Information processing device and its control program

Abstract

To provide an information processing apparatus and a control program therefor which can reduce damages related to security.SOLUTION: An information processing apparatus includes a storage unit and a control unit. The storage unit stores first software and second software different from the first software. If a predetermined period of time has not passed after successful application of a program related to security, the control unit allows execution of the first software and the second software, and if the predetermined period of time has passed, the control unit allows the first software to be executed and does not allow the second software to be executed.SELECTED DRAWING: Figure 5

Description

[Technical Field]

[0001] An embodiment of the present invention relates to an information processing device and a control program therefor. [Background technology]

[0002] Information processing devices, such as personal computers (PCs), point-of-sales (POS) terminals, and Internet of Things (IoT) devices, apply security patches—programs designed to fix problems and vulnerabilities in operating systems and other software—to the software running on the devices. Security patches are received from a server that distributes security patches via a communication network, such as the Internet. However, situations may arise where the security patch cannot be applied to the software, for example, due to inability to communicate between the server and the information processing device. In such cases, for example, with PCs, the security patch may not be applied again depending on the management skills of the operator. For example, with POS terminals, the administrator and the operator are different, so an operator without detailed knowledge of POS terminal management may not notice that a security patch has not been applied, or may continue to use the POS terminal without reporting this to the administrator. Furthermore, with IoT devices used in the home, for example, users often do not check the management status of the device after installation, so security patches may be left unapplied for long periods of time. This increases the risk of damage, such as computer virus infection. Therefore, a mechanism is needed to reduce security-related damage in information processing devices where security patches have not been applied. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2015-95053 Summary of the Invention [Problem to be solved by the invention]

[0004] The problem to be solved by the embodiments of the present invention is to provide an information processing device and a control program therefor that can reduce security-related damage. [Means for solving the problem]

[0005] In one embodiment, the information processing device includes a storage unit and a control unit. The minimum requirements for the operation of the information processing device First software and first software for the operation of the information processing device that does not affect the operation due to the execution of The control unit stores the first software and the second software. If a predetermined time has not elapsed since the application of the security program was successful, the control unit enables the execution of the first software and the second software. Later , the first software is enabled to be executed and the second software is disabled to be executed. [Brief explanation of the drawings]

[0006] [Figure 1] FIG. 1 is a schematic diagram showing a schematic configuration of an information processing system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing the main circuit configuration of the POS terminal. [Figure 3] FIG. 3 is a schematic diagram showing an example of the management list. [Figure 4] FIG. 4 is a flowchart showing a control procedure of the main parts of the processor in the POS terminal. [Figure 5] FIG. 5 is a flowchart showing a control procedure of the main parts of the processor in the POS terminal. [Figure 6] FIG. 6 is a schematic diagram showing an example of the notification screen. DETAILED DESCRIPTION OF THE INVENTION

[0007] An embodiment will be described below with reference to the drawings. In this embodiment, a POS terminal is used as an example of an information processing device.

[0008] FIG. 1 is a schematic diagram showing a schematic configuration of an information processing system 1 according to an embodiment. The information processing system 1 includes a plurality of POS terminals 10 and a management server 20. The POS terminals 10 and the management server 20 are connected to a communication network 2 such as a LAN (Local Area Network).

[0009] The POS terminal 10 registers sales data (number of items sold, sales price, etc.) of products purchased by customers, and calculates the price to be paid by the customer based on the registered sales data. The POS terminal 10 receives payment and settles the transaction with the customer. The POS terminal 10 is an example of an information processing device.

[0010] The management server 20 provides security patches to each POS terminal 10. A security patch is a program for correcting problems, vulnerabilities, etc. in the operating system, software, etc. A security patch is an example of a program related to security.

