Information processing device and information processing program

Abstract

To provide an information processing device and an information processing program for improving convenience compared with the case in which even if a function to be altered being a function that may have been altered is a function unrelated to information leakage, the function to be altered is not executed.SOLUTION: An information processing device 40 is provided with a CPU 41, receives an instruction to execute a function, restricts the execution of a function to be altered in a case that the received instruction is an instruction about the execution of the function to be altered being a function that may have been altered and that the function to be altered includes transmission processing being processing involving information transmission to an external device being a device other than the own device, and executes the function to be altered in the case that the received instruction is the instruction about the execution of the function to be altered and that the function to be altered does not include the transmission processing.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to an information processing device and an information processing program. [Background technology]

[0002] Patent Document 1 discloses a secure boot method for executing a plurality of components in a predetermined order while verifying their integrity. The secure boot method acquires current state information, which is information indicating whether or not each of one or more components that were to be booted before a first component has been successfully booted. The secure boot method then searches a first mapping table in which a logical identifier for identifying each of the plurality of components, state information indicating whether or not each of one or more components that were to be booted before a corresponding component has been successfully booted, and an integrity measurement value, which is a value for verifying whether or not the boot of one or more components indicated by the corresponding state information has been truly successful, are associated with each other. The secure boot method then acquires a first integrity measurement value corresponding to the first component and the state indicated by the current state information through the search. The secure boot method then acquires a current integrity measurement value, which is a value calculated based on the one or more booted components. The secure boot method then compares the first integrity measurement value with the current integrity measurement value to verify whether or not the boot of one or more components indicated by the current state information has been truly successful. Then, the secure boot method initiates booting of a first component if the verification is successful, and updates the current state information to indicate that the booting of the first component was successful if the booting of the first component was successful.

[0003] Patent Document 2 discloses an image forming apparatus capable of booting up using a secure boot function that detects tampering with a program stored in a boot ROM and boots up the apparatus using the program. This image forming apparatus includes a determination means for determining whether or not the setting is such that the apparatus will be booted up using the secure boot function. This image forming apparatus also includes a warning means for displaying a warning message on a display unit indicating that the setting of the secure boot function has been changed when the determination means determines that the setting is such that the apparatus will not be booted up using the secure boot function. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Special Publication No. 2011-511311 [Patent Document 2] JP 2020-030599 A Summary of the Invention [Problem to be solved by the invention]

[0005] In the conventional technology, even if a tampered function, which is a function that may have been tampered with, is not related to information leakage, the tampered function is not executed. Therefore, when a user tries to use a tampered function that is not related to information leakage, there is a problem that convenience is reduced.

[0006] An object of the present invention is to improve convenience even when the tampered function is not related to information leakage, compared to a case in which the information processing device does not execute the tampered function. [Means for solving the problem]

[0007] In order to achieve the above-mentioned object, an information processing device according to a first embodiment includes a processor that receives an instruction to execute a function, and if the received instruction is an instruction to execute a tampered function, which is a function that may have been tampered with, and the tampered function includes a transmission process, which is a process involving transmitting information to an external device other than the device itself, the processor restricts the execution of the tampered function, and if the received instruction is an instruction to execute the tampered function and the tampered function does not include the transmission process, the processor executes the tampered function.

[0008] In addition, in an information processing device according to a second aspect, in the information processing device according to the first aspect, when the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission processing, as a restriction on the execution of the tampered function, the processor does not execute the transmission processing, but executes a processing other than the transmission processing.

[0009] In addition, in an information processing device according to a third aspect, in the information processing device according to the first or second aspect, the processor presents a message that the execution of the tampered function is restricted if the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission process.

[0010] In addition, in an information processing device according to a fourth aspect, in the information processing device according to any one of the first to third aspects, the processor notifies the first device that the tampered function may have been tampered with if the received instruction is an instruction regarding the execution of the tampered function.

[0011] In addition, in an information processing device according to a fifth aspect, in the information processing device according to the fourth aspect, the processor receives a notification regarding a method for repairing the tampered function from the first device, and presents the received notification regarding a method for repairing the tampered function.

[0012] An information processing device according to a sixth aspect is the information processing device according to any one of the first to fifth aspects, wherein the transmission process is a process stored in a non-rewritable storage unit.

