ENABLE/DISABLE METHOD OF ADDITIONAL-FUNCTION UNIT, SYSTEM FOR SAME, PROGRAM FOR SAME, AS WELL AS ADDITIONAL-FUNCTION UNIT

• US 20130340038A1
• Filed: 09/12/2011
• Published: 12/19/2013
• Est. Priority Date: 02/16/2011
• Status: Active Grant

• Current Assignee: NEC Platforms, Ltd.
• Original Assignee: NEC Infrontia Corporation (NEC Corporation)
• Inventors: Komiyama, Tsuyoshi
• Granted Patent: US 8,910,242 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability

Abstract

The objective of the present invention is to disable functionality of an additional-function unit if an unauthorized program has been installed in an information processing device, thereby preventing an unauthorized program from acquiring, in an unauthorized manner, information from the additional-function unit. The present invention is an enable/disable method for an additional-function unit in an information processing device to which the additional-function unit has been added, which has a step for calculating a first directional function value on the basis of data included in a recording medium storing a boot loader and an operating system so as to store the first directional function value at manufacture time into the additional-function unit, a step for calculating a second directional function value on the basis of data included in the recording medium after the information processing device has been started up, and a step for disabling the functionality of the additional-function unit if the first directional function value and the second directional function value are different.

Claims

1. A method of validating/invalidating an additional function unit in an information processing apparatus to which the additional function unit is added, the method comprising:

a step of calculating a first one-way function value based on data included in a recording medium that stores a boot loader and an operating system, and storing the first one-way function value in the additional function unit upon manufacturing;

a step of calculating a second one-way function value based on the data included in the recording medium after the information processing apparatus is activated; and

a step of, when the first one-way function value and the second one-way function value are different, invalidating a function of the additional function unit,

wherein the recording medium is provided in the information processing apparatus,

the additional function unit is a unit that is added to the information processing apparatus,

the information processing apparatus is a payment function mounted handy terminal, and

the additional function unit is a PIN (Personal Identification Number) input unit.

2. The method of validating/invalidating the additional function unit according to claim 1, wherein:

the second one-way function value is calculated by the information processing apparatus;

the second one-way function value is transmitted from the information processing apparatus to the additional function unit; and

the first one-way function value and the second one-way function value are compared by the additional function unit.

3. The method of validating/invalidating the additional function unit according to claim 1, further comprising:

a step of calculating per application program a third one-way function value based on data of an application program, and storing the third one-way function value in the additional function unit upon manufacturing;

a step of calculating per application program a fourth one-way function value based on the data of the application program after the information processing apparatus is activated; and

a step of, when the third one-way function value and the fourth one-way function value of at least part of application programs are different, invalidating the function of the additional function unit.

4. The method of validating/invalidating the additional function unit according to claim 3, wherein:

the fourth one-way function value is calculated by the information processing apparatus;

the fourth one-way function value is transmitted from the information processing apparatus to the additional function unit; and

the third one-way function value and the fourth one-way function value are compared by the additional function unit.

5. The method of validating/invalidating the additional function unit according to claim 1, further comprising:

a step of calculating a fifth one-way function value based on data of a plurality of application programs, and storing the fifth one-way function value in the additional function unit upon manufacturing;

a step of calculating a sixth one-way function value based on the data of the plurality of application programs after the information processing apparatus is activated; and

a step of, when the fifth one-way function value and the sixth one-way function value are different, invalidating the function of the additional function unit.

6. The method of validating/invalidating the additional function unit according to claim 5, wherein:

the sixth one-way function value is calculated by the information processing apparatus;

the sixth one-way function value is transmitted from the information processing apparatus to the additional function unit; and

the fifth one-way function value and the sixth one-way function value are compared by the additional function unit.

7. A system that validates/invalidates an additional function unit in an information processing apparatus to which the additional function unit is added, the system comprising:

a means that calculates a first one-way function value based on data included in a recording medium that stores a boot loader and an operating system, and stores the first one-way function value in the additional function unit upon manufacturing;

a means that calculates a second one-way function value based on the data included in the recording medium after the information processing apparatus is activated; and

a means that, when the first one-way function value and the second one-way function value are different, invalidates a function of the additional function unit,

wherein the recording medium is provided in the information processing apparatus,

the additional function unit is a unit that is added to the information processing apparatus,

the information processing apparatus is a payment function mounted handy terminal, and

the additional function unit is a PIN (Personal Identification Number) input unit.

8. The system that validates/invalidates the additional function unit according to claim 7, wherein:

the second one-way function value is calculated by the information processing apparatus;

the second one-way function value is transmitted from the information processing apparatus to the additional function unit; and

the first one-way function value and the second one-way function value are compared by the additional function unit.

