Information processing device, information processing method, and program

Abstract

To provide an information processing device capable of preserving the convenience of a user who uses a file even when implementation of virus detection processing cannot be controlled.SOLUTION: An information processing device comprises: receiving means for receiving a file; storing means for storing the received file; virus detecting means for subjecting the file to virus detection processing; and virus detection result determining means for determining the file as a normal file when the file is guaranteed as the normal file even if it is determined that the file is suspected of being infected with a virus as the results of virus detection processing or an error occurs in virus detection processing.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to an information processing device, an information processing method, and a program, and more particularly to a method for controlling processing based on a virus detection process. [Background technology]

[0002] Conventionally, a method of storing images taken by a user with an imaging device or images from an external service using an information processing device has been widespread. A user transmits images stored in the imaging device or images stored in an external service to an information processing device via a network, and the information processing device stores the received images. A user can view images stored in the information processing device or transfer them to another user or service via a terminal.

[0003] Furthermore, in order to ensure security, a method of performing virus detection processing on images uploaded to information processing devices has become widespread, making it possible to allow users to use images after confirming that they are not infected with viruses.

[0004] Virus detection processing may also be performed on the user's imaging device or on the external service side. In that case, virus detection processing is also performed when uploading to the information processing device, resulting in redundant virus detection processing. Therefore, even if the security of an image is ensured on the imaging device or external service side, if a virus is detected on the information processing device side or if an error in the detection processing makes it impossible to correctly determine the presence of a virus, the image may be quarantined and the user may not be able to use the image.

[0005] Images in which viruses are detected include cases of false positives, and it is assumed that in many cases, viruses are detected in images whose security has already been ensured as described above. However, since the information processing device cannot confirm whether or not it is a false positive, the user cannot use the image, resulting in an opportunity loss.

[0006] In order to avoid duplication of virus detection processes, Patent Document 1 discloses a technique for not performing virus detection processes in a downstream image forming apparatus when virus detection processes have already been performed in a print server. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2023-38685 A Summary of the Invention [Problem to be solved by the invention]

[0008] However, there is a problem that duplicate processing must be performed when the information processing device cannot control the execution of the virus detection processing. Execution of the virus detection processing cannot be controlled when, for example, a cloud service or software provided by an external vendor, or an application built into the OS is used for the virus detection processing, and the execution timing cannot be controlled. For example, there are cases where the virus detection processing is automatically started when an image is stored in the information processing device.

[0009] The present invention has been made in consideration of the above problems, and aims to prevent the convenience of users who use files from being impaired even when the implementation of virus detection processing cannot be controlled. [Means for solving the problem]

[0010] The information processing device of the present invention comprises a receiving means for receiving a file, a storage means for storing the received file, a virus detection means for performing a virus detection process on the file, and a virus detection result determination means for determining the file as a normal file if the file is determined to be suspected of being infected with a virus as a result of the virus detection process, or if the virus detection process results in an error, but the file is guaranteed to be a normal file, and the receiving means receives normal assurance information indicating whether the file is guaranteed to be a normal file or not before performing the virus detection process by the virus detection means, and the virus detection result determination means determines the file as a normal file based on the normal assurance information. tree , The file stored in the specific storage area by the storage means is determined to be a normal file. The present invention is characterized by the above. Effect of the Invention

[0011] According to the present invention, even if the execution of the virus detection process cannot be controlled, it is possible to prevent the convenience of the user who uses the file from being impaired. [Brief description of the drawings]

[0012] [Figure 1] Block diagram showing an example of the overall configuration [Diagram 2] FIG. 1 is a block diagram showing an example of a hardware configuration of an information processing device. [Diagram 3] FIG. 1 is a block diagram showing an example of a functional configuration of an information processing device; [Figure 4] A flowchart showing an example of a process from when an information processing device receives an image to when the information processing device transmits the image to a user terminal. [Diagram 5] Flowchart showing an example of normality assurance determination processing [Figure 6] FIG. 13 is a diagram showing an example of additional information of an image. [Figure 7] FIG. 1 is a block diagram showing an example of a functional configuration of an information processing device; [Figure 8] FIG. 13 is a diagram showing an example of source information. [Figure 9] Flowchart showing an example of normality assurance determination processing [Figure 10] Flowchart showing an example of normality assurance determination processing DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] Hereinafter, the present invention will be described in detail based on preferred embodiments thereof with reference to the accompanying drawings. Note that the configurations shown in the following embodiments are merely examples, and the present invention is not limited to the configurations shown in the drawings.

