JP2020145583A - Information processing device, control method thereof, and program - Google Patents

Abstract

To provide an information processing device capable of preventing unintended data from being erased from an SSD due to an abnormal state of an MFP.SOLUTION: The CPU acquires SMART information from an SSD (S711). The SMART information is diagnosis result information by a self-diagnosis function of the SSD. The SMART information includes, for example, information on SSD life such as an integrated startup time, information on read/write errors, and information indicating the power supply status. Next, the CPU determines whether the SSD is in an abnormal state on the basis of the SMART information (S712). In step S712, when the flag status indicating that the power is turned off is acquired while the SSD is running, or when the integrated startup time or the number of read/write error occurrences exceeds a predetermined threshold value set as the life, the CPU determines that the SSD is in an abnormal state, and when none of the above conditions are met, the CPU determines that the SSD is not in the abnormal state.SELECTED DRAWING: Figure 7

Description

The present invention relates to an information processing device, a control method thereof, and a program.

An MFP is known as an information processing device including an SSD (Solid State Drive) which is a non-volatile semiconductor memory. The MFP is used for long-term retention of data that needs to be retained, such as an address book used when specifying the destination of image data, and intermediate data that is generated when a job is executed. Stores multiple types of data in the SSD, such as retention-free data that is not required.

By the way, in SSD, another data cannot be overwritten in the block in which the data is written. Therefore, the MFP temporarily reads the data written in the SSD rewrite target block into the buffer of the MFP, rewrites the data on the buffer, erases the data of the rewrite target block, and then rewrites the rewritten data from the buffer. Write back to the block.

The MFP manages the data storage status in the SSD in the file system of the MFP. In the MFP, for example, when the user receives an instruction to delete the data stored in the SSD, the data is deleted on the file system, but the data is not immediately deleted from the SSD and remains as unnecessary data. The block in which unnecessary data is stored is notified to the SSD by the Trim command, and the SSD executes garbage collection at a predetermined timing based on the Trim command. As a result, the data of the block specified by the Trim command is physically erased from the SSD (see, for example, Patent Document 1). Further, when the SSD has no writable area for data, garbage collection is executed to erase all the data stored in the SSD based on the specified Trim command for the entire storage area of the SSD (for example). , Patent Document 2).

Japanese Unexamined Patent Publication No. 2016-206938 Japanese Unexamined Patent Publication No. 2001-184255

However, in the conventional MFP, unintended data may be deleted from the SSD due to the abnormal state of the MFP. For example, if a problem occurs in the system controller that issues a Trim command due to an electrical trouble such as a flash, an unintended Trim command is issued and not only unnecessary data but also data that needs to be retained is deleted from the SSD. There is a problem that it will be done.

An object of the present invention is to provide an information processing device, a control method thereof, and a program capable of preventing unintended data from being erased from an SSD due to an abnormal state of the MFP.

In order to achieve the above object, the information processing apparatus of the present invention is an information processing apparatus including a non-overwritable non-volatile semiconductor memory, and executes a job including a process of storing data in the semiconductor memory. The erasing command issuance is provided with a management means for managing information related to an abnormal state of the information processing apparatus detected during the period and an erasing command issuing control means for controlling the issuance of an erasing command for erasing the data from the semiconductor memory. The control means is characterized in that it controls the issuance of an erasing command for erasing the data from the semiconductor memory based on the information regarding the abnormal state of the information processing apparatus.

According to the present invention, it is possible to prevent unintended data from being erased from the SSD due to an abnormal state of the MFP.

It is a block diagram which shows schematic structure of the MFP as an information processing apparatus which concerns on embodiment of this invention. It is a figure which shows the memory map of the SSD of FIG. It is a figure which shows an example of the UI screen displayed in the operation part of FIG. It is a sequence diagram for demonstrating the issuance of a Trim command in the MFP of FIG. It is a figure for demonstrating the structure of the Trim command issued by the storage control part of FIG. It is a figure for demonstrating the erasing of the data in the SSD of FIG. It is a flowchart which shows the procedure of the Trim command issuance processing executed by the MFP of FIG. It is a figure which shows an example of the attribute management table stored in the memory of FIG. It is a flowchart which shows the procedure of the data erasure processing executed by the SSD of FIG. It is a flowchart which shows the procedure of the modification of the Trim command issuance processing of FIG.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the present embodiment, the case where the present invention is applied to an MFP provided with an SSD will be described, but the present invention is not limited to the MFP and may be applied to an information processing device such as a client PC equipped with the SSD.

