JP2011216000A - Information processing apparatus and image forming apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To secure the security of device management data stored in an image forming apparatus when writing the device management data into a USB (Universal Serial Bus) memory.SOLUTION: An image forming apparatus 1 includes: an authentication part 605 which authenticates a service man; a first control part 607 which, by the thing that the service man is authenticated by the authentication part 605, executes a service man maintenance mode allowing the service man to perform maintenance operation of the image forming apparatus 1; a first input accepting part which, when the service man maintenance mode is executed by the first control part 607, accepts input of an instruction to write device management data stored in a first storage part 603 into a USB memory 501; and a second control part 609 which executes a write instruction in response to input of the write instruction from the first input accepting part.

Description

  The present invention relates to an information processing apparatus such as an image forming apparatus.

  Conventionally, a portable external storage device such as a USB (Universal Serial Bus) memory is used for maintenance of an image forming apparatus (see, for example, Patent Document 1). A service person who performs maintenance of the image forming apparatus performs an operation of writing data recorded in the image forming apparatus such as toner consumption and occurrence of a paper jam to the USB memory, and also the image forming apparatus stored in the USB memory. An operation of writing version upgrade data of the program into the image forming apparatus is performed.

JP 2007-76993 A (paragraphs 0029 to 0031, 0040 to 0043, FIG. 1)

  For example, device management data such as data that records the status of an anomaly that has occurred in an image forming apparatus such as a paper jam is often unique to each manufacturer, and it is necessary to increase confidentiality. . Therefore, it is necessary to ensure sufficient security for writing the device management data in the portable external storage device.

  An object of the present invention is to provide an information processing apparatus and an image forming apparatus capable of ensuring the security of the device management data when the device management data stored in the information processing device is written in the portable external storage device. .

  An information processing apparatus according to one aspect of the present invention that achieves the above object is an information processing apparatus that can be connected to a portable external storage device, and includes abnormal data generated in the information processing apparatus, data relating to an operation state, and the like. A collection unit that collects device management data including: a first storage unit that stores device management data collected by the collection unit; an authentication unit that authenticates a service person based on predetermined authentication data; The first control unit that executes a maintenance mode for a serviceman that allows the serviceman to perform an operation of maintaining the information processing apparatus by the authentication unit being authenticated by the authentication unit, and the first control unit The device management data stored in the first storage unit is connected to the information processing apparatus when the maintenance mode for the service person is set. A first input receiving unit that receives an input of a command to write to the portable external storage device, and a second control unit that executes the writing command when the writing command is input by the first input receiving unit And comprising.

  According to the present invention, the device management data can be written to the portable external storage device in the maintenance mode for service personnel. Since the operation in the maintenance mode for the serviceman requires the authentication of the serviceman, the security of the device management data can be ensured when the device management data is written in the portable external storage device.

  In the above configuration, the display unit, the second input receiving unit that receives the ID input, and the second operation data that stores the data of the plurality of operation screens in the maintenance mode for the serviceman to which each predetermined ID is assigned. When the maintenance mode for the serviceman is set by the storage unit and the first control unit, the operation screen data corresponding to the ID input to the second input receiving unit is received from the second storage unit. And a third control unit that controls the display to be displayed on the display unit, and when the writing command is input by the first input receiving unit, the second control unit displays the display Control to write the device management data related to functions that can be maintained on the operation screen displayed on the unit to the portable external storage device connected to the information processing device It can be.

  According to this configuration, only device management data related to functions that can be maintained on the operation screen displayed on the display unit is written to the portable external storage device, and abnormal data (device management data) generated in the information processing device is collectively displayed. Since data cannot be written to the portable external storage device, the security of the device management data can be further increased when device management data is written to the portable external storage device.

  In the above configuration, the second control unit has predetermined device management data stored in the first storage unit when the write command is input by the first input receiving unit. It is possible to control to write into the portable external storage device by performing an encryption process that can be opened with a decryption key.

  According to this configuration, since it is necessary to input a password (can be opened with a decryption key) in order to display the device management data stored in the portable external storage device on the personal computer, it is stored in the portable external storage device. The security of device management data can be secured.

  An image forming apparatus according to another aspect of the present invention includes the information processing apparatus.

  In the present invention, the information processing apparatus is applied to an image forming apparatus.

