1. A software update system for updating software, the software update system comprising:
an information processing apparatus for operating the software;
an authentic management apparatus, which is external to the information processing apparatus; and
a network connecting the information processing apparatus with the authentic management apparatus,
wherein the information processing apparatus comprises:
a plurality of install modules, each install module, of the plurality of install modules, (i) having a function of updating the software, (ii) being operable to verify whether or not at least another one of the install modules has been tampered with and (iii) being a program module; and
a transmission unit operable to transmit results of the verifications performed by the install modules to the authentic management apparatus, and
wherein the authentic management apparatus comprises:
a reception unit operable to receive the results of the verifications performed by the install modules;
a judgment unit operable to judge whether or not each of the install modules is authentic based on at least one of the verification results; and
an invalidation unit operable to transmit, in accordance with a first instruction output from the judgment unit, an invalidation instruction to invalidate any of the install modules that is judged to not be authentic, the invalidation instruction being transmitted to the information processing apparatus.
2. The software update system of claim 1, wherein
each of the install modules has a function of invalidating at least another one of the install modules,
the invalidation unit selects one install module from among the install modules that is to invalidate an install module, of the install modules, judged to not be authentic, and transmits a revocation instruction including identification information to the selected install module, the identification information being for identifying the install module judged to not be authentic, and
upon receiving the revocation instruction, the selected install module invalidates the install module identified by the identification information.
3. The software update system of claim 2, wherein
the information processing apparatus further comprises a protection control module having a function of protecting secret data,
each of the install modules verifies whether or not the protection control module has been tampered with,
upon receiving a correction file for updating the protection control module from the authentic management apparatus, the install modules each update the protection control module with the received correction file,
the authentic management apparatus further comprises a distribution unit operable to distribute, in accordance with a second instruction output from the judgment unit, the correction file for updating an unauthentic protection control module to the information processing apparatus,
the reception unit further receives results of the verifications of the protection control module performed by the install modules, and
the judgment unit further judges whether or not the protection control module is authentic based on the results of the verifications of the protection control module, and outputs the first instruction to the invalidation unit and the second instruction to the distribution unit, in accordance with a processing procedure determined based on a result of the judgment and a judgment criterion stored therein.
4. The software update system of claim 3, wherein, when the judgment unit judges that the protection control module is not authentic, the judgment unit determines the processing procedure, such that an update of the protection control module is performed in preference to a revocation of the identified install module.
5. The software update system of claim 3, wherein, when the judgment unit judges that the protection control module is authentic, the judgment unit determines the processing procedure such that a revocation of the identified install module is preferentially performed.
6. The software update system of claim 3,
wherein, when the judgment unit judges that the protection control module is not authentic and judges that all of the install modules are not authentic, the judgment unit generates a stop instruction to stop processing of the information processing apparatus instead of outputting the first instruction to the invalidation unit and the second instruction to the distribution unit, and
wherein, upon receiving the stop instruction from the authentic management apparatus, the information processing apparatus stops processing being performed.
7. The software update system of claim 3, wherein
the protection control module verifies whether or not each of the install modules has been tampered with,
the reception unit further receives results of the verifications of the install modules performed by the protection control module,
with respect to any of the install modules that is verified by the protection control module as having been tampered with, the judgment unit judges whether or not the any install module is authentic based on a result of a verification of the install module performed by at least another one of the install modules,
when the judgment unit judges that the any install module is not authentic, the judgment unit judges that the protection control module is authentic, and
when the judgment unit judges that the any install module is authentic, the judgment unit judges that the protection control module is not authentic.
8. The software update system of claim 3, wherein
the authentic management apparatus further comprises a module addition unit operable to, in accordance with a third instruction output from the judgment unit, transmit an additional install module to the information processing apparatus,
after outputting the third instruction to the invalidation unit, the judgment unit judges whether a number of the install modules is greater than a predetermined value, and
when the judging unit judges that the number is not greater than the predetermined value, the judgment unit instructs the module addition unit to transmit the additional install module.
9. The software update system of claim 8, wherein the judgment unit outputs the third instruction to the module addition unit and the second instruction the distribution unit, in accordance with a processing procedure determined based on the result of the judgment of whether or not the protection control module is authentic.
10. The software update system of claim 9, wherein, when the judging unit judges that the protection control module is not authentic, the judgment unit determines the processing procedure, such that the update of the protection control module is performed in preference to the transmission of the additional install module.
11. The software update system of claim 9, wherein, when the judgment unit judges that the protection control module is authentic, the judgment unit determines the processing procedure, such that the transmission of the additional install module is preferentially performed.