FIG. 1 is a configuration diagram schematically showing a configuration of an MFP 100 as an information processing device according to an embodiment of the present invention.

In FIG. 1, the MFP 100 includes an AC / DC power supply unit 101, a controller 102, a printing unit 106, a document reading unit 107, an operation unit 108, and an SSD 111. The controller 102 is connected to the AC / DC power supply unit 101, the printing unit 106, the document reading unit 107, the operation unit 108, and the SSD 111. Further, the controller 102 includes a CPU 103, a memory 104, an image processing unit 105, a storage control unit 109, a DCDC converter 116, a power supply monitoring unit 117, and a power supply control unit 118.

The AC / DC power supply unit 101 supplies electric power to the controller 102. The controller 102 controls the entire system of the MFP 100. For example, the controller 102 controls a file system (not shown) of the SSD 111 that manages the storage status of the data of the SSD 111. The CPU 103 is connected to the memory 104, the image processing unit 105, the storage control unit 109, and the power supply control unit 118. The CPU 103 executes a program stored in the memory 104 to perform various controls. For example, when writing data to SSD 111 or reading data from SSD 111, the CPU 103 transmits a write or read instruction to the storage control unit 109. The memory 104 stores programs, setting data, and the like executed by the CPU 103. The image processing unit 105 performs image processing on the image data printed by the printing unit 106 and the scan data generated by the document reading unit 107. The printing unit 106 prints the image on paper. The document reading unit 107 reads the installed document and generates scan data. The operation unit 108 receives an instruction from the user. In addition, the operation unit 108 displays a setting screen or the like for setting the MFP 100.

The storage control unit 109 includes a SATAI / F unit 110 for communicating with the SSD 111. The storage control unit 109 transmits commands for writing and reading data to the SSD 111. Further, the storage control unit 109 transmits the Trim command 500 (erase command) of FIG. 5, which will be described later, to the SSD 111. Further, the storage control unit 109 receives the status of the SSD 111 and controls the SSD 111. The SSD 111 includes a NAND controller 112, a NAND flash memory 113, and a memory 114. Further, the SSD 111 includes a SATAI / F unit 115 for communicating with the controller 102. SSD111 is a non-volatile semiconductor memory in which data cannot be overwritten. The SSD 111 retains data even when the supply of electric power to the SSD 111 is stopped. The NAND controller 112 controls the entire SSD 111. The NAND flash memory 113 stores data according to the instructions of the NAND controller 112. The memory 114 is the work memory of the SSD 111. The memory 114 functions as a data buffer that temporarily stores various data necessary for the program and control executed by the NAND controller 112. The SSD 111 writes the data received from the controller 102 to the NAND flash memory 113. Further, the SSD 111 reads data from the NAND flash memory 113 and transmits the data to the controller 102. Further, the SSD 111 sets the SSD 111 based on the command received from the controller 102, and transmits the status of the SSD 111 to the controller 102.

The DCDC converter 116 converts the power supply voltage converted by the ACDC converter (not shown) into the power supply voltage required for driving the SSD 111. The power supply monitoring unit 117 monitors the input voltage level of the DCDC converter 116. The power supply control unit 118 controls ON / OFF of the power supply voltage of the DCDC converter 116.

FIG. 2 is a diagram showing a memory map of SSD 111 of FIG. In FIG. 2, the storage area of the SSD 111 is composed of at least a print spool area 201, a read data storage area 202, a user setting storage area 203, and a log data storage area 204.

The print spool area 201 temporarily stores data that does not need to be retained for a long period of time, for example, print job data. In the present embodiment, among the storage areas of the SSD 111, a predetermined area designated by the controller 102 or the user is used as the print spool area 201. The read data storage area 202 stores the result data generated as a result of executing the job, for example, the scan data generated as a result of executing the scan job. In the present embodiment, among the storage areas of the SSD 111, a predetermined area designated by the controller 102 or the user is used as the read data storage area 202.

