JP2001092668A - Electronic equipment and method for rewriting inside program of the same equipment and computer readable information storage medium recorded with program having function for rewriting the same program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide electronic equipment for ensuring high security related with the writing of an inside program, a method for rewriting the inside program of the electronic equipment, and a computer readable information recording medium for recording program having a function for rewriting the inside program of the electronic equipment. SOLUTION: This electronic equipment 1 capable of the rewriting of an inside program for controlling an operation is provided with a storage means 7 for storing the first identifier of a person who has authority to rewrite the inside program, identifying means 2 and 9 for identifying the second identifier of a person who tries to rewrite the inside program, and a certifying means 9 for collating thesecond identifier with the first identifier for certifying.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an electronic device whose operation is controlled by a rewritable internal program,
The present invention relates to a method of rewriting an internal program of an electronic device and a computer-readable information recording medium on which a program having a function of rewriting an internal program of the electronic device is recorded.

[0002]

2. Description of the Related Art In recent years, electronic equipment has been equipped with various functions due to industrial development. The electronic device is controlled by, for example, a predetermined firmware (internal program) so as to exhibit its function. This firmware is stored, for example, in a memory built in the electronic device. This memory is capable of rewriting data, for example, and the electronic device can change its function by rewriting the firmware. Conventionally, this firmware has been authenticated by a simple authentication means such as inputting a password or a serial number of an electronic device so that the firmware can be rewritten only by a specific person.

[0003]

However, once such information as the password and the serial number of the electronic device has been leaked, there has been a problem that the firmware is illegally rewritten by a third party. In other words, while a third party is operating the firmware (hereinafter “online”
In some cases, rewriting the firmware in this manner causes the electronic device to not operate normally.

Accordingly, the present invention solves the above-mentioned problems, and records an electronic device, a method for rewriting the internal program of the electronic device, and a program having a function of rewriting the internal program of the electronic device, which can ensure high security in rewriting the internal program. It is an object of the present invention to provide a computer-readable information recording medium.

[0005]

According to the first aspect of the present invention, there is provided an electronic apparatus capable of rewriting an internal program for controlling an operation, wherein the electronic apparatus is configured to permit rewriting of the internal program. Storage means for storing a first identifier of a person who is present, identification means for identifying a second identifier of a person who intends to rewrite the internal program,
The present invention is achieved by an electronic device comprising: an authentication unit configured to check and authenticate the second identifier with the first identifier.

[0006] The above object is attained by the invention of claim 3;
An internal program rewriting method for an electronic device capable of rewriting an internal program for controlling an operation, the method comprising: storing a first identifier of a person permitted to rewrite the internal program in storage means; An identification step for identifying a second identifier of a person who intends to rewrite a program by identification means, and an authentication step for checking the second identifier with the first identifier and authenticating by the authentication means. This is achieved by a method for rewriting an internal program of an electronic device, which is a feature of the present invention.

[0007] The above object is attained by the invention of claim 4;
A computer-readable information recording medium recording an internal program having an internal program rewriting function of an electronic device capable of rewriting an internal program for controlling the operation of the electronic device. Storing a first identifier in a storage means, an identification step for identifying a second identifier of a person who intends to rewrite the internal program by an identification means, collating the second identifier with the first identifier, The present invention is attained by a computer-readable information recording medium in which a program having an internal program rewriting function of an electronic device having an authentication step for authenticating by an authentication unit is recorded.

According to any one of the first, third and fourth aspects of the present invention, the electronic device is capable of rewriting an internal program for controlling its operation. This internal program is
This is for controlling the operation of the electronic device. The storage means stores a first identifier of a person permitted to rewrite the internal program. The identification means identifies a second identifier of a person who intends to rewrite the internal program. The authentication unit authenticates by comparing the second identifier identified by the identification unit with the first identifier of the storage unit.
Therefore, the internal program of the electronic device can be rewritten only by an authorized person. For this reason,
The electronic device can improve security for rewriting the internal program.