[0011] 2 is a block diagram showing the main circuit configuration of the POS terminal 10. The POS terminal 10 includes a processor 101, a main memory 102, an auxiliary storage device 103, a clock 104, a communication interface 105, a touch panel 106, a printer 107, a scanner 108, a reader 109, a change dispenser interface 110, and a system transmission path 111. The POS terminal 10 is electrically connected to the system transmission path 111 directly or via a signal input / output circuit. The POS terminal 10 comprises the processor 101, the main memory 102, the auxiliary storage device 103, the clock 104, the communication interface 105, the touch panel 106, the printer 107, the scanner 108, the reader 109, and the change dispenser interface 110. The POS terminal 10 constitutes a computer by the processor 101, the main memory 102, the auxiliary storage device 103, and the system transmission path 111 connecting these components.

[0012] The processor 101 corresponds to the central part of the computer. The processor 101 controls each part to realize various functions of the POS terminal 10 in accordance with an operating system and application programs. The processor 101 is, for example, a CPU (Central Processing Unit). The processor 101 is an example of a control part.

[0013] The main memory 102 corresponds to the main storage portion of the computer. The main memory 102 includes a nonvolatile memory area and a volatile memory area. The main memory 102 stores an operating system and application programs in the nonvolatile memory area. The main memory 102 may store data required for the processor 101 to execute processes for controlling each part in a nonvolatile or volatile memory area. The main memory 102 uses the volatile memory area as a work area where data is rewritten by the processor 101 as appropriate. The nonvolatile memory area is, for example, ROM (Read Only Memory). The volatile memory area is, for example, RAM (Random Access Memory).

[0014] The auxiliary storage device 103 corresponds to the auxiliary storage portion of the computer. For example, an EEPROM (registered trademark) (Electric Erasable Programmable Read-Only Memory), an HDD (Hard Disc Drive), an SSD (Solid State Drive), or an SED (Self Encrypting Drive) is used as the auxiliary storage device 103. The auxiliary storage device 103 stores data used by the processor 101 when performing various processes and data generated by the processes in the processor 101. The auxiliary storage device 103 may also store the application programs described above. The auxiliary storage device 103 is an example of a storage unit.

[0015] The application programs stored in the main memory 102 or the auxiliary storage device 103 include a control program, which will be described later. There are no particular limitations on the method for installing the control program into the main memory 102 or the auxiliary storage device 103. The control program can be installed into the main memory 102 or the auxiliary storage device 103 by recording it on a removable recording medium or by distributing it via communication over a network. The recording medium can be in any form, such as a CD-ROM or memory card, as long as it can store the program and is readable by the device.

[0016] The clock 104 functions as a time information source for the POS terminal 10. The processor 101 keeps track of the current date and time (date and time) based on the time information kept by the clock 104.

[0017] The communication interface 105 is connected to the communication network 2. The communication interface 105 performs data communication with other devices connected via the communication network 2 in accordance with a communication protocol.

[0018] The touch panel 106 functions as an input device and a display device of the POS terminal 10. The touch panel 106 detects a touch position on a displayed image and outputs the touch position information to the processor 101.

[0019] The printer 107 prints on receipt paper. The printed receipt paper is issued as, for example, a purchase receipt, a credit slip, etc. The printer 107 is, for example, a thermal printer, an inkjet printer, etc.

[0020] The scanner 108 reads a code symbol such as a barcode or a two-dimensional data code attached to a product and outputs the read data to the processor 101. The scanner 108 may be of a type that reads a code symbol by scanning with laser light, or may be of a type that reads a code symbol from an image captured by an imaging device.

[0021] Reader 109 reads data recorded on the recording medium and outputs the read data to processor 101. Reader 109 is a magnetic card reader if the recording medium is a magnetic card, and is an IC card reader if the recording medium is a contact IC card. In the case of a contactless IC card or a recording medium using RFID (Radio Frequency Identification) such as a smartphone, an RFID reader is used as reader 109.

[0022] The change machine interface 110 inputs and outputs data signals to and from the automatic change machine. For example, the change machine interface 110 inputs inserted amount data from the automatic change machine. The change machine interface 110 also outputs change amount data to the automatic change machine. Incidentally, the automatic change machine dispenses bills or coins equivalent to the change amount according to the change amount data.