The address book and user-specific information are stored in the user setting storage area 203. The address book includes, for example, a telephone number or an e-mail address of a destination specified by the user when performing a fax transmission or an email transmission. The user-specific information is, for example, user-specific customization setting information in the MFP 100. In the log data storage area 204, log data indicating the operation history of the MFP 100 and the error occurrence status of the MFP 100 is stored. In the present embodiment, in the log data storage area 204, a different area is allocated to each user who uses the MFP 100.

FIG. 3 is a diagram showing an example of the UI screen 301 displayed on the operation unit 108 of FIG. In FIG. 3A, the UI screen 301 is a screen for displaying a list of scan data generated by the document reading unit 107. In the window 302 of the UI screen 301, the file name, size, and generation date and time of the scan data generated by the document reading unit 107 are displayed. In addition, a plurality of check boxes corresponding to each scan data are displayed in the window 302. The user can select at least one check box among a plurality of check boxes. In the window 302, for example, when the user selects the file edit button 304 with the check box 303 selected, the pop-up window 305 of FIG. 3B is displayed superimposed on the window 302. In the pop-up window 305, the deletion, duplication, and file renaming of the scan data corresponding to the check box selected by the user in the window 302 are instructed. For example, when the user selects the delete button 306 in the pop-up window 305, the MFP 100 accepts it as an instruction to delete the scan data corresponding to the check box selected in the window 302. In the present embodiment, when the data deletion instruction is received on the UI screen 301, the data is deleted from the file system of the SSD 111, but the data is not immediately deleted from the SSD 111 and remains as unnecessary data.

FIG. 4 is a sequence diagram for explaining the issuance of the Trim command in the MFP 100 of FIG.

In FIG. 4, in the MFP 100, in order to physically erase the remaining unnecessary data from the storage area of the SSD 111, the CPU 103 executes the Trim command issuing process of FIG. 7, which will be described later, and sends a Trim command to the storage control unit 109. Instruct issuance (erase command issuance control means). Upon receiving the instruction to issue the Trim command, the storage control unit 109 issues the Trim command 500 shown in FIG. 5 and transmits the Trim command 500 to the SSD 111. The NAND controller 112 of the SSD 111 that has received the Trim command 500 transmits a reception notification indicating that the Trim command 500 has been received to the controller 102. Further, the NAND controller 112 executes the data erasing process of FIG. 9 to erase the data stored in the block of SSD 111 specified by the Trim command 500.

FIG. 5 is a diagram for explaining the configuration of the Trim command 500 issued by the storage control unit 109 of FIG. The Trim command 500 is a command for notifying the SSD 111 of a block in which unnecessary data is written among a plurality of blocks constituting the storage area of the SSD 111. In the Trim command 500, the logical address on the file system of the SSD 111 indicating the block is set as the information indicating the block in which the unnecessary data is written. In the MFP 100, an address different from the physical address indicating the certain block in the storage area of the NAND flash memory 113 of the SSD 111 is assigned as a logical address on the file system of the SSD 111 indicating a certain block. In the MFP 100, the logical address and the physical address are managed based on the address conversion table in Table 1 below stored in the memory 114 of the SSD 111.

In the address conversion table, a logical address and a physical address are associated one-to-one. The address conversion table is managed by the NAND controller 112. When the block in which unnecessary data is written in the NAND flash memory 113 is changed by garbage collection or the like, the address conversion table is updated.

