Information processing apparatus, information processing apparatus control method and storage medium

An information processing apparatus is constructed to include a storage unit, and a processing part which registers information of the information processing apparatus by transmitting to a first database of a registration center when a password input error is detected and stores transmission log information related to a transmission to the registration center into said storage unit.

BEST MODE OF CARRYING OUT THE INVENTION First, a description will be given of the operating principle of the present invention, by referring to FIGS. 1 and 2 . FIG. 1 is a diagram for explaining the operating principle of an information processing apparatus control method according to the present invention for a case where an access is generated by an unauthorized user other than a legitimate user. FIG. 1 ( a ) shows a process for a case where an unauthorized user 1 other than a legitimate user 10 uses an information processing apparatus 2 . When the unauthorized user 1 makes a password input error with respect to the information processing apparatus 2 in a step S 1 a predetermined number of times, for example, a step S 2 makes an access to a database DB 1 of a registration center 3 , and thus, model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered within the database DB 1 . In addition, a step S 3 stores a transmission log information related to the transmission to the registration center 3 (in this case, transmission log information related to the transmission to the database DB 1 ) within the information processing apparatus 2 . Further, a step S 4 makes a system lock with respect to the information processing apparatus 2 . When the system lock is made, keys of the information processing apparatus 2 are locked to make it impossible to operate the information processing apparatus 2 and to disable communication with the registration center 3 . As a result, the unauthorized user 1 can no longer use the information processing apparatus 2 . FIG. 1 ( b ) shows a process for a case where the legitimate user 10 thereafter realizes that his information processing apparatus 2 is stolen, and makes an access from a communication apparatus 11 other than the information processing apparatus 2 . When the legitimate user 10 makes an access to the registration center 3 from the communication apparatus 11 in a step S 11 , a data search is made to determine whether or not the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered within the database DB 1 of the registration center 3 . If the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered within the database DB 1 , a step S 12 notifies to the communication apparatus 11 a message indicating that the model information and the like related to the information processing apparatus 2 is registered, that is, a message indicating that an access has been made to the registration center 3 from the information processing apparatus 2 . In addition, a step S 13 registers into a database DB 2 the model information and the like related to the information processing apparatus 2 in which the password input error is generated and is registered within the database DB 1 . As a result, the legitimate user 10 registers the theft of the information processing apparatus 2 with respect to the registration center 3 . FIG. 1 ( c ) shows a process for a case where the unauthorized user 1 again uses the information processing apparatus 2 after the theft of the information processing apparatus is registered as described above. When the unauthorized user 1 attempts to again use the information processing apparatus 2 in a step S 21 , a step S 22 confirms whether or not the transmission log information related to the transmission to the registration center 3 (in this case, transmission log information related to the transmission to the database DB 1 ) is stored within the information processing apparatus 2 . If the transmission log information is stored within the information processing apparatus 2 , a step S 23 makes an access to the database DB 2 of the registration center 3 , and carries out a data search to determine whether or not the theft of the information processing apparatus 2 is registered within the database DB 2 of the registration center 3 . If the theft of the information processing apparatus 2 is registered within the database DB 2 , a step S 24 notifies to the information processing apparatus 2 a message indicating that the theft of the information processing apparatus 2 is registered, that is, a warning message with respect to the unauthorized user 1 who is attempting to use the information processing apparatus 2 without authorization. A step S 25 makes a system lock with respect to the information processing apparatus 2 , and a step S 26 displays a warning with respect to the unauthorized user 1 . As a result, the unauthorized user 1 can no longer use the information processing apparatus 2 , and the warning with respect to the unauthorized use of the information processing apparatus 2 is notified by a display with respect to the unauthorized user 1 . FIG. 2 is a diagram for explaining the operating principle of the information processing apparatus control method according to the present invention for a case where the information processing apparatus is used by the unauthorized user other than the legitimate user in a state where a theft