JP2020003845A - Information processing apparatus, virus check method and program - Google Patents

Abstract

To efficiently perform a virus check when receiving data.SOLUTION: An information processing apparatus 2 includes a data reception unit 20 that receives data, a data analysis unit 21 that analyzes the received data received by the data reception unit 20 and identifies a data portion for the virus check from the received data as data for check, and a virus check unit 22 that performs the virus check on the data for check identified by the data analysis unit 21.SELECTED DRAWING: Figure 2

Description

  The present invention relates to an information processing device, a virus check method, and a program.

  2. Description of the Related Art Conventionally, in a system in which an image forming apparatus such as an MFP (Multifunction Peripherals) and a document management server are connected via a network, a system that performs a virus check when the document management server receives an electronic file via the network. It is known (for example, Patent Document 1). According to this conventional technique, when a document management server receives an electronic file, it determines whether the electronic file is generated by a scanner function of the image forming apparatus. As a result, if the received file is an electronic file generated by the scanner function of the image forming apparatus, the document management server does not perform a virus check on the received file. On the other hand, if the received file is not an electronic file generated by the scanner function of the image forming apparatus, the document management server performs a virus check on the received file.

  However, when the data amount of the electronic file to be checked for virus is large, the hardware resources of the document management server are occupied by the virus check, and the efficiency of other processing is significantly reduced. Such a problem is a problem that can occur not only in the document management server but also in a computer or an image forming apparatus.

  Particularly in recent years, it has been studied to mount a virus check function on an image forming apparatus connected to a network. That is, when receiving data via the network, the image forming apparatus performs a virus check on the data to prevent the data from being infected with a virus. However, if the image forming apparatus performs a virus check on all the data received via the network, the virus check requires time, and the processing on the received data is delayed. In particular, if the received data is print data, if it takes time to check the virus, the time until the first sheet of print output is started in the image forming apparatus becomes longer, and the convenience of the image forming apparatus decreases. It is a factor to make it.

JP 2008-77231 A

  The present invention has been made to solve the above problems, and has as its object to provide an information processing apparatus, a virus check method, and a program that can efficiently perform a virus check.

  In order to achieve the above object, an invention according to claim 1 is an information processing apparatus, comprising: a receiving unit for receiving data; analyzing the received data received by the receiving unit; Data analysis means for specifying a data portion to be checked as check data, and virus check means for performing a virus check on the check data specified by the data analysis means are provided. Configuration.

  The invention according to a second aspect is the information processing apparatus according to the first aspect, further comprising storage means for storing check target registration information for specifying the check target data, and wherein the data analysis means includes The check target data is identified from the received data by referring to the check target registration information based on data.

  According to a third aspect of the present invention, in the information processing apparatus according to the first or second aspect, the data analysis unit analyzes the header portion of the received data to thereby determine the check target data from the received data. It is a configuration characterized by specifying.

  According to a fourth aspect of the present invention, in the information processing apparatus according to the first or second aspect, the data analysis unit determines the check target data from the received data by determining an identifier included in the received data. Is specified.

  According to a fifth aspect of the present invention, in the information processing apparatus according to any one of the first to fourth aspects, the data analysis unit generates the check target file by extracting the check target data from the received data. The virus checking means performs a virus check on the file to be checked.

  According to a sixth aspect of the present invention, in the information processing apparatus according to the fifth aspect, the virus check means deletes the file to be checked upon completion of the virus check on the file to be checked. Configuration.

  According to a seventh aspect of the present invention, in the information processing apparatus according to any one of the first to sixth aspects, the data analysis unit is configured to transmit the reception data when the transmission source device of the reception data is a predetermined image processing apparatus. Are determined to be unnecessary data for virus check, and the virus check by the virus check means is omitted.

  The invention according to claim 8 is the information processing apparatus according to any one of claims 1 to 7, further comprising a printing unit capable of performing print output based on the received data, wherein the printing unit includes: A print output based on the received data is started when a virus is not detected in the virus check by the virus check unit.

  According to a ninth aspect of the present invention, in the information processing apparatus according to the eighth aspect, the data analysis unit analyzes the received data to obtain print setting data indicating a print setting and a print target to be printed. The print data is identified as the target data, and the print target data is specified as the check target data.

  According to a tenth aspect of the present invention, in the information processing apparatus according to the eighth or ninth aspect, a print list acquisition that acquires a list of print target data held by an external device and displays the list on a predetermined display unit. Means, and data request means for requesting the external device for print target data included in the list, wherein the data analysis means receives the print target data requested by the data request means by the receiving means. Accordingly, the received data is analyzed to specify the check target data.

  The invention according to claim 11, which is a virus checking method, comprising: a receiving step of receiving data; and a data portion to be analyzed for the received data received by the receiving step and to be subjected to a virus check from the received data. And a virus check step of performing a virus check on the check target data specified by the data analysis step.

  The invention according to claim 12 is a program executed in an information processing device, wherein the information processing device analyzes a reception step of receiving data, and reception data received by the reception step. Executing a data analysis step of specifying a data part to be subjected to a virus check as data to be checked, and a virus check step of performing a virus check on the data to be checked specified by the data analysis step This is a configuration characterized by the following.

According to a thirteenth aspect, in the program according to the twelfth aspect, the information processing apparatus stores check target registration information for specifying the check target data,
Wherein the data analysis step is a step of specifying the check target data from the received data by referring to the check target registration information based on the received data. .

  According to a fourteenth aspect of the present invention, in the program according to the twelfth or thirteenth aspect, the data analysis step identifies the check target data from the received data by analyzing a header part of the received data. This is a configuration characterized by being a step.

