off of power supplied to the hard disk 19. When the control signal HDD_ENV * is at a high level, the switch 61 sets the switching unit 61 to an off state, does not supply power to the hard disk 19, and outputs a low level.
If so, the switch unit 61 has a function of setting it to an ON state and supplying power to the hard disk 19.

Reference numeral 62 denotes a buffer circuit composed of, for example, an HC 244 of a logic IC, which blocks an address and control signal from the system bus 11 to the hard disk 19. The HDD_ENV * signal is applied to the output enable (OE *) control port of the buffer circuit 62.

63 and 67 are, for example, HCs of a logic IC.
A buffer having a direction function constituted by H.245 and the like interrupts a data bus 65 for transferring data between the system bus 11 and the hard disk 19. In this embodiment, the bit width of the data bus 65 is 16
It is assumed that two buffers are used because they are bits. Note that a signal for switching the direction (input / output direction) of the buffer 63 is performed by a Read Enable * signal 66 in the control signal of the hard disk 19, and the output enable (OE) of the buffer 63 is provided.
The control port of *) is configured to apply the HDD_ENV * signal.

Reference numeral 64 denotes a control signal bus for the hard disk 19 of the system bus 11, and reference numeral 65 denotes a data bus for transferring data in the system bus 11.

In the data processor configured as described above, the controller 16 having a function (by the switch unit 50) for stopping the operation of the auxiliary storage device (hard disk 19) such as a hard disk provided in the docking station. In the above, when the computer is connected to the docking station, certain data is transmitted from the controller 8 to the controller 16, and the controller 16 checks the data with the data stored in the storage device and determines that the data is the same. If there is, the docking operation is continued, but if the data is different, a process for stopping the operation of the auxiliary storage device is performed, and then the docking operation is continued. As a result, except for the computer user who has registered the password, the data on the hard disk 19 provided in the docking station cannot be read or erased, but the CD-ROM drive 20 provided in the docking station cannot be read or erased. An external communication device 21 such as a modem can be used, and data processing that effectively utilizes resources provided in the docking station can be performed while ensuring security.

Hereinafter, the second data processing operation in the data processing apparatus according to the present invention will be described with reference to the flowchart shown in FIG.

FIG. 8 is a flowchart showing an example of the second data processing procedure in the data processing device according to the present invention. (21) and (22) indicate each step, and the same steps as those in FIG. 4 are denoted by the same step numbers. It is assumed that the program according to this flowchart is stored in a storage device built in the controller 8. Steps (1) to (7) are the same as those in the first embodiment, and a description thereof will not be repeated.

If it is determined in step (4) that the password registration management information in the EEPROM 17 has been registered (FFFF), the process proceeds to step (21), where the password information preset in the controller 8 is transmitted to the controller 16. Output, and the process proceeds to step (22) to continue the other docking-related processing.

FIG. 9 is a flowchart showing an example of the data processing procedure on the docking station main body 15 side shown in FIG. 6, and corresponds to the data processing procedure on the controller 16 side. Note that (31) to (34) indicate each step, and the same steps as those in FIG. 5 are denoted by the same step numbers. It is assumed that the program according to this flowchart is stored in a storage device built in the controller 16. Steps (1) to (10) are the same as those in the first embodiment, and a description thereof will not be repeated.

In step (10), the password information output from the controller 8 is compared with the password information read from the EEPROM 17. If the information matches, the process proceeds to step (31). If the information does not match, the process proceeds to step (31). , And proceed to step (34).

In step (34), the control signal HDD_ENV * of the shut-off circuit of the hard disk 19 equipped with the docking station is set to the "High" level to electrically shut off the hard disk 719 from the system bus. 15 from the computer connected to the
Proceed to step (32).

On the other hand, in step (31), the HDD_ENV * signal is set to the "Low" level state by assuming that the password information matches, and the hard disk 1
9 and enable reading and writing from the system bus.

Next, in step (32), the controller 16 instructs the power supply circuit section 18 to supply power to the docking station body 15, and in step (33), performs other processing in the docking operation. Shall be.

