JP4458885B2 - Recording medium creation method, recording medium creation apparatus, and recording medium creation system - Google Patents

Description

The present invention relates to a recording medium production method, the recording medium production apparatus, relates to a recording medium production system, in particular a recording medium production method of a recording medium used as starting recording medium in the image forming apparatus, the recording medium production apparatus, create a recording medium about the system.

  An information processing apparatus such as a personal computer performs various information processing by executing one or more programs respectively corresponding to information processing. An image forming apparatus (hereinafter referred to as a multifunction peripheral) as an application example of an information processing apparatus is provided with a display unit, a printing unit, an imaging unit, and the like in one casing, and corresponds to a printer, a copy, a facsimile, and a scanner 4 By providing various types of programs and switching the programs, they are operated as a printer, a copy, a facsimile, and a scanner. Patent Document 1 describes an example of a fusion machine as described above.

  In the information processing apparatus and the multi-function apparatus, a basic input / output system (BIOS) and a boot loader are started after power is turned on. The boot loader starts up the kernel by expanding the kernel (Kernel) and the root file system on a RAM (Random Access Memory). The kernel then mounts the root file system. Mounting means starting up a file system or peripheral device in an accessible state.

  After the kernel is activated, an activation program that activates an application (hereinafter referred to as an application) is activated. The activation program is a process that is first activated in the information processing apparatus or the multi-function peripheral. The file system is mounted according to a predetermined setting file, and the operation of the information processing apparatus or the multi-function apparatus recorded in the hard disk drive (HDD) or the like is performed. Necessary programs are started according to a predetermined setting file.

In recent years, there has been an increasing demand for starting programs for information processing apparatuses and multi-function peripherals from a removable recording medium such as an SD (Secure Digital) card.
JP 2002-84383 A

  However, since a removable recording medium such as an SD card can be used with a personal computer or the like, fraud to the program such as analysis, falsification, and duplication of the program recorded on the recording medium is easy. Therefore, when starting a program for an information processing device or a multifunction peripheral from a removable recording medium, or when updating a program for an information processing device or a multifunction peripheral from a removable recording medium, the safety of the program recorded on the recording medium There was a problem that had to be secured.

The present invention has been made in view of the above, while ensuring the safety of the program recorded in a recording medium, the recording medium production method capable to boot program from the recording medium, the recording medium production apparatus , an object of the present invention is to provide a recording medium production system.

To solve the above problems, the present invention is a recording medium production method of Ru Thus runs in the recording medium producing apparatus, the type of the recording medium production apparatus, an image forming apparatus having a printing unit and the imaging unit Receiving model identification information and recording medium identification information of a recording medium used as a start recording medium in the image forming apparatus from a client that records information on the recording medium; and the recording medium identification information and the model model Creating a first electronic signature using a valid program list corresponding to the identification information; creating license information including the valid program list and the first electronic signature; and the model identification information And creating a second electronic signature using a program corresponding to the model model identification information, the model model identification information, And creating a boot program serial program corresponding to the model of the MFD identification information and a second digital signature, and wherein performing the step of transmitting said license information and the boot program to the client To do.

Further, the recording medium creating apparatus of the present invention includes model model identification information of an image forming apparatus provided with a printing unit and an imaging unit, and recording medium identification information of a recording medium used as a start recording medium in the image forming apparatus, Means for receiving information from a client for recording information on the recording medium; means for creating a first electronic signature using the recording medium identification information and a list of valid programs corresponding to the model identification information; and the valid program Means for creating license information including a list and the first electronic signature; means for creating a second electronic signature using the model model identification information and a program corresponding to the model model identification information; Means for creating an activation program including model model identification information, a program corresponding to the model model identification information, and the second electronic signature; And having a means for transmitting said activation program and sense information to the client.

