JP2004287839A - Information processor, image forming device, and program addition method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processor, an image forming device and a program addition method allowing the addition of a program to a program starting recording medium while securing the safety of a program recorded in the insertable and removable program starting recording medium. <P>SOLUTION: This information processor with the program added to the program starting recording medium 141 using a program adding recording medium 140, has a determining means for determining the insertion of the program adding recording medium 140 into a slot 110, and an adding means 133 acquiring identification information on the program starting recording medium 141 to transmit it to a server 150 upon determining the insertion of the program adding recording medium 140, and adding a received file to the program starting recording medium 141 according to the result of authentication check of the file upon receiving the file from the server 150. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an information processing apparatus, an image forming apparatus, and a program adding method, and more particularly to an information processing apparatus, an image forming apparatus, and a program adding method for adding a program to a program starting recording medium using a program adding module.
[0002]
[Prior art]
2. Description of the Related Art An information processing apparatus such as a personal computer executes various types of information processing by executing one or more programs respectively corresponding to information processing. In addition, an image forming apparatus (hereinafter, referred to as a multifunction machine) as an application example of an information processing apparatus includes a display unit, a printing unit, an imaging unit, and the like in a single housing, and supports a printer, a copy, a facsimile, and a scanner, respectively. In this case, four types of programs are provided, and the programs are switched to operate as a printer, a copier, a facsimile, and a scanner. Patent Literature 1 describes an example of the above-described fusion machine.
[0003]
In such an information processing apparatus or a multifunction peripheral, a BIOS (Basic Input / Output System) and a boot loader (Boot Loader) are activated after the power is turned on. The boot loader develops an operating system (OS) and a root file system on a RAM (Random Access Memory) and starts the OS. Then, the OS mounts the root file system. Here, mounting means starting the file system, peripheral devices, and the like in an accessible state.
[0004]
After the OS is started, a start program for starting a program such as an application (hereinafter, referred to as an application) is started. The activation program is a process that is first activated in the information processing apparatus or the multifunction peripheral.
[0005]
The start program mounts a file system according to a predetermined setting file, and is necessary for the operation of the information processing apparatus or the multifunction peripheral recorded on a program start recording medium such as a hard disk drive (HDD) or an SD (Secure Digital) card. The program has been started according to a predetermined setting file.
[0006]
In recent years, there has been an increasing demand for easily adding a program for an information processing device or a multifunction machine to a program starting recording medium.
[0007]
[Patent Document 1]
JP-A-2002-84383
[0008]
[Problems to be solved by the invention]
However, since a program start-up recording medium that can be inserted and removed, such as an SD card, can be used in a personal computer or the like, it is easy for the program recorded on the program start-up recording medium to be falsified, such as falsification or duplication.
[0009]
Therefore, in a removable program starting recording medium, a program newly added to the program starting recording medium may be illegally added to an information processing apparatus or a multifunction peripheral without a right (license) to add the program. was there.
[0010]
Therefore, when a program is added to a program start-up recording medium that can be inserted into and removed from an information processing device or a multifunction machine, a mechanism is provided to prevent unauthorized use of the program recorded on the program start-up recording medium, and the security of the program is improved. There was a problem that it had to be secured.
[0011]
The present invention has been made in view of the above points, and an information processing apparatus capable of adding a program to a program start-up recording medium while ensuring the safety of the program recorded on the pluggable program start-up recording medium, An object of the present invention is to provide a forming apparatus and a program adding method.
[0012]
[Means for Solving the Problems]
Therefore, in order to solve the above-mentioned problem, the present invention has a slot into which a plurality of recording media can be inserted and removed, and uses a program-adding recording medium inserted into one of the slots to provide another one of the slots. In order to add a program to the program starting recording medium inserted in the slot, there is a determining means for determining insertion of the program adding recording medium into the slot, and that the program adding recording medium is inserted into the slot. When it is determined, the identification information of the program starting recording medium is acquired and transmitted to a server that creates a file for adding the program to the program starting recording medium, while the program is added to the program starting recording medium. Receiving the file from the server, according to the result of the authentication check of the file, the received file And having an additional means for adding to the program starting recording medium.
[0013]
Further, the present invention has a slot into which a plurality of recording media can be inserted and withdrawn, and uses a program addition recording medium inserted into one of the slots to activate a program inserted into another of the slots. Determining means for determining whether or not the recording medium for adding a program has been inserted into the slot in order to add a program to the recording medium for recording. While acquiring the identification information of the medium and transmitting it to a server that creates a part of a file for adding a program to the program starting recording medium, it transmits one of the files for adding a program to the program starting recording medium. Receiving the section from the server, the program is added from the program addition recording medium to the program starting recording medium. Additional means for reading a part of a file to be executed and adding the obtained file to a program starting recording medium in accordance with a result of an authentication check of a file obtained from the server or the program adding recording medium. It is characterized by.
[0014]
Further, the present invention has a slot into which a plurality of recording media can be inserted and withdrawn, and uses a program addition recording medium inserted into one of the slots to activate a program inserted into another of the slots. Determining means for determining whether or not the recording medium for adding a program has been inserted into the slot in order to add a program to the recording medium for recording. While acquiring the identification information of the medium and transmitting it to a server that creates a part of a file for adding a program to the program starting recording medium, it transmits one of the files for adding a program to the program starting recording medium. Receiving the unit from the server, adds the program from the program starting recording medium to the program starting recording medium. Additional means for reading a part of the file to be executed and adding the obtained file to the program starting recording medium in accordance with the result of the authentication check of the file obtained from the server or the program starting recording medium. It is characterized by.
[0015]
According to the present invention, a program addition recording medium for adding a program to a program activation recording medium can be created so that it can be used only with one program activation recording medium corresponding to the program addition recording medium. It is very easy to prevent a program from being illegally added to a plurality of program-starting recording media, and to ensure the safety of a program recorded on a pluggable program-adding recording medium, and very easily. The program can be added to the recording medium for starting the program.
[0016]
BEST MODE FOR CARRYING OUT THE INVENTION
Next, embodiments of the present invention will be described with reference to the drawings.
[0017]
FIG. 1 is a configuration diagram of an embodiment of an information processing apparatus according to the present invention. The information processing device 1 is configured to include a software group 2, an activation unit 3, and hardware resources 4.
[0018]
The activation unit 3 is executed first when the information processing apparatus 1 is powered on, and activates a program activation unit described later. The program activation unit activates the software group 2 of the information processing device 1. For example, the program activating unit of the activating unit 3 reads out the programs of the SD card checking unit 11, the program adding unit 12, the system control unit 13, and the applications 14-1 to 14-n from the auxiliary storage device, the SD card, and the like. Transfer the program to the memory device and start it.
