Information processing device and key management device
The present disclosure provides an information processing apparatus that enables updating of a key for program verification without invalidating a program verification function. An information processing apparatus 1 that calculates a verification value using a key for program verification and that verifies whether the verification value matches a verification expected value stored in advance. The information processing apparatus 1 includes: a key updating control unit 12 that updates the key; a storage unit 100 that stores in advance a verification expected value corresponding to a key updated by the key updating control unit 12 ; and a verification expected value changing unit 13 that when a verification value calculated based on the updated key is verified, changes the verification expected value in the storage unit, the verification expected value being referred to for verification, to a verification value corresponding to the updated key.
1 . An information processing apparatus that calculates a verification value using a key for program verification and that verifies whether the verification value matches a verification expected value stored in advance, the information processing apparatus being configured to:
update the key;
store in advance a verification expected value corresponding to the updated key;
when a verification value calculated based on the updated key is verified, change the verification expected value, the verification expected value being referred to for verification, to the verification expected value corresponding to the updated key;
store in advance a plurality of verification expected values corresponding to the key to be updated; and
when a verification expected value unused is not present among the plurality of verification expected values, change a verification expected value to a second verification expected value that is one of verification expected values used.
2 . The information processing apparatus according to claim 1 , wherein the information processing apparatus is further configured to:
store in advance a plurality of verification expected values corresponding to the key to be updated; and
change a verification expected value to a verification expected value unused among the plurality of verification expected values.
3 . The information processing apparatus according to claim 1 , wherein the information processing apparatus is further configured to:
before a number of times of verification expected value changing reaches a given number of times, inform a device outside the apparatus of a point of time at which updating of verification expected values including a verification expected value being use becomes necessary.
4 . The information processing apparatus according to claim 3 , wherein the information processing apparatus is further configured to:
when a number of remaining verification expected values unused becomes smaller than a given value, inform a device outside the apparatus of a point of time at which updating of verification expected values including a verification expected value being use becomes necessary.
5 . The information processing apparatus according to claim 3 , wherein the information processing apparatus is further configured to:
before the verification expected values are used up, update a program to a program having verification expected values corresponding to the key being used and a key newly generated, respectively.
6 . The information processing apparatus according to claim 1 , wherein the information processing apparatus is further configured to:
store in advance a plurality of verification expected values corresponding to the key to be updated.
7 . A system, comprising:
an information processing apparatus that calculates a verification value using a key for program verification and that verifies whether the verification value matches a verification expected value stored in advance, the information processing apparatus being configured to:
update the key;
store in advance a verification expected value corresponding to the updated key; and
when a verification value calculated based on the updated key is verified, change the verification expected value, the verification expected value being referred to for verification, to the verification expected value corresponding to the updated key;
store in advance a plurality of verification expected values corresponding to the key to be updated; and
when a verification expected value unused is not present among the plurality of verification expected values, change a verification expected value to a second verification expected value that is one of verification expected values used; and
a key management device connected to the information processing apparatus, the key management device being configured to store key master information on the key.