JP2021123093A - Printer, program, and information erasing method - Google Patents

Abstract

To reduce possibilities that specific information recorded in a non-volatile memory of a printer is accessed by a third party.SOLUTION: A printer communicable with a host computer includes: a first acquisition part for acquiring from the host computer, specific information used by the printer during an operation period of the printer, and recorded in a non-volatile memory of the printer; a second acquisition part for acquiring from the host computer, erasure setting information for setting an erasure time of the specific information to an ending period of the operation period, or a time after a lapse of a predetermined time from the ending period; and an erasure part for erasing the specific information from the non-volatile memory after a current time reaches the erasure time.SELECTED DRAWING: Figure 3

Description

The present invention relates to a printer, a program, and an information erasing method.

The print data taken in for printing by the printer is temporarily stored in the buffer and then erased from the buffer after printing. However, specific information such as personal information, graphic data (for example, a pattern indicating a specific company), a dedicated font, communication setting data, and the like are stored in the non-volatile memory of the printer regardless of the presence or absence of printing.

Conventionally, a printer with improved safety has been proposed in order to prevent the data stored in the printer from leaking to the outside (for example, Patent Document 1). Patent Document 1 describes an image forming apparatus (printer) having a data erasure control unit that erases confidential data stored in a data storage unit when the system or the image forming apparatus is restarted.

Japanese Unexamined Patent Publication No. 2003-150360

By the way, if the printer is stolen after the printer's operating period ends, the specific information recorded in the non-volatile memory of the printer is stolen by a third party, and the print printed based on the specific information is printed. The medium (for example, a label such as a receipt) may be issued by a third party. Considering such a possibility, the method of erasing the data at the time of restart as in the printer described in Patent Document 1 is not sufficient in terms of security.

Therefore, an object of the present invention is to reduce the possibility that the specific information recorded in the non-volatile memory of the printer is accessed by a third party.

One aspect of the present invention is a printer capable of communicating with a host computer, and the specific information used by the printer during the operating period of the printer and recorded in the non-volatile memory of the printer is acquired from the host computer. The first acquisition unit and the second acquisition unit for acquiring the erasure setting information for setting the erasure time of the specific information at the end of the operation period or at a time when a predetermined time has elapsed from the end of the operation period. An acquisition unit, an erasing unit that erases the specific information from the non-volatile memory after the current time reaches the erasing time, and a printer.

According to an aspect of the present invention, it is possible to reduce the possibility that the specific information recorded in the non-volatile memory of the printer is accessed by a third party.

It is a figure which shows the schematic structure of the printer system of an embodiment. It is a block diagram which shows the system structure of the printer system of embodiment. It is a sequence chart which concerns on 1st example of the printer system of embodiment. It is a sequence chart which concerns on 2nd example of the printer system of embodiment. It is a sequence chart which concerns on 3rd example of the printer system of embodiment. It is a sequence chart at the time of managing specific data in the printer system of embodiment.

In the present disclosure, the "specific information" means information that is valuable, highly useful, or confidential information to the user of the printer 2 or the owner of the print medium issued by the printer 2. The "specific information" is not limited to confidential information, and includes information that is meaningful to a specific user, such as a design indicating a specific company or a dedicated font used by the specific company.

Hereinafter, the printer system 1 according to the embodiment of the present invention will be described.

(1) Configuration of Printer System 1 Hereinafter, the configuration of the printer system 1 of the present embodiment will be described with reference to FIGS. 1 and 2. FIG. 1 is a diagram showing a schematic configuration of the printer system 1 of the present embodiment. FIG. 2 is a block diagram showing a system configuration of the printer system 1 of the present embodiment.

As shown in FIG. 1, the printer system 1 of this embodiment includes a printer 2 and a host computer 3. The printer 2 and the host computer 3 are connected via a network NW. The network NW is, for example, a cellular network, a Wi-Fi network, the Internet, a LAN (Local Area Network), a WAN (Wide Area Network), or the like.

The printer 2 is a printer used by the user, and is arranged at a desired location used by the user, such as a user's office, factory, or warehouse. The type of the printer 2 is not limited, but is, for example, a label printer. In a label printer, a label roll in which continuous paper containing a plurality of labels is wound is accommodated, and information is printed on each label.

The host computer 3 is, for example, an information processing terminal such as a laptop computer, a tablet computer, or a smartphone. The host computer 3 is configured to be able to remotely control the printer 2 by a command according to a predetermined printer language defined in advance with the printer 2. In FIG. 1, for the sake of simplicity, the host computer 3 and the printer 2 are shown in a one-to-one relationship, but the host computer 3 can be configured to control a plurality of printers 2.