A second aspect of the present invention is characterized in that, in the configuration of the first aspect, each of the first identifier and the second identifier is a fingerprint, an encryption key, or a combination thereof.

[0010]

Preferred embodiments of the present invention will be described below in detail with reference to the accompanying drawings. Note that the embodiments described below are preferred specific examples of the present invention,
Although various technically preferable limits are given, the scope of the present invention is not limited to these modes unless otherwise specified in the following description. In the following description, a state in which the electronic device 1 is operating is referred to as “online”.

FIG. 1 is a block diagram showing a configuration example of an electronic device 1 and a host controller 11 according to a first embodiment of the present invention. The host controller 11 is an electronic device such as a computer operated by an operator, for example, and is connected to the electronic device 1 via a predetermined signal line. The host controller 11 has, for example, a device driver 12 and an application program 13 (application). The host controller 11 controls data communication with, for example, the communication interface 10 of the electronic device 1.

The device driver 12 is, for example, software for controlling the basic operation of the host controller 11. The device driver 12 requests the right to rewrite the firmware (internal program) of the electronic device 1 (hereinafter referred to as “rewrite right”) to the electronic device 1. Here, the “firmware” refers to a program that operates by being incorporated in hardware. Upon acquiring this rewrite right, the device driver 12 permits the application 13 to issue a firmware rewrite command. The host controller 14
May be configured such that the device driver 12 is not involved in obtaining the rewrite right and the application 13 directly requests the rewrite right.

The application 13 is, for example, a program for issuing a command for rewriting firmware of the electronic device 1 (a program having a function of rewriting an internal program of the electronic device). The device driver 12 and the application 13 are stored in, for example, a memory (not shown).

The electronic device 1 includes, for example, a fingerprint processing unit 2
(Identification means), a system control 9 (identification means, authentication means), a communication interface 10, a bus line 5, a nonvolatile memory 7 (storage means), a memory 8, an input means 15, and a display means 16. The bus line 5 includes, for example, a fingerprint processing unit 2, a system control 9, and a communication interface 1.
0, the nonvolatile memory 7, the memory 8, the input means 15, and the display means 16. The electronic device 1 is an electronic device such as a fingerprint collator (including a door with a fingerprint collator), a portable telephone device, an information terminal, and a computer.

The fingerprint processing unit 2 performs a process for identifying an identifier of an operator who wants to rewrite the firmware of the electronic device 1, for example. This identifier is, for example, a fingerprint. The fingerprint processing unit 2 includes, for example, a fingerprint sensor 4 and a fingerprint matching unit 3. As shown in FIG.
ED (Light Emitting Diode) 2
1. CCD (Charge Coupled Device) as an example of a prism 20, a lens 22, and an image sensor
ce) 23. The fingerprint matching unit 3 is connected to the CCD 23.

The LED 21 emits light to the prism 400 with which the finger F of the worker who is trying to rewrite the firmware of the electronic device 1 is in contact. The lens 22 condenses an optical signal representing the information of the fingerprint of the finger F. CCD2
3 converts this optical signal into an electric signal. Fingerprint collation unit 3
This optical signal is used as a fingerprint image, and this fingerprint image is compared with a fingerprint image stored in advance in the nonvolatile memory 7 in FIG.

The system control 9 is, for example, a control unit for controlling the entire electronic device 1. The system control 9 includes a fingerprint processing unit 2, a communication interface 10, a non-volatile memory 7,
It controls the memory 8, the input means 15, and the display means 16. The system control 9 responds to, for example, a request for a firmware rewrite right from the host controller 14.

The communication interface 10 is an interface for performing data communication with, for example, the host controller 11. As the communication interface 10, for example, RS-232C, USB (Universal
al Serial Bus), infrared communication, LAN
(Local Area Network).

The non-volatile memory 7 is a rewritable non-volatile information storage medium and stores, for example, an identifier of a person who has been given the right to rewrite the firmware of the electronic device 1, for example, fingerprint information. The non-volatile memory 7 stores, for example, fingerprint image data for fingerprint collation, arbitrary general data and firmware, and preferably a part of a program (rewriting program) having a function of rewriting the firmware of the electronic device 1. Some functions of the rewriting program include, for example, the host controller 1
4 is a function for responding to a rewrite right request from the PC.