The present invention is also a recording medium creation system in which a client and a recording medium creation device are connected via a network, and the recording medium creation device includes model model identification information of an image forming apparatus provided with a printing unit and an imaging unit. And means for receiving the recording medium identification information of a recording medium used as a start recording medium in the image forming apparatus from the client for recording information on the recording medium, the recording medium identification information, and the model model identification information Means for creating a first electronic signature using a valid program list corresponding to the above, means for creating license information including the valid program list and the first electronic signature, the model identification information, and the Means for creating a second electronic signature using a program corresponding to model model identification information, the model model identification information and the machine Means for creating a boot program program corresponding to the model identification information and a second electronic signature, and having a means for transmitting said license information and the boot program to the client.

According to the present invention, Ru can confirm the validity on a recording medium to be used as a start recording medium in the image forming apparatus records easy license information and boot program.

According to the present invention, the validity of the program recorded on the recording medium used as the start recording medium in the image forming apparatus can be easily confirmed, so that the safety of the program recorded on the recording medium is ensured. Meanwhile, the program can be started and updated from the recording medium.

  Next, the best mode for carrying out the present invention will be described based on the following embodiments with reference to the drawings. FIG. 1 is a configuration diagram of an example of a recording medium creation system for creating a startup SD card. In the recording medium creating system 1, a client 10 and a recording medium creating apparatus 30 are connected via a network 40 such as the Internet or a LAN. The client 10 has an SD card slot into which the SD card 20 can be inserted and removed. As will be described later, the client 10 receives the license information and the activation program from the recording medium creation device 30 via the network 40, and records the license information and the activation program on the SD card 20 inserted in the SD card slot. .

  The recording medium creation device 30 includes a communication unit 31, a license information creation unit 32, an electronic signature creation unit 33, an activation program creation unit 34, a valid program list 35, a secret key 36, and a program 37. The communication unit 31 is for the recording medium creation device 30 to perform data communication with the client 10 via the network 40. The license information creation unit 32 creates license information with the first electronic signature created from the SD serial ID of the SD card 20 and the valid program list 35 and the valid program list 35 as described later.

  The activation program creation unit 34, as will be described later, the model model number of the information processing apparatus that activates the program from the SD card 20, the second electronic signature created from the program 37 that activates the information processing apparatus, the model model number, Then, a startup program is created with the program 37. As will be described later, the electronic signature creation unit 33 creates a first electronic signature from the SD serial ID of the SD card 20 and the valid program list 35 using the secret key 36, and information processing for starting the program from the SD card 20. A second electronic signature is created from the model number of the apparatus and the program 37 to be activated by the information processing apparatus.

  Note that the recording medium creation system 1 of FIG. 1 may be configured as shown in FIG. FIG. 2 is a configuration diagram of another example of a recording medium creation system for creating a startup SD card. The recording medium creation system 2 is different from the recording medium creation system 1 in that the recording medium creation device 30 in FIG. 1 is divided into a first recording medium creation device 50 and a second recording medium creation device 60. For example, the first recording medium creation device 50 includes a communication unit 51, a license information creation unit 52, a start program creation unit 53, a valid program list 54, and a program 55. The second recording medium creation device 60 includes an electronic signature creation unit 61 and a secret key 62.

  The communication unit 51, license information creation unit 52, activation program creation unit 53, valid program list 54, program 55, electronic signature creation unit 61, and secret key 62 in FIG. , The activation program creation unit 34, the valid program list 35, the program 37, the electronic signature creation unit 33, and the secret key 36 are the same, and the description thereof is omitted.

  Next, a processing procedure of the recording medium creation system 1 in FIG. 1 will be described with reference to a sequence diagram. FIG. 3 is a sequence diagram showing the processing procedure of the recording medium creation system. In step S <b> 10, for example, an input screen 100 as shown in FIG. 4 is displayed on the display device of the client 10. The input screen 100 has an input field 102 for inputting a model number and a button 103 for instructing start of download.

