Information processing apparatus, information processing method and record medium

• US 20060265562A1
• Filed: 08/25/2005
• Published: 11/23/2006
• Est. Priority Date: 05/19/2005
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Kawai, Jun, Nishiguchi, Naoki
• Granted Patent: US 8,176,278 B2
• Time in Patent Office: Days
• US Class Current: 711/163
• CPC Class Codes: G06F 12/1441 for a range
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow

Abstract

Provided is information processing apparatus, information processing method and a record medium, which can prevent occurrence of manipulation, in a case of accessing a memory, without consuming the access band of the memory. A main-processing unit, a sub-processing unit and a memory for loading a program are provided and process limit information stored in the memory is stored in storing means. The sub-processing unit judges whether a program to be executed is manipulated or not, and loads a program to be executed in the memory in case that the program is not manipulated. The sub-processing unit refers to the process limit information before execution of a program, and not permits execution of the program of the main-processing unit in case that a process by the main-processing unit for information stored in the memory accords with a process included in the process limit information.

Claims

1. An information processing apparatus comprising:

a main-processing unit and a sub-processing unit capable of executing a program;

a memory for loading a program to be executed; and

storing means for storing process limit information which indicates a limitation on a process for a program loaded in the memory, wherein

the sub-processing unit comprises;

means for judging whether a program to be executed is manipulated or not;

means for loading a program to be executed in the memory when it is judged that the program is not manipulated;

means for referring to the process limit information before execution of a program loaded in the memory and judging whether a process by the main-processing unit for a program loaded in the memory accords with a process included in the process limit information or not; and

means for not permitting execution of the program of the main-processing unit when said means judges that the processes accord with that.

2. The information processing apparatus according to claim 1, wherein

the main-processing unit comprises

address control means for controlling read/write for the memory, and

the sub-processing unit judges whether a process for information stored in an address range designated by the address control means accords with a process included in the process limit information or not.

3. The information processing apparatus according to claim 1, further comprising

means for storing or updating a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.

4. The information processing apparatus according to claim 2, further comprising

means for storing or updating a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.

5. An information processing apparatus comprising:

a main-processing unit and a sub-processing unit capable of executing a program;

a memory for loading a program to be executed; and

storing means for storing process limit information which indicates a limitation on a process for a program loaded in the memory, wherein

the sub-processing unit is capable of performing the operations of

judging whether a program to be executed is manipulated or not;

loading a program to be executed in the memory when it is judged that the program is not manipulated;

referring to the process limit information before execution of a program loaded in the memory and judging whether a process by the main-processing unit for a program loaded in the memory accords with a process included in the process limit information or not; and

not permitting execution of the program of the main-processing unit when it is judged that the processes accord with that.

6. The information processing apparatus according to claim 5, wherein

the main-processing unit is further capable of performing the operation of

designating an address range of read/write for the memory, and

the sub-processing unit is further capable of performing the operation of

judging whether a process for information stored in the designated address range accords with a process included in the process limit information or not.

7. The information processing apparatus according to claim 5, wherein

the main-processing unit or the sub-processing unit is further capable of performing the operation of

storing or updating a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.

8. The information processing apparatus according to claim 6, wherein

the main-processing unit or the sub-processing unit is further capable of performing the operation of

storing or updating a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.

9. An information processing method using a computer which comprises:

a main-processing unit and a sub-processing unit capable of executing a program;

a memory for loading a program to be executed; and

storing means for storing process limit information which indicates a limitation on a process for a program loaded in the memory, comprising the steps of

by using the sub-processing unit,

judging whether a program to be executed is manipulated or not;

loading a program to be executed in the memory when it is judged that the program is not manipulated;

referring to the process limit information before execution of a program loaded in the memory and judging whether a process by the main-processing unit for a program loaded in the memory accords with a process included in the process limit information or not; and

not permitting execution of the program of the main-processing unit when it is judged that the processes accord with that.

10. The information processing method according to claim 9, comprising the further steps of

by using the main-processing unit,

designating an address range of read/write for the memory, and

by using the sub-processing unit,

judging whether a process for information stored in the designated address range accords with a process included in the process limit information or not.

11. The information processing method according to claim 9, comprising the further step of

storing or updating a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.

12. The information processing method according to claim 10, comprising the further step of

storing or updating a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.

13. A record medium storing a computer program for a computer including:

a main-processing unit and a sub-processing unit capable of executing a program;

a memory for loading a program to be executed; and

storing means for storing process limit information which indicates a limitation on a process for a program loaded in the memory, wherein

the computer program stored in the record medium comprises the steps of

causing the sub-processing unit to judge whether a program to be executed is manipulated or not;

causing the sub-processing unit to load a program to be executed in the memory when it is judged that the program is not manipulated;

causing the sub-processing unit to refer to the process limit information before execution of a program loaded in the memory and judge whether a process by the main-processing unit for a program loaded in the memory accords with a process included in the process limit information or not; and

causing the sub-processing unit not to permit execution of the program of the main-processing unit when it is judged that the processes accord with that.

14. The record medium according to claim 13, comprising the further steps of

causing the main-processing unit to designate an address range of read/write for the memory;

and

causing the sub-processing unit to judge whether a process for information stored in a designated address range accords with a process included in the process limit information or not.

15. The record medium according to claim 13, comprising the further step of

causing the sub-processing unit to store or update a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.

16. The record medium according to claim 14, comprising the further step of

causing the sub-processing unit to store or update a program to be executed with added information acquirable by only the sub-processing unit when it is judged that said program is not manipulated, in a case of storing or updating said program.