As described above, the programs according to the flowcharts shown in FIGS.
When the password information is different, the operation of only the auxiliary storage device of the docking station can be stopped and the device such as a CD-ROM or an external communication device can be used when the password information is different. .

[Third Embodiment] FIG. 10 shows a third embodiment of the present invention.
FIG. 3 is a block diagram illustrating a configuration of a data processing device according to an embodiment, and corresponds to a case where a docking station DST and a data processing device PC are connected via connectors 107 and 108 to configure a data processing device.

At the docking station DST,
Reference numeral 100 denotes a CPU, and the secondary storage device 103 or the memory 1
02 is executed to control the data processing in a comprehensive manner. A network controller 104 is configured to be able to perform data communication with a data processing device (not shown) connected to the network 110 via the network connector 105. Reference numeral 106 denotes a non-volatile memory, which has an area for storing password information of the information processing apparatus PC to be connected.

In the information processing apparatus PC, 109 is a CP
In U, a control program stored in a ROM (not shown) or a memory resource (not shown) connected to the bus is executed to execute predetermined data processing.

The connector 107 is connected to the connector 108 of the information processing device PC, detects the attachment or detachment of the information processing device PC through a change in voltage or current, and performs data communication between the docking station DST and the information processing device PC. The processing is configured to be possible. The docking station DST is configured to make a certain request to the information processing apparatus PC using means such as a hardware interrupt.

Hereinafter, the characteristic configuration of this embodiment will be described with reference to FIG.

In the data processing device configured as described above, that is, a plurality of information processing devices (information processing device PC and equivalent computer main body not shown) for performing predetermined data processing and the functions of each information processing device are extended. Device (docking station D)
ST) is a data processing device that can be unitedly connected to the extension device, and identification information for identifying an information processing device and a user that can be connected to the expansion device and usable resource names are stored in, for example, a table shown in FIG. A storage unit (non-volatile memory 106) that stores the information as a match between the verification information transferred from the connected information processing apparatus and the identification information stored in the storage unit when the information processing apparatus is connected. Determination means (RO not shown by CPU 100)
M, a control program stored in a memory medium such as the memory 102 or the secondary storage device 103 is executed and the determination process is performed.)
Control means for setting access to resources other than the resource names stored in the storage means to be disabled if the determination means determines that the control programs match each other (the control program stored in a memory medium such as a ROM (not shown) by the CPU 100). Is performed in the expansion device.

Further, when the CPU 100 determines that there is no match, the CPU 100 effectively sets access to a resource having a predetermined resource name stored in the nonvolatile memory 106.

Further, when the CPU 100 determines that there is a mismatch, the CPU 100 invalidates the access to each resource by the connected information processing apparatus.

Hereinafter, the third data processing operation in the data processing apparatus according to the present invention will be described with reference to the flowcharts shown in FIGS.

FIGS. 11 and 12 are flowcharts showing an example of the third data processing procedure in the data processing device according to the present invention. Note that (1) to (14) indicate each step, and each step corresponds to a processing procedure for setting a password of the docking station and a procedure of authentication for a built-in peripheral device.

First, the CPU 100 sets the connection connector 107
When the connection of the information processing device PC is detected through the
100 determines whether or not a password called a master password is registered in the nonvolatile memory 106 (1). If it is determined that the master password is not registered in the nonvolatile memory 106, the CPU 1 sets the connection connector 7 Request the information processing apparatus PC to register the master password via the PC (2).

Then, it is determined whether or not the password is input by the information processing apparatus PC and whether the password has been transmitted through the connection connector 108 (3). If it is determined that the password has been transmitted, the password is transmitted. The registered password is registered in the nonvolatile memory 106 as a master password (4).

On the other hand, if it is determined in step (3) that an empty master password has been returned or that no password has been sent within a certain period of time, the docking station DST has no confidentiality and authentication is not required. Is determined, all the peripheral devices (including the secondary storage device 103 and the like) built in the docking station DST are enabled, and data relating to the enabled peripheral device is sent to the information processing device PC (5). ).