[0019]
The hardware resources 4 include hardware resources such as an input device, a display device, an auxiliary storage device, a memory device, an interface device, and an SD card slot. Further, the software group 2 includes programs of an SD card check unit 11, a program addition unit 12, a system control unit 13, and applications 14-1 to 14-n, which are activated on an OS such as UNIX (registered trademark). The OS controls the programs of the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n in parallel as processes.
[0020]
An API (Application Program Interface) 15 is used to receive requests from the applications 14-1 to 14-n by using a function defined in advance. The engine I / F 16 is used to transmit a request for the hardware resource 4 using a function defined in advance. The details of the SD card checking unit 11, the program adding unit 12, the system control unit 13, and the program starting unit will be described later.
[0021]
Next, a hardware configuration of the information processing apparatus 1 will be described. FIG. 2 is a hardware configuration diagram of an embodiment of the information processing apparatus according to the present invention.
[0022]
2 includes an input device 21, a display device 22, an auxiliary storage device 23, a memory device 24, an arithmetic processing device 25, an interface device 26, and an SD card slot 27, which are mutually connected by a bus B. It is comprised so that it may have.
[0023]
The input device 21 includes a keyboard, a mouse, and the like, and is used to input various operation instructions. The display device 22 displays various windows and data necessary for the operation. The interface device 26 is an interface for connecting the information processing device 1 to a network, and includes a modem, a router, and the like.
[0024]
The SD card slot 27 is capable of inserting and removing an SD card, and performs an interrupt corresponding to insertion or removal of the SD card to an SD card driver described later. The auxiliary storage device 23 stores various files and data.
[0025]
The SD card and the auxiliary storage device 23 inserted into the SD card slot 27 are used to execute processing related to the information processing device 1, the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-14. -N and various files and data necessary for processing the program.
[0026]
The memory device 24 stores the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14 from the SD card or the auxiliary storage device 23 inserted into the SD card slot 27 when the information processing device 1 is started. 14-n and the like are read and stored. Then, the arithmetic processing unit 25 executes processing according to programs stored in the memory device 24, such as the SD card check unit 11, the program addition unit 12, the system control unit 13, and the applications 14-1 to 14-n.
[0027]
Next, a configuration of the multifunction device 31 will be described as an application example of the information processing apparatus 1 according to the present invention. In this embodiment, the processing of the MFP 31 will be mainly described, but the processing of the information processing apparatus 1 is the same.
[0028]
FIG. 3 is a configuration diagram of an embodiment of the multifunction peripheral according to the present invention. The multifunction device 31 is configured to include a software group 32, a multifunction device activation unit 33, and hardware resources.
[0029]
The software group 32 includes an application layer 35 and a platform 36 running on an OS such as UNIX (registered trademark). The hardware resources 34 include a monochrome laser printer (B & W LP) 41, a color laser printer (Color LP) 42, and other hardware resources 43 such as a scanner and a facsimile.
[0030]
The application layer 35 includes a printer application 51, a copy application 52, a fax application 53, a scanner application 54, and a net file application, each of which performs a process unique to a user service related to image formation such as a printer, a copy, a fax, and a scanner. 55.
[0031]
Further, the platform 36 interprets the processing request from the application layer 35 and generates a request to acquire the hardware resource 34, and manages the hardware resource 34 and acquires the acquisition request from the control service layer 37. And a handler layer 38 for managing the hardware resources 34 in response to an acquisition request from the SRM 69.
[0032]
The control service layer 37 includes a network control service (NCS) 61, a delivery control service (DCS) 62, an operation panel control service (OCS) 63, a fax control service (FCS) 64, an engine control service (ECS) 65, and a memory control service. It is configured to include one or more service modules, such as (MCS) 66, user information control service (UCS) 67, and system control service (SCS) 68.
[0033]
Note that the platform 36 is configured to have the API 81. The OS executes each software of the application layer 35 and the platform 36 in parallel as a process.
[0034]
The process of the NCS 61 distributes data received from the network side according to each protocol to each application, and mediates transmission of data from each application to the network side. For example, the NCS 61 controls data communication with a client connected to the MFP 31 via a network.
[0035]
The process of the DCS 62 controls distribution of document data stored in the multifunction peripheral. The process of the OCS 63 controls an operation panel serving as information transmission means between the operator and the main body control.
[0036]
The FCS64 process provides an API from the application layer 35 for performing facsimile transmission / reception using a PSTN or ISDN network, registration / quotation of various facsimile data managed in a backup memory, facsimile reading, facsimile reception printing, and the like. I do.
[0037]
The process of the ECS 65 controls the engine units such as the black and white laser printer 41, the color laser printer 42, and the hardware resources 43. The process of the MCS 66 performs memory control such as acquisition and release of a memory, use of an HDD, and compression and decompression of image data. The process of the UCS 67 manages user information.
[0038]
The process of the SCS 68 performs processes such as application management, operation unit control, system screen display, LED display, hardware resource management, and interrupt application control.
[0039]
The process of the SRM 69, together with the SCS 68, controls the system and manages the hardware resources 34. For example, the process of the SRM 69 performs arbitration in accordance with an acquisition request from an upper layer using the hardware resources 34, and controls execution.
[0040]
Specifically, the process of the SRM 69 determines whether the hardware resource 34 requested for acquisition is available (whether it is not used by another acquisition request). The upper layer is notified that the resource 34 is available.
[0041]
Also, the process of the SRM 69 performs scheduling for using the hardware resources 34 in response to an acquisition request from the upper layer, and the content of the request (for example, paper conveyance and image forming operation by the printer engine, memory reservation, file generation, etc.). Is implemented directly.
[0042]
The handler layer 38 includes a fax control unit handler (FCUH) 70 that manages a fax control unit (FCU) described later, and an image memory handler (IMH) that allocates a memory area to a process and manages a memory area allocated to the process. 71. The SRM 69 and the FCUH 70 make processing requests to the hardware resources 34 by using the engine I / F 82. With the configuration of FIG. 3, the multi-function device 31 can unify the processing commonly required for each application by the platform 36.
[0043]
Next, the hardware configuration of the MFP 31 will be described. FIG. 4 is a hardware configuration diagram of an embodiment of the multifunction peripheral according to the present invention.
[0044]
The MFP 31 includes a controller 100, an operation panel 120, an FCU 121, and an engine unit 122. The controller 100 includes a CPU 101, a system memory 102, a north bridge (NB) 103, a south bridge (SB) 104, an ASIC 106, a local memory 107, an HDD 108, a network interface card (NIC) 109, and an SD card. Slot 110, a USB device 111, an IEEE 1394 device 112, and a Centronics 113.
[0045]
The operation panel 120 is connected to the ASIC 106 of the controller 100. Further, the FCU 121 and the engine unit 122 are connected to the ASIC 106 of the controller 100 via the PCI bus 123.
