Information processing system and program

Abstract

To make it possible to complete detection of alteration of a module for performing processing having temporal restriction and the processing by the module, within a time limit.SOLUTION: An image processing device 10 comprises a control section 11 comprising a classification section 102 for classifying a plurality of modules constituting the image processing device 10 into a first module required for performing predetermined processing within a predetermined time after actuation by reception of a signal from the outside and a second module not required for performing the processing within the time; and an alteration detection section 103 for confirming that the first module is not altered and, after completion of processing of the first module actuated by control of an actuation control section 104, confirming that the second module is not altered.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to an information processing system and a program. [Background technology]

[0002] 2. Description of the Related Art There is known a technique for connecting a mobile terminal to an image processing device such as a multifunction peripheral that is capable of scanning and printing documents, and for enabling remote operation from the mobile terminal (for example, see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2022-066044 A Summary of the Invention [Problem to be solved by the invention]

[0004] In such a technique, since tampering is detected for each module that is started, the time required to start all the modules becomes longer than when the process for detecting tampering is not performed. As a result, among the modules that constitute the information processing device, modules that perform time-sensitive processes may not be able to complete the processes within the time limit.

[0005] An object of the present invention is to detect tampering with a module that performs a time-sensitive process and to complete the process by that module within a time limit. [Means for solving the problem]

[0006] The invention described in claim 1 is an information processing system comprising one or more processors, the one or more processors classifying a plurality of modules constituting an information processing device into a first module that is required to perform a predetermined processing within a predetermined time after startup upon receiving a signal from an external source, and a second module that is not required to perform the processing within that time, and after confirming that the first module has not been tampered with and completing the processing by the first module, confirming that the second module has not been tampered with. The invention described in claim 2 is the information processing system described in claim 1, characterized in that the first module is a module that is required to perform response processing as the processing within the time period. The invention described in claim 3 is the information processing system described in claim 2, characterized in that the information processing device is an image processing device, the external signal is an information receiving terminal start-up signal from an exchange, and the response processing is a process in which the first module transmits a primary response signal toward the exchange. The invention described in claim 4 is the information processing system described in claim 3, characterized in that, when a fax card, which is hardware for sending and receiving facsimile signals, is installed in the image processing device, the one or more processors classify the firmware of the fax card into a boot loader that starts the operating system, the first module, and the second module. The invention described in claim 5 is the information processing system described in claim 4, characterized in that when the fax card is powered on due to the arrival of the information receiving terminal start-up signal, the one or more processors confirm that the boot loader has not been tampered with, confirm that the first module has not been tampered with, and after the first module has completed the process of sending the primary response signal, confirm that the second module has not been tampered with. The invention described in claim 6 is the information processing system described in claim 5, characterized in that the one or more processors, for each of the multiple fax cards, confirm that the boot loader has not been tampered with, confirm that the first module has not been tampered with, and confirm that the second module has not been tampered with after completing the process of the first module sending the first response signal. The invention described in claim 7 is the information processing system described in claim 1, characterized in that the multiple modules include a module that enables switching settings for whether or not to perform the processing. The invention described in claim 8 is the information processing system described in claim 7, characterized in that the one or more processors classify modules that enable the switching setting into the first module and the second module based on the state of the switching setting. The invention described in claim 9 is a program that enables a computer to realize the following functions: classifying multiple modules that constitute an information processing device into a first module that is required to perform a predetermined processing within a predetermined time after startup upon receiving a signal from an external source, and a second module that is not required to perform the processing within that time; confirming that the first module has not been tampered with, and confirming that the second module has not been tampered with after completing the processing by the first module. Effect of the Invention

