JP7762897B2 - Information Processing Systems - Google Patents

Description

The present disclosure relates to an information processing device, an information processing system, and an information processing method.

When a company or other organization disposes of electronic devices such as personal computers, it is required to erase the data stored on the storage device to prevent the leakage of confidential business information.

Patent document 1 discloses a method for erasing data from a recording medium, such as a hard disk attached to a personal computer.

Patent No. 6923311

When an organization manages a large number of electronic devices, it is necessary to erase data stored in the storage devices of the electronic devices without error. Furthermore, it is also necessary to easily achieve such data erasure without requiring major design changes to the hardware and/or software of existing electronic devices.

The present disclosure provides an information processing device, an information processing system, and an information processing method that can reliably and easily erase data stored in a storage device of an electronic device.

An information processing device according to one aspect of the present disclosure includes:
An information processing device connected to at least one electronic device via a communication line,
The electronic device is
a first storage device for storing data including an operating system, application programs, and user data;
a second storage device for storing a firmware program;
a first communication device connected to the information processing device via the communication line;
a first control circuit that controls the first storage device and the first communication device by executing the firmware program, and that erases data stored in the first storage device when an erase command is received from the information processing device during execution of the firmware program;
The information processing device includes:
a second communication device connected to the electronic device via the communication line;
and a second control circuit that acquires erasure permission information indicating whether erasure of data stored in the first storage device is permitted, and sends the erasure command to the electronic device if the erasure permission information indicates that erasure of the data is permitted.

According to one aspect of the present disclosure, an information processing device can reliably and easily erase data stored in a storage device of an electronic device.

1 is a schematic diagram showing a configuration of an information processing system 100 according to a first embodiment. FIG. 2 is a block diagram showing the configuration of a client device 1 in FIG. 1 . FIG. 2 is a block diagram showing the configuration of a server device 2 in FIG. 1 . FIG. 2 is a block diagram showing the configuration of terminal devices 3 and 4 in FIG. 1. FIG. 10 is a sequence diagram showing an erasure process according to a comparative example. FIG. 10 is a sequence diagram showing an erasure process according to the first embodiment. FIG. 10 is a sequence diagram illustrating an erasure process according to a first modified example of the first embodiment. FIG. 10 is a sequence diagram showing an erasure process according to a second modified example of the first embodiment. FIG. 10 is a sequence diagram showing an erasure process according to the second embodiment. FIG. 11 is a sequence diagram illustrating an erasure process according to a first modified example of the second embodiment. FIG. 10 is a sequence diagram illustrating an erasure process according to a second modified example of the second embodiment. FIG. 11 is a sequence diagram showing an erasure process according to the third embodiment. FIG. 13 is a sequence diagram illustrating an erasure process according to a first modified example of the third embodiment. FIG. 13 is a sequence diagram illustrating an erasure process according to a second modified example of the third embodiment. FIG. 13 is a sequence diagram showing an erasure process according to the fourth embodiment. FIG. 13 is a sequence diagram showing an erasure process according to a first modified example of the fourth embodiment. FIG. 13 is a sequence diagram showing an erasure process according to a second modified example of the fourth embodiment. FIG. 13 is a sequence diagram showing an erasure process according to a third modified example of the fourth embodiment. 10 is a table comparing the first to fourth embodiments.

The following describes embodiments in detail, with reference to the drawings as appropriate. However, more detailed explanations than necessary may be omitted. For example, detailed explanations of matters that are already well known or duplicate explanations of substantially identical configurations may be omitted. This is to avoid unnecessary redundancy in the following explanation and to make it easier for those skilled in the art to understand.

The inventor(s) provide the accompanying drawings and the following description to enable those skilled in the art to fully understand the present disclosure, and are not intended to limit the subject matter described in the claims.

[First embodiment]
[Configuration of the first embodiment]

Figure 1 is a schematic diagram showing the configuration of an information processing system 100 according to the first embodiment. The information processing system 100 in Figure 1 includes multiple client devices 1-1 to 1-3, a server device 2, one or more terminal devices 3 and 4, and a communication line 5.

Client devices 1-1 to 1-3 are communicatively connected to server device 2 via communication line 5. Client devices 1-1 to 1-3 are electronic devices equipped with a storage device (described below), such as personal computers or mobile phones. Client devices 1-1 to 1-3 are examples of electronic devices related to the embodiment.

In this specification, client devices 1-1 to 1-3 are collectively referred to as "client device 1."

The server device 2 manages the erasure of data stored in the storage device of each client device 1. The server device 2 is an example of an information processing device related to the embodiment.

Terminal devices 3 and 4 are communicatively connected to server device 2 via communication line 5. Administrators A and B of each client device 1 access server device 2 using terminal devices 3 and 4, respectively, and specify the storage device from which stored data should be erased. Administrators A and B may have the same or different authority regarding data erasure. For example, administrator B may have stronger authority than administrator A, such as administrator A's boss. Server device 2 distinguishes administrators A and B from each other using identification information previously assigned to administrators A and B, such as a login ID for server device 2.

The communication line 5 may be, for example, a local area network (LAN), the Internet, or a combination thereof.

For example, each client device 1 and terminal devices 3 and 4 may be owned by an organization such as a company, while the server device 2 may be operated by a third party different from this organization. In this case, the organization that owns each client device 1 and terminal devices 3 and 4 enters into a contract with the operator of the server device 2 to manage the erasure of data stored in the storage device of each client device 1, and becomes a customer of this operator.

In this specification, "erasing" means making all or most of the original data stored unreadable, for example, by overwriting it with other data such as "0," "1," or random values. Furthermore, if the storage device 13 has a self-encryption function, "erasing" may also mean changing the encryption key (cryptographic erasure).

Figure 2 is a block diagram showing the configuration of the client device 1 of Figure 1. The client device 1 includes a bus 10, a CPU (Central Processing Unit) 11, a RAM (Random Access Memory) 12, a storage device 13, a control circuit 14, a storage device 15, a communication device 16, an input device 17, and a display device 18. The CPU 11 controls the overall operation of the client device 1 by executing an operating system (OS) and multiple application programs (APPs) stored in the storage device 13. The CPU 11 is an example of a control circuit, processing circuit, or signal processor. The RAM 12 temporarily stores programs and data necessary for the operation of the client device 1. The storage device 13 stores data including the operating system (OS), multiple application programs (APPs), and user data. The storage device 13 is a non-volatile storage medium such as a hard disk drive (HDD) or solid-state drive (SSD). The control circuit 14 executes firmware programs stored in the storage device 15 to directly control each hardware device of the client device 1 without going through the operating system. The storage device 15 stores a firmware program for the client device 1, such as a UEFI (Unified Extensible Firmware Interface) or BIOS (Basic Input/Output System) program. The storage device 15 is a non-volatile storage medium such as a flash memory. The communication device 16 is communicatively connected to the server device 2 via the communication line 5. The communication device 16 includes a communication circuit that transmits and receives signals via a communication port. The input device 17 receives user input that controls the operation of the client device 1. The input device 17 includes, for example, a keyboard and a pointing device. The display device 18 displays information related to the status of the client device 1. The CPU 11, RAM 12, storage device 13, storage device 15, communication device 16, input device 17, and display device 18 are connected to each other via the bus 10.