[0046]
In the controller 100, the local memory 107, the HDD 108, and the like are connected to the ASIC 106, and the CPU 101 and the ASIC 106 are connected via the NB 103 of the CPU chipset. The controller 100 connects the CPU 101 and the ASIC 106 via the NB 103 to cope with a case where the interface of the CPU 101 is not disclosed. The ASIC 106 and the NB 103 are connected via an AGP (Accelerated Graphics Port) 105.
[0047]
As described above, in order to control the execution of one or more processes forming the application layer 35 and the platform 36 shown in FIG. 3, the ASIC 106 and the NB 103 are connected not through the low-speed PCI bus but through the AGP 105 to prevent a decrease in performance. In.
[0048]
The CPU 101 controls the entire MFP 31. For example, the CPU 101 activates and executes the NCS 61, the DCS 62, the OCS 63, the FCS 64, the ECS 65, the MCS 66, the UCS 67, the SCS 68, the SRM 69, the FCU H 70, and the IMH 71 as processes on the OS. The application 52, the fax application 53, the scanner application 54, and the net file application 55 are activated and executed.
[0049]
The NB 103 is a bridge for connecting the CPU 101, system memory 102, SB 104, ASIC 106, NIC 109, SD card slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113.
[0050]
The SB 104, NIC 109, SD card slot 110, USB device 111, IEEE 1394 device 112, and Centronics 113 are connected to the NB 103 via a PCI bus 114. The SB 104 is a bridge for connecting the PCI bus 114 to a ROM, peripheral devices, and the like.
[0051]
The system memory 102 is a memory used as a drawing memory or the like of the MFP 31. The local memory 107 is a memory used as a copy image buffer and a code buffer.
[0052]
The ASIC 106 is an IC for image processing that has a hardware element for image processing. The HDD 108 is an example of a storage (auxiliary storage device) that stores image data, document data, programs, font data, forms, and the like.
[0053]
The NIC 109 is an interface device that connects the MFP 31 to a network. The SD card slot 110 is capable of inserting and removing an SD card, and performs an interrupt corresponding to insertion or removal of the SD card to an SD card driver described later. The USB device 111, the IEEE 1394 device 112, and the Centronics 113 are interfaces conforming to respective standards.
[0054]
The operation panel 120 is an operation unit that receives input operations from the operator and performs display for the operator. Note that the FCU 121 has a memory. The memory of the FCU 121 is used, for example, to temporarily store facsimile data received when the power of the MFP 31 is OFF.
[0055]
3 is executed first when the power of the MFP 1 is turned on, and starts the application layer 35 and the platform 36. FIG. 5 is a configuration diagram of an example of the multifunction peripheral starting unit. The multifunction peripheral activation unit 33 includes a ROM monitor 130 and a program activation unit 131.
[0056]
The BIOS and the ROM monitor 130 as a boot loader are executed when the power is turned on, and perform initialization of hardware, diagnosis of the controller 100, initialization of software, and the like. The ROM monitor 130 expands the OS and the root file system on the system memory 102 and starts the OS. Then, the OS mounts the root file system.
[0057]
The program starting unit 131 is called from the OS, and secures a memory area on the system memory 102 and the local memory 107. The program starting unit 131 is a process that is started first in the MFP 1, and mounts a file system according to a predetermined setting file.
[0058]
The program activating unit 131 reads out the programs of the application layer 35 and the platform 36 necessary for the operation of the multi-function peripheral 31 from the HDD 108, the SD card, the ROM, or the like according to a predetermined setting file, and reads the read out programs from the system memory 102 and the local memory 107. It is developed in the memory area secured above to start the processes of the application layer 35 and the platform 36.
[0059]
Further, the processing of the program starting unit 131 will be described. The program starting unit 131 reads a predetermined master setting file at the time of starting, and mounts a file system and starts a process according to the read master setting file. If the read master setting file includes a description of the mount, the program starting unit 131 executes the mount process according to the description of the mount.
[0060]
Further, the program launching unit 131 performs a predetermined setting when a predetermined setting file exists at the root of the mounted file system or when a predetermined directory including a file having a predetermined extension exists at the root of the mounted file system. A file or a file having a predetermined extension is read and a file system is mounted.
[0061]
Note that the file system that can be mounted by the program activation unit 131 includes “gzromfs”. The file system “gzromfs” expands the gzip-compressed ROMFS format file on the RAM and mounts it.
[0062]
Hereinafter, an embodiment in which a program is added to an application starting SD card as a program starting recording medium using a program adding module will be described with reference to the drawings.
[0063]
(First embodiment)
The program adding method according to the first embodiment of the present invention is an example in which a program is added to an application starting SD card using an application adding SD card as a program adding recording medium.
[0064]
FIG. 6 is a schematic diagram of an example for explaining a program adding method according to the first embodiment of the present invention. The multifunction device 31 has an application starting SD card 141 inserted into one of the SD card slots 110.
[0065]
In step S100, the application addition SD card 140 is inserted into the other one of the SD card slots 110 of the multi-function peripheral 31, and the program addition module 133 is read by the program addition module read from the application addition SD card 140. Is activated. The program adding unit 133 acquires the serial ID of the application starting SD card 141 and encrypts the serial ID with a public key.
[0066]
In step S200, the program adding unit 133 of the MFP 31 connects to the server 150 via the network 200 such as the Internet or a LAN, and establishes a session with the server 150 through a necessary procedure such as an authentication process. The program adding unit 133 transmits the encrypted serial ID of the application activation SD card 141 to the server 150.
[0067]
In step S300, the program adding unit 133 transmits the model information and the application information to the server 150 in response to a request from the server 150. Here, the model information is information unique to the MFP 31. The application information is information of an application to be added to the application activation SD card 141 of the multi-function peripheral 31. The program adding unit 133 acquires the model information and the application information from the application adding SD card 140.
[0068]
In step S400, the server 150 decrypts the encrypted serial number of the application starting SD card 141 obtained in step S300 with a secret key, and the serial ID of the application starting SD card 141 and the model received in step S300. Using the information and the application information, a file for adding a program to the application activation SD card 141 is created.
[0069]
In step S500, the server 150 transmits a file for adding a program to the application starting SD card 141 created in step S400 to the program adding unit 133 of the multifunction device 31 via the network 200. In step S600, the program adding unit 133 performs an authentication check, which will be described later, on a file for adding a program to the application startup SD card 141 of the MFP 31.
[0070]
If the authentication check is OK, the program adding unit 133 performs the process of step S700. In step S700, the program adding unit 133 adds the program to the application starting SD card 141 using the file for adding the program to the application starting SD card 141 received in step S500.