  According to the present invention, when the device management data stored in the information processing apparatus is written in the portable external storage device, the security of the device management data can be ensured.

1 is a diagram illustrating an outline of an internal structure of an image forming apparatus according to an embodiment of the present invention. FIG. 2 is a block diagram illustrating an electrical configuration of the image forming apparatus. It is a flowchart explaining the process which writes the apparatus management data memorize | stored in the memory | storage part to USB memory. It is a figure which shows the initial screen of the copy mode currently displayed on the display part of the said image forming apparatus. It is a figure which shows the reception screen which receives the password input for authenticating a service person. It is a figure which shows the writing screen for performing the process which writes apparatus management data in a USB memory in the maintenance mode for service personnel.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram showing an outline of the internal structure of an image forming apparatus 1 according to an embodiment of the present invention. The image forming apparatus 1 is an example of an information processing apparatus. The image forming apparatus 1 can be applied to, for example, a digital multifunction machine having functions of a copy, a printer, a scanner, and a facsimile. The image forming apparatus 1 includes an apparatus main body 100, a document reading unit 200 disposed on the apparatus main body 100, a document feeding unit 300 disposed on the document reading unit 200, and an operation disposed on the upper front surface of the apparatus main body 100. Part 400 is provided.

  The document feeder 300 functions as an automatic document feeder, and can continuously send a plurality of documents placed on the document placement unit 301 to the document reading unit 200.

  The document reading unit 200 includes a carriage 201 equipped with a CCD (Charge Coupled Device) sensor and an exposure lamp, a document table 203 made of a transparent member such as glass, and a document reading slit 205. When reading a document placed on the document table 203, the document is read by the CCD sensor while moving the carriage 201 in the longitudinal direction of the document table 203. On the other hand, when reading a document fed from the document feeding unit 300, the carriage 201 is moved to a position facing the document reading slit 205, and the document fed from the document feeding unit 300 is scanned. Reading is performed by the CCD sensor through the reading slit 205. The CCD sensor outputs the read original as image data.

  The apparatus main body 100 includes a sheet storage unit 101, an image forming unit 103, and a fixing unit 105. The sheet storage unit 101 is disposed at the lowermost part of the apparatus main body 100 and includes a sheet tray 107 that can store a bundle of sheets. In the bundle of sheets stored in the sheet tray 107, the uppermost sheet is fed out toward the sheet conveyance path 111 by driving the pickup roller 109. The sheet is conveyed to the image forming unit 103 through the sheet conveyance path 111.

  The image forming unit 103 forms a toner image on the conveyed paper. The image forming unit 103 includes a photosensitive drum 113, an exposure unit 115, a developing unit 117, and a transfer unit 119. The exposure unit 115 generates light corresponding to image data (image data output from the document reading unit 200, image data transmitted from a personal computer, image data received by facsimile, etc.), and is uniformly charged photosensitive drum. The peripheral surface 113 is irradiated. As a result, an electrostatic latent image corresponding to the image data is formed on the peripheral surface of the photosensitive drum 113. In this state, a toner image corresponding to image data is formed on the peripheral surface by supplying toner from the developing unit 117 to the peripheral surface of the photosensitive drum 113. This toner image is transferred by the transfer unit 119 to the sheet conveyed from the sheet storage unit 101 described above.

  The sheet on which the toner image is transferred is sent to the fixing unit 105. In the fixing unit 105, heat and pressure are applied to the toner image and the paper to fix the toner image on the paper. The paper is discharged to the stack tray 121 or the paper discharge tray 123.

  The operation unit 400 includes an operation key unit 401 and a display unit 403. The display unit 403 has a touch panel function, and displays a screen including soft keys. The user operates the soft keys while viewing the screen to make settings necessary for executing functions such as copying.

  The operation key unit 401 is provided with operation keys including hard keys. Specifically, a start key 405, a numeric key 407, a stop key 409, a reset key 411, a function switching key 413 for switching between copy, printer, scanner, and facsimile are provided.

  A start key 405 is a key for starting operations such as copying and facsimile transmission. A numeric keypad 407 is a key for inputting numbers such as the number of copies and a facsimile number. A stop key 409 is a key for stopping a copying operation or the like halfway. A reset key 411 is a key for canceling the set contents.