Figure 3 is a block diagram showing the configuration of the server device 2 of Figure 1. The server device 2 includes a bus 20, a CPU 21, a RAM 22, a storage device 23, a communication device 26, an input device 27, and a display device 28. The CPU 21 controls the overall operation of the server device 2 by executing programs stored in the storage device 23 and also manages the erasure of data stored in the storage device 13 of each client device 1. The CPU 21 is an example of a control circuit, processing circuit, or signal processor. The RAM 22 temporarily stores programs and data necessary for the operation of the server device 2. The storage device 23 is a non-volatile storage medium that stores programs and data necessary for the operation of the server device 2. The communication device 26 is communicatively connected to each client device 1 and terminal devices 3 and 4 via a communication line 5. The communication device 26 includes a communication circuit that transmits and receives signals via a communication port. The input device 27 receives user input that controls the operation of the server device 2. The input device 27 includes, for example, a keyboard and a pointing device. The display device 28 displays information related to the status of the server device 2. The CPU 21 , RAM 22 , storage device 23 , communication device 26 , input device 27 , and display device 28 are connected to one another via a bus 20 .

Figure 4 is a block diagram showing the configuration of the terminal devices 3 and 4 in Figure 1. The terminal devices 3 and 4 include a bus 30, a CPU 31, a RAM 32, a storage device 33, a communication device 36, an input device 37, and a display device 38. The CPU 31 controls the overall operation of the terminal devices 3 and 4 by executing a program stored in the storage device 33. The CPU 31 is an example of a control circuit, processing circuit, or signal processor. The RAM 32 temporarily stores programs and data necessary for the operation of the terminal devices 3 and 4. The storage device 33 is a non-volatile storage medium that stores programs and data necessary for the operation of the terminal devices 3 and 4. The communication device 36 is communicatively connected to the server device 2 via the communication line 5. The communication device 36 includes a communication circuit that sends and receives signals via a communication port. The input device 37 receives user input that controls the operation of the terminal devices 3 and 4. The input device 37 includes, for example, a keyboard and a pointing device. The display device 38 displays information related to the status of the terminal devices 3 and 4. The CPU 31 , RAM 32 , storage device 33 , communication device 36 , input device 37 , and display device 38 are connected to one another via a bus 30 .

The server device 2 provides an interface, such as a web page-based interface, accessible by the terminal devices 3 and 4 to manage the erasure of data stored in the storage device of each client device 1. In this case, the server device 2 executes a web server application program, and the terminal devices 3 and 4 execute a web browser application program to access the web server of the server device 2.

[Operation of the first embodiment]
As described above, in the client device 1, the storage device 13 stores the operating system and multiple application programs, and the storage device 15 stores the firmware program. The operating system and each application program are executed by the CPU 11, and the firmware program is executed by the control circuit 14. Generally, when the client device 1 starts up, the firmware program is executed first, and then the operating system is called from the firmware program. The application program is executed on the operating system. The application program accesses each hardware device of the client device 1 (the CPU 11, RAM 12, storage device 13, communication device 16, input device 17, and display device 18) via the operating system. On the other hand, the firmware program accesses each hardware device of the client device 1 directly without going through the operating system.

Some firmware programs allow remote access even when the operating system is unavailable or the device is powered off. For example, Intel® Advanced Management Technology (AMT) and Intel AMT High Level Application Programming Interface (HLAPI) from Intel Corporation provide such functionality. Therefore, for example, by using the Remote Platform Erase (RPE) of Intel AMT HLAPI, data stored on the storage device 13 can be erased without going through the operating system, regardless of whether the client device 1 is powered on or off.

Now, referring to Figure 5, we will explain how to erase data using Intel AMT HLAPI.

Figure 5 is a sequence diagram showing the erasure process for the comparative example.

In the initial state, the power to the client device 1 may be off or on. When the power to the client device 1 is off, the CPU 11 is inactive, but the control circuit 14 is executing a firmware program. On the other hand, when the power to the client device 1 is on, the CPU 11 is running the operating system, and the control circuit 14 is executing a firmware program.

In step S1, the CPU 21 of the server device 2 receives a data deletion instruction from the administrator. The CPU 21 sends a startup command to the client device 1. If the client device 1 is powered off, in step S2, the control circuit 14 of the client device 1 responds to the startup command by turning on the power to the client device 1, causing the CPU 11 to start the operating system, and sending a startup response indicating completion of startup to the server device 2. When using Intel AMT HLAPI, the control circuit 14 can receive the startup command and start the operating system even if the client device 1 is powered off. On the other hand, if the client device 1 is powered on, the control circuit 14 responds to the startup command by directly sending a startup response to the server device 2.

After receiving the startup response, the CPU 21 of the server device 2 sends an erase command to the client device 1. In step S3, the control circuit 14 of the client device 1 erases the data stored in the memory device 13 in response to the erase command. After the data erasure is complete, the control circuit 14 sends an erase response to the server device 2 indicating the completion of the data erasure.

After receiving the erasure response, the CPU 21 of the server device 2 sends an end command to the client device 1. In step S4, the control circuit 14 of the client device 1 turns off the power of the client device 1 in response to the end command.

According to the erasure process in Figure 5, when the client device 1 receives an erasure command, the data stored in the storage device 13 is forcibly erased unconditionally without seeking confirmation from the user (end user) or administrator of the client device 1. Therefore, data may be erased regardless of preparation for data erasure, such as whether backup of necessary data has been completed or whether permission to erase has been obtained from a person with the necessary authority. Therefore, even when using an existing API that forcibly erases data unconditionally, it is necessary to confirm whether preparation for data erasure has been completed.

Each embodiment of the present disclosure provides an information processing system and information processing method that can confirm whether preparation for data erasure is complete and reliably and easily erase data stored in the storage device 13, even when using an existing API that forcibly erases data unconditionally.

In the first embodiment, we will explain the erasure process involving only the client device 1 and server device 2 out of the client device 1, server device 2, and terminal devices 3 and 4 shown in Figure 1.

Figure 6 is a sequence diagram showing the erasure process related to the first embodiment.

In step S11, the client device 1 obtains from the user (end user) erasure permission information indicating whether erasure of data stored in the storage device 13 is permitted, and stores the information in the storage device 15. The erasure permission information may be stored in the storage device 15, for example, as a one-bit flag. The client device 1 may display a prompt on the display device 18 to prompt the user to input the erasure permission information by executing an application program using the CPU 11 or by executing a firmware program using the control circuit 14.

The client device 1 may turn off the power after obtaining the erasure permission information and storing it in the storage device 15.

In step S12, the CPU 21 of the server device 2 receives a data erasure instruction from the administrator. The administrator may instruct the server device 2 to erase data directly from the input device 27 of the server device 2, or may instruct the server device 2 to erase data via either terminal device 3 or 4. The CPU 21 sends an erasure permission request to the client device 1, requesting the return of erasure permission information. In response to the erasure permission request, the control circuit 14 of the client device 1 reads the erasure permission information from the storage device 15 and sends an erasure permission response including the erasure permission information to the server device 2. When using Intel AMT HLAPI, the control circuit 14 can receive the erasure permission request, read the erasure permission information from the storage device 15, and send the erasure permission response to the server device 2 even when the client device 1 is powered off.

In step S13, the CPU 21 of the server device 2 confirms that erasure permission information has been obtained from the erasure permission response. In step S14, the CPU 21 determines whether or not a predetermined erasure condition is met based on the erasure permission information. If the answer is YES, the CPU 21 sends a startup command to the client device 1, and if the answer is NO, the processing ends. The erasure condition in step S14 is that the erasure permission information indicates permission to erase data.

After sending the startup command in Figure 6, the processing is the same as in Figure 5.

According to the process of Figure 6, when the user is ready to erase data, for example, by backing up necessary data, the user inputs erasure permission information into the client device 1. If the erasure permission information indicates permission to erase data, an erasure command is issued and the data stored in the storage device 13 is erased. On the other hand, if the erasure permission information does not indicate permission to erase data, an erasure command is not issued and the data stored in the storage device 13 is not erased. Therefore, according to the process of Figure 6, even when using an existing API that forcibly erases data unconditionally, it is possible to confirm whether preparation for data erasure is complete and to reliably and easily erase data stored in the storage device 13.