[0071]
Next, the processing of FIG. 6 will be described in detail. FIG. 7 is an explanatory diagram of an example of the process of step S100. Note that, in the explanatory diagram of FIG. 7, of the configuration of the multifunction machine 31, a configuration required for description is shown, and a configuration unnecessary for description is omitted.
[0072]
In step S101, the application addition SD card 140 is inserted into the SD card slot 110 of the MFP 31. The SD card slot 110 interrupts the SD card driver 137 in accordance with the insertion of the application addition SD card 140.
[0073]
In step S102, the OS 136 notifies the program starting unit 131 of the detection of the insertion of the SD card in response to the interruption to the SD card driver 137. In step S103, the program activation unit 131 activates the SD card check unit 132. In step S104, the SD card check unit 132 mounts the application adding SD card 140, notifies the program starting unit 131 that the application adding SD card 140 has been mounted, and stops the processing.
[0074]
When notified that the application addition SD card 140 has been mounted, the process proceeds to step S105, and the program activation unit 131 performs an authentication check of the application addition SD card 140 using the electronic authentication check library 134.
[0075]
The authentication check in step S105 includes, for example, the authentication check of the setting file shown in FIG. 8 and the authentication check of the module to be mounted shown in FIG.
[0076]
For example, the authentication check of the setting file is performed as shown in the flowchart of FIG. FIG. 8 is a flowchart of an example of the process of the authentication check of the setting file.
[0077]
In step S800, the program launching unit 131 determines whether or not the target file used for the authentication check of the setting file exists in the application addition SD card 140. The target files used for the authentication check of the setting file include a setting file and an electronic signature file created from a message digest (hereinafter, referred to as MD) of the setting file and the serial ID of the application addition SD card 140.
[0078]
FIG. 9 is an image diagram of an example of the target file recorded on the application addition SD card. In the example of FIG. 9, “inst.cnf” indicates a setting file, “inst.lic” indicates an electronic signature file used for authentication check of the setting file, and “inst.mod” indicates a module file to be mounted. , “Inst.mac” represents an electronic signature file used for the authentication check of the module to be mounted.
[0079]
If it is determined that there is a target file to be used for the authentication check of the setting file (YES in S800), the program starting unit 131 acquires the setting file and the electronic signature file to be used for the authentication check of the setting file from the application addition SD card 140. The process proceeds to step S801.
[0080]
In step S801, the program activation unit 131 acquires a serial ID from the application addition SD card 140. Proceeding to step S803, the program activation unit 131 creates MD1 of the setting file acquired in step S800 and the serial ID of the application adding SD card 140 acquired in step S801. In step S803, the program activation unit 131 decrypts the electronic signature file acquired in step S800 with the public key to create the MD2.
[0081]
Proceeding to step S804, the program activation unit 131 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S804), the program starting unit 131 proceeds to step S805, and determines that the authentication check of the setting file is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S804), the program starting unit 131 proceeds to step S806, and determines that the authentication check of the setting file is NG.
[0082]
If MD1 and MD2 are not equal, the file recorded on the application addition SD card 140 has a high possibility of being illegally copied. If it is determined that the target file used for the authentication check of the setting file does not exist (NO in S800), the program starting unit 131 proceeds to step S806, and determines that the authentication check of the setting file is NG.
[0083]
For example, the authentication check of the module to be mounted is performed as shown in the flowchart of FIG. FIG. 10 is a flowchart of an example of an authentication check process of the module to be mounted.
[0084]
In step S810, the program launching unit 131 determines whether or not there is a file to be used for the authentication check of the module to be mounted in the application addition SD card 140. The target file used for the authentication check of the mount target module includes the module file to be mounted and the electronic signature file created from the module file and the MD of the model information unique to the multi-function peripheral 31.
[0085]
If it is determined that a file to be used for the authentication check of the module to be mounted exists (YES in S810), the program starting unit 131 uses the SD card 140 for adding an application to check the module file to be mounted and the module file to be mounted. An electronic signature file to be obtained is obtained, and the process proceeds to step S811.
[0086]
In step S811, the program activation unit 131 acquires the model information unique to the multi-function peripheral 31. Proceeding to step S812, the program activation unit 131 creates an MD1 of the module file acquired in step S810 and the model information unique to the MFP 31 acquired in step S811. Proceeding to step S813, the program activation unit 131 decrypts the electronic signature file acquired in step S810 with the public key to create the MD2.
[0087]
Proceeding to step S814, the program activation unit 131 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S814), the program starting unit 131 proceeds to step S815, and determines that the authentication check of the module to be mounted is OK.
[0088]
On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S814), the program starting unit 131 proceeds to step S816, and determines that the authentication check of the module to be mounted is NG.
[0089]
If MD1 and MD2 are not equal, it is highly likely that the file recorded on the application addition SD card 140 has been subjected to fraud such as copying or falsification. If it is determined that there is no target file to be used for the authentication check of the mount target module (NO in S810), the program starting unit 131 proceeds to step S816, and determines that the authentication check of the mount target module is NG.
[0090]
Returning to FIG. 7, if the authentication check of the application adding SD card 140 is OK, the program starting unit 131 proceeds to step S106, and if NG, returns to the event waiting state.
[0091]
In step S106, the program activation unit 131 activates the program addition unit 133 using the program addition module in the application addition SD card 140.
[0092]
In step S107, the program adding unit 133 acquires the serial ID of the application activation SD card 141 from the application activation SD card 141. The program adding unit 133 encrypts the obtained serial ID of the application starting SD card 141 with a public key.
[0093]
In step S108, the program adding unit 133 transmits the encrypted serial ID of the application activation SD card 141 to the server 150 via the NCS 61 and the network 200. According to the processing in FIG. 7, the encrypted serial ID of the application activation SD card 141 can be transmitted to the server 150.
[0094]
FIG. 11 is an explanatory diagram of an example of the process of step S400. The encrypted serial ID 152 of the application starting SD card 141 is received from the MFP 31 in the process of step S200. The model information 153 and the application information 154 have been received from the MFP 31 in the process of step S300.
[0095]
In step S401, the server 150 decrypts the encrypted serial ID 152 with a secret key. In step S402, the server 150 sets the configuration file “apl.cnf” corresponding to the model information 153 and the application information 154, the module “apl.mod” to be mounted, and the electronic signature file used for the authentication check of the module to be mounted. Select group 155 of "apl.mac".
[0096]
In step S403, the server 150 reads the setting file “apl.cnf” 157 from the group 155 selected in step S402. In step S404, the server 150 creates the MD 158 from the decrypted serial ID 156 of the application activation SD card 141 and the setting file 157 read in step S403.
