Software updating apparatus, software updating system, invalidation method, and invalidation program

摘要

To aim provide a software update apparatus including an install module group composed of a plurality of install modules. Each of the install modules has a function of receiving, from an external server, a replacement protection control module to be used for updating a protection control module having a function of verifying whether a predetermined application has been tampered with. Each of the install modules simultaneously running is verified by at least another one of the install modules simultaneously running, as to whether the install module has a possibility of performing malicious operations. If any of the install modules is verified as having the possibility of performing the malicious operations, any another one of the install modules that is verified as not having the possibility revokes the any install module verified as having the possibility.

主权项

1. A software update system comprising a software update apparatus and a server computer that are connected with each other,
the software update apparatus comprising:
a processor; anda memory storing (i) computer executable instructions that are executable by the processor, and (ii) software including a predetermined application, a protection control module, and a plurality of install modules, the server computer executing:
storing a replacement protection control module; andtransmitting the replacement protection control module to the software update apparatus, wherein the computer executable instructions, when executed by the processor, cause the processor to perform a series of steps including:
executing the protection control module to verify whether the predetermined application has been tampered with;executing any one of the plurality of install modules to receive the replacement protection control module from the server, and updating the protection control module with the received replacement protection control module; andverifying whether each of a plurality of simultaneously running install modules, from among the plurality of install modules, has a possibility of performing malicious operations, and informing the server of the result of the verifying, wherein the server computer, if the result of the verifying received from the software update apparatus indicates that a first one of the simultaneously running install modules has the possibility of performing the malicious operations, sends a request for revocation to a second one of the simultaneously running install modules, and wherein the computer executable instructions, when executed by the processor, cause the processor to, in response to the request for revocation, revoke the first one of the simultaneously running install modules that has the possibility of performing malicious operations, by using the second one of the simultaneously running install modules.