JPH09185426A - Information processing apparatus and control method thereof - Google Patents

Abstract

(57) [Abstract] [Problem] A security protection method for temporarily locking the screen or keyboard is easily unlocked if someone else knows the password, and the person forgets the password and locks it. There are problems such as being unable to cancel. SOLUTION: When a PC card 107 is attached to the device,
When the security information is read from the PC card 107 and the storage unit 104 of the device, and when the two pieces of read information match, based on a part of the security information read from the storage unit 104, the system operating on the device is locked or In addition to unlocking, a part of the security information stored in the storage unit 104 is rewritten.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus and a control method thereof, and for example, a PCMCIA (Personal Compute)
r Memory Card International Association) The present invention relates to an information processing apparatus having a card slot (also referred to as a PC card slot) and a control method thereof.

[0002]

2. Description of the Related Art A laptop computer, which has become widespread in recent years, is easy to carry and can be used easily, but anyone can easily carry it and use it to store various data stored in its built-in hard disk. On the other hand, more security protection than ever is needed, and issues regarding security protection are being highlighted.

There are the following security protections to prevent a computer or the like from being operated carelessly.

The first method is to operate the computer while
By temporarily locking the screen or keyboard so that the lock cannot be unlocked unless a predetermined password is entered, the computer cannot be used by others.

The second method is a method of logging in to the system of the computer when starting the use of the computer and logging off of the system when ending or interrupting the use of the computer. According to this method, a user who does not have an account in the system of the computer cannot use the computer.

[0006]

However, the above-mentioned technique has the following problems. In other words, the first method of temporarily locking the screen or keyboard can be easily unlocked if someone else knows the password, and there is also the problem that the person forgets the password and cannot unlock it. . In addition, even if you lock the screen or keyboard, if the system is forcibly reset,
There is also the drawback that the lock will be released. On the other hand, the second method of logging out from the system has a problem that it cannot be used unless the running program is terminated.

An object of the present invention is to solve the above problems, and an object thereof is to provide an information processing apparatus and a control method thereof for which security protection can be easily utilized.

Another object of the present invention is to provide an information processing apparatus having a high security protection function and a control method thereof.

[0009]

The present invention has the following configuration as one means for achieving the above object.

In the information processing apparatus according to the present invention, a detecting means for detecting the attachment / detachment state of the first storage medium which is attachable / detachable to / from the apparatus, and when the detection means detects the attachment of the first storage medium, A reading unit that reads predetermined information from the first storage medium and a second storage medium fixed to the device, an analyzing unit that analyzes two pieces of information read by the reading unit, and an analyzing unit. Based on the obtained analysis result and the predetermined information read from the second storage medium, while controlling the state of the system operating on the device, of the predetermined information stored in the second storage medium. And a control means for rewriting a part thereof.

Further, according to the control method of the information processing apparatus of the present invention, a detecting step of detecting the attached / detached state of the first storage medium detachable to the apparatus, and the mounting of the first storage medium in the detecting step. When detected, a reading step of reading predetermined information from the first storage medium and a second storage medium fixed to the device, an analysis step of analyzing the two information read in the reading step, and Based on the analysis result obtained by the analysis means and the predetermined information read from the second storage medium, the state of the system operating on the device is controlled and the predetermined information stored in the second storage medium. And a control step for rewriting a part of the above.

[0012]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an information processing apparatus according to an embodiment of the present invention will be described in detail with reference to the drawings.

[0013]

First Embodiment [Configuration] FIG. 1 is a block diagram showing a configuration example of an information processing apparatus according to a first embodiment of the present invention.

In FIG. 1, a central processing unit 102 includes a microprocessor (CPU), a program ROM, a work RAM, etc., controls the following components via a bus 108, and a storage unit 104.
In addition to executing the programs stored in, etc., it also executes various processes related to the security system.

The display unit 105 is a display such as a CRT or a liquid crystal, and various information is displayed by the program executed by the central processing unit 102. In addition, the display
Information related to the security system, such as the security information registration processing status, is also displayed at 105.

The storage unit 104 composed of a hard disk and a non-volatile memory also stores a program for realizing the security system of this embodiment. Further, the storage unit 104 stores the security information input from the input unit 101 including a keyboard and a mouse together with the PC card 107.

The memory 103 is composed of RAM and the like, and has a storage unit.
Security information read from the 104 or the PC card 107 is stored.

The PC card 107 is a PCMCIA (Personal C
PC card slot 106, which can be attached to or detached from this device.
In addition to the security information on the PC card 107,
It goes without saying that various data and programs can be stored. In addition, the functions of mounting / unmounting the PC card and reading / writing are performed by the central processing unit 102.
It is provided as part of the OS and other functions that are loaded into.

