Information processing apparatus and information processing method for restoring apparatus when encryption key is changed

1. An information processing apparatus having a user authentication function, the information processing apparatus comprising:

a first hardware security module comprising a memory configured to store an encryption key used to encrypt confidential data comprising information to perform the user authentication function;

a verification engine configured to verify whether the encryption key stored in the first hardware security module is correct;

a disabling engine configured to disable the user authentication function of the information processing apparatus responsive to the verification engine verifies that the encryption key stored in the first hardware security module is not correct;

a display engine configured to display a notification on a display of the information processing apparatus after the disablement of the user authentication function;

a backup engine configured to back up the encryption key stored in the first hardware security module onto an external memory; and

a restoration engine configured to restore the encryption key backed up onto the external memory in a second hardware security module after the first hardware security module is replaced by the second hardware security module.

2. The information processing apparatus according to claim 1 , wherein the confidential data includes password information to be used to determine whether a user has administrator authority when the user authentication function is executed.

3. The information processing apparatus according to claim 2 , wherein in a case where the user authentication function is enabled, the information processing apparatus conducts restoration by the restoration engine under an instruction from an authenticated user having the administrator authority.

4. The information processing apparatus according to claim 1 , wherein in a case where processing to activate the information processing apparatus starts, the verification engine verifies whether the encryption key stored in the first hardware security module is correct.

5. The information processing apparatus according to claim 1 , wherein the display engine displays, in a case where the verification engine verifies that the encryption key stored in the first hardware security module is not correct, a message that the encryption key stored in the first hardware security module is in a mismatching state.

6. The information processing apparatus according to claim 1 , further comprising a determination engine configured to determine, in a case where the verification engine verifies that the encryption key stored in the first hardware security module is not correct, whether the user authentication function is enabled based on setting information about the user authentication function,

wherein in a case where the determination engine determines that the user authentication function is enabled, the disabling engine disables a target function based on setting information about the target function.

7. The information processing apparatus according to claim 6 , further comprising a setting engine configured to set setting information.

8. The information processing apparatus according to claim 1 , further comprising a backup data determination engine configured to determine, in a case where the verification engine verifies that the encryption key stored in the first hardware security module is not correct, whether backup data of the encryption key stored in the first hardware security module exists in an external memory connected to the information processing apparatus.

9. The information processing apparatus according to claim 1 , wherein the information processing apparatus is a multi-function peripheral having at least a print function.

10. A method of controlling an information processing apparatus having a user authentication function and including a first hardware security module configured to store an encryption key used to encrypt confidential data comprising information to perform the user authentication function, the method comprising:

verifying whether the encryption key stored in the first hardware security module is correct;

disabling the user authentication function of the information processing apparatus responsive to the verification determining that the encryption key stored in the first hardware security module is not correct;

displaying a notification on a display of the information processing apparatus after the disablement of the user authentication function;

backing up the encryption key stored in the first hardware security module onto an external memory; and

restoring the encryption key backed up onto the external memory in a second hardware security module after the first hardware security module is replaced by the second hardware security module.

11. A non-transitory storage medium storing a program for causing an information processing apparatus having a user authentication function and including a first hardware security module configured to store an encryption key used to encrypt confidential data comprising information to perform the user authentication function, to execute the program to perform a method comprising:

verifying whether the encryption key stored in the first hardware security module is correct;

disabling the user authentication function of the information processing apparatus responsive to the verification determining that the encryption key stored in the first hardware security module is not correct;

displaying a notification on a display of the information processing apparatus after the disablement of the user authentication function;

backing up the encryption key stored in the first hardware security module onto an external memory; and

restoring the encryption key backed up onto the external memory in a second hardware security module after the first hardware security module is replaced by the second hardware security module.