JP2012160851A - Image forming apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an image forming apparatus that prevents leakage of print data at the hands of a robber.SOLUTION: An image forming apparatus 101 encrypts print information received from an external device 1000 with an encryption key and stores the encrypted information in storage means, and forms images based on the stored print information. The image forming apparatus includes: a communication unit 107 that communicates with an external device; a storage unit 116 that stores information about a predefined external device; a determination unit 113 that determines whether or not communication with the external device is possible based on the information about the external device stored in the storage unit; a power activation detection unit 103 that detects activation of power; and an encryption key creation unit 115 that, upon detection of the activation of power by the power activation detection unit and determination of inability to communicate with the external device by the determination unit, recognizes that the apparatus has been moved, and creates an encryption key again, which is different from the previous one.

Description

  The present invention relates to an image forming apparatus including a storage unit that encrypts and saves print data.

  Conventionally, a large-capacity nonvolatile memory such as an HDD (Hard Disk Drive) is installed, and print data acquired from the outside is temporarily stored in the nonvolatile memory, and the print data is stored in accordance with the print mode. An image forming apparatus that reads and prints appropriately is known.

  In such an image forming apparatus, when storing print data acquired from the outside, the print data is encrypted with an encryption key so that even if the apparatus is stolen, the data stored in the HDD or the like cannot be easily decrypted. By doing so, the confidentiality of data is ensured (for example, Patent Document 1).

JP 2008-269246 A

  However, if there is an encryption key in the device as in the above prior art, the encrypted data may be unintentionally decrypted and read out by the encryption key at the theft destination. Therefore, it was not sufficient in terms of ensuring confidentiality.

  The present invention has been made in view of the above problems. When an unauthorized movement (theft) of an apparatus is recognized for an image forming apparatus that stores print data encrypted with an encryption key, the encryption key is changed to another encryption key. An object of the present invention is to provide an image forming apparatus in which leakage of stored data is prevented by rewriting the data.

  That is, the present invention provides an image forming apparatus that encrypts print information received from an external apparatus with an encryption key and saves it in a storage unit, and forms an image based on the stored print information. A communication unit that communicates with the external device, a storage unit that stores information on a predetermined external device, and a determination unit that determines whether communication with the external device is possible or not based on the information on the external device stored in the storage unit A power-on detection unit that detects power-on, and the power-on detection unit detects power-on, and if the determination unit determines that communication with the external device is impossible, the device is recognized as moved. And an encryption key generation unit for generating again an encryption key different from the encryption key.

  According to the present invention, communication is performed with a predetermined external device when the power is turned on, and if the communication is impossible, it is determined that the device (image forming device) has been illegally moved (stolen), and another encryption key is reproduced. Therefore, the theft destination cannot decrypt the encrypted data with the changed encryption key, and is effective in preventing leakage of confidential data stored in the apparatus.

1 is a block diagram illustrating a configuration of an image forming apparatus according to Embodiment 1. FIG. It is a figure which shows the structural example of print data. It is a figure which shows the example of a status display to an operation panel part. 3 is a flowchart illustrating processing when power is turned on according to the first embodiment. 6 is a flowchart illustrating boot processing according to the first embodiment. 6 is a flowchart illustrating initialization processing of a main processing unit according to the first embodiment. It is a flowchart which shows the initialization process (1) of the system management part by Example 1. FIG. It is a flowchart which shows the initialization process (2) of the system management part by Example 1. FIG. 6 is a flowchart illustrating an initialization process of a setting value management unit according to the first embodiment. 6 is a flowchart illustrating an initialization process of a movement detection unit according to the first embodiment. 6 is a flowchart illustrating initialization processing of an operation panel unit according to the first embodiment. 6 is a flowchart illustrating initialization processing of an encryption key generation unit according to the first embodiment. 6 is a flowchart illustrating HDD initialization processing according to the first embodiment. It is a figure which shows an example of the menu tree by Example 1. FIG. FIG. 6 is a block diagram illustrating a configuration of an image forming apparatus according to a second embodiment. 10 is a flowchart illustrating initialization processing of an operation panel unit according to the second embodiment. It is a figure which shows an example of the menu tree by Example 2. FIG.