  The function switching key 413 includes a copy key, a transmission key, and the like, and is a key for switching between a copy function and a transmission function. When the copy key is operated, an initial copy screen is displayed on the display unit 403. When the transmission key is operated, an initial screen for facsimile transmission and mail transmission is displayed on the display unit 403.

  FIG. 2 is a block diagram showing an electrical configuration of the image forming apparatus 1 shown in FIG. The image forming apparatus 1 has a configuration in which an apparatus main body 100, a document reading unit 200, a document feeding unit 300, an operation unit 400, a USB connector 500, a control unit 600, and a communication unit 700 are connected to each other via a bus. Since the apparatus main body 100, the document reading unit 200, and the document feeding unit 300 have already been described, description thereof will be omitted.

  The USB connector 500 functions as a connection unit to which the USB memory 501 is connected. Thus, the USB memory 501 (an example of a portable external storage device) can be connected to the image forming apparatus 1 (an example of an information processing device). As the portable external storage device, in addition to the USB memory 501, a CD (compact disc), an SD memory (SD Memory), an external HDD (Hard disk drive), or the like may be used.

  The control unit 600 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), an image memory, and the like. The CPU executes control necessary for operating the image forming apparatus 1 on the hardware constituting the image forming apparatus 1. The ROM stores software necessary for controlling the operation of the image forming apparatus 1. The RAM is used for temporary storage of data generated during execution of software, storage of application software, and the like. The image memory temporarily stores image data (image data output from the document reading unit 200, image data transmitted from a personal computer, image data received by facsimile, etc.).

  The control unit 600 includes a collection unit 601, a first storage unit 603, an authentication unit 605, a first control unit 607, a second control unit 609, a second storage unit 611, and a third control unit 613. When an abnormality occurs in the image forming apparatus 1, the collection unit 601 collects data about the abnormality (device management data) and stores the device management data in the first storage unit 603. Since the device management data is typically data that records the status of an abnormality that has occurred in the image forming apparatus 1 such as a paper jam, data relating to the occurrence of an abnormality is used as an example in this embodiment.

  The authentication unit 605 authenticates the service person of the image forming apparatus 1 based on predetermined authentication data. In this embodiment, a password for the service person is used for authentication. The authentication unit 605 stores a password for a service person as authentication data. Other authentication such as an ID card or biometric authentication may be used for authentication of the service person.

  The first control unit 607 executes a serviceman maintenance mode in which the serviceman can perform an operation of maintaining the image forming apparatus 1 when the authentication unit 605 authenticates the serviceman.

  The second control unit 609 executes the writing command when the writing command is input by the first input receiving unit. The write command refers to the USB memory connected to the USB connector 500 and the device management data stored in the first storage unit 603 when the first control unit 607 is in the maintenance mode for serviceman. This is an instruction to write to 501. The second control unit 609 can open the device management data stored in the first storage unit 603 with a predetermined decryption key when a command to be written is input by the first input receiving unit. It performs control to write to the USB memory 501 after performing encryption processing.

  The second storage unit 611 stores data of a plurality of operation screens in the maintenance mode for service personnel to which predetermined IDs are assigned.

  The third control unit 613 stores, in the second storage, the operation screen data corresponding to the ID input to the second input reception unit when the first control unit 607 is in the maintenance mode for the serviceman. Control is performed so that the display unit 403 displays the information on the display unit 403. As described above, in the maintenance mode for the service person, in order to display each operation screen on the display unit 403, an ID input given to each operation screen is required. Therefore, the service person can display only the operation screen of the ID that he / she knows on the display unit 403.

  When a command to be written is input by the first input receiving unit, the second control unit 609 is connected to the USB connector 500 for device management data related to functions that can be maintained on the operation screen displayed on the display unit 403. Write to USB memory 501.

  The operation unit 400 functions as first and second input reception units. The first input receiving unit is connected to the USB connector 500 for the device management data stored in the first storage unit 603 when the first control unit 607 is in the maintenance mode for serviceman. An input of a command to be written in the USB memory 501 is accepted.

  The second input receiving unit receives an ID input. The ID here is an ID given in advance to a plurality of operation screens in the maintenance mode for service personnel stored in the second storage unit 611.