  The user operates the input device of the client 10 to input the model number in the input field 102 and clicks the button 103. The client 10 automatically reads the SD serial ID from the SD card 20 inserted in the SD card slot. When the button 103 is clicked, the client 10 proceeds to step S20, obtains the read SD serial ID and the model number entered in the input field 102, and uses the SD serial ID and model model number as the recording medium creation device 30. Send to. When the license information creation unit 32 of the recording medium creation device 30 receives the SD serial ID and the model number from the client 10 via the communication unit 31, the license information creation unit 32 proceeds to step S30 and uses the SD serial ID and the model number to obtain license information. Create

  FIG. 5 is a flowchart of an example of the license information creation process. In step S31, the license information creation unit 32 acquires the valid program list 35 corresponding to the model number. The valid program list 35 is a list of programs that can be used by the information processing apparatus corresponding to the model number.

  In step S 32, the license information creation unit 32 creates a message digest (hereinafter referred to as MD) from the SD serial ID and the valid program list 35, and transmits the MD to the electronic signature creation unit 33. The electronic signature creation unit 33 encrypts the received MD with the private key 36 and creates a first electronic signature. The electronic signature creation unit 33 transmits the created first electronic signature to the license information creation unit 32. In step S34, the license information creation unit 32 receives the first electronic signature from the electronic signature creation unit 33, and creates license information from the first electronic signature and the valid program list 35 acquired in step S31.

  Returning to FIG. 3, when the boot program creation unit 34 of the recording medium creation device 30 receives the model number from the client 10 via the communication unit 31, the process proceeds to step S <b> 40 and creates a boot program using the model number. .

  FIG. 6 is a flowchart of an example of a startup program creation process. In step S41, the activation program creation unit 34 acquires a program 37 corresponding to the model number. The program 37 is a binary file that can be used by the information processing apparatus corresponding to the model number.

  In step S 42, the activation program creation unit 34 creates an MD from the model number and the program 37, and transmits the MD to the electronic signature creation unit 33. The electronic signature creation unit 33 encrypts the received MD with the private key 36 and creates a second electronic signature. The electronic signature creation unit 33 transmits the created second electronic signature to the activation program creation unit 34. In step S44, the activation program creation unit 34 receives the second electronic signature from the electronic signature creation unit 33, and creates the activation program from the second electronic signature, the model number, and the program 37 acquired in step S41. To do.

  Returning to FIG. 3, when the license information creation unit 32 and the activation program creation unit 34 of the recording medium creation device 30 create the license information and the activation program, the process proceeds to step S50, and the license information and the activation program are transmitted to the client 10 via the communication unit 31. Send to. In step S60, the client 10 records the license information and the activation program received from the recording medium creation device 30 on the SD card 20 inserted in the SD card slot.

  The activation SD card as shown in FIG. 7 is created by the processing procedure shown in the sequence diagram of FIG. FIG. 7 is a configuration diagram of an example of an activation SD card. As shown in FIG. 7, the license information and the activation program are recorded on the activation SD card. In the activation SD card shown in FIG. 7, one license information corresponds to one activation program. That is, one program is activated from one license information.

  FIG. 8 is an image diagram of an example of license information and a startup program recorded on the startup SD card. The activation SD card in FIG. 8 represents license information and activation program for activating programs A and B.

  The license information for starting the program A includes “A.cnf” and “A.lic” recorded in the directory “init.d”. “A.cnf” represents the setting file 100. “A.lic” represents an electronic signature file used for an authentication check of the setting file “A.cnf”. For example, the setting file 100 represents a process of mounting the program “module / A.mod” in the ROMFS format compressed by gzip to the mount point “/ mnt / printer” and executing the mounted program A.

  The start program for starting the program A includes “A.mod” and “A.mac” recorded in the directory “module”. “A.mod” represents the program A to be started. “A.mac” represents an electronic signature file used for an authentication check of the program A to be started.

  The license information for starting the program B includes “B.cnf” and “B.lic” recorded in the directory “init.d”. “B.cnf” represents the setting file 110. “B.lic” represents an electronic signature file used for an authentication check of the setting file “B.cnf”. For example, the setting file 100 represents a process of mounting the program “module / B.mod” in the ROMFS format compressed by gzip to the mount point “/ mnt / scanner” and executing the mounted program B.