  Hereinafter, embodiments of an image forming apparatus according to the present invention will be described with reference to FIGS. In this embodiment, a printer is described as an example of the image forming apparatus.

First, the configuration of an image forming apparatus (printer) 101 according to the first embodiment will be described with reference to FIG. FIG. 1 is a block diagram illustrating the configuration of the image forming apparatus according to the first embodiment.
As shown in FIG. 1, an image forming apparatus 101 according to the present exemplary embodiment includes a main processing unit 102, a boot processing unit (power-on detection unit) 103 connected to the main processing unit 102, a processing storage unit 104, and a printing unit 105. , HDD (storage means) 106 and the like.

The image forming apparatus 101 is connected to an information processing apparatus 1000 (for example, a personal computer) as an external apparatus via a communication line 1001 (for example, a network, USB, IEEE 1284, serial interface, or the like can be used). Status confirmation data and print data transmitted from the information processing apparatus 1000 are received via the communication line 1001.
The image forming apparatus 101 notifies the information processing apparatus 1000 of status information according to the received status confirmation data, and performs a printing process based on the received print data.

Hereinafter, the configuration of the image forming apparatus 101 will be described in detail.
The main processing unit 102 includes an interface unit (communication unit) 107, an image forming unit 108, a system management unit 109, a job management unit 110, an operation panel unit (operation input unit) 111, a setting value management unit 112, a movement detection unit ( A determination unit) 113, an HDD control unit (formatting unit) 114, an encryption key generation unit 115, a setting value storage unit (storage unit, password storage unit for authentication) 116, and an encryption processing unit 117.

The interface unit 107 is a processing unit that receives print data (see FIG. 2) from the information processing apparatus 1000 via the communication line 1001 and analyzes the print data.
In other words, the interface unit 107 analyzes the print information command of the received print data, and if the printing method is normal printing, sends the print job data to the image forming unit 108, whether the printing method is confidential printing or spool printing. For example, the received print job data is sent to the job management unit 110.

Here, normal printing is a printing method in which print data received from the outside is sequentially printed while being expanded into bitmap data. Confidential printing is a printing method in which the sending side designates the receiving user, sends print data, authenticates the user designated on the receiving side, and allows the user to print only when the authentication is successful. . Spool printing is a printing method in which received print data is spooled (saved) in storage means, and printing is performed while reading the saved data after the reception is completed.
Therefore, when confidential printing or spool printing is designated, the received print data is stored in a large-capacity memory such as the HDD 106, for example.

  If the received print information command is a printer environment setting command, the interface unit 107 analyzes the printer environment setting command and sends the printer environment information to the setting value management unit 112.

  The image forming unit 108 is a processing unit that edits and expands the print job data in the page description language format acquired from the interface unit 107, and creates raster data that can be printed by the printing unit 105. The created raster data is: It is sent to the printing unit 105.

The system management unit 109 is a processing unit that controls each processing unit according to the state of the image forming apparatus 101 (initialization, standby, printing, error state, etc.).
That is, the system management unit 109 includes an interface unit 107, an image forming unit 108, a printing unit 105, a job management unit 110, an operation panel unit 111, a setting value management unit 112, a movement detection unit 113, an HDD control unit 114, and an encryption key generation. Initialization is instructed to each processing unit of the unit 115, and each processing unit is instructed to respond according to the apparatus status, such as an error that has occurred in each processing unit or a status change of a printer job.
For example, the system management unit 109 instructs the operation panel unit 111 to display the device status, and causes the operation panel unit 111 to display the printer status (see FIG. 3).

  The job management unit 110 is a processing unit that controls a job from when the interface unit 107 receives print data from the information processing apparatus 1000 to when the printing unit 105 completes printing.