[0023] In the POS terminal 10 configured as above, part of the storage area of ​​the auxiliary storage device 103 is used as a status memory 1031, a change memory 1032, a management list 1033 (see FIG. 3), a first storage area 1034, and a second storage area 1035.

[0024] The status memory 1031 stores data indicating the access state to the second storage area 1035, so-called status. The second storage area 1035 will be described later. The access state to the second storage area 1035 includes a state in which the second storage area 1035 is accessible and a state in which the second storage area 1035 is not accessible. A status indicating a state in which the second storage area 1035 is accessible is set to "0". A status indicating a state in which the second storage area 1035 is not accessible is set to "1".

[0025] The change memory 1032 stores a change flag. The change flag is one bit of data for identifying a change from an inaccessible state to an accessible state to the second storage area 1035. The change flag is set to "1" when the inaccessible state to the second storage area 1035 changes to an accessible state. The initial state of the change flag is "0".

[0026] FIG. 3 is a schematic diagram showing an example of the management list 1033. As shown in FIG. 3, the management list 1033 has areas for writing an application date and time and an application flag. The application date and time is the date and time when the security patch application process was executed. The application flag is one-bit data for identifying whether the security patch application was successful. The application flag is set to "1" if the security patch application was successful. Successful application of the security patch means that the software update process was successful and the software was updated to the latest state. Furthermore, the application flag is set to "0" if the security patch application was not successful. Unsuccessful application of the security patch means that the software update process was not successful and the software could not be updated to the latest state. Note that the management list 1033 is not limited to the data of the above items.

[0027] The first storage area 1034 stores first software. The first software is, for example, software required for the minimum operation of the POS terminal 10, known as basic software. The first software is, for example, software for registering sales data of purchased items and settling commercial transactions. The second storage area 1035 stores second software. The second software is different from the first software. The second software is, for example, software for improving the convenience and comfort of using the POS terminal 10, known as application software. In other words, even if the second software does not function or is not present, the minimum required operation of the POS terminal 10 is not affected. The second software is, for example, software for processing point cards issued to point members. In this embodiment, both the first software and the second software are software related to the operation of the POS terminal 10. In other words, the second software is software related to the first software.

[0028] Here, the processor 101 controls access authority to the storage area in order to read and write various data stored in the storage area. In this embodiment, the processor 101 is capable of setting an access state to the second storage area 1035. When the processor 101 sets the second storage area 1035 to a state where it is accessible, it becomes possible to read and write various data. This makes it possible to execute the second software stored in the second storage area 1035. When the processor 101 sets the second storage area 1035 to a state where it is inaccessible, it becomes impossible to read and write various data. This makes it impossible to execute the second software stored in the second storage area 1035. Note that, for example, a function for setting the access state for each storage area may be used using an SED.

[0029] 4 and 5 are flow charts showing the main information processing procedures executed by the processor 101 of the POS terminal 10 in accordance with the control program. The operation of the information processing system 1 will be explained below using these figures. Note that the operation explained below is an example. The procedures are not particularly limited as long as similar results are obtained.

[0030] In the POS terminal 10, a security patch application process is periodically executed to keep the software up to date. When a predetermined date and time arrives, the processor 101 of the POS terminal 10 starts information processing according to the procedure shown in the flowchart of FIG. 4. That is, the processor 101 waits for the predetermined date and time to arrive as ACT1. The predetermined date and time can be set in any way. The predetermined date and time may be a fixed date and time in the POS terminal 10, or may be changeable to a desired date and time by an administrator or the like who manages the POS terminal 10.

[0031] When the predetermined date and time arrives, the processor 101 determines YES in ACT1, and the process proceeds to ACT2.

[0032] In ACT2, the processor 101 inquires of the management server 20 about downloading a security patch. In response to this inquiry, the management server 20 transmits the security patch to the POS terminal 10. Then, the processor 101 receives the security patch in ACT3.