In FIG. 5, the Trim command 500 is composed of a Trim area 501, a start logical address area 502, and a size area 503. In the Trim area 501, a set value indicating whether to enable or disable the Trim function is set. When the Trim function is enabled, "1" indicating this is set in the Trim area 501. When the Trim function is disabled, "0" indicating this is set in the Trim area 501. In the start logical address area 502, a logical address indicating a block to be executed of the Trim command is set. In the size area 503, the size of the block to which the Trim command is executed is set. When "1" is set in the Trim area 501, an area of the storage area of the SSD 111 formed by the size described in the size area 503 with reference to the block of the logical address described in the start logical address area 502. The Trim command is executed for. For example, when the Trim command in which the area 601 composed of the blocks 3 and 4 of FIG. 6A in which only unnecessary data is written is designated as the execution target is executed, the storage area of the SSD 111 is displayed in FIG. 6 (b). ), The data in the area 601 is physically erased. The Trim command 500 is defined by the ATA (AT Attachment) interface standard, and is transmitted from the storage control unit 109 to the SSD 111. In the SSD 111, the SATA I / F 115 receives the Trim command 500, and the NAND controller 112 interprets and executes the Trim command 500.

Here, conventionally, unintended data may be deleted from the SSD due to an abnormal state of the MFP. For example, when a problem occurs in the storage control unit that issues a Trim command due to an electrical trouble such as a flash, an unintended Trim command may be issued. In this case, there arises a problem that not only unnecessary data but also data such as an address book that needs to be retained for a long period of time is deleted from the SSD.

Correspondingly, in the present embodiment, the issuance of the Trim command 500 is controlled based on the information regarding the abnormal state of the MFP 100.

FIG. 7 is a flowchart showing a procedure of the Trim command issuance process executed by the MFP 100 of FIG. The process of FIG. 7 is performed by the CPU 103 executing a program stored in the memory 104.

In FIG. 7A, the CPU 103 waits until it receives an instruction to delete the data stored in the SSD 111. For example, when the user selects the delete button 306 while the check box corresponding to the data stored in the SSD 111 is selected in the window 302, the CPU 103 determines that the deletion instruction of the data stored in the SSD 111 has been accepted. Upon receiving the deletion instruction of the data stored in the SSD 111 (YES in step S701), the CPU 103 refers to the attribute management table 801 of FIG. 8 for managing the information regarding the abnormal state of the MFP 100.

The attribute management table 801 is stored in the memory 104. The attribute management table 801 is composed of a logical address 802, a data size 803, a data attribute 804, a user information 805, a JOB state 806, a power supply state 807, a recording date / time 808, and an erasing date / time 809. The logical address 802 is set to the logical address on the file system of SSD 111 regarding the stored data. The data size of the data stored in the SSD 111 is set in the data size 803. In the data attribute 804, an attribute indicating the type of data stored in the SSD 111 is set. In the data attribute 804, for example, "spool", "read image", "address book", and "log" are set as data attributes. The “spool” is set for the data that does not need to be held, and is set for the data stored in the print spool area 201 in the SSD 111, for example. The "read image" is generated for the result data generated as a result of executing the job, and is set for, for example, the data stored in the read data storage area 202 in the SSD 111. The "address book" is set for the address book and user-specific information, and is set for, for example, the data stored in the user setting storage area 203 in the SSD 111. The "log" is set for the log data indicating the operation history of the MFP 100 and the error occurrence status of the MFP 100, and is set for, for example, the data stored in the log data storage area 204 of the SSD 111.

The user information 805 is set with information that identifies the user who owns the data stored in the SSD 111. In the JOB state 806, "Error" indicating this is set when the job including the process of storing the data in the SSD 111 is not normally completed. In the power supply state 807, information regarding the power supply status in the MFP 100 while executing the job including the process of storing the data in the SSD 111 is set. Specifically, in the power supply state 807, "Error" indicating this is set when it is determined that the power is not stably supplied to the SSD 111. For example, while executing a job related to a certain data, if it is determined that power is not stably supplied to the SSD 111 based on the monitoring result of the input voltage level by the power supply monitoring unit 117, the power supply control unit 118 determines. Notify the CPU 103 of this fact. Upon receiving the notification, the CPU 103 inputs "Error" in the power supply state 807 corresponding to the above data in the attribute management table 801. The recording date and time 808 is set to the date on which the data was recorded on the SSD 111. The date on which the data was erased from the SSD 111 is set in the erase date and time 809.

Returning to FIG. 7A, the CPU 103 determines the attribute of the data for which the deletion instruction has been received (hereinafter, referred to as “deletion instruction data”) based on the attribute management table 801 (step S702). Next, the CPU 103 executes the abnormality detection process shown in FIG. 7B (step S703).