  According to a fifteenth aspect of the present invention, in the program according to the twelfth or thirteenth aspect, the data analysis step identifies the check target data from the received data by determining an identifier included in the received data. A step of performing

  The invention according to claim 16 is the program according to any one of claims 12 to 15, wherein the data analysis step includes a step of extracting the check target data from the received data to generate a check target file, The virus check step is a step of performing a virus check on the file to be checked.

  According to a seventeenth aspect of the present invention, in the program according to the sixteenth aspect, the virus check step includes a step of deleting the file to be checked upon completion of the virus check on the file to be checked. It is a configuration to be.

  The invention according to claim 18 is the program according to any one of claims 12 to 17, wherein the data analysis step is performed when the source device of the received data is a predetermined image processing device. Is determined to be data unnecessary for virus check, and the virus check in the virus check step is omitted.

  The invention according to claim 19 is the program according to any one of claims 12 to 18, wherein the information processing apparatus includes a printing unit capable of performing print output based on the received data. Driving the printing unit to perform a print output based on the received data when the virus is not detected in the virus check in the virus check step. This is a featured configuration.

  According to a twentieth aspect of the present invention, in the program according to the twentieth aspect, the data analysis step analyzes the received data to obtain print setting data indicating print settings and print target data to be printed. And identifying the print target data as the check target data.

  According to a twenty-first aspect of the present invention, in the program according to the ninth or twentieth aspect, the information processing apparatus acquires a list of print target data held by an external device, and displays the list on predetermined display means. And a data requesting step of requesting the external device for print target data included in the list.The data analysis step includes a step of: executing the print target data requested by the data request step. With the reception in the receiving step, the received data is analyzed to specify the check target data.

  According to the present invention, the data portion to be checked for viruses is specified as the data to be checked out of the received data, and the virus check is performed on the data to be checked. Will be able to do it.

It is a figure showing the conceptual composition of the information processing system in a 1st embodiment. FIG. 2 is a block diagram illustrating an example of a hardware configuration and a functional configuration of the information processing apparatus. It is a figure showing an example of check subject registration information. FIG. 4 is a diagram illustrating a concept of generating a check target file from received data. FIG. 4 is a diagram illustrating an example of a check target file. FIG. 3 is a diagram illustrating a concept of a virus check in the information processing apparatus. 13 is a flowchart illustrating an example of a main processing procedure performed by the information processing device. It is a flow chart which shows an example of the detailed processing procedure of data analysis processing. It is a figure showing an example of check subject registration information in a 2nd embodiment. It is a figure showing the concept which generates a file for a check from received data in a 2nd embodiment. FIG. 4 is a diagram illustrating an example of a check target file. It is a figure showing the conceptual composition of the information processing system in a 3rd embodiment. It is a block diagram showing an example of hardware constitutions and functional composition of an information processor in a 3rd embodiment. FIG. 4 is a diagram illustrating a concept of generating a check target file from received data when the received data is print data. FIG. 4 is a diagram illustrating an example of a check target file. It is a flow chart which shows an example of the main processing procedure by an information processor of a 3rd embodiment. It is a flow chart which shows an example of the detailed processing procedure of data analysis processing. FIG. 2 is a diagram illustrating an example of a communication mode between an information processing device and a server device. FIG. 6 is a diagram illustrating an example of a list screen displayed on a display unit of the information processing device. FIG. 7 is a diagram illustrating an example of another communication mode between the information processing device and the server device.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings. In the embodiments described below, components common to each other are denoted by the same reference numerals, and redundant description thereof will be omitted.

(1st Embodiment)
FIG. 1 is a diagram illustrating a conceptual configuration of an information processing system 1 according to the first embodiment of the present invention. The information processing system 1 has a configuration in which an information processing device 2 is connected to a network 5 such as a LAN (Local Area Network). For example, the information processing device 2 of the present embodiment is configured by a personal computer (PC) 3. The information processing system 1 is configured so that the information processing device 2 can communicate with various external devices via the network 5. The external devices connected to the network 5 include, for example, another computer 6 such as a personal computer, an image processing device 7 including an MFP (Multifunction Peripherals), a server device 8, and the like. The information processing device 2 can communicate with the external devices via the network 5 and receive various data D10 from the external devices.

  The information processing device 2 of the present embodiment has a virus check function. That is, when the information processing device 2 receives the data D10 via the network 5, the information processing device 2 is configured to perform a virus check on the received data D10.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration and a functional configuration of the information processing device 2. The information processing device 2 includes a control unit 10, a display unit 11, an operation unit 12, a communication interface 13, and a storage unit 14.

  The control unit 10 controls the operation of each unit. The control unit 10 includes a CPU and a memory (not shown). The CPU reads out and executes the program 15 stored in the storage unit 14. The memory stores temporary data and the like generated when the CPU executes the program 15.

  The display unit 11 includes, for example, a color liquid crystal display and displays various operation screens that can be operated by a user. The operation unit 12 includes, for example, a keyboard, a mouse, and a touch panel key, and receives an operation by a user. The communication interface 13 is for connecting the information processing device 2 to the network 5. The storage unit 14 is a nonvolatile storage device including a hard disk drive (HDD) and a solid state drive (SSD). The storage unit 14 stores check target registration information 16 and a virus definition file 17 in addition to the program 15 described above. Each of the check target registration information 16 and the virus definition file 17 is information referred to when performing a virus check, and is information that is automatically updated to the latest file regularly or irregularly.

  In the above-described hardware configuration, when the program 15 is executed by the CPU of the control unit 10, the control unit 10 functions as a data receiving unit 20, a data analyzing unit 21, and a virus checking unit 22. That is, the control unit 10 operates these units to analyze the received data D10 and perform a virus check when the data D10 is received via the network 5.