[0007] According to the present invention of claim 1, a plurality of modules constituting an information processing device are classified into a first module that is required to perform a predetermined process within a predetermined time after being started by receiving a signal from an external device, and a second module that is not required to perform the process within that time. Then, after it is confirmed that the first module has not been tampered with and the first module has performed the predetermined process, it is confirmed that the second module has not been tampered with. This makes it possible to detect tampering of the first module and complete the predetermined process by the first module within the time limit. According to the present invention of claim 2, after the first module is confirmed to have not been tampered with and the first module performs a response process, the second module is confirmed to have not been tampered with. This makes it possible to complete the detection of tampering of the first module and the response process by the first module within a time limit. According to the present invention of claim 3, after it is confirmed that the first module constituting the image processing device has not been tampered with and the first module transmits a primary response signal to the exchange, it is confirmed that the second module has not been tampered with. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting the primary response signal within a time limit. According to the present invention of claim 4, when a fax card is installed in an image processing device, the firmware of the fax card is classified into a boot loader, a first module, and a second module. Then, after it is confirmed that the first module has not been tampered with and a primary response signal is transmitted from the first module to the exchange, it is confirmed that the second module has not been tampered with. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting the primary response signal within a time limit. According to the present invention of claim 5, the firmware of the fax card mounted on the image processing device is classified into a boot loader, a first module, and a second module. Then, after it is confirmed that the first module has not been tampered with and a first response signal is transmitted from the first module, it is confirmed that the second module has not been tampered with. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting the first response signal within a time limit. According to the present invention of claim 6, when a plurality of fax cards are installed in the image processing device, after the confirmation that the boot loader has not been tampered with, the confirmation that the first module has not been tampered with, and the process of the first module transmitting the primary response signal are completed, the confirmation that the second module has not been tampered with is performed for each fax card. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting the primary response signal within the time limit for each of the plurality of fax cards. According to the present invention of claim 7, since modules that allow a switching setting as to whether or not to perform a predetermined process are also classified, classification based on the state of the switching setting is possible. According to the present invention of claim 8, a module configured to perform a predetermined processing can be classified as a first module, and a module configured not to perform the predetermined processing can be classified as a second module. According to the present invention of claim 9, a plurality of modules constituting an information processing device are classified into a first module that is required to perform a predetermined process within a predetermined time after being started by receiving a signal from an external device, and a second module that is not required to perform the process within the time. Then, after it is confirmed that the first module has not been tampered with and the first module has performed the predetermined process, it is confirmed that the second module has not been tampered with. This makes it possible to detect tampering of the first module and complete the predetermined process by the first module within the time limit. [Brief description of the drawings]

[0008] [Figure 1] 1 is a diagram illustrating an example of an overall configuration of an information processing system to which an embodiment of the present invention is applied. [Diagram 2] FIG. 2 illustrates an example of a hardware configuration of an image processing apparatus. [Diagram 3] FIG. 2 illustrates an example of a functional configuration of a control unit of the image processing apparatus. [Figure 4] 4 is a flowchart showing a flow of processing by the image processing device. [Diagram 5] 11A and 11B are diagrams showing a specific example of timing of transmission and reception of various signals performed before transmission and reception of a facsimile document is started between an image processing device and a switching device; [Figure 6] 1A is a diagram showing a conventional example in which a fax function module made up of multiple modules is not classified, and FIG. 1B is a diagram showing a specific example in which a fax function module made up of multiple modules is classified into a first module and a second module. [Figure 7] FIG. 13 is an image diagram showing a specific example in which a plurality of fax cards are mounted in an image processing device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. <Configuration of information processing system> FIG. 1 is a diagram showing an example of the overall configuration of an information processing system 1 to which the present embodiment is applied. The information processing system 1 is configured by connecting an image processing device 10 and an exchange 30 via a network 90. ​​The network 90 is, for example, a public line network, a LAN (Local Area Network), the Internet, or the like.

[0010] (Image Processing Device) The image processing device 10 is an information processing device that performs various processes in response to input operations by a user who uses the information processing system 1. For example, the image processing device 10 performs a process of forming an image on a medium such as paper, a process of outputting the recording medium on which the image is formed, a process of reading an image formed on paper or the like, a process of facsimile transmitting the read image, a process of acquiring various transmitted information, etc. Examples of the image processing device 10 include a so-called electrophotographic multifunction machine that forms a toner image on the printing surface of paper, a so-called inkjet printer that ejects ink onto the printing surface of paper, and the like.

[0011] The image processing device 10 stores and manages various types of information in a database. The image processing device 10 also acquires various types of information transmitted from the exchange 30 via the network 90 and performs various processes. The image processing device 10 also transmits various types of information to the exchange 30.

[0012] For example, the image processing device 10 classifies a plurality of modules constituting the device itself. A "module" refers to a component when hardware is divided by function. The image processing device 10 classifies a plurality of modules into a first module and a second module. Among them, the "first module" refers to a module that is required to perform a predetermined process within a predetermined time (hereinafter referred to as a "time limit") after being started by receiving a signal from the exchange 30. Also, the "second module" refers to a module that is not required to perform a predetermined process within a time limit. In this embodiment, the "predetermined process" performed by the first module is a response process for the exchange 30. Also, the process performed by the first module is not limited to the process that is required to be performed within a time limit, and may include other processes.

