Information processing system and program

Abstract

To provide an information processing system and a program capable of recording an execution result of recovery processing of firmware of a functional device in a log.SOLUTION: When tampering of firmware of a functional device is detected in a state where controller software is started, information indicating execution of recovery processing via the controller software is recorded in a storage unit, installer software is started in a state where the controller software is not started, the recovery processing is executed via the installer software, and after the execution of the recovery processing, the controller software is started, and when the firmware of the functional device is normal and the information indicating the execution of the recovery processing is recorded in the storage unit, the execution of the recovery processing via the controller software and the success of the recovery processing are recorded in a log.SELECTED DRAWING: Figure 6

Description

[Technical Field]

[0001] The present disclosure relates to an information processing system and a program. [Background technology]

[0002] Patent document 1 discloses an information processing device that detects tampering and performs recovery by verifying software, and that allows the information processing device to be used securely after recovery even if the copy of software used for recovery cannot be updated.

[0003] Patent document 2 discloses a communication device and its remote management system that, when updating an OS by downloading an update OS from an external device such as a management device, even if the update fails due to a power outage or the like, makes it possible to easily and reliably determine the failure when the device is subsequently restarted by powering it on. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Publication No. 2022-157063 [Patent Document 2] Japanese Patent Application Laid-Open No. 2004-318871 Summary of the Invention [Problem to be solved by the invention]

[0005] For example, in an information processing system that performs a firmware recovery process when firmware installed in a functional device such as a fax card is tampered with, there is a demand for recording the execution result of the recovery process in a log.

[0006] However, when performing recovery processing, the controller software for controlling the functional devices and recording logs related to the functional devices is not started, and only the installer software for performing the recovery processing is started, which creates the problem that the results of the recovery processing cannot be recorded in the log.

[0007] The object of the present disclosure is to provide an information processing system and a program that can record the results of recovery processing in a log in an information processing system that performs firmware recovery processing when firmware installed in a functional device is tampered with. [Means for solving the problem]

[0008] An information processing system of a first aspect includes a processor, wherein, when controller software for controlling a functional device and recording logs related to the functional device is activated and tampering of firmware installed in the functional device is detected, the processor records information in a memory unit indicating that a recovery process will be performed via the controller software to reinstall firmware for the functional device; when the controller software is not activated, the processor activates installer software for performing the recovery process, executes the recovery process via the installer software, and after the recovery process is executed, the processor activates the controller software; and when the firmware of the functional device is normal and information indicating that the recovery process will be executed is recorded in the memory unit, the processor records in a log via the controller software that the recovery process has been executed and that the recovery process was successful.

[0009] In a second aspect of the information processing system, in the information processing system of the first aspect, the processor records information indicating that the recovery process is to be executed in the memory unit via the controller software, and then restarts the system.

[0010] In a third aspect of the information processing system, in the information processing system of the second aspect, the processor performs a restart of the system if the startup of the system immediately before tampering with the firmware installed in the functional device was detected was by turning on the power of the system.

[0011] In a fourth aspect of the information processing system, in the information processing system of the second aspect, if the startup of the system immediately before tampering with the firmware installed in the functional device was detected was due to the system returning from a power saving state, the processor notifies the user of the restart of the system and executes the restart of the system in accordance with the user's instructions.

[0012] An information processing system of a fifth aspect is the information processing system of the first aspect, wherein the processor executes the recovery process and then restarts the system itself.

[0013] In a sixth aspect of the information processing system, in the information processing system of the first aspect, the processor starts the controller software after restarting the system after executing the recovery process, and if tampering with the firmware installed in the functional device is detected and information indicating that the recovery process will be executed is recorded in the memory unit, records in a log via the controller software that the recovery process has been executed and that the recovery process has failed.

[0014] In a seventh aspect of the information processing system, in the sixth aspect of the information processing system, the processor records in a log that the recovery process has been executed and that the recovery process has failed, and then executes the recovery process again.

[0015] The program of an eighth aspect causes a computer to execute the following steps: when tampering of firmware installed in a functional device is detected while controller software for controlling a functional device and recording a log related to the functional device is running, storing information in a storage unit indicating that a recovery process will be performed to reinstall firmware for the functional device via the controller software; when the controller software is not running, starting installer software for performing the recovery process and executing the recovery process via the installer software; and when the firmware of the functional device is normal and information indicating that the recovery process will be executed is recorded in the storage unit, starting the controller software after the recovery process has been executed, and recording in a log via the controller software that the recovery process has been executed and that the recovery process was successful. [Effects of the Invention]

[0016] According to the information processing system of the first aspect, when firmware installed in a functional device is tampered with, in the information processing system that performs firmware recovery processing, the execution result of the recovery processing can be recorded in a log.