  The data receiving unit 20 is a processing unit that receives the data D10 addressed to the own device via the communication interface 13. When receiving the data D10 addressed to itself, the data receiving unit 20 causes the data analyzing unit 21 to function.

  The data analysis unit 21 is a processing unit that analyzes the reception data D10 and specifies a data part to be subjected to virus check from the reception data D10 as check target data. For example, the data analysis unit 21 identifies the check target data included in the reception data D10 by analyzing the header of the reception data D10. At this time, the data analysis unit 21 reads the check target registration information 16 from the storage unit 14, and specifies the check target data based on the check target registration information 16.

  FIG. 3 is a diagram illustrating an example of the check target registration information 16. The check target registration information 16 is information in which the header format 16a, the data type 16b, and the check target data area 16c are associated with each other. The header format of various patterns is registered in the header format 16a in advance, and the data type corresponding to the header format of each pattern is registered in the data type 16b in advance. In the check target data area 16c, an identifier that can specify the start and end of the check target data for each data type is registered. That is, the received data D10 may include a data area in which a virus is easily mixed and a data area in which a virus is hardly mixed. Therefore, in the check target registration information 16, information that can specify data included in a data area in which a virus is likely to be mixed as check target data is registered in advance. Note that data included in the data area in which a virus is unlikely to be mixed is non-target data that is not targeted for virus check.

  For example, the registration information X1 shown in FIG. 3 shows a case where the received data D10 is a PDF file, and a character string “% PDF” is registered in the header format 16a. Therefore, when detecting the character string “% PDF” in the header of the received data D10, the data analysis unit 21 can specify that the data type of the received data D10 is a PDF file. Then, the data analysis unit 21 specifies the data portion from the identifier “stream” to the identifier “endstream” in the received data D10 as the data to be checked. Note that the data analysis unit 21 may identify a plurality of data portions from one piece of received data D10 as check target data.

  The registration information X2 shown in FIG. 3 indicates a case where the reception data D10 is unknown data. Therefore, as a result of analyzing the header portion of the reception data D10, if the reception data D10 is unknown, the data analysis unit 21 checks the entire reception data D10 (all data) by referring to the registration information X2. Specify as target data.

  When at least a part of the data included in the reception data D10 is specified as the data to be checked, the data analysis unit 21 extracts all the data to be checked from the reception data D10. Then, the data analysis unit 21 generates a check target file including only the check target data.

  FIGS. 4 and 5 are diagrams showing the concept of generating the check target file D20 from the received data D10. For example, when the reception data D10 received by the information processing apparatus 2 is a PDF file as shown in FIG. 4, the data analysis unit 21 analyzes the header part of the reception data D10 to convert the reception data D10 into a PDF file. Identify something. Then, the data analysis unit 21 refers to the registration information X1 in FIG. 3 and confirms that the check target data area is a data area sandwiched between two identifiers (“stream” and “endstream”). The data analysis unit 21 starts a process of searching the received data D10 for the two identifiers, and specifies a data area sandwiched between the two identifiers as check target data. In the case of the example of FIG. 4, the data analysis unit 21 first specifies the data area sandwiched by the two identifiers 101 and 102 as the first check target data 103, and sandwiches the data area by the next two identifiers 104 and 105. The identified data area is specified as the second check target data 106, and the data area sandwiched between the other two identifiers 107 and 108 is specified as the third check target data 109.

  Then, the data analysis unit 21 extracts three check target data 103, 106, and 109 from the received data D10. Thereafter, as shown in FIG. 5, the data analysis unit 21 generates a check target file D20 including only the three check target data 103, 106, and 109 extracted from the received data D10.

  When the data analysis unit 21 generates the check target file D20, the virus check unit 22 functions. Then, the virus check unit 22 performs a virus check process on the check target file D20 generated by the data analysis unit 21. That is, the virus check unit 22 reads the virus definition file 17 and checks whether the virus defined in the virus definition file 17 is included in the check target file D20. The virus check unit 22 does not execute a virus check process on the received data D10 received by the data reception unit 20, but executes a virus check process on the check target file D20 generated by the data analysis unit 21. The check target file D20 is an electronic file generated by extracting at least a part of the data from the reception data D10, and thus has a smaller data amount than the reception data D10. Therefore, the virus check unit 22 can efficiently perform a virus check on the check target file D20.

  FIG. 6 is a diagram illustrating the concept of a virus check in the information processing device 2. As shown in FIG. 6, the received data D10 includes check target data D11 to be subjected to a virus check and non-target data D12 not to be subjected to a virus check. The data analysis unit 21 analyzes such received data D10 to generate a check target file D20 including only the check target data D11. Then, the virus check unit 22 performs a virus check process on the check target file D20 generated by the data analysis unit 21. Thus, the virus check on the non-target data D12 included in the received data D10 can be omitted, so that it can be efficiently checked whether the received data D10 contains a virus.

  FIG. 7 is a flowchart illustrating an example of a main processing procedure performed by the information processing device 2. The process based on this flowchart is a process performed by the CPU of the control unit 10 executing the program 15, and is a process repeatedly executed in the information processing device 2, for example. When starting this processing, the information processing apparatus 2 first determines whether or not it is time to update the check target registration information 16 (step S10). For example, if a predetermined time has elapsed since the last update, the information processing apparatus 2 determines that it is the current update timing. If it is the update timing of the check target registration information 16 (YES in step S10), the information processing device 2 performs an update process of the check target registration information 16 (step S11). That is, the information processing device 2 accesses a predetermined server device via the network 5 and determines whether or not the check target registration information 16 has been updated. When the check target registration information 16 has been updated, the information processing device 2 downloads the latest check target registration information 16 from the server device and updates the check target registration information 16 in the storage unit 14.