[0013] In this embodiment, the image processing device 10 is equipped with hardware (hereinafter referred to as a "fax card") that enables transmission and reception of facsimile documents. The image processing device 10 classifies the firmware of the fax card into a boot loader that starts up the operating system and multiple modules (hereinafter referred to as "fax function modules") for transmitting and receiving facsimile documents. The image processing device 10 further classifies the fax function module, which is made up of multiple modules, into a first module and a second module.

[0014] Modules classified as the first module include, for example, a module that transmits a primary response signal within a time limit as a response process to an information receiving terminal activation signal (hereinafter referred to as a "CAR signal") from the exchange 30. The CAR signal is a signal that is transmitted to check whether the receiving side supports the so-called calling number notification service. Modules classified as the first module also include a module that receives a modem signal transmitted from the exchange 30 after transmitting a primary response signal, and a module that transmits a reception completion signal to the exchange 30 indicating that the modem signal has been received. The modem signal includes, for example, information such as the calling number. Modules classified as the second module include, for example, a module that starts transmitting and receiving a facsimile document after transmitting a secondary response signal as a response process to a call signal (hereinafter referred to as an "IR signal") from the exchange 30.

[0015] The image processing device 10 checks whether a plurality of modules constituting the device have not been tampered with. For example, when the firmware of a fax card mounted on the image processing device 10 is classified into a boot loader, a first module, and a second module, the image processing device 10 checks whether these have not been tampered with. Specifically, when the fax card mounted on the image processing device 10 detects an incoming CAR signal and is turned on, the fax card checks whether the boot loader has not been tampered with. Note that the method by which the fax card detects an incoming CAR signal is not particularly limited. For example, an element such as a photocoupler may detect the incoming CAR signal.

[0016] When the fax card mounted on the image processing device 10 confirms that the boot loader has not been tampered with, it starts the boot loader. After starting up, the boot loader confirms that the first module has not been tampered with, and starts up the first module. After starting up, the first module transmits a primary response signal to the exchange 30 as a response process to the CAR signal from the exchange 30. After that, when a modem signal is transmitted from the exchange 30, the first module receives the modem signal and transmits a reception completion signal to the exchange 30. Next, the first module confirms that the second module has not been tampered with, and starts up the second module. That is, after completing the process of transmitting the primary response signal, the first module confirms that the second module has not been tampered with. Here, "the process of transmitting the primary response signal has been completed" means that after performing the process of transmitting the primary response signal, the process of receiving the modem signal transmitted based on the process of transmitting the primary response signal and transmitting the reception completion signal has been completed. After being started, the second module transmits a secondary response signal to the exchange 30 as a response process to the IR signal from the exchange 30, and starts receiving a facsimile document. The configuration and processing of the image processing device 10 will be described in detail later.

[0017] (exchange machine) The exchange 30 is a device that relays signals on a public line network. The exchange 30 switches the line connection in accordance with the transmission process of a facsimile document, so that a facsimile signal can be transmitted from the sender of the facsimile document to the fax card of the image processing device 10, which is the connection destination.

[0018] The above-mentioned configuration of the information processing system 1 is an example, and it is sufficient that the information processing system 1 as a whole has the function of realizing the above-mentioned processing. Therefore, some or all of the functions of the above-mentioned processing may be shared or cooperated within the information processing system 1. That is, some or all of the functions of the exchange 30 may be functions of the image processing device 10, and some or all of the functions of the image processing device 10 may be functions of the exchange 30. Furthermore, some or all of the functions of the exchange 30 and the image processing device 10 constituting the information processing system 1 may be transferred to another server or the like (not shown). This promotes processing in the information processing system 1 as a whole, and also makes it possible for the processes to be complemented.

[0019] (Hardware configuration of image processing device) FIG. 2 is a diagram illustrating an example of a hardware configuration of the image processing device 10. As shown in FIG. The image processing device 10 has a control unit 11, a memory 12, a storage unit 13, a communication unit 14, an operation unit 15, a display unit 16, a reading unit 17, and an image forming unit 18. These units are connected to each other via a data bus, an address bus, a PCI (Peripheral Component Interconnect) bus, etc.