  The startup program for starting the program B includes “B.mod” and “B.mac” recorded in the directory “module”. “B.mod” represents the program B to be started. “B.mac” represents an electronic signature file used for an authentication check of the program B to be started.

  Note that the boot program recorded on the boot SD card in FIG. 8 is an example in which the model number is included in the program, but the model number may be represented by a separate file.

  In the activation SD card shown in FIG. 7, one license information corresponds to one activation program, but one license information may correspond to a plurality of activation programs as shown in FIG. . That is, a plurality of programs are started from one license information. FIG. 9 is a configuration diagram of another example of the activation SD card. The activation SD card shown in FIG. 9 includes one piece of license information and a plurality of activation programs.

  FIG. 10 is an image diagram of another example of license information and a startup program recorded on the startup SD card. In the activation SD card of FIG. 10, one license information activates programs A and B. For example, the setting file “A.cnf” represents the setting file 120. The setting file 120 mounts the gzip compressed ROMFS format program “module / A.mod” to the mount point “/ mnt / printer”, executes the mounted program A, and the gzip compressed ROMFS format program. This represents a process of mounting the program “module / B.mod” to the mount point “/ mnt / scanner” and executing the mounted program B. The other files are the same as the license information and the activation program recorded on the activation SD card in FIG.

  Next, creation of an update SD card for updating the activation SD card will be described. FIG. 11 is a configuration diagram of an example of a recording medium creation system for creating an update SD card. In the recording medium creation system 3, a client 10 and a recording medium creation device 30 are connected via a network 40. The client 10 has an SD card slot into which the SD card 70 can be inserted and removed. As will be described later, the client 10 receives the update program from the recording medium creation device 30 via the network 40 and records the update program on the SD card 70 inserted in the SD card slot.

  The recording medium creation device 30 includes a communication unit 31, an electronic signature creation unit 33, a secret key 36, an update program creation unit 38, and a program 39. The communication unit 31 is for the recording medium creation device 30 to perform data communication with the client 10 via the network 40.

  The update program creation unit 38, as will be described later, the model model number of the information processing apparatus that activates the program from the activation SD card, the electronic signature created from the program 39 that updates the activation SD card, the model model number, An update program is created with the program 39. The electronic signature creation unit 33 creates a digital signature from the model 39 of the information processing apparatus that activates the program from the activation SD card and the program 39 that updates the activation SD card, using the secret key 36 as will be described later. .

  Note that the recording medium creation system 3 in FIG. 11 may have the configuration in FIG. 12, for example. FIG. 12 is a configuration diagram of another example of a recording medium creation system for creating an update SD card. The recording medium creation system 4 is different from the recording medium creation system 3 in that the recording medium creation device 30 in FIG. 11 is divided into a first recording medium creation device 50 and a second recording medium creation device 60.

  For example, the first recording medium creation device 50 includes a communication unit 51, an update program creation unit 56, and a program 57. The second recording medium creation device 60 includes an electronic signature creation unit 61 and a secret key 62.

  The communication unit 51, update program creation unit 56, program 57, electronic signature creation unit 61, and secret key 62 in FIG. 12 are the same as the communication unit 31, update program creation unit 38, program 39, electronic signature creation unit 33, and secret in FIG. Since it is the same as the key 36, description is abbreviate | omitted.

  Next, a processing procedure of the recording medium creation system 3 in FIG. 11 will be described with reference to a sequence diagram. FIG. 13 is a sequence diagram showing the processing procedure of the recording medium creation system.

  In step S <b> 110, an input screen having an input field for inputting a model number and a button for instructing start of download is displayed on the display device of the client 10. The user operates the input device of the client 10 to input the model number in the input field and clicks a button for instructing the start of download. When the button is clicked, the client 10 proceeds to step S120, acquires the model number entered in the input field, and transmits the model number to the recording medium creation device 30.

  When receiving the model number from the client 10 via the communication unit 31, the update program creation unit 38 of the recording medium creation device 30 proceeds to step S130 and creates an update program.

