JP7596938B2 - Information processing device and information processing program - Google Patents

Description

The present invention relates to an information processing device and an information processing program.

Patent Document 1 discloses a secure boot method for executing a plurality of components in a predetermined order while verifying their integrity. This secure boot method acquires current state information, which is information indicating whether or not each of one or more components that were to be booted before a first component has been successfully booted. Then, this secure boot method searches a first mapping table in which a logical identifier for identifying each of the plurality of components, state information indicating whether or not each of one or more components that were to be booted before the corresponding component has been successfully booted, and an integrity measurement value, which is a value for verifying whether or not the boot of one or more components indicated by the corresponding state information has been truly successful, are associated with each other. Then, this secure boot method acquires a first integrity measurement value corresponding to the first component and the state indicated by the current state information through the search. Then, this secure boot method acquires a current integrity measurement value, which is a value calculated based on the one or more booted components. Then, this secure boot method verifies whether or not the boot of one or more components indicated by the current state information has been truly successful by comparing the first integrity measurement value with the current integrity measurement value. Then, this secure boot method starts booting the first component if the verification is successful, and updates the current state information to indicate that the booting of the first component has been successful if the booting of the first component has been successful.

Patent document 2 discloses an image forming device capable of booting up using a secure boot function that detects tampering with a program stored in a boot ROM and boots up the device using the program. This image forming device includes a determination means for determining whether or not the device is set to be booted up using the secure boot function. This image forming device also includes a warning means for displaying a warning message on a display unit indicating that the setting of the secure boot function has been changed when the determination means determines that the device is not set to be booted up using the secure boot function.

Special Publication No. 2011-511311 JP 2020-030599 A

In conventional technology, even if a function that may have been tampered with is not related to information leakage, the function is not executed. Therefore, when a user tries to use a function that may have been tampered with but is not related to information leakage, there is an issue of reduced convenience.

The present invention aims to improve convenience compared to a case in which an information processing device does not execute a tampered function, even if the tampered function is a function unrelated to information leakage.

In order to achieve the above object, the information processing device according to the first aspect includes a processor, and the processor receives an instruction to execute a function, and if the received instruction is an instruction to execute a tampered function, which is a function that may have been tampered with and the tampered function includes a transmission process that involves transmitting information to an external device other than the device itself, the processor restricts the execution of the tampered function, and if the received instruction is an instruction to execute the tampered function and the tampered function does not include the transmission process, the processor executes the tampered function.

In addition, in the information processing device according to the second aspect, in the information processing device according to the first aspect, when the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission process, the processor does not execute the transmission process as a restriction on the execution of the tampered function, but executes a process other than the transmission process.

In addition, in the information processing device according to the third aspect, in the information processing device according to the first or second aspect, if the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission process, the processor presents a message indicating that the execution of the tampered function is restricted.

In addition, in an information processing device according to a fourth aspect, which is an information processing device according to any one of the first to third aspects, if the received instruction is an instruction to execute the tampered function, the processor notifies the first device that the tampered function may have been tampered with.

In addition, in the information processing device according to the fifth aspect, in the information processing device according to the fourth aspect, the processor receives a notification from the first device regarding a method for repairing the tampered function, and presents the received notification regarding a method for repairing the tampered function.

In addition, the information processing device according to the sixth aspect is an information processing device according to any one of the first to fifth aspects, in which the transmission process is a process stored in a non-rewritable storage unit.

In addition, in the information processing device according to the seventh aspect, in the information processing device according to any one of the first to sixth aspects, the processor executes the tampered function when the email address information of the external device satisfies a predetermined condition, even if the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission process.

In addition, in the information processing device according to the eighth aspect, in the information processing device according to the seventh aspect, the predetermined condition is that the information processing device includes a domain name that is the same as a domain name included in the email address information of the user who uses the device.

In addition, in the information processing device according to the ninth aspect, in the information processing device according to any one of the first to sixth aspects, the processor executes the tampered function when the network part included in the private IP address information of the external device is the same as the network part included in the private IP address information of the user using the device, even if the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission process.