Figure 7 is a sequence diagram showing the erasure process according to a first variant of the first embodiment. After obtaining erasure permission information from the user (step S11), the client device 1 may transmit an erasure permission notification including the erasure permission information to the server device 2. In this case, in step S15, the CPU 21 of the server device 2 obtains the erasure permission information from the erasure permission notification and stores it in the storage device 23. Thereafter, when the server device 2 receives a data erasure instruction from the administrator (step S12), the CPU 21 confirms in step S13A that the erasure permission information is stored in the storage device 23, without sending or receiving an erasure permission request or erasure permission response as in Figure 6. Steps S14 and subsequent steps in Figure 7 are the same as those in Figure 5. According to the process in Figure 7, by receiving and storing the erasure permission information from the client device 1 in advance, the process after the server device 2 receives a data erasure instruction from the administrator can be simplified compared to the case in Figure 6.

Figure 8 is a sequence diagram showing the erasure process according to the second variant of the first embodiment. In Figure 8, the process from step S11 to the transmission of the startup response is the same as the process in Figure 5. After transmitting the startup response, the control circuit 14 of the client device 1 transmits a backup request to the server device 2, requesting the saving of data stored in the storage device 13, for example, files in a predetermined folder. In step S16, the CPU 21 of the server device 2 saves the data specified in the backup request to the storage device 23. After saving the data, the CPU 21 transmits a backup response to the client device 1 indicating that the data saving has been completed, and then transmits an erasure command to the client device 1. The process after transmitting the erasure command in Figure 8 is the same as that in Figure 5. According to the process in Figure 8, at least a portion of the data stored in the storage device 13 can be automatically backed up to an external storage device before erasing the data stored in the storage device 13.

The user may specify in advance, for example, in step S11, whether to back up data stored in the storage device 13 and which files or folders to back up, along with the erasure permission information. For example, the user may specify whether or not to back up and what to back up, along with the erasure permission information, in step S11.

The data to be backed up may be stored in the storage device 33 of the terminal device 3, 4, or in another storage device instead of the storage device 23 of the server device 2.

[Advantages of the first embodiment]
According to one aspect of the present disclosure, an information processing system 100 includes a client device 1 and a server device 2 connected to each other via a communication line 5. The client device 1 includes a first storage device 13, a second storage device 15, a first communication device 16, and a control circuit 14. The first storage device 13 stores data including an operating system, application programs, and user data. The second storage device 15 stores a firmware program. The first communication device 16 is connected to the server device 2 via the communication line 5. The control circuit 14 controls the first storage device 13 and the first communication device 16 by executing the firmware program. When the control circuit 14 receives an erase command from the server device 2 while the firmware program is being executed, it erases data stored in the first storage device 13. The server device 2 includes a second communication device 26 and a CPU 21. The second communication device 26 is connected to the client device 1 via the communication line 5. The CPU 21 acquires erasure permission information indicating whether erasure of data stored in the first storage device 13 is permitted, and if the erasure permission information indicates that erasure of data is permitted, transmits an erasure command to the client device 1. The CPU 21 acquires, from the client device 1, first permission information indicating whether erasure of data stored in the first storage device 13 is permitted, as erasure permission information.

With this configuration, even when using an existing API for erasing data, it is possible to check whether preparation for data erasure is complete and to reliably and easily erase data stored in the storage device 13.

According to one aspect of the present disclosure, the control circuit 14 may transmit the first permission information to the server device 2 in response to a request from the server device 2 during execution of the firmware program.

This configuration allows data stored on the storage device 13 to be erased even when the operating system is not available.

According to one aspect of the present disclosure, the server device 2 may further include an input device for receiving user operations. In this case, in response to the user operation, the CPU 21 determines whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, sends an erase command to the client device 1.

This configuration allows data erasure to be initiated from the server device 2.

According to one aspect of the present disclosure, the information processing system may further include a third storage device connected to the client device 1 via the communication line 5. In this case, the control circuit 14 backs up the data stored in the first storage device 13 to the third storage device before erasing the data stored in the first storage device 13.

This configuration allows data stored in the storage device 13 to be automatically backed up.

According to one aspect of the present disclosure, the control circuit 14 may unconditionally erase data stored in the first memory device 13 when it receives an erase command from the server device 2 while the firmware program is being executed.

This configuration makes it possible to check whether preparations for data erasure are complete and reliably and easily erase data stored in the storage device 13, even when using existing APIs that forcibly erase data unconditionally.

According to one aspect of the present disclosure, there is provided an information processing method for an information processing system including a client device 1 and a server device 2 connected to each other via a communication line 5. The client device 1 includes a first storage device 13, a second storage device 15, a first communication device 16, and a control circuit 14. The first storage device 13 stores data including an operating system, application programs, and user data. The second storage device 15 stores a firmware program. The first communication device 16 is connected to the server device 2 via the communication line 5. The control circuit 14 controls the first storage device 13 and the first communication device 16 by executing the firmware program. The method includes acquiring, by the server device 2, erasure permission information indicating whether erasure of data stored in the first storage device 13 is permitted. The method includes transmitting an erasure command from the server device 2 to the client device 1 if the erasure permission information indicates permission to erase the data. The method includes erasing the data stored in the first storage device 13 if the client device 1 receives the erasure command from the server device 2 while the firmware program is being executed.

With this configuration, even when using an existing API for erasing data, it is possible to check whether preparation for data erasure is complete and to reliably and easily erase data stored in the storage device 13.

For example, it may be possible to outsource the erasure of data stored in storage device 13 to a contractor. However, transporting a client device equipped with a storage device from which data is to be erased to the contractor's business premises poses security risks. Using a highly secure shipping method increases costs. Furthermore, a lot of work is required for the erasure and subsequent checks. Furthermore, erasing data takes a long time, for example, half a day. According to the first embodiment, data stored in storage device 13 can be erased without moving the client device 1, allowing for easy data erasure with high security and low cost.

Second Embodiment
[Configuration of the second embodiment]
In the second embodiment, an erasure process involving the client device 1, the server device 2, and the terminal device 3 will be described, among the client device 1, the server device 2, and the terminal devices 3 and 4 shown in Fig. 1. The client device 1, the server device 2, and the terminal device 3 according to the second embodiment are configured in the same manner as the corresponding components according to the first embodiment.

[Operation of the second embodiment]
FIG. 9 is a sequence diagram showing the erasure process according to the second embodiment.

In step S21, the CPU 21 of the server device 2 obtains the erasure permission information entered by the user (end user) from the client device 1, or obtains the erasure permission information entered by administrator A from the terminal device 3. The CPU 21 may obtain the erasure permission information entered by the user by receiving an erasure permission notification from the client device 1, similar to the processing of FIG. 7. The CPU 21 may also obtain the erasure permission information entered by the user by sending and receiving an erasure permission request and an erasure permission response, similar to the processing of FIG. 6, for example, during execution of step S23 described below. The CPU 21 also receives an erasure permission notification from the terminal device 3, which includes the erasure permission information entered by administrator A. The CPU 21 stores the erasure permission information obtained from the client device 1 or terminal device 3 in the storage device 23.

In step S22, when the power of the client device 1 is turned on, the CPU 11 or control circuit 14 of the client device 1 receives a data erasure instruction from the user and sends a start command to the server device 2.

