Image processing system and backup program

Abstract

To provide an image processing system and a backup program that use setting data stored in a secure state when recovering data.SOLUTION: When a user sets a function of an image processing system 1, a second control unit 31 stores the setting data in a second area 42 of a storage unit 15. When the user requests a master backup, a first control unit 21 stores the setting data in a first area 41 of the storage unit 15. An abnormality detection unit 29 analyzes an operation of a control unit 11, and when an abnormality is detected, the first control unit 21 initializes setting data 421 stored in the second area 42. Then, the setting data 411 stored in the first area 41 is used for recovering the data.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an image processing device and a program. [Background technology]

[0002] If program tampering is detected when an image processing device is started up, the operation of each program is generally stopped to prevent malicious activity, and an error code or the like is displayed on the display to notify the user of the program tampering.

[0003] The tampered program then needs to be rewritten as a normal program. Furthermore, the program tampering may have resulted in malicious alteration of various setting data (network settings, fax settings, address book settings, etc.). This requires the user to reset or initialize the various setting data, which takes time to restore the system.

[0004] Patent document 1 describes a method for restoring setting data that is the same as the setting data before the program was tampered with, by having a generation means for generating backup data of the setting data based on the setting data, a determination means for determining whether the program has been tampered with, and an update means for updating the program if the determination means detects tampering with the program and restoring the backup data of the setting data as new setting data. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent Publication No. 2021-117589 Summary of the Invention [Problem to be solved by the invention]

[0006] However, in the case of the method described in Patent Document 1, since the setting data is stored on a hard disk drive (HDD), there is a possibility that the setting data itself may have been compromised. As a result, when restoring the setting data, tampered setting data may be used, which poses a problem of not being able to properly recover the data.

[0007] An object of the present invention is to provide an image processing apparatus and a program that use setting data that has been saved in a secure state when restoring data. [Means for solving the problem]

[0008] The image processing device of the present invention comprises a processor having a first control unit arranged in a secure area and a second control unit arranged in a non-secure area, a memory unit having a first area with ensured security that is accessible by the first control unit and a second area with no ensured security that is accessible by the first control unit and the second control unit, and an abnormality detection unit that detects operational abnormalities in the processor, wherein the first control unit stores various data in the first area of ​​the memory unit, and the second control unit stores the various data in the second area of ​​the memory unit, and when the abnormality detection unit detects an abnormality, the first control unit performs recovery processing of the data stored in the second area using the various data stored in the first area of ​​the memory unit.

[0009] The backup program of the present invention is a backup program that operates a processor having a secure area where security is ensured and a non-secure area, and in an image processing device that has a memory unit having a first area where security is ensured and a second area where security is ensured, and an abnormality detection unit that detects abnormalities in the operation of the processor, the program stores various data in the first area and the second area of ​​the memory unit, and when the abnormality detection unit detects an abnormality, operates the processor to perform recovery processing of the data stored in the second area of ​​the memory unit using the various data stored in the first area of ​​the memory unit. [Effects of the Invention]

[0010] According to the present invention, the processor is divided into a secure area and a non-secure area, and the memory unit is further divided into a first area that can only be accessed by a first control unit placed in the secure area, and a second area that can be accessed by both the first control unit and the second control unit.Configuration data is stored in both the first area and the second area, and when the processor is compromised by malware or the like, it is possible to safely recover the data stored in the second area using the configuration data stored in the first area. [Brief explanation of the drawings]

[0011] [Figure 1] FIG. 2 is a diagram illustrating an electrical configuration of the image processing device. [Figure 2] FIG. 2 is a diagram for explaining in detail the control unit and the storage unit. [Figure 3] 10 is a flowchart illustrating the flow of data recovery processing (data backup) of the image processing device. [Figure 4] 10 is a flowchart showing a flow of data recovery in the image processing device. DETAILED DESCRIPTION OF THE INVENTION

[0012] An image processing apparatus according to an embodiment of the present invention will be described below with reference to the drawings. The image processing apparatus in this embodiment is an image forming apparatus such as a printer or a copier, or a multifunction device equipped with multiple functions such as a facsimile or a scanner.

