Enable/disable method of additional-function unit, system for same, program for same, as well as additional-function unit
View Patent ↗The objective of the present invention is to disable functionality of an additional-function unit if an unauthorized program has been installed in an information processing device, thereby preventing an unauthorized program from acquiring, in an unauthorized manner, information from the additional-function unit. The present invention is an enable/disable method for an additional-function unit in an information processing device to which the additional-function unit has been added, which has a step for calculating a first directional function value on the basis of data included in a recording medium storing a boot loader and an operating system so as to store the first directional function value at manufacture time into the additional-function unit, a step for calculating a second directional function value on the basis of data included in the recording medium after the information processing device has been started up, and a step for disabling the functionality of the additional-function unit if the first directional function value and the second directional function value are different.
1. A method of validating/invalidating an additional function unit in an information processing apparatus to which the additional function unit is added, the method comprising:
a step of calculating a first one-way function value based on data included in a recording medium that stores a boot loader and an operating system, and storing the first one-way function value in the additional function unit upon manufacturing;
a step of calculating a second one-way function value based on the data included in the recording medium after the information processing apparatus is activated; and
a step of, when the first one-way function value and the second one-way function value are different, invalidating a function of the additional function unit,
wherein the recording medium is provided in the information processing apparatus,
the additional function unit is a unit that is added to the information processing apparatus,
the information processing apparatus is a payment function mounted handy terminal, and
the additional function unit is a PIN (Personal Identification Number) input unit.
2. The method of validating/invalidating the additional function unit according to claim 1 , wherein:
the second one-way function value is calculated by the information processing apparatus;
the second one-way function value is transmitted from the information processing apparatus to the additional function unit; and
the first one-way function value and the second one-way function value are compared by the additional function unit.
3. The method of validating/invalidating the additional function unit according to claim 1 , further comprising:
a step of calculating per application program a third one-way function value based on data of an application program, and storing the third one-way function value in the additional function unit upon manufacturing;
a step of calculating per application program a fourth one-way function value based on the data of the application program after the information processing apparatus is activated; and
a step of, when the third one-way function value and the fourth one-way function value of at least part of application programs are different, invalidating the function of the additional function unit.
4. The method of validating/invalidating the additional function unit according to claim 3 , wherein:
the fourth one-way function value is calculated by the information processing apparatus;
the fourth one-way function value is transmitted from the information processing apparatus to the additional function unit; and
the third one-way function value and the fourth one-way function value are compared by the additional function unit.
5. The method of validating/invalidating the additional function unit according to claim 1 , further comprising:
a step of calculating a fifth one-way function value based on data of a plurality of application programs, and storing the fifth one-way function value in the additional function unit upon manufacturing;
a step of calculating a sixth one-way function value based on the data of the plurality of application programs after the information processing apparatus is activated; and
a step of, when the fifth one-way function value and the sixth one-way function value are different, invalidating the function of the additional function unit.
6. The method of validating/invalidating the additional function unit according to claim 5 , wherein:
the sixth one-way function value is calculated by the information processing apparatus;
the sixth one-way function value is transmitted from the information processing apparatus to the additional function unit; and
the fifth one-way function value and the sixth one-way function value are compared by the additional function unit.
7. A system that validates/invalidates an additional function unit in an information processing apparatus to which the additional function unit is added, the system comprising:
a unit configured to calculate a first one-way function value based on data included in a recording medium that stores a boot loader and an operating system, and to store the first one-way function value in the additional function unit upon manufacturing;
a unit configured to calculate a second one-way function value based on the data included in the recording medium after the information processing apparatus is activated; and
a unit configured to invalidate a function of the additional function unit when the first one-way function value and the second one-way function value are different,
wherein the recording medium is provided in the information processing apparatus,
the additional function unit is a unit that is added to the information processing apparatus,
the information processing apparatus is a payment function mounted handy terminal, and
the additional function unit is a PIN (Personal Identification Number) input unit.
8. The system that validates/invalidates the additional function unit according to claim 7 , wherein:
the second one-way function value is calculated by the information processing apparatus;
the second one-way function value is transmitted from the information processing apparatus to the additional function unit; and
the first one-way function value and the second one-way function value are compared by the additional function unit.
9. The system that validates/invalidates the additional function unit according to claim 7 , further comprising:
a unit configured to calculate per application program a third one-way function value based on data of an application program, and to store the third one-way function value in the additional function unit upon manufacturing;
a unit configured to calculate per application program a fourth one-way function value based on the data of the application program after the information processing apparatus is activated; and
a unit configured to invalidate the function of the additional function unit when the third one-way function value and the fourth one-way function value of at least part of application programs are different.