[0017] According to the information processing system of the second aspect, it is possible to update the operating system of the own system.

[0018] According to the information processing system of the third aspect, the system itself can be automatically restarted.

[0019] According to the information processing system of the fourth aspect, the user can restart the system at any timing desired by the user.

[0020] According to the information processing system of the fifth aspect, the operating system of the own system can be updated.

[0021] According to the information processing system of the sixth aspect, even if the recovery process fails, the execution result of the recovery process can be recorded in a log.

[0022] According to the information processing system of the seventh aspect, the recovery process can be automatically retried.

[0023] According to the program of the eighth aspect, in an information processing system that performs firmware recovery processing when firmware installed in a functional device is tampered with, the execution result of the recovery processing can be recorded in a log. [Brief explanation of the drawings]

[0024] [Figure 1] 1 is an external view of an image forming apparatus according to an embodiment of the present disclosure. [Figure 2] FIG. 2 is a block diagram showing a hardware configuration of the image forming apparatus. [Figure 3] FIG. 2 is a block diagram showing the functional configuration of the image forming apparatus. [Figure 4] FIG. 2 is a diagram illustrating a software configuration at normal startup of the image forming apparatus. [Figure 5] FIG. 2 is a diagram illustrating a software configuration when firmware is installed in the image forming apparatus. [Figure 6] 10 is a sequence diagram showing the first half of a process flow when verifying a fax card in an image forming apparatus. [Figure 7] 10 is a second half of a sequence diagram showing a processing flow when verifying a fax card in an image forming apparatus. DETAILED DESCRIPTION OF THE INVENTION

[0025] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0023] The following describes in detail embodiments of the present disclosure with reference to the accompanying drawings. Fig. 1 is an external view of an image forming apparatus according to an embodiment of the present disclosure.

[0026] 1, the image forming apparatus 10 is a so-called multifunction device that has multiple functions such as a printing function, a scanning function, a copying function, a fax function, etc. The image forming apparatus 10 is an example of an information processing system in the technology of the present disclosure.

[0027] 1, the image forming apparatus 10 includes a fax card 18. The fax card 18 is a device implemented in the image forming apparatus 10 to provide the image forming apparatus 10 with a fax function. The fax card 18 is an example of a functional device in the technology of the present disclosure.

[0028] Next, a description will be given of the hardware configuration of the image forming apparatus 10 of this embodiment.

[0029] 2, the image forming apparatus 10 includes a CPU (Central Processing Unit) 11, a RAM (Random Access Memory) 12, a storage device 13 such as a hard disk drive, a communication interface (abbreviated as IF) 14, a user interface (abbreviated as UI) device 15 including a touch panel or liquid crystal display and a keyboard, a scanner 16, a print engine 17, and a fax card 18. These components are connected to one another via a control bus 19.

[0030] The CPU 11 is a processor that controls the operation of the image forming apparatus 10 by executing predetermined processes based on a control program stored in the RAM 12 or the storage device 13. While the present embodiment has been described as the CPU 11 reading and executing the control program stored in the RAM 12 or the storage device 13, this is not limiting. The control program may be provided in a form recorded on a computer-readable recording medium. For example, the program may be provided in a form recorded on an optical disc such as a CD (Compact Disc)-ROM (Read Only Memory) or a DVD (Digital Versatile Disc)-ROM, or in a semiconductor memory such as a USB (Universal Serial Bus) memory or a memory card. The control program may also be obtained from an external device via a communication line connected to the communication IF 14.

[0031] The communication IF 14 transmits and receives data to and from external devices. The UI device 15 accepts instruction input from the user. The scanner 16 reads an original document loaded in the image forming apparatus 10 as image data. The print engine 17 prints an image on a recording medium such as printing paper through processes such as charging, exposure, development, transfer, and fixing. The fax card 18 performs fax communication between the image forming apparatus 10 and external devices under the control of installed firmware.

[0032] Next, a functional configuration of the image forming apparatus 10 of this embodiment will be described.

[0033] As shown in FIG. 3, the image forming apparatus 10 of this embodiment includes a control unit 31, an operation input unit 32, a display unit 33, a data transmission / reception unit 34, an authentication unit 35, a memory unit 36, an image reading unit 37, and an image output unit 38.

[0034] The control unit 31 controls the overall operation of the image forming device 10, and for example, based on instructions input from the user, controls communication with external devices via the data transmission / reception unit 34, controls reading of document images via the image reading unit 37, and controls output of print data from the image output unit 38.