[0013] In addition, in an information processing device according to a seventh aspect, in the information processing device according to any one of the first to sixth aspects, the processor executes the tampered function when the email address information of the external device satisfies a predetermined condition, even if the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission process.

[0014] In addition, an information processing device according to an eighth aspect is an information processing device according to the seventh aspect, in which the predetermined condition is that the information processing device includes a domain name that is the same as a domain name included in the email address information of the user using the device.

[0015] In addition, in an information processing device according to a 9th aspect, in an information processing device according to any one of the 1st to 6th aspects, the processor executes the tampered function when the network part included in the private IP address information of the external device is identical to the network part included in the private IP address information of a user using the device, even if the received instruction is an instruction regarding the execution of the tampered function and the tampered function includes the transmission process.

[0016] Furthermore, in order to achieve the above-mentioned object, an information processing program of a tenth aspect receives an instruction to execute a function, and if the received instruction is an instruction to execute a tampered function, which is a function that may have been tampered with, and the tampered function includes a transmission process, which is a process involving transmitting information to an external device other than the device itself, restricts the execution of the tampered function, and if the received instruction is an instruction to execute the tampered function and the tampered function does not include the transmission process, causes a computer to execute the tampered function. Effect of the Invention

[0017] According to the first and tenth aspects, even if the tampered function is a function unrelated to information leakage, convenience is improved compared to a case in which the information processing device does not execute the tampered function.

[0018] According to the second aspect, when the tampered function includes a transmission process, convenience is improved by the amount of processing other than the transmission process being executed, compared to a case in which the information processing device does not execute the tampered function at all.

[0019] According to the third aspect, when the tampered function includes a transmission process, the user can understand that the execution of the tampered function is restricted.

[0020] According to the fourth aspect, the first device can grasp that the instruction received by the information processing device is an instruction regarding the execution of the tampered function.

[0021] According to the fifth aspect, the user can know how to restore the tampered function.

[0022] According to the sixth aspect, it is possible to prevent tampering with the process involving the transmission of information to an external device.

[0023] According to the seventh aspect, when the email address information of the external device satisfies a predetermined condition, convenience is improved compared to a case in which the tamper-resistant function is not executed.

[0024] According to the eighth aspect, convenience is improved compared to a case in which the tamper-resistant function is not executed when the email address information of the external device contains the same domain name as the domain name contained in the email address information of the user using the device.

[0025] According to the ninth aspect, convenience is improved compared to a case in which the tamper-resistant function is not executed when the network part included in the private IP address information of the external device is identical to the network part included in the private IP address information of the user using the device. [Brief description of the drawings]

[0026] [Figure 1] FIG. 2 is a schematic diagram illustrating an example of a hardware configuration of an information processing system according to an embodiment. [Diagram 2] FIG. 4 is a schematic diagram illustrating an example of a configuration of a function database according to the embodiment. [Diagram 3] 10 is a flowchart illustrating an example of information processing according to the embodiment. [Figure 4] FIG. 13 is a schematic diagram illustrating an example of an execution restriction screen according to the embodiment. [Diagram 5] FIG. 13 is a schematic diagram showing an example of a repair information screen according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0027] Hereinafter, an example of an embodiment of the present disclosure will be described with reference to the drawings. In each drawing, the same or equivalent components and parts are given the same reference numerals. In addition, the dimensional ratios of the drawings are exaggerated for the convenience of explanation and may differ from the actual ratios.

[0028] As shown in FIG. 1, an information processing system 1 according to the present embodiment includes an external device 10, a first device 20, a user terminal 30, and an information processing device 40.

[0029] The external device 10, the first device 20, the user terminal 30, and the information processing device 40 are capable of communicating with each other via a communication means N. In this embodiment, a public communication line such as the Internet is used as the communication means N.

[0030] In this embodiment, a personal computer is applied as the external device 10. However, the external device 10 may be any information processing device other than the information processing device 40, such as a tablet terminal or a smartphone. In addition, although the present embodiment describes a case where there is one external device 10, there may be multiple external devices 10.

[0031] The first device 20 is a device that manages the information processing device 40. In this embodiment, a server computer is applied as the first device 20.

[0032] The user terminal 30 is an information processing terminal owned by a user who uses the information processing device 40. In this embodiment, a personal computer is applied as the user terminal 30.

[0033] In the present embodiment, an image forming apparatus is applied as the information processing apparatus 40. However, any information processing apparatus such as a personal computer, a tablet terminal, or a smartphone may be applied as the information processing apparatus 40.

