JP2013094980A - Electronic apparatus and image forming apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic apparatus configured to easily detect alteration of software.SOLUTION: The electronic apparatus includes: a ROM 113a storing software 500; an attachment part 115 to which an external storage medium 400 storing alteration detection software 600 is attached; and a main control part 110 comparing data in the ROM 113a with data in the external storage medium 400, to determine whether the software 500 has been altered or not and perform notification processing of the determination result.

Description

  The present invention relates to an electronic apparatus and an image forming apparatus.

  In an electronic apparatus such as an image forming apparatus, software for performing basic hardware control is usually stored in a memory. For example, if the software in the memory is tampered with by a malicious user, the electronic device malfunctions. In order to suppress the occurrence of such an inconvenience, various techniques relating to software tampering checks in memory have been proposed (see, for example, Patent Document 1).

  In Patent Document 1, an electronic device (communication device) and a falsification detection device are connected to be communicable. Then, when checking the alteration of the software in the memory, the falsification detection device designates the memory range and instructs the electronic device to calculate the hash value, and the electronic device calculates the hash value for the specified memory range. To the tamper detection device. The tampering detection apparatus that has received the hash value from the electronic device determines whether the software in the memory has been tampered with by comparing the hash value received from the electronic device with the regular hash value.

JP 2009-43085 A

  In Patent Document 1, when performing a software tampering check, an electronic device (communication device) and a tampering detection device must be communicably connected. Therefore, if the communication environment is not in place, it becomes difficult to connect the electronic device and the falsification detection device so that they can communicate with each other, and software tampering check cannot be performed.

  SUMMARY An advantage of some aspects of the invention is that it provides an electronic apparatus and an image forming apparatus capable of easily checking software tampering.

  In order to achieve the above object, an electronic device according to the present invention includes a storage unit storing software and an external storage storing tampering check software for checking tampering of software (software stored in the storage unit). Compares the memory contents of the mounting unit for mounting media with the storage unit that stores the software and the external storage medium that stores the tampering software when the external storage medium is mounted on the mounting unit. And a control unit that determines whether or not the software stored in the storage unit has been tampered with and performs a process for notifying the determination result. The external storage medium is a portable memory such as a USB memory.

  Thus, in the electronic apparatus of the present invention, the software tampering check is performed by the control unit of the electronic apparatus main body. Further, the software tampering check by the control unit is performed by comparing the memory contents of the storage unit storing the software and the external storage medium storing the tampering check software. In other words, the tampering check of the software can be performed simply by mounting the external storage medium on the mounting unit. Therefore, it is not necessary to communicate with a dedicated device for checking software tampering (it is not necessary to construct a system for checking software tampering). As a result, software tampering check can be easily performed.

  Here, the tampering check software stored in the external storage medium is, for example, the same software as the software stored in the storage unit (the version is also the same). Therefore, if the software stored in the storage unit is not falsified, the memory contents (dump data) of the storage unit and the external storage medium are the same as each other, and if the software stored in the storage unit is falsified, The memory contents (dump data) of the storage unit and the external storage medium are different from each other. Therefore, whether or not the software stored in the storage unit has been altered by comparing the memory contents (dump data) of the storage unit storing the software and the external storage medium storing the tampering check software. Can be determined.

  The above configuration preferably further includes a display unit for displaying information indicating the device status, and the control unit causes the display unit to display a determination result as to whether the software has been tampered with. If comprised in this way, the judgment result of whether the software is falsified can be alert | reported easily to a user.

  In the above configuration, the control unit preferably stores the determination result as to whether or not the software has been tampered with in an external storage medium. With this configuration, even if the notification means such as the display unit itself is not provided in the electronic device, whether the software has been tampered with by accessing the external recording medium with the user terminal or the like. The determination result can be notified to the user.

  The image forming apparatus of the present invention includes the electronic device described above. In the image forming apparatus configured as described above, it is possible to easily check software tampering.