  FIG. 14 is a flowchart of an example of the update program creation process. In step S131, the update program creation unit 38 acquires a program 39 corresponding to the model number. The program 39 is a binary file that can be used by the information processing apparatus corresponding to the model number.

  In step S 132, the update program creation unit 38 creates an MD from the program 39 and transmits the MD to the electronic signature creation unit 33. The electronic signature creation unit 33 encrypts the received MD with the private key 36 and creates an electronic signature. The electronic signature creation unit 33 transmits the created electronic signature to the update program creation unit 38.

  In step S134, the update program creation unit 38 receives the electronic signature from the electronic signature creation unit 33, and creates an update program from the electronic signature, the model number, and the program 39 acquired in step S131.

  Returning to FIG. 13, when the update program creation unit 38 of the recording medium creation device 30 creates the update program, the process proceeds to step S <b> 140 and transmits the update program to the client 10 via the communication unit 31. In step S150, the client 10 records the update program received from the recording medium creation device 30 on the SD card 70 inserted in the SD card slot.

  The update SD card as shown in FIG. 15 is created by the processing procedure shown in the sequence diagram of FIG. FIG. 15 is a configuration diagram of an example of an update SD card. An update program is recorded on the update SD card as shown in FIG.

  The above-described activation SD card and update SD card are inserted into an SD card slot provided in an information processing apparatus or a multifunction peripheral and used for program activation and program update. In the following description, a process when an activation SD card or an update SD card is inserted into the SD card slot of the multi-function peripheral will be described.

  FIG. 16 is a flowchart of an example of processing for starting a program from the startup SD card. In step S210, the multi-function peripheral reads the license information from the activation SD card inserted in the SD card slot, and performs a license information authentication check as will be described later. If it is determined that the license information authentication check is OK (YES in S210), the multi-function device proceeds to step S220. On the other hand, if it is determined that the license information authentication check is NG (NO in S210), the multi-function device proceeds to step S240, performs error processing to be described later, and ends the processing.

  In step S220, the multi-function apparatus reads the activation program from the activation SD card inserted in the SD card slot, and performs activation program authentication check as will be described later. If it is determined that the authentication check of the activation program is OK (YES in S220), the multi-function device proceeds to step S230. On the other hand, if it is determined that the authentication check of the activation program is NG (NO in S220), the multi-function device proceeds to step S240, performs error processing, and ends the processing.

  In step S230, since the license information and the activation program authentication check are OK, the multi-function apparatus activates the program recorded on the activation SD card and ends the process. For example, the license information authentication check is performed as shown in the flowchart of FIG.

  FIG. 17 is a flowchart illustrating an example of a license information authentication check process. In step S211, the multi-function peripheral determines whether the activation SD card has a target file to be used for the license information authentication check. The target file used for the license information authentication check includes a valid program list and a first electronic signature.

  If it is determined that there is a target file to be used for the license information authentication check (YES in S211), the multi-function peripheral obtains the valid program list and the first electronic signature from the activation SD card, and proceeds to step S212. In step S212, the multi-function apparatus acquires an SD serial ID from the activation SD card. Proceeding to step S213, the multi-function peripheral creates an MD1 of the valid program list acquired at step S211 and the SD serial ID acquired at step S212. In step S214, the multi-function peripheral decrypts the first electronic signature acquired in step S211 with the public key and creates MD2. Proceeding to step S215, the multi-function peripheral determines whether MD1 created in step S213 is equal to MD2 created in step S214.

  If it is determined that MD1 created in step S213 is equal to MD2 created in step S214 (YES in S215), the multi-function peripheral proceeds to step S216 and determines that the license information authentication check is OK. On the other hand, if it is determined that the MD1 created in step S213 is not equal to the MD2 created in step S214 (NO in S215), the multi-function device proceeds to step S217 and determines that the license information authentication check is NG.