[0035] The operation input unit 32 inputs information on various operations performed by the user. The display unit 33 is controlled by the control unit 31 and displays various information to the user. The data transmission / reception unit 34 transmits and receives data to and from external devices via fax communication or internet communication. The authentication unit 35 performs authentication processing for users who wish to use the image forming apparatus 10.

[0036] The storage unit 36 stores various data such as a control program for controlling the operation of the image forming apparatus 10 and firmware for controlling the fax card 18. The image reading unit 37 reads an original image from a loaded original. The image output unit 38 outputs the image onto a recording medium such as printing paper.

[0037] As shown in FIG. 4, when the image forming apparatus 10 is normally started up, controller software for controlling the operation of the image forming apparatus 10 is started up on the operating system of the image forming apparatus 10.

[0038] The controller software includes a fax controller for controlling the fax card 18. The fax controller has a function for recording the details of the processing performed in the fax card 18 in an audit log.

[0039] In the image forming device 10, if firmware installed in a fax card 18 added to the image forming device 10 is tampered with, it is possible to perform a recovery process to reinstall the firmware on the fax card 18, but there is a demand to record the results of this recovery process in an audit log.

[0040] However, when performing recovery processing, changes are made to the system, so as shown in Figure 5, in order to minimize the software running on the operating system of the image forming device 10, the controller software is not started and only the installer software for performing the recovery processing is started.

[0041] In this case, the controller software for recording the audit log is not activated, so the execution results of the recovery process performed by the installer software cannot be recorded in the audit log.

[0042] In order to solve such problems, when the control unit 31 of the image forming apparatus 10 of this embodiment detects tampering of the firmware installed in the fax card 18 while the controller software is running, it records execution history data in the memory unit 36, which is information indicating that a recovery process will be performed to reinstall the firmware on the fax card 18 via the controller software; when the controller software is not running, it starts the installer software, executes the recovery process via the installer software, and after the recovery process is executed, it starts the controller software; and when the firmware of the fax card 18 is normal and the execution history data is recorded in the memory unit 36, it records in the audit log that the recovery process has been executed via the controller software and that the recovery process was successful.

[0043] In the image forming apparatus 10 of this embodiment, the control unit 31 may record the execution history data in the storage unit 36 via the controller software, and then restart the image forming apparatus 10. Note that if the recovery process involves restarting the image forming apparatus 10, the execution history data may be stored in the non-volatile storage unit 36.

[0044] Here, if the startup of image forming apparatus 10 immediately before tampering with the firmware installed in fax card 18 was detected by turning on the power of image forming apparatus 10, control unit 31 may be configured to restart image forming apparatus 10. Also, if the startup of image forming apparatus 10 immediately before tampering with the firmware installed in fax card 18 was detected by returning from a power saving state, control unit 31 may notify the user of the restart of image forming apparatus 10 and restart image forming apparatus 10 in response to a user instruction.

[0045] Furthermore, the control unit 31 may be configured to restart the image forming apparatus 10 after executing the recovery process.

[0046] In addition, the control unit 31 may start the controller software after restarting the image forming device 10 after executing the recovery process, and if tampering with the firmware installed in the fax card 18 is detected and execution history data is recorded in the memory unit 36, record in a log via the controller software that the recovery process has been executed and that the recovery process has failed.

[0047] In this case, the control unit 31 may record in a log that the recovery process has been executed and that the recovery process has failed, and then execute the recovery process again.

[0048] Next, the flow of processing when verifying the fax card 18 in the image forming apparatus 10 of this embodiment will be described with reference to the sequence diagrams of Fig. 6 and Fig. 7. Fig. 6 and Fig. 7 show a series of sequence diagrams, with Fig. 6 being the first half of the sequence diagram and Fig. 7 being the second half of the sequence diagram. In the sequence diagrams of Fig. 6 and Fig. 7, processing other than user processing is executed under the control of the control unit 31.

[0049] The operating system and user interface are launched when the image forming device 10 is powered up. First, the operating system launches the controller software, which includes the fax controller.

[0050] The controller software then starts recording an audit log for the fax card 18 and then starts the fax card 18 .

[0051] Next, the fax card 18 verifies whether the firmware (referred to as FW in FIGS. 6 and 7) has been tampered with, and notifies the controller software of the verification result.

[0052] Next, if the verification result is OK (that is, the firmware has not been tampered with), the controller software ends the verification process of the firmware installed in the fax card 18 and transitions to a normal use state.

[0053] In addition, if the verification result is NG (i.e., the firmware has been tampered with), the controller software reserves the installation of the firmware of the fax card 18 in the operating system, and further records execution history data in the memory unit 36, which is information indicating that a recovery process will be performed to reinstall the firmware on the fax card 18.