  As described above, according to the present invention, it is possible to easily check software tampering.

1 is a schematic view of an image forming apparatus according to an embodiment of the present invention. 1 is a block diagram showing a hardware configuration of the image forming apparatus shown in FIG. FIG. 3 is a diagram for explaining software stored in a ROM (storage unit) of the image forming apparatus illustrated in FIG. 1. FIG. 3 is a diagram for explaining a software tampering check performed in the image forming apparatus illustrated in FIG. 1. FIG. 1 is a diagram of a screen displayed on the operation panel (display unit) of the image forming apparatus shown in FIG. FIG. 1 is a diagram of a screen displayed on the operation panel (display unit) of the image forming apparatus shown in FIG. FIG. 1 is a flowchart for explaining the operation of the image forming apparatus shown in FIG. 1 (operation when performing a software tampering check).

  Hereinafter, an overall configuration of an image forming apparatus 100 including an electronic apparatus according to an embodiment of the present invention will be described with reference to FIG.

  The image forming apparatus 100 according to the present embodiment is a multifunction machine capable of executing a plurality of types of jobs such as a copy, a printer, a scanner, and a fax machine. The image forming apparatus 100 includes an operation panel 101, an image reading unit 102, a paper feeding unit 103, a conveyance path 104, an image forming unit 105, a fixing unit 106, and the like.

  The operation panel 101 includes a liquid crystal display unit 11 (display unit) whose display surface is covered with a touch panel. The liquid crystal display unit 11 displays a menu for performing various settings and setting keys (soft keys), and also displays a message indicating the device status and the like. The operation panel 101 is also provided with a numeric keypad 12 (hard key) for accepting setting instructions that require numerical input, a start key 13 (hard key) for accepting instructions for starting execution of various jobs, and the like. Yes.

  The image reading unit 102 reads a document and generates image data. Although not shown, the image reading unit 102 is provided with optical system members such as an exposure lamp, a mirror, a lens, and an image sensor. Then, when reading the document placed on the placement reading contact glass 21, the image reading unit 102 irradiates the document with the light of the exposure lamp and A / D converts the output value of the image sensor that receives the reflected light. After that, image data is generated by performing various corrections (such as shading correction) on the data after A / D conversion. Thus, printing can be performed based on the image data obtained by the original reading operation by the image reading unit 102. In addition, image data obtained by a document reading operation by the image reading unit 102 can be accumulated.

  The image reading unit 102 is provided with a document cover 22. When the original is read by the placement reading contact glass 21, the original placed on the placement reading contact glass 21 can be pressed by the original cover 22. The document cover 22 may have a function as a document conveying device. In this case, the manuscript cover 22 can feed manuscripts one by one to the feed reading contact glass 23.

  The paper feed unit 103 has a plurality of cassettes 31 for storing paper P, and supplies the paper P stored in the plurality of cassettes 31 to the conveyance path 104. The paper feed unit 103 is provided with a pickup roller 32 that pulls out the stored paper P, a separation roller pair 33 for suppressing double feeding of the paper P, and the like.

  The conveyance path 104 conveys the paper P inside the apparatus. More specifically, the paper P supplied from the paper supply unit 103 passes through the image forming unit 105 and the fixing unit 106 in this order by the conveyance path 104 and is guided to the discharge tray 41. A plurality of transport roller pairs 42 that transport the paper P are provided in the transport path 104. Further, a registration roller pair 43 is also provided that waits for the paper P in front of the image forming unit 105 and sends the paper P to the image forming unit 105 in time.

  The image forming unit 105 forms a toner image based on the image data, and transfers the toner image onto the paper P. The image forming unit 105 includes a photosensitive drum 51, a charging device 52, an exposure device 53, a developing device 54, a transfer roller 55, a cleaning device 56, and the like.

