JP2019220023A - Image formation system, image formation device, and image formation method - Google Patents

Abstract

To appropriately perform image forming processing while preventing virus from diffusing.SOLUTION: An image formation system includes one or more MFPs 1, a terminal device 300, and a management device 400. The one or more MFPs include a special MFP. The special MFP is either a first special MFP including a controller that controls either a first state in which image formation processing is executed while no other processing is executed or a second state in which the image formation processing and other processing are executed or a second special MFP for executing the image formation processing while executing no other processing. The MFP performs processing for the special MFP in the first state to execute image formation processing based on an image formation request when a safety degree of the terminal device 300 is determined to be low with a first determination section 104 that determines whether a safety degree of a terminal device is low or not when the image formation request transmitted from the terminal device 300 is received.SELECTED DRAWING: Figure 1

Description

  The present disclosure relates to an image forming system, an image forming apparatus, and an image forming method.

  In recent years, it has been known that an image forming apparatus infects the image forming apparatus with a virus by processing data. For example, in Patent Document 1, when an image forming apparatus receives some request from a terminal device having a high risk of virus infection, if the request is a print request, the image forming apparatus executes printing based on the request. Further, if the request is a request other than the print request, the image forming apparatus does not execute the processing based on the request, thereby executing the print processing while suppressing the risk of virus infection.

JP 2009-48267 A

  However, in the image forming apparatus described in Patent Document 1, there is a possibility that a virus spreads through a network worm.

  The present disclosure has been conceived in view of such circumstances, and has as its object to prevent an virus from spreading, and to appropriately execute an image forming process, an image forming apparatus, and an image forming method. It is to provide.

  According to an aspect of the present disclosure, the image processing apparatus includes one or more image forming apparatuses and a terminal device, the one or more image forming apparatuses include a special image forming apparatus, and the special image forming apparatus performs an image forming process. A first special image forming apparatus including a control unit that controls a first state in which other processing is not executed and a second state in which image forming processing and other processing are executed, or one while executing image forming processing Is a second special image forming apparatus that does not execute the processing described above. When the image forming apparatus receives the image forming request transmitted from the terminal apparatus, the image forming apparatus determines whether the security level of the terminal apparatus is low or not. The image processing apparatus further includes a determination unit, and a processing execution unit that, when it is determined that the security of the terminal device is low, executes a process for the special image forming apparatus in the first state to execute an image forming process based on the image forming request. , Image formation Stem is provided.

  Preferably, the special image forming apparatus controlled in the first state or the second special image forming apparatus executes a process based on the different request even when receiving a request different from the image forming request from the terminal device. do not do.

  Preferably, the special image forming apparatus controlled to the first state or the second special image forming apparatus further includes a notifying unit for notifying that processing based on a different request is not performed.

  Preferably, the image forming system further includes a management device, and when the image forming device receives the image forming request transmitted from the terminal device, the image forming system transmits request information for requesting a determination of the degree of security of the terminal device. The management device transmits to the management device, the management device stores the determination information used to determine the degree of security of the terminal device, and, when the request information is received, the terminal device, based on the determination information, A second determining unit that determines whether the security level of the image forming apparatus is low, and a transmitting unit that transmits a determination result of the second determining unit to the image forming apparatus. Then, it is determined whether the security of the terminal device is low.

  Preferably, the management device updates the determination information based on at least one of whether or not the terminal device is included in the image forming system and whether or not the terminal device has a virus found by virus check. An updating unit is further included.

  Preferably, when the image forming apparatus receives a request including an image forming request transmitted from the terminal device, the image forming device executes a first virus check for detecting the presence or absence of a virus of the terminal device based on the request as a virus check. A first virus check execution unit is further included, and when a virus is detected in the request by the first virus check, low security level information indicating that the security level of the terminal device that transmitted the request is low is transmitted to the management apparatus. Then, when the low security level information is received, the updating unit updates the determination information based on the low security level information.

  Preferably, the image forming apparatus further includes a discarding unit that discards a request that triggers execution of the first virus check when a virus is detected by the first virus check.

  Preferably, the terminal device further includes a second virus check execution unit that executes, as a virus check, a second virus check that detects the presence / absence of a virus of the terminal device indicated by the low security level information. When it is detected, the low security level information indicating that the security level of the terminal device including the second virus check execution unit that has executed the second virus check is low is transmitted to the management device, and the update unit transmits the low security level information to the management device. When the degree information is received, the judgment information is updated based on the low security degree information.

  Preferably, the special image forming device is an image forming device including a control unit, and the transmission unit controls the special device that has been controlled to the second state when the second determination unit determines that the security of the terminal device is low. First control information for controlling the image forming apparatus to the first state is transmitted to the special image forming apparatus, and when the first control information is received, the control unit retreats from the special image forming apparatus. The evacuation information is transmitted to the management apparatus, and thereafter, the evacuation information in the special image forming apparatus is deleted.

  Preferably, the management device further includes a third determination unit configured to determine whether to control the special image forming apparatus controlled to the first state to the second state, and the transmission unit includes: When it is determined that the special image forming apparatus controlled to the first state is to be controlled to the second state, the special image forming apparatus is provided with second control information and evacuation information for controlling the special image forming apparatus to the second state. Is transmitted to the special image forming apparatus, and when the control unit receives the second control information, the control unit discards the data relating to the image forming process executed during the period in which the control unit is controlled to the first state, and saves the evacuation information. To return to the state when controlling to the first state.

  Preferably, the image processing system further includes a collection unit that collects identification information of the terminal device included in the image forming system, wherein the third determination unit determines the identification information of the terminal device included in the image forming system, The special image forming apparatus which is controlled to the first state when the collection unit determines that the identification information of the terminal device collected by the collection unit is defined by the specified information. Is controlled to be in the second state.

  Preferably, the third determination unit is configured to control the special image forming apparatus that has been controlled to the first state when a predetermined period has elapsed since the last determination that the terminal device that has transmitted the image formation request has low security. It is determined that control is performed to the second state.

  Preferably, the one or more image forming devices, the terminal device, and the management device are each connected to a network, and when the special image forming device receives the image forming request, the special image forming device receives the image forming request. To the management apparatus, and the management apparatus controls the special image forming apparatus to transmit the reception information to the network while preventing the special image forming apparatus from transmitting information different from the reception information to the network. Execute

  Preferably, the image forming apparatus determines whether the special image forming apparatus in the first state is a special image forming apparatus, as processing for executing image forming processing based on the image forming request. When it is determined that the image forming apparatus is a special image forming apparatus, an image forming process based on the image forming request is performed, and when it is determined that the image forming apparatus is not a special image forming apparatus, an image forming process based on the image forming request is performed. The image forming request is transmitted to the special image forming apparatus so that the special image forming apparatus executes the processing.

  According to another aspect of the present disclosure, an image forming unit that executes an image forming process, and when receiving an image forming request transmitted from a terminal device, determining whether the security of the terminal device is low or not. The image forming apparatus is in a first state in which the image forming apparatus executes the image forming processing but does not execute other processing and executes the image forming processing based on the image forming request when it is determined that the security of the terminal device is low. An image forming apparatus is provided that includes a processing execution unit that executes processing for performing the processing.

  According to still another aspect of the present disclosure, a terminal device transmits an image forming request to the image forming device, and the image forming device that has received the image forming request is a terminal device that has transmitted the image forming request. Transmitting request information for requesting the management apparatus to determine whether the security degree is low to the management apparatus; and receiving the request information, the management apparatus receives the request information, and transmits the request information to the management apparatus. Judging whether the degree is low or not, and when the management apparatus judges that the security degree of the terminal device which has transmitted the image forming request is low, the control is shifted to the second state of executing the image forming process and other processes. The image forming apparatus is controlled to the first state in which the image forming apparatus executes the image forming processing and does not execute other processing, and executes the image forming processing based on the image forming request to the image forming apparatus controlled in the first state. An image forming method and a step of is provided.

  According to the present disclosure, it is possible to appropriately execute image forming processing while preventing virus from spreading.

FIG. 1 is a diagram illustrating an application example of an image forming system according to an embodiment. FIG. 1 is a diagram illustrating a configuration example of an image forming system according to an embodiment. FIG. 1 is a diagram illustrating an appearance of an image forming apparatus according to an embodiment. FIG. 2 is a diagram illustrating a hardware configuration of the image forming apparatus according to the embodiment. It is a figure showing the example of functional composition of the terminal unit of this embodiment. FIG. 2 is a diagram illustrating an example of a functional configuration of the image forming apparatus according to the embodiment. FIG. 2 is a diagram illustrating an example of a functional configuration of a management device according to the embodiment. It is a figure showing an example of judgment information of this embodiment. FIG. 4 is a diagram illustrating an example of MFP information according to the embodiment. 4 is a flowchart of the MFP according to the embodiment. It is a flowchart (the 1) of the management apparatus of this embodiment. It is a flowchart (the 2) of the management apparatus of this embodiment. It is a flowchart (the 3) of the management apparatus of this embodiment. It is a figure showing an example of judgment information of a 2nd embodiment. FIG. 13 is a diagram illustrating an application example of the image forming system according to the second embodiment. FIG. 14 is a diagram illustrating an application example of the image forming system according to the third embodiment.