[0020] The control unit 11 is a processor that controls the functions of the exchange 30 through the execution of various software such as an OS (operating system) and application software. The control unit 11 is, for example, composed of a CPU (Central Processing Unit). The memory 12 is a storage area that stores various software and data used for executing the software, and is used as a working area for calculations. The memory 12 is, for example, composed of a RAM (Random Access Memory), etc.

[0021] The storage unit 13 is a storage area for storing input data for various software programs and output data from various software programs. The storage unit 13 is composed of, for example, a hard disk drive (HDD), a solid state drive (SSD), a semiconductor memory, etc., used for storing programs and various setting data. The storage unit 13 stores a database for storing various information.

[0022] The communication unit 14 transmits and receives data between the exchange 30 and the outside via the network 90. ​​The operation unit 15 is composed of, for example, a software keyboard, mechanical buttons, switches, etc., and accepts input operations. The operation unit 15 also includes a touch sensor that constitutes a touch panel integrally with the display unit 16. The display unit 16 is composed of, for example, a liquid crystal display or an organic EL (Electro Luminescence) display used to display information, and displays images, text data, etc.

[0023] The reading unit 17 reads an image recorded on a medium such as paper (e.g., a paper document) as a recording medium. The reading unit 17 is composed of, for example, a CCD type scanner that reduces the reflected light of light irradiated from a light source onto an original document using a lens and receives the light with a CCD (Charge Coupled Devices), or a CIS type scanner that receives the reflected light of light irradiated sequentially from an LED light source onto an original document using a CIS (Contact Image Sensor). The image forming unit 18 forms an image to be printed on the printing surface of paper as a recording medium, for example, by an electrophotographic method or an inkjet method. These units are connected by a data bus, an address bus, a PCI bus, etc.

[0024] (Switch hardware configuration) The hardware configuration of the exchange 30 is similar to the hardware configuration of the image processing device 10 shown in Fig. 2 except for the reading unit 17 and the image forming unit 18. That is, the exchange 30 is equipped with a control unit, a memory, a storage unit, a communication unit, an operation unit, and a display unit that have the same functions as the control unit 11, the memory 12, the storage unit 13, the communication unit 14, the operation unit 15, and the display unit 16 shown in Fig. 2, respectively, and illustration and description thereof will be omitted.

[0025] (Functional configuration of the control unit of the image processing device) FIG. 3 is a diagram showing an example of a functional configuration of the control unit 11 of the image processing device 10. As shown in FIG. In the control unit 11 of the image processing device 10, an acquisition unit 101, a classification unit 102, a tamper detection unit 103, a start control unit 104, and a transmission control unit 105 function.

[0026] The acquisition unit 101 acquires various types of information. For example, the acquisition unit 101 acquires various types of information transmitted from the exchange 30. Examples of the information transmitted from the exchange 30 include a CAR signal, an IR signal, and a facsimile document.

[0027] The classification unit 102 classifies a plurality of modules constituting the image processing device 10. For example, the classification unit 102 classifies the plurality of modules into a first module and a second module. Specifically, for example, the classification unit 102 classifies firmware of a fax card mounted on the image processing device 10 into a boot loader that starts up an operating system and a module that transmits and receives facsimile documents, and further classifies the module that transmits and receives facsimile documents into a first module and a second module.

[0028] Here, among the multiple modules to be classified by the classification unit 102, there may be a module that can be switched between performing processing as a first module or a second module. In this case, the classification unit 102 classifies the module that can be switched into either a first module or a second module based on the state of the switching setting.

[0029] The tampering detection unit 103 detects tampering of a plurality of modules constituting the image processing device 10. For example, when a fax card mounted on the image processing device 10 detects an incoming CAR signal and the fax card is powered ON, the fax card functions as the tampering detection unit 103 and detects tampering of the boot loader. The fax card functioning as the tampering detection unit 103 detects tampering of the boot loader without waiting for the control board, user interface panel, etc. to start up.

[0030] When a boot loader that has been confirmed not to have been tampered is started, the boot loader detects tampering of the first module by functioning as tampering detection unit 103. Also, when a first module that has been confirmed not to have been tampered is started, the first module detects tampering of the second module by functioning as tampering detection unit 103.