In FIG. 7B, the CPU 103 acquires SMART information from the SSD 111 (step S711). SMART information is the diagnosis result information by the self-diagnosis function of SSD111. The SMART information includes, for example, information on the life of the SSD 111 such as an integrated start-up time, information on a read / write error, and information indicating a power supply state. Next, the CPU 103 determines whether or not the SSD 111 is in an abnormal state based on the SMART information (step S712). In step S712, for example, when a flag status indicating that the power has been turned off is acquired during the operation of the SSD 111, or when the integrated start-up time or the number of occurrences of a read / write error exceeds a predetermined threshold value set as the life. The CPU 103 determines that the SSD 111 is in an abnormal state. On the other hand, if none of the above conditions is satisfied, the CPU 103 determines that the SSD 111 is not in an abnormal state.

As a result of the determination in step S712, when the SSD 111 is in an abnormal state, the CPU 103 ends this process without instructing the storage control unit 109 to issue the Trim command 500. That is, in the present embodiment, when the SSD 111 is in an abnormal state, the Trim command 500 is not issued. As a result of the determination in step S712, when the SSD 111 is not in an abnormal state, the CPU 103 confirms the main body error status of the MFP 100 based on the log data stored in the log data storage area 204 (step S713). Next, the CPU 103 refers to the JOB state 806 and the power supply state 807 of the deletion instruction data in the attribute management table 801 and determines whether or not "Error" is set in the JOB state 806 of the deletion instruction data (step S714). ..

As a result of the determination in step S714, when "Error" is set in the JOB state 806 of the deletion instruction data, the CPU 103 ends this process without instructing the storage control unit 109 to issue the Trim command 500. For example, if the deletion instruction data is data in which "Error" is set in the JOB state 806, such as the data of the logical address "1100" in the attribute management table 801, the Trim command 500 is not issued. Further, even when the logical address "6100" whose value of the user information 805 is the same "B" as the logical address "1100" in the attribute management table 801 is the deletion instruction data, the Trim command 500 is not issued.

As a result of the determination in step S714, when "Error" is not set in the JOB state 806 of the deletion instruction data, the CPU 103 determines whether or not "Error" is set in the power supply state 807 of the deletion instruction data ( Step S715).

As a result of the determination in step S715, when "Error" is set in the power supply state 807 of the deletion instruction data, the CPU 103 ends this process without instructing the storage control unit 109 to issue the Trim command 500. For example, if the deletion instruction data is data in which "Error" is set in the power supply state 807, such as the data of the logical address "1200" in the attribute management table 801, the Trim command 500 is not issued. Further, even when the logical address "6200" whose value of the user information 805 is the same "C" as the logical address "1200" in the attribute management table 801 is the deletion instruction data, the Trim command 500 is not issued.

As a result of the determination in step S715, when "Error" is not set in the power supply state 807 of the deletion instruction data, the CPU 103 determines whether or not the data inconsistency has occurred (step S716). In step S716, for example, when the data required for starting the MFP 100 is inconsistent, the CPU 103 determines that the data inconsistency has occurred. On the other hand, if the data required to start the MFP 100 is not inconsistent, the CPU 103 determines that the data inconsistency has not occurred. In the present embodiment, when the shutdown instruction by the user is received, the MFP 100 records information indicating whether or not the shutdown process is normally completed. In the shutdown process, the MFP 100 executes a backup process of backing up the data recorded in the memory 104 composed of a volatile memory such as DDR to the SSD 111 which is a non-volatile recording device. In the backup process, for example, files and setting data necessary for starting the system of the MFP 100 are backed up to the SSD 111 as the data stored in the memory 104. Here, if the power supply to the MFP 100 is stopped without the backup process being normally completed due to a power failure or the like, the data recorded in the memory 104 composed of the volatile memory is lost, for example, the MFP 100. Inconsistency occurs in the data required to start. The CPU 103 performs the following processing so that the data inconsistency can be easily resolved.