  The communication unit 700 includes a facsimile communication unit 701 and a network I / F unit 703. The facsimile communication unit 701 includes an NCU (Network Control Unit) that controls connection of a telephone line with a destination facsimile and a modulation / demodulation circuit that modulates / demodulates a signal for facsimile communication. The facsimile communication unit 701 is connected to the telephone line 705.

  A network I / F unit 703 is connected to a LAN (Local Area Network) 707. A network I / F unit 703 is a communication interface circuit for executing communication with a terminal device such as a personal computer connected to the LAN 707.

  In the present embodiment, for writing the device management data stored in the first storage unit 603 to the USB memory 501, in order to prevent the device management data from leaking and ensure the security of the device management data, The above writing is permitted in the maintenance mode.

  Hereinafter, a process of writing the device management data stored in the first storage unit 603 to the USB memory 501 will be described. FIG. 3 is a flowchart for explaining this process. FIG. 4 is an example of the initial screen displayed on the display unit 403, and shows the initial screen 11 in the copy mode.

  With the control unit 600 displaying the initial screen 11 on the display unit 403 (step S1), the serviceman uses the operation unit 400 to display a screen for switching to the maintenance mode for serviceman. The control unit 600 causes the display unit 403 to display a screen for switching to the serviceman maintenance mode (step S3). As shown in FIG. 5, this screen is a reception screen 13 that accepts a password input for authenticating the service person.

  When an operation for displaying a screen for switching to the maintenance mode for service personnel is performed, the operation may be shifted from a state in which the maintenance mode for users described later is displayed. When displaying the maintenance mode for the user, the key operation for moving to the maintenance screen in the operation unit and the display unit, or the code input operation used for maintenance (for example, the authentication code by the numeric keypad in the state of the initial screen 11). It may be displayed by (input) or the like.

  The authentication unit 605 determines whether or not the password entered by the serviceman operating the operation unit 400 to authenticate the serviceman matches the password for the serviceman stored in the authentication unit 605 in advance. Determination is made (step S5). If the authentication unit 605 does not determine that the passwords match (No in step S5), the control unit 600 ends the process of writing device management data in the USB memory 501.

  When the authentication unit 605 determines that the passwords match (Yes in step S5), the first control unit 607 shifts the operation mode of the image forming apparatus 1 to the serviceman maintenance mode (step S7). At this time, if the password for the serviceman is not entered within a predetermined time, even if the passwords match, the serviceman maintenance mode may not be entered.

 When the service person operates the operation unit 400 to perform an operation for displaying the writing screen 15 for processing to write the device management data to the USB memory 501, the control unit 600 displays the writing screen 15 on the display unit 403. (Step S9). As shown in FIG. 6, the writing screen 15 includes a key 17 (an example of a first input receiving unit) indicating a character “Yes” and a key 19 indicating a character “Close”. If the key 19 is operated, the writing screen 15 is closed and the previous screen is displayed on the display unit 403.

  If the service person operates the key 17 (input of a writing command), the second control unit 609 uses the device management data stored in the first storage unit 603 to record the device management data log. (Device management data file) is generated and written in the USB memory 501 (step S11).

  The second control unit 609 is an encryption process that can open the device management data stored in the first storage unit 603 with a predetermined decryption key (password) when the key 17 is operated. And writing to the USB memory 501 may be performed. According to this, the security of the device management data written in the USB memory 501 can be ensured. In this case, the device management data file can be converted to a plain text file by connecting the USB memory 501 to a personal computer and inputting a password for opening the device management data file.

  When writing device management data to the USB memory 501, the following conditions may be imposed as conditions for writing device management data to the USB memory 501 in order to ensure the security of the device management data. (1) An ID input is requested to display the writing screen 15 for processing to write device management data to the USB memory 501 shown in FIG. (2) An operation of requesting the password input shown in FIG. 5 a plurality of times (for example, four digits twice) and inputting the password twice within a predetermined time is performed.

  The main effects of this embodiment are as follows.

  (1) As described in steps S5, S7, S9, and S11, the device management data stored in the first storage unit 603 can be written to the USB memory 501 in the maintenance mode for service personnel. To enter the maintenance mode for the service person, the service person needs to be authenticated. Accordingly, since a person other than the service person cannot write the device management data to the USB memory 501, the device management data can be secured when the device management data is written to the USB memory 501. Accordingly, it is possible to prevent the outflow of a file in which device management data having high confidentiality for the manufacturer of the image forming apparatus 1 is recorded.