[Functional Block] FIG. 2 is a functional block diagram for explaining the operation (processing) of the security system, which is executed by the central processing unit 102.

In FIG. 2, the medium detection module 201 is
When the insertion / removal of the PC card 107 into / from the PC card slot 106 is detected and the PC card 107 is inserted, the security information reading module 202 is instructed to read the security information stored in the card.

The security information reading module 202 is
PC inserted according to the instructions of the media detection module 201
After reading the security information registered in the card 107, the security information registered in the storage unit 104 is read.

The security information analysis module 203 is
The security information of the PC card 107 and the security information of the storage unit 104 read by the security information reading module 202 are analyzed.

The lock control module 204 uses the PC in which the analysis result of the security information analysis module 203 is "inserted.
If the security information stored in the card has the right to lock the system ”, the system is locked, and data indicating a locked state (a part of the security information) is registered in the storage unit 104. If the analysis result indicates that the security information stored in the inserted PC card has the right to unlock, the system is unlocked, and data indicating the unlocked state is stored in the storage unit 104. Register (or delete the data indicating the lock status).

Here, the system when locked is
Regardless of the program being executed, for example, the display unit 10 that does not accept input from the input unit 101 and excludes a part
Either the display of 5 is not changed, or only the message "system is locked" is displayed on the display unit 105.

The security information registration module 206
The security information input from the input unit 101 is the PC card 1
Registered in 07 and the storage unit 104.

The security information display module 207 is
The contents of the security information stored in the PC card 107 or the storage unit 104 are displayed on the display unit 15 according to the analysis result of the security information analysis module 203.

FIG. 3 is a diagram showing an example of the contents of security information. Security information 301 is an example of information registered in the PC card 107, and the user ID “Yama.Mura” is one of the security information. The host name is "Premie
In the example, “r” is registered as the password and “labour” is registered as the password.

The security information 302 is an example of information registered in the storage unit 104, and in this figure, the PC card 10
7 shows an example in which security information having the same content as that registered in 7 and further, "lock" is registered in the locked state which is one of the security information.

The security information is analyzed and compared by the security information analysis module 203.

That is, the example shown in FIG. 3 is a case where the security information registered in the device and the security information registered in the PC card match, the details of which will be described later.
The locked state of the device will be released.

[Operation] Next, the processing and operation of the security system will be described in detail.

4A and 4B are flowcharts showing the operation and processing example of the security system. After the apparatus is started or reset, the central processing unit 102 starts the system such as OS and immediately after that, the security system is started. However, of course, the security system may be activated as part of the OS.

In step S1, the activated security program reads the security information in the storage unit 104,
The lock state is determined. If "unlock", the process proceeds to step S3. If "lock", the system is locked in step S2, and then the process proceeds to step S3. Then, in step S3, the security system P
Wait for the insertion of the C card 107 to be detected.

Therefore, the lock state is "unlock" at the time of startup.
Then the system can be used normally without being locked. If the lock status is "lock" at startup, the system is locked and the PC card 10
Except for the insertion of 7, no input from the user such as keyboard operation will be accepted.

When the PC card 107 is inserted, the security information reading module 202 causes the step S4
The security information is read from the inserted PC card, and the security information is read from the storage unit 104 in step S5.

The security information analysis module
In step S6, the read two sets of security information are analyzed by 203, and in step S7, it is determined whether or not the contents of the security information (user ID, host name, password in the example of FIG. 3) match. To do. As a result of the determination, if the contents of the security information do not match, the process jumps to step S14.

Further, when the contents of the security information match, when the registered security information matches,
There may be a case where a match is determined because the security information is not registered in the PC card 107 or the storage unit 104, so in step S8, the security information analysis module
It is determined by 203 whether the security information is registered. Here, "security information is not registered" means that the contents of the user ID, host name, and password in the example of FIG. 3 are null (null). It corresponds to the time when it is started or when a new security system is introduced and its use is started.

If the security information has not been registered, the process jumps to step S11. If the security information has already been registered, the user is asked whether or not to update the security information in step S9. In step S10, the security information display module 207 displays the content of the security information on the display unit 105, and then proceeds to step S11 to execute a "registration process" described later.

When the "registration process" is completed or the security information is not updated, in step S12, the user is inquired whether or not the lock control for locking or unlocking the system is performed, and the same control is performed. When performing, the process proceeds to step S13, and the "lock control process" described later is executed.

Then, in step S14, the security system waits for the medium detection module 201 to detect that the PC card 107 is removed, and when the PC card is removed, the security system returns to step S3.