[0033] The processor 101 checks whether the status stored in the status memory 1031 in ACT4 is "0." If the status is not "0," that is, if the status is "1," the processor 101 determines NO in ACT4, and the process transitions to ACT5.

[0034] The processor 101 updates the status to "0" as ACT5. That is, the processor 101 sets the second storage area 1035 to a state where it is accessible. This makes it possible to read and write various data stored in the second storage area 1035, and to execute the security patch application process. The processor 101 updates the change flag stored in the change memory 1032 to "1" as ACT6.

[0035] If the status is "0", the process proceeds to ACT7.

[0036] The processor 101 applies the security patch to the first software stored in the first storage area 1034 and the second software stored in the second storage area 1035 as ACT7.

[0037] The processor 101 checks whether the application of the security patch was successful in ACT 8. If the application of the security patch was successful, the processor 101 determines YES in ACT 8, and the process proceeds to ACT 11. The process of ACT 11 will be described later.

[0038] If the application of the security patch is not successful, the processor 101 determines NO in ACT8, and the process proceeds to ACT9.

[0039] The processor 101 checks in ACT9 whether the change flag stored in the change memory 1032 is "1." If the change flag is "1," the processor 101 determines YES in ACT9, and the process proceeds to ACT10.

[0040] The processor 101 updates the status stored in the status memory 1031 to "1" in ACT10. That is, the processor 101 returns the status to the setting before the security patch was applied, in which access to the second storage area 1035 is not possible. Then, the processing transitions to ACT11.

[0041] If the change flag is not "1", that is, if the change flag is "0", the process proceeds to ACT11.

[0042] The processor 101 acquires the current date and time kept by the clock 104 as ACT11.

[0043] The processor 101 writes the data in the management list 1033 as ACT12. Specifically, if the application of the security patch is successful, the processor 101 writes in the management list 1033 the current date and time acquired in the processing of ACT11 as the application date and time, in association with "1" as the application flag. If the application of the security patch is not successful, the processor 101 writes in the management list 1033 the current date and time acquired in the processing of ACT11 as the application date and time, in association with "0" as the application flag. With this, the processor 101 ends the information processing of the procedure shown in the flowchart of FIG. 4.

[0044] First, the operator of the POS terminal 10 starts up the POS terminal 10. The operator of the POS terminal 10 is, for example, a person in charge of payment operations at a store. When the POS terminal 10 is started up, the processor 101 of the POS terminal 10 starts information processing according to the procedure shown in the flowchart of FIG.

[0045] The processor 101 acquires the current date and time kept by the clock 104 as ACT21.

[0046] The processor 101 refers to the management list 1033 in ACT22 and calculates the time difference between the application date and time written in the management list 1033 and the current date and time acquired in the processing of ACT21. Specifically, when "1" is written as the application flag in the last line of the management list 1033, the processor 101 calculates the time difference between the application date and time written in association with that application flag and the current date and time obtained in the processing of ACT21. When "0" is written as the application flag in the last line of the management list 1033, the processor 101 searches the management list 1033 in a direction going back in time from the application date and time written in association with that application flag. Then, when the processor 101 detects that "1" is written as the application flag, it calculates the time difference between the application date and time written in association with that application flag and the current date and time obtained in the processing of ACT21. In other words, the processor 101 calculates the time that has elapsed from the application date and time when the security patch was successfully applied to the current date and time.

[0047] In ACT23, the processor 101 checks whether the time difference is equal to or greater than a threshold value. The threshold value can be set in any way. The threshold value may be a fixed date and time in the POS terminal 10, or may be changeable to a desired threshold value by an administrator who manages the POS terminal 10. The threshold value is an example of a predetermined time. If the time difference is less than the threshold value, the processor 101 determines NO in ACT23, and the process proceeds to ACT24.

[0048] The processor 101 enables the execution of the first software stored in the first storage area 1034 and the second software stored in the second storage area 1035 as ACT24. In other words, if the time and date that has passed since the security patch was successfully applied is less than the threshold, it is determined that security is maintained and the first software and the second software can be executed. With this, the processor 101 ends the information processing of the procedure shown in the flowchart of FIG. 5.