[0031] When the start control unit 104 confirms that the tampering detection unit 103 has not detected tampering, it performs control to start various modules. For example, when a fax card confirms that the boot loader has not been tampered with, it functions as the start control unit 104 to perform control to start the boot loader. Furthermore, when the boot loader confirms that the first module has not been tampered with after the boot, it functions as the start control unit 104 to perform control to start the first module. Furthermore, when the first module confirms that the second module has not been tampered with after the boot, it functions as the start control unit 104 to perform control to start the second module.

[0032] The transmission control unit 105 performs control for transmitting various types of information via the communication unit 14 (see FIG. 2). Specifically, the transmission control unit 105 performs control for transmitting various types of information toward the exchange 30. For example, a fax card mounted on the image processing device 10 functions as the transmission control unit 105 to perform control for transmitting information such as a primary response signal and a secondary response signal toward the exchange 30.

[0033] <Processing flow> (Processing flow of image processing device) FIG. 4 is a flowchart showing an example of the flow of processing by the image processing device 10. The image processing device 10 classifies the firmware of the fax card installed in the image processing device 10 into a boot loader and a fax function module (step 401). Next, the image processing device 10 classifies the fax function module, which is made up of a plurality of modules, into a first module and a second module (step 402).

[0034] When the fax card installed in the image processing device 10 is powered on by the arrival of a CAR signal (YES in step 403), it checks whether the boot loader has been tampered with (step 404). On the other hand, if the fax card is not powered on because the CAR signal has not been received (NO in step 403), the fax card repeats the determination process in step 403 until the fax card is powered on by the arrival of a CAR signal.

[0035] If the fax card detects that the boot loader has been tampered with (YES in step 405), it notifies the user of the tampering without starting the boot loader (step 417) and ends the process (END). On the other hand, if the fax card does not detect that the boot loader has been tampered with (NO in step 405), it starts the boot loader (step 406).

[0036] The method of notifying that the boot loader has been tampered with is not particularly limited. For example, when tampering is detected, an LED lamp of the fax card may be turned on. Also, for example, a message indicating that the boot loader has been tampered with may be displayed on the display unit 16 of the image processing device 10. Also, for example, information regarding modules that can be activated may be notified.

[0037] The boot loader started in step 406 checks whether the first module has been tampered with (step 407). If the boot loader detects that the first module has been tampered with (YES in step 408), it notifies the user of the tampering (step 417) and ends the process (END). On the other hand, if the boot loader does not detect that the first module has been tampered with (NO in step 408), it starts the first module (step 409).

[0038] The first module started in step 409 transmits a primary response signal to the exchange 30 as a response process to the CAR signal from the exchange 30 (step 410). After that, the first module receives a modem signal transmitted from the exchange 30 (step 411) and transmits a reception completion signal to the exchange 30 (step 412). Next, the first module checks whether the second module has been tampered with (step 413). If the first module detects tampering of the second module (YES in step 414), it notifies the fact that the second module has been tampered with (step 419) and ends the process (END). On the other hand, if tampering of the second module is not detected (NO in step 414), the first module activates the second module (step 415).

[0039] When the second module activated in step 415 detects an incoming IR signal from the exchange 30 (YES in step 416), it transmits a secondary response signal to the exchange 30 as a response process (step 417) and starts receiving the facsimile document (step 418). On the other hand, if the second module has not detected an incoming IR signal from the exchange 30 (NO in step 416), the second module repeats the decision process of step 416 until it detects an incoming IR signal.

[0040] <Example> FIG. 5 is a diagram showing a specific example of the timing of transmission and reception of various signals performed before transmission and reception of a facsimile document between the image processing device 10 and the exchange 30 is started. A CAR signal is transmitted from the exchange 30 to the image processing device 10 at a timing when 0.1 seconds or more have elapsed since the connection with the reversed polarity (polarity reversal) was made. Then, although not shown, the image processing device 10 checks for tampering with the boot loader, starts the boot loader, checks for tampering with the first module, and starts the first module in that order. Then, a primary response signal is transmitted from the first module of the image processing device 10 to the exchange 30. The primary response signal is transmitted within the time limit of 6 seconds since the connection with the reversed polarity (polarity reversal) was made.