In the non-volatile memory 7, data other than programs are classified in units of files, and each file has an identifier by which the owner can be identified. Then, in the non-volatile memory 7, what authority the electronic device 1 has can be set by the above-described rewriting program. Note that a configuration in which a plurality of nonvolatile memories 7 are provided may be employed. In this case, each data is
It may be written in any of a plurality of nonvolatile memories.

The memory 8 is, for example, a volatile memory in which data can be rewritten. The memory 8 is loaded with the above-described rewriting program under the control of the system control 9 and is used as a work area of the rewriting program. still,
A plurality of memories 8 may be provided. Input means 15
Is a pointing device such as a keyboard and a mouse for inputting characters and the like. The display means 16
For example, a liquid crystal display or a CRT (Cathode R)
a Tube).

The electronic device 1 has the above configuration, and a method of rewriting the firmware of the electronic device 1 is shown in FIG.
This will be described with reference to FIG. FIG. 3 is a flowchart illustrating an example of a method of rewriting the firmware of the electronic device 1 of FIG. The worker is a person who rewrites the firmware of the electronic device 1. Since the electronic device 1 can rewrite firmware even when it is online, for example, only specific workers should be permitted.

When rewriting the firmware of the electronic device 1, the operator places a predetermined finger on the fingerprint sensor 4. The electronic device 1 starts a rewriting process (step ST1). The electronic device 1 controls the fingerprint processing unit 2 in FIG. 1 to capture a fingerprint image of the worker (step ST2). The nonvolatile memory 7 stores, for example, data related to a fingerprint image of a person to whom rewriting authority has been given in advance (storage step). The operator specifies, for example, the one stored in the non-volatile memory 7 and closest to the fingerprint image displayed on the display means 16 by the input means 15 (step ST3).

The electronic device 1 determines whether or not both fingerprints match (step ST4: identification step).
If it is determined that they do not match, the operator is not given the authority related to permission to rewrite the firmware (hereinafter, simply referred to as “rewrite right”). On the other hand, if it is determined that the fingerprints match, the operator further determines whether or not the fingerprint has the right to rewrite (step ST5).

The operator inputs a preset password using the input means 15 such as a keyboard (step ST6). The electronic device 1 collates the input password with a preset password and determines whether they match (step ST8). If it is determined that they do not match, the operator is not given rewriting authority (step ST17). On the other hand, when it is determined that they match, the electronic device 1 determines whether or not the input password is a password of a person having the rewriting authority (step S).
T9).

If the electronic device 1 determines that the password is not the password of a person having the rewriting authority, the operator is not given the rewriting authority. On the other hand, if the electronic device 1 determines that the password is that of a person having the rewriting authority, the worker is given the rewriting authority (authentication step). The host controller 11 rewrites the firmware of the electronic device 1 using the communication interface 10 under the control of the system control 9. Therefore, the worker
By performing a predetermined operation on the electronic device 1, the firmware of the electronic device 1 can be rewritten.

According to the first embodiment of the present invention, only a preset worker can rewrite the firmware of the electronic device 1, so that security of the rewriting of the firmware of the electronic device 1 can be ensured more than before. Can be. In particular, the electronic device 1 is particularly effective when it is possible to rewrite the firmware online, since it is not preferable for any person to rewrite the firmware. Further, even when the information regarding the rewriting of the firmware is leaked, the electronic device 1 needs to collate a fingerprint or the like of a preset person at the time of rewriting the firmware, so that security can be maintained for the rewriting of the firmware. .

Further, the method of rewriting the firmware of the electronic device 1 may operate according to the following flowchart. FIG. 4 is a flowchart showing a modification of the flowchart of FIG. In the flowchart of FIG. 4, the portions denoted by the same reference numerals in the flowchart of FIG. 3 are the same processing, and therefore only different points will be described. Note that, in FIG. 4, a process with a shadow (for example, step ST3, step ST6, and step ST7).
Is performed by the system control 9, for example.