  In the toner image formation process and the toner image transfer process to the paper P, first, the photosensitive drum 51 is rotationally driven, and the surface of the photosensitive drum 51 is charged to a predetermined potential by the charging device 52. The exposure device 53 outputs a light beam L based on the image data, and scans and exposes the surface of the photosensitive drum 51. As a result, an electrostatic latent image is formed on the surface of the photosensitive drum 51. Subsequently, the developing device 54 supplies toner to the electrostatic latent image formed on the surface of the photosensitive drum 51 and develops it.

  The transfer roller 55 is in pressure contact with the surface of the photosensitive drum 51. Thereafter, the registration roller pair 43 measures the timing and causes the paper P to enter between the transfer roller 55 and the photosensitive drum 51. At this time, a predetermined voltage is applied to the transfer roller 55. As a result, the toner image on the surface of the photosensitive drum 51 is transferred to the paper P. When the transfer process is finished, the cleaning device 56 removes the toner remaining on the surface of the photosensitive drum 51.

  The fixing unit 106 heats and presses the toner image transferred onto the paper P to fix it. The fixing unit 106 includes a fixing roller 61 having a built-in heat source, and a pressure roller 62 that is pressed against the fixing roller 61. The paper P on which the toner image is transferred is heated and pressed by passing between the fixing roller 61 and the pressure roller 62. As a result, the toner image is fixed on the paper P and printing is completed. The printed paper P is guided to the transport path 104 and is sent to the discharge tray 41 by the transport roller pair 42.

  Next, the hardware configuration of the image forming apparatus 100 will be described with reference to FIG.

  The image forming apparatus 100 includes a main control unit 110 (control unit). The main control unit 110 includes a CPU 111 and an image processing unit 112 which are central processing units. The image processing unit 112 includes an ASIC dedicated to image processing, a memory, and the like, and performs various types of image processing such as enlargement / reduction, density conversion, and data format conversion on the image data.

  The main control unit 110 is connected to the operation panel 101, the image reading unit 102, the paper feeding unit 103, the conveyance path 104, the image forming unit 105, the fixing unit 106, and the like. The main control unit 110 performs control and calculation of each unit based on various programs and data stored in the storage unit 113. The main control unit 110 may be divided into a part that performs overall control and image processing, and a part that performs on / off control of a motor that rotates various rotating bodies.

  The storage unit 113 includes a ROM 113a (storage unit) such as a flash memory, a volatile storage device such as a RAM 113b and an HDD 113c, and a nonvolatile storage device. Various programs and data are stored, for example, in the ROM 113a and expanded in the RAM 113b.

  The operation panel 101 connected to the main control unit 110 has a display control unit 14. The display control unit 14 includes a CPU, an IC, and the like. When the setting key displayed on the liquid crystal display unit 11 is pressed by the user, the display control unit 14 receives the output of the touch panel and specifies the coordinates of the pressed position. As a result, the pressing position of the user on the liquid crystal display unit 11 (setting key pressed by the user) is specified. Data such as a table indicating correspondence between the output of the touch panel and the coordinates of the pressed position is stored in, for example, the storage unit 15 (or the storage unit 113).

  The main control unit 110 is connected to the communication unit 114. The communication unit 114 is communicably connected to the external computer 200 via a network (or a communication cable), for example. Thereby, printing can be performed based on the image data transmitted from the computer 200. In addition, image data obtained by a document reading operation by the image reading unit 102 can be transmitted to the computer 200. Further, for example, a modem or the like may be incorporated in the communication unit 114. In this case, fax communication with the external fax machine 300 can be performed via a network such as a telephone line.

  Further, the main control unit 110 is connected to a mounting unit 115 to which an external storage medium 400 such as a USB memory can be mounted. Therefore, printing can be performed based on the image data stored in the external storage medium 400. In addition, image data obtained by a document reading operation by the image reading unit 102 can be stored in the external storage medium 400.

  Next, the software configuration of the image forming apparatus 100 will be described with reference to FIG.