Furthermore, in order to achieve the above object, the information processing program according to the tenth aspect causes a computer to execute a process that receives an instruction to execute a function, and if the received instruction is an instruction to execute a tampered function, which is a function that may have been tampered with and the tampered function includes a transmission process that involves transmitting information to an external device other than the device itself, restricts the execution of the tampered function, and if the received instruction is an instruction to execute the tampered function and the tampered function does not include the transmission process, causes a computer to execute the tampered function.

According to the first and tenth aspects, even if the tampered function is a function that is not related to information leakage, convenience is improved compared to a case in which the information processing device does not execute the tampered function.

According to the second aspect, when the tampered function includes a transmission process, convenience is improved by the fact that processes other than the transmission process are executed compared to a case in which the information processing device does not execute the tampered function at all.

According to the third aspect, if the tampered function includes a transmission process, the user can understand that the execution of the tampered function is restricted.

According to the fourth aspect, the first device can understand that the instruction received by the information processing device is an instruction to execute a tampered function.

According to the fifth aspect, the user can understand how to repair the tampered function.

According to the sixth aspect, it is possible to prevent tampering with processes involving the transmission of information to an external device.

According to the seventh aspect, when the email address information of the external device satisfies a predetermined condition, convenience is improved compared to when the tampering function is not executed.

According to the eighth aspect, convenience is improved compared to when the tampering function is not executed when the email address information of the external device contains the same domain name as the domain name contained in the email address information of the user who uses the device.

According to the ninth aspect, convenience is improved compared to a case where the tamper-proof function is not executed when the network part included in the private IP address information of the external device is the same as the network part included in the private IP address information of the user who uses the device.

FIG. 2 is a schematic diagram illustrating an example of a hardware configuration of an information processing system according to an embodiment. FIG. 4 is a schematic diagram illustrating an example of a configuration of a function database according to the embodiment. 10 is a flowchart illustrating an example of information processing according to the embodiment. FIG. 13 is a schematic diagram illustrating an example of an execution restriction screen according to the embodiment. FIG. 13 is a schematic diagram showing an example of a repair information screen according to the embodiment.

Below, an example of an embodiment of the present disclosure will be described with reference to the drawings. Note that the same reference symbols are used in each drawing to identify identical or equivalent components and parts. Also, the dimensional ratios in the drawings have been exaggerated for the convenience of explanation and may differ from the actual ratios.

As shown in FIG. 1, the information processing system 1 according to this embodiment includes an external device 10, a first device 20, a user terminal 30, and an information processing device 40.

The external device 10, the first device 20, the user terminal 30, and the information processing device 40 are capable of communicating with each other via a communication means N. In this embodiment, a public communication line such as the Internet is used as the communication means N.

In this embodiment, a personal computer is used as the external device 10. However, the external device 10 may be any information processing device other than the information processing device 40, such as a tablet terminal or a smartphone. In addition, although the present embodiment describes a case where there is one external device 10, there may be multiple external devices 10.

The first device 20 is a device that manages the information processing device 40. In this embodiment, a server computer is applied as the first device 20.

The user terminal 30 is an information processing terminal owned by a user who uses the information processing device 40. In this embodiment, a personal computer is applied as the user terminal 30.

In addition, in this embodiment, an image forming device is applied as the information processing device 40. However, any information processing device, such as a personal computer, a tablet terminal, or a smartphone, may be applied as the information processing device 40.

As shown in FIG. 1, the information processing device 40 according to this embodiment includes a CPU 41, a memory 42 as a temporary storage area, a non-volatile first storage unit 43 and a second storage unit 44, an input unit 45, a display unit 46, and a communication I/F unit 48. Each component is connected to each other via a bus B4.

The first storage unit 43 is realized by a storage device such as an HDD, SSD, or flash memory. The first storage unit 43, which serves as a storage medium, stores an information processing program 43A. The CPU 41 reads these programs from the first storage unit 43, expands them in the memory 42, and sequentially executes the processes contained in the programs. A detailed description of the execution of each program will be given later. The first storage unit 43 also stores various databases, such as a function database 43B.

