Information processor, method for verifying authenticity of computer program, and computer program product

Abstract

A disc stores therein a computer program and encrypted information. A BIOS is executed at the time of start-up and starts the computer program. A TPM is connected to the BIOS by a low-speed bus. The TPM includes a register for storing data. A blob stores therein true hash values of the computer program and the BIOS in advance. The BIOS includes a hash value calculating unit that calculates hash values of the computer program and the BIOS and stores those hash values in the register. The TPM compares the hash values stored in the register with the hash values stored in the blob and decrypts information in the blob if the hash values agree with each other.

1 . (canceled) 
     
     
         2 . An information processor, comprising:
 a first storage unit that stores therein a plurality of computer programs to be started;   a starting unit that is started when the information processor is started and starts a first computer program among the plurality of programs;   a security unit that is connected to the starting unit and has a register in which hash values of the computer programs are stored;   a processing unit that operates processes by executing the plurality of computer programs; and   a second storage unit that stores therein the hash values of the computer programs and a hash value of the starting unit in advance and stores encrypted information, wherein   the starting unit includes a first hash value calculating unit that performs a hash value calculating process to calculate hash values of the starting unit and the first computer program and to store the hash values in the register of the security unit,   the starting unit includes a primary section and a secondary section, the secondary section being used as a backup for the primary section, and   the first hash value calculating unit calculates the hash value of the starting unit from only the primary section.   
     
     
         3 . The information processor according to  claim 2 , wherein the first hash value calculating unit calculates the hash value of the starting unit from only a portion of the primary section. 
     
     
         4 . The information processor of  claim 2 , wherein the first hash value calculating unit stores specific information identifying a portion of the starting unit that is used by the first hash value calculating unit to calculate the hash value of the starting unit. 
     
     
         5 . The information processor according to  claim 2 , wherein the security unit is a secure tamper resistant device. 
     
     
         6 . The information processor according to  claim 2 , wherein the security unit verifies an authenticity of the first hash value calculating unit, and when the authenticity of the first hash value calculating unit is verified, a loader in the first storage unit is read. 
     
     
         7 . The information processor according to  claim 6 , wherein if the authenticity of the first hash value calculating unit is not verified, start-up of an image forming apparatus is canceled. 
     
     
         8 . A method for verifying an authenticity performed on an information processor, the information processor including a starting unit that starts a first computer program among a plurality of computer programs, wherein the starting unit includes a first hash value calculating unit that performs a hash value calculating process to calculate hash values of the starting unit and the first computer program, the starting unit includes a primary section and a secondary section, the secondary section being used as a backup for the primary section, and a security unit that is connected to the starting unit and has a register in which hash values of the computer programs are stored, the method comprising:
 starting the first computer program by the starting unit when the information processor is started;   executing a processing unit as the first computer program by the starting unit;   performing a hash value calculating process for calculating hash values of the starting unit and the first computer program, wherein the preforming step includes calculating the hash value of the starting unit from only the primary section; and   storing the hash values in the register of the security unit.   
     
     
         9 . A non-transitory computer-readable medium storing a computer program that, when executed on a computer, causes the computer to execute a method for verifying an authenticity performed on an information processor, the information processor including a starting unit that starts a first computer program among a plurality of computer programs, wherein the starting unit includes a first hash value calculating unit that performs a hash value calculating process to calculate hash values of the starting unit and the first computer program, the starting unit includes a primary section and a secondary section, the secondary section being used as a backup for the primary section, and a security unit that is connected to the starting unit and has a register in which hash values of the computer programs are stored, the method comprising:
 starting the first computer program by the starting unit when the information processor is started;   executing a processing unit as the first computer program by the starting unit;   performing a hash value calculating process for calculating hash values of the starting unit and the first computer program, wherein the preforming step includes calculating the hash value of the starting unit from only the primary section; and   storing the hash values in the register of the security unit.