[0014] (Embodiment 1) <Overall composition> An example of the overall configuration according to this embodiment will be described with reference to the block diagram of Fig. 1. Fig. 1 is composed of an information processing device 101, an imaging device 102, a user terminal 103, an external server device 104, and a network 105 that realizes communication between them. The imaging device 102, the user terminal 103, and the external server device 104 may be composed of multiple devices.

[0015] An information processing device 101 receives and stores images transferred from an imaging device 102, a user terminal 103, and an external server device 104.

[0016] The image capturing device 102 is an information processing device owned by a user that has an image capturing function and a communication function, such as a camera.

[0017] The user terminal 103 is an information processing device having a communication function and owned by a user, such as a mobile phone, a smartphone, a PC, or a tablet terminal.

[0018] The external server device 104 is an external server device that provides a service in cooperation with the information processing device 101 .

[0019] The network 105 may be connected as a uniform network such as a LAN, or may be connected as an external network such as the Internet, or may be a mixture of these.

[0020] In the following, the present embodiment will be described with a focus on examples of handling images, but any file may be used in addition to images. Also, an image (file) that has been confirmed to be free of virus infection is considered to be a normal image (normal file).

[0021] <Hardware configuration> Next, an example of the hardware configuration of the information processing device 101 according to this embodiment will be described with reference to the block diagram of FIG.

[0022] The information processing device 101 includes at least a CPU 201 , a RAM 202 , a ROM 203 , a network interface 204 , an external storage device 205 , a display device 206 , and an input device 207 .

[0023] The CPU 201 controls the operation of each unit constituting the information processing device 101, and is the main body that executes various processes performed by the information processing device 101, which will be described later.

[0024] The RAM 202 is a memory that temporarily stores data and control information, and serves as a work area used when the CPU 201 executes various processes.

[0025] The ROM 203 stores fixed operation setting values, operation programs, and the like of the information processing device 101.

[0026] The network interface 204 provides a function for connecting to and communicating with the network 105. The network interface 204 enables the information processing device 101 to transmit and receive data to and from external devices.

[0027] The external storage device 205 is a device that stores data, and has an interface that accepts I / O commands for reading and writing data. The external storage device 205 may be a hard disk drive (HDD), a solid state drive (SSD), an optical disk drive, a semiconductor storage device, or other storage devices. The external storage device 205 stores computer programs and data for causing the CPU 201 to execute each process, which will be described later as being performed by the information processing device.

[0028] The display device 206 is, for example, an LCD (Liquid Crystal Display) and displays necessary information to the user.

[0029] The input device 207 is, for example, a keyboard, a mouse, a touch panel, etc., and receives necessary input from the user.

[0030] <Functional configuration> Next, an example of the functional configuration of the information processing device 101 according to this embodiment will be described with reference to the block diagram of FIG.

[0031] The information processing device 101 includes a receiving unit 301 , a storage unit 302 , a virus detection unit 303 , a virus detection result determination unit 304 , a thumbnail generation unit 305 , a quarantine unit 306 , a quarantined image storage unit 307 , and a transmission unit 308 .

[0032] The receiving unit 301 receives images and additional information related to the images transmitted from the imaging device 102, the user terminal 103, and the external server device 104. The additional information is a tag or the like transmitted together with the image.

[0033] The storage unit 302 stores the images received by the receiving unit 301 and additional information related to the images.

[0034] An example of the additional information stored in the storage unit 302 is shown in FIG. 6. The additional information describes, in association with key information such as an image ID, image size, and normality guarantee, a value corresponding to each key information. The image ID is an ID for uniquely identifying an image managed in the storage unit 302. The image size indicates the image size in bytes. The normality guarantee flag is information indicating whether the image is normality guaranteed or not, and stores True if normality is guaranteed, and False if normality is not guaranteed. The normality guarantee flag is set to True if the image has already been subjected to virus detection processing by the imaging device 102, the user terminal 103, or the external server device 104 and is found to be a normal image, and is sent to the information processing device if not.

[0035] The virus detection unit 303 performs a virus detection process on the image stored in the storage unit 302. The virus detection process uses a function provided by an external service or software, and the virus detection process starts automatically when the image is stored. Therefore, whether or not the virus detection process is performed is not under the control of the information processing device 101.

[0036] A virus detection result determining unit 304 determines the processing to be performed on the image based on the virus detection result by the virus detection unit 303 according to the flow of FIG.

[0037] The thumbnail generating unit 305 generates thumbnail images, which are reduced versions of images.

[0038] The isolation unit 306 isolates the image suspected of being infected with a virus and additional information related to the image in the isolated image storage unit 307 .

[0039] The isolated image storage unit 307 stores the images isolated by the isolation unit 306 and additional information related to the images.

[0040] A transmission unit 308 transmits thumbnail images generated by the thumbnail generation unit 305 and images stored in the storage unit 302 to the user terminal in response to a request from a client application on the user terminal or the like.