  Hereinafter, an embodiment of an image forming apparatus will be described with reference to the drawings. In the following description, the same parts and components are denoted by the same reference numerals. Their names and functions are the same. Therefore, the description will not be repeated. Further, the image forming apparatus can execute an image forming process on a print medium (for example, paper). Hereinafter, the image forming apparatus may be referred to as an MFP (Multi-Functional Peripheral). Hereinafter, the image forming process may be referred to as a printing process.

<First embodiment>
[Application example]
First, an example of a scene to which the image forming apparatus of the present embodiment is applied will be described with reference to FIG. In FIG. 1, the numbers in parentheses indicate the processing order (step). In the example of FIG. 1, the terminal device 300A, the terminal device 300B, the management device 400, the MFP 1, and the print-only MFP 1A are connected via a network. Each of the terminal device 300A and the terminal device 300B is a terminal device used by a user, and is also referred to as an information processing device. The terminal device includes, for example, a PC (personal computer), a smartphone, a tablet, and the like.

  The user inputs various requests from the terminal device 300A or the terminal device 300B, and causes the image forming apparatus to execute processing corresponding to the requests. The various requests include, for example, a print request and a request different from the print request. The print request is a request for causing the image forming apparatus to execute a print process. The request different from the print request is a request for causing the image forming apparatus to execute a process (other process) different from the print process. The other process is, for example, a process of transmitting information to a device external to the image forming apparatus (hereinafter, referred to as an “external device”). Further, other processing includes processing for requesting image data by transmitting request information for requesting image data to an external device. The different processing is also referred to as data communication processing hereinafter. The different processing includes, for example, a request for processing for storing an image transmitted from the terminal device in a storage area (storage) of the external device.

  First, as a step (0), the management device 400 periodically collects terminal device information on terminal devices connected to the network by searching the network. The terminal device information includes, for example, a MAC (Media Access Control address) address. By this search, the management device 400 can recognize the terminal device already connected to the network. In the example of FIG. 1, the management device 400 determines that a terminal device already connected to the network is a terminal device with a high degree of security. In the example of FIG. 1, it is assumed that the terminal devices 300A and 300B are already connected to the network.

  Next, as a step (1), it is assumed that print request information indicating the print request is transmitted to the MFP 1 by the user inputting the print request to the terminal device 300X. Hereinafter, a terminal device that has issued a print request is also referred to as a “print request terminal device”.

  The terminal device 300X (print request terminal device) is a terminal device newly connected to the network. In other words, since the terminal device 300X is not a terminal device already connected to the network, the terminal device 300X is a terminal device with low security (possibly infected with a virus). In step (1), the MFP 1 stores a print job based on the print request information. The storage of the print job is executed so that even if the print job is infected with a virus, the print job is not adversely affected on the MFP 1 and other devices connected to the network.

  Next, as step (2), when the MFP 1 receives the print request information from the terminal device 300X, it determines whether or not the security of the terminal device 300X is low. An MFP that has received a print request from a terminal device is also referred to as a print request receiving MFP. In step (2) of FIG. 1, when receiving the print request information transmitted from the terminal device 300X, the MFP 1 (the print request reception MFP) transmits the request information to the management device 400. The request information is information for requesting determination of the degree of security of the terminal device 300X. The request information includes identification information (for example, a MAC address) for identifying the terminal device that has transmitted the print request information. Hereinafter, identification information for identifying a terminal device is also referred to as “terminal device ID (identification)”.

  In addition, the management device 400 stores determination information (see FIGS. 8 and 15) used to determine the degree of security of the terminal device. According to the determination information, the terminal device already connected to the network is defined as a highly secure terminal device.

  Next, as step (3), when the management device 400 receives the request information, it is determined based on the determination information whether or not the security of the terminal device indicated by the terminal device ID included in the request information is high. . The terminal device 300X is a terminal device newly connected to the network. Therefore, the determination information does not include the terminal device ID of the terminal device 300X. Therefore, the management device 400 determines that the security of the terminal device 300X is low.

  Also, a plurality of MFPs including the MFP 1 are connected to the network. If the MFP 1 executes printing based on print request information from a terminal device with low security (possibly infected with a virus), and the print request information contains a virus, From the MFP 1, a virus may spread to the network. Also, if the MFP 1 executes printing based on print request information from a terminal device with low security (possibly infected with a virus), the print request information contains a virus. Then, the internal information of the MFP 1 may leak to the network.

  Therefore, in the present embodiment, the management apparatus 400 causes the print-dedicated MFP 1A to execute printing based on print request information from a terminal device with low security (possibly infected with a virus). Here, the printing-dedicated MFP 1A is an MFP that executes only printing, and does not perform any data communication processing.

  Therefore, even if the printing-dedicated MFP 1A executes printing based on the print request information from the terminal device 300X with low security and is infected with a virus, the MFP 1A does not execute data communication processing and the like, so the virus spreads. That is, it is possible to prevent the internal information of the printing-dedicated MFP 1A from leaking to the network.

  Further, MFPs connected to the network include a first MFP and a second MFP. The first MFP includes a control unit. The control unit is controllable to one of the first state and the second state. The first state is a state in which print processing is executed, but other processing (data communication processing) is not executed (that is, a state exclusive for printing). The second state is a state in which print processing and other processing (data communication processing) are performed.

  The second MFP is an MFP that executes printing but does not execute (cannot execute) other processes. Since the second MFP can execute only the printing process, it can be said that the second MFP is a low-function MFP. The first MFP and the second MFP are collectively referred to as a special MFP (special image forming apparatus).

  It is assumed that the MFPs connected to the network in the example of FIG. 1 do not include the second MFP but include the first MFP. The first MFP is usually in a second state (a state in which print processing and other processing are executed). As a step (4), the management device 400 transmits first control information for controlling the first MFP controlled to the second state to the first state to the first MFP.

  Next, when the first MFP receives the first control information, the first MFP executes the process of step (5) before controlling to the first state. In step (5), the print-only MFP 1A copies the save information of the print-only MFP 1A and transmits the copied save information to the management device 400. The evacuation information is information to be saved. The evacuation information includes, for example, an address book stored in print-only MFP 1A. The evacuation information is information indicating a past state of the system file.

  After transmitting the copy of the evacuation information to the management device 400, the printing-dedicated MFP 1A deletes the evacuation information of the copy source. In this manner, the printing-dedicated MFP copies the save information, transmits the copied save information to the management device 400 (saves it), and erases the copy-source save information. Thus, even if the first MFP is infected with the virus, it is possible to prevent the evacuation information from leaking.

  After the first MFP transmits the copied evacuation information to the management device 400, the first MFP is controlled to the first state based on the first control information transmitted in step (4) (becomes a print-only MFP). . That is, the first MFP that was in the second state is controlled to the first state.

  On the other hand, when the management device 400 receives the copy of the evacuation information in step (5), the management device 400 performs low security level information indicating that the security level of the terminal device 300X is low as step (7). And the identification information of the printing-dedicated MFP to MFP 1.

  When the MFP 1 receives the low security information and the identification information of the print-only MFP, the MFP 1 recognizes that the security of the terminal device 300X is low based on the low security information. Further, the identification information of the print-only MFP is, for example, the address of the print-only MFP.

  In step (8), the MFP 1 transmits the print job stored in step (1) to the address of the print-only MFP (the address received in step (7)). That is, the MFP 1 has transferred the print job to the print-only MFP 1A.

  As a modification, in step (7), the management apparatus 400 may transmit the identification information of the print-only MFP to the print request reception MFP without transmitting the low security level information. The print request receiving MFP receives the identification information of the print-dedicated MFP, thereby recognizing that the security of the terminal device 300X (print request terminal device) is low.

  As step (9), upon receiving the print job, print-dedicated MFP 1A executes a print process based on the print job.

  Further, in step (3), when management device 400 determines that terminal device 300X is a terminal device with a high degree of security, management device 400 transmits high security level information to MFP1. The high security level information is information indicating that the terminal device 300X is a terminal device with a high security level.

  When the MFP 1 receives the high security level information, it indicates that the security level of the terminal device 300X is high. Therefore, the MFP 1 executes a printing process based on the print request information transmitted from the terminal device 300X in step (1).