Specifically, when the data inconsistency occurs as a result of the determination in step S716, the CPU 103 ends this process without instructing the storage control unit 109 to issue the Trim command 500. That is, in the present embodiment, the Trim command 500 is not issued when data inconsistency occurs. As a result of the determination in step S716, when there is no data inconsistency, the CPU 103 determines whether or not the attribute of the deletion instruction data is "spool" (step S704).

As a result of the determination in step S704, when the attribute of the deletion instruction data is "spool", the CPU 103 acquires the logical address and size of the print spool area 201 in which the deletion instruction data is stored (step S705). Next, the CPU 103 instructs the storage control unit 109 to issue the Trim command 500 (step S706). Upon receiving the instruction, the storage control unit 109 sets "1" in the Trim area 501, and further issues a Trim command 500 in which the logical address and size acquired in step S705 are set in the start logical address area 502 and the size area 503. .. Next, the CPU 103 causes the storage control unit 109 to transmit the Trim command 500 to the SSD 111 (step S707), and ends this process.

As a result of the determination in step S704, when the attribute of the deletion instruction data is not "spool", the CPU 103 acquires the remaining capacity X of the SSD 111 disk on the file system (step S708). Next, the CPU 103 determines whether or not the remaining capacity X is less than a predetermined threshold value Y (step S709). The predetermined threshold value Y is a capacity required for the MFP 100 to maintain a constant performance as an information processing system. The predetermined threshold Y is determined by the NAND controller 112 or set by the user.

As a result of the determination in step S709, when the remaining capacity X is equal to or greater than the predetermined threshold value Y, the CPU 103 ends this process without instructing the storage control unit 109 to issue the Trim command 500. As a result of the determination in step S709, when the remaining capacity X is less than the predetermined threshold value Y, the CPU 103 determines the data to be executed of the Trim command (step S710). In step S710, the CPU 103 refers to the attribute management table 801 and determines the data to be executed of the Trim command so that the remaining capacity X exceeds a predetermined threshold value Y. Specifically, the CPU 103 determines data having a capacity corresponding to YX as data to be executed of the Trim command in order from the data having the oldest recording date and time 808 in the attribute management table 801. Next, the CPU 103 performs the processes after step S705.

FIG. 9 is a flowchart showing a procedure of data erasure processing executed by SSD 111 of FIG. The process of FIG. 9 is performed by the NAND controller 112 executing a program stored in the memory 114.

In FIG. 9, when the NAND controller 112 receives a command from the controller 102 (step S901), the NAND controller 112 determines whether or not the received command is the Trim command 500 (step S902).

As a result of the determination in step S902, when the received command is not the Trim command 500, the NAND controller 112 executes the received command (step S903) and ends this process.

As a result of the determination in step S902, when the received command is the Trim command 500, the NAND controller 112 determines whether or not a value is set in the area designation option in the Trim command 500 (step S904). The area specification options are, for example, the start logical address area 502 and the size area 503 of the Trim command 500.

As a result of the determination in step S904, when the area designation option of the Trim command 500 is set to a value, the NAND controller 112 acquires the logical address set in the start logical address area 502. The NAND controller 112 acquires the physical address associated with the acquired logical address based on the address conversion table (step S905). Next, the NAND controller 112 determines whether or not unnecessary data exists in the designated area of the SSD 111 indicated by the acquired physical address and the value set in the size area 503 (step S906).

As a result of the determination in step S906, when there is no unnecessary data in the designated area of the SSD 111, the NAND controller 112 ends this process. As a result of the determination in step S906, when unnecessary data exists in the designated area of the SSD 111, the NAND controller 112 searches for an empty block in which the data is not written in the SSD 111 (step S907), and waits for a predetermined timing suitable for processing. (Step S908). The predetermined timing is, for example, when the access from the controller 102 is small, or when a predetermined predetermined time has elapsed. The NAND controller 112 copies the valid data written in one block in the designated area to an empty block at the predetermined timing described above (step S909). The NAND controller 112 then physically erases the data in one block (step S910) and returns to the process of step S906.

As a result of the determination in step S904, when the value is not set in the area designation option of the Trim command 500, the NAND controller 112 determines whether or not unnecessary data exists in the storage area of the SSD 111 (step S911).