registration of the information processing apparatus is not made. FIG. 2 ( a ) shows a process for a case where the unauthorized user 1 other than the legitimate user 10 uses the information processing apparatus 2 . When the unauthorized user 1 makes a password input error with respect to the information processing apparatus 2 in a step S 1 a predetermined number of times, for example, a step S 2 makes an access to the database DB 1 of the registration center 3 , and thus, the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered within the database DB 1 . In addition, a step S 3 stores a transmission log information related to the transmission to the registration center 3 (in this case, transmission log information related to the transmission to the database DB 1 ) within the information processing apparatus 2 . Further, a step S 4 makes a system lock with respect to the information processing apparatus 2 . As a result, the unauthorized user 1 can no longer use the information processing apparatus 2 . FIG. 2 ( b ) shows a process for a case where the unauthorized user 1 uses the information processing apparatus 2 again in a state where the theft of the information processing apparatus 2 is not registered in the registration center 3 . When the unauthorized user 1 attempts to use the information processing apparatus 2 again in a step S 31 , a step S 32 confirms whether or not the transmission log information related to the transmission to the registration center 3 (in this case, transmission log information related to the transmission to the database DB 1 ) is stored within the information processing apparatus 2 . If the transmission log information is stored within the information processing apparatus 2 , a step S 33 makes an access to the database DB 2 of the registration center 3 , and carries out a data search to determine whether or not the theft of the information processing apparatus 2 is registered within the database DB 2 of the registration center 3 . If the theft of the information processing apparatus 2 is not registered within the database DB 2 , a step S 34 notifies to the information processing apparatus 2 a message indicating that the theft of the information processing apparatus 2 is not registered. A step S 35 makes an access to the database DB 1 of the registration center 3 , and carries out a data search to determine whether or not the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered within the database DB 1 of the registration center 3 . If the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered within the database DB 1 , a step S 36 notifies to the information processing apparatus 2 a message indicating that the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered, and a step S 37 makes a system lock with respect to the information processing apparatus 2 . As a result, the unauthorized user 1 can no longer use the information processing apparatus 2 . A process for a case where the legitimate user 10 makes the password input error with respect to the information processing apparatus 2 a predetermined number of times, for example, is similar to that shown in FIG. 2 ( b ). Therefore, when the theft registration described above in conjunction with FIG. 1 is made and a password input error is thereafter generated at the information processing apparatus, it is possible to judge whether the password input error is caused by a password input error made by the legitimate user or caused by an unauthorized access made by the unauthorized user, thereby making possible to properly use the security. In addition, even when the theft registration is not yet made as described above in conjunction with FIG. 2 , the system lock is positively made, as long as the transmission log to the registration center is stored within the information processing apparatus or, the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered within the registration center. For this reason, the security of the information processing apparatus is improved. Furthermore, because the data within the information processing apparatus are not erased, the legitimate user can continue to use the information processing apparatus as before after the stolen information processing apparatus is returned to the legitimate user, by deleting from the registration center the theft registration or the registered model information and the like related to the information processing apparatus in which the password input error is generated, so as to cancel the security imposed with respect to the information processing apparatus. The information processing apparatus 2 shown in FIGS. 1 and 2 is a portable apparatus such as a lap-top personal computer, but the apparatus is of course not limited to the portable type. In addition, the registration center 3 may be formed by a general purpose computer or a personal computer, for example. The communication between the information processing apparatus 2 and the registration center 3 may be made by cable or by wireless communication. Furthermore, because the security uses communication, it is desirable that the information processing apparatus 2 is always in a communicatable state. For this reason, it is desirable that the system is designed not to operate when it is judged that the information processing apparatus 2 cannot make a communication. Next, a description will be given of an embodiment of the information processing apparatus