FIG. 5 is a flowchart showing an example of the "registration process". In step S21, the security information registration module 206 inputs security information from the input unit 101. When the security information is input, the security information registration module 206 registers the security information input in step S22 in the PC card 107, and then in step S23.
After registering the security information input in step 4 in the storage unit 104, the process returns to the routine of FIG.

FIG. 6 is a flowchart showing an example of the "lock control process". In step S31, the security information analysis module determines whether the lock state is "lock" or "unloc".
k ”is determined.

If it is "lock", the lock control module 204 changes the state to "unlo" in step S34.
"ck" is set, the system is unlocked in step S35, and the process returns to the routine of FIG. Also, "unlock"
If so, the lock control module 204 causes the step S
The lock state is set to "lock" in 32, the system is locked in step S33, and the process returns to the routine in FIG.

As described above, according to this security system, even if the PC card 107 in which the security information does not match is inserted in the locked state of the system, the security information is not registered or updated and is locked. Will not be released. On the other hand, if a PC card 107 with matching security information is inserted, the security information can be updated or unlocked by the user's selection, and if the lock is released, it will be stored in that PC card. It is also possible to read various data and write data.

Therefore, with the system locked,
Even if the device is forcibly turned off or restarted due to a hardware reset, the system will be in the previous locked state and unlocked until the PC card 107 with the matching security information is inserted. You cannot do it.

If the PC card 107 in which the security information does not match is inserted while the system is not locked, the security information will not be registered or updated, and it will not be locked. The PC card can be read and written. On the other hand, if the PC card 107 with the matching security information is inserted, the user may select it regardless of whether the program is running or not.
You can update security information and lock the system, and if you do not lock the system, the PC
It is possible to read and write the card.

Further, in the case of registering the security information for the device to be newly used, if the PC card 107 for which the security information is not registered is inserted, the "registration process" of the security information is automatically started. .

As described above, according to the present embodiment, by using the PC card in which the security information is registered,
By simply performing a simple operation, you can easily lock and unlock the system such as a PC, strengthen the security function, and when it is unlocked, including using a PC card, It can be operated exactly like a normal PC.

Further, even if the system is locked and forcibly reset, it will be locked again and must be unlocked unless a PC card with correct security information is inserted into the device. I can't.

Further, even if the user of the device forgets the security information such as the password, the system can be locked / unlocked easily and the registered security information can be given by instructing the update of the security information. Can be easily known.

[0051]

Second Embodiment Hereinafter, an information processing apparatus according to a second embodiment of the present invention will be described. In the second embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

In the first embodiment, an example has been described in which the security information can be updated and the lock can be controlled only when the security information registered in the PC card 107 and the storage unit 104 match. In the second embodiment, when two pieces of security information match, the user is required to enter a password, and if the entered password and the password of the security information do not match, the security information cannot be updated or locked. To do so.

FIG. 7 is a flowchart showing a part of the operation and processing example of the security system of the second embodiment. Note that, in FIG. 7, the same steps as those in the processing shown in FIG. 4A are denoted by the same reference numerals, and detailed description thereof will be omitted. The latter half of the processing is the same as in FIG.

If the two pieces of security information match and the security information has already been registered, the user is prompted to enter a password in step S41, and whether the password entered in step S42 matches the registered password. To judge. If they match, the process proceeds to step S9, and the user can update the security information and control the lock as necessary. On the other hand, if they do not match, the process proceeds to step S14, and the security information cannot be updated or locked.

If the password registered in the security information is complicated (for example, 10 digits or more), the person himself / herself may forget the password. Therefore, enter part of the registered password (for example, 5 consecutive digits). Then, it may be determined whether or not the input password is a part of the registered password.

As described above, according to this embodiment, even if the security information registered in the PC card and the storage unit match, the registered password does not match the entered password. Since neither security information update nor lock control can be performed, security protection can be strengthened.

[0057]

[Other Embodiments] Even if the present invention is applied to a system including a plurality of devices (for example, a host computer, an interface device, a reader, a printer, etc.), an apparatus (for example, a copying machine) Machine, facsimile machine, etc.).

Another object of the present invention is to provide a storage medium storing a program code of software for realizing the functions of the above-described embodiments to a system or an apparatus, and to provide a computer (or CPU or MPU) of the system or apparatus.
Needless to say, this can also be achieved by the PU) reading and executing the program code stored in the storage medium. In this case, the program code itself read from the storage medium implements the functions of the above-described embodiment, and the storage medium storing the program code constitutes the present invention. Examples of the storage medium for supplying the program code include a floppy disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM,
CD-R, magnetic tape, non-volatile memory card, ROM, etc. can be used.

