# US 10,482,256 B2 · Information processing apparatus and method of controlling the apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,482,256 B2 - Document ID: US10482256B2 - Status: Granted - Kind: B2 - Application number: 15/082,891 - Filed: 2016-03-28 - Published: 2016-10-06 - Granted: 2019-11-19 - Earliest claimed: 2015-03-31 - Assignees: Canon Kabushiki Kaisha - Applicants: Canon Kabushiki Kaisha - Inventors: Junichi Hayashi; Koji Harada; Nobuhiro Tagashira; Takami Eguchi; Yasuhiro Nakamoto; Kazuya Kishi; Ayuta Kawazu - Web page: https://patentgrep.com/patent/US10482256B2 ## CPC - G06F 21/575: {Secure boot} - G06F 9/4403: {Processor initialisation} - G06F 21/52: during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 2221/033: Test or assess software - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An information processing apparatus holding a secure chip includes a determination unit that determines whether the information processing apparatus returns from an idle state; a detection unit that, if the determination unit determines that the information processing apparatus returns from the idle state, detects initialization of the secure chip before starting application software; and a control unit that, if the detection unit detects the initialization of the secure chip, controls an operation of the information processing apparatus so that a hash value of the application software is not registered in the secure chip that is initialized. ## Claims ### Claim 1 An information processing apparatus holding a secure chip in which a hash value is capable of being registered, the information processing apparatus comprising: a determination unit configured to determine whether the information processing apparatus returns from an idle state; a detection unit configured to, if the determination unit determines that the information processing apparatus returns from the idle state, detect initialization of the secure chip before starting application software; and a control unit configured to, if detection of the initialization of the secure chip is done and restart of the information processing apparatus is not permitted, register a constant indicating that a platform configuration register (PCR) has an initial value in system return in the secure chip, and if determination that the information processing apparatus returns from an idle state is not done, control an operation of the information processing apparatus so that the hash value of the application software is registered in the secure chip. ### Claim 2 (depends on 1) The information processing apparatus according to claim 1, wherein the secure chip includes a volatile memory in which the hash value of software executed in the information processing apparatus is registered. ### Claim 3 (depends on 1) The information processing apparatus according to claim 1, wherein the secure chip is a trusted platform module (TPM). ### Claim 4 (depends on 1) The information processing apparatus according to claim 1, wherein, if the detection unit detects that the secure chip is initialized, the control unit restarts the information processing apparatus. ### Claim 5 (depends on 1) The information processing apparatus according to claim 1, wherein, if the detection unit detects that the secure chip is initialized, the control unit makes the secure chip unavailable from the information processing apparatus. ### Claim 6 (depends on 5) The information processing apparatus according to claim 5, wherein, if the detection unit detects that the secure chip is initialized, the control unit transmits a command to deactivate the secure chip to the secure chip to make the secure chip unavailable from the information processing apparatus. ### Claim 7 (depends on 5) The information processing apparatus according to claim 5, wherein, if the detection unit detects that the secure chip is initialized, the control unit restricts access to the secure chip to make the secure chip unavailable from the information processing apparatus. ### Claim 8 (depends on 1) The information processing apparatus according to claim 1, wherein, if the detection unit detects that the secure chip is initialized, the control unit registers a random number in the secure chip. ### Claim 9 A method of controlling an information processing apparatus holding a secure chip in which a hash value is capable of being registered, the method comprising: determining whether the information processing apparatus returns from an idle state; detecting, if the determining determines that the information processing apparatus returns from the idle state, initialization of the secure chip before starting application software; and if detection of the initialization of the secure chip is done and restart of the information processing apparatus is not permitted, registering a constant indicating that a platform configuration register (PCR) has an initial value in system return in the secure chip, and if determination that the information processing apparatus returns from an idle state is not done, controlling an operation of the information processing apparatus so that the hash value of the application software is registered in the secure chip. ### Claim 10 A non-transitory storage medium storing a program that when executed causes an information processing apparatus to perform a process, the information processing apparatus holding a secure chip in which a hash value is capable of being registered, the process comprising: determining whether the information processing apparatus returns from an idle state; detecting, if the determining determines that the information processing apparatus returns from the idle state, initialization of the secure chip before starting application software; and if detection of the initialization of the secure chip is done and restart of the information processing apparatus is not permitted, registering a constant indicating that a platform configuration register (PCR) has an initial value in system return in the secure chip, and if determination that the information processing apparatus returns from an idle state is not done, controlling an operation of the information processing apparatus so that the hash value of the application software is registered in the secure chip.