[0097]
In step S405, the server 150 encrypts the MD 158 created in step S404 with a secret key, and creates an electronic signature file “apl.lic” 159 to be used for the authentication check of the setting file. In step S406, the server 150 creates a new group 160 in which the electronic signature file 159 created in step S405 is added to the group 155.
[0098]
The group 160 created in step S406 is transmitted to the MFP 31 in the process of step S500. According to the processing of FIG. 11, a file for adding a program to the application activation SD card 141 can be transmitted to the multifunction peripheral 31.
[0099]
FIG. 12 is an explanatory diagram of an example of the process of step S600. Note that, in the explanatory diagram of FIG. 12, a configuration necessary for the description is shown among the configurations of the multifunction machine 31, and a configuration unnecessary for the description is appropriately omitted.
[0100]
The program adding unit 133 includes a setting file “apl.cnf” as a file for adding a program from the server 150 to the application starting SD card 141 in the process of step S500, and an electronic signature file “ apl.lic ", the module" apl.mod "to be mounted, and the electronic signature file" apl.mac "used for the authentication check of the module to be mounted.
[0101]
In step S600, the program adding unit 133 causes the setting file “apl.cnf” received in step S500, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted, and The electronic signature file “apl.mac” used for the authentication check of the module to be mounted is subjected to the authentication check using the electronic authentication check library 135.
[0102]
The authentication check in step S600 includes, for example, the authentication check of the setting file shown in FIG. 8 and the authentication check of the module to be mounted shown in FIG. Details of the authentication check in step S506 will be described with reference to FIGS. 8 and 10 described above.
[0103]
In step S800 of FIG. 8, the program adding unit 133 uses the files received in step S500 to be used for the authentication check of the setting file, for example, the setting file “apl.cnf” and the authentication check of the setting file. It is determined whether the electronic signature file “apl.lic” exists.
[0104]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the setting file exist (YES in S800), the program adding unit 133 proceeds to step S801.
[0105]
In step S801, the program adding unit 133 acquires the serial ID from the application starting SD card 141 instead of the application adding SD card 140. In step S802, the program adding unit 133 creates the MD1 of the setting file “apl.cnf” and the serial ID of the application activation SD card 141 acquired in step S801. Proceeding to step S803, the program adding unit 133 decrypts the electronic signature file “apl.lic” used for the authentication check of the setting file with the public key to create the MD2.
[0106]
Proceeding to step S804, the program adding unit 133 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S804), the program adding unit 133 proceeds to step S805, and determines that the authentication check of the setting file is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S24), the program adding unit 133 proceeds to step S806, and determines that the authentication check of the setting file is NG.
[0107]
If MD1 and MD2 are not equal, the file received from the server 150 in step S500 is not for the application starting SD card 141 whose serial ID has been acquired in step S801, but for adding the program to another application starting SD card. This is because there is a high possibility that it was created.
[0108]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the setting file do not exist (NO in S800), the program adding unit 133 proceeds to step S806, and proceeds to step S806. Is determined to be NG.
[0109]
In step S810 in FIG. 10, the program adding unit 133 uses the target file used for the authentication check of the mount target module in the file received in step S500, for example, the mount target module “apl.mod” and the mount target module authentication. It is determined whether or not the electronic signature file “apl.mac” used for the check exists.
[0110]
If it is determined that the module “apl.mod” to be mounted and the electronic signature file “apl.mac” used for the authentication check of the module to be mounted exist (YES in S810), the program adding unit 133 proceeds to step S811. In step S811, the program adding unit 133 acquires model information unique to the multi-function peripheral 31. Proceeding to step S812, the program adding unit 133 creates the MD1 of the module “apl.mod” to be mounted and the model information unique to the MFP 31 acquired in step S811.
[0111]
Proceeding to step S813, the program adding unit 133 decrypts the electronic signature file “apl.mac” used for the authentication check of the module to be mounted with the public key to create the MD2.
[0112]
Proceeding to step S814, the program adding unit 133 determines whether MD1 and MD2 are equal. If it is determined that MD1 and MD2 are equal (YES in S814), the program adding unit 133 proceeds to step S815, and determines that the authentication check of the module to be mounted is OK. On the other hand, if it is determined that MD1 and MD2 are not equal (NO in S814), the program adding unit 133 proceeds to step S816, and determines that the authentication check of the module to be mounted is NG.
[0113]
If MD1 and MD2 are not equal, the file received from the server 150 in step S500 was created to add the program to another MFP rather than the MFP 31 that acquired the unique model information in step S811. This is because the possibility is high.
[0114]
If it is determined that the setting file “apl.cnf” and the electronic signature file “apl.lic” used for the authentication check of the module to be mounted do not exist (NO in S810), the program adding unit 133 proceeds to step S816 and mounts the file. The authentication check of the target module is determined to be NG.
[0115]
Returning to FIG. 12, if the authentication check in step S600 is OK, the program adding unit 133 proceeds to step S700, and if NG, returns to the event waiting state. In step S700, the program adding unit 133 causes the setting file “apl.cnf” received in step S500, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted, and The program is added to the application activation SD card 141 using the electronic signature file “apl.mac” used for the authentication check of the module to be mounted.
[0116]
According to the processing of FIG. 12, the setting file “apl.cnf”, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted, and the authentication check of the module to be mounted are checked. An application activation card 141 as shown in FIG. 13 in which an electronic signature file “apl.mac” to be used is written can be created.
[0117]
FIG. 13 is an image diagram of an example of an application starting SD card to which a program has been added. In the example of FIG. 13, “apl.cnf” under the directory “init.d” indicates a setting file, and “apl.lic” indicates an electronic signature file used for authentication check of the setting file. “Apl.mod” under the directory “module” indicates a module to be mounted, and “apl.mac” indicates an electronic signature file used for authentication check of the module to be mounted.
[0118]
(Second embodiment)
The program addition method according to the second embodiment of the present invention is an example in which a program is added to the application activation SD card 141 using the application addition SD card 140 as a program addition recording medium. Note that the program addition method of the second embodiment differs from the program addition method of the first embodiment in the files recorded on the application addition SD card 140.
[0119]
FIG. 14 is an image diagram of an example of an application adding SD card used in the program adding method of the second embodiment. In the example of FIG. 14, “inst.cnf” indicates a setting file of the module for adding a program, “inst.lic” indicates an electronic signature file used for authentication check of the setting file, and “inst.mod” indicates a mounting target. "Inst.mac" represents an electronic signature file used for authentication check of the program addition module, and "apl.cnf" represents a program setting file to be added to the application activation SD card 141. "Apl.lic" represents the electronic signature file used for the authentication check of the setting file, "apl.mod" represents the module to be mounted, and "apl.mac" is used for the authentication check of the module to be mounted. Indicates an electronic signature file.