  As described above, according to the image forming system of the present embodiment, when the print request information is transmitted from the terminal device determined to be low in security, the print processing based on the print request information is performed by the print request information. Is executed, not by the MFP that has received the print request. The print-only MFP is an MFP that executes only print processing, and does not execute other processing (such as communication processing). Therefore, even if a virus is included in the print request information and the virus infects the print-only MFP, the virus does not spread. Further, since the internal information of the print-only MFP is saved (transmitted to the management device 400) as save information, the internal information is infected with a virus, and the internal information leaks to the network. Can be prevented.

  In addition, a configuration in which a print process based on a print request from a terminal device with low security is not executed may be considered. However, with such a configuration, for example, a user who needs to execute printing in a short time (in a short time) needs to make a print request from another secure terminal device. Can not. In the image forming system according to the present embodiment, a user who needs to execute printing quickly (in a short time) can use a print-only MFP even if a print request is input from a low-security terminal device. Can execute the printing process.

[Configuration of Image Forming System]
Next, the configuration of the image forming system will be described. FIG. 2 is a diagram illustrating a configuration example of the image forming system 1000. The image forming system 1000 in the example of FIG. 2 includes a plurality of MFPs 1, a management device 400, a relay device 200, a plurality of terminal devices 300, and a network 50.

  The network 50 is connected to a plurality of terminal devices 300, a management device 400, and a plurality of MFPs 1 via a relay device 200. The network includes various networks such as the Internet and a mobile terminal communication network. The relay device 200 includes a router or a hub.

[Hardware Configuration of MFP 1]
FIG. 3 is a diagram illustrating an appearance of the image forming apparatus according to the present disclosure. FIG. 4 is a diagram illustrating a hardware configuration of the image forming apparatus of FIG.

  An example of the image forming apparatus 1 is an MFP, that is, an apparatus that integrates functions such as copying, network printing, a scanner, a facsimile, and a document server. The image forming apparatus 1 includes an operation panel 11, a scanner device 13, a printer device 14, a finisher device 15 for performing processing such as stapling and punching, a communication interface 16, a document feeder 17, a paper feeding device 18, a CPU (Central Processing Unit) 20. , A ROM (Read Only Memory) 21, a RAM (Random Access Memory) 22, a storage unit 23, and a USB (Universal Serial Bus) interface 23A.

  The operation panel 11 includes an operation device 11a and a display device 11b. The operation device 11a includes a plurality of keys for inputting numbers, characters, and symbols, a comment key pressed when a user wants to create a post, a sensor for recognizing various pressed keys, and a key for recognition. And a transmission circuit for transmitting the indicated signal to the CPU 20.

  The display device 11b displays a screen for giving a message or an instruction, a screen for a user to input setting contents and processing contents, a screen showing an image formed by the image forming apparatus 1 and a processing result, and the like. I do. The display device 11b may be a touch panel. That is, the display device 11b and at least a part of the operation device 11a may be integrally formed. The display device 11b has a function of detecting a position on the touch panel touched by a user's finger and transmitting a signal indicating the detection result to the CPU 20.

  The image forming apparatus 1 can communicate with an external device (for example, the terminal device 300) via the communication interface 16. An application program and a driver for giving a command to the image forming apparatus 1 may be installed in the external device. Thereby, the user can remotely operate the image forming apparatus 1 using the external device.

  The scanner device 13 photoelectrically reads image information such as photographs, characters, and pictures from a document to acquire image data. The acquired image data (density data) is converted into digital data by an image processing unit (not shown), subjected to various known image processing, and then sent to the printer device 14 or the communication interface 16 to print an image or print data. Or stored in the storage unit 23 for later use.

  The printer device 14 prints the image data acquired by the scanner device 13, the image data received from the external device by the communication interface 16, or the image stored in the storage unit 23 on a recording sheet such as paper or film. The paper feeding device 18 is provided at a lower portion of the main body of the image forming apparatus 1 and is used to supply a recording sheet suitable for an image to be printed to the printer device 14. The recording sheet on which an image is printed by the printer device 14, that is, a printed matter, passes through the finisher device 15, performs processing such as stapling and punching according to the mode setting, and is discharged to the tray 24.

  The communication interface 16 includes a transmission unit and a reception unit, and is a device for exchanging data with a PC and a FAX terminal. As an example of the communication interface 16, a NIC (Network Interface Card), a modem, a TA (Terminal Adapter), or the like is used.

  The CPU 20 controls the entire image forming apparatus 1 and controls basic functions such as a communication function, a print function, a scan function, a file transmission function, and a browser function.

The ROM 21 is a memory that stores an operation program of the CPU 20 and the like.
The RAM 22 is a memory that provides a work area when the CPU 20 operates based on the operation program. The CPU 20 loads the operation program from the ROM 21 and the like and loads various data to perform work.

  The storage unit 23 is configured by a nonvolatile storage device such as a hard disk drive (HDD), and stores various applications, image data of a document read by the scanner device 13, and the like.

  The USB interface 23A is an interface of the USB memory 23X detachable from the image forming apparatus 1. The CPU 20 reads information stored in the USB memory 23X via the USB interface 23A. The CPU 20 also writes information to the USB memory 23X via the USB interface 23A.

  The terminal device 300 includes hardware such as an operation unit and a display unit in addition to the CPU, the RAM, the ROM, and the communication interface in FIG. When terminal device 300 is, for example, a PC, it is a keyboard and a mouse. The display unit is a monitor.

  Further, the management device 400 includes hardware such as the CPU, the RAM, the ROM, and the communication interface in FIG.

  Next, an example of a functional configuration of the MFP 1, the management device 400, and the terminal device 300 will be described. FIG. 5 is a diagram illustrating a functional configuration example of the terminal device 300.

[Functional Configuration Example of Terminal Device 300]
Next, an example of a functional configuration of the terminal device 300 will be described with reference to FIG. The request input unit 302 receives a request from a user. The request from the user includes, for example, a request for printing, a request for scanning an image, a request for storing image data in a predetermined storage area (storage), a request for reading image data from the storage area, and the like. The control unit 306 transmits information related to the request from the user to the MFP or the like specified in the request from the user via the communication unit 480, and further via the relay device 200 and the network 50. (See step (1) in FIG. 1).

  The second virus check execution unit 304 indicated by a broken line will be described in a third embodiment.

[Functional Configuration Example of MFP 1]
Next, an example of a functional configuration of the MFP 1 will be described with reference to FIG. Hereinafter, among the MFPs, MFPs other than the special MFP are referred to as normal MFPs.

  Each of the normal MFP and the special MFP includes a communication unit 180, an image forming unit 102, a first determination unit 104, a process execution unit 106, a control unit 116, and a discard unit 117. The special MFP further includes a backup unit 110, a return unit 112, and a notification unit 115. The normal MFP does not have the backup unit 110, the return unit 112, and the notification unit 115. The first virus check execution unit 114 indicated by a broken line will be described in a second embodiment.

  The image forming unit 102 executes a printing process (image forming process) on a sheet or the like under the control of the control unit 116 based on the print job. The print job is, for example, data included in a request from the user (for example, a print request).

  When receiving the print request transmitted from the terminal device, the first determination unit 104 determines whether the security of the terminal device is low. In the present embodiment, the MFP 1 transmits request information to the management device 400 (see step (2)). The request information is information for requesting the management device 400 to determine whether the security of the terminal device is low.

  Further, the first determination unit 104 determines the degree of security of the terminal device 300 based on the determination result transmitted from the management device 400. If the determination result transmitted from the management device 400 is a result indicating that the security of the terminal device 300 is low, the first determination unit 104 determines that the security of the terminal device 300 is low. On the other hand, when the determination result transmitted from the management device 400 is a result indicating that the security of the terminal device 300 is high, the first determination unit 104 determines that the security of the terminal device 300 is high.

  The process execution unit 106 executes various processes. For example, when it is determined that the security of the terminal device is low, the process execution unit 106 executes “the process for the MFP in the first state to execute the print process based on the print request”.

  Here, the “process in which the MFP in the first state executes the print process based on the print request” will be described. This process differs depending on the type of MFP included in the image forming system.

  For example, if the print request receiving MFP is not a special MFP, but the other MFP includes the first MFP and the other MFP does not include the second MFP, this processing is performed by the print request receiving MFP. This is a process in which the first MFP, which is another MFP, is controlled to the first state, and the special MFP in the first state executes the printing process (see FIG. 1).

  If the print request receiving MFP is not a special MFP but another MFP includes the second MFP, this process is performed regardless of whether the other MFP includes the first MFP. This is a process for causing a second MFP, which is another MFP different from the request receiving MFP, to execute a printing process (see FIG. 1).

  Further, when the print request receiving MFP is the first MFP as the special MFP, this process controls the first MFP to the first state and executes the printing process on the special MFP in the first state. This is the process to make it.