[0041] A modem signal is transmitted from the exchange 30 to the image processing device 10 within 0.1 to 3 seconds after the first module of the image processing device 10 transmits a primary response signal. When the first module of the image processing device 10 detects an incoming modem signal from the exchange 30, it transmits a reception completion signal to the exchange 30 indicating that the signal has been received. The exchange 30 receives the transmitted reception completion signal. Here, the time from when the exchange 30 transmits the modem signal to when it receives the reception completion signal is approximately 0.3 seconds.

[0042] When the exchange 30 receives a reception completion signal from the first module of the image processing device 10, it transmits an IR signal to the image processing device 10. Although not shown, the image processing device 10 checks whether the second module has been tampered with and starts the second module in that order. Then, a secondary response signal is transmitted from the second module to the exchange 30. Then, when a connection with the polarity reversed (polarity reversal) is made, communication is started. Here, the time from when the exchange 30 receives the reception completion signal to when it receives the secondary response signal is 0.3 seconds or more.

[0043] Fig. 6(A) is a diagram showing a conventional example in which a fax function module consisting of multiple modules is not classified, and Fig. 6(B) is a diagram showing a specific example in which a fax function module consisting of multiple modules is classified into a first module and a second module. The fax function module shown in Figures 6(A) and (B) is composed of multiple modules. In the conventional process in which the fax function module is not classified as shown in Figure 6(A), the CPU checks the boot loader for tampering, and if no tampering is detected, starts the boot loader. The started boot loader checks the OS (operating system) and the fax function module for tampering, and if no tampering is detected, starts the OS. The started OS starts the fax function module.

[0044] When the activated fax function module detects an incoming CAR signal from the exchange 30, it transmits a primary response signal to the exchange 30 within the time limit. However, in the case of Fig. 6(A), the fax function module is not classified into a first module and a second module. Therefore, it takes more time to check for tampering than when the fax function module is classified into a first module and a second module, and there are cases where the fax function module cannot transmit a primary response signal to the exchange 30 within the time limit.

[0045] In contrast, in this embodiment, the fax function module is classified into a first module and a second module. As shown in Fig. 6(B), the boot loader that has been started checks whether the OS and the first module have been tampered with, and if no tampering is detected, starts the OS. The started OS starts the first module. When the started first module detects the arrival of a CAR signal from the exchange 30, it transmits a primary response signal to the exchange 30 within a time limit.

[0046] In this way, since the fax function modules are classified into the first module and the second module, it takes less time to check for tampering than if the modules were not classified into the first module and the second module. Therefore, the first module can transmit a primary response signal to the exchange 30 within the time limit. After transmitting the primary response signal, the first module receives a modem signal from the exchange 30 and transmits a reception completion signal to the exchange 30. Thereafter, the first module checks for tampering of the second module, and if no tampering is detected, activates the second module. Note that since there is no time limit set for the processing performed by the second module, it may be performed after the processing by the first module.

[0047] <Other embodiments> Although the present embodiment has been described above, the present invention is not limited to the above-mentioned embodiment. Moreover, the effects of the present invention are not limited to those described in the above-mentioned embodiment. For example, the configuration of the information processing system 1 shown in FIG. 1 and the hardware configuration of the image processing device 10 shown in FIG. 2 are merely examples for achieving the object of the present invention, and are not particularly limited. Moreover, the functional configuration of the image processing device 10 shown in FIG. 3 is also merely an example, and is not particularly limited. It is sufficient that the information processing system 1 in FIG. 1 has a function capable of executing the above-mentioned processing as a whole, and the functional configuration used to realize this function is not limited to the example in FIG. 3.

[0048] In addition, the order of the steps of the processing of the image processing device 10 shown in Fig. 4 is merely an example and is not particularly limited. The processing is not limited to the chronological processing according to the illustrated order of steps, but may be performed in parallel or individually without necessarily being chronological. In addition, the specific examples shown in Figs. 5 and 6 are merely examples and are not particularly limited.

[0049] In the above embodiment, the "predetermined process" is a response process to the switchboard 30 (see FIG. 1), but is not limited to this. Any process that may be required to be performed within a time limit is included in the "predetermined process."

[0050] In the above embodiment, the first module and the second module perform different processes, but this is not limited to the above. For example, if the first module can perform a response process within a time limit, the first module may perform at least a part of the process of the second module.

[0051] In the above embodiment, an example in which one fax card is mounted on the image processing device 10 is shown, but the present invention is not limited to this. A plurality of fax cards may be mounted on the image processing device 10. Fig. 7 is an image diagram showing a specific example in which a plurality of fax cards are mounted on the image processing device 10.