  Next, the information processing device 2 determines whether it is time to update the virus definition file 17 (step S12). For example, if a predetermined time has elapsed since the last update, it is determined that it is the current update timing. If it is time to update the virus definition file 17 (YES in step S12), the information processing device 2 performs an update process on the virus definition file 17 (step S13). That is, the information processing device 2 accesses a predetermined server device via the network 5 and determines whether the virus definition file 17 has been updated. If the virus definition file 17 has been updated, the information processing device 2 downloads the latest virus definition file 17 from the server device and updates the virus definition file 17 in the storage unit 14.

  Next, the information processing device 2 determines whether or not the data D10 has been received via the network 5 (step S14). If the data D10 has not been received (NO in step S14), the process by the information processing device 2 ends. On the other hand, when the data D10 is received via the network 5 (YES in step S14), the information processing device 2 starts a process for a virus check on the received data D10 (steps S15 to S22).

  When starting the process for virus check, the information processing device 2 first executes a data analysis process (step S15). In this data analysis process, the received data D10 is analyzed, and a check target file D20 including only the check target data D11 is generated. The details of the data analysis processing will be described later.

  When the data analysis processing is completed, the information processing device 2 reads the check target file D20 generated in the data analysis processing (Step S16), and further reads the virus definition file 17 (Step S17). Then, the information processing device 2 performs a virus check process on the check target file D20 based on the virus definition file 17 (Step S18). This makes it possible to verify whether or not the check target file D20 contains a virus. When the virus check process ends, the information processing device 2 deletes the check target file D20 (Step S19). That is, the check target file D20 is a file generated only for the virus check, and becomes unnecessary when the virus check is completed, and is automatically deleted.

  Next, the information processing device 2 determines whether a virus has been detected by the virus check process (step S20). When a virus is detected (YES in step S20), the information processing device 2 executes a process at the time of virus detection (step S21). The process executed at this time is a process for preventing virus infection or spread of the virus, and for example, a process for deleting the received data D10 from the information processing device 2, a process for restricting access to the received data D10, This includes a process for restricting the use of the data D10. On the other hand, if no virus is detected (NO in step S20), the information processing device 2 permits performing various processes on the received data D10 (step S22). Thereby, other applications are permitted to access the reception data D10, and are also permitted to use the reception data D10. Thus, the main processing procedure in the information processing device 2 ends.

  Next, FIG. 8 is a flowchart illustrating an example of a detailed processing procedure of the data analysis processing (step S15). When the data analysis process is started, the information processing device 2 first reads out the check target registration information 16 (step S30). Then, the information processing device 2 analyzes the header of the received data D10, and determines whether or not the header of the received data D10 matches the header format 16a registered in the check target registration information 16 (step S31). . If the header part of the reception data D10 matches the header format 16a registered in the check target registration information 16, the data type of the reception data D10 is specified. On the other hand, if the header part of the received data D10 does not match the header format 16a registered in the check target registration information 16, the received data D10 is unknown to the virus check function of the information processing device 2.

  When the data type of the reception data D10 can be specified (YES in step S32), the information processing device 2 specifies the check target data D11 included in the reception data D10 by referring to the check target registration information 16. (Step S33). Then, the information processing device 2 extracts the check target data D11 from the received data D10 (Step S34). On the other hand, when the data type of the reception data D10 cannot be specified (NO in step S32), the information processing device 2 extracts all data included in the reception data D10 as check target data (step S35). ).

  Next, the information processing device 2 generates a check target file D20 including the check target data extracted in step S34 or S35 (step S36). As a result, a check target file D20 including at least a part of the received data D10 is generated. However, when the data type of the reception data D10 is unknown, the check target file D20 is the same data as the reception data D10. Then, the information processing device 2 temporarily stores and stores the check target file D20 in a memory or the like of the control unit 10 (step S37).

  As described above, when the data processing apparatus 2 of the present embodiment receives the data D10 via the network 5, the information processing apparatus 2 analyzes the received data D10 to check a data portion to be subjected to a virus check from the received data D10. It is specified as the target data D11. The information processing device 2 is configured to perform a virus check on the check target data D11 specified by analyzing the received data D10. According to such an information processing apparatus 2, since a virus check is not performed on a data portion of the received data D10 that is not specified as the check target data D11, there is an advantage that a virus check can be performed efficiently.

  In the present embodiment, an example has been described in which the data type is specified by analyzing the header part included in the received data D10, and the check target data is specified according to the specified data type. However, the present invention is not limited to this, and it is not necessary to analyze the header part of the received data D10 when specifying the data type. For example, the data type of the reception data D10 may be specified by determining the extension of the reception data D10.

(2nd Embodiment)
Next, a second embodiment of the present invention will be described. In the present embodiment, an example will be described in which the check target registration information 16 is information different from the first embodiment. Note that the hardware configuration and the functional configuration of the information processing apparatus 2 are the same as those described in the first embodiment.

  FIG. 9 is a diagram illustrating an example of the check target registration information 16 according to the second embodiment. The check target registration information 16 is information in which an identifier 16f provided at the beginning and end of a specific data area is associated with a virus check necessity 16g. That is, the check target registration information 16 shown in FIG. 9 can specify the data area by analyzing the contents of the received data D10 and searching for the identifier registered in the identifier 16f. This is information that can further specify whether or not a virus check is required for the data area.