  When the print request receiving MFP is the second MFP as a special MFP, this process is a process for causing the print request receiving MFP to execute a printing process. As described above, this processing is different depending on, for example, four situations.

  The backup unit 110 is a process for backing up the save information of the MFP (special MFP) itself. This backup process is executed when the management device 400 transmits the first control information (see step (4) in FIG. 1).

  Also, as described in FIG. 1, the special MFP executes a printing process based on a printing request from a terminal device with low security. Therefore, the special MFP is an MFP that may be infected with a virus. Therefore, even if the virus is infected, the special MFP executes processing for minimizing damage (processing of the backup unit 110 and the return unit 112).

  The backup unit 110 transmits the evacuation information in the special MFP to an external device (see step (5) in FIG. 1). In the present embodiment, the external device is the management device 400. Note that, as a modification, the external device may be a device different from the management device 400.

  After transmitting the evacuation information, the backup unit 110 deletes the evacuation information in the special MFP. When the special MFP is the first MFP, the control unit 116 controls the special MFP to the first state after the termination of the discarding (see step (6) in FIG. 1).

  After the printing process as the special MFP ends, the return unit 112 returns to the state at the time of controlling to the first state based on the backed up information (evacuation information). The return unit 112 transmits request information for requesting (sending back) the evacuation information to the management device 400 that has transmitted the evacuation information at the time of backup. Upon receiving the request information, management apparatus 400 transmits (returns) the evacuation information to the special MFP that has transmitted the request information. Upon receiving the evacuation information, the return unit 112 of the special MFP returns to the state at the time of backup based on the evacuation information. Thus, the evacuation information is information for causing the return unit 112 to return to the first state.

  The control unit 306 of the special MFP executes, for example, control to one of the first state and the second state. When receiving a request other than a print request (for example, a request for processing for storing an image in a storage) while the first state is being controlled, the discarding unit 117 discards the request. The processing based on the discarded request is not executed.

[Functional Configuration Example of Management Device 400]
Next, an example of a functional configuration of the management device 400 will be described with reference to FIG. The collection unit 401 of the management device 400 periodically collects terminal device information of each of the plurality of terminal devices 300 connected to the network 50 (see step (0) in FIG. 1). The terminal device information includes a terminal device ID (MAC address) of each of the plurality of terminal devices 300. In the following, the reference numeral of the terminal device is a code obtained by adding a terminal device ID after 300. For example, the terminal device having the terminal device ID A1 is referred to as “terminal device 300A1”.

  The update unit 402 updates the determination information in the storage unit 404 based on the terminal device information of each of the plurality of terminal devices 300 collected by the collection unit 401. The determination information is information for the management device 400 to determine whether the security of the terminal device 300 is low. The judgment information is stored in the storage unit 404. Further, the determination information is also referred to as “regulation information” because it is information in which the identification information of the terminal device included in the image forming system is defined. In the present embodiment, the determination information and the definition information are the same. Note that, as a modification, the regulation information and the determination information may be different information.

  FIG. 8 shows an example of the determination information. In the example of FIG. 8, one or more terminal device IDs, and for each of the one or more terminal device IDs, security level information (low security level information and high security level information) and virus presence / absence information are stored in association with each other. Have been. The safety level information is information indicating whether or not the terminal device is safe.

  The updating unit 402 updates the determination information based on the terminal device information collected by the collecting unit 401. For example, in the example of FIG. 8, the terminal devices 300A1 to 300A5 are defined. When the terminal device information collected by the collection unit 401 includes A7 in addition to A1 to A5 as the terminal device ID, the updating unit 402 determines whether the terminal device information of the terminal devices 300A1 to 300A5 in FIG. Then, the determination information is updated so that the terminal device 300A7 is also added.

  The storage unit 404 of the management device 400 stores MFP information in addition to the determination information. FIG. 9 shows an example of the MFP information. The MFP information is typically information for specifying whether each of a plurality of MFPs connected to the network 50 is a special MFP.

  In the example of FIG. 9, it is assumed that five MFPs are connected to the network 50. In the example of FIG. 9, it is assumed that the MFP IDs of the five MFPs are M1 to M5. In the following, the MFP reference code is a code obtained by adding an MFPID after one. For example, a terminal device whose MFP ID is M1 is referred to as “MFP1M1”.

  In the example of FIG. 9, MFP 1M2 is the second MFP as a special MFP. Further, in the example of FIG. 9, MFP 1M5 is the first MFP as a special MFP.

  When the second MFP exists in the plurality of MFPs connected to the network, the management apparatus 400 preferentially designates the second MFP as the print-only MFP. When a plurality of MFPs connected to the network do not have the second MFP but only the first MFP, the management apparatus 400 designates the first MFP as a print-only MFP.

  The determination information in FIG. 8 is information updated based on the terminal device information of each of the plurality of terminal devices 300 collected by the collection unit 401. The MFP information in FIG. 9 is information created in advance by an administrator of the image forming system 1000 or the like.

  The second determination unit 406 of the management device 400 determines whether the security of the terminal device is low based on the determination information in FIG. The second determination unit 406 determines that the terminal device included in the determination information in FIG. 8 is “a terminal device with a high degree of security”. On the other hand, the second determination unit 406 determines a terminal device that is not included in the determination information in FIG. 8 as a “terminal device with low security”.

  For example, when the print request terminal device is the terminal device 300A1, the second determination unit 406 determines that the print request terminal device is a “terminal device with a high degree of security”. On the other hand, when the print request terminal device is the terminal device 300A6, the terminal device 300A6 is not specified in the determination information of FIG. Is low. "

  It is assumed that the management device 400 receives the request information from the MFP, and the second determination unit 406 determines that the terminal device that has transmitted the print request to the MFP has low security. In this case, under the control of control unit 412, communication unit 480 transmits a determination result (for example, a determination result indicating that the degree of security is low) by second determination unit 406 to the MFP as a transmission unit. I do. The first determination unit 104 determines the degree of security of the print request terminal device based on the determination result transmitted from the communication unit 480 (with reference to the determination result).

  Third determining unit 410 determines whether or not to control an MFP that is controlled to the first state (a state in which only printing can be performed) (that is, an MFP dedicated to printing) to the second state. The third determination unit 410 switches from the first state to the second state when it determines that the special MFP that is in the first state (a print-only MFP) may be controlled to the second state. Control.

  The determination condition that the third determination unit 410 determines that the control may be changed from the first state to the second state is when it is determined that the virus is not likely to be spread. This determination condition includes a first condition and a second condition. The first condition is that the management device 400 collects the terminal device information of each of the plurality of terminal devices 300 (by executing the process of step (0)), so that all of the plurality of terminal devices 300 are already , Determined by the determination information (the terminal device ID is stored). "

  The second condition is a condition that “a predetermined period has elapsed since the last time that the security of the print request terminal device was low”. including. The predetermined period is a predetermined period, for example, one day.

  It is assumed that the third determination unit 410 determines that the special MFP controlled in the first state is controlled to the second state. In this case, the second control information and the evacuation information are transmitted to the special MFP. The second control information is information for controlling the special MFP controlled to the first state to the second state. The evacuation information is information transmitted from the backup unit 110 of the special MFP to the management device 400. When the special MFP receives the second control information, the discarding unit 117 discards the data relating to the printing process that was being executed during the period in which the first MFP was controlled to the first state (that is, the period when the MFP is a print-only MFP). The data relating to the print processing is, for example, data relating to a print job (see step (8)) transmitted from the print request receiving MFP by the print-only MFP. The data relating to the print job is data from a terminal device with low security (a terminal device that may be infected with a virus). Then, the data related to the print job may be infected with a virus.

  Therefore, the discarding unit 117 of the special MFP discards data relating to the print job being executed during the period in which the control is performed in the first state (that is, the period during which the MFP is a print-only MFP). At the same time, the return unit 112 returns to the state at the time of backup (the state at the time of control to the first state) based on the evacuation information.

  Further, when the special MFP is a print-only MFP, it does not execute a process based on the request when receiving a request for a process other than the print process. Further, when receiving a request for a process other than the print process, the notification unit 115 of the print-only MFP notifies that the process is not to be executed based on the request. In the notification, for example, the display unit 11b displays, as the notification unit 115, a message such as "Since the MFP is a print-only MFP, processing other than printing is not accepted."

  Further, when the special MFP receives the first control information from the management device 400 (see step (4)), the special MFP notifies the management device 400 of the first control reception information indicating that the first control information has been received. Is transmitted to the management device 400. When the management device 400 receives the first control reception information, the management device 400 specifies that the special MFP has received the first control information. When receiving the first control reception information, the management device 400 executes block control.

  When the MFP receives the print request, all the MFPs including the special MFP transmit the print reception information indicating that the print request has been received to the management apparatus 400. The block control is a control for preventing the special MFP from transmitting information different from the print reception information to the network 50. For example, as shown by a broken line in FIG. 2, the management device 400 transmits block control information to the relay device 200.