[0054] Next, the controller software determines whether the previous startup of the image forming apparatus 10 was due to the image forming apparatus 10 being powered on or due to the image forming apparatus 10 returning from a power saving state, and if the previous startup of the image forming apparatus 10 was due to the image forming apparatus 10 being powered on, it instructs the operating system to restart. In response to this instruction, the operating system restarts the image forming apparatus 10.

[0055] Furthermore, if the previous startup of the image forming apparatus 10 was due to the image forming apparatus 10 returning from a power saving state, the controller software instructs the user interface to display a notification of restart. In response to this instruction, the user interface displays a notification to the user requesting the image forming apparatus 10 to restart.

[0056] After checking the notification displayed on the user interface, the user confirms that there are no jobs being executed and inputs a reboot instruction to the operating system. In response to this instruction, the operating system reboots the image forming apparatus 10.

[0057] When the image forming apparatus 10 is restarted, the operating system stops the controller software. When the controller software receives the instruction to stop, it stops recording the audit log related to the fax card 18, stops the fax card 18, and then stops the controller software itself.

[0058] After the image forming apparatus 10 is restarted, the operating system starts only the installer software and executes the recovery process via the installer software.

[0059] The storage unit 36 of the image forming apparatus 10 stores firmware that was previously installed on the fax card 18. In the recovery process, the firmware that was previously installed on the fax card 18 is reinstalled.

[0060] After the restoration process is completed, the installer software notifies the operating system of the completion of the restoration process. Upon receiving the notification, the operating system stops the installer software and then restarts the image forming apparatus 10.

[0061] The operating system and user interface are started when the image forming device 10 is rebooted. The operating system then starts the controller software, including the fax controller.

[0062] The controller software then starts recording an audit log for the fax card 18 and then starts the fax card 18 .

[0063] Next, the fax card 18 verifies whether the firmware has been tampered with and notifies the controller software of the verification result.

[0064] Next, if the verification result is OK (i.e., no firmware tampering) and the execution history data is recorded in the memory unit 36, the controller software records in the audit log that the recovery process was executed and that the recovery process was successful, erases the execution history data, and then transitions to a normal usage state.

[0065] Furthermore, if the verification result is NG (i.e., the firmware has been tampered with) and the execution history data is recorded in the memory unit 36, the controller software schedules the installation of the firmware for the fax card 18 in the operating system, records in the audit log that the recovery process has been performed and that the recovery process has failed, and then performs the recovery process again.

[0066] [Variations] An information processing system according to an embodiment of the present disclosure has been described above, but the technology of the present disclosure is not limited to the above embodiment and can be modified as appropriate.

[0067] For example, the technology of the present disclosure is not limited to the image forming apparatus 10, and may be applied to any system that records logs related to functional devices.

[0068] In the technology of the present disclosure, the term "system" includes both a system made up of multiple devices and a system made up of a single device.

[0069] Furthermore, in the technology of the present disclosure, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0070] Furthermore, the operations of the processor in the technology of the present disclosure may not only be performed by a single processor, but may also be performed by multiple processors located in physically separate locations working together. Furthermore, the order of the operations of the processor is not limited to the order described in the above embodiments, and may be changed as appropriate.

[0071] [Note] Preferred embodiments of the present disclosure will be described below.

[0072] (((1))) a processor; The processor: When tampering of firmware installed in a functional device is detected while controller software for controlling a functional device and recording a log related to the functional device is running, information indicating that recovery processing for reinstalling firmware in the functional device is to be executed via the controller software is recorded in a storage unit; starting up installer software for performing the recovery process while the controller software is not running, and executing the recovery process via the installer software; After the recovery process is executed, the controller software is started, and if the firmware of the functional device is normal and information indicating that the recovery process is to be executed is recorded in the storage unit, the fact that the recovery process has been executed and that the recovery process has been successful is recorded in a log via the controller software. Information processing system.

[0073] (((2))) The processor: After recording information indicating that the recovery process is to be executed in the storage unit via the controller software, the system is restarted. The information processing system according to (((1))).

[0074] (((3))) The processor: If the system was started immediately before the tampering of the firmware installed in the functional device was detected by powering on the system, the system is restarted. The information processing system according to (((2))).

[0075] (((4))) The processor: If the system was started immediately before tampering with the firmware installed in the functional device was detected, the system is restarted after returning from a power-saving state, and the system is restarted in accordance with the user's instructions. The information processing system according to (((2))).

[0076] (((5))) The processor: After performing the recovery process, restart the system. 1. An information processing system according to any one of ((1))) to (((4))).