control method according to the present invention, by referring to FIGS. 3 through 9 . This embodiment of the information processing apparatus control method employs first through third embodiments of an information processing apparatus according to the present invention. FIG. 3 is a system block diagram showing a structure of a system which may be applied with this embodiment of the information processing apparatus control method. In FIG. 3 , the information processing apparatus 2 is a portable personal computer or the like including a CPU 21 , a system controller 22 , a display 23 , an input device 24 such as a keyboard, a communication unit 25 , a storage unit 26 which stores control programs including an operating system (OS) 26 a, and a storage unit 27 including a nonvolatile RAM or the like. The system controller 22 , the display 23 , the input device 24 such as the keyboard, the communication unit 25 , and the storage units 26 and 27 are connected via a bus 29 . The information processing apparatus 2 forms the first embodiment of the information processing apparatus. The CPU 21 controls the entire operation of the information processing apparatus 2 . The system controller 22 controls various parts of the information processing apparatus 2 which are connected via the bus 29 , under the control of the CPU 21 . The display 23 is provided to display various kinds of information, and the input device 24 is provided to input various information including a password and to input instructions to the information processing apparatus 2 . The communication unit 25 is provided to communicate with another apparatus which is connected to the system via a wireless line. The communication unit 25 may include in addition to a modem or the like, a wireless communication unit which is internally provided or a wireless communication unit which is externally provided with respect to the communication unit 25 . For example, the storage unit 26 is made of a ROM or the like which stores the control programs such as BIOS.ROM to be executed by the CPU 21 , and this storage unit 26 stores data and the like and a program according to the present invention to be executed by the CPU 21 . The program according to the present invention is realized as a portion of the control program. The storage unit 27 is made of a nonvolatile RAM (CMOS) or the like which can store data so as not to be erased even when the power supply is turned OFF, and this storage unit 27 stores information such as transmission log information related to a transmission to the registration center 3 . When the present invention is realized as a portion of the BIOS, the present invention carried out by a security process which is often called as a “Power On Password” and urges a password input after the power supply is turned ON. In other words, when the power supply of the information processing apparatus 2 is turned ON, the control program is first read from the BIOS.ROM, and a message urging the password input is displayed on the screen. A process which is carried out thereafter will be described later in the specification. When the input password is correct, the operating system (OS) stored in a hard disk unit which is not shown is read and the system is started. The communication apparatus 11 is not limited to a particular type, as long as the communication apparatus 11 has a structure which enables communication with the registration center 3 and theft registration. In this embodiment, it is assumed for the sake of convenience that the communication apparatus 11 is formed by a personal computer such as the information processing apparatus 2 . The communication apparatus 11 forms the second embodiment of the information processing apparatus. On the other hand, the registration center 3 is formed by an information processing apparatus such as a general purpose computer and a personal computer. The information processing apparatus forming the registration center 3 may have a structure similar to that of the information processing apparatus 2 , for example, and thus, only the databases DB 1 and DB 2 are shown in FIG. 3 for the sake of convenience. The registration center 3 forms the third embodiment of the information processing apparatus. In this embodiment, it is assumed that the communication between the communication unit 25 of the information processing apparatus 2 and a communication unit (not shown) of the registration center 3 , and the communication between the communication apparatus 11 and the communication unit of the registration center 3 are respectively made via wireless lines by a known method. Of course, the basic structures themselves of the information processing apparatus 2 , the registration center 3 and the communication apparatus 11 are not limited to those described above, and it is possible to employ information processing apparatuses having various known basic structures. This embodiment was described for a case where the process of the present invention is applied to the control program which is executed before the OS is started. By carrying out the present invention before the start of the OS, it is possible to obtain a high-level security. In addition, instead of realizing the present invention by the control program as in the case of this embodiment, it is also possible to realize the present invention by the OS. For example, in an OS which is known as MS-Windows, it is possible to make