  The relay device 200 is configured such that various information (packets) from a plurality of MFPs pass (output to the network 50) before the block control is executed. In addition, the relay apparatus 200 executes the block control, so that the print reception information (packet related to the print reception information) from the MFP (special MFP) is passed, but the information other than the print reception information among the various information. (A packet relating to information other than the print reception information) is not passed. Accordingly, the management apparatus 400 performs block control on the relay apparatus 200, so that information other than the print reception information from the special MFP can be prevented from being output (leaked) to the network 50.

[Flowchart of MFP 1]
FIG. 10 is a flowchart of the MFP 1. A processing flow of the MFP 1 will be described with reference to FIG. Also, the processing of the steps in FIG. 1 will be referred to as needed. The flow in FIG. 10 is a process executed regardless of whether the MFP 1 is a special MFP or a normal MFP.

  First, in step S2, control unit 116 of MFP 1 determines whether a request from terminal device 300 has been received. The request includes a print request and a request different from the print request. Requests different from the print request include, for example, a request to store image data in a predetermined storage area (storage), and a request to shift to a print-only state.

  In step S2, the control unit 116 waits until it determines that the request has been received (NO in step S2). When the control unit 116 determines in step S2 that the request has been received (YES in step S2), the process proceeds to step S4.

  Next, in step S4, the control unit 116 determines whether or not the MFP 1 including the control unit 116 is in the print-only state (that is, the first state). When the control unit 116 determines that it is in the print-only state (YES in step S4), the process proceeds to step S28. On the other hand, when the control unit 116 determines that it is not in the print only state (NO in step S4), the process proceeds to step S6.

  In step S6, it is determined whether or not the request received in step S2 is a request to shift to a print-only state (that is, first control information). When the control unit 116 determines in step S6 that the information is the first control information (YES in step S6), the process proceeds to step S7. On the other hand, when the control unit 116 determines that the request is not a request to shift to the print-only state (NO in step S6), the process proceeds to step S14.

  In step S7, MFP 1 transmits the reception information to management device 400. The reception information is information indicating that the first control information has been received. By receiving the reception information, management apparatus 400 can recognize that the special MFP has received the first control information. Subsequently, in step S8, the backup unit 110 of the MFP 1 copies the evacuation information and transmits the copied evacuation information to the management device 400 (see step (5) in FIG. 1).

  Next, in step S10, the backup unit 110 deletes the evacuation information in the special MFP. Next, in step S12, the control unit 116 shifts to a print-only state (first state). Then, the process returns to step S2.

  Also, in step S14, the first determination unit 104 transmits request information to the management device 400 (see step (2)). This request information is information for requesting the management device 400 to determine whether the security of the terminal device 300 that has transmitted the request in step S2 is low. When the management device 400 receives the request information, the second determination unit 406 determines whether the security of the terminal device is low based on the determination information in FIG. When the second determination unit 406 determines that the security of the terminal device is low, the management device 400 transmits the low security information indicating that the security of the terminal device 300 is low and the identification information of the print-only MFP (for example, MAC address) to the MFP (see step (7)).

  In step S16, the first determination unit 104 determines the degree of security of the terminal device 300 that has transmitted the request in step S2, based on the determination result from the management device 400. In step S16, when the terminal device 300 that has transmitted the request in step S2 determines that the terminal device is secure (high security level) (YES in step S16), the process proceeds to step S26. On the other hand, in step S16, when the terminal device 300 that has transmitted the request in step S2 determines that the terminal device is not safe (the security level is low) (NO in step S16), the process proceeds to step S18. Also, in step S16, the case where the terminal device 300 that has transmitted the request in step S2 determines that the terminal device 300 is not secure (the security level is low) means that the management device 400 sends the identification information of the print-only MFP (for example, the MAC address). ) Is transmitted (step (7)).

  In step S18, the control unit 116 determines whether the request in step S2 is a print request. In step S18, when the control unit 116 determines that the request in step S2 is not a print request (YES in step S18), the process proceeds to step S20. In step S18, when the control unit 116 determines that the request in step S2 is not a print request (NO in step S18), the process proceeds to step S22.

  In step S22, the control unit 116 discards the request in step S2. As described above, in step S22, the control unit 116 discards a request other than the print request from the terminal device 300 with low security. That is, the MFP 1 does not execute a process based on a request other than a print request from the terminal device 300 with a low degree of security.

  In step S20, control unit 116 transfers the print job to the identification information (for example, the MAC address) of the print-only MFP (see step (8)). The print-dedicated MFP that has received the print job executes print processing based on the print job (see step (9)).

  In step S26, under the control of the control unit 116, the process execution unit 106 executes a process based on the request in step S2. The process based on this request may be a process based on a print request or a process based on a request different from the print request. If the process based on this request is a process based on a print request, the image forming unit 102 executes a print process under the control of the control unit 116. If the process based on this request is a process based on a request different from the print request, under the control of the control unit 116, the process execution unit 106 executes a process corresponding to the request.

  As described above, in step S26, the control unit 116 determines whether or not the request from the terminal device 300 having a low degree of security is a print request or a request different from the print request. The processing according to the request is executed. Upon completion of the process in the step S26, the process returns to the step S2.

  In step S28, the control unit 116 determines whether the request in step S2 is a print request. The processing in step S28 is the same as the processing in step S2. If YES is determined in step S28, the process proceeds to step S29. The case where YES is determined in this step S28 means that the print-only MFP receives the print job from the print request receiving MFP (see step (8)), and the print-only MFP receives the print job from the terminal device. Including The case where YES is determined in step S28 includes the case where the print request receiving MFP is a print-only MFP.

  In step S29, the image forming unit 102 executes a printing process under the control of the control unit 116 (see step (9)). As described above, in step S29, if the received request is a print request, the print-dedicated MFP executes a print process.

  If NO is determined in step S28, the process proceeds to S30. In S30, control unit 116 determines whether or not the request in step S2 is a request to shift to a normal state. The normal state refers to the second state. That is, in S30, the control unit 116 determines whether the information related to the request in step S2 is the second control information. If NO is determined in the step S30, the process proceeds to a step S34.

  In step S34, for a request other than the printing process, the notification unit 115 notifies that processing based on the request is not to be performed. At the same time, the control unit 116 discards the request. As described above, in step S34, the print request MFP does not execute a process corresponding to a request other than the print request.

  If YES is determined in the step S30, the process proceeds to a step S32. In step S32, the return unit 112 requests the management device 400 for the evacuation information transmitted in step S8. The management device 400 transmits the evacuation information to the requested print-only MFP. The return unit 112 returns to the state when it is controlled to the first state based on the transmitted evacuation information.

  When the process in step S32 ends, in step S36, the control unit 116 controls to the normal state (second state). After the end of the process in the step S36, the process returns to the step S2.

[Flowchart of Management Device 400]
FIG. 11 is a diagram illustrating a flowchart (part 1) of the management device 400. The control unit 412 of the management device 400 determines whether the information received in step S102 is request information. When it is determined as YES in step S102, the process proceeds to step S104. In step S104, the second determination unit 406 determines whether or not the security of the print request terminal device is low using the determination information in FIG.

  If the second determination unit 406 determines that the security of the terminal device 300 is high (YES in step S104), the process proceeds to step S106.

  In step S106, the control unit 116 transmits the high security level information to the print request receiving MFP. If NO is determined in step S104, the process proceeds to step S108.

  In step S108, control unit 412 determines whether or not a second MFP (low-function MFP) is connected to network 50 with reference to the MFP information in FIG. If control unit 412 determines that the second MFP is not connected to network 50 (NO in step S108), the process proceeds to step S110.

  In step S110, control unit 412 refers to the MFP information in FIG. 9 and selects an MFP dedicated for printing (that is, a first MFP).

  For example, in the example of FIG. 9, since MFP 1M2 is the second MFP, YES is determined in step S108. In FIG. 9, if the image forming system does not include the second MFP, the MFP 1M5 is the first MFP. Therefore, NO is determined in the step S108, and the MFP 1M5 is selected as the MFP dedicated for printing in the step S110.

  In step S112, the first control information is transmitted to the MFP (for example, MFP1M2) selected in step S110. The control unit 116 of the MFP to which the first control information has been transmitted controls to the first state (print-only state) (see step (4)).

  Next, in step S114, the MAC address (identification information) of the print-only MFP and the low security information are transmitted to the print request receiving MFP (see step (7)). The print request receiving MFP receives the low security information to recognize that the security of the print request transmission terminal device is low. At the same time, the print job (print request) received from the print request transmission terminal device is transmitted to the received MAC address (the MAC address of the print-only MFP) (see step (8)).