The operation panel unit 111 includes an LCD panel that displays an apparatus status and the like, various switches and buttons (not shown) for operation, and plays a role of a man-machine interface between the image forming apparatus 101 and the user. It is a processing unit.
For example, the operation panel unit 111 acquires menu setting value information managed by the setting value management unit 112 and displays it on the LCD panel when the user operates the menu.
Further, the operation panel unit 111 displays statuses according to various states such as initialization, standby, paper jam, and the like, as shown in FIGS. 3A to 3C, according to instructions from the system management unit 109. I do.

The setting value management unit 112 is a processing unit that stores and manages information for setting the device environment in the setting value storage unit 116.
In response to an inquiry about various menu setting information from the operation panel unit 111, the setting value management unit 112 refers to the stored information in the setting value storage unit 116 and displays the currently set menu setting value information on the operation panel unit. 111 is notified.

Also, the set value management unit 112 is in accordance with instructions from the processing units of the interface unit 107, the image forming unit 108, the printing unit 105, the operation panel unit 111, the movement detection unit 113, the HDD control unit 114, and the encryption key generation unit 115. The printer environment setting values such as the paper size and paper feed tray stored in the setting value storage unit 116 are changed to the designated setting values.
Further, the movement information is changed according to an instruction from the movement detection unit 113. Note that the movement information is stored in the processing storage unit 104.

Further, the setting value management unit 112 reads the saved information in the setting value storage unit 116 in response to an inquiry about the setting values of the device environment such as the paper size and the paper feed tray made by each processing unit, and is currently set. Is notified of the set value. Note that the information stored in the processing storage unit 104 is notified in response to the movement information inquiry from the movement detection unit 113.
Also, the setting value management unit 112 receives the encryption key generated by the encryption key generation unit 115 and stores it in the setting value storage unit 116. In addition, in response to an encryption key inquiry from the encryption key generation unit 115, the setting value management unit 112 The encryption key read from the storage unit 116 is notified.

  Further, the setting value management unit 112 stores the print job data for confidential printing and spool printing received by the interface unit 107 in the HDD 106 according to an instruction from the job management unit 110.

  The movement detection unit 113 is a processing unit that determines whether the image forming apparatus 101 has been illegally moved (stolen) when the power is turned on. The movement of the apparatus is determined based on whether communication with the information processing apparatus 1000 is possible or not.

The HDD control unit 114 is a processing unit that controls writing and reading of data in the HDD 106 via the encryption processing unit 117.
In addition, the HDD control unit 114 acquires the encryption key from the set value management unit 112 when the power is turned on, and sets it in the encryption processing unit 117. Further, the initialization information of the HDD 106 is acquired from the setting location management unit 112, and the HDD 106 is initialized based on the initialization information.
Further, the HDD control unit 114 reads confidential print or spool print job data from the HDD 106 via the encryption processing unit 117 in accordance with an instruction from the job management unit 110 when starting confidential printing or spool printing. 110.

  The encryption key generation unit 115 is a processing unit that generates an encryption key used by the encryption processing unit 117.

  The set value storage unit 116 is a non-volatile memory such as an EEPROM (Electrically Erasable Programmable Read only Memory), and stores set values of various device information.

The encryption processing unit 117 is a processing unit that encrypts data to be written to the HDD 106 using the encryption key created by the encryption key generation unit 115 and decrypts data read from the HDD 106.
The above is the detailed description of the configuration of the main processing unit 102.

  Next, the boot processing unit 103 is a processing unit that initializes each hardware for starting up the system when the power is turned on. When the initialization in the boot processing unit 103 is completed, the subsequent control is taken over by the system management unit 109, and the system management unit 109 initializes each processing unit.

  The processing storage unit 104 is a volatile memory (for example, RAM: Random Access Memory) for temporarily storing data and information used for various processes in the main processing unit 102.