In step S23, the CPU 21 of the server device 2 responds to the start command by confirming that the erasure permission information entered by the user or the erasure permission information entered by administrator A has been obtained. The CPU 21 may confirm the erasure permission information entered by the user by sending and receiving an erasure permission request and an erasure permission response, similar to the process of FIG. 6. In step S24, the CPU 21 determines whether or not a predetermined erasure condition is met based on the erasure permission information. If YES, the CPU 21 sends an erasure command to the client device 1, and if NO, the process terminates. The erasure condition in step S24 is that at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A indicates permission to erase data.

After sending the erase command in Figure 9, the processing is the same as in Figure 5.

According to the processing of Figure 9, the erasure condition is that at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A indicates permission to erase data, so erasure permission can be obtained more flexibly than in the first embodiment.

Figure 10 is a sequence diagram showing the erasure process related to the first variant of the second embodiment.

Step S21 in Figure 10 is the same as step S21 in Figure 9.

In step S23A, the CPU 21 of the server device 2 periodically checks whether the erasure permission information entered by the user or the erasure permission information entered by administrator A has been acquired. In step S24, the CPU 21 determines whether the predetermined erasure conditions are met based on the erasure permission information, and if YES, sends a startup command to the client device 1, and if NO, returns to step S21.

After sending the startup command in Figure 10, the processing is the same as in Figure 5.

According to the processing of Figure 10, as with the processing of Figure 9, the erasure condition is that at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A indicates permission to erase data, so erasure permission can be obtained more flexibly than in the first embodiment.

According to the process of Figure 10, by periodically checking permission to erase, data can be automatically erased, for example, when the user is not using the client device 1. For example, data erasure can begin at night and be completed by morning.

Figure 11 is a sequence diagram showing the erasure process related to the second variant of the second embodiment.

Step S21 in Figure 11 is the same as step S21 in Figure 9.

In step S25, the terminal device 3 receives an instruction to erase data from administrator A and sends a start command to the server device 2.

In step S23, the CPU 21 of the server device 2 responds to the start command by confirming that the erasure permission information entered by the user or the erasure permission information entered by administrator A has been acquired. In step S24, the CPU 21 determines whether the predetermined erasure conditions are met based on the erasure permission information, and if YES, sends a start command to the client device 1, and if NO, terminates the processing.

After sending the startup command in Figure 11, the processing is the same as in Figure 5.

According to the processing of Figure 11, as with the processing of Figure 9, the erasure condition is that at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A indicates permission to erase data, so erasure permission can be obtained more flexibly than in the first embodiment.

According to the processing of Figures 9 to 11, data erasure can be initiated by any of the client device 1, server device 2, and terminal device 3.

In the processing of Figures 9 to 11, the CPU 21 of the server device 2 may obtain the erasure permission information entered by administrator B from the terminal device 4, instead of or in addition to obtaining the erasure permission information entered by administrator A from the terminal device 3. In this case, the erasure condition in step S24 is that at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator B indicates permission to erase data.

[Advantages of the second embodiment]
According to one aspect of the present disclosure, an information processing system 100 includes a client device 1 and a server device 2 connected to each other via a communication line 5. The client device 1 includes a first storage device 13, a second storage device 15, a first communication device 16, and a control circuit 14. The first storage device 13 stores data including an operating system, application programs, and user data. The second storage device 15 stores a firmware program. The first communication device 16 is connected to the server device 2 via the communication line 5. The control circuit 14 controls the first storage device 13 and the first communication device 16 by executing the firmware program. When the control circuit 14 receives an erase command from the server device 2 while the firmware program is being executed, it erases data stored in the first storage device 13. The server device 2 includes a second communication device 26 and a CPU 21. The second communication device 26 is connected to the client device 1 via the communication line 5. The CPU 21 acquires erasure permission information indicating whether erasure of data stored in the first storage device 13 is permitted, and if the erasure permission information indicates that erasure of the data is permitted, sends an erasure command to the client device 1.

With this configuration, even when using an existing API for erasing data, it is possible to check whether preparation for data erasure is complete and to reliably and easily erase data stored in the storage device 13.

According to one aspect of the present disclosure, the CPU 21 may obtain, from the client device 1, first permission information indicating whether erasure of data stored in the first storage device 13 is permitted, as erasure permission information.

This configuration makes it possible to obtain erasure permission information entered by the user of client device 1.

According to one aspect of the present disclosure, the information processing system may further include a first terminal device 3 connected to the server device 2 via a communication line 5. In this case, the CPU 21 may obtain, as erasure permission information, second permission information from the first terminal device 3 indicating whether erasure of data stored in the first storage device 13 is permitted.

This configuration makes it possible to obtain erasure permission information entered by a user of the first terminal device 3 (e.g., an administrator of the client device 1).

According to one aspect of the present disclosure, in response to a first start signal received from the client device 1, the CPU 21 may determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erase command to the client device 1.

This configuration allows data erasure to be initiated from the client device 1.

According to one aspect of the present disclosure, the server device 2 may further include an input device for receiving user operations. In this case, the CPU 21 may, in response to the user operation, determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erase command to the client device 1.

This configuration allows data erasure to be initiated from the server device 2.

According to one aspect of the present disclosure, the CPU 21 may periodically determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, may send an erasure command to the client device 1.

This configuration allows data erasure to be initiated automatically from the server device 2.

According to one aspect of the present disclosure, the CPU 21 may, in response to a second start signal received from the first terminal device 3, determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erasure command to the client device 1.

This configuration allows data erasure to be initiated from terminal device 3.

[Third embodiment]
[Configuration of the third embodiment]
In the third embodiment, the erasure process involving the client device 1, the server device 2, and the terminal device 3 will be described, among the client device 1, the server device 2, and the terminal devices 3 and 4 shown in Fig. 1. The client device 1, the server device 2, and the terminal device 3 according to the third embodiment are configured in the same manner as the corresponding components according to the first embodiment.

[Operation of the third embodiment]
FIG. 12 is a sequence diagram showing the erasure process according to the third embodiment.

In step S31, the CPU 21 of the server device 2 acquires the erasure permission information entered by the user (end user) from the client device 1, and also acquires the erasure permission information entered by the administrator A from the terminal device 3. The CPU 21 may acquire the erasure permission information entered by the user from the client device 1, as in step S21 of FIG. 9. Furthermore, the CPU 21 acquires the erasure permission information entered by the administrator A from the terminal device 3, as in step S21 of FIG. 9. The CPU 21 stores the erasure permission information acquired from the client device 1 and the terminal device 3 in the storage device 23.

In step S32, when the power of the client device 1 is turned on, the CPU 11 or control circuit 14 of the client device 1 receives a data erasure instruction from the user and sends a start command to the server device 2.

In step S33, the CPU 21 of the server device 2 responds to the start command by confirming that the erasure permission information entered by the user and the erasure permission information entered by administrator A have been obtained. The CPU 21 may confirm the erasure permission information entered by the user by sending and receiving an erasure permission request and an erasure permission response, similar to the process of FIG. 6. In step S34, the CPU 21 determines whether or not a predetermined erasure condition is met based on the erasure permission information. If the answer is YES, the CPU 21 sends an erasure command to the client device 1, and if the answer is NO, the processing ends. The erasure condition in step S34 is that both the erasure permission information entered by the user and the erasure permission information entered by administrator A indicate permission to erase data.

After sending the erase command in Figure 12, the processing is the same as in Figure 5.

According to the processing of Figure 12, if both the erasure permission information entered by the user and the erasure permission information entered by administrator A indicate permission to erase data, an erasure command is issued and the data stored in the storage device 13 is erased. On the other hand, if at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A does not indicate permission to erase data, an erasure command is not issued and the data stored in the storage device 13 is not erased. By determining whether the erasure conditions are met based on both pieces of erasure permission information, data stored in the storage device 13 of the client device 1 to be erased can be erased more reliably than in the first and second embodiments.