[0049] If the time difference is equal to or greater than the threshold value, the processor 101 determines YES in ACT23, and the process proceeds to ACT25.

[0050] The processor 101 updates the status stored in the status memory 1031 as ACT25 to "1." That is, the processor 101 sets the second storage area 1035 to a state in which it is not possible to access the second storage area 1035.

[0051] The processor 101 enables execution of the first software stored as ACT26 in the first storage area 1034. In other words, if the time and date that has passed since the security patch was successfully applied is equal to or greater than a threshold, it is determined that security may not be maintained, and only the first software, which is the basic software, is enabled to run.

[0052] The processor 101 displays the notification screen SC (see FIG. 6) on the touch panel 106 in ACT27.

[0053] Fig. 6 is a schematic diagram showing an example of a notification screen SC. As shown in Fig. 6, the notification screen SC displays a message urging the operator of the POS terminal 10 to update the software to the latest version and notifying that execution of the second software, which is application software, will be disabled. Note that the content and image of the text data displayed in Fig. 6 are examples. With this, processor 101 completes the information processing of the procedure shown in the flowchart of FIG.

[0054] As is clear from the above description, the POS terminal 10 as an information processing device includes an auxiliary storage device 103 and a processor 101. The auxiliary storage device 103 stores first software and second software different from the first software. By executing the processes of ACT23 to ACT26 in Fig. 5, the processor 101 enables execution of the first software and the second software if a predetermined time has not elapsed since the successful application of the security-related program, and enables execution of the first software but disables execution of the second software if the predetermined time has elapsed.

[0055] Therefore, if the time elapsed since the security patch was successfully applied is less than the threshold, it is assumed that security is maintained and the first software and the second software can be executed. On the other hand, if the time elapsed since the security patch was successfully applied is equal to or greater than the threshold, it is assumed that security may not be maintained and the second software cannot be executed, but only the first software can be executed. This reduces security-related damage.

[0056] The first software is the operating system, and the second software is the application software. The operating system can be executed even if there is a possibility that security is not maintained. Therefore, the operator can use the POS terminal 10 without affecting the minimum necessary operations of the POS terminal 10.

[0057] Furthermore, the auxiliary storage device 103 includes a first storage area 1034 that stores the first software and a second storage area 1035 that stores the second software. If a predetermined time has not elapsed since the successful application of the security-related program, the processor 101 enables execution of the first software stored in the first storage area 1034 and the second software stored in the second storage area 1035, and if the predetermined time has elapsed, enables execution of the first software stored in the first storage area 1034 and disables execution of the second software stored in the second storage area 1035. Therefore, by dividing the storage area into multiple areas, security-related management can be performed for each storage area.

[0058] Furthermore, by executing the process of ACT27 in FIG. 5, the processor 101 notifies the user that the second software cannot be executed if a predetermined time has elapsed since the security-related program was successfully applied.

[0059] When it is determined that the second software cannot be executed, the operator of the POS terminal 10 cannot tell at a glance whether this is due to a malfunction of the POS terminal 10 or due to the security patch application process. The notification screen SC is displayed on the touch panel 106, allowing the operator to know that the second software cannot be executed due to the security patch application process. The notification screen SC also displays a message urging the operator to update the software to the latest version, allowing the operator to understand the status of the POS terminal 10. This prevents software updates from being left unattended for long periods of time, thereby preventing security-related damage.

[0060] Although the information processing device and the control program therefor have been described above as embodiments, the embodiments are not limited to these.

[0061] In the above embodiment, the information processing device is exemplified as the POS terminal 10. The information processing device may be, for example, a PC, an IoT device, or the like.

[0062] In the above embodiment, the POS terminal 10 uses part of the storage area of ​​the auxiliary storage device 103 as the first storage area 1034 and the second storage area 1035. The POS terminal 10 may use, for example, a part of the nonvolatile memory area of ​​the main memory 102 as the first storage area 1034, and a part of the volatile memory area of ​​the main memory 102 as the second storage area 1035. In this case, the security patch application process may be executed only on the second software stored in the second storage area 1035. In this case, the main memory 102 is an example of a storage unit.