[0052] 7, three fax cards 141 to 143 are mounted on the image processing device 10. In this case, for example, when a CAR signal is transmitted from the exchange 30 on the public line network (network 90) to the fax card 141, the fax card 141 starts checking whether the boot loader has been tampered with without waiting for the other fax cards 142 and 143 to be powered on.

[0053] The same is true when a CAR signal is sent from the exchange 30 to each of the fax cards 142 and 143. That is, when a CAR signal is sent from the exchange 30 to each of the fax cards 142 and 143, each of the fax cards 142 and 143 starts checking for tampering with the boot loader without waiting for the other fax cards to be powered on.

[0054] When multiple fax cards are installed in the image processing device 10, the transmission process may be restored by, for example, switching from a fax card in which tampering has been detected to a fax card in which tampering has not been detected. For example, in the example of Fig. 7, if tampering of fax card 141 is detected but tampering of fax card 142 is not detected, the transmission process may be restored by switching from fax card 141 to fax card 142.

[0055] Furthermore, when the image processing device 10 can execute a plurality of processes in parallel, the process by the first module and the process by the second module may be executed in parallel. However, in this case, the second module may be checked for tampering after the first module executes a predetermined process within a time limit. Specifically, for example, the first module that detects the arrival of a CAR signal from the exchange 30 may transmit a primary response signal within a time limit, receive a modem signal from the exchange 30, and transmit a reception completion signal to the exchange 30, after which the second module may be checked for tampering.

[0056] (Additional Note) (((1))) one or more processors; The one or more processors: Classifying a plurality of modules constituting an information processing device into first modules that are required to perform a predetermined process within a predetermined time after being started by receiving a signal from an external device, and second modules that are not required to perform the process within the time; After confirming that the first module has not been tampered with and completing the process by the first module, confirming that the second module has not been tampered with. Information processing system. (((2))) The first module is a module that is required to perform a response process as the process within the time period. An information processing system according to (((1))). (((3))) The information processing device is an image processing device, the external signal is an information receiving terminal activation signal from an exchange, and the response process is a process in which the first module transmits a primary response signal to the exchange. The information processing system according to (((2))). (((4))) When a fax card, which is hardware for transmitting and receiving facsimile signals, is installed in the image processing device, the one or more processors classify firmware of the fax card into a boot loader for starting an operating system, the first module, and the second module. The information processing system according to (((3))). (((5))) When the power supply of the fax card is turned on by receiving the information receiving terminal start-up signal, the one or more processors confirm that the boot loader has not been tampered with, confirm that the first module has not been tampered with, and confirm that the second module has not been tampered with after the first module has completed a process of transmitting the primary response signal. The information processing system according to (((4))). (((6))) the one or more processors, for each of the plurality of fax cards, verify that the boot loader has not been tampered with, verify that the first module has not been tampered with, and verify that the second module has not been tampered with after the first module has completed a process of transmitting the primary response signal. The information processing system according to (((5))). (((7))) The plurality of modules includes a module that allows switching setting of whether or not to perform the processing. 13. An information processing system according to any one of ((1)) to ((6))). (((8))) The one or more processors classify modules that enable the switching setting into the first module and the second module based on the state of the switching setting. An information processing system according to (((7))). (((9))) On the computer, A function of classifying a plurality of modules constituting the information processing device into first modules that are required to perform a predetermined process within a predetermined time after being started up by receiving a signal from an external device, and second modules that are not required to perform the process within the time; a function of confirming that the second module has not been tampered with after confirming that the first module has not been tampered with and completing the processing by the first module; A program to achieve this.