As a result of the determination in step S911, when there is no unnecessary data in the storage area of the SSD 111, the NAND controller 112 ends this process. As a result of the determination in step S911, when unnecessary data exists in the storage area of the SSD 111, the NAND controller 112 searches for an empty block in which the data is not written in the SSD 111 (step S912), and waits for the predetermined timing (step S913). ). The NAND controller 112 copies the valid data written in one block in the storage area of the SSD 111 to an empty block at the predetermined timing described above (step S914). The NAND controller 112 then physically erases the data in one block (step S915) and returns to the process of step S911.

According to the above-described embodiment, the issuance of the Trim command 500 is controlled based on the information regarding the abnormal state of the MFP 100. As a result, it is possible to prevent the Trim command 500 having unintended contents from being issued due to the abnormal state of the MFP 100. As a result, it is possible to prevent unintended data from being erased from the SSD 111 due to the abnormal state of the MFP 100.

Further, in the above-described embodiment, the information regarding the abnormal state of the MFP 100 is managed by the attribute management table 801. As a result, it is possible to reliably manage the information regarding the abnormal state of the MFP 100 for controlling the issuance of the Trim command 500.

In the above-described embodiment, the information regarding the abnormal state of the MFP 100 includes information indicating that the job including the process of storing the data in the SSD 111 has not been normally completed. As a result, it is possible to prevent the Trim command 500 having unintended contents from being issued due to an abnormal state of the MFP 100 that prevents the job from being normally completed.

Further, in the above-described embodiment, the information regarding the abnormal state of the MFP 100 includes information regarding the power supply status of the MFP 100 while executing the job including the process of storing the data in the SSD 111. As a result, it is possible to prevent the Trim command 500 having unintended contents from being issued due to the abnormal state of the MFP 100 regarding the power supply.

Further, in the above-described embodiment, the information regarding the abnormal state of the MFP 100 includes attribute information indicating the type of data. As a result, it is possible to prevent the data of a specific type caused by the abnormal state of the MFP 100 from being erased from the SSD 111.

In the above-described embodiment, the information regarding the abnormal state of the MFP 100 includes user information of data. As a result, it is possible to prevent the data of a specific user due to the abnormal state of the MFP 100 from being erased from the SSD 111.

In the above-described embodiment, the MFP 100 is an image forming apparatus having a print function, a copy function, a scan function, and a fax function. As a result, it is possible to prevent the data required for the print function, the copy function, the scan function, and the fax function from being erased from the SSD 111 due to the abnormal state of the MFP 100.

Although the present invention has been described above with reference to the above-described embodiment, the present invention is not limited to the above-described embodiment. For example, the result of detecting an abnormality in the abnormality detection process in step S703 may be held as an abnormality detection flag.

FIG. 10 is a flowchart showing a procedure of a modification of the Trim command issuing process of FIG. 7. The process of FIG. 10 is also performed by the CPU 103 executing the program stored in the memory 104.

In FIG. 10, the CPU 103 performs the processes of steps S701 to S703. In step S703, the CPU 103 performs the processes of steps S711 and S712 as described above.

When the SSD 111 is in an abnormal state as a result of the determination in step S712, when "Error" is set in the JOB state 806 of the deletion instruction data as a result of the determination in step S714, the determination result in step S715, the deletion instruction data When "Error" is set in the power supply state 807 of the above, or when data inconsistency occurs as a result of the determination in step S716, the CPU 103 sets an abnormality detection flag in the memory 104 indicating that an abnormality has been detected. Record (step S1001). Specifically, the CPU 103 changes the abnormality detection flag from "0" indicating that it is in a normal state to "1" indicating that an abnormality has been detected. Next, the CPU 103 ends this process.

As a result of the determination in step S712, when the SSD 111 is not in an abnormal state, the CPU 103 performs the processes of steps S713 and S714. As a result of the determination in step S714, when "Error" is not set in the JOB state 806 of the deletion instruction data, the CPU 103 performs the process of step S715. As a result of the determination in step S715, when "Error" is not set in the power supply state 807 of the deletion instruction data, the CPU 103 performs the process of step S716. As a result of the determination in step S716, when there is no data inconsistency, the CPU 103 determines whether or not it is set to use the abnormality detection flag (step S1002). In the present embodiment, whether or not to use the abnormality detection flag is set by the user.

