Abstract: An information processing apparatus for performing hibernation startup is provided. The information processing apparatus includes a selecting unit that selects snapshot creation startup or snapshot startup; a startup unit that initiates startup processes of one or more applications when the snapshot creation startup is selected; the applications, which send notifications after the startup processes have progressed to respective points in time for snapshot creation; a creation instructing unit that sends an instruction to create a snapshot after receiving the notifications from all the applications; a creating unit that creates the snapshot based on the instruction; a memory that stores the snapshot; and a startup instructing unit that reads the snapshot stored in the memory when the snapshot startup is selected, and sends, to the applications, an instruction to resume the startup processes subsequent to the respective points in time, so as to complete the startup processes of the applications.

Abstract: An information processing apparatus for performing hibernation startup is provided. The information processing apparatus includes a selecting unit that selects snapshot creation startup or snapshot startup; a startup unit that initiates startup processes of one or more applications when the snapshot creation startup is selected; the applications, which send notifications after the startup processes have progressed to respective points in time for snapshot creation; a creation instructing unit that sends an instruction to create a snapshot after receiving the notifications from all the applications; a creating unit that creates the snapshot based on the instruction; a memory that stores the snapshot; and a startup instructing unit that reads the snapshot stored in the memory when the snapshot startup is selected, and sends, to the applications, an instruction to resume the startup processes subsequent to the respective points in time, so as to complete the startup processes of the applications.

Abstract: An image processing apparatus includes: a first processing unit configured to operate in a virtual environment; a second processing unit configured to cause the first processing unit to operate; a direct control unit configured to be made to operate by the first processing unit, and configured to directly control hardware without having the second processing unit in between; and an alternative processing unit configured to be made to operate by the second processing unit, and configured to substitutively perform, before the direct control unit is activated, predetermined processing that is supposed to be performed by the direct control unit. The direct control unit is configured to succeed, after activated, contents of the predetermined processing that has been performed by the alternative control unit.

Abstract: An information processing apparatus includes a startup condition acquisition unit that acquires a startup condition of multiple program modules, a determination unit that determines a startup order of the multiple program modules by multiple CPU cores, a startup unit that starts up the multiple program modules by executing an executable program module in accordance with the startup order by the multiple CPU cores, an updating unit that updates load information that indicates multiple CPU core load that fluctuates during a startup process, and a limitation unit that limits startup of the program module by the multiple CPU cores based on the load information updated by the updating unit.

Abstract: An information processing apparatus includes: a first processing unit that operates in a real environment, performs processing after reading first processing-target information into a predetermined memory area of a primary storage unit, and implements a predetermined function in the real environment; and a second processing unit that operates in a virtual environment that is established in the real environment, causes the first processing unit to read second processing-target information into the predetermined memory area of the primary storage unit, processes the second processing-target information read into the predetermined memory area, and implements the predetermined function in the virtual environment.

Abstract: An information processing apparatus includes a startup condition acquisition unit that acquires a startup condition of multiple program modules, a determination unit that determines a startup order of the multiple program modules by multiple CPU cores, a startup unit that starts up the multiple program modules by executing an executable program module in accordance with the startup order by the multiple CPU cores, an updating unit that updates load information that indicates multiple CPU core load that fluctuates during a startup process, and a limitation unit that limits startup of the program module by the multiple CPU cores based on the load information updated by the updating unit.

Abstract: A machine management method includes installing software in a machine including a security device that holds a secret key unextractable from the security device and a public key extractable from the security device, encrypts input data with the public key, and decrypts the input data with the secret key; storing machine identification information of the machine in association with software identification information of the software installed in the machine in an external management apparatus; creating a device-encryption key to encrypt data stored on a first storage device of the machine; storing a device-encryption-key BLOB obtained by encrypting the device-encryption key with the public key on a second storage device of the machine; and storing the device-encryption key in association with the machine identification information in the external management apparatus.

Abstract: An information processing apparatus includes a main memory unit storing while on-power; an auxiliary storage unit functionable even off-power; a control unit performing hibernation of generating operating-state data indicating a state when the power is lost, storing the data in the auxiliary storage unit, and, when restored, reading the data from the auxiliary storage unit; and a security chip that including a configuration register, encrypts data, and storing the data in the auxiliary storage unit. The control unit includes: a first registration unit performing, when the data is generated, calculation based thereon to obtain a calculated value; a second registration unit performing, when the data is read from the auxiliary storage unit at the hibernation, calculation based on the data to obtain a calculated value to write it into the configuration register; and a verification unit performing verification at boot-up from the hibernation based on the value written.

Abstract: An information processing apparatus includes a main memory unit storing while on-power; an auxiliary storage unit functionable even off-power; a control unit performing hibernation of generating operating-state data indicating a state when the power is lost, storing the data in the auxiliary storage unit, and, when restored, reading the data from the auxiliary storage unit; and a security chip that including a configuration register, encrypts data, and storing the data in the auxiliary storage unit. The control unit includes: a first registration unit performing, when the data is generated, calculation based thereon to obtain a calculated value; a second registration unit performing, when the data is read from the auxiliary storage unit at the hibernation, calculation based on the data to obtain a calculated value to write it into the configuration register; and a verification unit performing verification at boot-up from the hibernation based on the value written.