[0034] 1, an information processing device 40 according to this embodiment includes a CPU 41, a memory 42 as a temporary storage area, a non-volatile first storage unit 43 and a second storage unit 44, an input unit 45, a display unit 46, and a communication I / F unit 48. Each component is connected to each other via a bus B4.

[0035] The first storage unit 43 is realized by a storage device such as an HDD, an SSD, or a flash memory. An information processing program 43A is stored in the first storage unit 43 as a storage medium. The CPU 41 reads these programs from the first storage unit 43, expands them in the memory 42, and sequentially executes the processes contained in the programs. The execution of each program will be described in detail later. The first storage unit 43 also stores various databases such as a function database 43B.

[0036] The second storage unit 44 is realized by a non-rewritable storage device such as an HDD, SSD, or flash memory. The second storage unit 44 stores functions (hereinafter simply referred to as "functions") executed by the information processing device 40. Specifically, the second storage unit 44 stores a read and transmit function which is a function of transmitting an image read by the information processing device 40 to the external device 10, and a read and display function which is a function of displaying an image read by the information processing device 40 on the display unit 46. Note that the second storage unit 44 may also be applied with a read and print function which is a function of printing an image read by the information processing device 40.

[0037] In this embodiment, a form is applied in which functions are stored in the non-rewritable second storage unit 44, regardless of whether a transmission process, which is a process involving information transmission to the external device 10, is included. However, functions that include a transmission process may be stored in the non-rewritable second storage unit 44, and functions that do not include a transmission process may be stored in a rewritable storage device. Also, among the functions, the transmission process may be stored in the non-rewritable second storage unit 44, and processes other than the transmission process may be stored in a rewritable storage device.

[0038] The input unit 45 is, for example, a touch panel, and is used to receive various types of input information.

[0039] The display unit 46 is, for example, a liquid crystal display, and displays various information. The input unit 45 and the display unit 46 may be integrated into a touch panel display.

[0040] The communication I / F unit 48 is an interface for the information processing device 40 to communicate with devices such as the external device 10. For this communication, for example, a wired communication standard such as Ethernet (registered trademark) or FDDI, or a wireless communication standard such as 4G, 5G, or Wi-Fi (registered trademark) is used.

[0041] Next, the function database 43B according to this embodiment will be described with reference to Fig. 2. In the function database 43B shown in Fig. 2, function information, which is information related to functions, is stored. In Fig. 2, each row represents function information. In each piece of function information, information on a function, a process, and whether or not it has been tampered with is associated with each other.

[0042] The above functions are information representing functions stored in the second storage unit 44. The above processes are information representing processes included in the corresponding functions. In the example shown in FIG. 2, a read process in which the information processing device 40 reads an image and an image transmission process in which the image read by the read process is transmitted to the external device 10 are applied as processes corresponding to the read and transmit function. In the example shown in FIG. 2, a read process and an image display process in which the image read by the read process is displayed on the display unit 46 are applied as the read and display function.

[0043] The above-mentioned "presence or absence of tampering" is information indicating whether or not the corresponding function is a tampered function, which is a function that may have been tampered with. In the example shown in Fig. 2, "presence" indicates that the corresponding function is a tampered function, and "absence" indicates that the corresponding function is not a tampered function.

[0044] Next, the operation of the information processing device 40 according to the present embodiment will be described with reference to Fig. 3 to Fig. 5. When a user issues an instruction to start execution of the information processing program 43A via the input unit 45, the CPU 41 executes the information processing program 43A, thereby executing the information processing shown in Fig. 3.

[0045] In step S100, CPU 41 waits until an instruction to execute a function is received via input unit 45. Hereinafter, a function corresponding to the instruction received by CPU 41 in this step will be referred to as a "received function."

[0046] In step S102, the CPU 41 judges whether the reception function is a tampered function. If the reception function is a tampered function (step S102: Y), the CPU 41 proceeds to step S104. On the other hand, if the reception function is not a tampered function (step S102: N), the CPU 41 proceeds to step S118 described later. It should be noted that whether a function is a tampered function or not can be realized by existing technology. As an example, a technology called secure boot is known for confirming whether software that executes a function is the same as software intended by a user. According to secure boot, a hash value calculated in advance is saved as an expected value, and a value measured at the time of system startup is compared to see if it matches the expected value. If they match, it is determined that there is no tampering, and if they do not match, there is tampering. It should be noted that secure boot is only an example, and any tampering detection technology may be used.