On the other hand, if it is detected in step (1) that the master password has already been registered in the non-volatile memory 106, or if the master password has been registered in step (4), the process shown in FIG. Next, the information processing device PC is requested to input a password to the built-in peripheral device such as the secondary storage device 103 (6).

Next, it is determined whether or not the master password has been sent (7). If it is determined that the master password has been sent, it is determined that the user of the information processing apparatus PC is the manager of the docking station. The password setting authority for the peripheral device is given, the password setting is requested to the information processing apparatus PC for all the built-in peripheral devices (8), and the transmitted password is stored in the nonvolatile memory 106 in the peripheral device. (9). Next, it is determined whether passwords have been set for all the built-in peripheral devices (1).
0), if NO, return to step (8); if YES, return to step (6).

On the other hand, if it is determined in step (7) that another password has been received instead of the master password, another peripheral device X (for example, the secondary storage device 103) recorded in the nonvolatile memory 106 (11), and if it is determined that the passwords match, the peripheral device X (secondary storage device 103) is enabled (12). ), The secondary storage device 10 for the information processing device PC.
Send information to access 3 and step (14)
Proceed to the following.

On the other hand, if it is determined in step (11) that the passwords do not match, or if it is determined that the password has not been sent within a predetermined time, the peripheral device X (for example, the secondary storage device) 103) is invalidated (13).

Next, it is determined whether or not the password input for all the built-in peripheral devices has been completed (14).
If S, the process is terminated. If NO, that is, if the authentication for the secondary storage device 103 is completed, authentication for another peripheral device X such as the network controller 104 shown in FIG. Return to step (6). This process is performed until the authentication of all the built-in peripheral devices is completed.

As described above, the administrator connects the information processing apparatus PC to the docking station DST in advance, and sets a master password and a password for each built-in peripheral device. Only the peripheral device that knows the password can be accessed.

Further, according to this password setting method, even if the confidentiality cannot be completely maintained due to the leakage of the password of some peripheral devices, the administrator can freely change the password. Confidentiality can be easily restored.

Fourth Embodiment In the above embodiment, a case has been described where the information processing apparatus PC is connected to the docking station DST one-to-one. Device P
The present invention can also be applied when C is connected. Hereinafter, the embodiment will be described.

FIG. 13 is a diagram for explaining a main configuration of a data processing apparatus according to the fourth embodiment of the present invention, which corresponds to the example of the password table secured on the nonvolatile memory 106 shown in FIG. .

In the figure, reference numeral 200 denotes identification information IDs of information processing apparatuses, which are registered corresponding to the respective information processing apparatus IDs. Reference numeral 201 denotes a usable peripheral device, which can arbitrarily set a usable peripheral device corresponding to the identification information ID of each information processing device. A password 203 is registered in correspondence with the identification information ID of each information processing apparatus. In the present embodiment, a uniquely identifiable ID is pre-assigned to an information processing device connectable to the docking station.

Hereinafter, the fourth data processing operation of the data processing apparatus according to the present invention will be described with reference to the flowchart shown in FIG.

FIG. 14 is a flowchart showing an example of the fourth data processing procedure of the data processing device according to the present invention. (6) to (20) indicate each step. Steps (1) to (5) not shown are the same as those in FIG.

In FIG. 11, if the master password is registered or if the master password has already been registered,
As shown in (6), the identification information ID of the information processing apparatus A connected to the docking station is acquired from the information processing apparatus A through the connection connector 107 shown in FIG. 10 (6). After acquiring the ID of the information processing apparatus A,
The information processing apparatus A is requested to input a password (7).

Next, it is determined whether or not the transmitted password matches the master password stored in the nonvolatile memory 106 in advance (8). If it is determined that the password matches the master password, the password is connected to the docking station DST. The process proceeds to the process of setting a password for each of the information processing devices scheduled to be performed, and first requests the ID of the information processing device X to be set for the password to the information processing device A (9). Next, it is determined whether or not it is the default setting (a special ID defined in advance for the default setting) (10), and if YES, that is, if the ID of the information processing apparatus X is obtained, X requests input of a list of available peripherals inside the docking station (11).