The second storage unit 44 is realized by a non-rewritable storage device such as a HDD, SSD, or flash memory. The second storage unit 44 stores functions (hereinafter simply referred to as "functions") executed by the information processing device 40. Specifically, the second storage unit 44 stores a read and transmit function, which is a function of transmitting an image read by the information processing device 40 to the external device 10, and a read and display function, which is a function of displaying an image read by the information processing device 40 on the display unit 46. Note that the second storage unit 44 may also be applied with a read and print function, which is a function of printing an image read by the information processing device 40.

In this embodiment, a form is applied in which functions are stored in the non-rewritable second storage unit 44, regardless of whether or not a transmission process, which is a process involving the transmission of information to the external device 10, is included. However, functions that include a transmission process may be stored in the non-rewritable second storage unit 44, and functions that do not include a transmission process may be stored in a rewritable storage device. Also, among the functions, the transmission process may be stored in the non-rewritable second storage unit 44, and processes other than the transmission process may be stored in a rewritable storage device.

The input unit 45 is, for example, a touch panel, and is used to accept various input information.

The display unit 46 is, for example, a liquid crystal display, and displays various information. The input unit 45 and the display unit 46 may be integrated into a touch panel display.

The communication I/F unit 48 is an interface for the information processing device 40 to communicate with devices such as the external device 10. For this communication, for example, a wired communication standard such as Ethernet (registered trademark) or FDDI, or a wireless communication standard such as 4G, 5G, or Wi-Fi (registered trademark) is used.

Next, the function database 43B according to this embodiment will be described with reference to FIG. 2. In the function database 43B shown in FIG. 2, function information, which is information related to functions, is stored. In FIG. 2, each row represents a piece of function information. In each piece of function information, information on the function, processing, and whether or not it has been tampered with is associated with each other.

The above functions are information representing functions stored in the second storage unit 44. The above processes are information representing processes included in the corresponding functions. In the example shown in FIG. 2, a read process in which the information processing device 40 reads an image, and an image transmission process in which the image read by the read process is transmitted to the external device 10, are applied as processes corresponding to the read and transmit function. In the example shown in FIG. 2, a read process and an image display process in which the image read by the read process is displayed on the display unit 46 are applied as the read and display function.

The above-mentioned "tampered" or "not tampered" is information indicating whether the corresponding function is a tampered function, which is a function that may have been tampered with. In the example shown in FIG. 2, "Yes" indicates that the corresponding function is a tampered function, and "No" indicates that the corresponding function is not a tampered function.

Next, the operation of the information processing device 40 according to this embodiment will be described with reference to Figures 3 to 5. When a user issues an instruction to start execution of the information processing program 43A via the input unit 45, the CPU 41 executes the information processing program 43A, thereby executing the information processing shown in Figure 3.

In step S100, the CPU 41 waits until an instruction to execute a function is received via the input unit 45. Hereinafter, the function corresponding to the instruction received by the CPU 41 in this step is referred to as the "reception function."

In step S102, the CPU 41 determines whether the reception function is a tampered function. If the reception function is a tampered function (step S102: Y), the CPU 41 proceeds to step S104. On the other hand, if the reception function is not a tampered function (step S102: N), the CPU 41 proceeds to step S118, which will be described later. Note that whether a function is a tampered function can be realized by existing technology. As an example, a technology called secure boot is known for confirming whether the software that executes a function is the same as the software intended by the user. According to secure boot, a hash value calculated in advance is saved as an expected value, and a value measured at the time of system startup is compared to see if it matches the expected value. If they match, it is determined that there has been no tampering, and if they do not match, it is determined that there has been tampering. Note that secure boot is just one example, and any tampering detection technology may be used.

In step S104, the CPU 41 transmits the tampering information to the first device via the communication I/F unit 48. In other words, in step S104, the CPU 41 notifies the first device that the reception function may have been tampered with.