[0041] <Processing flow> Next, in this embodiment, a series of processing steps from when the information processing device 101 receives an image to when it transmits the image to a user terminal will be described with reference to Fig. 4 showing a flowchart of the processing. In the following, each process (step) will be described with an S added to the beginning of each reference number.

[0042] In S 401 , the receiving unit 301 receives images and additional information related to the images transmitted from the imaging device 102 , the user terminal 103 , the external server device 104 , etc., and stores them in the storage unit 302 .

[0043] In S402, when the image is stored, the virus detection unit 303 performs a virus detection process on the image stored in the storage unit 302. As a result of the virus detection process, the image is determined to be either a normal image, an image suspected of being infected with a virus, or an image with a detection error. Here, a normal image indicates an image in which no virus was detected, and a detection error image indicates an image in which an error occurred in the virus detection process performed by the virus detection unit 303 and the image could not be determined normally.

[0044] In S403, the virus detection result determination unit 304 checks the virus detection result, and if the image is a normal image, the process proceeds to S404. On the other hand, if the image is suspected to be infected with a virus or is an image with a detection error, the process proceeds to S406.

[0045] In S404, the thumbnail generating unit 305 generates a thumbnail image of the image.

[0046] In S405, the transmission unit 308 transmits thumbnails and images to the user terminal in response to a request from a client application on the user terminal, etc. The thumbnails and images received by the client application are displayed on the screen, allowing the user to view the images.

[0047] In S406, it is determined whether or not the image is guaranteed to be a normal image by a normality assurance determination process in the flow of FIG. 5, which will be described later.

[0048] In S407, if it is determined that the image is guaranteed to be normal in the normality assurance determination process in S406, the process proceeds to the process of S404 described above. On the other hand, if it is determined that the image is not guaranteed to be normal, the process proceeds to S408.

[0049] In S408 , the isolation unit 306 isolates the image stored in the storage unit 302 in the isolated image storage unit 307 .

[0050] Next, the flow of the normality guarantee determination process will be described with reference to FIG. 5 showing a flowchart of the process.

[0051] In S501, the virus detection result determination unit 304 acquires additional information related to the image to be processed from the storage unit 302, and further acquires normality assurance information from the additional information. Specifically, a normal image flag is acquired from the additional information as the normality assurance information.

[0052] In S502, the virus detection result determination unit 304 determines whether the image is guaranteed to be normal based on the normality assurance information. Specifically, if the value of the normality assurance flag is True, it is determined to be normal (S503), and if the value is other than True, it is determined to be not normal (S504).

[0053] According to the present embodiment described above, even if an image suspected of being infected with a virus is detected or the detection process results in an error, if the image has already been guaranteed to be normal, it can be treated as a normal image, thereby increasing the opportunities for the user to use the image.

[0054] In the above example, the normal assurance information is included in the additional information of the image. However, the normal assurance information may be included in metadata information embedded in the image itself.

[0055] (Embodiment 2) In this embodiment, a normality assurance determination process is performed based on image transmission source information. Note that the same reference numerals are used for configurations and steps having the same functions as in other embodiments, and descriptions of configurations and functions that are the same will be omitted.

[0056] <Functional configuration> An example of the functional configuration of an information processing device 101 according to this embodiment will be described with reference to the block diagram of FIG.

[0057] 3 in the first embodiment, a transmission source information management unit 701 is added. The transmission source information management unit 701 manages information on transmission sources such as the imaging device 102, the user terminal 103, and the external server device 104 that transmit images to the information processing device 101.

[0058] An example of the source information managed by the source information management unit 701 is shown in Fig. 8. The source ID is an ID for identifying the source, and the normality assurance flag is information indicating whether the image transmitted from the source is normality assured or not. True indicates that the image is normality assured, and False indicates that the image is not normality assured.

[0059] <Processing flow> The normality guarantee determination process in this embodiment will be described with reference to FIG. 9 showing the flow of the process.

[0060] In S901, the virus detection result determination unit 304 acquires the sender ID of the image to be processed. The sender ID is included in additional information when the imaging device 102, the user terminal 103, or the external server device 104 transmits an image to the information processing device 101.

[0061] In S902, the virus detection result determination unit 304 determines whether the image is guaranteed to be authentic based on the source information. Specifically, the authenticity assurance flag of the source ID acquired in S901 is acquired from the source information management unit 701, and if the flag is True, it is determined that the image is guaranteed to be authentic (S903), and if the flag is a value other than True, it is determined that the image is not guaranteed to be authentic (S904).