When a password to be set in the information processing apparatus X is requested and received (12), the data of the ID of the information processing apparatus X, the list of available peripheral devices, and the password are formed into one set as shown in FIG. A password table PSASS-TB as shown in FIG.
06 and register it on (13). Next, it is determined whether or not to end the password setting (15). If YES, the process returns to step (7). If NO, step (9).
Return to As long as you need to set this password,
This can be repeated for another information processing device Y.

On the other hand, in steps (9) and (10), when requesting the ID of the information processing apparatus X for which a password is to be set, the information transmitted is a special one which is defined in advance for default setting. If it is determined that the ID is an ID, the information processing apparatus A is requested to input a list of peripheral devices that can be used by default (14), and the process proceeds to step (13) and subsequent steps. Then, a mark for default and a list of available peripheral devices are grouped into a set as shown in FIG.
On the password table PASS-TB shown in FIG.

On the other hand, if it is determined in step (8) that the transmitted password is not the master password, the nonvolatile memory 1 is identified by using the ID of the information processing apparatus A.
The password of the information processing apparatus A is checked by searching the password table PASS-TB on 06. Here, it is determined whether the password is registered in the password table PASS-TB, and furthermore, whether both match or not (1).
6) If it is determined that they match, a list of available peripheral devices of the information processing device A is obtained from the password table PASS-TB, all the peripheral devices on the list are enabled (17), and the process is terminated. I do.

On the other hand, if it is determined in step (16) that the password of the information processing apparatus A is not registered in the password table PASS-TB or that the passwords do not match, the password table PASS-TB
-Search for and determine whether a default is registered on the TB (18), and when it is determined that the default is registered, obtain a list of peripheral devices available by default and Enable all (1
9), end the processing.

On the other hand, if it is determined in step (18) that the peripheral device has not been registered, all peripheral devices are invalidated (20), and the process is terminated.

In this way, by creating a password and a list of available peripheral devices for each information processing device, a third party trying to connect to the docking station can use the password for the information processing device owned by the third party. Unable to access docking station peripherals unless is set. Therefore, even if a password other than the master password is leaked, it is necessary to use the password in combination with an information processing apparatus having the set ID, so that the possibility of confidential access is greatly reduced.

Further, by providing default settings, access to peripheral devices unrelated to confidentiality is permitted, and convenience for docking station connection can be improved.

Hereinafter, the configuration of a data processing program readable by the data processing apparatus according to the present invention will be described with reference to a memory map shown in FIG.

FIG. 15 is a diagram for explaining a memory map of a storage medium for storing various data processing programs which can be read by the data processing device according to the present invention.

Although not shown, information for managing a group of programs stored in the storage medium, for example, version information, a creator and the like are also stored, and information dependent on the OS or the like on the program reading side, for example, a program is stored. An icon or the like for identification display may also be stored.

Further, data dependent on various programs is also managed in the directory. In addition, a program for installing various programs on a computer or a program for decompressing a program to be installed when the program to be installed is compressed may be stored.

The functions shown in FIG. 4, FIG. 5, FIG. 8, FIG. 9, FIG. 11, FIG. 12, and FIG. 14 in this embodiment may be executed by a host computer by a program installed from the outside. And in that case, C
The present invention is applicable even when a group of information including a program is supplied to an output device from a storage medium such as a D-ROM, a flash memory, or an FD, or from an external storage medium via a network.

As described above, the storage medium storing the program code of the software for realizing the functions of the above-described embodiments is supplied to the system or the apparatus, and the computer (or CPU or MP) of the system or the apparatus is supplied.
It goes without saying that the object of the present invention is also achieved when U) reads and executes the program code stored in the storage medium.

In this case, the program code itself read from the storage medium realizes the novel function of the present invention, and the storage medium storing the program code constitutes the present invention.

As a storage medium for supplying the program code, for example, a floppy disk, hard disk, optical disk, magneto-optical disk, CD-ROM, C
DR, magnetic tape, nonvolatile memory card, RO
M, EEPROM and the like can be used.

The functions of the above-described embodiments are implemented when the computer executes the readout program codes, and the OS (Operating System) running on the computer is executed based on the instructions of the program codes. ) And the like perform part or all of the actual processing, and the processing realizes the functions of the above-described embodiments.