Figure 13 is a sequence diagram showing the erasure process related to the first variant of the third embodiment.

Step S31 in Figure 13 is the same as step S31 in Figure 12.

In step S33A, the CPU 21 of the server device 2 periodically checks whether the erasure permission information entered by the user and the erasure permission information entered by administrator A have been acquired. In step S34, the CPU 21 determines whether the predetermined erasure conditions are met based on the erasure permission information, and if YES, sends a startup command to the client device 1, and if NO, returns to step S31.

After sending the startup command in Figure 13, the processing is the same as in Figure 5.

According to the processing of Figure 13, as with the processing of Figure 12, the erasure condition is that both the erasure permission information entered by the user and the erasure permission information entered by administrator A indicate permission to erase data, so data stored in the memory device 13 of the client device 1 to be erased can be erased more reliably than in the first and second embodiments.

Figure 14 is a sequence diagram showing the erasure process related to the second variant of the third embodiment.

Step S31 in Figure 14 is the same as step S31 in Figure 12.

In step S35, the terminal device 3 receives an instruction to erase data from administrator A and sends a start command to the server device 2.

In step S33, the CPU 21 of the server device 2 responds to the start command by confirming that the erasure permission information entered by the user and the erasure permission information entered by administrator A have been acquired. In step S34, the CPU 21 determines whether the predetermined erasure conditions are met based on the erasure permission information, and if YES, sends a start command to the client device 1, and if NO, terminates the processing.

After sending the startup command in Figure 14, the processing is the same as in Figure 5.

According to the processing of Figure 14, as with the processing of Figure 12, the erasure condition is that both the erasure permission information entered by the user and the erasure permission information entered by administrator A indicate permission to erase data, so data stored in the memory device 13 of the client device 1 to be erased can be erased more reliably than in the first and second embodiments.

According to the processing of Figures 12 to 14, data erasure can be initiated by any of the client device 1, server device 2, and terminal device 3.

In the processing of Figures 12 to 14, the CPU 21 of the server device 2 may obtain the erasure permission information entered by administrator B from terminal device 4, instead of obtaining the erasure permission information entered by administrator A from terminal device 3. In this case, the erasure condition in step S34 is that both the erasure permission information entered by the user and the erasure permission information entered by administrator B indicate permission to erase data.

[Advantages of the third embodiment]
According to one aspect of the present disclosure, an information processing system 100 includes a client device 1 and a server device 2 connected to each other via a communication line 5. The client device 1 includes a first storage device 13, a second storage device 15, a first communication device 16, and a control circuit 14. The first storage device 13 stores data including an operating system, application programs, and user data. The second storage device 15 stores a firmware program. The first communication device 16 is connected to the server device 2 via the communication line 5. The control circuit 14 controls the first storage device 13 and the first communication device 16 by executing the firmware program. When the control circuit 14 receives an erase command from the server device 2 while the firmware program is being executed, it erases data stored in the first storage device 13. The server device 2 includes a second communication device 26 and a CPU 21. The second communication device 26 is connected to the client device 1 via the communication line 5. The CPU 21 acquires erasure permission information indicating whether erasure of data stored in the first storage device 13 is permitted, and if the erasure permission information indicates permission to erase the data, sends an erasure command to the client device 1. The CPU 21 acquires, from the client device 1, first permission information indicating whether erasure of data stored in the first storage device 13 is permitted, as erasure permission information. The information processing system further includes a first terminal device 3 connected to the server device 2 via a communication line 5. The CPU 21 acquires, from the first terminal device 3, second permission information indicating whether erasure of data stored in the first storage device 13 is permitted, as erasure permission information. If both the first permission information and the second permission information indicate permission to erase the data, the CPU 21 sends an erasure command to the client device 1.

With this configuration, even when using an existing API for erasing data, it is possible to confirm whether preparation for data erasure is complete and to reliably and easily erase data stored in the storage device 13. Furthermore, with this configuration, by determining whether the erasure conditions are met based on both the first permission information and the second permission information, it is possible to erase data stored in the storage device 13 of the client device 1 to be erased more reliably than in the first embodiment.

According to one aspect of the present disclosure, in response to a first start signal received from the client device 1, the CPU 21 may determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erase command to the client device 1.

This configuration allows data erasure to be initiated from the client device 1.

According to one aspect of the present disclosure, the server device 2 may further include an input device for receiving user operations. In this case, the CPU 21 may, in response to the user operation, determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erase command to the client device 1.

This configuration allows data erasure to be initiated from the server device 2.

According to one aspect of the present disclosure, the CPU 21 may periodically determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, may send an erasure command to the client device 1.

This configuration allows data erasure to be initiated automatically from the server device 2.

According to one aspect of the present disclosure, the CPU 21 may, in response to a second start signal received from the first terminal device 3, determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erasure command to the client device 1.

This configuration allows data erasure to be initiated from terminal device 3.

[Fourth embodiment]
[Configuration of the fourth embodiment]
In the fourth embodiment, an erasure process involving all of the client device 1, server device 2, and terminal devices 3 and 4 shown in Fig. 1 will be described. The client device 1, server device 2, and terminal devices 3 and 4 according to the fourth embodiment are configured in the same manner as the corresponding components according to the first embodiment. However, administrator B, who operates terminal device 4, has stronger authority than administrator A, who operates terminal device 3.

[Operation of the Fourth Embodiment]
FIG. 15 is a sequence diagram showing the erasure process according to the fourth embodiment.

In step S41, the CPU 21 of the server device 2 acquires the erasure permission information entered by the user (end user) from the client device 1, acquires the erasure permission information entered by administrator A from the terminal device 3, and acquires the erasure permission information entered by administrator B from the terminal device 4. The CPU 21 may acquire the erasure permission information entered by the user from the client device 1, as in the case of step S21 in FIG. 9. The CPU 21 may also acquire the erasure permission information entered by administrator A from the terminal device 3, and may acquire the erasure permission information entered by administrator B from the terminal device 4, as in the case of step S21 in FIG. 9. The CPU 21 stores the erasure permission information acquired from the client device 1 and the terminal devices 3 and 4 in the storage device 23.

In step S42, when the power of the client device 1 is turned on, the CPU 11 or control circuit 14 of the client device 1 receives a data erasure instruction from the user and sends a start command to the server device 2.

In step S43, the CPU 21 of the server device 2 responds to the start command by confirming that the erasure permission information entered by the user and the erasure permission information entered by administrators A and B have been obtained. The CPU 21 may confirm the erasure permission information entered by the user by sending and receiving an erasure permission request and an erasure permission response, similar to the process of FIG. 6. In step S44, the CPU 21 determines whether or not a specified erasure condition is met based on the erasure permission information. If the answer is YES, the CPU 21 sends an erasure command to the client device 1, and if the answer is NO, the processing ends. The erasure condition in step S44 is that both the erasure permission information entered by the user and the erasure permission information entered by administrator A indicate permission to erase data, or that the erasure permission information entered by administrator B indicates permission to erase data.

After sending the erase command in Figure 15, the processing is the same as in Figure 5.

According to the process of FIG. 15, by determining whether the erasure conditions are met based on both the erasure permission information entered by the user and the erasure permission information entered by administrator A, data stored in the storage device 13 of the client device 1 to be erased can be reliably erased. Also, as mentioned above, administrator B has stronger authority than administrator A. In this case, even if at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A does not indicate permission to erase data, data stored in the storage device 13 can be erased based on the erasure permission information entered by administrator B. For example, if it is not possible to wait until erasure permission information is entered by both the user and administrator A, data stored in the storage device 13 can be quickly erased based on the erasure permission information entered by administrator B.