As shown in FIG. 2, the printer 2 includes a control unit 21, a storage 22, an operation input unit 23, a display unit 24, a motor drive unit 25, a head drive unit 26, and a communication unit 27.
The control unit 21 includes a microcomputer and a memory (RAM (Random Access Memory), ROM (Read Only Memory)), and controls the operation of the printer 2. The microprocessor reads and executes the firmware and other programs stored in the ROM when the printer 2 is started. The RAM may function, for example, as a buffer in which print data for label issuance is temporarily recorded.
The control unit 21 has a real-time clock, or can refer to an external real-time clock to acquire the current time.

The storage 22 includes a non-volatile memory such as an SSD (Solid State Drive). Specific data (an example of specific information) acquired from the host computer 3 is stored in the non-volatile memory.

The specific data is not limited, but is, for example, personal information, graphic data (for example, a design indicating a specific company), a dedicated font (for example, a font used only for a specific company), communication setting data (for example, for example). Information for establishing communication with the host computer 3). At least one of these pieces of information is recorded in the non-volatile memory of the storage 22 because it may be continuously accessed to print the label during the operating period of the printer 2.

When the microcomputer executes the program, the control unit 21 functions as a first acquisition unit, a second acquisition unit, and an erasing unit.
The first acquisition unit acquires specific information used by the printer 2 during the operating period of the printer 2 and recorded in the non-volatile memory of the storage 22 of the printer 2 from the host computer 3.
The second acquisition unit issues an erasure timing command (an example of erasure setting information) from the host computer 3 to set the erasure time of specific data at the end of the operating period or at a time when a predetermined time has elapsed from the end of the operation period. get.
The erasing unit erases the specific data from the non-volatile memory of the storage 22 after the current time reaches the erasing time.

The operation input unit 23 is at least one of an operation button provided on the housing of the printer 2 and a touch input button provided on the touch panel input screen.
The display unit 24 includes, for example, a display panel such as an LCD (Liquid Crystal Display) and a drive circuit for displaying an image on the display panel.

The motor drive unit 25 drives a stepping motor (not shown) that controls the rotation of the platen roller (not shown) and the ink ribbon take-up roller. As a result, the continuous paper is pulled out from the label roll and conveyed, and the ink ribbon (not shown) is wound up.
The motor drive unit 25 conveys continuous paper in the transfer direction (forward or reverse direction) and the transfer amount specified by the transfer request in response to the transfer request from the control unit 21. The specified transport direction and transport amount correspond to, for example, the rotation direction and drive frequency of the stepping motor and the number of steps. The motor drive unit 25 drives the stepping motor based on the rotation direction, the drive frequency, and the number of steps.

The control unit 21 receives print data from, for example, the host computer 3 via the network NW. Based on the print data, the head drive unit 26 causes a current to flow to each heat generating element of the thermal head having a plurality of heat generating elements according to a timing selectively required. When the heat generating element generated by the electric current is pressed against the label conveyed by the platen roller via the ink ribbon, the ink of the ink ribbon is melted and transferred to the portion of the label pressed against the heat generating element. As a result, information is printed on the label.

The communication unit 27 communicates with the host computer 3 via the network NW, and transmits / receives data.

As shown in FIG. 2, the host computer 3 includes a control unit 31, a storage 32, and a communication unit 33.
The control unit 31 includes a microcomputer and a memory (RAM, ROM), and controls the operation of the host computer 3. The microcomputer reads and executes the control program stored in the ROM when the host computer 3 starts up. For example, the control unit 31 controls the communication unit 33 so as to transmit an erase timing command to the printer 2 at a predetermined timing.

The erasure timing command is a command for instructing the printer 2 to erase the specific data stored in the printer 2. In the erase timing command, the erase time can be specified by various methods. For example, when the operating period of the printer 2 is from 8:00 to 18:00 every day, the erasing time may be 24:00 at the end of the month or the weekend, or the end of the daily operating period (18:00) may be the erasing time. , 3 hours after the end of the daily operation period may be set as the erasure time. The erasure time may be a specific date and time.
For safer erasure, in order to prevent third parties from accessing specific data outside the operating period as much as possible, delete at the end of the daily operating period or after a predetermined time from the end of the daily operating period. Let it be the time.

The storage 32 is, for example, a large-scale storage device such as an HDD (Hard Disk Drive), and stores specific data to be stored in the printer 2 and print data used for issuing labels in the printer 2.
The communication unit 33 communicates with the printer 2 via the network NW, and transmits / receives data. The communication unit 33 transmits, for example, various commands including an erasure timing command, print data, and specific data to the printer 2.