  This is because if the MD1 created in step S213 is not equal to the MD2 created in step S214, the file recorded on the startup SD card is likely to be illegally copied. If it is determined that the target file to be used for the license information authentication check does not exist (NO in S211), the multifunction peripheral proceeds to step S217, and determines that the license information authentication check is NG.

  Further, the authentication check of the activation program is performed as in the flowchart shown in FIG. FIG. 18 is a flowchart illustrating an example of authentication check processing of the activation program. In step S221, the multi-function peripheral determines whether or not a target file to be used for the activation program authentication check exists in the activation SD card. The target file used for the authentication check of the activation program includes the program and the second electronic signature.

  If it is determined that there is a target file to be used for the activation program authentication check (YES in S221), the multi-function peripheral acquires the program and the second electronic signature from the activation SD card, and proceeds to step S222. In step S222, the multi-function peripheral creates MD1 of the program acquired in step S221. In step S223, the multi-function peripheral decrypts the second electronic signature acquired in step S221 with the public key and creates MD2.

  Proceeding to step S224, the multi-function peripheral determines whether MD1 created in step S222 is equal to MD2 created in step S223.

  If it is determined that MD1 created in step S222 is equal to MD2 created in step S223 (YES in S224), the multi-function peripheral proceeds to step S225 and determines that the activation program authentication check is OK. On the other hand, if it is determined that the MD1 created in step S222 is not equal to the MD2 created in step S223 (NO in S224), the multi-function device proceeds to step S226 and determines that the activation program authentication check is NG.

  This is because if the MD1 created in step S222 and the MD2 created in step S223 are not equal, the file recorded on the startup SD card is likely to have been illegally copied or tampered. If it is determined that the target file to be used for the activation program authentication check does not exist (NO in S221), the multi-functional peripheral proceeds to step S226 and determines that the activation program authentication check is NG.

  FIG. 19 is a flowchart of an example of a process for updating the activation SD card with the update SD card. In step S310, the multi-function apparatus reads the activation program from the update SD card inserted in the SD card slot, and performs an authentication check of the update program as in the flowchart of FIG. If it is determined that the authentication check of the update program is OK (YES in S310), the multi-function device proceeds to step S320. On the other hand, if it is determined that the authentication check of the update program is NG (NO in S310), the multi-function device proceeds to step S330, performs error processing, and ends the processing. That is, the multi-function apparatus ends the process without updating the activation SD card inserted in another SD card slot. In step S320, since the authentication check of the update program is OK, the multi-function apparatus uses the program recorded in the update SD card to insert the startup SD card inserted into another SD card slot. Update and exit.

  Since the activation SD card and the update SD card according to the present invention can record the license information and the activation program that can be easily verified, even if the program is recorded on a removable recording medium such as an SD card. The program can be started and updated from a removable recording medium while ensuring safety.

  The present invention is not limited to the specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims.

It is a block diagram of an example of the recording-medium production system for producing SD card for starting. It is a block diagram of the other example of the recording-medium production system for producing the SD card for starting. It is a sequence diagram showing the processing procedure of the recording medium production system. It is an image figure of an example of an input screen. It is a flowchart of an example of a license information creation process. It is a flowchart of an example of a starting program creation process. It is a block diagram of an example of the SD card for starting. It is an image figure of an example of the license information recorded on the SD card for starting, and a starting program. It is a block diagram of another example of the activation SD card. It is an image figure of the license information recorded on the SD card for starting, and another example of a starting program. It is a block diagram of an example of the recording medium production system for producing the SD card for an update. It is a block diagram of the other example of the recording-medium production system for producing the SD card for an update. It is a sequence diagram showing the processing procedure of the recording medium production system. It is a flowchart of an example of an update program creation process. It is a block diagram of an example of the update SD card. It is a flowchart of an example of the process which starts a program from SD card for starting. It is a flowchart of an example of an authentication check process of license information. It is a flowchart of an example of the process of the authentication check of a starting program. It is a flowchart of an example of the process which updates the starting SD card by the updating SD card.