Further, after the program code read from the storage medium is written into a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, based on the instruction of the program code, The CPU provided in the function expansion board or function expansion unit performs part or all of the actual processing,
It goes without saying that a case where the function of the above-described embodiment is realized by the processing is also included.

According to each of the above embodiments, when a computer and a docking station are connected, data serving as a password is transmitted from the computer to the docking station. If the data matches, docking is performed as it is. Is characterized by suspending docking, except for the user of the computer whose password has been registered, cannot use the hard disk or other devices provided in the docking station, and cannot use the hard disk or other auxiliary storage device. Data can be prevented from being read or erased.

When the computer and the docking station are connected, the computer transmits data as a password to the docking station. If the data matches, the docking is performed as it is. After performing control to stop the operation of the auxiliary storage device such as a hard disk, the docking operation is performed, so that a user other than the computer user who has registered the password is equipped with the docking station. The data in the auxiliary storage device cannot be read or erased, but devices such as a CD-ROM, a network, and a modem provided in the docking station can be used to ensure security and have resources. Use is possible.

[0119]

As described above, according to the present invention,
In a data processing apparatus capable of unitingly connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus, an information processing apparatus connectable to the expansion apparatus Storage means for storing identification information for identifying a user of the information processing apparatus, and when connected to each information processing apparatus, verification information transferred from the connected information processing apparatus and the identification information stored in the storage means Registering in the extension device by providing the extension device with a determination unit for determining a match with the extension device and a control unit for continuing or stopping data communication with the connected information processing device based on the determination result of the determination unit Even if the information processing device is connected to the expansion device by an unauthorized user other than the user, the data communication with the information processing device is shifted to the prohibition state, and the information processing device may be equipped with the expansion device. As Re or disable access to all resources, unauthorized access to confidentiality necessary resources can be reliably prevented.

Also, in a data processing apparatus capable of uniting and connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the functions of each information processing apparatus, Storage means for storing identification information for identifying a possible information processing device and a user and a usable resource name, and collation information transferred from the connected information processing device when connected to each information processing device Determining means for determining a match with the identification information stored in the storage means; and setting the access to resources other than the resource name stored in the storage means to be disabled when the determination means determines that they match. And a control unit that controls access to each resource by each user while restricting the resources that can be accessed by each user. It is possible to really prevent.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of a data processing device according to a first embodiment of the present invention.

FIG. 2 is a timing chart showing an example of data communication processing between the controllers shown in FIG. 1;

FIG. 3 is a diagram illustrating a map of password data stored in the EEPROM shown in FIG.

FIG. 4 is a flowchart showing an example of a first data processing procedure in the data processing device according to the present invention.

FIG. 5 is a flowchart illustrating an example of a data processing procedure on the docking station side illustrated in FIG. 1;

FIG. 6 is a block diagram illustrating a main configuration of a data processing apparatus according to a second embodiment of the present invention.

FIG. 7 is a block diagram illustrating a detailed configuration of a switch unit illustrated in FIG. 6;

FIG. 8 is a flowchart illustrating an example of a second data processing procedure in the data processing device according to the present invention.

FIG. 9 is a flowchart illustrating an example of a data processing procedure on the docking station side illustrated in FIG. 6;

FIG. 10 is a block diagram illustrating a configuration of a data processing device according to a third embodiment of the present invention.

FIG. 11 is a flowchart illustrating an example of a third data processing procedure in the data processing device according to the present invention.

FIG. 12 is a flowchart illustrating an example of a third data processing procedure in the data processing device according to the present invention.

FIG. 13 is a diagram illustrating a main configuration of a data processing apparatus according to a fourth embodiment of the present invention.

FIG. 14 is a flowchart illustrating an example of a fourth data processing procedure of the data processing device according to the present invention.

FIG. 15 is a diagram illustrating a memory map of a storage medium that stores various data processing programs that can be read by the data processing device according to the present invention.