9. The system that validates/invalidates the additional function unit according to claim 7, further comprising:

a means that calculates per application program a third one-way function value based on data of an application program, and stores the third one-way function value in the additional function unit upon manufacturing;

a means that calculates per application program a fourth one-way function value based on the data of the application program after the information processing apparatus is activated; and

a means that, when the third one-way function value and the fourth one-way function value of at least part of application programs are different, invalidates the function of the additional function unit.

10. The system that validates/invalidates the additional function unit according to claim 9, wherein:

the fourth one-way function value is calculated by the information processing apparatus;

the fourth one-way function value is transmitted from the information processing apparatus to the additional function unit; and

the third one-way function value and the fourth one-way function value are compared by the additional function unit.

11. The system that validates/invalidates the additional function unit according to claim 7, further comprising:

a means that calculates a fifth one-way function value based on data of a plurality of application programs, and stores the fifth one-way function value in the additional function unit upon manufacturing;

a means that calculates a sixth one-way function value based on the data of the plurality of application programs after the information processing apparatus is activated; and

a means that, when the fifth one-way function value and the sixth one-way function value are different, invalidates the function of the additional function unit.

12. The system that validates/invalidates the additional function unit according to claim 11, wherein:

the sixth one-way function value is calculated by the information processing apparatus;

the sixth one-way function value is transmitted from the information processing apparatus to the additional function unit; and

the fifth one-way function value and the sixth one-way function value are compared by the additional function unit.

13. A program that causes a computer to function as a system that validates/invalidates an additional function unit in an information processing apparatus to which the additional function unit is added, the program causing the computer to function as:

a means that calculates a first one-way function value based on data included in a recording medium that stores a boot loader and an operating system, and stores the first one-way function value in the additional function unit upon manufacturing;

a means that calculates a second one-way function value based on the data included in the recording medium after the information processing apparatus is activated; and

a means that, when the first one-way function value and the second one-way function value are different, invalidates a function of the additional function unit,

wherein the recording medium is provided in the information processing apparatus,

the additional function unit is a unit that is added to the information processing apparatus,

the information processing apparatus is a payment function mounted handy terminal, and

the additional function unit is a PIN (Personal Identification Number) input unit.

14. The program according to claim 13 causing-the computer to have:

the information processing apparatus calculate the second one-way function value;

the information processing apparatus transmit the second one-way function value to the additional function unit; and

the additional function unit compare the first one-way function value and the second one-way function value.

15. The program according to claim 13, further causing the computer to function as:

a means that calculates per application program a third one-way function value based on data of an application program, and stores the third one-way function value in the additional function unit upon manufacturing;

a means that calculates per application program a fourth one-way function value based on the data of the application program after the information processing apparatus is activated; and

a means that, when the third one-way function value and the fourth one-way function value of at least part of application programs are different, invalidates the function of the additional function unit.

16. The program according to claim 15, further causing the computer to have:

the information processing apparatus calculate the fourth one-way function value;

the information processing apparatus transmit the fourth one-way function value to the additional function unit; and

the additional function unit compare the third one-way function value and the fourth one-way function value.

17. The program according to claim 13, further causing the computer to function as:

a means that calculates a fifth one-way function value based on data of a plurality of application programs, and stores the fifth one-way function value in the additional function unit upon manufacturing;

a means that calculates a sixth one-way function value based on the data of the plurality of application programs after the information processing apparatus is activated; and

a means that, when the fifth one-way function value and the sixth one-way function value are different, invalidates the function of the additional function unit.

18. The program according to claim 17, further causing the computer to have:

the information processing apparatus calculate the sixth one-way function value;

the information processing apparatus transmit the sixth one-way function value to the additional function unit; and

the additional function unit compare the fifth one-way function value and the sixth one-way function value.

19. An additional function unit that is added to an information processing apparatus, the additional function unit comprising:

a means that stores upon manufacturing a first one-way function value calculated based on data included in a recording medium that stores a boot loader and an operating system; and

a means that, when a second one-way function value calculated based on the data included in the recording medium after the information processing apparatus is activated, and the first one-way function value are different, invalidates a function of the additional function unit,

wherein the recording medium is provided in the information processing apparatus,

the additional function unit is a unit that is added to the information processing apparatus,

the information processing apparatus is a payment function mounted handy terminal, and

the additional function unit is a PIN (Personal Identification Number) input unit.

20. (canceled)

21. (canceled)

22. A program that causes a computer to function as an apparatus that validates/invalidates an additional function unit that is added to the information processing apparatus, the program causing the computer to function as:

a means that stores upon manufacturing a first one-way function value calculated based on data included in a recording medium that stores a boot loader and an operating system; and

a means that, when a second one-way function value calculated based on the data included in the recording medium after the information processing apparatus is activated, and the first one-way function value are different, invalidates a function of the additional function unit,

wherein the recording medium is provided in the information processing apparatus,

the additional function unit is a unit that is added to the information processing apparatus,

the information processing apparatus is a payment function mounted handy terminal, and

the additional function unit is a PIN (Personal Identification Number) input unit.

23. (canceled)

24. (canceled)