[0120]
FIG. 15 is a schematic diagram of an example for explaining a program adding method according to the second embodiment of the present invention. The multifunction device 31 has an application starting SD card 141 inserted into one of the SD card slots 110.
[0121]
The processing in steps S100 to S300 is the same as the processing in steps S100 to S300 in FIG. Proceeding to step S400, the server 150 decrypts the encrypted serial ID of the application activation SD card 141 obtained in step S300 with a secret key, and the serial ID of the application activation SD card 141 and the model received in step S300. Using the information and the application information, an electronic signature file “apl.lic” used for the authentication check of the setting file “apl.cnf” is created in the application activation SD card 141.
[0122]
In step S500, the server 150 transmits the electronic signature file “apl.lic” created in step S400 to the program adding unit 133 of the multi-function peripheral 31 via the network 200. In step S510, the program adding unit 133 uses the setting file "apl.cnf", the module "apl.mod" to be mounted, and the module "apl.mod" to be mounted from the application adding SD card 140 for authentication check. Read the electronic signature file “apl.mac”.
[0123]
In step S600, the program adding unit 133 performs the above-described authentication check on a file for adding a program to the application starting SD card 141 of the multi-function peripheral 31 acquired in steps S500 and S510.
[0124]
If the authentication check is OK, the program adding unit 133 performs the process of step S700. In step S700, the program adding unit 133 authenticates the setting file “apl.cnf”, the module “apl.mod” to be mounted, and the module “apl.mod” to be mounted recorded on the SD card 140 for adding applications. Using an electronic signature file “apl.mac” used for checking and an electronic signature file “apl.lic” used for authentication check of the setting file “apl.cnf” received in step S500, an SD card for application activation 141 is added to the program.
[0125]
According to the processing of FIG. 15, the download load from the server 150 to the MFP 31 can be reduced as compared with the processing of FIG. Next, among the processes in FIG. 15, the processes different from those in FIG. 6 will be mainly described.
[0126]
FIG. 16 is an explanatory diagram of another example of the process of step S400. The encrypted serial ID 152 of the application starting SD card 141 is received from the MFP 31 in the process of step S200. The model information 153 and the application information 154 have been received from the MFP 31 in the process of step S300.
[0127]
In step S401, the server 150 decrypts the encrypted serial ID 152 with a secret key. In step S402, the server 150 selects the setting file “apl.cnf” 157 corresponding to the model information 153 and the application information 154.
[0128]
In step S403, the server 150 reads the setting file “apl.cnf” 157 selected in step S402. In step S404, the server 150 creates the MD 158 from the decrypted serial ID 156 of the application activation SD card 141 and the setting file 157 read in step S403.
[0129]
In step S405, the server 150 encrypts the MD 158 created in step S404 with a secret key, and creates an electronic signature file “apl.lic” 159 to be used for the authentication check of the setting file. The digital signature file “apl.lic” 159 created in step S405 is transmitted to the MFP 31 in the process of step S500. According to the processing of FIG. 16, the digital signature file “apl.lic” 159 can be transmitted to the multifunction device 31.
[0130]
FIG. 17 is an explanatory diagram of another example of the process of step S600. Note that, in the explanatory diagram of FIG. 17, among the configurations of the multifunction machine 31, components necessary for description are shown, and components that are not necessary for description are appropriately omitted.
[0131]
The program adding unit 133 has received the electronic signature file “apl.lic” from the server 150 in the process of step S500. Also, in step S510, the program adding unit 133 checks the setting file “apl.cnf” under the directory “addmod”, the module “apl.mod” to be mounted, and the authentication of the module to be mounted from the application adding SD card 140. Read the electronic signature file “apl.mac” to be used.
[0132]
In step S600, the program adding unit 133 sets the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S510, the module “apl.mod” to be mounted, and the electronic signature file. An authentication check is performed on “apl.mac” using the electronic authentication check library 135 as described above.
[0133]
If the authentication check in step S600 is OK, the program adding unit 133 proceeds to step S700, and if NG, returns to the event waiting state. In step S700, the program adding unit 133 sets the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S510, the module “apl.mod” to be mounted, and the electronic signature file. By using “apl.mac”, a program is added to the application activation SD card 141.
[0134]
According to the processing in FIG. 17, the setting file “apl.cnf”, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted and the authentication check of the module to be mounted are checked. An application activation card 141 as shown in FIG. 13 in which an electronic signature file “apl.mac” to be used is written can be created.
[0135]
(Third embodiment)
The program addition method according to the third embodiment of the present invention is an example in which a program is added to the application activation SD card 141 using the application addition SD card 140 as a program addition recording medium. Note that the program addition method of the third embodiment differs from the program addition method of the first embodiment in the file recorded in advance on the application activation SD card 141.
[0136]
FIG. 18 is an image diagram of an example of an application starting SD card used in the program adding method according to the third embodiment. In the example of FIG. 18, “apl.cnf” represents a setting file of a program to be added to the application activation SD card 141, “apl.lic” represents an electronic signature file used for authentication check of the setting file, and “apl.lic” .Mod ”indicates a module to be mounted, and“ apl.mac ”indicates an electronic signature file used for authentication check of the module to be mounted.
[0137]
FIG. 19 is a schematic view of an example for explaining a program adding method according to the third embodiment of the present invention. The multifunction device 31 has an application starting SD card 141 inserted into one of the SD card slots 110.
[0138]
The processing in steps S100 to S500 is the same as the processing in steps S100 to S500 in FIG. In step S520, the program adding unit 133 reads the setting file “apl.cnf”, the module “apl.mod” to be mounted, and the electronic signature file “apl.mac” from the application activation SD card 141.
[0139]
In step S600, the program adding unit 133 performs the above-described authentication check on the file for adding the program to the application starting SD card 141 of the MFP 31 acquired in steps S500 and S520.
[0140]
If the authentication check is OK, the program adding unit 133 performs the process of step S700. In step S700, the program adding unit 133 causes the setting file “apl.cnf” read in step S520, the module “apl.mod” to be mounted, the electronic signature file “apl.mac”, and the setting file received in step S500. The program is added to the application activation SD card 141 using the electronic signature file “apl.lic” used for the authentication check of “apl.cnf”.
[0141]
According to the processing in FIG. 19, the download load from the server 150 to the multifunction peripheral 31 can be reduced as compared with the processing in FIG. Next, among the processing in FIG. 19, processing different from those in FIGS. 6 and 15 will be mainly described.
[0142]
FIG. 20 is an explanatory diagram of another example of the process of step S600. Note that, in the explanatory diagram of FIG. 20, a configuration necessary for the description is shown among the configurations of the multifunction peripheral 31, and a configuration unnecessary for the description is appropriately omitted.