[0047] In step S104, the CPU 41 transmits the tampering information to the first device via the communication I / F unit 48. In other words, in step S104, the CPU 41 notifies the first device that the reception function may have been tampered with.

[0048] In step S106, the CPU 41 determines, from the processes corresponding to the reception function in the function database 43B, whether or not the reception function includes a transmission process which is a process involving transmitting information to the external device 10. If the reception function includes a transmission process (step S106: Y), the CPU 41 proceeds to step S108. On the other hand, if the reception function does not include a transmission process (step S106: N), the CPU 41 proceeds to step S118.

[0049] In step S108, the CPU 41 displays an execution restriction screen on the display unit 46 in accordance with a predetermined format.

[0050] As shown in Fig. 4, the execution restriction screen according to this embodiment displays a message indicating that the execution of the reception function is restricted. In the example shown in Fig. 4, a message indicating that the image transmission process, which is a transmission process among the reception functions, is not to be executed, and that the reading process, which is a process other than the transmission process, is to be executed, is displayed on the execution restriction screen.

[0051] In step S108, the CPU 41 may present a message indicating that the execution of the reception function is restricted by voice through a speaker or the like provided in the information processing device 40.

[0052] In step S110, the CPU 41 acquires email address information of the external device 10 and the user terminal 30, and determines whether the email address information of the external device 10 includes the same domain name as the domain name included in the email address information of the user terminal 30. If the email address information of the external device 10 does not include the same domain name as the domain name included in the email address information of the user terminal 30 (step S110: N), the CPU 41 proceeds to step S112. On the other hand, if the email address information of the external device 10 includes the same domain name as the domain name included in the email address information of the user terminal 30 (step S110: Y), the CPU 41 proceeds to step S118.

[0053] In step S110, the CPU 41 may determine whether or not the email address information of the external device 10 includes an account name that is the same as the account name included in the email address information of the user terminal 30. In this case, if the email address information of the external device 10 does not include the same account name as the account name included in the email address information of the user terminal 30, the CPU 41 proceeds to step S112. On the other hand, if the email address information of the external device 10 includes the same account name as the account name included in the email address information of the user terminal 30, the CPU 41 proceeds to step S118.

[0054] Also, in step S110, the CPU 41 may acquire private IP (Internet Protocol) address information of the external device 10 and the user terminal 30, and determine whether or not their network parts are the same. Specifically, the CPU 41 may proceed to step S112 when the network part included in the private IP address information of the external device 10 is the same as the network part included in the private IP address information of the user terminal 30. Also, the CPU 41 may proceed to step S118 when the network part included in the private IP address information of the external device 10 is different from the network part included in the private IP address information of the user terminal 30.

[0055] In step S112, the CPU 41 does not execute the transmission process among the reception functions, but executes a process other than the transmission process. For example, if the reception function is a reading and sending function, the CPU 41 does not execute the image transmission process, but executes the reading process.

[0056] In step S114, the CPU 41 waits until it receives, via the communication I / F unit 48, restoration information that is information on a method for restoring the reception function that is the tampered function, from the first device.

[0057] In step S116, the CPU 41 displays a repair information screen in accordance with a predetermined format on the display unit 46, and ends this information processing.

[0058] As shown in Fig. 5, the repair information screen according to the present embodiment displays the repair information received from the first device. In the example shown in Fig. 5, an instruction to delete the read and transmit function from the second storage unit 44 and to store the read and transmit function to be sent later in the second storage unit 44 again is displayed on the repair information screen.

[0059] In step S116, the CPU 41 may present the repair information by voice via a speaker or the like provided in the information processing device 40.

[0060] In step S118, the CPU 41 executes the reception function and ends this information processing.

[0061] Although the embodiments have been described above, the technical scope of the present invention is not limited to the scope described in the above embodiments. Various modifications or improvements can be made to the above embodiments without departing from the gist of the invention, and such modifications or improvements are also included in the technical scope of the present invention.

[0062] Furthermore, the above-mentioned embodiments do not limit the invention according to the claims, and not all of the combinations of features described in the embodiments are necessarily essential to the solution of the invention. The above-mentioned embodiments include inventions at various stages, and various inventions are extracted by combining the multiple components disclosed. Even if some components are deleted from all the components shown in the embodiments, as long as the effect can be obtained, the configuration from which these some components are deleted can be extracted as an invention.

