US 12,333,003 B2
Information processing device, information processing system, and non-transitory computer readable medium
Ryuiti Koike, Kawasaki Kanagawa (JP); Yurie Shinke, Kawasaki Kanagawa (JP); Shinya Takumi, Tokyo (JP); and Jun Kanai, Tokyo (JP)
Assigned to Kabushiki Kaisha Toshiba, Tokyo (JP)
Filed by KABUSHIKI KAISHA TOSHIBA, Tokyo (JP)
Filed on Sep. 2, 2022, as Appl. No. 17/929,619.
Claims priority of application No. 2022-011259 (JP), filed on Jan. 27, 2022.
Prior Publication US 2023/0237151 A1, Jul. 27, 2023
Int. Cl. G06F 21/55 (2013.01)
CPC G06F 21/554 (2013.01) [G06F 2221/033 (2013.01)] 16 Claims
OG exemplary drawing
 
1. An information processing device, comprising:
a metadata generator implemented by a computer configured to generate, based on an update request of firmware from a device, first metadata including identification information of the firmware, the first metadata being separated from the firmware;
a time manager implemented by the computer configured to manage time;
a validity period determiner implemented by the computer configured to determine a first validity period of the first metadata based on time acquired from the time manager;
a counter configured to count up a value for each unit of time elapsed based on a clock oscillator;
an acquirer implemented by the computer configured to acquire a first counter value being a value of the counter with respect to the first metadata;
a storage configured to store one or more entries each including second metadata, a second validity period, and a second counter value, wherein the second metadata includes identification information of firmware, the second validity period is a validity period of the second metadata, and the second counter value is a value of the counter having been acquired with respect to the second metadata, the second metadata being separated from the firmware; and
a determiner implemented by the computer configured to:
(a) detect, from the one or more entries, an entry including the second metadata including same identification information as the identification information included in the first metadata,
(b) acquire the second validity period and the second counter value from the detected entry, and
(c) detect falsification of the first validity period based on the first counter value and the first validity period and the acquired second counter value and the acquired second validity period.