[0013] 1 is a diagram showing the electrical configuration of an image processing device 1 according to one embodiment of the present invention. The image processing device 1 includes a control unit 11 (processor), an input receiving unit 12, an image reading unit 13, an image forming unit 14, a storage unit 15, a communication unit 16, etc.

[0014] The input receiving unit 12 includes hard keys such as a decision key for confirming various operations and settings, a start key, and the like, and a display unit 121. The input receiving unit 12 receives various corresponding instructions based on the operation of these keys by the user. The display unit 121 includes, for example, an LCD, and displays an operation screen, messages, and the like. The display unit 121 includes a touch panel, and may be configured integrally with the touch panel.

[0015] The image reading unit 13 includes, for example, a scanner, and reads an image of a document to obtain image data. The image forming unit 14 prints, on paper, the image data obtained by the image reading unit 13 or the image data received by the communication unit 16 from an external device, etc.

[0016] The storage unit 15 is, for example, an HDD or SSD, and is a large-capacity storage device that stores image data, various programs, data tables, etc. The storage unit 15 has a first area 41 where security is ensured and a second area 42 where security is not ensured.

[0017] The communication unit 16 is composed of a communication module and the like, and transmits and receives various data to and from external devices such as a server via a network.

[0018] The control unit 11 is composed of a processor, a RAM (Random Access Memory), a ROM, etc. The processor is a CPU (Central Processing Unit), an MPU (Micro Processing Unit), an ASIC (Application Specific Integrated Circuit), or the like.

[0019] Furthermore, to prevent information leakage, tampering, etc., the control unit 11 is a unit that is separated into a secure area 11S and a non-secure area 11N at the hardware level, even though it is a single piece of hardware, as typified by technology such as ARM's TrustZone (registered trademark). Applications running in the non-secure area are not able to directly access data in the secure area. Therefore, even if malware tampers with data in the non-secure area, applications running in the non-secure area cannot directly access data in the secure area, and therefore data can be restored using data in the secure area.

[0020] The control unit 11 includes a first control unit 21 and an abnormality detection unit 29 in a secure area. The first control unit 21, the second control unit 31, and the abnormality detection unit 29 are configured by, for example, an OS and an application. The first control unit 21 executes the application in the secure area, and the second control unit 31 executes the application in the non-secure area, thereby realizing the functions of the image processing device 1. The first control unit 21 and the second control unit 31 execute data recovery processing in accordance with a backup program stored in RAM or ROM built into the control unit 11.

[0021] The anomaly detection unit 29 detects, as an operational anomaly of the processor, an operation that differs from a predetermined normal operation due to tampering or infringement of the control unit 11 by malware or the like (execution of an application not on a whitelist, execution of a privileged command that is not normally used, abnormal access to the secure area 11S, abnormal consumption of hardware resources, etc.) The whitelist is stored in the anomaly detection unit 29.

[0022] 2 is a diagram for explaining in detail the control unit 11 and the storage unit 15. In the secure area 11S of the control unit 11, the first control unit 21 executes the trusted application 23 under the execution of the trusted OS 22, thereby realizing the functions provided by the trusted application 23. In the non-secure area 11N, the second control unit 31 executes the normal OS 32 and the normal application 33, thereby realizing the functions provided by the normal application 33.

[0023] Second control unit 31 in non-secure area 11N can access data only from second area 42 of memory unit 15. In other words, second control unit 31 cannot access first area 41 of memory unit 15. First control unit 21 in secure area 11S can access data from both first area 41 and second area 42 of memory unit 15. By separating the areas in this way, even if programs or data in non-secure area 11N are tampered with, intrusion into first area 41 is prevented.

[0024] 3 is a flowchart illustrating the flow of data recovery processing (data backup) of the image processing device 1. When the user configures the functions of the image processing device 1 (sets up the device), the second control unit 31 creates setting data (S11) and stores the setting data in the second area 42 of the storage unit 15, thus performing a so-called normal backup (S12, setting data 421 in FIG. 2).