10. The system that validates/invalidates the additional function unit according to claim 9 , wherein:
the fourth one-way function value is calculated by the information processing apparatus;
the fourth one-way function value is transmitted from the information processing apparatus to the additional function unit; and
the third one-way function value and the fourth one-way function value are compared by the additional function unit.
11. The system that validates/invalidates the additional function unit according to claim 7 , further comprising:
a unit configured to calculate a fifth one-way function value based on data of a plurality of application programs, and to store the fifth one-way function value in the additional function unit upon manufacturing;
a unit configured to calculate a sixth one-way function value based on the data of the plurality of application programs after the information processing apparatus is activated; and
a unit configured to invalidate the function of the additional function unit when the fifth one-way function value and the sixth one-way function value are different.
12. The system that validates/invalidates the additional function unit according to claim 11 , wherein:
the sixth one-way function value is calculated by the information processing apparatus;
the sixth one-way function value is transmitted from the information processing apparatus to the additional function unit; and
the fifth one-way function value and the sixth one-way function value are compared by the additional function unit.
13. A non-transitory recording medium storing a program that causes a computer to function as a system that validates/invalidates an additional function unit in an information processing apparatus to which the additional function unit is added, the program causing the computer to function as:
a unit configured to calculate a first one-way function value based on data included in a recording medium that stores a boot loader and an operating system, and to store the first one-way function value in the additional function unit upon manufacturing;
a unit configured to calculate a second one-way function value based on the data included in the recording medium after the information processing apparatus is activated; and
a unit configured to invalidate a function of the additional function unit when the first one-way function value and the second one-way function value are different,
wherein the recording medium is provided in the information processing apparatus,
the additional function unit is a unit that is added to the information processing apparatus,
the information processing apparatus is a payment function mounted handy terminal, and
the additional function unit is a PIN (Personal Identification Number) input unit.
14. The non-transitory recording medium storing the program according to claim 13 , the program causing the computer to have:
the information processing apparatus calculate the second one-way function value;
the information processing apparatus transmit the second one-way function value to the additional function unit; and
the additional function unit compare the first one-way function value and the second one-way function value.
15. The non-transitory recording medium storing the program according to claim 13 , them further causing the computer to function as:
a unit configured to calculate per application program a third one-way function value based on data of an application program, and to store the third one-way function value in the additional function unit upon manufacturing;
a unit configured to calculate per application program a fourth one-way function value based on the data of the application program after the information processing apparatus is activated; and
a unit configured to invalidate the function of the additional function unit when the third one-way function value and the fourth one-way function value of at least part of application programs are different.
16. The non-transitory recording medium storing the program according to claim 15 , them further causing the computer to have:
the information processing apparatus calculate the fourth one-way function value;
the information processing apparatus transmit the fourth one-way function value to the additional function unit; and
the additional function unit compare the third one-way function value and the fourth one-way function value.
17. The non-transitory recording medium storing the program according to claim 13 , them further causing the computer to function as:
a unit configured to calculate a fifth one-way function value based on data of a plurality of application programs, and to store the fifth one-way function value in the additional function unit upon manufacturing;
a unit configured to calculate a sixth one-way function value based on the data of the plurality of application programs after the information processing apparatus is activated; and
a unit configured to invalidate the function of the additional function unit when the fifth one-way function value and the sixth one-way function value are different.
18. The non-transitory recording medium storing the program according to claim 17 , them further causing the computer to have:
the information processing apparatus calculate the sixth one-way function value;
the information processing apparatus transmit the sixth one-way function value to the additional function unit; and
the additional function unit compare the fifth one-way function value and the sixth one-way function value.
19. An additional function unit that is added to an information processing apparatus, the additional function unit comprising:
a unit configured to store upon manufacturing a first one-way function value calculated based on data included in a recording medium that stores a boot loader and an operating system; and
a unit configured to invalidate a function of the additional function unit, when a second one-way function value calculated based on the data included in the recording medium after the information processing apparatus is activated, and the first one-way function value are different,
wherein the recording medium is provided in the information processing apparatus,
the additional function unit is a unit that is added to the information processing apparatus,
the information processing apparatus is a payment function mounted handy terminal, and
the additional function unit is a PIN (Personal Identification Number) input unit.
20. A non-transitory recording medium storing a program that causes a computer to function as an apparatus that validates/invalidates an additional function unit that is added to the information processing apparatus, the program causing the computer to function as:
a unit configured to store upon manufacturing a first one-way function value calculated based on data included in a recording medium that stores a boot loader and an operating system; and
a unit configured to invalidate a function of the additional function unit when a second one-way function value calculated based on the data included in the recording medium after the information processing apparatus is activated, and the first one-way function value are different,
wherein the recording medium is provided in the information processing apparatus,
the additional function unit is a unit that is added to the information processing apparatus,
the information processing apparatus is a payment function mounted handy terminal, and
the additional function unit is a PIN (Personal Identification Number) input unit.