Figure 16 is a sequence diagram showing the erasure process related to the first variant of the fourth embodiment.

Step S41 in Figure 16 is the same as step S41 in Figure 15.

In step S43A, the CPU 21 of the server device 2 periodically checks whether the erasure permission information entered by the user and the erasure permission information entered by administrators A and B has been acquired. In step S34, the CPU 21 determines whether the predetermined erasure conditions are met based on the erasure permission information, and if YES, sends a startup command to the client device 1, and if NO, returns to step S41.

After sending the startup command in Figure 16, the processing is the same as in Figure 5.

According to the processing of Figure 16, similar to the processing of Figure 15, by determining whether the erasure conditions are met based on both the erasure permission information entered by the user and the erasure permission information entered by administrator A, data stored in the storage device 13 of the client device 1 to be erased can be reliably erased. Furthermore, even if at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A does not indicate permission to erase data, data stored in the storage device 13 can be erased based on the erasure permission information entered by administrator B.

Figure 17 is a sequence diagram showing the erasure process related to the second variant of the fourth embodiment.

Step S41 in Figure 17 is the same as step S41 in Figure 15.

In step S45, the terminal device 3 receives an instruction to erase data from administrator A and sends a start command to the server device 2.

In step S43, the CPU 21 of the server device 2 responds to the start command by confirming that the erasure permission information entered by the user and the erasure permission information entered by administrators A and B has been acquired. In step S44, the CPU 21 determines whether the predetermined erasure conditions are met based on the erasure permission information, and if YES, sends a start command to the client device 1, and if NO, terminates the processing.

After sending the startup command in Figure 17, the processing is the same as in Figure 5.

According to the processing of Figure 17, similar to the processing of Figure 15, by determining whether the erasure conditions are met based on both the erasure permission information entered by the user and the erasure permission information entered by administrator A, data stored in the storage device 13 of the client device 1 to be erased can be reliably erased. Furthermore, even if at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A does not indicate permission to erase data, data stored in the storage device 13 can be erased based on the erasure permission information entered by administrator B.

Figure 18 is a sequence diagram showing the erasure process according to the third variant of the fourth embodiment. The start command may be sent from terminal device 4 to server device 2 instead of terminal device 3. In step S46, terminal device 4 receives an instruction to erase data from administrator B and sends the start command to server device 2. The other processes in Figure 18 are the same as those in Figure 17.

According to the processing of Figures 15 to 18, data erasure can be initiated by any of the client device 1, server device 2, and terminal devices 3 and 4.

Fig. 19 is a table comparing the first to fourth embodiments. According to the comparative example of Fig. 5, the erasure process is initiated by the administrator who operates the server device 2, and the erasure permission information is not used.
According to the first embodiment, the erasure process is initiated by an administrator operating the server device 2, and erasure permission is issued by the user of the client device 1. According to the second embodiment, the erasure process is initiated by an administrator A operating the user of the client device 1, the server device 2, or the terminal device 3, and erasure permission is issued by the user of the client device 1 or the administrator A operating the terminal device 3. According to the third embodiment, the erasure process is initiated by an administrator A operating the user of the client device 1, the server device 2, or the terminal device 3, and erasure permission is issued by both the user of the client device 1 and the administrator A operating the terminal device 3. According to the fourth embodiment, the erasure process is initiated by an administrator A operating the client device 1, the server device 2, or the terminal device 3, and erasure permission is issued by both the user of the client device 1 and the administrator A operating the terminal device 3, or by the administrator B operating the terminal device 4.

[Advantages of the fourth embodiment]
According to one aspect of the present disclosure, an information processing system 100 includes a client device 1 and a server device 2 connected to each other via a communication line 5. The client device 1 includes a first storage device 13, a second storage device 15, a first communication device 16, and a control circuit 14. The first storage device 13 stores data including an operating system, application programs, and user data. The second storage device 15 stores a firmware program. The first communication device 16 is connected to the server device 2 via the communication line 5. The control circuit 14 controls the first storage device 13 and the first communication device 16 by executing the firmware program. When the control circuit 14 receives an erase command from the server device 2 while the firmware program is being executed, it erases data stored in the first storage device 13. The server device 2 includes a second communication device 26 and a CPU 21. The second communication device 26 is connected to the client device 1 via the communication line 5. The CPU 21 acquires erasure permission information indicating whether erasure of data stored in the first storage device 13 is permitted, and if the erasure permission information indicates permission to erase the data, sends an erasure command to the client device 1. The CPU 21 acquires, from the client device 1, first permission information indicating whether erasure of data stored in the first storage device 13 is permitted, as erasure permission information. The information processing system further includes a first terminal device 3 connected to the server device 2 via the communication line 5. The CPU 21 acquires, from the first terminal device 3, second permission information indicating whether erasure of data stored in the first storage device 13 is permitted, as erasure permission information. If both the first permission information and the second permission information indicate permission to erase the data, the CPU 21 sends an erasure command to the client device 1. The information processing system further includes a second terminal device 4 connected to the server device 2 via the communication line 5. The CPU 21 acquires, from the second terminal device 4, third permission information indicating whether erasure of data stored in the first storage device 13 is permitted, as erasure permission information. If the third permission information indicates permission to erase data, the CPU 21 transmits an erase command to the client device 1 .

With this configuration, even when using an existing API for erasing data, it is possible to confirm whether preparation for data erasure is complete and to reliably and easily erase data stored in the storage device 13. Furthermore, with this configuration, it is possible to reliably erase data stored in the storage device 13 of the client device 1 to be erased by determining whether the erasure conditions are met based on both the first permission information and the second permission information. Furthermore, even if at least one of the erasure permission information entered by the user and the erasure permission information entered by administrator A does not indicate permission to erase data, it is possible to erase data stored in the storage device 13 based on the erasure permission information entered by administrator B.

According to one aspect of the present disclosure, in response to a first start signal received from the client device 1, the CPU 21 may determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erase command to the client device 1.

This configuration allows data erasure to be initiated from the client device 1.

According to one aspect of the present disclosure, the server device 2 may further include an input device for receiving user operations. In this case, the CPU 21 may, in response to the user operation, determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erase command to the client device 1.

This configuration allows data erasure to be initiated from the server device 2.

According to one aspect of the present disclosure, the CPU 21 may periodically determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, may send an erasure command to the client device 1.

This configuration allows data erasure to be initiated automatically from the server device 2.

According to one aspect of the present disclosure, the CPU 21 may, in response to a second start signal received from the first terminal device 3, determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erasure command to the client device 1.

This configuration allows data erasure to be initiated from terminal device 3.

According to one aspect of the present disclosure, the CPU 21 may, in response to a third start signal received from the second terminal device 4, determine whether the erasure permission information indicates permission to erase data, and if the erasure permission information indicates permission to erase data, send an erasure command to the client device 1.

This configuration allows data erasure to be initiated from terminal device 4.

Other Embodiments
As described above, the embodiments have been described as examples of the technology disclosed in this application. However, the technology in this disclosure is not limited to these, and can be applied to embodiments in which modifications, substitutions, additions, omissions, etc. are made as appropriate. Furthermore, it is also possible to combine the components described in the above embodiments to create new embodiments. Therefore, other embodiments will be described below as examples.

In the first to fourth embodiments, if it is determined that the deletion conditions are not met, the server device 2 may output some kind of error code.

In the first to fourth embodiments, the sending of the termination command and step S4 may be omitted. In this case, after the data erasure is complete, the power to the client device 1 may not be turned off, and the erasure result may be displayed on the display device 18 of the client device 1.

The data backup described with reference to Figure 8 may also be applied to the processes of Figures 7, 9 to 18.