The printing unit 105 is a part that prints raster data acquired from the image forming unit 108 on a sheet in accordance with an instruction from the system management unit 109. At this time, print information such as paper size information and paper feed information is acquired from the set value management unit 112.
In addition, the printing unit 105 performs its own initialization according to an instruction from the system management unit 109. If an error (for example, cover open or paper jam) occurs during initialization or printing, the system management unit 109 is notified of this.

  The HDD 106 is a large-capacity nonvolatile memory, and initializes itself in accordance with an instruction from the HDD control unit 114. Also, writing and reading of encrypted print job data and raster data are performed.

  Next, the operation of the image forming apparatus 101 having the above configuration will be described with reference to FIGS.

First, processing at power-on will be described with reference to FIGS. FIG. 4 is a flowchart showing processing upon power-on according to the first embodiment, FIG. 5 is a flowchart showing boot processing according to the first embodiment, and FIG. 6 is a flowchart showing initialization processing of the main processing unit according to the first embodiment. is there.
In FIG. 4, when the power is turned on, first, the boot processing unit 103 is activated and initializes itself (S101), and then the main processing unit 102 is activated and initializes itself (S102). .

  Here, in the initialization process of the boot processing unit (S101 in FIG. 4), as shown in FIG. 5, initialization of each device driver such as RAM, EEPROM, HDD, panel, interface, etc. is executed (S103). After the initialization is completed, the right to execute the process is transferred to the main processing unit 102 (S104).

In the initialization process of the main processing unit 102 (S102 in FIG. 4), first, as shown in FIG. 6, the system management unit 109 performs its own initialization (1) (S105).
Next, the set value management unit 112 initializes itself (S106).
Next, the interface unit 107 initializes itself (S107).
Next, the movement detector 113 initializes itself (S108).
Next, the image forming unit 108 initializes itself (S109).
Next, the printing unit 105 initializes itself (S110).
Next, the job management unit 110 initializes itself (S111).
Next, the operation panel unit 111 initializes itself (S112).
Next, the encryption key generator 115 initializes itself (S113).
Next, the HDD control unit 114 initializes itself and the encryption processing unit 117 and the HDD 106 (S114).
Next, the system management unit 109 initializes itself (2) (S115).
Note that each initialization process in S106 to S115 is performed according to an initialization instruction from the system management unit 109.

Here, based on FIG. 7, the initialization process (1) of the previous system management unit 109 (S105 in FIG. 6) will be described in detail. FIG. 7 is a flowchart illustrating the initialization process (1) of the system management unit according to the first embodiment.
In FIG. 7, first, the system management unit 109 initializes itself, such as securing a memory area for variables used by the system management unit itself (S116).
Next, the system management unit 109 displays “Initialization” (FIG. 3) on the LCD panel of the operation panel unit 11 (S117), and issues an initialization instruction to each processing unit (S118). Then, the initialization process (1) is terminated.

Next, the initialization process (2) (S115 in FIG. 6) of the system management unit 109 will be described in detail based on FIG. FIG. 8 is a flowchart illustrating the initialization process (2) of the system management unit 109 according to the first embodiment.
In FIG. 8, first, the system management unit 109 confirms the completion of initialization in each processing unit based on the initialization completion notification from each processing unit (S119).
Upon confirming the completion of initialization, the system management unit 109 instructs each processing unit to shift to a standby state (S120) and “can print” on the LCD panel of the operation panel unit 111 (FIG. 3). Is displayed (S121), and the initialization process (2) ends.

Next, details of the initialization processing (S106 in FIG. 6) of the previous set value management unit 112 will be described based on FIG. FIG. 9 is a flowchart illustrating the initialization process of the setting value management unit according to the first embodiment.
In FIG. 9, first, the set value management unit 112 initializes itself, such as securing variables and memory used by the set value management unit itself (S122).
Next, the set value management unit 112 reads out device information from the set value storage unit 116, and sets a set value for each piece of information (S123). Further, the initial value “no movement” is set in the movement information (S124), and the initial value “OFF” is set in the HDD format execution information (S125).
Next, the set value management unit 112 notifies the system management unit 109 of the completion of initialization (S126), and this process ends.