In step S106, the CPU 41 determines, from the process corresponding to the reception function in the function database 43B, whether or not the reception function includes a transmission process, which is a process involving the transmission of information to the external device 10. If the reception function includes a transmission process (step S106: Y), the CPU 41 proceeds to step S108. On the other hand, if the reception function does not include a transmission process (step S106: N), the CPU 41 proceeds to step S118.

In step S108, the CPU 41 displays an execution restriction screen on the display unit 46 according to a predetermined format.

As shown in FIG. 4, the execution restriction screen according to this embodiment displays a message indicating that execution of the reception function is restricted. In the example shown in FIG. 4, the execution restriction screen displays a message indicating that the image transmission process, which is a transmission process among the reception functions, is not to be executed, and that the reading process, which is a process other than the transmission process, is to be executed.

In addition, in step S108, the CPU 41 may present a message indicating that the execution of the reception function is restricted by voice via a speaker or the like provided in the information processing device 40.

In step S110, the CPU 41 acquires the email address information of the external device 10 and the user terminal 30, and determines whether the email address information of the external device 10 includes the same domain name as the domain name included in the email address information of the user terminal 30. If the email address information of the external device 10 does not include the same domain name as the domain name included in the email address information of the user terminal 30 (step S110: N), the CPU 41 proceeds to step S112. On the other hand, if the email address information of the external device 10 includes the same domain name as the domain name included in the email address information of the user terminal 30 (step S110: Y), the CPU 41 proceeds to step S118.

In addition, in step S110, the CPU 41 may determine whether or not the email address information of the external device 10 includes an account name that is the same as the account name included in the email address information of the user terminal 30. In this case, if the email address information of the external device 10 does not include an account name that is the same as the account name included in the email address information of the user terminal 30, the CPU 41 proceeds to step S112. On the other hand, if the email address information of the external device 10 includes an account name that is the same as the account name included in the email address information of the user terminal 30, the CPU 41 proceeds to step S118.

In addition, in step S110, the CPU 41 may obtain private IP (Internet Protocol) address information of the external device 10 and the user terminal 30, and determine whether or not their network parts are the same. Specifically, the CPU 41 may proceed to step S112 if the network part included in the private IP address information of the external device 10 is the same as the network part included in the private IP address information of the user terminal 30. In addition, the CPU 41 may proceed to step S118 if the network part included in the private IP address information of the external device 10 is different from the network part included in the private IP address information of the user terminal 30.

In step S112, the CPU 41 does not execute the transmission process among the reception functions, but executes a process other than the transmission process. For example, if the reception function is a reading and sending function, the CPU 41 does not execute the image transmission process, but executes the reading process.

In step S114, the CPU 41 waits until it receives repair information, which is information about how to repair the reception function, which is the tampered function, from the first device via the communication I/F unit 48.

In step S116, the CPU 41 displays a repair information screen in a predetermined format on the display unit 46 and ends this information processing.

As shown in FIG. 5, the repair information screen according to this embodiment displays the repair information received from the first device. In the example shown in FIG. 5, the repair information screen displays an instruction to delete the read and transmit function from the second storage unit 44 and to store the read and transmit function to be sent later in the second storage unit 44 again.

In addition, in step S116, the CPU 41 may present the repair information by voice via a speaker or the like provided in the information processing device 40.

In step S118, the CPU 41 executes the reception function and ends this information processing.

Although the embodiments have been described above, the technical scope of the present invention is not limited to the scope described in the above embodiments. Various modifications or improvements can be made to the above embodiments without departing from the gist of the invention, and such modifications or improvements are also included in the technical scope of the present invention.

The above-mentioned embodiments do not limit the inventions claimed in the claims, and not all of the combinations of features described in the embodiments are necessarily essential to the solution of the invention. The above-mentioned embodiments include inventions at various stages, and various inventions are extracted by combining the multiple constituent elements disclosed. Even if some constituent elements are deleted from all the constituent elements shown in the embodiments, as long as the effect is obtained, the configuration from which these several constituent elements are deleted can be extracted as an invention.