[0062] According to the present embodiment described above, it is possible to determine that an image transmitted from a specific transmission source is guaranteed to be authentic, which makes it possible to handle cases where it is desired to control whether or not an image is guaranteed to be authentic on a transmission source basis, rather than on an image basis.

[0063] Although an example has been given in which the identifier of a device or terminal is used as source information, it is also possible to use the identifier of an application or service that transmits images from the device or terminal, or the IP address of the source.

[0064] Also, the transmission source information management unit 701 may manage only the transmission source information that is guaranteed to be normal. In this case, the virus detection result determination unit 304 determines that the image transmitted from the transmission source included in the transmission source information management unit 701 is guaranteed to be normal, and determines that the image transmitted from the transmission source not included in the transmission source information management unit 701 is not guaranteed to be normal, thereby realizing the same processing.

[0065] (Embodiment 3) In this embodiment, a normality assurance determination process is performed based on image storage area information. Note that the same reference numerals are used for configurations and steps having the same functions as in other embodiments, and descriptions of configurations and functions that are the same will be omitted.

[0066] <Processing flow> The normality guarantee determination process in this embodiment will be described with reference to FIG. 10 showing the flow of the process.

[0067] In 1001, the virus detection result determination unit 304 acquires storage area information for the image to be processed. Here, the storage area information is information indicating in which path in the storage unit 302 the image is stored. When the imaging device 102, the user terminal 103, and the external server device 104 transmit an image to the information processing device 101, they specify in which path the image is to be stored, and the storage unit 302 stores the image in the specified path. At that time, if the image is guaranteed to be normal on the terminal / device side, the terminal / device transmits the image by specifying a path for guaranteed normal images, and the image is stored.

[0068] In S1002, the virus detection result determination unit 304 determines whether the image is guaranteed to be normal based on the storage area information. Specifically, if the path of the storage area acquired in S1001 is a path for a normal image, it is determined that the image is guaranteed to be normal (S1003), and if it is not a path for a normal image, it is determined that the image is not guaranteed to be normal (S1004).

[0069] According to the present embodiment described above, it is not necessary to add normality assurance information as in embodiment 1. Furthermore, even when the sender cannot be identified as in embodiment 2, the normality assurance determination process can be performed.

[0070] (Other embodiments) The present invention can also be realized by executing the following process: That is, software (programs) that realize the functions of the above-described embodiments are supplied to a system or device via a network or various storage media, and the computer (or CPU, MPU, etc.) of the system or device reads and executes the programs. [Explanation of symbols]

[0071] 301 Receiving unit 302 Storage Department 303 Virus Detection Unit 304 Virus detection result judgment unit 305 Thumbnail Generation Unit 306 Isolation Department 307 Quarantine Image Storage Department 308 Transmitter 701 Sender Information Management Department

Claims

1. A receiving means for receiving a file; A storage means for storing the received file; a virus detection means for performing a virus detection process on the file; a virus detection result determination means for determining that the file is a normal file when it is determined that the file is suspected to be infected with a virus as a result of the virus detection process, or when the virus detection process results in an error, but when the file is guaranteed to be a normal file; Equipped with the receiving means receives normality assurance information indicating whether the file is guaranteed to be a normal file before the virus detection process is performed by the virus detection means; The information processing apparatus, wherein the virus detection result determining means determines that a file stored in a specific storage area by the storage means is a normal file based on the normality assurance information.

2. The file sender information management unit further includes a sender information management unit for managing the sender information of the file.

2. The information processing apparatus according to claim 1, wherein said virus detection result determining means determines that a file transmitted from a specific transmission source is a normal file based on transmission source information managed by said managing means.

3. The information processing apparatus according to claim 1 , wherein the normal assurance information is included in a tag added to the file.

4. The information processing apparatus according to claim 1 , wherein the normal assurance information is metadata information embedded in the file.

5. 2. The information processing apparatus according to claim 1, wherein said virus detection means performs a virus detection process on said file when said storage means stores said file.

6. 2. The information processing apparatus according to claim 1, wherein the virus detection means performs a virus detection process on the file by using a function of an external service.

7. a receiving step of receiving the file; a storage step of storing the received file; a virus detection step of performing a virus detection process on the file; a virus detection result determination step of determining the file as a normal file when it is determined that the file is suspected to be infected with a virus as a result of the virus detection process, or when the virus detection process results in an error but the file is guaranteed to be a normal file; having In the receiving step, before performing a virus detection process in the virus detection step, normality assurance information indicating whether the file is guaranteed to be a normal file is received, The processing method for an information processing device, wherein in the virus detection result determining step, the file stored in the specific storage area in the storing step is determined to be a normal file based on the normality assurance information.

8. A program for causing a computer to function as each of the means of the information processing device according to any one of claims 1 to 6.

Images