Next, details of the initialization process (S108 in FIG. 6) of the previous movement detection unit 113 will be described with reference to FIG. FIG. 10 is a flowchart illustrating the initialization process of the movement detection unit according to the first embodiment.
In FIG. 10, first, the movement detection unit 113 initializes itself, such as securing variables and memory used by the movement detection unit itself (S127).
Next, the movement detection unit 113 acquires the management host information registered in advance in the setting value management unit 112 from the setting value storage unit 116 according to the menu tree (hierarchical menu) shown in FIG. 14 (S128). An operation permission request is notified to the management host (that is, the information processing apparatus 1000) corresponding to the management host information (S129).

  Next, the movement detecting unit 113 confirms whether or not the operation permission has been received as a response to the operation permission request from the management host (S130), and if the operation permission has been received from the management host, the system management unit 109 is notified of the completion of initialization (S132), and this process ends.

  On the other hand, when the operation permission cannot be received from the management host in S130, the movement detection unit 113 instructs the setting value management unit 112 to set the movement information to “with movement” (S131), and proceeds to S132. .

  In the above processing, information exchange (operation permission request and operation permission) with the information processing apparatus 1000 serving as the management host is performed by transmission / reception processing of the interface unit 107 performed via the communication line 1001.

Next, details of the initialization process (S112 in FIG. 6) of the previous operation panel unit 111 will be described with reference to FIG. FIG. 11 is a flowchart illustrating the initialization process of the operation panel unit according to the first embodiment.
In FIG. 11, first, the operation panel unit 111 initializes itself, such as securing a memory area for variables used by the operation panel unit itself (S133).
Next, the operation panel unit 111 notifies the system management unit 109 of the completion of initialization (S134), and this process ends.

Next, the initialization process (S113 in FIG. 6) of the previous encryption key generation unit 115 will be described in detail based on FIG. FIG. 12 is a flowchart illustrating the initialization process of the encryption key generation unit according to the first embodiment.
In FIG. 12, first, the encryption key generation unit 115 initializes itself, such as securing a memory area for variables used by the encryption generation unit itself (S135).
Next, the encryption key generation unit 115 acquires movement information from the setting value storage unit 116 via the setting value management unit 112 (S136), and determines whether or not the apparatus has been moved based on the movement information. (S137).
If it is determined in S137 that there is a movement, the process proceeds to S140. If it is determined that there is no movement, the process proceeds to S138.

In S138, the encryption key generation unit 115 reads the encryption key via the setting value management unit 112 (S138), and determines whether or not the encryption key exists in the setting value storage unit 116 (S139).
If the encryption key does not exist in S139, the process proceeds to S140. If the encryption key exists, the system management unit 109 is notified of the completion of initialization (S143), and the process ends.
If the encryption key is set (written to the set value storage unit 116) at the time of factory shipment, the processes of S138 and S139 can be omitted.

  On the other hand, if it is determined in S137 that the apparatus has been moved, the encryption key generation unit 115 generates a new encryption key different from the encryption key currently used, and stores the created encryption key as a set value. The management unit 112 is instructed (S140). The setting value management unit 112 overwrites the newly generated encryption key in the encryption key storage area of the setting value storage unit 116 according to the instruction of the encryption key generation unit 115 (S141).

  The encryption key may be created by using the encryption key currently used and the serial number unique to the device, and calculating both of them, and the time data based on the real-time clock etc. and the serial number unique to the device You may create by arithmetic processing.

  Next, the encryption key generation unit 115 instructs the setting value management unit 112 to set the HDD format execution information to “ON”, and the setting value management unit 112 receives the instruction from the encryption key generation unit 115. “ON” is set in the HDD format execution information (S142), and the process proceeds to S143.

  As described above, in this embodiment, there is one management host (information processing apparatus 1000). However, even if there are a plurality of management hosts (a plurality of management host information is registered in the setting value management unit 112). good. However, in this case, if the operation permission can be acquired (communication is possible) from any of the plurality of management hosts, the movement information “with movement” is not set and the encryption key is regenerated in S140. Absent.