[Explanation of symbols]

 Reference Signs List 1 CPU 2 main storage device 3 auxiliary storage device 4 display device 6 power supply circuit unit 7 battery pack 8 controller 15 docking station 16 controller 17 EEPROM 18 power supply circuit unit 19 hard disk 20 CD-ROM drive 21 external communication device

Claims (12)

[Claims] 1. A data processing apparatus capable of unitingly connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus, wherein the expansion apparatus Storage means for storing identification information for identifying a user of an information processing apparatus connectable to the information processing apparatus, collation information transferred from the connected information processing apparatus at the time of connection with each information processing apparatus, and the storage means Determining means for determining a match with the identification information stored in the extension device; and control means for continuing or stopping data communication with the connected information processing apparatus based on the determination result of the determining means, provided in the extension device. A data processing device, characterized in that: 2. The data processing apparatus according to claim 1, wherein said storage means is constituted by a nonvolatile storage medium. 3. The resource is a secondary storage device, a CD-RO
2. The data processing device according to claim 1, further comprising an M drive device and a communication control device. 4. The data processing apparatus according to claim 1, wherein the control unit disables access to any one of the resources when the determination unit determines that they do not match. 5. The data processing apparatus according to claim 4, wherein said one of the resources is a secondary storage device. 6. A data processing apparatus capable of unitingly connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus, wherein the expansion apparatus Storage means for storing identification information for identifying an information processing apparatus and a user connectable to a user and a usable resource name, and transferred from the connected information processing apparatus when connected to each information processing apparatus Judging means for judging that matching information matches the identification information stored in the storage means; and when the judging means judges that they match, access to resources other than the resource names stored in the storage means is disabled. A data processing device, wherein a control means for setting the extension is provided in the extension device. 7. The control unit according to claim 1, wherein when the determination unit determines that there is a mismatch, access to a resource having a predetermined resource name stored in the storage unit is set to be valid. 7. The data processing device according to 6. 8. The data according to claim 6, wherein the control unit invalidates the access to each resource by the connected information processing device when the determination unit determines that the information does not match. Processing equipment. 9. A data processing method for a data processing apparatus capable of unitingly connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the functions of each information processing apparatus. A registration step of registering, in a memory, identification information for identifying a user of an information processing apparatus connectable to the expansion apparatus; and transferring the information from the connected information processing apparatus at the time of connection with each information processing apparatus. A determining step of determining whether the matching information matches the identification information registered in the memory; and an establishing step of continuing or stopping data communication with the connected information processing device based on the determination result. A data processing method for a data processing device, comprising: 10. A storage storing a program readable by a computer capable of uniting and connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus. A registration step of registering, in a memory, identification information for identifying a user of an information processing apparatus connectable to the expansion apparatus; and, when connecting to each of the information processing apparatuses, A determination step of determining a match between the verification information transferred from the storage device and the identification information registered in the memory; and an establishment step of continuing or stopping data communication with the connected information processing apparatus based on the determination result. A storage medium storing a computer-readable program, including: 11. A data processing method for a data processing device capable of uniting and connecting a plurality of information processing devices for performing predetermined data processing and an expansion device having a plurality of resources for expanding the function of each information processing device. A registration step of registering, in a memory, identification information for identifying an information processing apparatus and a user connectable to the expansion apparatus and a usable resource name; and information on the information connected when connecting to each information processing apparatus. A judging step of judging whether the collation information transferred from the processing device matches the identification information registered in the memory, and, when judging that the judging step is coincident, with respect to resources other than the resource names registered in the memory Establishing an access to be disabled. 12. A storage storing a program readable by a computer capable of uniting and connecting a plurality of information processing apparatuses for performing predetermined data processing and an expansion apparatus having a plurality of resources for expanding the function of each information processing apparatus. A registration step of registering, in a memory, identification information for identifying an information processing apparatus and a user connectable to the expansion apparatus and a usable resource name, the medium being a medium; A determining step of determining whether the collation information transferred from the connected information processing device matches the identification information registered in the memory, and a resource name registered in the memory when the determining step determines that the two match. A storage medium storing a computer-readable program, the method comprising: establishing an access to resources other than the computer. body.