(2) Operation of Printer System 1 Next, the operation of the printer system 1 of the present embodiment will be described with reference to FIGS. 3 to 5.
FIG. 3 is a sequence chart according to the first example of the printer system 1 of the present embodiment. FIG. 4 is a sequence chart according to a second example of the printer system 1 of the present embodiment. FIG. 5 is a sequence chart according to a third example of the printer system 1 of the present embodiment.

(2-1) First example (Fig. 3)
With reference to FIG. 3, the Nth operating period and the N + 1th operating period of the printer 2 are shown. For example, the operating period of one day may be the Nth operating period, and the operating period of the next day may be the N + 1th operating period.

At this time, at the beginning of the Nth operating period of the printer 2, the host computer 3 uses a predetermined command to transmit specific data and print data to the printer 2 (step S1). When the printer 2 receives the specific data and the print data, the printer 2 records each data in the storage 22 and performs various registration operations based on the specific data (step S2). Various registration operations include, for example, initialization of the printer 2, preparation of print data for label issuance, and the like. When the label issuance is ready, the printer 2 starts the label issuance based on the print data.

The host computer 3 transmits an erasure timing command, for example, periodically during the operation period of the printer 2 (steps S3, S5, S7). Upon receiving the erase timing command, the printer 2 records or updates the erase time specified by the erase timing command (steps S4, S6, S8). In the first example, it is assumed that the erasing time is set after a predetermined α time from the end of the operating period. In addition, α can be set to 0 or a desired positive number.

After that, the Nth operation period ends, and the printer 2 is either turned off or left on. The printer 2 erases the specific data α hours after the end of the operating period according to the set erase time (step S9). At this time, when the printer 2 is battery-powered, the minimum necessary functions of the control unit 21 are maintained even after the power is turned off. That is, the real-time clock operates even after the power is turned off, and the control unit 21 erases the specific data from the storage 22 α hours after the end of the operating period. Similarly, when the power of the printer 2 is left on, the specific data is erased from the storage 22 α hours after the end of the operating period.
Therefore, after α time has passed after the end of the Nth operation period, a third party cannot take the printer 2 to the outside to steal the specific data or issue a label using the specific data. Security can be ensured.

At the beginning of the N + 1th operating period following the Nth operating period, the host computer 3 uses a predetermined command to transmit new specific data and print data to the printer 2 (step S11). The processing after step S12 is the same as the processing after step S2.

(2-2) Second example (Fig. 4)
In the second example, it is assumed that the printer 2 is not battery-powered and the power of the printer 2 is turned off at the end of the Nth operating period.

In this case, the printer 2 cannot erase the specific data at the erase time specified by the erase timing command (that is, the time α hours after the end of the Nth operation period). Therefore, referring to FIG. 4, the printer 2 erases the specific data at the next power-on (start-up), that is, at the beginning of the N + 1th operating period (step S10). Since the control unit 21 of the printer 2 records the information of the erasure time specified by the erasure timing command, it reads the information at the time of startup and determines that the current time has already passed the erasure time. Erase the data. In this case, the specific data cannot be erased after α hours from the operating period, but the specific data is erased when a malicious third party starts the printer 2 after that, so that the security is substantially maintained.

After step S10, when the host computer 3 recognizes that the specific data has not been recorded in the printer 2 by a predetermined command, it transmits new specific data and print data to the printer 2 (step S11). The processing after step S12 is the same as that in FIG.

(2-3) Third example (Fig. 5)
In the third example, the erasure time is set to a later time than in the first and second examples.
In FIG. 5, steps S1 to S8 in the Nth operating period (an example of the first operating period) are the same as those in FIG. 3, but the erasing time specified by the erasing timing command is the N + 1th operating period (first operating period). It differs from FIG. 3 in that it is set after the start of (2), which is an example of the operating period.

In this case, when the printer 2 is started during the N + 1th operating period, the printer 2 receives the updated specific data (new specific data) and the print data from the host computer 3 and records them (steps S20 and S21). .. After that, when the current time reaches the erasure time, the printer 2 erases the specific data received in step S1 (step S22) and performs various registration operations based on the specific data received in step S20 (step S23). .. The control unit 21 of the printer 2 may acquire the updated specific data and print data between the start of the N + 1th operation period and the erasure time.
After that, the printer 2 receives the erasure timing command and records or updates the erasure time specified by the erasure timing command (steps S24 and S25).
In this example, since the registration work is not required at the initial stage of the N + 1th operation period, there is an advantage that the operation can be started smoothly.

(3) Example of Control by Command Next, an example of control by a command when managing specific data will be described with reference to FIG. FIG. 6 is a sequence chart when managing specific data in the printer system 1 of the present embodiment.