Next, details of the initialization process (S114 in FIG. 6) of the previous HDD 106 will be described based on FIG. FIG. 13 is a flowchart illustrating the HDD initialization process according to the first embodiment.
In FIG. 13, first, the HDD control unit 114 performs its own initialization, such as securing a memory area for variables used by the HDD control unit itself (S144).
Next, the HDD control unit 114 reads the encryption key from the setting value storage unit 116 via the setting value management unit 112 (S145), and sets the encryption key in the encryption processing unit 117, thereby the encryption processing unit 117. Is initialized (S146).

Next, the HDD control unit 114 acquires HDD format execution information from the setting value management unit 112 (S147), and determines whether or not to format the HDD 106 (S148).
If it is determined in S148 that the HDD 106 is to be formatted (HDD format execution information is “ON”), the process proceeds to S149. If it is determined that the HDD 106 is not to be formatted (HDD format execution information is “OFF”), Proceed to S150.

In S149, the HDD control unit 114 acquires information such as the number of partitions of the HDD 106 and the size of each partition from the setting value storage unit 116 via the setting value management unit 112, and formats the HDD 106 based on these information. As a result, all data stored in the HDD 116 is erased.
Next, the HDD control unit 114 acquires the file system information of the HDD 106 from the setting value storage unit 116 via the setting value management unit 112, and initializes the HDD 106 (S150).
Next, the HDD control unit 114 notifies the system management unit 109 of the completion of initialization (S151), and this process ends.

  As described above, according to the first embodiment, communication with the management host (the information processing apparatus 1000) is performed when the power is turned on. If communication is impossible, the apparatus (image forming apparatus 101) is illegally moved (stolen). In this case, the encryption key different from the current encryption key is regenerated and the HDD 106 is formatted. Therefore, it is impossible to read data from the HDD 106 at the theft destination, and leakage of confidential data is ensured. Can be prevented.

Next, the configuration of the image forming apparatus 201 according to the second embodiment will be described with reference to FIG. FIG. 15 is a block diagram illustrating a configuration of an image forming apparatus according to the second embodiment.
The image forming apparatus 201 (printer) according to the present embodiment is different from the first embodiment (FIG. 1) in that a recognition unit 205 is added to the main processing unit 202 and an operation panel unit as shown in FIG. The function of the setting value management unit 204 and the setting value storage unit 206 is expanded in order to store and manage a password input process for authentication in 203 and an authentication password that is collated with the input password. This is the point.
In addition, the same number is attached | subjected to the process part similar to Example 1, and description is abbreviate | omitted.

  The recognition unit 205 is a processing unit that collates the password sent from the operation panel unit 203 with the authentication password acquired from the set value management unit 204 and notifies the operation panel unit 203 of the collation result.

  Next, initialization processing of the operation panel unit will be described with reference to FIG. 16 regarding processing when the image forming apparatus 201 is turned on. FIG. 16 is a flowchart illustrating the initialization process of the operation panel unit according to the second embodiment. Processing other than this processing is the same as that in the first embodiment, and a description thereof will be omitted.

In FIG. 16, first, the operation panel unit 203 initializes itself, such as securing a memory area for variables used by the operation panel unit itself (S201).
Next, the operation panel unit 203 acquires movement information from the setting value storage unit 206 via the setting value management unit 204 (S202), and whether the apparatus (image forming apparatus 201) has been moved based on the movement information. It is determined whether or not (S203).
If it is determined in S203 that there is a movement, the process proceeds to S204, and if it is determined that there is no movement, the process proceeds to S212.

In S204, the operation panel unit 203 reads the encryption key from the setting value storage unit 206 via the setting value management unit 204, and temporarily saves it in the processing storage unit 104 formed of a volatile memory (S204).
Next, the operation panel unit 203 instructs the setting value management unit 204 to delete the encryption key, and the setting value management unit 204 deletes the encryption key stored in the setting value storage unit 206 ( S205).