In the example of Figure 2, the client device 1 is described as having only one storage device 13 from which stored data is to be erased, but the client device 1 may also have multiple storage devices 13 from which stored data is to be erased. The multiple storage devices 13 may be configured, for example, as a RAID (Redundant Array of Inexpensive Disks) device. In this case, the multiple storage devices 13 are treated as a single device, and the data stored therein is erased as a single device. Alternatively, the multiple storage devices 13 may be treated individually, and the data stored therein may be erased individually.

Like each client device 1, administrator A's terminal device 3 may also be configured to allow external remote access when the device is powered off, for example, using Intel AMT HLAPI. In this case, in the processes of FIGS. 9 to 18, the server device 2 may obtain the erasure permission information entered by administrator A immediately before determining whether the erasure conditions are met, rather than obtaining it in advance in steps S21, S31, and S41. To this end, the server device 2 sends a startup command to the terminal device 3. In response to the startup command, the terminal device 3 turns on the power to the terminal device 3, starts the operating system, and sends a startup response to the server device 2 indicating the completion of startup. The server device 2 then obtains the erasure permission information entered by administrator A by sending and receiving an erasure permission request and an erasure permission response to the terminal device 3. Similarly, administrator B's terminal device 4 may also be configured to allow external remote access when the device is powered off.

In the first to fourth embodiments, the cases where the user, administrator A, and/or administrator B issue erasure authorization have been described. However, in addition to or instead of this, other parties may issue erasure authorization. In this case, the server device 2 may perform logical operations based on the erasure authorization information entered by multiple parties to determine whether the erasure conditions are met. For example, in the fourth embodiment, the server device 2 may also refer to erasure authorization information entered by an administrator C different from administrators A and B, such as administrator C with weaker authority than administrator B. In this case, the erasure conditions are that both the erasure authorization information entered by the user and the erasure authorization information entered by administrator A indicate permission to erase data, that the erasure authorization information entered by administrator B indicates permission to erase data, or that both the erasure authorization information entered by administrator A and the erasure authorization information entered by administrator C indicate permission to erase data. Even if neither the erasure authorization information entered by the user nor the erasure authorization information entered by administrator B indicates permission to erase data, data stored in the storage device 13 can be erased based on the erasure authorization information entered by administrators A and C. This allows the number of people to whom erasure authorization is issued to be increased as desired and allows the erasure conditions to be set as desired, thereby improving the convenience of erasure.

As described above, the embodiments have been described as examples of the technology disclosed herein. For this purpose, the accompanying drawings and detailed description have been provided.

Therefore, the components described in the accompanying drawings and detailed description may include not only components essential for solving the problem, but also components that are not essential for solving the problem in order to illustrate the above technology. Therefore, the fact that these non-essential components are described in the accompanying drawings or detailed description should not be interpreted as immediately indicating that these non-essential components are essential.

Furthermore, since the above-described embodiments are intended to illustrate the technology disclosed herein, various modifications, substitutions, additions, omissions, etc. may be made within the scope of the claims or their equivalents.

[Summary of the embodiment]
According to the information processing device according to the first aspect of the present disclosure,
An information processing device connected to at least one electronic device via a communication line,
The electronic device is
a first storage device for storing data including an operating system, application programs, and user data;
a second storage device for storing a firmware program;
a first communication device connected to the information processing device via the communication line;
a first control circuit that controls the first storage device and the first communication device by executing the firmware program, and that erases data stored in the first storage device when an erase command is received from the information processing device during execution of the firmware program;
The information processing device includes:
a second communication device connected to the electronic device via the communication line;
and a second control circuit that acquires erasure permission information indicating whether erasure of data stored in the first storage device is permitted, and sends the erasure command to the electronic device if the erasure permission information indicates that erasure of the data is permitted.

According to the information processing device according to the second aspect of the present disclosure, in the information processing device according to the first aspect,
The second control circuit acquires, as the erasure permission information, first permission information indicating whether erasure of data stored in the first storage device is permitted from the electronic device.

According to the information processing device according to the third aspect of the present disclosure, in the information processing device according to the second aspect,
the second control circuit transmits an erase permission request to the electronic device, the erase permission request requesting the first permission information;
The first control circuit transmits the first permission information to the information processing device in response to the erase permission request during execution of the firmware program.

According to the information processing device according to the fourth aspect of the present disclosure, in the information processing device according to the first aspect,
the second communication device is further connected to a first terminal device via the communication line;
The second control circuit acquires, as the erasure permission information, second permission information indicating whether erasure of data stored in the first storage device is permitted from the first terminal device.

According to the information processing device according to the fifth aspect of the present disclosure, in the information processing device according to the second aspect,
the second communication device is further connected to a first terminal device via the communication line;
The second control circuit includes:
acquiring, from the first terminal device, second permission information indicating whether erasure of data stored in the first storage device is permitted, as the erasure permission information;
If both the first permission information and the second permission information indicate permission to erase the data, the erase command is sent to the electronic device.

According to the information processing device according to the sixth aspect of the present disclosure, in the information processing device according to the fifth aspect,
the second communication device is further connected to a second terminal device via the communication line;
The second control circuit includes:
acquiring, from the second terminal device, third permission information indicating whether erasure of the data stored in the first storage device is permitted, as the erasure permission information;
If the third permission information indicates permission to erase the data, the erase command is sent to the electronic device.

According to the information processing device according to the seventh aspect of the present disclosure, in the information processing device according to one of the first to sixth aspects,
The second control circuit determines whether the erasure permission information indicates permission to erase the data in response to a first start signal received from the electronic device, and sends the erase command to the electronic device if the erasure permission information indicates permission to erase the data.

According to an information processing device according to an eighth aspect of the present disclosure, in the information processing device according to one of the first to sixth aspects,
the information processing device further includes an input device for receiving a user operation;
In response to the user operation, the second control circuit determines whether the erasure permission information indicates permission to erase the data, and if the erasure permission information indicates permission to erase the data, sends the erasure command to the electronic device.

According to an information processing device according to a ninth aspect of the present disclosure, in the information processing device according to one of the first to sixth aspects,
The second control circuit periodically determines whether the erasure permission information indicates permission to erase the data, and if the erasure permission information indicates permission to erase the data, sends the erasure command to the electronic device.

According to an information processing device according to a tenth aspect of the present disclosure, in the information processing device according to one of the fourth to sixth aspects,
The second control circuit determines whether the erasure permission information indicates permission to erase the data in response to a second start signal received from the first terminal device, and if the erasure permission information indicates permission to erase the data, sends the erasure command to the electronic device.

According to an information processing device according to an eleventh aspect of the present disclosure, in the information processing device according to the sixth aspect,
The second control circuit determines whether the erasure permission information indicates permission to erase the data in response to a third start signal received from the second terminal device, and sends the erasure command to the electronic device if the erasure permission information indicates permission to erase the data.

According to an information processing device according to a twelfth aspect of the present disclosure, in the information processing device according to one of the first to eleventh aspects,
When the first control circuit receives the erase command from the information processing device while the firmware program is being executed, the first control circuit unconditionally erases the data stored in the first storage device.

According to the information processing system according to the thirteenth aspect of the present disclosure,
An information processing system including an electronic device and an information processing device connected to each other via a communication line,
The electronic device is
a first storage device for storing data including an operating system, application programs, and user data;
a second storage device for storing a firmware program;
a first communication device connected to the information processing device via the communication line;
a first control circuit that controls the first storage device and the first communication device by executing the firmware program, and that erases data stored in the first storage device when an erase command is received from the information processing device during execution of the firmware program;
The information processing device includes:
a second communication device connected to the electronic device via the communication line;
and a second control circuit that acquires erasure permission information indicating whether erasure of data stored in the first storage device is permitted, and sends the erasure command to the electronic device if the erasure permission information indicates that erasure of the data is permitted.