[0063] In addition, in each of the above embodiments, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0064] In addition, the operations of the processor in each of the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. Furthermore, the order of the operations of the processor is not limited to the order described in each of the above embodiments, and may be changed as appropriate.

[0065] In the present embodiment, the information processing program 43A is installed in the first storage unit 43, but the present invention is not limited to this. The information processing program 43A according to the present embodiment may be provided in a form recorded in a computer-readable storage medium. For example, the information processing program 43A according to the present embodiment may be provided in a form recorded in an optical disc such as a CD (Compact Disc)-ROM and a DVD (Digital Versatile Disc)-ROM, or in a semiconductor memory such as a USB (Universal Serial Bus) memory and a memory card. The information processing program 43A according to the present embodiment may be obtained from an external device via the communication I / F unit 48.

[0066] In the above embodiment, the information processing is realized by a software configuration using a computer by executing a program, but the present invention is not limited to this. For example, the information processing may be realized by a hardware configuration or a combination of a hardware configuration and a software configuration.

[0067] In addition, the configuration of the information processing device 40 described in the above embodiment is just one example, and it goes without saying that unnecessary parts may be deleted and new parts may be added without departing from the spirit of the present invention.

[0068] Furthermore, the processing flow of the information processing program described in the above embodiment (see FIG. 3) is also one example, and it goes without saying that unnecessary steps may be deleted, new steps may be added, or the processing order may be rearranged, without departing from the spirit of the present invention. [Explanation of symbols]

[0069] 10 External device 20 1st device 30 User terminal 40 Information processing device 41 CPU 43 1st memory section 43A Information Processing Program 44 2nd memory section

Claims

1. A processor is provided. The processor, Accepts instructions to execute a function; If the received instruction is an instruction regarding the execution of a tampered function that is a function that may have been tampered with, and the tampered function includes a transmission process that is a process involving the transmission of information to an external device that is a device other than the device itself, restricting the execution of the tampered function; When the received instruction is an instruction for executing the tampered function and the tampered function does not include the transmission process, executing the tampered function; if the received instruction is an instruction to execute the tampered function, notifying the first device that the tampered function may have been tampered with; receiving a notification from the first device regarding a method for repairing the tampered function; presenting a notification regarding how to repair the tampered functionality that has been received; Information processing device.

2. The processor, When the received instruction is an instruction regarding the execution of the tampered function, and the tampered function includes the transmission process, the execution of the tampered function is restricted by not allowing the transmission process to be executed and allowing a process other than the transmission process to be executed. The information processing device according to claim 1 .

3. The processor, If the received instruction is an instruction regarding execution of the tampered function, and the tampered function includes the transmission process, a message is displayed indicating that the execution of the tampered function is restricted.

3. The information processing device according to claim 1 or 2.

4. The transmission process is a process stored in a non-rewritable storage unit. The information processing device according to any one of claims 1 to 3.

5. The processor, even if the received instruction is an instruction for executing the tampered function and the tampered function includes the transmission process, when the email address information of the external device satisfies a predetermined condition, the tampered function is executed. The information processing device according to any one of claims 1 to 4.

6. The predetermined condition is that the domain name is the same as the domain name included in the email address information of the user who uses the device. The information processing device according to claim 5 .

7. The processor, Even if the received instruction is an instruction for executing the tampered function and the tampered function includes the transmission process, when a network part included in the private IP address information of the external device is the same as a network part included in the private IP address information of a user who uses the device, the tampered function is executed. The information processing device according to any one of claims 1 to 4.

8. Accepts instructions to execute a function; If the received instruction is an instruction regarding the execution of a tampered function that is a function that may have been tampered with, and the tampered function includes a transmission process that is a process involving the transmission of information to an external device that is a device other than the device itself, restricting the execution of the tampered function; When the received instruction is an instruction for executing the tampered function and the tampered function does not include the transmission process, executing the tampered function; if the received instruction is an instruction to execute the tampered function, notifying the first device that the tampered function may have been tampered with; receiving a notification from the first device regarding a method for repairing the tampered function; presenting a notification regarding how to repair the tampered functionality that has been received; An information processing program for causing a computer to execute processing.

Images