[0143]
The program adding unit 133 has received the electronic signature file “apl.lic” from the server 150 in the process of step S500. Further, in step S520, the program adding unit 133 checks the setting file “apl.cnf” under the directory “addmod”, the module “apl.mod” to be mounted, and the authentication of the module to be mounted from the application activation SD card 141. Read the electronic signature file “apl.mac” to be used.
[0144]
In step S600, the program adding unit 133 sets the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S520, the module “apl.mod” to be mounted, and the electronic signature file. An authentication check is performed on “apl.mac” using the electronic authentication check library 135 as described above.
[0145]
If the authentication check in step S600 is OK, the program adding unit 133 proceeds to step S700, and if NG, returns to the event waiting state. In step S700, the program adding unit 133 sets the electronic signature file “apl.lic” received in step S500, the setting file “apl.cnf” read in step S520, the module “apl.mod” to be mounted, and the electronic signature file. By using “apl.mac”, a program is added to the application activation SD card 141.
[0146]
According to the processing of FIG. 20, the setting file “apl.cnf”, the electronic signature file “apl.lic” used for the authentication check of the setting file, the module “apl.mod” to be mounted, and the authentication check of the module to be mounted are checked. An application activation card 141 as shown in FIG. 13 in which an electronic signature file “apl.mac” to be used is written can be created.
[0147]
In the above-described first to third embodiments, the process according to the program addition method of the present invention is started by inserting the application addition SD card 140 into the SD card slot 110 of the multi-function peripheral 31. The processing according to the program adding method of the present invention is started by an operation from the operation panel 120 or an operation from a PC or the like connected to the multi-function apparatus 31 directly via USB or the like or via the network 200. Is also good.
[0148]
In this case, for example, the application addition SD card 140 may be used as in the above-described first to third embodiments, or a file recorded on the application addition SD card 140 is downloaded via the network 200. You may do so.
[0149]
Further, the application addition SD card 140 may be created using, for example, a predetermined server for recording a file on the application addition SD card 140, or a device having a connection function with the predetermined server (for example, It may be created by recording a file downloaded using a mobile phone or a PDA.
[0150]
In the present embodiment, the processing of the MFP 31 has been mainly described, but application to the information processing apparatus 1 shown in FIGS. 1 and 2 is easy. Further, the present invention is not limited to the specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims.
[0151]
【The invention's effect】
As described above, according to the present invention, it is possible to add a program to a program starting recording medium while ensuring the safety of the program recorded on the pluggable program starting recording medium.
[0152]
[Brief description of the drawings]
FIG. 1 is a configuration diagram of an embodiment of an information processing apparatus according to the present invention.
FIG. 2 is a hardware configuration diagram of an embodiment of an information processing apparatus according to the present invention.
FIG. 3 is a configuration diagram of an embodiment of a multifunction peripheral according to the present invention.
FIG. 4 is a hardware configuration diagram of an embodiment of the multifunction peripheral according to the present invention.
FIG. 5 is a configuration diagram of an example of a multifunction peripheral starting unit.
FIG. 6 is a schematic diagram illustrating an example for explaining a program adding method according to the first embodiment of the present invention;
FIG. 7 is an explanatory diagram of an example of the process of step S100.
FIG. 8 is a flowchart illustrating an example of an authentication check process of a setting file.
FIG. 9 is an image diagram of an example of a target file recorded on an application addition SD card.
FIG. 10 is a flowchart illustrating an example of an authentication check process of a module to be mounted;
FIG. 11 is an explanatory diagram of an example of the process of step S400.
FIG. 12 is an explanatory diagram of an example of the process of step S600.
FIG. 13 is an image diagram of an example of an application starting SD card to which a program is added.
FIG. 14 is an image diagram of an example of an application adding SD card used in the program adding method of the second embodiment.
FIG. 15 is a schematic diagram illustrating an example for explaining a program adding method according to a second embodiment of the present invention;
FIG. 16 is an explanatory diagram of another example of the process in step S400.
FIG. 17 is an explanatory diagram of another example of the process of step S600.
FIG. 18 is an image diagram of an example of an application starting SD card used in the program adding method according to the third embodiment.
FIG. 19 is a schematic diagram illustrating an example for explaining a program adding method according to a third embodiment of the present invention;
FIG. 20 is an explanatory diagram of another example of the process of step S600.
[Explanation of symbols]
1 Information processing device
2,32 software group
3 Starter
4 Hardware resources
11,132 SD card checker
12,133 Program addition section
13 System control unit
27,110 Slot for SD card
31 Fusion machine
33 Fusion machine starter
34 Hardware Resources
61 NCS
68 SCS
110 SD card slot
120 Operation Panel
131 Program Launcher
136 Operating System (OS)
137 SD card driver
140 SD card for adding applications
141 SD card for application launch
150 servers

Claims (20)

It has a slot into which a plurality of recording media can be inserted and removed, and uses a program addition recording medium inserted into one of the slots to store a program on a program starting recording medium inserted into the other one of the slots. An information processing device to be added,
Determining means for determining insertion of a program addition recording medium into the slot,
If it is determined that the recording medium for adding a program has been inserted into the slot, the identification information of the recording medium for starting a program is acquired and transmitted to a server that creates a file for adding a program to the recording medium for starting a program. on the other hand,
When a file for adding a program to the program starting recording medium is received from the server, an adding unit adds the received file to the program starting recording medium according to a result of the authentication check of the file. An information processing apparatus characterized by the above-mentioned. It has a slot into which a plurality of recording media can be inserted and removed, and uses a program addition recording medium inserted into one of the slots to store a program on a program starting recording medium inserted into the other one of the slots. An information processing device to be added,
Determining means for determining insertion of a program addition recording medium into the slot,
A server that obtains identification information of the program starting recording medium and creates a part of a file for adding a program to the program starting recording medium when it is determined that the program adding recording medium is inserted into the slot; While sending to
When a part of a file for adding a program to the program starting recording medium is received from the server, a part of a file for adding a program to the program starting recording medium is read from the program adding recording medium. An information processing apparatus comprising: an adding unit configured to add the acquired file to a program activation recording medium in accordance with a result of an authentication check of a file acquired from the server or the program addition recording medium. It has a slot into which a plurality of recording media can be inserted and removed, and uses a program addition recording medium inserted into one of the slots to store a program on a program starting recording medium inserted into the other one of the slots. An information processing device to be added,
Determining means for determining insertion of a program addition recording medium into the slot,
A server that obtains identification information of the program starting recording medium and creates a part of a file for adding a program to the program starting recording medium when it is determined that the program adding recording medium is inserted into the slot; While sending to
When a part of a file for adding a program to the program starting recording medium is received from the server, a part of a file for adding a program to the program starting recording medium is read from the program starting recording medium. An information processing apparatus comprising: an adding unit that adds the acquired file to a program activation recording medium according to a result of an authentication check of a file acquired from the server or the program activation recording medium. Monitoring means for monitoring insertion / removal of a recording medium into / from the slot,