12. The software update system of claim 8, wherein
the information processing apparatus further comprises an application program that includes the secret data and has been encrypted,
the install modules are each virtually arranged so as to be positioned at an end point of a polygon,
each of the install modules stores therein, among a plurality of shared keys generated based on a predetermined key sharing scheme from a decryption key for decrypting the encrypted application program, a shared key allocated to the install module and two shared keys allocated to install modules positioned at end points adjacent to an end point of the install module, and
the protection control module acquires at least three shared keys from any of the install modules to recover the decryption key, and decrypts the encrypted application program using the recovered decryption key.
13. The software update system of claim 12, wherein, when two install modules adjacent to any one of the install modules are invalidated as a result of invalidation of the any one install module that is judged to not be authentic, the judgment unit instructs the module addition unit to transmit at least one additional install module for the two adjacent install modules.
14. The software update system of claim 13, wherein, when the judgment unit judges that the protection control module is not authentic, the judgment unit determines the processing procedure, such that the update of the protection control module is performed in preference to the transmission of the at least one additional install module.
15. The software update system of claim 13, wherein, when the judgment unit judges that the protection control module is authentic, the judgment unit determines the processing procedure, such that the transmission of the at least one additional install module is preferentially performed.
16. The software update system of claim 13,
wherein the protection control module further verifies whether or not the application program has been tampered with,
wherein each of the install modules has a function of, upon receiving an additional install module from the module addition unit, adding the received additional install module, and
wherein, upon receiving the additional install module, the install modules each add the received additional install module after the protection control module completes the verification of whether or not the application program has been tampered with.
17. The software update system of claim 13, wherein, when only one of two install modules adjacent to any one of the install modules is invalidated as a result of invalidation of the any one install module that is judged to not be authentic, the judgment unit does not instruct the module addition unit to transmit one additional install module for the one adjacent install module.
18. A management apparatus for communicating, via a network, with an information processing apparatus for operating software, the management apparatus comprising:
a reception unit operable to receive results of verifications performed by a plurality of install modules from the information processing apparatus, the install modules being included in the information processing apparatus, each install module, of the plurality of install modules, (i) having a function of updating the software, (ii) being operable to verify whether or not at least another one of the install modules has been tampered with and (iii) being a program module;
a judgment unit operable to judge whether or not each of the install modules is authentic based on at least one of the verification results; and
an invalidation unit operable to transmit, in accordance with an instruction output from the judgment unit, an invalidation instruction to invalidate any of the install modules that is judged to not be authentic, the invalidation instruction being transmitted to the information processing apparatus,
wherein the management apparatus is external to the information processing apparatus.
19. A non-transitory computer readable recording medium having a program recorded thereon, the program for performing a communication via a network between a management apparatus and an information processing apparatus for operating software, the computer program causing a computer to execute a method comprising:
a reception step of receiving, via the management apparatus, results of verifications performed by a plurality of install modules from the information processing apparatus, the install modules being included in the information processing apparatus, each install module, of the plurality of install modules, (i) having a function of updating the software, (ii) being operable to verify whether or not at least another one of the install modules has been tampered with and (iii) being a program module;
a judgment step of judging, via the management apparatus, whether or not each of the install modules is authentic based on at least one of the verification results; and
an invalidation step of transmitting, in accordance with an instruction output in the judgment step and via the management apparatus, an invalidation instruction to invalidate any of the install modules that is judged to not be authentic, the invalidation instruction being transmitted to the information processing apparatus,
wherein the management apparatus is external to the information processing apparatus.
20. An integrated circuit of a management apparatus for communicating, via a network, with an information processing apparatus for operating software, the integrated circuit comprising:
a reception unit operable to receive results of verifications performed by a plurality of install modules from the information processing apparatus, the install modules being included in the information processing apparatus, each install module, of the plurality of install modules, (i) having a function of updating the software, (ii) being operable to verify whether or not at least another one of the install modules has been tampered with and (iii) being a program module;
a judgment unit operable to judge whether or not each of the install modules is authentic based on at least one of the verification results; and
an invalidation unit operable to transmit, in accordance with an instruction output from the judgment unit, an invalidation instruction to invalidate any of the install modules that is judged to not be authentic, the invalidation instruction being transmitted to the information processing apparatus,
wherein the management apparatus is external to the information processing apparatus.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A speech processing apparatus located in a vehicle comprising:
a first microphone configured to input, from a sound space in the vehicle, a first mixture sound including desired speech uttered by an occupant in the vehicle and noise in the vehicle at a first ratio of the noise to the desired speech, and to output a first mixture signal;
a second microphone opened to said sound space in the vehicle and configured to be disposed at a focus position of an interface, said interface being one of a windshield and a rear window of the vehicle as part of a boundary of the sound space and having one of a quadratic surface shape and a pseudo surface shape as an aggregate of planes extending in tangential directions of a quadratic surface for collecting the noise in the vehicle at the focus position, the second microphone being configured to input a second mixture sound at the focus position including the desired speech uttered by the occupant in the vehicle and the noise in the vehicle reflected by the interface, at a second ratio of the reflected noise to the desired speech different from the first ratio, and to output a second mixture signal; and
a noise suppression circuit configured to suppress an estimated noise signal based on the first mixture signal and the second mixture signal, and to output a pseudo speech signal,
wherein said first microphone is disposed at a position farther from the interface than the focus position and nearer to the occupant uttering the desired speech than said second microphone, so that the second ratio is larger than the first ratio.