In the flowchart of FIG. 4, the password input by the operator through the input means 15 is collated with the password stored in the nonvolatile memory 7, for example. The password stored in the nonvolatile memory 7 is stored, for example, for each person who has been given the rewriting authority described above.

In such a modification, in addition to the effect of the above-described method, the operation of the operator, such as selection of a fingerprint image, is performed by the system control 9, thereby simplifying the operation of the operator. it can.

Second Embodiment FIG. 5 is a block diagram showing a configuration example of an electronic device 1 and a host controller 11 as a second embodiment of the present invention. In FIG. 5, portions denoted by the same reference numerals as those in FIG. 1 in the first embodiment have the same configuration. FIG. 6 is a flowchart illustrating an example of a method of rewriting the firmware of the electronic device 1 of FIG. 1, and FIG. 7 is a flowchart illustrating a modification of the flowchart of FIG. 6 and 7,
Since the processes denoted by the same reference numerals as those in FIGS. 3 and 4 in the first embodiment are the same processes, only different points will be described.

In the electronic device 1a according to the second embodiment,
The cryptographic processing unit 6 is added to the configuration of the electronic device 1 according to the first embodiment.
Has been added. The encryption processing unit 6 performs, for example, encryption / decryption processing based on public key cryptography or common key cryptography. On the operator's operation surface, in the electronic device 1a according to the second embodiment, an encryption key described later is input instead of the password input in the electronic device 1 according to the first embodiment.

The processing in steps ST1 to ST5 in the electronic device 1a is the same as the processing in steps ST1 to ST5 in the electronic device 1 according to the first embodiment, and a description thereof will be omitted. When the process of step ST5 is completed and the electronic device 1a determines that the fingerprint of the identified worker is not a fingerprint of a person having the rewriting right, the rewriting right is not given to the worker (step ST17).
On the other hand, when the electronic device 1a determines that the fingerprint of the identified worker is a fingerprint of a person having the authority to rewrite, the electronic device 1a outputs a first random number (step ST10). The operator encrypts the first random number with his / her own encryption key using the input unit 15 (step ST11). The electronic device 1a decrypts the encrypted ciphertext with the specified encryption key (Step S).
T13). The electronic device 1a outputs the first random number output earlier,
It is determined whether or not the combined second random number matches (step ST14).

If the electronic device 1a determines that they do not match, it does not grant the rewrite authority to the operator (step ST).
17). On the other hand, when the electronic device 1a determines that they match, the electronic device 1a determines whether or not the person who has input the encryption key has the authority to rewrite (step ST15). If the electronic device 1a determines that the user does not have the rewriting authority, the electronic device 1a does not grant the rewriting authority to the worker (step ST17). On the other hand, when the electronic device 1a determines that the user has the rewriting authority, the electronic device 1a gives the rewriting authority to the worker, and rewrites the firmware of the electronic device 1 as in the first embodiment.

According to the second embodiment of the present invention, substantially the same effects as those of the first embodiment can be exerted even with a different method.

An electronic apparatus 1a according to the second embodiment
The firmware rewriting method may operate according to the following flowchart. FIG. 7 is a flowchart showing a modification of the flowchart of FIG. In the flowchart of FIG. 7, portions denoted by the same reference numerals in the flowchart of FIG. 6 are the same processing, and therefore only different points will be described. Note that, in FIG. 7, the processes with shadows (for example, steps ST3 and ST11)
And step ST12) is performed by the system control 9, for example. In the flowchart of FIG. 7, the password input by the operator through the input unit 15 is collated with, for example, a password stored in the nonvolatile memory 7. The password stored in the nonvolatile memory 7 is stored, for example, for each person who has been given the rewriting authority described above.

In such a modified example, in addition to the effect of the above-described method, the operation of the operator such as selection of a fingerprint image is performed by the system control 9 to simplify the operation of the operator. it can.

