Canon Kabushiki Kaisha

Ayuta Kawazu

Nobuhiro Tagashira

Takami Eguchi

Yuki Minetomo

Junichi Hayashi

Koji Harada

Yasuhiro Nakamoto

Kazuya Kishi

An information processing apparatus includes an acquisition unit that performs acquiring first information used for determining a network environment to which a device belongs, and second information indicating the network environment to which the device belongs, a determination unit that performs determining a network environment to which the device belongs, based on the first information, a generation unit that performs generating, based at least on whether the network environment determined by the determination unit matches with the network environment indicated by the second information, learning data used in learning processing of a learning model that is used by the device to determine the network environment, and a learning unit that performs the learning processing using the learning data.

Information processing apparatus that determines network environment of a device, information processing method, and non-transitory computer-readable storage medium

An information processing apparatus includes a first storage medium configured to store a first boot code, a boot code signature value for the entire first boot code, and a specific area signature value for a specific area in the first storage medium, and an alteration detection unit configured to perform detection of an alteration of the first boot code by using the boot code signature value stored in the first storage medium, and perform detection of an alteration in the specific area by using the specific area signature value stored in the first storage medium.

Detecting alteration of boot code

An information processing apparatus includes a request reception unit configured to receive a request for executing an execution module, a first alteration detection unit configured to detect an alteration of a white list upon reception of the execution request, a second alteration detection unit configured to detect an alteration of an execution module which has issued the execution request, by using a white list determined to have no alteration by the first alteration detection unit, and an error control unit configured to, upon detection of an alteration by the second alteration detection unit, select and control whether to deactivate a system of the information processing apparatus or to inhibit only execution of the execution module which has issued the execution request, depending on a current activation mode of the information processing apparatus and an activation mode using the execution module which has issued the execution request.

Information processing apparatus, information processing method, and storage medium

An information processing apparatus, comprising a setting unit that executes a security setting on the information processing apparatus based on an installation environment of the information processing apparatus, wherein the setting unit executes the security setting again at a specific timing.

Information processing apparatus, control method of information processing apparatus, and storage medium

An information processing apparatus comprising a verification unit configured to verify, among a plurality of divided parts of software to be started up, a part of software to be started up next and setting data relating to startup of the part of software to be started next.

An information processing system includes a management server and a multi-function peripheral (MFP). The management server specifies an environment of a network to which the MFP is connected, selects a security policy associated with the specified environment of the network, and delivers the security policy to the MFP. The MFP receives the security policy associated with the environment of the connected network from the management server, and applies the security policy.

Information processing system, information processing apparatus, and control method for setting a security policy to be managed depending on circumstances at different times

An information processing system comprising a first apparatus and a second apparatus, wherein the first apparatus includes: a collection unit that collects information on a surrounding environment of the first apparatus; a determination unit that determines an installation environment of the first apparatus based on the information; a detection unit that detects the second apparatus present under an installation environment identical to the installation environment; a generation unit that generates a setting template for setting the second apparatus based on the installation environment; and a transmission unit that transmits the setting template to the second apparatus, and the second information processing apparatus includes: a reception unit that receives the setting template; and an application unit that applies the received setting template to the second apparatus.

Information processing system, information processing apparatus, server apparatus, control method, and storage medium

An information processing apparatus includes a rewrite request receiving unit configured to receive a rewrite request for rewriting an execution module, an update module determination unit configured to determine whether an update module that issues the rewrite request is an authorized module, a first falsification detection unit configured to detect falsification of a whitelist, an unauthorized-rewriting prevention unit configured to prevent unauthorized rewriting while maintaining a function of the information processing apparatus by rejecting the rewrite request without stopping the function of the information processing apparatus, in a case where the execution module for which the rewrite request is issued is registered in a whitelist for which the first falsification detection unit determines that no falsification is made and where the rewrite request is issued by an update module for which the update module determination unit determines to be an unauthorized update module.

Information processing apparatus, information processing method, and storage medium for detecting falsification of a module

An information processing apparatus stores first software and second software, the first software is stored in a first storage medium accessible by a central processing unit and an embedded controller, and the second software is used to restore the first software and stored in a second storage medium accessible by the embedded controller. The information processing apparatus includes an update unit configured to update the second software using the first software depending on a result of a comparison between version information about the first software and version information about the second software, a falsification detection unit configured to detect whether the first software is falsified; and a restoration unit configured to restore the first software using the second software in a case where the falsification detection unit detects that the first software is falsified.

An apparatus comprising: a unit configured to verify whether a first region that specifies a verification range of a first boot code and a second region that specifies a verification range of a second boot code have been altered; a unit configured to, when the first region has not been altered, verify whether the first boot code has been altered; a unit configured to, when the first boot code has been altered and the second region has not been altered, verify whether the second boot code has been altered; and a unit configured to, when the second boot code has not been altered, restore the first boot code using the second boot code, wherein the first and second regions are regions that are not rewritten after a start of the apparatus.

An information processing apparatus includes a verification unit configured to verify, using a method starting with hardware verification at a time of startup of a system, partial software which is divided into a plurality of parts and gradually started up, a second verification unit configured to verify another partial software based on the verified partial software, and a third verification unit configured to verify software to be executed at an arbitrary timing prior to execution of the software. In a case where the third verification unit is in operation at a time of update of the partial software, the operation of the third verification unit is stopped, and restart is performed after completion of the update, so that a sequence of verification processes starting with the hardware verification up to a result of verification at a time of execution is applied.

Information processing apparatus, information processing method, and storage medium for preventing unauthorized rewriting of a module

An information processing apparatus holding a secure chip includes a determination unit that determines whether the information processing apparatus returns from an idle state; a detection unit that, if the determination unit determines that the information processing apparatus returns from the idle state, detects initialization of the secure chip before starting application software; and a control unit that, if the detection unit detects the initialization of the secure chip, controls an operation of the information processing apparatus so that a hash value of the application software is not registered in the secure chip that is initialized.

Information processing apparatus and method of controlling the apparatus

An information processing apparatus having a function of entering and returning from a hibernation state and communicable with a server apparatus performing device certification includes a storage unit configured to, in a case where a software module is activated, store a hash value of the activated software module in a volatile memory, a request unit configured to request device certification based on a hash value stored in the volatile memory from the server apparatus, and an excluding unit configured to, in a case where the device certification is requested after returning from the hibernation state, exclude a software module activated before entering the hibernation state from a target of the device certification.

Growing community of inventors

Yokohama, Japan

Ayuta Kawazu