[0057] According to the present invention (((1))), a plurality of modules constituting an information processing device are classified into a first module that is required to perform a predetermined process within a predetermined time after being started by receiving a signal from an external device, and a second module that is not required to perform the process within that time. Then, after it is confirmed that the first module has not been tampered with and the first module has performed the predetermined process, it is confirmed that the second module has not been tampered with. This makes it possible to detect tampering of the first module and complete the predetermined process by the first module within the time limit. According to the present invention (((2))), after it is confirmed that the first module has not been tampered with and the first module performs a response process, it is confirmed that the second module has not been tampered with. This makes it possible to complete the detection of tampering of the first module and the response process by the first module within the time limit. According to the present invention (((3))), after it is confirmed that the first module constituting the image processing device has not been tampered with and a primary response signal is transmitted from the first module to the switchboard, it is confirmed that the second module has not been tampered with. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting the primary response signal within a time limit. According to the present invention (((4))), when a fax card is installed in an image processing device, the firmware of the fax card is classified into a boot loader, a first module, and a second module. Then, after it is confirmed that the first module has not been tampered with and a primary response signal is transmitted from the first module to the switchboard, it is confirmed that the second module has not been tampered with. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting the primary response signal within a time limit. According to the present invention (((5))), the firmware of the fax card mounted on the image processing device is classified into a boot loader, a first module, and a second module. Then, after it is confirmed that the first module has not been tampered with and a primary response signal is transmitted from the first module, it is confirmed that the second module has not been tampered with. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting the primary response signal within a time limit. According to the present invention (((6))), when a plurality of fax cards are installed in an image processing device, after the confirmation that the boot loader has not been tampered with, the confirmation that the first module has not been tampered with, and the process of the first module transmitting a primary response signal are completed, the confirmation that the second module has not been tampered with is performed for each fax card. This makes it possible to complete the detection of tampering of the first module and the process of the first module transmitting a primary response signal within the time limit for each of a plurality of fax cards. According to the present invention (((7))), modules that allow a switch setting as to whether or not to perform a predetermined process are also classified, so that classification based on the state of the switch setting is possible. According to the present invention (((8))), a module configured to perform a predetermined process can be classified as a first module, and a module configured not to perform the predetermined process can be classified as a second module. According to the present invention (((9))), a plurality of modules constituting an information processing device are classified into a first module that is required to perform a predetermined process within a predetermined time after being started by receiving a signal from an external device, and a second module that is not required to perform the process within that time. Then, after it is confirmed that the first module has not been tampered with and the first module has performed the predetermined process, it is confirmed that the second module has not been tampered with. This makes it possible to detect tampering of the first module and complete the predetermined process by the first module within the time limit. [Explanation of symbols]

[0058] 1...information processing system, 10...image processing device, 11...control unit, 30...switching device, 90...network, 101...acquisition unit, 102...classification unit, 103...tampering detection unit, 104...startup control unit, 105...transmission control unit

Claims

1. One or more processors; The one or more processors: A plurality of modules constituting an information processing device are classified into first modules that are required to perform a predetermined process within a predetermined time after being started by receiving a signal from an external device, and second modules that are not required to perform the process within the time, After confirming that the first module has not been tampered with and completing the process by the first module, it is confirmed that the second module has not been tampered with. Information processing system.

2. The first module is a module that is required to perform a response process as the process within the time period. The information processing system according to claim 1 .

3. The information processing device is an image processing device, the external signal is an information receiving terminal start signal from an exchange, and the response process is a process in which the first module transmits a primary response signal to the exchange. The information processing system according to claim 2 .

4. When a fax card, which is hardware for transmitting and receiving facsimile signals, is installed in the image processing device, the one or more processors classify firmware of the fax card into a boot loader for starting an operating system, the first module, and the second module. The information processing system according to claim 3 .

5. When the power supply of the fax card is turned on by the arrival of the information receiving terminal start-up signal, the one or more processors confirm that the boot loader has not been tampered with, confirm that the first module has not been tampered with, and after the first module completes a process of transmitting the primary response signal, confirm that the second module has not been tampered with.

5. The information processing system according to claim 4.

6. the one or more processors, for each of the plurality of fax cards, verify that the boot loader has not been tampered with, verify that the first module has not been tampered with, and verify that the second module has not been tampered with after the first module has completed a process of transmitting the primary response signal.

6. The information processing system according to claim 5.

7. The plurality of modules includes a module that allows switching setting of whether or not to perform the processing. The information processing system according to claim 1 .

8. The one or more processors classify modules that enable the switching setting into the first module and the second module based on a state of the switching setting. The information processing system according to claim 7.

9. On the computer, A function of classifying a plurality of modules constituting the information processing device into first modules that are required to perform a predetermined process within a predetermined time after being started up in response to reception of a signal from an external device, and second modules that are not required to perform the process within the time; a function of confirming that the second module has not been tampered with after confirming that the first module has not been tampered with and completing the process by the first module; A program to achieve this.

Images