As a result of the determination in step S1002, when it is not set to use the abnormality detection flag, the CPU 103 performs the processes after step S704. As a result of the determination in step S1002, when it is set to use the abnormality detection flag, the CPU 103 determines whether the abnormality detection flag is "0" or "1" (step S1003).

As a result of the determination in step S1003, when the abnormality detection flag is "0", the CPU 103 performs the processes after step S704. As a result of the determination in step S1003, when the abnormality detection flag is "1", the CPU 103 ends this process without instructing the storage control unit 109 to issue the Trim command 500.

In the above-described embodiment, the information regarding the abnormal state of the MFP 100 is managed by the abnormality detection flag. As a result, it is possible to easily prevent unintended data from being deleted from the SSD 111 due to an abnormal state of the MFP 100 without creating the attribute management table 801.

The present invention supplies a program that realizes one or more functions of the above-described embodiment to a system or device via a network or storage medium, and one or more processors in the computer of the system or device read the program. It can also be realized by the processing to be executed. The present invention can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

100 MFP
102 controller 103 CPU
111 SSD
500 Trim command 801 Attribute management table 804 Data attribute 805 User information 806 JOB status 807 Power status

Claims (11)

An information processing device equipped with a non-volatile semiconductor memory that cannot be overwritten.
A management means for managing information regarding an abnormal state of the information processing apparatus detected while executing a job including a process of storing data in the semiconductor memory, and a management means.
The erase command issuance control means for controlling the issuance of the erase command for erasing the data from the semiconductor memory is provided.
The information processing device is characterized in that the erasing command issuance control means controls the issuance of an erasing command for erasing the data from the semiconductor memory based on information regarding an abnormal state of the information processing device. The information processing device according to claim 1, wherein the management means manages information regarding an abnormal state of the information processing device by a predetermined management table. The information processing apparatus according to claim 2, wherein the information regarding the abnormal state of the information processing apparatus includes information indicating that the job including the process of storing the data in the semiconductor memory has not been normally completed. .. The information regarding the abnormal state of the information processing apparatus includes information regarding the power supply status of the information processing apparatus while executing a job including a process of storing the data in the semiconductor memory. Item 2. The information processing apparatus according to item 2 or 3. The information processing device according to any one of claims 2 to 4, wherein the information regarding the abnormal state of the information processing device includes attribute information indicating the type of the data. The information processing device according to any one of claims 2 to 5, wherein the information regarding the abnormal state of the information processing device includes user information of the data. The information processing device according to claim 1, wherein the management means manages information regarding an abnormal state of the information processing device by an abnormality detection flag. The information processing device according to any one of claims 1 to 7, wherein the semiconductor memory is an SSD. The information processing apparatus according to any one of claims 1 to 8, wherein the image forming apparatus has a print function, a copy function, a scan function, and a fax function. A control method for an information processing device equipped with a non-volatile semiconductor memory that cannot be overwritten.
A management step for managing information regarding an abnormal state of the information processing apparatus detected while executing a job including a process of storing data in the semiconductor memory, and a management step.
It has an erase command issuance control step that controls issuance of an erase command that erases the data from the semiconductor memory.
The erasing command issuance control step is a control method for an information processing device, which controls issuance of an erasing command for erasing the data from the semiconductor memory based on information about an abnormal state of the information processing device. A program that causes a computer to execute a control method for an information processing device equipped with a non-volatile semiconductor memory that cannot be overwritten.
The control method of the information processing device is
A management step for managing information regarding an abnormal state of the information processing apparatus detected while executing a job including a process of storing data in the semiconductor memory, and a management step.
It has an erase command issuance control step that controls issuance of an erase command that erases the data from the semiconductor memory.
The erase command issuance control step is a program characterized in that the issuance of an erase command for erasing the data from the semiconductor memory is controlled based on information regarding an abnormal state of the information processing apparatus.