INFORMATION PROCESSING APPARATUS, METHOD FOR RELEASING RESTRICTION ON USE OF STORAGE DEVICE, AND STORAGE MEDIUM

• US 20130160077A1
• Filed: 12/13/2012
• Published: 06/20/2013
• Est. Priority Date: 12/15/2011
• Status: Active Grant

• Current Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Original Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Inventors: Akiba, Tomohiro
• Granted Patent: US 9,405,938 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

An information processing apparatus includes an authentication information storage unit that stores authentication information for releasing restriction on use of a storage device, a release unit that releases the restriction on use of the storage device based on the authentication information, a generation unit that generates new authentication information for releasing the restriction on use of the storage device, and a setting unit that, after the restriction on use of the storage device is released, set the new authentication information in the storage device.

Claims

1. An information processing apparatus comprising:

an authentication information storage unit configured to store authentication information for releasing restriction on use of a storage device;

a release unit configured to release the restriction on use of the storage device based on the authentication information;

a generation unit configured to generate new authentication information for releasing the restriction on use of the storage device; and

a setting unit configured to, after the restriction on use of the storage device is released based on the authentication information stored in the authentication information storage unit, set the new authentication information in the storage device.

2. The information processing apparatus according to claim 1, wherein, after the setting unit sets the new authentication information in the storage device, the authentication information storage unit stores the new authentication information.

3. The information processing apparatus according to claim 1, further comprising a determination unit configured to determine whether the authentication information stored in the authentication information storage unit and the new authentication information are identical,

wherein the setting unit is configured to set the new authentication information in the storage device when the authentication information stored in the authentication information storage unit and the new authentication information are not identical.

4. The information processing apparatus according to claim 1, further comprising a determination unit configured to determine whether an algorithm used to generate the authentication information stored in the authentication information storage unit and an algorithm used to generate the new authentication information are identical,

wherein the setting unit is configured to set the new authentication information in the storage device when the algorithm used to generate the authentication information stored in the authentication information storage unit and the algorithm used to generate the new authentication information are not identical.

5. The information processing apparatus according to claim 4, further comprising an identification information storage unit configured to store identification information corresponding to the algorithm used to generate the authentication information stored in the authentication information storage unit,

wherein the determination unit is configured to compare the identification information stored in the identification information storage unit with identification information corresponding to the algorithm used to generate the new authentication information.

6. The information processing apparatus according to claim 4,

wherein the storage device is configured to store identification information corresponding to the algorithm used to generate the authentication information stored in the authentication information storage unit, and

wherein the determination unit is configured to compare the identification information stored in the storage device with identification information corresponding to the algorithm used to generate the new authentication information.

7. The information processing apparatus according to claim 1, wherein the generation unit is configured to generate the new authentication information based on identification information for identifying the storage device.

8. The information processing apparatus according to claim 1, wherein the generation unit is configured to generate the new authentication information using an algorithm that is different from an algorithm used to generate the authentication information stored in the authentication information storage unit.

9. A method performed by an information processing apparatus for releasing restriction on use of a storage device, the method comprising:

storing authentication information for releasing the restriction on use of the storage device in an authentication information storage unit;

releasing the restriction on use of the storage device based on the authentication information;

generating new authentication information for releasing the restriction on use of the storage device; and

setting, after the restriction on use of the storage device is released based on the authentication information stored in the authentication information storage unit, the new authentication information in the storage device.

10. The method according to claim 9, further comprising, after the new authentication information is set in the storage device, storing the new authentication information in the authentication information storage unit.

11. The method according to claim 9, further comprising:

determining whether the authentication information stored in the authentication information storage unit and the new authentication information are identical,

wherein, when the authentication information stored in the authentication information storage unit and the new authentication information are not identical, the new authentication information is set in the storage device.

12. The method according to claim 9, further comprising:

determining whether an algorithm used to generate the authentication information stored in the authentication information storage unit and an algorithm used to generate the new authentication information are identical

wherein, when the algorithm used to generate the authentication information stored in the authentication information storage unit and the algorithm used to generate the new authentication information are not identical, the new authentication information is set in the storage device.

13. The method according to claim 12, further comprising:

storing in an identification information storage unit identification information corresponding to the algorithm used to generate the authentication information stored in the authentication information storage unit; and

comparing the identification information stored in the identification information storage unit with identification information corresponding to the algorithm used to generate the new authentication information.

14. The method according to claim 9, wherein the new authentication information is generated based on identification information for identifying the storage device.

15. The method according to claim 9, wherein the new authentication information is generated using an algorithm that is different from an algorithm used to generate the authentication information stored in the authentication information storage unit.

16. A non-transitory computer-readable storage medium storing a program that causes a computer to execute a method, the method comprising:

storing authentication information for releasing restriction on use of a storage device in an authentication information storage unit;

releasing the restriction on use of the storage device based on the authentication information;

generating new authentication information for releasing the restriction on use of the storage device; and

setting, after the restriction on use of the storage device is released based on the authentication information stored in the authentication information storage unit, the new authentication information in the storage device.