[0077] (((6))) The processor: After the system is restarted after the execution of the recovery process, the controller software is started, and if tampering of the firmware installed in the functional device is detected and information indicating that the recovery process will be executed is recorded in the storage unit, the fact that the recovery process has been executed and that the recovery process has failed is recorded in a log via the controller software. 1. An information processing system according to any one of ((1))) to (((5))).

[0078] (((7))) The processor: After recording in a log that the recovery process has been executed and that the recovery process has failed, the recovery process is executed again. The information processing system according to (((6))).

[0079] (((8))) a step of storing information in a storage unit indicating that a recovery process for reinstalling firmware in the functional device is to be executed via the controller software when tampering with firmware installed in the functional device is detected while controller software for controlling the functional device and recording a log related to the functional device is running; a step of starting up installer software for performing the recovery process while the controller software is not running, and executing the recovery process via the installer software; after the execution of the recovery process, starting up the controller software, and, if the firmware of the functional device is normal and information indicating that the recovery process is to be executed is recorded in the storage unit, recording in a log via the controller software that the recovery process has been executed and that the recovery process has been successful; A program that causes a computer to execute the following.

[0080] The effects of the configuration described above will be described below.

[0081] According to the information processing system (((1))), when firmware installed in a functional device is tampered with, the information processing system that performs firmware recovery processing can record the results of the recovery processing in a log.

[0082] According to the information processing system (((2))), the operating system of the system itself can be updated.

[0083] According to the information processing system (((3))), the system itself can be automatically restarted.

[0084] According to the information processing system (((4))), the user can restart the system at any time.

[0085] According to the information processing system (((5))), the operating system of the system itself can be updated.

[0086] According to the information processing system of (((6))), even if the recovery process fails, the execution result of the recovery process can be recorded in a log.

[0087] According to the information processing system (((7))), recovery processing can be automatically retried.

[0088] According to the program (((8))), when firmware installed in a functional device is tampered with, in an information processing system that performs firmware recovery processing, the execution results of the recovery processing can be recorded in a log. [Explanation of symbols]

[0089] 10 Image forming device 11 CPU 12 RAM 13 Storage device 14 Communication Interface 15 User Interface Device 16 Scanner 17 Print Engine 18. Fax Card 19 Control Bus 31 Control Unit 32 Operation input section 33 Display section 34 Data transmission / reception unit 35 Authentication Department 36 Memory section 37 Image reading unit 38 Image output unit

Claims

1. a processor; The processor: When tampering of firmware installed in a functional device is detected while controller software for controlling a functional device and recording a log related to the functional device is running, information indicating that recovery processing for reinstalling firmware in the functional device is to be executed via the controller software is recorded in a storage unit; starting up installer software for performing the recovery process while the controller software is not running, and executing the recovery process via the installer software; After the recovery process is executed, the controller software is started, and if the firmware of the functional device is normal and information indicating that the recovery process is to be executed is recorded in the storage unit, the fact that the recovery process has been executed and that the recovery process has been successful is recorded in a log via the controller software. Information processing system.

2. The processor: After recording information indicating that the recovery process is to be executed in the storage unit via the controller software, the system is restarted. The information processing system according to claim 1 .

3. The processor: If the system was started immediately before the tampering of the firmware installed in the functional device was detected by powering on the system, the system is restarted. The information processing system according to claim 2 .

4. The processor: If the system was started immediately before tampering with the firmware installed in the functional device was detected, the system is restarted after returning from a power-saving state, and the system is restarted in accordance with the user's instructions. The information processing system according to claim 2 .

5. The processor: After performing the recovery process, restart the system. The information processing system according to claim 1 .

6. The processor: After the system is restarted after the execution of the recovery process, the controller software is started, and if tampering of the firmware installed in the functional device is detected and information indicating that the recovery process will be executed is recorded in the storage unit, the fact that the recovery process has been executed and that the recovery process has failed is recorded in a log via the controller software. The information processing system according to claim 1 .

7. The processor: After recording in a log that the recovery process has been executed and that the recovery process has failed, the recovery process is executed again. The information processing system according to claim 6.

8. a step of storing information in a storage unit indicating that a recovery process for reinstalling firmware in the functional device is to be executed via the controller software when tampering with firmware installed in the functional device is detected while controller software for controlling the functional device and recording a log related to the functional device is running; a step of starting up installer software for performing the recovery process while the controller software is not running, and executing the recovery process via the installer software; after the execution of the recovery process, starting up the controller software, and, if the firmware of the functional device is normal and information indicating that the recovery process is to be executed is recorded in the storage unit, recording in a log via the controller software that the recovery process has been executed and that the recovery process has been successful; A program that causes a computer to execute the following.

Images