Service for recovering security devices after failure

A service enabling the control of an information processing apparatus having security hardware for storing security key informatin so that it can be freely read and written comprising:

• OS start admission means for determining whether or not input data for user certification is valid when an OS starts based on said security key information read from said security hardware and admitting the OS to start if the determination result is positive;
• security key information restoration means for restoring the security key information in the security hardware based on predetermined data for restoration;
• OS start type selection means for selecting and executing either a first type OS start for generating a system status in which said security key information restoration means is operable (hereafter, referred to as a “first system status”) and operating said OS start admission means or a functionally restricted second type OS start for generating a functionally restricted system status in which said security key information restoration means is inoperable (hereafter, referred to as a “second system status”) and not operating said OS start admission means, and said method causing a computer to execute:
• a cancellation step in which cancellation means cancels the operation of said OS start admission means as to the first type OS start after it is generated;
• and
• a cancel release step in which cancel release means releases the cancellation of the operation of said OS start admission means by said cancellation means after the first type OS start having the operation of said OS start admission means canceled by said cancellation means is executed at least once.

A computer program for controlling an information processing apparatus having security hardware for storing security key information which can be freely read and written comprising:

• OS start admission means for determining whether or not input data for user certification is valid when an OS starts based on said security key information read from said security hardware and admitting the OS to start if the determination result is positive;
• security key information restoration means for restoring the security key information in the security hardware based on predetermined data for restoration;
• OS start type selection means for selecting and executing either a first type OS start for generating a system status in which said security key information restoration means is operable (hereafter, referred to as a “first system status”) and operating said OS start admission means or a functionally restricted second type OS start for generating a functionally restricted system status in which said security key information restoration means is inoperable (hereafter, referred to as a “second system status”) and not operating said OS start admission means, and said method causing a computer to execute:
• a cancellation step in which cancellation means cancels the operation of said OS start admission means as to the first type OS start after it is generated;
• and
• a cancel release step in which cancel release means releases the cancellation of the operation of said OS start admission means by said cancellation means after the first type OS start having the operation of said OS start admission means canceled by said cancellation means is executed at least once.