4. The information processing apparatus according to claim 1, further comprising: an authentication check unit configured to perform an authentication check for determining whether a recording medium inserted into the slot is a recording medium for adding a program. 5. apparatus. The authentication check unit includes a setting file, a first electronic signature file created from the setting file and identification information of the program addition recording medium, a program for activating the writing unit, the program, and the information. And reading a second electronic signature file created from the identification information of the processing device from the recording medium for program addition, and performing an authentication check of a setting file and a program for activating the writing unit. 4. The information processing device according to 4. When the addition means determines that the recording medium for program addition has been inserted into the slot, the addition means is read out from the recording medium for program addition and activated by an instruction from the determination means. Item 4. The information processing device according to any one of Items 1 to 3. 4. The information processing apparatus according to claim 1, wherein the adding unit is read out from a recording medium for program addition and activated when there is an instruction from an operator using an input device of the information processing apparatus. Item. The adding means includes a setting file, a first electronic signature file created from the setting file and identification information of the program starting recording medium, a program to be added to the program starting recording medium, the program, and the information processing apparatus. 2. The program according to claim 1, wherein the second electronic signature file created from the identification information is read out from the recording medium for program addition, and the authentication check of the setting file and the program added to the recording medium for program startup is performed. Information processing device. The adding unit receives, from the server, a first electronic signature file created from the setting file and the identification information of the program starting recording medium, while adding a setting file and a program to be added to the program starting recording medium. Reading a program and a second electronic signature file created from identification information of the information processing apparatus from a recording medium for adding a program, and performing an authentication check of a setting file and a program to be added to the recording medium for starting a program. 3. The information processing apparatus according to claim 2, wherein The adding unit receives, from the server, a first electronic signature file created from the setting file and the identification information of the program starting recording medium, while adding a setting file and a program to be added to the program starting recording medium. Reading a program and a second electronic signature file created from the identification information of the information processing apparatus from a recording medium for program activation, and performing an authentication check of a setting file and a program to be added to the recording medium for program activation. The information processing apparatus according to claim 3, wherein 11. The information processing apparatus according to claim 1, wherein a file received from a server is used instead of using a file recorded on the program addition recording medium. The information processing apparatus according to claim 1, wherein the recording medium for adding a program and the recording medium for starting a program are hot-swappable. It has a slot into which a plurality of recording media can be inserted and removed, and uses a program addition recording medium inserted into one of the slots to store a program on a program starting recording medium inserted into the other one of the slots. An image forming apparatus to be added,
Determining means for determining insertion of a program addition recording medium into the slot,
If it is determined that the recording medium for adding a program has been inserted into the slot, the identification information of the recording medium for starting a program is acquired and transmitted to a server that creates a file for adding a program to the recording medium for starting a program. on the other hand,
When a file for adding a program to the program starting recording medium is received from the server, an adding unit adds the received file to the program starting recording medium according to a result of the authentication check of the file. An image forming apparatus comprising: It has a slot into which a plurality of recording media can be inserted and removed, and uses a program addition recording medium inserted into one of the slots to store a program on a program starting recording medium inserted into the other one of the slots. An image forming apparatus to be added,
Determining means for determining insertion of a program addition recording medium into the slot,
A server that obtains identification information of the program starting recording medium and creates a part of a file for adding a program to the program starting recording medium when it is determined that the program adding recording medium is inserted into the slot; While sending to
When a part of a file for adding a program to the program starting recording medium is received from the server, a part of a file for adding a program to the program starting recording medium is read from the program adding recording medium. An image forming apparatus comprising: an adding unit that adds the obtained file to a program starting recording medium according to a result of an authentication check of a file obtained from the server or the program adding recording medium. It has a slot into which a plurality of recording media can be inserted and removed, and uses a program addition recording medium inserted into one of the slots to store a program on a program starting recording medium inserted into the other one of the slots. An image forming apparatus to be added,
Determining means for determining insertion of a program addition recording medium into the slot,
A server that obtains identification information of the program starting recording medium and creates a part of a file for adding a program to the program starting recording medium when it is determined that the program adding recording medium is inserted into the slot; While sending to
When a part of a file for adding a program to the program starting recording medium is received from the server, a part of a file for adding a program to the program starting recording medium is read from the program starting recording medium. An image forming apparatus comprising: an adding unit that adds the obtained file to the program starting recording medium according to a result of the authentication check of the file obtained from the server or the program starting recording medium. 16. The image forming apparatus according to claim 13, wherein the recording medium for adding a program and the recording medium for starting a program are hot-swappable. A program addition method for a system having a server that creates a program addition recording medium, and an information processing device that adds a program to a program startup recording medium using the program addition recording medium,
The information processing device,
Determining means for determining insertion of a program addition recording medium into the slot,
If it is determined that the recording medium for adding a program has been inserted into the slot, the identification information of the recording medium for starting a program is acquired and transmitted to a server that creates a file for adding a program to the recording medium for starting a program. on the other hand,
When a file for adding a program to the program starting recording medium is received from the server, an adding unit adds the received file to the program starting recording medium according to a result of the authentication check of the file. A method for adding a program, characterized in that: A program addition method for a system having a server that creates a program addition recording medium, and an information processing device that adds a program to a program startup recording medium using the program addition recording medium,
The information processing device,
Determining means for determining insertion of a program addition recording medium into the slot,
A server that obtains identification information of the program starting recording medium and creates a part of a file for adding a program to the program starting recording medium when it is determined that the program adding recording medium is inserted into the slot; While sending to
When a part of a file for adding a program to the program starting recording medium is received from the server, a part of a file for adding a program to the program starting recording medium is read from the program adding recording medium. And a means for adding the obtained file to the program starting recording medium in accordance with the result of the authentication check of the file obtained from the server or the program adding recording medium. A program addition method for a system having a server that creates a program addition recording medium, and an information processing device that adds a program to a program startup recording medium using the program addition recording medium,
The information processing device,
Determining means for determining insertion of a program addition recording medium into the slot,
A server that obtains identification information of the program starting recording medium and creates a part of a file for adding a program to the program starting recording medium when it is determined that the program adding recording medium is inserted into the slot; While sending to
When a part of a file for adding a program to the program starting recording medium is received from the server, a part of a file for adding a program to the program starting recording medium is read from the program starting recording medium. A program adding method for adding the obtained file to the program starting recording medium in accordance with the result of the authentication check of the file obtained from the server or the program starting recording medium. The program addition method according to any one of claims 17 to 19, wherein the recording medium for adding a program and the recording medium for starting a program are hot-swappable.

Images