  In step S116, reception information is received. Next, in step S118, the control unit 412 executes block control (see the broken line in FIG. 2).

  FIG. 12 is a diagram illustrating a flowchart (part 2) of the management device 400. FIG. 12 is a diagram for explaining the first condition. The collection unit 401 performs a terminal survey in the network 50. In step S202, the collection unit 401 collects identification information of all terminal devices connected to the network 50. Next, in step S204, the update unit 402 compares the terminal identification information collected in step S202 with the terminal identification information of the existing determination information (regulation information). Further, in step S204, the update unit 402 updates the determination information in the storage unit 404 based on the identification information collected by the collection unit 401.

  In step S206, it is determined whether there is a terminal device 300 newly connected to the network 50 in the comparison process in step S204. If YES is determined in step S206, the process proceeds to step S208. If NO is determined in the step S206, the process returns to the step S202.

  In step S208, control unit 412 determines whether or not “the first MFP controlled to the first state” exists. If it is determined in step S208 that “the first MFP controlled to the first state” exists (YES in step S208), in step S210, control unit 412 determines “the first MFP controlled to the first state”. The second control information is transmitted to “1MFP”. The “first MFP controlled to the first state” is controlled to the second state upon receiving the second control information.

  FIG. 13 is a diagram illustrating a flowchart (part 3) of the management device 400. FIG. 12 is a diagram for explaining the second condition. In step S300, the control unit 412 determines whether or not “a predetermined period has elapsed since the last time that the degree of security of the print request terminal device is low”, that is, whether or not the first condition is satisfied. . If YES is determined in the step S300, the process proceeds to S208. The processing in S208 and the processing in S210 are the same as those in FIG.

  Further, the management device 400 may execute at least one of the processing of FIG. 12 and the processing of FIG. Further, when executing any one of the processing in FIG. 12 and the processing in FIG. 13, the management apparatus 400 may execute the one of the processing after the processing in FIG. 11. 11 may be performed in parallel with the processing of FIG. When the management apparatus 400 executes both the processing in FIG. 12 and the processing in FIG. 13, the management apparatus 400 may execute both of the processings after the processing in FIG. 11. The two processes may be executed in parallel.

[Effects of Image Forming System and Image Forming Apparatus]
Next, effects of the image forming system and the image forming apparatus according to the present embodiment will be described.

  (1) The image forming system of the present embodiment includes a plurality of MFPs. The plurality of MFPs include a special MFP (first MFP or second MFP) (see FIG. 1). Further, when receiving the print request from the terminal device 300, the first determination unit 104 determines whether the security of the terminal device (print request terminal device) is low (step S16). When it is determined that the security of the print request terminal device is low, the process execution unit 106 causes the print-dedicated MFP to execute a process corresponding to the print request (step (8), step S20).

  As described above, when it is determined that the security of the print request terminal device is low, the print-dedicated MFP executes the print process based on the print request of the print request terminal device. The print-only MFP does not execute any process other than the print process, that is, the process of transmitting information to the outside. Therefore, even when it is determined that the security of the print request terminal device is low, it is possible to prevent the virus from being spread on the network 50 without performing the printing process smoothly.

  (2) The special MFP (first MFP) and the second MFP that are controlled in the first state, that is, the printing-dedicated MFP, execute a printing process according to a printing request from a terminal device with low security. Therefore, the print-only MFP may be infected with a virus. If the MFP infected with the virus executes a process different from the printing process, for example, a process of storing an image in a storage area (storage) of the external device, the virus spreads from the external device or the network 50. There is a risk of doing it.

  Therefore, as shown in step S34 of FIG. 10, even if the special MFP (first MFP) or the second MFP controlled to the first state receives a request different from the print request from the print request terminal device, Do not perform processing based on different requests.

  Therefore, the virus can be prevented from spreading from the external device or the network 50.

  (3) The notifying unit 115 of the printing-dedicated MFP notifies the notifying unit 115 that processing based on a request different from the print request is not executed from the print request terminal device (see step S34). For example, the notification unit 115 causes the display display device 11b to display a message such as “other requests are not accepted because the MFP is currently a print-only MFP”. Therefore, it is possible to make the user recognize that the process based on the different request is not executed.

  Further, even if a request different from the print request is input from the user to the operation device 11a of the print-only MFP, the notification unit 115 informs that the processing based on the request different from the print request from the print request terminal device is not executed. Notify.

  (4) Further, the first determination unit 104 requests the management device 400 to determine the degree of security of the print request terminal device by transmitting the request information to the management device 400 (step (2)). , Step S14, Step S102). The second determination unit 406 of the management device 400 determines whether the security of the print request terminal device is low using the determination information of FIG. 8 (see step (3) and step S104). The determination result of the second determination unit 406 is transmitted to the print request receiving MFP (step S106). The first determination unit 104 determines whether the security of the print request terminal device is low based on the transmitted determination result. Therefore, the management device 400 can collectively manage the determination of the degree of security of the terminal device connected to the network. Further, the MFP determines the degree of security of the print request terminal device based on the determination result transmitted from the management device 400, so that the processing load on the MFP can be reduced.

  (5) The collection unit 401 collects terminal device information of each of the plurality of terminal devices 300 connected to the network 50 (Step S202). The updating unit 402 updates the determination information in FIG. 8 based on the collected terminal device information. That is, the update unit 402 updates the determination information in FIG. 8 according to whether or not the terminal device is included in the image forming system (connected to the network 50). A terminal device included in the image forming system (connected to the network 50) can be said to be a highly secure terminal device. Therefore, it is included in the image forming system. When the updating unit 402 performs such an update, the updating unit 402 can accurately update the determination information. Therefore, since the accuracy of the determination information can be increased, the management device 400 can accurately determine the degree of security of the print request terminal device.

  (6) A case where the image forming system does not include the second MFP but includes the first MFP will be described. When the second determination unit 406 determines that the security of the print request terminal device is low, the control unit 412 of the management device 400 transmits the first control information to the first MFP that has been controlled to the second state. (See step (4)). When the first MFP receives the first control information (YES in step S6), control unit 116 of the first MFP copies the evacuation information of the first MFP, and stores the copied evacuation information in management device 400. (Step (5), see step S8). Thereafter, the control unit 116 deletes the copy source evacuation information (see step S10). Thereafter, the control unit 116 controls to the first state (print-only state) (see step S12).

  If the evacuation information is not backed up before the print-only state, if a virus is present in a print request from a low-security print request terminal device, the evacuation information may leak due to the virus. May be erased. Therefore, in the present embodiment, the evacuation information in the special MFP is backed up before the print-only state is set. Therefore, the special MFP can appropriately protect the evacuation information.

  (7) The third determination unit 410 determines whether or not the special MFP controlled to the first state is controlled to the second state by determining whether the determination condition is satisfied. . It is assumed that the third determination unit 410 determines that the special MFP controlled in the first state is controlled to the second state. In this case, control unit 412 transmits the second control information and the evacuation information to the special MFP. When the special MFP receives the second control information and the evacuation information, the special MFP transmits data (such as a print job transmitted from the print request reception MFP) relating to the image forming process executed during the period in which the special MFP is controlled to the print-only state. Discard it (step S32). Further, the return unit 112 executes a return process for returning to the state before the print-only state based on the evacuation information.

  There is a possibility that data relating to the image forming processing executed during the period in which the printing operation is controlled to the print-only state is infected with a virus. If the data that may have been infected by the virus is restored to the state before the print-only state while remaining, the virus may spread. Therefore, as shown in step S32, the data relating to the image forming process executed during the period in which the control is performed in the print-only state is deleted before the return process. Thus, the return unit 112 can appropriately execute the return process while preventing the virus from spreading.

  (8) Further, if the special MFP controlled in the first state is maintained in the first state, the special MFP cannot execute processing other than the print processing. Overall productivity decreases. Therefore, when the third determination unit 410 determines that the determination condition is satisfied, it determines that the special MFP controlled in the first state is controlled to the second state.

  The judgment condition includes a first condition. Hereinafter, the first condition will be described. The collection unit 401 collects identification information of the terminal device 300 included in the image forming system (connected to the network) (Step S202). Further, the storage unit 404 stores prescribed information (information in which the identification information of the terminal device included in the image forming system is prescribed) as the determination information shown in FIG. The third determination unit 410 compares the specified information with the identification information of the terminal device 300 collected by the collection unit 401. When it is determined that the identification information of the terminal device 300 collected by the collection unit 401 is specified in the specified information, that is, when it is determined that there is no newly connected terminal device in the network (NO in step S206). Then, it is determined that the first condition is satisfied. When it is determined that the first condition is satisfied, it means that all terminal devices connected to the network are known (safe). Therefore, there is no particular problem even if the MFP in the first state is returned to the second state. Therefore, the third determination unit 410 determines that the special MFP controlled to the first state is controlled to the second state by determining that the first condition is satisfied. This can prevent the productivity of the image forming system from being reduced.