  The image forming apparatus 100 stores software 500 (firmware) for performing basic hardware control in the ROM 113a. The software 500 includes an OS (Operating System) 501 and software for executing various jobs. Examples of software for executing various jobs include copy software 502, printer software 503, scanner software 504, and fax software 505. Then, the main control unit 110 reads the software 500 to the RAM 113b when executing various jobs.

  Incidentally, when an operation failure occurs in the image forming apparatus 100, the software 500 may be falsified by a malicious user. Accordingly, in this case, a user who uses the image forming apparatus 100 (or a service person who maintains the image forming apparatus 100) checks whether the software 500 has been tampered with. Hereinafter, a method for checking tampering of the software 500 in the present embodiment will be described.

  A user who performs a tampering check on the software 500 first checks the version of the software 500 stored in the ROM 113a. Then, as shown in FIG. 4, the user prepares an external storage medium 400 in which the same software 600 as the software 500 is stored, and attaches the external storage medium 400 to the attachment unit 115. Note that the versions of the software 500 stored in the ROM 113a and the software 600 stored in the external storage medium 400 are the same. The software 600 stored in the external storage medium 400 is software for checking whether or not the software 500 has been tampered with, and will be referred to as tampering check software 600 in the following description.

  When the main control unit 110 recognizes the external storage medium 400 attached to the attachment unit 115, the main control unit 110 reads the dump data 600a of the external storage medium 400 in which the tampering check software 600 is stored into the RAM 113b. The main control unit 110 also reads the dump data 500a of the ROM 113a in which the software 500 is stored into the RAM 113b.

  Here, the dump data is output as it is without converting or processing the memory contents. Therefore, if the software 500 is not falsified, the dump data 500a of the ROM 113a storing the software 500 and the dump data 600a of the external storage medium 400 storing the falsification check software 600 are the same. On the other hand, if the software 500 is falsified, the dump data 500a and the dump data 600a are different.

  Therefore, the main control unit 110 reads the dump data 500a in the ROM 113a in which the software 500 is stored and the dump data 600a in the external storage medium 400 in which the tampering check software 600 is stored into the RAM 113b, and then compares them. If the dump data 500a and the dump data 600a are the same, the main control unit 110 determines that the software 500 has not been tampered with. If the dump data 500a and the dump data 600a are different, the software 500 is Judge that it has been tampered with.

  Further, after determining whether or not the software 500 has been tampered with, the main control unit 110 performs processing for notifying the user of the determination result. For example, when determining that the software 500 has not been tampered with, the main control unit 110 displays information indicating that the software 500 has not been tampered with on the liquid crystal display unit 11 and determines that the software 500 has been tampered with. In such a case, information indicating that the software 500 has been tampered with is displayed on the liquid crystal display unit 11. For example, if the software 500 has not been tampered with, the liquid crystal display unit 11 displays “OK” as shown in FIG. 5, and if the software 500 has been tampered with, “NG” as shown in FIG. Is displayed.

  If a display unit such as the liquid crystal display unit 11 is not provided in the image forming apparatus 100, the determination result as to whether or not the software 500 has been tampered with is notified to the user using another unit. May be. For example, a sound generation unit for generating a notification sound may be provided to notify whether the software 500 has been tampered with by a difference in sound. In addition, a light emitting unit for emitting notification light may be provided to notify whether the software 500 has been tampered with based on a difference in the light emission state (for example, whether it is blinking).

  Alternatively, text data indicating a determination result as to whether or not the software 500 has been tampered with may be stored in the external storage medium 400. In this way, even if the notification means itself such as the liquid crystal display unit 11 is not provided in the image forming apparatus 100, the software 500 is altered by having the user terminal or the like access the external storage medium 400. The user can be notified of the determination result of whether or not the

  Next, with reference to FIG. 7, a flow of tampering check of the software 500 in the present embodiment will be described.