Explanation of symbols

1, 2, 3, 4 Recording medium creation system 10 Client 20, 70 SD card 30 Recording medium creation device 31, 51 Communication unit 32, 52 License information creation unit 33, 61 Electronic signature creation unit 34, 53 Start program creation unit 35 , 54 Valid program list 36, 62 Private key 37, 39, 55, 57 Program 38, 56 Update program creation unit 40 Network 50 First recording medium creation device 60 Second recording medium creation device

Claims (9)

The recording medium production apparatus thus be executed Ru recording medium production method,
The recording medium creating apparatus is
The model model identification information of the image forming apparatus provided with the printing unit and the imaging unit and the recording medium identification information of the recording medium used as a start recording medium in the image forming apparatus are received from the client that records the information on the recording medium. And steps to
Creating a first electronic signature using the recording medium identification information and a list of valid programs corresponding to the model identification information;
Creating license information including the valid program list and the first electronic signature;
Creating a second electronic signature using the model model identification information and a program corresponding to the model model identification information;
Creating a boot program including the model model identification information, a program corresponding to the model model identification information, and the second electronic signature;
Transmitting the license information and the activation program to the client;
Recording medium production method characterized by the execution. The step of creating the first electronic signature using the recording medium identification information and the valid program list corresponding to the model model identification information creates the first message digest of the recording medium identification information and the valid program list. The recording medium creating method according to claim 1, wherein the first electronic signature is created by encrypting the first message digest with a secret key. The step of creating a second electronic signature using the model model identification information and a program corresponding to the model model identification information creates the model model identification information and a second message digest of the program, The recording medium creation method according to claim 2, wherein the second electronic signature is created by encrypting a second message digest with the secret key. The model model identification information of the image forming apparatus provided with the printing unit and the imaging unit and the recording medium identification information of the recording medium used as a start recording medium in the image forming apparatus are received from the client that records the information on the recording medium. Means to
Means for creating a first electronic signature using the recording medium identification information and an effective program list corresponding to the model identification information;
Means for creating license information including the valid program list and the first electronic signature;
Means for creating a second electronic signature using the model model identification information and a program corresponding to the model model identification information;
Means for creating a boot program including the model model identification information, a program corresponding to the model model identification information, and the second electronic signature;
A recording medium creating apparatus , comprising: means for transmitting the license information and the activation program to the client . The means for creating the first electronic signature using the recording medium identification information and the valid program list corresponding to the model model identification information creates the first message digest of the recording medium identification information and the valid program list. 5. The recording medium creating apparatus according to claim 4, wherein the first electronic signature is created by encrypting the first message digest with a secret key. The means for creating a second electronic signature using the model model identification information and a program corresponding to the model model identification information creates the model model identification information and a second message digest of the program, 6. The recording medium creating apparatus according to claim 5, wherein the second electronic signature is created by encrypting a second message digest with the secret key. A recording medium creation system in which a client and a recording medium creation device are connected via a network,
The recording medium creation device includes:
From the client that records information on the recording medium, model model identification information of an image forming apparatus provided with a printing unit and an imaging unit and recording medium identification information of a recording medium used as a start recording medium in the image forming apparatus Means for receiving;
Means for creating a first electronic signature using the recording medium identification information and an effective program list corresponding to the model identification information;
Means for creating license information including the valid program list and the first electronic signature;
Means for creating a second electronic signature using the model model identification information and a program corresponding to the model model identification information;
Means for creating a boot program including the model model identification information, a program corresponding to the model model identification information, and the second electronic signature;
A recording medium creation system comprising: means for transmitting the license information and the activation program to the client . The means for creating the first electronic signature using the recording medium identification information and the valid program list corresponding to the model model identification information creates the first message digest of the recording medium identification information and the valid program list. 8. The recording medium creating system according to claim 7, wherein the first electronic signature is created by encrypting the first message digest with a secret key. The means for creating a second electronic signature using the model model identification information and a program corresponding to the model model identification information creates the model model identification information and a second message digest of the program, 9. The recording medium creation system according to claim 8, wherein the second electronic signature is created by encrypting a second message digest with the secret key.

Images