According to an information processing system according to a fourteenth aspect of the present disclosure, in the information processing system according to the thirteenth aspect,
the information processing system further includes a third storage device connected to the electronic device via the communication line;
The first control circuit backs up the data stored in the first storage device to the third storage device before erasing the data stored in the first storage device.

According to an information processing method according to a fifteenth aspect of the present disclosure,
An information processing method for an information processing system including an electronic device and an information processing device connected to each other via a communication line,
The electronic device is
a first storage device for storing data including an operating system, application programs, and user data;
a second storage device for storing a firmware program;
a communication device connected to the information processing device via the communication line;
a control circuit for controlling the first storage device and the communication device by executing the firmware program;
The information processing method includes:
acquiring, by the information processing device, erasure permission information indicating whether erasure of data stored in the first storage device is permitted;
transmitting an erase command from the information processing device to the electronic device when the erase permission information indicates that erasure of the data is permitted;
When the electronic device receives an erase command from the information processing device while the firmware program is being executed, the electronic device erases the data stored in the first storage device.

An electronic device according to one aspect of the present disclosure is useful for erasing data stored in a storage device.

1, 1-1 to 1-3: Client device 2: Server device 3, 4: Terminal device 5: Communication line 10: Bus 11: CPU
12 RAM
13 Storage device 14 Control circuit 15 Storage device 16 Communication device 17 Input device 18 Display device 20 Bus 21 CPU
22 RAM
23 Storage device 26 Communication device 27 Input device 28 Display device 30 Bus 31 CPU
32 RAM
33 Storage device 36 Communication device 37 Input device 38 Display device

Claims (15)

An information processing device connected to at least one electronic device via a communication line,
The electronic device is
a first storage device for storing data including an operating system, application programs, and user data;
a second storage device for storing a firmware program;
a first communication device connected to the information processing device via the communication line;
a first control circuit that controls the first storage device and the first communication device by executing the firmware program, and that erases data stored in the first storage device when an erase command is received from the information processing device during execution of the firmware program;
The information processing device includes:
a second communication device connected to the electronic device via the communication line;
a second control circuit that acquires erasure permission information indicating whether erasure of data stored in the first storage device is permitted, and transmits the erasure command to the electronic device when the erasure permission information indicates that erasure of the data is permitted;
the second communication device is further connected to a first terminal device and a second terminal device via the communication line;
The second control circuit includes:
acquiring, from the electronic device, first permission information indicating whether erasure of data stored in the first storage device is permitted, as the erasure permission information;
acquire, from the first terminal device, second permission information indicating whether erasure of data stored in the first storage device is permitted, as the erasure permission information, and if both the first permission information and the second permission information indicate permission to erase the data, transmit the erasure command to the electronic device;
acquiring, as the erasure permission information, third permission information indicating whether erasure of the data stored in the first storage device is permitted from the second terminal device, and transmitting the erasure command to the electronic device when the third permission information indicates that erasure of the data is permitted;
Information processing device. (delete) the second control circuit transmits an erase permission request to the electronic device, the erase permission request requesting the first permission information;
the first control circuit transmits the first permission information to the information processing device in response to the erasure permission request during execution of the firmware program;
2. The information processing device according to claim 1. (delete) (delete) (delete) the second control circuit, in response to a first start signal received from the electronic device, determines whether the erasure permission information indicates permission to erase the data, and sends the erasure command to the electronic device if the erasure permission information indicates permission to erase the data;
7. The information processing device according to claim 1. the information processing device further includes an input device for receiving a user operation;
the second control circuit determines whether the erasure permission information indicates permission to erase the data in response to the user operation, and sends the erasure command to the electronic device if the erasure permission information indicates permission to erase the data.
4. The information processing device according to claim 1. the second control circuit periodically determines whether the erasure permission information indicates permission to erase the data, and if the erasure permission information indicates permission to erase the data, sends the erasure command to the electronic device.
4. The information processing device according to claim 1. the second control circuit, in response to a second start signal received from the first terminal device, determines whether the erasure permission information indicates permission to erase the data, and sends the erasure command to the electronic device if the erasure permission information indicates permission to erase the data;
4. The information processing device according to claim 1. the second control circuit, in response to a third start signal received from the second terminal device, determines whether the erasure permission information indicates permission to erase the data, and sends the erasure command to the electronic device if the erasure permission information indicates permission to erase the data;
4. The information processing device according to claim 1. the first control circuit unconditionally erases the data stored in the first storage device when the erase command is received from the information processing device during execution of the firmware program;
2. The information processing device according to claim 1. An information processing system including an electronic device and an information processing device connected to each other via a communication line,
The electronic device is
a first storage device for storing data including an operating system, application programs, and user data;
a second storage device for storing a firmware program;
a first communication device connected to the information processing device via the communication line;
a first control circuit that controls the first storage device and the first communication device by executing the firmware program, and that erases data stored in the first storage device when an erase command is received from the information processing device during execution of the firmware program;
The information processing device includes:
a second communication device connected to the electronic device via the communication line;
a second control circuit that acquires erasure permission information indicating whether erasure of data stored in the first storage device is permitted, and transmits the erasure command to the electronic device when the erasure permission information indicates that erasure of the data is permitted;
the second communication device is further connected to a first terminal device and a second terminal device via the communication line;
The second control circuit includes:
acquiring, from the electronic device, first permission information indicating whether erasure of data stored in the first storage device is permitted, as the erasure permission information;
acquire, from the first terminal device, second permission information indicating whether erasure of the data stored in the first storage device is permitted, as the erasure permission information, and if both the first permission information and the second permission information indicate permission to erase the data, transmit the erasure command to the electronic device;
acquiring, as the erasure permission information, third permission information indicating whether erasure of the data stored in the first storage device is permitted from the second terminal device, and transmitting the erasure command to the electronic device when the third permission information indicates that erasure of the data is permitted;
Information processing system. the information processing system further includes a third storage device connected to the electronic device via the communication line;
the first control circuit backs up the data stored in the first storage device to the third storage device before erasing the data stored in the first storage device;
14. The information processing system according to claim 13. An information processing method for an information processing system including an electronic device and an information processing device connected to each other via a communication line,
The electronic device is
a first storage device for storing data including an operating system, application programs, and user data;
a second storage device for storing a firmware program;
a communication device connected to the information processing device via the communication line;
a control circuit for controlling the first storage device and the communication device by executing the firmware program;
The information processing method includes:
acquiring, by the information processing device, erasure permission information indicating whether erasure of data stored in the first storage device is permitted;
transmitting an erase command from the information processing device to the electronic device when the erase permission information indicates that erasure of the data is permitted;
erasing the data stored in the first storage device when the electronic device receives an erasure command from the information processing device while the firmware program is being executed;
the information processing device is further connected to a first terminal device and a second terminal device via the communication line;
The information processing method includes:
The information processing device acquires, from the electronic device, first permission information indicating whether erasure of data stored in the first storage device is permitted, as the erasure permission information;
the information processing device acquires, from the first terminal device, second permission information indicating whether erasure of the data stored in the first storage device is permitted, as the erasure permission information, and when both the first permission information and the second permission information indicate permission to erase the data, transmits the erasure command from the information processing device to the electronic device;
the information processing device acquires, from the second terminal device, third permission information indicating whether erasure of the data stored in the first storage device is permitted or not, as the erasure permission information, and when the third permission information indicates permission to erase the data, the information processing device transmits the erasure command to the electronic device.
Information processing methods.