  When the data D10 is received by the data receiving unit 20, the data analysis unit 21 specifies the check target data that needs a virus check from the received data D10 by referring to the check target registration information 16 illustrated in FIG. That is, when the received data D10 includes the identifier registered in the column of the identifier 16f of the check target registration information 16, the data analysis unit 21 searches for the first identifier and the last identifier, Identify the data contained between the beginning and end. Then, the data analysis unit 21 refers to the virus check necessity 16g and determines whether or not the specified data is the data to be checked. That is, when it is registered that the virus check is necessary in the check target registration information 16, the data analysis unit 21 specifies data included between the first identifier and the last identifier as the check target data D11. . Conversely, if the check target registration information 16 indicates that the virus check is unnecessary, the data analysis unit 21 specifies data included between the first identifier and the last identifier as non-target data D12. I do. As described above, in the present embodiment, the check target data D11 included in the reception data D10 can be specified without determining the data type of the reception data D10.

  FIG. 10 and FIG. 11 are diagrams showing the concept of generating a check target file D20 from received data D10 in the second embodiment. For example, when the reception data D10 received by the information processing device 2 is a PDF file as shown in FIG. 10, the data analysis unit 21 searches the reception data D10 for an identifier registered as the identifier 16f. As a result, the data analysis unit 21 sandwiches the first data area 113 sandwiched by the identifiers 111 and 112, the second data area 116 sandwiched by the identifiers 114 and 115, and the identifiers 117 and 118. The three data areas with the third data area 119 are specified.

  Referring to the check target registration information 16 in FIG. 9, the data analysis unit 21 specifies the data area 113 sandwiched between the identifiers 111 and 112 in the received data D10 in FIG. 10 as the non-target data D12 that does not require a virus check. In addition, the data analysis unit 21 specifies the data area 116 sandwiched between the identifiers 114 and 115 in the reception data D10 of FIG. 10 as the check target data D11 that needs a virus check. Further, the data analysis unit 21 specifies the data area 119 sandwiched between the identifiers 117 and 118 in the reception data D10 of FIG. 10 as the check target data D11 that needs a virus check.

  Then, the data analysis unit 21 extracts data included in the data areas 116 and 119 specified as the check target data D11, and generates a check target file D20 as shown in FIG. The check target file D20 includes only two data areas 116 and 119 extracted from the received data D10. Then, the virus check unit 22 performs a virus check process on the check target file D20 generated by the data analysis unit 21. Therefore, also in the present embodiment, similar to the first embodiment, the virus check for the check target file D20 can be efficiently performed.

  In the present embodiment, when the external device such as the computer 6, the image processing device 7, and the server device 8 generates the data D10, it is preferable that the above-described identifier is added in advance. When the above-described identifier cannot be assigned to the external device, the information processing device 2 cannot identify the data area delimited by the identifier from the received data D10. Will be extracted as

  The present embodiment exemplifies a case in which an identifier for identifying a data area requiring a virus check as well as an identifier for identifying a data area requiring no virus check is registered in the check target registration information 16. did. However, it is not limited to this. For example, the check target registration information 16 may be information in which only an identifier for identifying a data area that does not require a virus check is registered.

  The information processing apparatus 2 of the present embodiment is the same as that described in the first embodiment in other points than the above.

(Third embodiment)
Next, a third embodiment of the present invention will be described. FIG. 12 is a diagram illustrating a conceptual configuration of the information processing system 1 according to the third embodiment. The information processing apparatus 2 according to the present embodiment is configured by an image forming apparatus 4 such as an MFP (Multifunction Peripherals). The image forming apparatus 4 has at least a print function. When the data D10 received via the network 5 is print data, the image forming apparatus 4 can perform a print output based on the data D10.

  FIG. 13 is a block diagram illustrating an example of a hardware configuration and a functional configuration of the information processing apparatus 2 according to the present embodiment. The information processing device 2 includes a control unit 10, a display unit 11, an operation unit 12, a communication interface 13, and a storage unit 14, as in the first embodiment. Further, the information processing apparatus 2 of the present embodiment includes a printer unit 19 as a hardware configuration for performing print output.

  The control unit 10 of the information processing device 2 functions as a job control unit 30 in addition to the data reception unit 20, the data analysis unit 21, and the virus check unit 22 described in the first embodiment. When the reception data D10 received by the data reception unit 20 is print data, the job control unit 30 drives the printer unit 19 based on the print data to drive the printer unit 19 to perform print output. It is something to make.

  The job control unit 30 also functions as a print list acquisition unit 31 and a data request unit 32. The print list acquiring unit 31 and the data requesting unit 32 function when, for example, the user specifies pull printing. The print list obtaining unit 31 accesses an external device such as the image processing device 7 or the server device 8 via the network 5 and obtains print data list information held by the external device. Upon acquiring the list information from the external device, the print list acquiring unit 31 displays the list information on the display unit 11. As a result, the user can select the print data held by the external device as a print target. When the user selects the print data held by the external device as a print target, the data request unit 32 functions. The data request unit 32 requests the external device for print data selected by the user, and obtains the print data from the external device.

  In the information processing device 2 configured as described above, when the data receiving unit 20 receives the data D10, the data analyzing unit 21 analyzes the received data D10 in the same manner as in the first embodiment, and performs a virus check. A check target file D20 consisting of only data is generated.

  The information processing apparatus 2 including the image forming apparatus 4 may receive the print data as the reception data D10. For example, a printer driver is installed in an external device such as the computer 6, and print data is generated by the printer driver. Such print data includes print setting data indicating print settings and print target data indicating images to be printed. The print setting data is data in which print settings specified by a user are described in PJL (Printer Job Language), and is data generated by a printer driver. Since all the print setting data is generated by the printer driver, there is no room for a virus to enter. On the other hand, the print target data is data including content specified by the user, and is data expressed in PDL (Page Description Language). Therefore, if the content specified by the user contains a virus, the virus may be mixed into the print target data. Therefore, when the received data D10 is print data, the data analysis unit 21 can extract the check target data D11 based on circumstances specific to the print data.