2. The speech processing apparatus according to claim 1, wherein said first microphone and said second microphone are provided as an integral speech input unit.
3. The speech processing apparatus according to claim 1, further comprising a sound insulator disposed in the vehicle and between said first microphone and said second microphone.
4. The speech processing apparatus according to claim 3, wherein said sound insulator is disposed at a position in the vehicle to prevent the desired speech and the noise from being directly input to said second microphone without being reflected by the interface.
5. The speech processing apparatus according to claim 1, further comprising an output unit that outputs, based on one of the pseudo speech signal, the estimated noise signal, and a parameter of said noise suppression circuit, information representing whether a position of said second microphone is a position to collect the noise in the vehicle.
6. The speech processing apparatus according to claim 1, wherein said noise suppression circuit comprises:
a first subtracter that subtracts the estimated noise signal estimated to be included in the first mixture signal from the first mixture signal;
a second subtracter that subtracts an estimated speech signal estimated to be included in the second mixture signal from the second mixture signal;
an estimated noise signal generator that generates the estimated noise signal from an output signal of said second subtracter; and
an estimated speech signal generator that generates the estimated speech signal from an output signal of said first subtracter, and
the pseudo speech signal is the output signal of said first subtracter.
7. An information processing system including a speech processing apparatus of claim 1, comprising:
a speech recognition apparatus that recognizes desired speech from the pseudo speech signal output from the speech processing apparatus; and
an information processing apparatus that processes information in accordance with the desired speech recognized by said speech recognition apparatus.
8. A control method of a speech processing apparatus located in a vehicle, comprising:
acquiring a first mixture signal converted from a first mixture sound including desired speech uttered by an occupant in the vehicle and noise in the vehicle, at a first ratio of the noise to the desired speech, in a first microphone that is disposed at a position farther from an interface than a focus position of the interface and near to a speaker giving the desired speech, said interface being one of a windshield and a rear window of the vehicle as a part of a boundary of a sound space in the vehicle and having one of a quadratic surface shape and a pseudo surface shape as an aggregate of planes extending in tangential directions of a quadratic surface for collection the noise in the vehicle at the focus position;
acquiring a second mixture signal converted from a second mixture sound including the desired speech uttered by the occupant in the vehicle and the noise in the vehicle collected at a focus position of said interface by said interface, at a second ratio of the noise to the desired speech larger than the first ratio, in a second microphone opened to said sound space and disposed at the focus position of said interface;
acquiring a pseudo speech signal and parameters from a noise suppression circuit that is configured to suppress an estimated noise signal based on the first mixture signal and the second mixture signal; and
notifying, based on the pseudo speech signal and the parameters, whether the position of the second microphone is the focus position of the interface in the vehicle.
9. A non-transitory computer-readable storage medium storing a control program of a speech processing apparatus located in a vehicle, the control program comprising:
acquiring a first mixture signal converted from a first mixture sound including desired speech uttered by an occupant in the vehicle and noise in the vehicle, at a first ratio of the noise to the desired speech, in a first microphone that is disposed at a position farther from an interface than a focus position of the interface and near to a speaker giving the desired speech, said interface being one of a windshield and a rear window of the vehicle as part of a boundary of a sound space in the vehicle and having one of a quadratic surface shape and a pseudo surface shape as an aggregate of planes extending in tangential directions of a quadratic surface for collecting the noise in the vehicle at the focus position;
acquiring a second mixture signal converted from a second mixture sound including the desired speech uttered by the occupant in the vehicle and the noise in the vehicle collected at a focus position of said interface by said interface, at a second ratio of the noise to the desired speech larger than the first ratio in a second microphone opened to said sound space and disposed at the focus position of said interface;
acquiring a pseudo speech signal and parameters from a noise suppression circuit that is configured to suppress an estimated noise signal based on the first mixture signal and the second mixture signal; and
notifying, based on the pseudo speech signal and the parameters, whether the position of the second microphone is the focus position of the interface in the vehicle.