  (9) Next, a second condition as a determination condition will be described. As shown in FIG. 13, the second condition is determined to be satisfied when it is determined that a predetermined period has elapsed since the last determination that the degree of security of the print request terminal device is low (YES in S300). The third determination unit 410 makes a determination. A case where a predetermined period has elapsed since the last time that the security level of the print requesting terminal device was low is that there is no terminal device with low security level. There is no problem even if it is returned to. Therefore, the third determination unit 410 determines that the special MFP controlled to the first state is controlled to the second state by determining that the second condition is satisfied. This can prevent the productivity of the image forming system from being reduced.

  (10) Further, when the MFP 1 receives the first control information (YES in step S6), the MFP 1 transmits the first control reception information to the management device 400 (step S7). When the management device 400 receives the first control reception information (Step S116), the control unit 412 executes block control. By this block control, the reception information (print reception information) can be transmitted from the special MFP to the network 50, but information different from the reception information (print reception information) cannot be transmitted from the special MFP to the network. Depending on the virus, the print-only MFP may be able to execute processing other than printing. In this case, data inside the print-only MFP may leak onto the network 50. By performing the block control in this way, it is possible to prevent the data inside the print-only MFP from leaking to the network 50.

  (11) Next, a process in which the special image forming MFP in the first state executes a print process based on a print request will be described. The MFP 1 determines whether or not the MFP is in the first state (Step S4). The case where the first state is determined (YES in step S4) is a case where the print request receiving MFP is a special MFP (first MFP). In this case, that is, when YES is determined in step S4, the MFP 1 executes a printing process (step S29). On the other hand, if the determination in step S4 is NO and the determination in step S6 is NO, since the MFP 1 is not a special MFP, the print job is transferred to the special MFP and the print job is sent to the special MFP. To execute the printing process based on. As described above, according to the image forming system of the present embodiment, if the print request receiving MFP is a special MFP, the print request receiving MFP executes print processing, and if the print request receiving MFP is not a special MFP, Causes the special MFP to execute the printing process. Therefore, the printing process based on the printing request can be executed flexibly.

<Second embodiment>
Next, a second embodiment will be described. In the first embodiment, a terminal device with a high degree of security is a terminal device for which the collection unit 401 has already collected the terminal identification information, that is, a terminal device specified in the determination information shown in FIG. 50 terminal device). However, even if the terminal device is already connected to the network 50, if a virus is detected in the terminal device, the terminal device is not a safe total terminal. In consideration of this point, the determination information of the second embodiment is information that reflects whether a virus has been detected in the past.

  FIG. 14 is an example of the determination information according to the second embodiment. Comparing the judgment information in FIG. 8 with the judgment information in FIG. 14, FIG. 14 is different in that, in addition to the safety level information, virus presence / absence information is also associated with the terminal device ID. The virus presence / absence information is information indicating whether a virus has been detected in the terminal device 300 and, when the virus has been detected, information indicating the date and time of detection.

  In the example of FIG. 14, although the terminal device 300A4 is already connected to the network 50, a virus has been detected in the past by the virus check of the first virus check execution unit 114. Therefore, the terminal device 300A4 has a low degree of security. In the example of FIG. 14, the date and time when the virus of the terminal device 300A4 was detected are June 3, 2017, and November 16, 2017.

  For example, among the MFPs specified from the terminal devices included in the determination information of FIG. 14, the MFPs in which no virus is detected are determined as “highly secure terminal devices”. In addition, the second determination unit 406 determines that a virus has been detected in the past among “the terminal device having the terminal device ID not specified in FIG. 8” and “the terminal device having the terminal device ID specified in FIG. Is determined to be a terminal device having a low degree of security.

  That is, in the example of FIG. 14, the second determination unit 406 determines the terminal devices 300A1 to 300A3 and the terminal device 300A5 as “terminal devices with a high degree of security”. On the other hand, the second determination unit 406 determines that the terminal device 300A4 is “a terminal device with low security”.

  FIG. 15 illustrates a situation where the image forming apparatus according to the second embodiment is applied. The MFP 1 according to the second embodiment includes a first virus check execution unit 114.

  When receiving the request information transmitted from the terminal device 300 (step (1) in FIG. 15), the first virus check execution unit 114 determines whether the terminal device 300 has a virus based on the request information in FIG. Is executed (step 2 (A)). The request information includes both information relating to the print request and information relating to a request different from the print request. The first virus check process is executed by analyzing the print request information. The method of the first virus check may be any method.

  When a virus is detected by the first virus check process, the terminal device 300 that transmitted the request information is a terminal device with low security. Therefore, the discarding unit 117 of the print request receiving MFP discards the request information and does not execute a process based on the request information. This can prevent the virus of the terminal device that has transmitted the request information from being spread.

  Further, when a virus is detected by the first virus check processing, the control unit 116 transmits the low security level information to the management device 400 via the communication unit 180 (Step 2 (B)). The low security level information is information indicating that the security level of the print request terminal device is low. The updating unit 402 updates the determination information based on the low security level information.

  For example, when print request information is transmitted from terminal device 300A3 to MFP 1, first virus check execution unit 114 of MFP 1 executes a first virus check based on the print request information. If a virus is detected by the first virus check, the MFP 1 transmits low security level information indicating that the security of the terminal device 300A3 is low to the management device 400 in step (2B).

  The updating unit 402 of the management device 400 updates the determination information based on the low security information. The updating unit 402 changes the security level information of the terminal device 300A3 from “high” to “low”. At the same time, the update unit 402 inputs the date and time when the virus was detected in the virus presence information. Therefore, it is possible to increase the accuracy of determining the degree of security of the terminal device.

  When no virus is detected by the first virus check process, in step (2B), the process of step (2) in FIG. 1 is executed (the request information is transmitted to the management device 400). Subsequent processing is the same as in the first embodiment.

[Third embodiment]
FIG. 16 shows a situation where the image forming apparatus of the third embodiment is applied. In the third embodiment, the virus check is executed by the second virus check execution unit 304 of the terminal device 300.

  The control unit 412 of the management device 400, for example, sends command information for executing a virus check process on all terminal devices connected to the network (terminal devices specified in the determination information) at regular intervals. Send. The second virus check execution unit 304 of the terminal device that has received the command information executes a virus check. This virus check is executed based on a predetermined policy in each of the terminal devices connected to the network 50.

  The control unit 306 transmits result information indicating the result of the virus check by the second virus check execution unit 304 to the management device 400 (step (11) in FIG. 16). The management device 400 updates the determination information based on the result information from each of the terminal devices connected to the network 50. For example, when a virus is detected in the terminal device 300A1 based on the result information from each of the terminal devices connected to the network 50, the updating unit 402 sets the security level of the terminal device 300A1 to “low”, The virus detection date and time is input to the virus presence / absence information of the terminal device 300A1. Thereby, the judgment information can be made accurate.

  Next, a modified example of the third embodiment will be described. The control unit 412 of the management device 400 specifies a terminal device in which a virus has been detected in the past by referring to the determination information. In the example of FIG. 14, the terminal device in which a virus has been detected in the past is the terminal device 300A4. The control unit 412 transmits, to the terminal device 300A4, instruction information for executing a virus check process.

  When a virus is not detected by the virus check processing by the second virus check execution unit 304, the terminal device 300A4 including the second virus check execution unit 304 outputs non-detection information indicating that no virus was detected. Is transmitted to the management device 400. The “terminal device 300 that transmits the non-detection information to the management device 400” is a terminal device that has been infected by a virus before the virus check process, but has been eliminated by a virus removal process or the like. The management device 400 updates the determination information based on the non-detection information.

  When the management device 400 receives the virus non-detection information, the update unit 402 updates the security level information of the terminal device 300 whose terminal device ID is A4 from “low” to “high”. As described above, when no virus is detected by the second virus check, the update unit 402 updates the determination information based on the result of the detection.

  In addition, the second virus check execution unit 304 of the terminal device that has received the virus check instruction signal executes a virus check process, and when a virus is detected, it is detected that the virus has been detected, and the virus has been detected. The virus detection information whose date and time can be specified is transmitted to the management device 400. When the management device 400 receives the virus detection information, the update unit 402 updates the determination information based on the virus detection information.

  For example, as a result of the virus check processing by the second virus check execution unit 304 of the terminal device 300 having the terminal device ID A4 (the terminal device that has received the virus check instruction signal), it is determined that a virus is detected at 15:00 on June 2, 2018. I do. In this case, the terminal device 300 whose terminal device ID is A4 transmits virus detection information indicating that a virus was detected at 15:00 on June 2, 2018 to the management device 400. When the management device 400 receives the virus detection information, the updating unit 402 maintains “low” as the safety level information of the terminal device 300 whose terminal device ID is A4. At the same time, the update unit 402 updates the virus presence information so as to add “2018/6/2” to the virus presence information.