For example, when the host computer 3 transmits data to the printer 2 by a command, the host computer 3 uses a command having a different format depending on whether the data is specific data or data other than the specific data (referred to as general data). .. That is, in step S1 of FIGS. 3 to 5, when transmitting the specific data and the print data, the command includes the transmission data and a code indicating whether or not the transmission data has the specific data.
Referring to FIG. 6, when the host computer 3 transmits data to the printer 2, it is assumed that the command C1 includes specific data and the command C2 includes general data (steps S30 and S31).

The printer 2 interprets each command and manages different data for specific data and general data. In the example shown in FIG. 6, when the received data is specific data (step S32: YES), the flag is set to 1, and the specific data is recorded in the storage 22 in association with the flag (step S34). On the other hand, when the received data is general data (step S32: NO), the flag is set to 0, and the general data is recorded in the storage 22 in association with the flag (step S36).

Then, when the current time reaches the erase time specified by the erase timing command (step S38: YES), the printer 2 erases the data set to flag: 1 (that is, specific data) from the storage 22 (step S40). ).
As described above, the printer 2 can easily manage the specific data by indicating whether or not the data transmitted from the host computer 3 is the specific data by the command transmitted from the host computer 3, and the erasure time. It becomes possible to surely erase specific data in.

As described above, the printer 2 of the present embodiment acquires the erase timing command for setting the erase time of the specific data acquired from the host computer 3 from the host computer 3, and erases the specific data after the erase time. It is configured as follows. Therefore, the security of specific data is ensured. Further, the erasure time of the specific data can be flexibly set by the host computer 3, and the erasure time of the specific data can be changed as appropriate.

The control unit 21 of the printer 2 may function as a third acquisition unit that acquires the erased specific data from the host computer 3. That is, when the specific data once erased is used again, the host computer 3 retransmits the specific data to the printer 2, and the printer 2 stores the received specific data in the non-volatile memory of the storage 22. As a result, the printer 2 can be operated in the same state as before the erasure of the specific data.

Although the printer, the program, and the embodiment of the information erasing method of the present invention have been described above, the present invention is not limited to the above embodiment. Further, the above-described embodiment can be improved or modified in various ways without departing from the spirit of the present invention.

1 ... Printer system 2 ... Printer 21 ... Control unit 22 ... Storage 23 ... Operation input unit 24 ... Display unit 25 ... Motor drive unit 26 ... Head drive unit 27 ... Communication unit 3 ... Host computer 31 ... Control unit 32 ... Storage 33 ... Communication unit NW ... Network

Claims (7)

A printer that can communicate with the host computer
A first acquisition unit that acquires specific information used by the printer during the operating period of the printer and recorded in the non-volatile memory of the printer from the host computer.
A second acquisition unit that acquires erasure setting information from the host computer for setting the erasure time of the specific information at the end of the operation period or at a time when a predetermined time has elapsed from the end of the operation period.
An erasing unit that erases the specific information from the non-volatile memory after the current time reaches the erasing time.
Printer equipped with. If the printer cannot erase the specific information at the erase time, the erase unit erases the specific information from the non-volatile memory at the first startup of the printer after the erase time.
The printer according to claim 1. When the erasing time for the specific information recorded in the non-volatile memory in the first operating period of the printer is later than the start of the second operating period after the first operating period, the first operation. 1 The acquisition unit acquires new specific information from the host computer between the beginning of the second operating period and the erasure time.
The printer according to claim 1 or 2. The first acquisition unit receives data associated with a code indicating the presence or absence of the specific information from the host computer, refers to the code, and acquires the specific information from the received data.
The printer according to any one of claims 1 to 3. A third acquisition unit that acquires the specific information erased by the erasing unit from the host computer is further provided.
The printer according to any one of claims 1 to 4. In a printer that can communicate with the host computer,
A procedure for acquiring specific information used by the printer during the operating period of the printer and recorded in the non-volatile memory of the printer from the host computer.
A procedure for acquiring erasure setting information from the host computer for setting the erasure time of the specific information at the end of the operating period or at a time when a predetermined time has elapsed from the end of the operation period.
A procedure for erasing the specific information from the non-volatile memory after the current time reaches the erasing time.
A program to execute. It is a method of erasing information on a printer performed between a printer and a host computer capable of communicating with the printer.
The printer acquires specific information from the host computer that is used by the printer during the operating period of the printer and is recorded in the non-volatile memory of the printer.
The host computer transmits to the printer the erasure setting information for setting the erasure time of the specific information to the end of the operation period or a time when a predetermined time has elapsed from the end of the operation period.
The printer erases the specific information from the non-volatile memory after the current time reaches the erase time.
Information erasing method.

Images