  (2) The process of writing the device management data stored in the first storage unit 603 to the USB memory 501 is prohibited in the user maintenance mode. According to this, since the writing screen 15 shown in FIG. 6 is not displayed on the display unit 403 in the user maintenance mode, it is possible to prevent the user from seeing a screen unrelated to the user. Further, it is possible to prevent the user from performing an operation of writing device management data in the USB memory 501. The user maintenance mode is a mode that does not require serviceman authentication and accepts a maintenance operation of the image forming apparatus 1 by the user and the serviceman.

  A modification of this embodiment will be described. The image forming apparatus 1 according to the modification has a function of not displaying the operation screen corresponding to the ID on the display unit 403 unless the ID input previously given to each operation screen is performed in the maintenance mode for the serviceman. When writing device management data in the USB memory 501, control is performed to write device management data related to functions that can be maintained on the operation screen displayed on the display unit 403. This control can be realized by the following configuration.

  The second storage unit 611 shown in FIG. 2 stores data of a plurality of operation screens in the maintenance mode for servicemen to which predetermined IDs are assigned. Examples of the plurality of operation screens include a drive system setting operation screen, a paper feed system setting operation screen, a development system setting operation screen, and an image processing system setting operation screen.

  The second input receiving unit receives the ID input.

  When the first control unit 607 is in the serviceman maintenance mode, the third control unit 613 receives the operation screen data corresponding to the ID input to the second input reception unit by the serviceman. 2 is taken out from the second storage unit 611 and the operation screen is displayed on the display unit 403.

  When an instruction to write device management data stored in the first storage unit 603 to the USB memory 501 is input by the service person using the first input receiving unit, the second control unit 609 displays the display unit. Device management data relating to functions that can be maintained on the operation screen displayed in 403 is written in the USB memory 501 connected to the USB connector 500. For example, on the operation screen for paper feed system setting, device management data (paper jam, etc.) relating to paper feed is written to the USB memory 501.

  According to the modification, only device management data related to functions that can be maintained on the operation screen displayed on the display unit 403 is written to the USB memory 501, and the device management data generated in the image forming apparatus 1 is collectively stored in the USB memory 501. Since writing cannot be performed, the security of the device management data can be further increased when the device management data is written to the USB memory 501.

  As described above, the device management data in the present embodiment has been described using data about the occurrence of an abnormality. Information relating to the information processing apparatus or the image forming apparatus such as display data of the operation screen can also be included.

1 Image forming device (an example of information processing device)
11 Initial Screen 13 Password Acceptance Screen 15 Writing Screen 17 Key (Example of First Input Accepting Unit)

Claims (4)

An information processing apparatus that can be connected to a portable external storage device,
A collection unit for collecting data on device management of the information processing apparatus;
A first storage unit for storing device management data collected by the collection unit;
An authentication unit for authenticating a service person based on predetermined authentication data;
A first control unit that executes a maintenance mode for a serviceman capable of performing an operation of maintaining the information processing apparatus by a serviceman being authenticated by the authentication unit;
The portable external storage device connected to the information processing apparatus for storing device management data stored in the first storage unit when the maintenance mode for serviceman is set by the first control unit A first input receiving unit for receiving an input of a command to be written to,
An information processing apparatus comprising: a second control unit that executes the writing command when the writing command is input by the first input receiving unit. A display unit;
A second input receiving unit for receiving an ID input;
A second storage unit that stores data of a plurality of operation screens in the maintenance mode for service personnel, each of which is assigned a predetermined ID;
When the maintenance mode for the serviceman is set by the first control unit, the operation screen data corresponding to the ID input to the second input receiving unit is extracted from the second storage unit and displayed. A third control unit that performs control to be displayed on the unit,
When the writing instruction is input by the first input receiving unit, the second control unit sends the device management data related to a function that can be maintained on the operation screen displayed on the display unit to the information processing apparatus. The information processing apparatus according to claim 1, wherein the information processing apparatus controls writing to the connected portable external storage device.   The second control unit opens the device management data stored in the first storage unit with a predetermined decryption key when the write command is input by the first input receiving unit. The information processing apparatus according to claim 1, wherein the information processing apparatus performs control to perform encryption processing and write to the portable external storage device.   An image forming apparatus comprising the information processing apparatus according to claim 1.