[0063] In the above embodiment, the second software is exemplified as software related to the first software. For example, there may be no relationship between the first software and the second software. For example, if the information processing device is a PC, the first software may be software that manages data transmitted from an IoT device, and the second software may be software related to a game downloaded via the Internet or the like. In other words, the second software may be software that is not related to the first software.

[0064] In the above embodiment, the notification screen SC displays a message urging the operator of the POS terminal 10 to update the software to the latest version and notifying that the second software will not be able to be executed. For example, the notification screen SC may further display an explanation of the procedure for updating the software to the latest version.

[0065] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope of the invention and the scope of the inventions and their equivalents as defined in the claims. The inventions described in the original claims of this application are set forth below. [Supplementary Note 1] A storage unit that stores first software and second software different from the first software; a control unit that enables execution of the first software and the second software when a predetermined time has not elapsed since the successful application of the security program, and enables execution of the first software and disables execution of the second software after the predetermined time has elapsed; An information processing device comprising: [Supplementary Note 2] The information processing device according to Supplementary Note 1, wherein the first software is basic software and the second software is application software. [Supplementary Note 3] The storage unit includes a first storage area that stores the first software and a second storage area that stores the second software; The information processing device described in Appendix 1 or 2, wherein the control unit enables execution of the first software stored in the first storage area and the second software stored in the second storage area if the specified time has not elapsed since the successful application of the security-related program, and enables execution of the first software stored in the first storage area and disables execution of the second software stored in the second storage area if the specified time has elapsed. [Appendix 4] An information processing device described in any one of Appendices 1 to 3, wherein the control unit notifies that the second software cannot be executed if the specified time has elapsed since the security-related program was successfully applied. [Appendix 5] A computer of an information processing device having a storage unit that stores first software and second software different from the first software, a function of enabling the execution of the first software and the second software when a predetermined time has not elapsed since the successful application of the security program, and enabling the execution of the first software and disabling the execution of the second software when the predetermined time has elapsed; A control program to achieve this. [Explanation of symbols]

[0066] 1...information processing system, 2...communication network, 10...POS terminal, 20...management server, 101...processor, 102...main memory, 103...auxiliary storage device, 104...clock, 105...communication interface, 106...touch panel, 107...printer, 108...scanner, 109...reader, 110...change machine interface, 111...system transmission path, 1031...status memory, 1032...change memory, 1033...management list, 1034...first memory area, 1035...second memory area.

Claims

1. A storage unit that stores first software that is the minimum necessary for the operation of an information processing device and second software for the operation of the information processing device that does not affect the operation due to the execution of the first software; a control unit that enables execution of the first software and the second software when a predetermined time has not elapsed since the successful application of the security program, and enables execution of the first software and disables execution of the second software after the predetermined time has elapsed; An information processing device comprising:

2. The first software is basic software, and the second software is application software.

2. The information processing device according to claim 1.

3. the storage unit includes a first storage area that stores the first software and a second storage area that stores the second software; the control unit enables execution of the first software stored in the first storage area and the second software stored in the second storage area when the predetermined time has not elapsed since the successful application of the security-related program, and enables execution of the first software stored in the first storage area and disables execution of the second software stored in the second storage area after the predetermined time has elapsed.

3. The information processing device according to claim 1.

4. the control unit notifies the user that the second software is no longer executable when the predetermined time has elapsed since the security program was successfully applied. The information processing device according to claim 1 .

5. A computer of an information processing device having a storage unit that stores first software that is minimally required for the operation of the information processing device and second software for the operation of the information processing device that does not affect the operation due to the execution of the first software, a function of enabling the execution of the first software and the second software when a predetermined time has not elapsed since the successful application of the security program, and enabling the execution of the first software and disabling the execution of the second software after the predetermined time has elapsed; A control program to achieve this.

Images