Information processing apparatus, information processing method, and non-transitory computer readable medium for verifying software
An information processing apparatus ( 100 ) includes a validity verification unit ( 101 ). The validity verification unit ( 101 ) verifies validity of startup software by comparing verification subject data which is data for verification calculated based on data stored in a storage place indicated in startup record data indicating the storage place where the startup software executed at startup of the information processing apparatus ( 100 ) is to be stored, and which is data for verification calculated at the startup of the information processing apparatus ( 100 ), with comparison data which is data for verification calculated before the startup of the information processing apparatus ( 100 ) based on the startup software, and which is data for verification used as a comparison subject of the verification subject data.
1 . An information processing apparatus that verifies software comprising:
processing circuitry:
to verify validity of startup software by comparing verification subject data with comparison data, the verification subject data being data for verification calculated based on data stored in a storage place in a memory indicated in startup record data indicating the storage place where the startup software is to be stored, the startup software being executed at startup of the information processing apparatus, and the verification subject data being data for verification calculated at the startup of the information processing apparatus, the comparison data being data for verification calculated before the startup of the information processing apparatus based on the startup software, and the comparison data being data for verification used as a comparison subject of the verification subject data;
to detect that software whose execution is to be started last among pieces of the startup software has been executed; and
to acquire storage place data indicating the storage place of each software started up from the startup of the information processing apparatus until it is detected that the software whose execution is to be started last among pieces of the startup software, and to update the startup record data using the acquired storage place data.
2 . The information processing apparatus according to claim 1 , wherein
the startup record data consists of data indicating a start address of the storage place and data indicating a data size of the startup software.
3 . The information processing apparatus according to claim 1 , wherein
the data for verification is data indicating a hash value or a Message Authentication Code (MAC) of software corresponding to the data for verification.
4 . The information processing apparatus according to claim 2 , wherein
the data for verification is data indicating a hash value or a Message Authentication Code (MAC) of software corresponding to the data for verification.
5 . The information processing apparatus according to claim 1 , wherein
the processing circuitry detects software in which a configuration change has been implemented when the configuration change has been implemented to the software stored in the information processing apparatus while the information processing apparatus is in operation, and
when the software in which the configuration change has been implemented is detected, the processing circuitry calculates comparison data corresponding to the software in which the configuration change has been implemented.
6 . The information processing apparatus according to claim 2 , wherein
the processing circuitry detects software in which a configuration change has been implemented when the configuration change has been implemented to the software stored in the information processing apparatus while the information processing apparatus is in operation, and
when the software in which the configuration change has been implemented is detected, the processing circuitry calculates comparison data corresponding to the software in which the configuration change has been implemented.
7 . The information processing apparatus according to claim 3 , wherein
the processing circuitry detects software in which a configuration change has been implemented when the configuration change has been implemented to the software stored in the information processing apparatus while the information processing apparatus is in operation, and
when the software in which the configuration change has been implemented is detected, the processing circuitry calculates comparison data corresponding to the software in which the configuration change has been implemented.
8 . The information processing apparatus according to claim 4 , wherein
the processing circuitry detects software in which a configuration change has been implemented when the configuration change has been implemented to the software stored in the information processing apparatus while the information processing apparatus is in operation, and
when the software in which the configuration change has been implemented is detected, the processing circuitry calculates comparison data corresponding to the software in which the configuration change has been implemented.
9 . An information processing method executed by an information processing apparatus which is a computer that verifies software comprising:
verifying validity of startup software by comparing verification subject data with comparison data, the verification subject data being data for verification calculated based on data stored in a storage place in a memory indicated in startup record data indicating the storage place where the startup software is to be stored, the startup software being executed at startup of the information processing apparatus, and the verification subject data being data for verification calculated at the startup of the information processing apparatus, the comparison data being data for verification calculated before the startup of the information processing apparatus based on the startup software, and the comparison data being data for verification used as a comparison subject of the verification subject data;
detecting that software whose execution is to be started last among pieces of the startup software has been executed; and
acquiring storage place data indicating the storage place of each software started up from the startup of the information processing apparatus until it is detected that the software whose execution is to be started last among pieces of the startup software, and updating the startup record data using the acquired storage place data.
10 . A non-transitory computer readable medium storing an information processing program for causing an information processing apparatus which is a computer that verifies software to execute:
a validity verification process to verify validity of startup software by comparing verification subject data with comparison data, the verification subject data being data for verification calculated based on data stored in a storage place in a memory indicated in startup record data indicating the storage place where the startup software is to be stored, the startup software being executed at startup of the information processing apparatus, and the verification subject data being data for verification calculated at the startup of the information processing apparatus, the comparison data being data for verification calculated before the startup of the information processing apparatus based on the startup software, and the comparison data being data for verification used as a comparison subject of the verification subject data;
a startup completion notification process to detect that software whose execution is to be started last among pieces of the startup software has been executed; and
a startup record acquisition process to acquire storage place data indicating the storage place of each software started up from the startup of the information processing apparatus until it is detected that the software whose execution is to be started last among pieces of the startup software, and to update the startup record data using the acquired storage place data.