  FIGS. 14 and 15 are diagrams showing the concept of generating a check target file D20 from the received data D10 when the received data D10 is print data. For example, when the reception data D10 received by the information processing apparatus 2 is print data as shown in FIG. 14, the data analysis unit 21 prints the print setting data DA expressed in PJL and the print target data expressed in PDL. DB. As shown in FIG. 14, the print setting data DA is data including only a command generated by the printer driver, so that no virus is mixed. On the other hand, since the print target data DB includes the content specified by the user, the print target data DB may include, for example, link information 100 to a website having a risk of virus infection. If such link information 100 is defined as a virus in the virus definition file 17, it is detected as a virus in the virus check processing.

  Therefore, when the received data D10 is print data, the data analysis unit 21 specifies the print setting data DA as the non-target data D12 and specifies the print target data DB as the check target data D11. Then, the data analysis unit 21 generates a check target file D20 including only the print target data DB as shown in FIG. Thereafter, the virus check unit 22 performs a virus check process on the check target file D20 generated by the data analysis unit 21. That is, when the received data D10 is print data, the information processing apparatus 2 of the present embodiment can efficiently perform a virus check on the check target file D20 including only the print target data DB described in PDL.

  When the received data D10 is print data, the data analysis unit 21 efficiently generates the check target file D20 including only the print target data DB without referring to the check target registration information 16 as described above. Is possible. Therefore, the time required for the virus check can be further reduced, and the time required for the information processing apparatus 2 to start printing the first sheet can be further reduced.

  The information processing device 2 may receive data D10 transmitted from another image processing device 7 via the network 5. For example, the data D10 generated in the image processing device 7 is data generated by the scan function of the image processing device 7, and there is no possibility that a virus is mixed. Therefore, when the transmission source of the reception data D10 is another image processing apparatus 7, the information processing apparatus 2 may omit the virus check processing on the reception data D10. In this case, the data analysis unit 21 not only determines whether the transmission source of the reception data D10 is another image processing apparatus 7, but also generates the reception data D10 by the scan function of the image processing apparatus 7. It may be determined whether or not the data is data, and if the received data D10 is data generated by the scan function of the image processing apparatus 7, the virus check processing may be omitted.

  FIG. 16 is a flowchart illustrating an example of a main processing procedure performed by the information processing device 2 according to the third embodiment. The process based on this flowchart is a process performed by the CPU of the control unit 10 executing the program 15, and is a process repeatedly executed in the information processing device 2, for example. Although omitted in FIG. 16, the point that the check target registration information 16 and the virus definition file 17 are appropriately updated in the information processing apparatus 2 is the same as in the first embodiment.

  When starting this process, the information processing device 2 determines whether or not the data D10 has been received via the network 5 (step S40). If the data D10 has not been received (NO in step S40), the processing by the information processing device 2 ends. On the other hand, when the data D10 is received via the network 5 (YES in step S40), the information processing device 2 determines the transmission source of the received data D10 (step S41), and the other image processing device 7 Is determined (step S42). At this time, it may be further determined whether or not the data D10 is data generated by the scan function of the image processing device 7. If the transmission source of the data D10 is the image processing device 7 (YES in step S42), the information processing device 2 permits the processing on the reception data D10 (step S50). On the other hand, when the transmission source of the data D10 is not the image processing device 7 (NO in step S42), the information processing device 2 starts a process for a virus check on the received data D10 (steps S43 to S50). .

  When starting the process for virus check, the information processing device 2 first executes a data analysis process (step S43). FIG. 17 is a flowchart illustrating an example of a detailed processing procedure of the data analysis processing (step S43). When starting the data analysis process (step S43), the information processing apparatus 2 first determines whether the received data D10 is print data (step S60). If the received data D10 is print data (YES in step S60), the information processing device 2 extracts the print target data DB expressed in PDL as check target data (step S61).

  On the other hand, if the received data D10 is not print data (NO in step S60), the process by the information processing device 2 proceeds to steps S62 to S67. The processing of steps S62 to S67 in this case is the same as steps S30 to S35 shown in FIG.

  Then, the information processing apparatus 2 generates a check target file D20 including the check target data extracted in step S61, S66 or S67 (step S68), and temporarily stores the check target file D20 in a memory or the like (step S69). ). This is the end of the data analysis processing (step S43) of the present embodiment.

  Returning to the flowchart of FIG. 16, after that, the information processing device 2 executes the processing of steps S44 to S50. The processing in steps S44 to S50 is the same as the processing in steps S16 to S22 shown in FIG.

  The information processing apparatus 2 of the present embodiment is the same as that described in the first embodiment or the second embodiment in other points than the above.

(Fourth embodiment)
Next, a fourth embodiment of the present invention will be described. The information processing apparatus 2 of the present embodiment is configured by the image forming apparatus 4 as in the third embodiment. The information processing apparatus 2 according to the present embodiment is characterized by a virus check performed when pull printing is specified by the user.