Next, the operation panel unit 203 displays a message on the LCD panel requesting password input for authentication, and waits for the administrator to input the password (S206).
When the password is input, the operation panel unit 203 acquires the authentication password registered in advance in the set value management unit 204 from the set value storage unit 116 in accordance with the menu tree shown in FIG. 17 (S207).
Next, the operation panel unit 203 determines whether the password input by the administrator matches the authentication password acquired from the setting value storage unit 116 (S208). The process proceeds to S209, and if it is determined that they do not match, the process proceeds to S212.
The input password and the authentication password are collated in the recognition unit 205, and the collation result is notified to the operation panel unit 203.

In step S209, the operation panel unit 203 instructs the setting value management unit 204 to store again the encryption key saved in the processing storage unit 104 in step S204 in the setting value storage unit 206. The setting value management unit 204 The encryption key is read from the processing storage unit 104 and stored in the set value storage unit 206.
Next, the operation panel unit 203 instructs the setting value management unit 204 to set “no movement” in the movement information, and the setting value management unit 204 sets “no movement” in the movement information (S210). ). The operation panel unit 203 instructs the setting value management unit 204 to set “OFF” in the HDD format execution information, and the setting value management unit 204 sets “OFF” in the HDD format execution information. (S211).

  In step S212, the operation panel unit 203 notifies the system management unit 109 of the completion of initialization, and the process ends.

  As described above, according to the second embodiment, in addition to obtaining the same effect as the first embodiment, in particular, in the second embodiment, when the password inputted by the administrator is authenticated even if the movement of the device is recognized. Since the encryption key is not regenerated and the HDD is not formatted, for example, if the administrator forgets to change the management host information when moving the device, it detects that communication with the management host is disabled. Therefore, it is possible to avoid the inconvenience that the data stored in the HDD 106 is unintentionally erased by judging that the device has been illegally moved (stolen), and the operability is improved compared to the first embodiment. Yes.

  In the present exemplary embodiment, the printer is described as an example of the image forming apparatus. However, the present invention is also applicable to an apparatus having a printing function such as a copying machine or a FAX.

101 Printer (image forming apparatus)
103 Boot processing unit (power-on detection unit)
106 HDD (storage means)
107 Interface unit (communication unit)
111 Operation panel section (operation input section)
113 Movement detection unit (determination unit)
114 HDD control section (format section)
115 encryption key generation unit 116 setting value storage unit (storage unit, password storage unit for authentication)
205 Recognition unit 1000 Information processing device (external device)

Claims (4)

In an image forming apparatus that encrypts print information received from an external device with an encryption key and saves it in a storage unit, and forms an image based on the saved print information,
A communication unit that communicates with the external device;
A storage unit for storing information of a predetermined external device;
A determination unit that determines whether communication with the external device is possible or not based on information of the external device stored in the storage unit;
A power-on detector that detects power-on,
When the power-on detection unit detects power-on, and the determination unit determines that communication with the external device is impossible, the encryption unit recognizes that the device has been moved and regenerates an encryption key different from the encryption key. An image forming apparatus comprising: a key generation unit.   The image forming apparatus according to claim 1, further comprising a formatting unit that formats the storage unit when the encryption key reproducing unit regenerates the encryption key. An operation input section for entering a password;
An authentication password storage unit for storing an authentication password;
A recognition unit for comparing the input password and the authentication password stored in the authentication password storage unit;
The encryption key reproduction unit does not regenerate the encryption key when the recognition unit recognizes a match between the password and the authentication password even if the movement of the device is recognized when the power is turned on. The image forming apparatus according to claim 1.   The storage unit stores information of a plurality of external devices in advance, and the determination unit reproduces the encryption key only when it is determined that communication with a plurality of external devices based on these information is impossible. The image forming apparatus according to any one of claims 1 to 3, wherein the image forming apparatus is configured.

Images