Information processing apparatus for detecting tampering with software executed at boot time, method for rebooting information processing apparatus, and storage medium
An information processing apparatus includes a detector configured to detect tampering with at least one of a plurality of software components to be executed in accordance with a boot instruction, a storage unit configured to store information for enabling or disabling a function of detecting the tampering, and a rebooter configured to reboot the information processing apparatus on the basis of the information stored in the storage unit and on the basis of a time that elapses after receipt of the boot instruction.
1. An information processing apparatus comprising:
a memory configured to store a setting for enabling or disabling a function of detecting tampering of at least one of a plurality of software components in accordance with a boot instruction;
a timer configured to measure a predetermined time starting with receipt of the boot instruction; and
a controller configured to control the timer based on the execution of the plurality of software components, and to reboot the information processing apparatus on a basis of the predetermined time elapsing,
wherein in a state in which the function is enabled the controller stops or resets the timer after at least a part of the plurality of software components is executed, but no later than the starting of verification of tampering of an other part of the plurality of software components.
2. The information processing apparatus according to claim 1 , wherein in a state in which a setting of disabling the function is made,
the controller does not cause the timer to stop or reset.
3. The information processing apparatus according to claim 1 , wherein the controller is configured to not reboot the information processing apparatus when tampering has been detected in at least one of the plurality of software components by the controller.
4. The information processing apparatus according to claim 1 , wherein measurement of the predetermined time is stopped when tampering has been detected in at least one of the plurality of software components by the controller.
5. The information processing apparatus according to claim 1 , wherein a display is configured to display the information indicating that the tampering has been detected.
6. The information processing apparatus according to claim 1 ,
wherein the controller is configured to execute a software component in which no tampering has been detected by the controller among the plurality of software components.
7. The information processing apparatus according to claim 6 ,
wherein the controller is configured to execute the plurality of software components in a predetermined order, and
wherein among the plurality of software components, a software component executed by the controller is configured to detect tampering with a subsequent software component to be executed.
8. The information processing apparatus according to claim 1 , wherein the plurality of software components include any one of a BIOS, a loader, an OS, an initrd, and firmware.
9. The information processing apparatus according to claim 1 , further comprising a printer configured to print an image.
10. The information processing apparatus according to claim 1 , further comprising a reader configured to read an image on a document.
11. The information processing apparatus according to claim 1 , wherein the boot instruction is received from a user.
12. The information processing apparatus according to claim 1 , wherein the controller is configured to reboot the information processing apparatus in accordance with a reset signal.
13. The information processing apparatus according to claim 1 , wherein the controller is configured to detect tampering with a software component to be executed among the plurality of software components, on the basis of at least a value stored in advance and a hash value of the software component.
14. A method for rebooting an information processing apparatus, comprising:
storing, in a memory a setting for enabling or disabling a function of detecting tampering of at least one of a plurality of software components in accordance with a boot instruction;
measuring, by a timer, a predetermined time that starts with receipt of the boot instruction; and
controlling the timer based on the execution of the plurality of software components, and
rebooting the information processing apparatus on a basis of the predetermined time elapsing,
wherein in a state in which the function is enabled, stopping or resetting the timer after at least a part of the plurality of software components is executed, but no later than the starting of verification of tampering of an other part of the plurality of software components.
15. A computer-readable storage medium storing a program which, when run on a computer, causes the computer to carry out the method of claim 14 .
16. The information processing apparatus according to claim 8 ,
wherein the part of the plurality of software components includes at least the BIOS and the loader, and the other part of the plurality of software components includes at least the initrd.
17. The information processing apparatus according to claim 1 ,
wherein the predetermined time in a state in which the function is enabled is longer than the predetermined time in a state in which the function is disabled.