  FIG. 18 is a diagram illustrating an example of a communication mode between the information processing device 2 and the server device 8 as an external device. The information processing device 2 performs user authentication based on an operation by the user, and when the user can be specified, shifts to a login state (process P1). Thereafter, when the user designates the pull print, the above-described print list acquisition unit 31 functions in the information processing device 2. Then, the print list acquisition unit 31 transmits a list request D41 to the server device 8 (process P2). That is, by transmitting the list request D41, the information processing device 2 requests a list of print data that can be printed and output by the user logged in to the information processing device 2. Upon receiving the list request D41, the server device 8 generates list information D42 of print data that can be printed out by the user, and transmits the list information D42 to the information processing device 2 (process P3). Upon receiving the list information D42 from the server device 8, the print list obtaining unit 31 displays a list of print data that can be printed out by the user on the display unit 11 based on the list information D42 (process P4).

  FIG. 19 is a diagram illustrating an example of the list screen G1 displayed on the display unit 11 of the information processing device 2. The list screen G1 is a screen that displays, in a list format, print data that can be printed out by a user who has logged in to the information processing apparatus 2. When the list screen G1 is displayed, the user can select one or a plurality of print data to be printed out from the print data included in the list. Therefore, after displaying the list screen G1, the print list obtaining unit 31 updates the list screen G1 by accepting a selection operation by the user (process P5). For example, the user can select a plurality of print data as print targets by repeating an operation of selecting print data included in the list one by one. FIG. 19 shows a state where the user has selected three pieces of print data.

  As shown in FIG. 19, an operation button B1 for confirming the print data selection state and an operation button B2 for canceling the print data selection state are displayed at the lower part of the list screen G1. For example, as shown in FIG. 19, when the user operates the operation button B1 in a state where three print data are selected, three print data are determined as print targets in the information processing apparatus 2. Therefore, when the print list acquisition unit 31 detects the confirmation operation by the user (process P6), the print list acquisition unit 31 causes the above-described data request unit 32 to function. Then, the data request unit 32 transmits a data request D43 to the server device 8 (process P7). The data request D43 includes information for requesting one or a plurality of print data selected by the user. The server device 8 generates data D10 including the print data selected by the user based on the data request D43, and transmits the data D10 to the information processing device 2 (process P8). Then, upon receiving the data D10 from the server device 8, the information processing device 2 executes a virus check (process P9). At this time, the virus check can be efficiently performed by performing only the virus check on the print target data DB. Thereafter, the information processing apparatus 2 starts print output based on the data D10 on condition that no virus is detected in the virus check (process P10).

  Next, FIG. 20 is a diagram illustrating an example of another communication mode between the information processing device 2 and the server device 8. The information processing device 2 performs user authentication based on an operation by the user, and when the user can be specified, shifts to a login state (process P20). Thereafter, when the user specifies the pull print, the above-described print list obtaining unit 31 functions in the information processing device 2, and the print list obtaining unit 31 transmits a list request D41 to the server device 8 (process P21). . When receiving the list request D41, the server device 8 transmits list information D42 of print data that can be printed out by the user to the information processing device 2 (process P22). Upon receiving the list information D42, the print list acquisition unit 31 displays a list screen G1 as shown in FIG. 19 on the display unit 11 (process P23).

  When displaying the list screen G1, the print list acquisition unit 31 of the information processing device 2 accepts a user's operation of selecting print data (process P24). Then, each time one print data in the list screen G1 is selected by the user, the data request unit 32 functions in the information processing device 2. Then, the data request unit 32 transmits a data request D43 to the server device 8 (process P25). Accordingly, the data requesting unit 32 can acquire the data D10 corresponding to the print data selected by the user from the server device 8 (process P26). In other words, in the operation process shown in FIG. 20, the print data selected by the user is acquired in advance before detecting the operation for fixing the selected state of the print data. Then, upon receiving the data D10 from the server device 8, the information processing device 2 executes a virus check (process P27). Also at this time, only the virus check for the print target data DB is performed. Thereafter, when an operation of selecting another print data is performed by the user, the information processing apparatus 2 repeatedly executes the processes of processes P25 to P27. Therefore, every time the print data is selected by the user, the information processing apparatus 2 can acquire the data D10 corresponding to the print data in advance and execute the virus check.

  Thereafter, when the information processing device 2 detects the user's confirmation operation (process P28), the information processing device 2 starts print output based on the data D10 acquired in advance (process P29). However, printout in this case is performed on condition that no virus is detected in the virus check.

  As described above, the information processing apparatus 2 obtains the print data selected by the user in advance and performs a virus check on the print data in advance, so that when the user performs a finalizing operation, the print data is promptly printed. Output can be started. Therefore, it is possible to shorten the time until the first sheet of print output is started in the information processing apparatus 2, and to improve the convenience of the information processing apparatus 2.

  Note that FIG. 20 illustrates a case where the information processing apparatus 2 pre-acquires print data from the server apparatus 8 when the user performs an operation of selecting print data. However, the timing at which the information processing apparatus 2 acquires the print data is not necessarily limited to the timing at which the print data selection operation is performed. For example, when the number of print data files displayed on the list screen G1 is smaller than a predetermined number, or when the total data amount of print data displayed on the list screen G1 is smaller than a predetermined amount, the list screen G1 At the timing when is displayed, all the print data included in the list may be acquired in advance. Even with such a configuration, there is no change in that the time until the first sheet of print output is started in the information processing apparatus 2 can be reduced.

  The information processing apparatus 2 of the present embodiment is the same as that described in any of the first to third embodiments in other points than the above.

(Modification)
The embodiments of the present invention have been described above. However, the present invention is not limited to those described in the above embodiments, and various modifications can be applied.

  For example, in the above embodiment, the case where the check target data D11 is extracted from the received data D10, the check target file D20 is generated, and the virus check is performed on the check target file D20 has been exemplified. This is because existing virus check processing cannot be performed on a part of a file. However, if the virus check process can be performed only on a part of the data of the file, there is no need to generate a check target file D20 different from the received data D10. It is sufficient to perform a virus check only for.