In addition, in each of the above embodiments, the term "processor" refers to a processor in a broad sense, including general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

In addition, the processor operations in each of the above embodiments may not only be performed by a single processor, but may also be performed by multiple processors located at physically separate locations working together. Furthermore, the order of each processor operation is not limited to the order described in each of the above embodiments, and may be changed as appropriate.

In this embodiment, the information processing program 43A is installed in the first storage unit 43, but the present invention is not limited to this. The information processing program 43A according to this embodiment may be provided in a form recorded on a computer-readable storage medium. For example, the information processing program 43A according to this embodiment may be provided in a form recorded on an optical disc such as a CD (Compact Disc)-ROM or a DVD (Digital Versatile Disc)-ROM, or in a form recorded on a semiconductor memory such as a USB (Universal Serial Bus) memory or a memory card. The information processing program 43A according to this embodiment may also be obtained from an external device via the communication I/F unit 48.

In the above embodiment, the information processing is realized by a software configuration using a computer by executing a program, but the present invention is not limited to this. For example, the information processing may be realized by a hardware configuration or a combination of a hardware configuration and a software configuration.

In addition, the configuration of the information processing device 40 described in the above embodiment is merely an example, and it goes without saying that unnecessary parts may be deleted or new parts may be added without departing from the spirit of the present invention.

Furthermore, the processing flow of the information processing program described in the above embodiment (see FIG. 3) is also one example, and it goes without saying that unnecessary steps may be deleted, new steps may be added, or the processing order may be rearranged, without departing from the spirit of the present invention.

10 External device 20 First device 30 User terminal 40 Information processing device 41 CPU
43 First storage unit 43A Information processing program 44 Second storage unit

Claims (8)

A processor is provided.
The processor,
Accepts instructions to execute a function;
If the received instruction is an instruction regarding the execution of a tampered function that is a function that may have been tampered with, and the tampered function includes a transmission process that is a process involving the transmission of information to an external device that is a device other than the device itself, restricting the execution of the tampered function;
When the received instruction is an instruction for executing the tampered function and the tampered function does not include the transmission process, executing the tampered function ;
if the received instruction is an instruction to execute the tampered function, notifying the first device that the tampered function may have been tampered with;
receiving a notification from the first device regarding a method for repairing the tampered function;
presenting a notification regarding how to repair the tampered functionality that has been received;
Information processing device. The processor,
When the received instruction is an instruction regarding the execution of the tampered function, and the tampered function includes the transmission process, the execution of the tampered function is restricted by not allowing the transmission process to be executed and allowing a process other than the transmission process to be executed.
The information processing device according to claim 1 . The processor,
If the received instruction is an instruction regarding execution of the tampered function, and the tampered function includes the transmission process, a message is displayed indicating that the execution of the tampered function is restricted.
3. The information processing device according to claim 1 or 2. The transmission process is a process stored in a non-rewritable storage unit.
The information processing device according to any one of claims 1 to 3 . The processor,
even if the received instruction is an instruction for executing the tampered function and the tampered function includes the transmission process, when the email address information of the external device satisfies a predetermined condition, the tampered function is executed.
The information processing device according to any one of claims 1 to 4 . The predetermined condition is that the domain name is the same as the domain name included in the email address information of the user who uses the device.
The information processing device according to claim 5 . The processor,
Even if the received instruction is an instruction for executing the tampered function and the tampered function includes the transmission process, when a network part included in the private IP address information of the external device is the same as a network part included in the private IP address information of a user who uses the device, the tampered function is executed.
The information processing device according to any one of claims 1 to 4 . Accepts instructions to execute a function;
If the received instruction is an instruction regarding the execution of a tampered function that is a function that may have been tampered with, and the tampered function includes a transmission process that is a process involving the transmission of information to an external device that is a device other than the device itself, restricting the execution of the tampered function;
When the received instruction is an instruction for executing the tampered function and the tampered function does not include the transmission process, executing the tampered function ;
if the received instruction is an instruction to execute the tampered function, notifying the first device that the tampered function may have been tampered with;
receiving a notification from the first device regarding a method for repairing the tampered function;
presenting a notification regarding how to repair the tampered functionality that has been received;
An information processing program for causing a computer to execute processing.