Information processing apparatus, control method, and program

A control method for an information processing apparatus including:

• an authentication processing unit that confirms a validity of a startup program for booting an operating system (OS) based on a predetermined security key in basic input output system (BIOS) processing;
• a trust list storage unit that stores a trust list, a list of trustable providers of the startup program;
• and a chain information storage unit that stores chain information indicating whether the startup program has been executed when the startup program is unauthorized because of being possibly tampered with;
• the method comprising:
• a startup processing step in which a startup processing unit changes the chain information stored in the chain information storage unit to information indicating that the unauthorized startup program has been executed when the startup program acquired from a provider not included in the trust list stored in the trust list storage unit has been executed in secure boot processing for executing the startup program whose validity has been confirmed by the authentication processing unit;
• and
• a restriction processing step in which a restriction processing unit restricts a use of preset security-related protocols when the chain information stored in the chain information storage unit is information indicating that the unauthorized startup program has been executed.

A program for causing a computer for an information processing apparatus including:

• an authentication processing unit that confirms a validity of a startup program for booting an operating system (OS) based on a predetermined security key in basic input output system (BIOS) processing;
• a trust list storage unit that stores a trust list, a list of trustable providers of the startup program;
• and a chain information storage unit that stores chain information indicating whether the startup program has been executed when the startup program is unauthorized because of being possibly tampered with, the program causing the computer to execute:
• a startup processing step in which the startup processing unit changes the chain information stored in the chain information storage unit to information indicating that the unauthorized startup program has been executed when the startup program acquired from a provider not included in the trust list stored in the trust list storage unit has been executed in secure boot processing for executing the startup program whose validity has been confirmed by the authentication processing unit;
• and
• a restriction processing step of restricting a use of preset security-related protocols when the chain information stored in the chain information storage unit is information indicating that the unauthorized startup program has been executed.