Information processing apparatus and method of controlling the apparatus
An information processing apparatus holding a secure chip includes a determination unit that determines whether the information processing apparatus returns from an idle state; a detection unit that, if the determination unit determines that the information processing apparatus returns from the idle state, detects initialization of the secure chip before starting application software; and a control unit that, if the detection unit detects the initialization of the secure chip, controls an operation of the information processing apparatus so that a hash value of the application software is not registered in the secure chip that is initialized.
1. An information processing apparatus holding a secure chip in which a hash value is capable of being registered, the information processing apparatus comprising:
a determination unit configured to determine whether the information processing apparatus returns from an idle state;
a detection unit configured to, if the determination unit determines that the information processing apparatus returns from the idle state, detect initialization of the secure chip before starting application software; and
a control unit configured to, if detection of the initialization of the secure chip is done and restart of the information processing apparatus is not permitted, register a constant indicating that a platform configuration register (PCR) has an initial value in system return in the secure chip, and if determination that the information processing apparatus returns from an idle state is not done, control an operation of the information processing apparatus so that the hash value of the application software is registered in the secure chip.
2. The information processing apparatus according to claim 1 ,
wherein the secure chip includes a volatile memory in which the hash value of software executed in the information processing apparatus is registered.
3. The information processing apparatus according to claim 1 ,
wherein the secure chip is a trusted platform module (TPM).
4. The information processing apparatus according to claim 1 ,
wherein, if the detection unit detects that the secure chip is initialized, the control unit restarts the information processing apparatus.
5. The information processing apparatus according to claim 1 ,
wherein, if the detection unit detects that the secure chip is initialized, the control unit makes the secure chip unavailable from the information processing apparatus.
6. The information processing apparatus according to claim 5 ,
wherein, if the detection unit detects that the secure chip is initialized, the control unit transmits a command to deactivate the secure chip to the secure chip to make the secure chip unavailable from the information processing apparatus.
7. The information processing apparatus according to claim 5 ,
wherein, if the detection unit detects that the secure chip is initialized, the control unit restricts access to the secure chip to make the secure chip unavailable from the information processing apparatus.
8. The information processing apparatus according to claim 1 ,
wherein, if the detection unit detects that the secure chip is initialized, the control unit registers a random number in the secure chip.
9. A method of controlling an information processing apparatus holding a secure chip in which a hash value is capable of being registered, the method comprising:
determining whether the information processing apparatus returns from an idle state;
detecting, if the determining determines that the information processing apparatus returns from the idle state, initialization of the secure chip before starting application software; and
if detection of the initialization of the secure chip is done and restart of the information processing apparatus is not permitted, registering a constant indicating that a platform configuration register (PCR) has an initial value in system return in the secure chip, and if determination that the information processing apparatus returns from an idle state is not done, controlling an operation of the information processing apparatus so that the hash value of the application software is registered in the secure chip.
10. A non-transitory storage medium storing a program that when executed causes an information processing apparatus to perform a process, the information processing apparatus holding a secure chip in which a hash value is capable of being registered, the process comprising:
determining whether the information processing apparatus returns from an idle state;
detecting, if the determining determines that the information processing apparatus returns from the idle state, initialization of the secure chip before starting application software; and
if detection of the initialization of the secure chip is done and restart of the information processing apparatus is not permitted, registering a constant indicating that a platform configuration register (PCR) has an initial value in system return in the secure chip, and if determination that the information processing apparatus returns from an idle state is not done, controlling an operation of the information processing apparatus so that the hash value of the application software is registered in the secure chip.