  According to the third embodiment and the modification of the third embodiment, each of the terminal devices 300 connected to the network 50 performs the virus check. The updating unit 402 updates the virus check result of each of the terminal devices 300 connected to the network 50 to the determination information. Therefore, the judgment information can be made accurate.

<Modification>
The present invention is not limited to the above embodiment, and various modifications and applications are possible. Hereinafter, modified examples applicable to the present invention will be described.

  (1) The MFP 1 may have at least a part of the functions of the management apparatus 400. For example, a case where MFP 1 has all the functions of management apparatus 400 will be described. In this case, the MFP 1 has all of the functional configuration of the management device 400 (such as the second determination unit 406). Further, the MFP 1 stores the information shown in FIGS. 8, 9, and 14. Further, MFP 1 may be either the first MFP or the second MFP.

  The MFP includes an image forming unit that executes an image forming process, and a determining unit (a second determining unit) that determines whether a security level of the terminal device is low when the image forming request transmitted from the terminal device is received. Unit 406).

  Further, when the determination unit determines that the security of the terminal device is low, the image forming apparatus in the first state in which the image forming apparatus executes the image forming processing but does not execute other processing performs the image forming processing based on the image forming request. A process execution unit that executes a process to be executed; This process is as described in the above-mentioned “Different Processes According to Four Conditions”.

  According to this modification, the number of MFPs is one. In this modification, the number of MFPs connected to the network may be two or more.

  With such an MFP, the same effects as those of the above-described embodiment can be achieved with one MFP without the need for a management device.

  (2) In the second embodiment, the virus check is executed by the MFP, and in the third embodiment, the virus check is executed by the terminal device. However, the virus check may be performed by another device. The other devices include, for example, the management device 400.

  The embodiments disclosed this time should be considered in all respects as illustrative and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims. Further, it is intended that the inventions described in the embodiments and the respective modifications are implemented individually or in combination as much as possible.

  1 image forming apparatus, 102 image forming unit, 104 first determination unit, 106 processing execution unit, 110 backup unit, 112 return unit, 114 first virus check execution unit, 115 notification unit.

Claims (16)

Comprising at least one image forming apparatus and a terminal device;
The one or more image forming devices include a special image forming device,
The special image forming apparatus includes a control unit configured to control a first state in which the image forming process is executed while other processes are not executed, and a second state in which the image forming process and the other processes are executed. 1 a special image forming apparatus or a second special image forming apparatus that executes image forming processing but does not execute other processing;
The image forming apparatus includes:
A first determination unit configured to determine whether the security of the terminal device is low when receiving the image forming request transmitted from the terminal device;
When the security degree of the terminal device is determined to be low, the special image forming apparatus in the first state further includes a process execution unit that executes a process for executing an image forming process based on the image forming request. , Image forming system.   The special image forming apparatus controlled to the first state or the second special image forming apparatus executes a process based on the different request even if a request different from the image forming request is received from the terminal device. The image forming system according to claim 1, wherein the image forming system does not perform the processing.   The image according to claim 2, further comprising a notifying unit that notifies that the special image forming apparatus controlled to the first state or the second special image forming apparatus does not execute a process based on the different request. Forming system. The image forming system further includes a management device,
The image forming apparatus, when receiving the image forming request transmitted from the terminal device, transmits to the management device request information for requesting determination of the degree of security of the terminal device,
The management device,
A storage unit that stores determination information used to determine the degree of security of the terminal device,
When the request information is received, based on the determination information, a second determination unit that determines whether the security of the terminal device is low,
A transmitting unit that transmits a result of the determination by the second determining unit to the image forming apparatus,
4. The image forming system according to claim 1, wherein the first determination unit determines whether the security of the terminal device is low based on the determination result. 5.   The management device updates the determination information based on at least one of a terminal device included in the image forming system and a terminal device in which a virus is found by a virus check. The image forming system according to claim 4, further comprising an updating unit that performs the updating. The image forming apparatus includes:
A first virus check for executing, as a virus check, a first virus check for detecting the presence or absence of a virus of the terminal device based on the request upon receiving a request including the image forming request transmitted from the terminal device; Further including an execution unit,
When a virus is detected by the first virus check for the request, low security level information indicating that the security level of the terminal device that transmitted the request is low is transmitted to the management device,
The image forming system according to claim 5, wherein the update unit updates the determination information based on the low security level information when receiving the low security level information.   The image forming system according to claim 6, wherein the image forming apparatus further includes a discarding unit that discards the request that triggers execution of the first virus check when a virus is detected by the first virus check. . The terminal device further includes a second virus check execution unit that executes a second virus check that detects the presence or absence of a virus of the terminal device indicated by the low security level information as the virus check,
When a virus is detected by the second virus check, low security level information indicating that the security level of the terminal device including the second virus check execution unit that has executed the second virus check is low is transmitted to the management apparatus. Sent to
The image forming system according to claim 6, wherein the update unit updates the determination information based on the low security information when the low security information is received. The special image forming apparatus is an image forming apparatus including the control unit,
A transmitting unit configured to control the special image forming apparatus that has been controlled to the second state to the first state when the second determining unit determines that the security of the terminal device is low; (1) transmitting control information to the special image forming apparatus;
The control unit, when receiving the first control information, transmits the evacuation information in the special image forming apparatus to the management apparatus, and thereafter erases the evacuation information in the special image forming apparatus. The image forming system according to any one of claims 4 to 8, wherein the image forming system is controlled to the first state after that. The management device further includes a third determination unit configured to determine whether to control the special image forming apparatus controlled to the first state to the second state,
The transmission unit, when the third determination unit determines that the special image forming apparatus controlled to the first state is to be controlled to the second state, sends the special image forming apparatus to the special image forming apparatus. Transmitting second control information for controlling to the two states and the evacuation information to the special image forming apparatus;
The control unit, upon receiving the second control information, discards data relating to the image forming process executed during the period in which the first state is controlled, and based on the evacuation information, The image forming system according to claim 9, wherein the image forming system returns to a state when the state is controlled. The image forming system further includes a collection unit that collects identification information of the terminal device included in the image forming system,
The third determination unit compares specified information defining identification information of the terminal device included in the image forming system with identification information of the terminal device collected by the collection unit, and the collection unit determines When it is determined that the collected identification information of the terminal device is defined in the definition information, it is determined that the special image forming apparatus that is controlling the first state is controlled to the second state. The image forming system according to claim 10.   The third image forming unit controls the special image forming apparatus to be in the first state when a predetermined period has elapsed since the third determining unit last determined that the security level of the terminal device that transmitted the image forming request was low. The image forming system according to claim 10, wherein it is determined that the apparatus is controlled to the second state. The one or more image forming apparatuses, the terminal device, and the management device are each connected to a network,
The special image forming apparatus, when receiving the image forming request, transmits reception information indicating that the image forming request has been received to the management apparatus,
The management device executes a block control for causing the special image forming apparatus to transmit the reception information to the network while preventing the special image forming apparatus from transmitting information different from the reception information to the network. The image forming system according to claim 9. The image forming apparatus includes:
As a process for the special image forming apparatus in the first state to execute an image forming process based on the image forming request, determine whether the image forming apparatus is the special image forming apparatus,
When determining that the image forming apparatus is the special image forming apparatus, executes an image forming process based on the image forming request,
When it is determined that the image forming apparatus is not the special image forming apparatus, the image forming request is transmitted to the special image forming apparatus so that the special image forming apparatus executes an image forming process based on the image forming request. The image forming system according to any one of claims 1 to 13. An image forming unit that performs an image forming process;
When receiving the image forming request transmitted from the terminal device, comprising a determining unit to determine whether the security of the terminal device is low,
When it is determined that the security of the terminal device is low, the image forming apparatus is in a first state in which the image forming apparatus executes the image forming process but does not perform other processes, and executes the image forming process based on the image forming request. An image forming apparatus comprising: a process execution unit that executes a process. A terminal device transmitting an image forming request to the image forming device;
The image forming apparatus that has received the image formation request transmits request information to the management apparatus to request the management apparatus to determine whether the security of the terminal apparatus that has transmitted the image formation request is low. Steps to
The management device that has received the request information, determining whether the security degree of the terminal device that has transmitted the image forming request is low,
When the management device determines that the security level of the terminal device that has transmitted the image formation request is low, the image forming device that is controlled to the second state in which the image forming process and other processes are executed is performed. Controlling the image forming apparatus controlled to the first state to execute the processing while not executing other processing, and causing the image forming apparatus controlled to the first state to execute the image forming processing based on the image forming request. .

Images