  Further, in the above-described embodiment, the case where the program 15 for performing the virus check in the information processing device 2 is installed in the information processing device 2 in advance is exemplified. However, the program 15 is not limited to the program installed in the information processing apparatus 2 in advance, and may be a program to be traded alone. In this case, the program 15 may be provided to the information processing apparatus 2 in a form downloaded by the user himself via the Internet or the like, or may be recorded on a computer-readable recording medium such as a CD-ROM. It may be provided to the information processing device 2 in a state.

  In the above-described embodiment, the case where the check target registration information 16 and the virus definition file 17 are stored in the information processing apparatus 2 in advance is exemplified. However, the present invention is not limited to this. For example, when the information processing device 2 starts an operation for virus check, the check target registration information 16 or the external device (the server device 8 or the like) via the network 5 or the like. The virus definition file 17 may be obtained.

Reference Signs List 1 information processing system 2 information processing device 14 storage unit (storage means)
15 Program 16 Check target registration information 17 Virus definition file 19 Printer unit (printing means)
20 Data receiving unit (receiving means)
21 Data analysis unit (data analysis means)
22 Virus Check Section (Virus Check Means)
30 job control unit 31 print list acquisition unit (print list acquisition means)
32 Data request part (data request means)

Claims (21)

Receiving means for receiving data;
Data analysis means for analyzing the received data received by the receiving means, and identifying a data portion to be subjected to a virus check from the received data as data to be checked,
Virus check means for performing a virus check on the check target data specified by the data analysis means;
An information processing apparatus comprising: Storage means for storing check target registration information for identifying the check target data,
Further comprising
The information processing apparatus according to claim 1, wherein the data analysis unit specifies the check target data from the received data by referring to the check target registration information based on the received data. .   The information processing apparatus according to claim 1, wherein the data analysis unit specifies the check target data from the received data by analyzing a header portion of the received data.   The information processing apparatus according to claim 1, wherein the data analysis unit determines the check target data from the received data by determining an identifier included in the received data. The data analysis unit generates the check target file by extracting the check target data from the received data,
5. The information processing apparatus according to claim 1, wherein the virus check unit performs a virus check on the file to be checked.   The information processing apparatus according to claim 5, wherein the virus check unit deletes the check target file when the virus check on the check target file ends.   The data analysis unit determines that the entirety of the received data is data that does not need virus check when the source device of the received data is a predetermined image processing device, and omits the virus check by the virus check unit. The information processing apparatus according to any one of claims 1 to 6, wherein Printing means capable of performing print output based on the received data,
Further comprising
8. The information processing apparatus according to claim 1, wherein the printing unit starts printing and outputting based on the received data when a virus is not detected in the virus check by the virus check unit. .   The data analysis unit analyzes the received data to determine print setting data indicating a print setting and print target data to be printed out, and specifies the print target data as the check target data. The information processing apparatus according to claim 8, wherein: A print list acquisition unit for acquiring a list of print target data held by the external device, and displaying the list on a predetermined display unit;
Data requesting means for requesting the external device for print target data included in the list,
With
The data analysis unit, when the print target data requested by the data request unit is received by the reception unit, analyzes the received data and specifies the check target data. 10. The information processing device according to 8 or 9. A receiving step of receiving data;
Analyzing the received data received by the receiving step, a data analysis step of identifying a data portion to be subjected to a virus check from the received data as data to be checked,
A virus check step of performing a virus check on the check target data specified by the data analysis step;
A virus check method comprising: A program executed in an information processing apparatus, wherein the information processing apparatus includes:
A receiving step of receiving data;
Analyzing the received data received by the receiving step, a data analysis step of identifying a data portion to be subjected to a virus check from the received data as data to be checked,
A virus check step of performing a virus check on the check target data specified by the data analysis step;
A program characterized by executing The information processing device,
Storage means for storing check target registration information for identifying the check target data,
With
The method according to claim 12, wherein the data analysis step is a step of specifying the check target data from the received data by referring to the check target registration information based on the received data. program.   14. The program according to claim 12, wherein the data analysis step is a step of analyzing the header part of the received data to specify the check target data from the received data.   14. The program according to claim 12, wherein the data analysis step is a step of identifying the check target data from the received data by determining an identifier included in the received data. The data analysis step includes a step of extracting the check target data from the received data to generate a check target file,
16. The program according to claim 12, wherein the virus check step is a step of performing a virus check on the file to be checked.   17. The program according to claim 16, wherein the virus check step includes a step of deleting the file to be checked upon completion of the virus check on the file to be checked.   In the data analysis step, when the source device of the received data is a predetermined image processing device, the entirety of the received data is determined to be unnecessary data for virus check, and the virus check by the virus check step is omitted. The program according to any one of claims 12 to 17, wherein the program is executed. The information processing device,
Printing means capable of performing print output based on the received data,
With
The program includes:
When a virus is not detected in the virus check in the virus check step, driving the printing unit to perform a print output based on the received data;
The program according to any one of claims 12 to 18, wherein the program is further executed.   The data analysis step determines print setting data indicating print settings and print target data to be printed out by analyzing the received data, and specifies the print target data as the check target data. The program according to claim 19, comprising steps. In the information processing device,
A print list obtaining step of obtaining a list of print target data held by the external device and displaying the list on predetermined display means;
A data requesting step of requesting the external device for print target data included in the list,
Is executed further,
The data analysis step is characterized in that, when the print target data requested by the data request step is received by the reception step, the print data is analyzed to identify the check target data. 21. The program according to 19 or 20.

Images