[0025] The data to be backed up includes address book data, network setting data, etc. in addition to the setting data of the image processing device 1. Furthermore, the normal backup of the setting data by the second control unit 31 may be performed every time the function settings are changed, or may be performed at a timing specified by the user.

[0026] Subsequently, when the user inputs an instruction to execute a master backup into the input receiving unit 12 (S13; YES), the first control unit 21 saves the setting data in the first area 41 of the storage unit 15, that is, performs a so-called master backup (S14, setting data 411 in FIG. 2). As a result, both a normal backup and a master backup are performed on the setting data, and the setting data is stored in both the first area and the second area.

[0027] The master backup by the first control unit 21 may be performed at the same time as the normal backup. The setting data 411 saved by the master backup is stored in an area of ​​the non-secure area 11N that the second control unit 31 cannot access, so even if the non-secure area of ​​the control unit 11 is invaded by malware or the like, the setting data 411 will not be tampered with.

[0028] 4 is a flowchart showing the flow of data recovery. The abnormality detection unit 29 analyzes the operation of the control unit 11 (S21), and if the abnormality detection unit 29 detects an abnormality (S22; YES), the first control unit 21 initializes the setting data 421 stored in the second area 42 (S23).

[0029] Then, the first control unit 21 writes the setting data 411 stored in the first area 41 to the second area 42 (S24). That is, the first control unit 21 performs data recovery using the setting data 411 stored in the first area 41 (S24). The first control unit 21 safely recovers data by using the setting data 411 stored in the first area 41, whose security is ensured, instead of the setting data 421 stored in the second area 42, which may have been compromised.

[0030] Furthermore, if the abnormality detection unit 29 does not detect an abnormality (S22; NO), but a data recovery instruction is input to the input receiving unit 12 by a user operation (S25; YES), the second control unit 31 performs data recovery using the setting data 421 stored in the second area 42 (S26).

[0031] As explained above, by dividing the memory unit 15 into a first area 41 where security is ensured and a second area 42 where security is not ensured, and taking a master backup in the first area 41 and a normal backup in the second area 42, when the control unit 11 is compromised, data can be safely recovered by using the setting data stored in the first area 41, without using the data in the second area 42 which may have been compromised. [Explanation of symbols]

[0032] 1. Image processing device 11 Control Unit 11S Secure Area 21 First Control Section 29 Abnormality detection unit 11N Non-secure area 31 Second Control Section 12 Input reception section 121 Display section 13 Image reading unit 14 Image forming unit 15 Storage section 41 First area 42 Second area 16 Communications Department

Claims

1. a processor having a first control unit located in a secure domain and a second control unit located in a non-secure domain; a storage unit having a first area where security is ensured and which is accessible to the first control unit, and a second area where security is not ensured and which is accessible to the first control unit and the second control unit; an abnormality detection unit that detects an operational abnormality of the processor, The first control unit stores various data in a first area of ​​the storage unit, the second control unit stores the various data in a second area of ​​the storage unit; When the abnormality detection unit detects an abnormality, the first control unit performs recovery processing of the data stored in the second area using various data stored in the first area of ​​the memory unit.

2. further comprising an input receiving unit that receives instructions from a user; The image processing device described in claim 1, wherein the first control unit performs recovery processing of data stored in the second area of ​​the memory unit using various data stored in the second area when the recovery processing is performed in accordance with a recovery instruction received by the input receiving unit, rather than when the abnormality detection unit detects an abnormality.

3. A backup program that operates a processor having a secure area where security is ensured and a non-secure area, In an image processing device equipped with a memory unit having a first area where security is ensured and a second area where security is not ensured, and an abnormality detection unit that detects abnormalities in the operation of the processor, a backup program is provided that stores various data in the first area and the second area of ​​the memory unit, and, when the abnormality detection unit detects an abnormality, operates the processor to perform recovery processing of the data stored in the second area of ​​the memory unit using the various data stored in the first area of ​​the memory unit.

Images