Further, by executing the program code read by the computer, not only the functions of the above-described embodiment are realized, but also the OS or the like running on the computer is actually executed based on the instruction of the program code. It goes without saying that a case where a part or all of the processing of (1) is performed and the functions of the above-described embodiments are realized by the processing is also included.

Further, after the program code read from the storage medium is written in the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, based on the instruction of the program code, It goes without saying that a case where the CPU or the like included in the function expansion board or the function expansion unit performs a part or all of the actual processing and the processing realizes the functions of the above-described embodiments is also included.

When the present invention is applied to the above-mentioned storage medium, the storage medium stores the program code corresponding to the above-mentioned flow chart. Briefly, in the memory map example of FIG. Each module shown will be stored in the storage medium. That is, at least the program code of each of the "medium detection module", "security information read", "security information analysis", and "lock control" module shown in FIG. 2 may be stored in the storage medium.

In each of the above embodiments, the PC
Although an example of using a card has been described, the present invention is not limited to this, and a rewritable storage medium as described above can be used instead of a PC card. If you only want to store security information, you can use a magnetic card, etc.
For example, an ID card with a magnetic stripe etc.
It can also be used as a security card of the present invention. Of course, when using storage media other than PC cards, it is necessary to add devices for reading and writing these storage media to the configuration of FIG.

[0063]

As described above, according to the present invention,
It is possible to provide an information processing apparatus that can easily use security protection and a control method thereof. For example, the system can be locked / unlocked even if the person forgets the security information. The system can be locked even while the program is running.

Further, it is possible to provide an information processing apparatus having a high-level security protection function and a control method thereof, and for example, even if security information is leaked, the lock cannot be unlocked only by that information. In addition, even if the locked system is forcibly restarted, the lock will not be released.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration example of an information processing apparatus according to a first embodiment of the present invention,

FIG. 2 is a functional block diagram for explaining the operation (processing) of the security system,

FIG. 3 is a diagram showing an example of contents of security information,

FIG. 4A is a flowchart showing an operation and a processing example of the security system,

FIG. 4B is a flowchart showing an operation and a processing example of the security system,

FIG. 5 is a flowchart showing an example of “registration processing”,

FIG. 6 is a flowchart showing an example of “lock control processing”,

FIG. 7 is a flowchart showing a part of an operation and a processing example of the security system according to the second exemplary embodiment of the present invention;

FIG. 8 is a diagram showing an example of a memory map of a storage medium storing a program code according to the present invention.

Claims (9)

[Claims] 1. A detection means for detecting the attachment / detachment state of a first storage medium that is attachable / detachable to / from an apparatus, and a first storage medium when the attachment of the first storage medium is detected by the detection means. A reading means for reading predetermined information from a second storage medium fixed to the device; an analyzing means for analyzing two pieces of information read by the reading means; an analysis result obtained by the analyzing means; Control means for controlling the state of a system operating on the device based on the predetermined information read from the second storage medium and rewriting a part of the predetermined information stored in the second storage medium; An information processing device comprising: 2. The control means, when the analysis result indicates that the two pieces of information read from the first and second storage media match, the predetermined means read from the second storage medium. 2. The information processing apparatus according to claim 1, wherein the state of the system is controlled based on information, and a part of the predetermined information stored in the second storage medium is rewritten. 3. The control means unlocks the system when the predetermined information read from the second storage medium indicates a locked state of the system, and indicates an unlocked state of the system. In that case, the system is locked, and a part of the predetermined information stored in the second storage medium is rewritten.
Information processing device described in. 4. The control means controls the state of the system and stores the information in the second storage medium when the information input from the input means matches a part of the predetermined information. The information processing apparatus according to claim 1, wherein a part of the predetermined information is rewritten. 5. The control means sets the state of the system based on a part of predetermined information stored in the second storage medium when the device is activated. The information processing device described in item 1. 6. A registration means for registering the information input from the input means as the predetermined information in the first and second storage media based on the analysis result obtained by the analysis means. The information processing apparatus according to claim 1, characterized in that 7. The information input from the input means based on the analysis result obtained by the analysis means,
7. An update unit that updates the predetermined information stored in the first and second storage media.
The information processing device described in 1. 8. The updating unit does not perform the updating process when the predetermined information input from the input unit does not match a part of the predetermined information. Information processing device. 9. A detection step of detecting the attachment / detachment state of a first storage medium that is detachable from the apparatus, and a first storage medium when mounting of the first storage medium is detected in the detection step, A reading step of reading predetermined information from a second storage medium fixed to the device, an analyzing step of analyzing the two information read in the reading step, an analysis result obtained by the analyzing means, and the second Controlling the state of the system operating on the device based on the predetermined information read from the storage medium, and rewriting a part of the predetermined information stored in the second storage medium. A control method of a characteristic information processing apparatus.