  First, it is assumed that the user has already prepared the external storage medium 400 that stores the tampering check software 600 at the start of the flow of FIG. When the user attaches the external storage medium 400 to the attachment unit 115, the flow of FIG. At this time, a message for executing a tampering check of the software 500 may be displayed on the liquid crystal display unit 11. Alternatively, only when a selection screen for allowing the user to select whether or not to perform the alteration check of the software 500 is displayed on the liquid crystal display unit 11 and an instruction to execute the alteration check of the software 500 is received from the user, A tampering check of the software 500 may be executed.

  In step S1, the main control unit 110 reads the dump data 500a of the ROM 113a in which the software 500 is stored into the RAM 113b. In step S2, the main control unit 110 reads the dump data 600a of the external storage medium 400 in which the tampering check software 600 is stored into the RAM 113b.

  In step S3, the main control unit 110 compares the dump data 500a in the ROM 113a with the dump data 600a in the external storage medium 400 (whether the dump data 500a in the ROM 113a and the dump data 600a in the external storage medium 400 are the same). To check).

  In step S4, the main control unit 110 determines whether or not the software 500 stored in the ROM 113a has been tampered with. That is, the main control unit 110 compares the dump data 500a in the ROM 113a with the dump data 600a in the external storage medium 400. As a result, if the dump data 500a and the dump data 600a are the same, the software 500 is not falsified. If the dump data 500a and the dump data 600a are different from each other, it is determined that the software 500 has been tampered with.

  In step S5, the main control unit 110 performs a process for notifying the user of a determination result as to whether or not the software 500 stored in the ROM 113a has been tampered with. For example, when determining that the software 500 has not been tampered with, the main control unit 110 causes the liquid crystal display unit 11 to display information indicating that the software 500 has not been tampered with (for example, “OK”). When it is determined that the software 500 has been tampered with, information (for example, “NG”) indicating that the software 500 has been tampered with is displayed on the liquid crystal display unit 11.

  In the present embodiment, as described above, the tampering check of the software 500 is performed by the main control unit 110 (control unit) of the image forming apparatus 100. The alteration check of the software 500 by the main control unit 110 is performed by comparing the dump data 500a of the ROM 113a in which the software 500 is stored with the dump data 600a of the external storage medium 400 in which the alteration check software 600 is stored. The That is, the tampering check of the software 500 can be performed simply by attaching the external storage medium 400 to the attachment unit 115. Therefore, it is not necessary to communicate with a dedicated device for checking whether the software 500 has been tampered with (it is not necessary to construct a system for checking whether the software 500 has been tampered with). As a result, the tampering check of the software 500 can be easily performed.

  In the present embodiment, as described above, the main control unit 110 causes the liquid crystal display unit 11 (display unit) to display a determination result as to whether or not the software 500 has been tampered with. If comprised in this way, the judgment result of whether the software 500 is falsified can be alert | reported easily.

  It should be thought that embodiment disclosed this time is an illustration and restrictive at no points. The scope of the present invention is shown not by the description of the above-described embodiment but by the scope of claims for patent, and further includes meanings equivalent to the scope of claims for patent and all modifications within the scope.

11 Liquid crystal display (display)
100 Image forming apparatus 110 Main control unit (control unit)
113a ROM (storage unit)
115 Mounting unit 400 External storage medium 500 Software 600 Tamper check software

Claims (4)

A storage unit storing software;
A mounting unit for mounting an external storage medium storing tampering check software for checking tampering with the software;
By comparing the memory contents of the storage unit storing the software and the external storage medium storing the alteration check software when the external storage medium is mounted on the mounting unit, An electronic device comprising: a control unit that determines whether or not the software stored in the storage unit has been tampered with and performs a process for notifying the determination result. A display unit for displaying information indicating the device status;
The electronic device according to claim 1, wherein the control unit causes the display unit to display a determination result as to whether or not the software has been tampered with.   The electronic device according to claim 1, wherein the control unit stores a determination result on whether or not the software has been tampered with in the external storage medium.   An image forming apparatus comprising the electronic device according to claim 1.

Images