a setting which requires a password input when starting the OS. In other words, the following procedure is carried out when the present invention is applied to the OS. When the power supply of the information processing apparatus is turned ON, the control program is read from the BIOS.ROM, and various settings of the apparatus are made. After the settings, the OS is read from the hard disk unit and started. The started OS displays a screen which urges the password input by an initial process thereof. Measures are taken so that the process of the present invention is carried out when it is detected that the user has made an erroneous password input a plurality of times with respect to the screen display. The present invention is not limited to the application when the power supply is turned ON, the OS is started or the like, but is also applicable to any time the password input is urged. FIG. 4 is a flow chart for explaining the operation of the first embodiment of the information processing apparatus according to the present invention. More particularly, FIG. 4 is a flow chart for explaining the operation of the CPU 21 of the information processing apparatus 2 by the program according to the present invention. In FIG. 4, a step S 41 decides whether or not the information processing apparatus 2 is in a communicatable state. A step S 42 decides whether or not a correct password is input from the input device 24 if the decision result in the step S 41 is YES. If the decision result in the step S 42 is YES, a step S 43 decides whether or not the transmission log information related to the transmission to the registration center 3 is stored in the storage unit 27 . If the decision result in the step S 43 is YES, a step S 44 makes an access to the database DB 2 of the registration center 3 and searches within the database DB 2 . A step S 45 decides whether or not the theft registration related to the information processing apparatus 2 is registered within the database DB 2 , that is, whether or not the model information and the like related to the information processing apparatus 2 in which the erroneous password input is generated is registered in the database DB 2 . If the decision result in the step S 45 is YES, a step S 46 displays a warning on the display 23 , makes a system lock, and the process ends. Instead of displaying the warning, it is of course possible to make the warning by warning sound or the like. On the other hand, if the password input error is made a predetermined number of times, for example, and the decision result in the step S 42 is NO, a step S 47 decides whether or not the transmission log information related to the transmission to the registration center 3 is stored in the storage unit 27 . The process advances to the step S 44 if the decision result in the step S 47 is YES. In addition, if the decision result in the step S 47 is NO, a step S 48 makes an access to the database DB 1 of the registration center 3 , and the registration center registers the model information and the like related to the information processing apparatus 2 in which the password input error is generated into the database DB 1 , while at the information processing apparatus 2 the transmission log information related to the transmission to the registration center 3 (in this case, the transmission log information related to the transmission to the database DB 1 ) is stored within the storage unit 27 , for example. After the step S 48 , a step S 51 makes a system lock and the process ends. If the decision result in the step S 43 is NO, a step S 52 enables access to the information processing apparatus 2 , and the process ends. In this case, the information processing apparatus 2 can be used in a normal manner. In addition, if the decision result in the step S 45 is NO, a step S 49 makes an access to the database DB 1 of the registration center 3 and searches within the database DB 1 . A step S 50 decides whether or not the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered in the database DB 1 . If the decision result in the step S 50 is YES, the step S 51 makes a system lock, and the process ends. On the other hand, if the decision result in the step S 50 is NO, the step S 52 enables access to the information processing apparatus 2 , and the process ends. FIG. 5 is a flow chart for explaining the operation of the second embodiment of the information processing apparatus according to the present invention. More particularly, FIG. 5 is a flow chart for explaining the operation of the CPU of the communication apparatus 11 by the program according to the present invention. In FIG. 5, a step S 61 decides whether or not an ID of the registration center 3 is set in the information processing apparatus 2 . If the decision result in the step S 61 is NO, a step S 62 sets the ID of the registration center 3 in the information processing apparatus 2 , and the process ends. If the decision result in the step S 61 is YES, a step S 63 decides whether or not there is presently a possibility of an unauthorized use of the information processing apparatus 2 by the unauthorized user 1 . If the decision result in the step S 63 is YES, a step S 64 makes an access to the database DB 1 of the registration center 3 and searches within the database DB 1 . A step S 65 decides whether or not the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered in the database DB 1 . If the