Abstract: A multi-functional system includes a main system, and sub-systems operated by sub-programs and the main system. The sub-systems includes a first memory storing a first public key, and a second memory storing an encrypted sub-program and second public key, a first communication controller transmitting the first public key for encrypted communication, a decryption unit decrypting the encrypted sub-program and second public key using an encryption key, and a second controller transmitting the decrypted second public key for encrypted communication. The main system includes a first public key, a second public key, a security device, and first and second communication controllers. The sub-systems execute a plurality of corresponding subprograms under the control of the main system.

Abstract: An information processing apparatus includes a main memory unit storing while on-power; an auxiliary storage unit functionable even off-power; a control unit performing hibernation of generating operating-state data indicating a state when the power is lost, storing the data in the auxiliary storage unit, and, when restored, reading the data from the auxiliary storage unit; and a security chip that including a configuration register, encrypts data, and storing the data in the auxiliary storage unit. The control unit includes: a first registration unit performing, when the data is generated, calculation based thereon to obtain a calculated value; a second registration unit performing, when the data is read from the auxiliary storage unit at the hibernation, calculation based on the data to obtain a calculated value to write it into the configuration register; and a verification unit performing verification at boot-up from the hibernation based on the value written.

Abstract: A machine management method includes installing software in a machine including a security device that holds a secret key unextractable from the security device and a public key extractable from the security device, encrypts input data with the public key, and decrypts the input data with the secret key; storing machine identification information of the machine in association with software identification information of the software installed in the machine in an external management apparatus; creating a device-encryption key to encrypt data stored on a first storage device of the machine; storing a device-encryption-key BLOB obtained by encrypting the device-encryption key with the public key on a second storage device of the machine; and storing the device-encryption key in association with the machine identification information in the external management apparatus.

Abstract: A machine management method includes installing software in a machine including a security device that holds a secret key unextractable from the security device and a public key extractable from the security device, encrypts input data with the public key, and decrypts the input data with the secret key; storing machine identification information of the machine in association with software identification information of the software installed in the machine in an external management apparatus; creating a device-encryption key to encrypt data stored on a first storage device of the machine; storing a device-encryption-key BLOB obtained by encrypting the device-encryption key with the public key on a second storage device of the machine; and storing the device-encryption key in association with the machine identification information in the external management apparatus.

Abstract: A novel information processing apparatus prevents unauthorized software from running with a hash value whose bit length is longer than each register in a transfer platform module 40 (TPM) using the TPM 40. The TPM 40 includes platform configuration register (PCR) 404-409 that stores a hash value calculated with software program code and a decoding unit 414 that determines the software is legitimate in case hash values stored in the PCR 404-409 match predefined value and decodes encrypted data. The information processing apparatus includes the TPM 40, a dividing unit 202 that divides the hash value and generates a plurality of bit strings that have a shorter bit length than the PCR 404-409, and a storing unit that has the TPM store each bit string in each of the PCRs 404-409.

Abstract: An image processing apparatus and data erasing method make it possible to unrecoverably erase encrypted data recorded in an auxiliary storage device at high speed while reducing the load put on the CPU. Upon reception of a data erase request from a data utilizing process, the data requested to be erased is registered in a predetermined storage unit. The data registered in the storage is unrecoverably erased by overwriting, and an area in the auxiliary storage device in which the erased data was stored is released after the overwriting erasure process.

Abstract: A multi-functional system includes a main system, and sub-systems operated by sub-programs and the main system. The sub-systems includes a first memory storing a first public key, and a second memory storing an encrypted sub-program and second public key, a first communication controller transmitting the first public key for encrypted communication, a decryption unit decrypting the encrypted sub-program and second public key using an encryption key, and a second controller transmitting the decrypted second public key for encrypted communication. The main system includes a first public key, a second public key, a security device, and first and second communication controllers. The sub-systems execute a plurality of corresponding subprograms under the control of the main system.

Abstract: An information processing apparatus includes a main memory unit storing while on-power; an auxiliary storage unit functionable even off-power; a control unit performing hibernation of generating operating-state data indicating a state when the power is lost, storing the data in the auxiliary storage unit, and, when restored, reading the data from the auxiliary storage unit; and a security chip that including a configuration register, encrypts data, and storing the data in the auxiliary storage unit. The control unit includes: a first registration unit performing, when the data is generated, calculation based thereon to obtain a calculated value; a second registration unit performing, when the data is read from the auxiliary storage unit at the hibernation, calculation based on the data to obtain a calculated value to write it into the configuration register; and a verification unit performing verification at boot-up from the hibernation based on the value written.

Abstract: An object of the invention is to provide an image processing device having a sub-system performing a power saving control to support the use of a USB device or provided to allow the supporting of the use of a USB device, in which operational mismatching which may occur at a start of a the power saving mode between the USB device and a USB device driver provided in the main system of the image processing device can be effectively suppressed.

Abstract: In an image forming device, a hardware performs operations to image data. An image memory handler performs allocation of a memory to software execution entities which execute the operations, and performs execution control of the software execution entities. A processing part manages as queues operation specifications to respective functions of the hardware demanded from the software execution entities, and performs execution control of the operation specifications independently of the image memory handler.

Abstract: A machine management method includes installing software in a machine including a security device that holds a secret key unextractable from the security device and a public key extractable from the security device, encrypts input data with the public key, and decrypts the input data with the secret key; storing machine identification information of the machine in association with software identification information of the software installed in the machine in an external management apparatus; creating a device-encryption key to encrypt data stored on a first storage device of the machine; storing a device-encryption-key BLOB obtained by encrypting the device-encryption key with the public key on a second storage device of the machine; and storing the device-encryption key in association with the machine identification information in the external management apparatus.