The present invention is not limited to the above embodiment. For example, each of the electronic devices 1 and 1a determines whether or not the user has the above-described rewriting authority and performs authentication by, for example, one of fingerprint matching, password matching, and encryption matching, or a combination of any of these. Needless to say, this is acceptable.

In the above-mentioned authentication function, authentication is
It shows an operation of collating data stored in the electronic devices 1 and 1a with data input from outside thereof, and is not limited to the fingerprint collation as described above, and is performed by other authentication means. Is also good.

The electronic devices 1 and 1a may be, for example, a computer or a telephone, or may be provided with a card type fingerprint collating unit 30 as shown in FIG. good.

The electronic devices 1 and 1a may be, for example, a security system attached to a door or the like.

The program having the function of rewriting the firmware of the electronic device 1 is, for example, a flexible disk or a CD (Compact Disc: trade name).
And the like may be stored in an information recording medium. Further, as this information recording medium, the program is recorded on electronic devices such as computers scattered on a network, and is downloaded from the electronic device to an electronic device such as a user's computer via the network. May be included.

[0043]

As described above, according to the present invention,
It is possible to provide an electronic device capable of ensuring high security regarding rewriting of an internal program, an internal program rewriting method of the electronic device, and a computer-readable information recording medium that records a program having a function of rewriting an internal program of the electronic device. .

[Brief description of the drawings]

FIG. 1 is an exemplary block diagram illustrating a configuration example of an electronic device and a host controller according to a first embodiment of the invention.

FIG. 2 is a block diagram showing a configuration example of a fingerprint processing unit in FIG. 1;

FIG. 3 is an exemplary flowchart illustrating an example of a method of rewriting firmware of the electronic device of FIG. 1;

FIG. 4 is a flowchart showing a modification of the flowchart in FIG. 3;

FIG. 5 is a block diagram illustrating a configuration example of an electronic device and a host controller according to a second embodiment of the present invention.

6 is a flowchart illustrating an example of a method of rewriting firmware of the electronic device in FIG.

FIG. 7 is a flowchart showing a modification of the flowchart of FIG. 6;

FIG. 8 is a perspective view showing an example of the appearance of a card-type fingerprint collating unit provided in place of the fingerprint processing unit in FIG. 2;

[Explanation of symbols]

1 ... electronic device, 2 ... fingerprint processing unit (identification means),
7 Non-volatile memory (storage means), 9 System control (authentication means, identification means), 13 Application program (program having a function of rewriting an internal program of an electronic device)

Claims (4)

[Claims] 1. An electronic device capable of rewriting an internal program for controlling an operation, comprising: storage means for storing a first identifier of a person authorized to rewrite the internal program; and rewriting the internal program. An electronic device, comprising: identification means for identifying a second identifier of a person to be tried; and authentication means for verifying and authenticating the second identifier with the first identifier. 2. The method according to claim 1, wherein the first identifier and the second identifier are:
The electronic device according to claim 1, wherein each of the electronic devices is a fingerprint, an encryption key, or a combination thereof. 3. An internal program rewriting method for an electronic device capable of rewriting an internal program for controlling an operation, wherein the first identifier of a person who is permitted to rewrite the internal program is stored in a storage unit. An identification step for identifying a second identifier of a person who intends to rewrite the internal program by an identification unit; and an authentication step for comparing the second identifier with the first identifier and authenticating by an authentication unit. And a method for rewriting an internal program of an electronic device. 4. A computer-readable information recording medium recording an internal program having an internal program rewriting function of an electronic device capable of rewriting an internal program for controlling operation, wherein the rewriting of the internal program is permitted. Storing a first identifier of a person who performs rewriting in the storage means; identifying a second identifier of a person who intends to rewrite the internal program by an identification means; and storing the second identifier in the first means. An information recording medium readable by a computer, wherein a program having an internal program rewriting function of an electronic device having an authentication step for verifying with an identifier and authenticating by an authentication means is recorded.