decision result in the step S 65 is YES, a step S 66 registers the in the database DB 2 the model information and the like related to the information processing apparatus 2 in which the password input error is generated and is registered in the database DB 1 , and the process ends. Hence, the theft registration of the information processing apparatus 2 is made with respect to the registration center 3 by the legitimate user 10 . The process ends if the decision result in the step S 65 is NO. On the other hand, if the decision result in the step S 63 is NO, a step S 67 decides whether or not the password input error or the theft has been registered in the past. The process ends if the decision result in the step S 67 is NO. If the decision result in the step S 67 is YES, a step S 68 makes accesses to the databases DB 1 and DB 2 of the registration center 3 . In addition, a step S 69 deletes the registered data related to the theft of the information processing apparatus 2 from the databases DB 1 and DB 2 , so as to delete the theft registration. Thereafter, a step S 70 makes an access to the information processing apparatus 2 , a step S 71 deletes the transmission log information related to the transmission to the registration center 3 and stored within the information processing apparatus 2 , and the process ends. FIGS. 6 and 7 are flow charts for explaining the operation of the third embodiment of the information processing apparatus according to the present invention. More particularly, FIGS. 6 and 7 are flow charts for explaining the operation of the CPU of the registration center 3 by the program according to the present invention. In FIG. 6, a step S 81 decides whether or not a registration request is received from the legitimate user 10 . If the decision result in the step S 81 is YES, a step S 82 issues an ID of the registration center 3 . In addition, a step S 83 registers a user name of the legitimate user 10 , a model information such as a serial number (PC-Serial) of the information processing apparatus 2 , information such as a password (DB-Password) of the database, and the process ends. If the decision result in the step S 81 is NO, a step S 84 decides whether or not the registration center 3 is being accessed from the information processing apparatus 2 . If the decision result in the step S 84 is YES, a step S 85 decides whether or not the ID from the information processing apparatus 2 is the ID of the registration center 3 . If the decision result in the step S 84 is NO, the process advances to a step S 91 shown in FIG. 7 which will be described later. The process ends if the decision result in the step S 85 is NO. If the decision result in the step S 85 is YES, a step S 86 decides whether or not the access is to the database DB 1 . If the decision result in the step S 86 is NO, the information processing apparatus 2 makes the data search with respect to the database DB 2 as described above, and thus, the process ends. On the other hand, if the decision result in the step S 86 is YES, a step S 87 decides whether or not there is stored within the database DB 1 a registration request to register the model information and the like related to the information processing apparatus 2 in which the password input error is generated. If the decision result in the step S 87 is NO, the process ends since the information processing apparatus 2 will make the data search with respect to the database DB 1 as described above. If the decision result in the step S 87 is YES, a step S 88 decides whether or not the ID received from the information processing apparatus 2 is registered in the registration center 3 . The process ends if the decision result in the step S 88 is NO. If the decision result in the step S 88 is YES, the model information and the like related to the information processing apparatus 2 in which the password input error is generated is registered in the database BD 1 , and the process ends. In FIG. 7 , the step S 91 decides whether or not the legitimate user 10 is making an access to the database DB 1 or DB 2 , and the process ends if the decision result in the step S 91 is NO. If the decision result in the step S 91 is YES, a step S 92 decides whether or not the access is made to the database DB 1 . If the decision result in the step S 92 is YES, a step S 93 decides whether or not a user name of the legitimate user 10 , a model information such as a serial number (PC-Serial) of the information processing apparatus 2 , information such as a password (DB-Password) of the database are registered, and the process ends if the decision result in the step S 93 is NO. If the decision result in the step S 93 is YES, a step S 94 decides whether or not the ID from the information processing apparatus 2 is registered in the database DB 1 , and the process ends if the decision result in the step S 94 is NO. If the decision result in the step S 94 is YES, a step S 95 decides whether or not there is a registration request to register theft of the information processing apparatus 2 with respect to the database DB 1 . If the decision result in the step S 95 is YES, a step S 96 registers the theft data such as the ID, the date of theft registration and the time into the database DB 2 , and the process ends after making the theft registration. If the decision result in the step S 92 is NO, a step S 97 decides whether or not a user name of the legitimate user 10 , a model information such as a serial number (PC-Serial) of the information processing apparatus 2 , information such as a password (DB-Password) of the database are registered, and the process ends if the decision result in the step S 97 is NO. If the decision result in the step S 97 is YES, a step S 98 decides whether or not the ID from the information processing apparatus 2 is registered in the database DB 2 , and the process ends if the decision result in the step S 98 is NO. If the decision result in the step S 98 is YES, a step S 99 decides whether or not there is a delete request with respect to the database DB 2 to delete the theft registration related to the information processing apparatus 2 . If the decision result in the step S 99 is YES, a step S 100 deletes the theft data from the database DB 2 , and the process ends after the theft registration is deleted. The process ends if the decision result in the step S 99 is NO. Moreover, if the decision result in the step S 95 is NO, a step S 101 decides whether or not there is a delete request with respect to the database DB 1 to delete the theft registration related to the information processing apparatus 2 . If the decision result in the step S 101 is YES, a step S 102 decides whether or not the data identical to that in the database DB 1 exist in the database DB 2 . If the decision result in the step S 102 is NO, a step S 103 deletes the theft data from the database DB 1 , and the process ends after deleting the theft registration. If the decision result in the step S 101 is NO or, if the decision result in the step S 102 is YES, the process ends. FIG. 8 is a diagram showing a data structure of management used in the embodiments described above. The management data shown in FIG. 8 are the theft data such as the ID, the date of theft registration and the time which are registered in the database DB 2 by the step S 96 shown in FIG. 7 , for example. FIG. 9 is a diagram for explaining an input screen. A confirmation block 81 , an ID block 82 , and a data block 83 are displayed as shown in FIG. 9 on the screen of the display of the communication apparatus 11 . A field 81 a for inputting the user name of the legitimate user 10 , a field 81 b for inputting the model information such as the serial number (PC-Serial) of the information processing apparatus 2 , and a field 81 c for inputting the password (DB-Password) of the database are displayed within the confirmation block 81 , and the information can be input to these fields 81 a, 81 b and 81 c from the input device of the communication apparatus 11 . A field 82 a for inputting the ID, and buttons 82 b, 82 c and 82 d respectively for instructing “registration”, “DB 1 search” and DB 2 search” are displayed within the ID block 82 , and the information can be input to the field 82 a from the input device of the communication apparatus 11 . The “registration”, “DB 1 search” and DB 2 search” requests to the registration center 3 an be made by clicking the corresponding buttons 82 b, 82 c and 82 d by a pointing device such as a mouse of the communication apparatus 11 . A field 83 a for registering and deleting the theft data such as the date of the theft registration and the time with respect to the database DB 1 , a field 83 b for registering and deleting the theft data such as the date of the theft registration and the time with respect to the database DB 2 , a button 83 c for instructing “theft registration”, a button 83 d for instructing “deletion” of the theft data displayed within the field 83 a, and a button 83 e for instructing “deletion” of the theft data displayed within the field 83 b are displayed within the data block 83 . Next, a description will be given of first through third embodiments of a computer-readable storage medium according to the present invention. For example, the first through third embodiments of the storage medium are formed by a storage medium used by the storage unit 26 or 27 shown in FIG. 3, a storage unit within an information processing apparatus other than the information processing apparatus 2 shown in FIG. 3 or, a recording medium which stores a program in a manner such that the program can be downloaded to the storage unit 26 or 27 of the information processing apparatus 2 . The recording medium which forms the storage medium is not limited to a specific recording medium or specific storage unit, and may be formed by disk-shaped recording media such as a magnetic disk an optical disk, a magneto-optical disk, a floppy disk and a CD-ROM, card-shaped recording media such as an IC card, and semiconductor memory devices such as a ROM. Further, a portable recording medium may form the storage medium. The first embodiment of the storage medium stores a program for causing a computer (CPU or the like) such as the information processing apparatus 2 to carry out the process shown in FIG. 4 . The second embodiment of the storage medium stores a program for causing a computer (CPU or the like) such as the communication apparatus 11 to carry out the process shown in FIG. 5 . The third embodiment of the storage medium stores a program for causing a computer (CPU or the like) such as the registration center 3 to carry out the process shown in FIGS. 6 and 7 . Further, the present invention is not limited to these embodiments, but various variations and modifications may be made without departing from the scope of the present invention.