An image forming method, apparatus, and computer-readable storage medium

Abstract

An embodiment of the present invention provides an image forming method, apparatus, and computer-readable storage medium. The method is applied to an image forming apparatus, and the image forming apparatus is built-in with a security module. The method includes: obtaining job data from a terminal device, where the job data includes at least one first instruction data; verifying the at least one first instruction data according to a set job policy through the security module, and if the verification is successful, performing an image forming operation based on the job data. The technical solution provided by the embodiment of the present invention avoids executable code or Trojan programs in the job data on which the image forming apparatus performs the image forming operation, ensures the legality of the job data, thereby avoiding the risk of information leakage and improving the security of data.

Description

Technical Field

[0001] The present invention relates to the field of printing security technology, and in particular, to an image forming method, apparatus, and computer-readable storage medium.

Background Art

[0002] A user edits an image forming job through a printing software on a terminal device, and the terminal device calls a driver software to render the edited image forming job to generate job data. Herein, the image forming job is the content to be printed, and the job data is binary data that can be parsed by a printer, and these binary data conform to the format specification requirements of the corresponding printing language. Further, the terminal device sends the generated job data to the printer, and the printer performs a printing operation according to the job data.

[0003] In the related art, the job data generated by the terminal device through the rendering of the driver software is usually valid data that can be parsed by the printer. However, malicious users may illegally eavesdrop on the interaction data between the terminal device and the printer, intercept the interaction job data, and modify the intercepted job data, thereby introducing some executable codes or Trojan programs into the job data. As a result, when the terminal device sends the job data to the printer, some executable codes or Trojan programs in the job data are also sent to the printer, thus causing a risk of information leakage and reducing the data security.

Summary of the Invention

[0004] In view of this, embodiments of the present invention provide an image forming method, apparatus, and computer-readable storage medium, which are used to avoid the risk of information leakage during the image forming process and improve the data security.

[0005] On the one hand, an embodiment of the present invention provides an image forming method, which is applied to an image forming apparatus, and the image forming apparatus is built-in with a security module. The method includes:

[0006] Obtaining job data from a terminal device, where the job data includes at least one first instruction data;

[0007] Verifying the at least one first instruction data according to a set job policy through the security module. If the verification is successful, an image forming operation is performed based on the job data.

[0008] Optionally, the job policy includes at least one second instruction data corresponding to at least one printing language, and the first instruction data includes a first instruction data format;

[0009] The verifying the at least one first instruction data according to a set job policy includes:

[0010] Query the second instruction data from the job policy according to the print language of the job data, where the second instruction data is the instruction data corresponding to the first instruction data in the job policy, and the second instruction data includes a second instruction data format;

[0011] Determine whether both the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same;

[0012] If it is determined that both the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same, perform the step of performing an image forming operation based on the job data.

[0013] Optionally, the first instruction data further includes a first value corresponding to the first instruction data format, and the second instruction data further includes a second value corresponding to the second instruction data format;

[0014] Before performing the image forming operation based on the job data, it further includes:

[0015] Determine whether both the second value of the second instruction data and the first value of the first instruction data are the same;

[0016] If it is determined that both the second value of the second instruction data and the first value of the first instruction data are the same, perform the step of performing an image forming operation based on the job data.

[0017] Optionally, the method further includes:

[0018] If it is determined that at least one of the second value of the second instruction data and the first value of the first instruction data is different, operate and process the job data according to the second instruction data or discard the job data.

[0019] Optionally, the method further includes:

[0020] If it is determined that at least one of the second instruction data format of the second instruction data and the first instruction data format of the first instruction data is different, operate and process the job data according to the specified second instruction data or discard the job data.

[0021] Optionally, the operating and processing the job data according to the second instruction data includes:

[0022] Filter out illegal data from the job data according to the second instruction data;

[0023] Determine whether the illegal data is inserted data;

[0024] If it is determined that the illegal data is inserted data, perform an image forming operation based on the remaining data in the job data other than the illegal data.

[0025] Optionally, the method further includes:

[0026] If the verification fails, generate a trust report.

[0027] Optionally, the method further includes:

[0028] Internally solidify the job policy and store the job policy in the security module; or,

[0029] Obtain the job policy from the management center and store the job policy in the security module.

[0030] On the other hand, an embodiment of the present invention provides an image forming apparatus, including:

[0031] An acquisition module, configured to acquire job data from a terminal device, where the job data includes at least one first instruction data;

[0032] A security module, configured to verify the at least one first instruction data according to a set job policy;

[0033] A service module, configured to, if the security module verifies successfully, perform an image forming operation based on the job data.

[0034] Optionally, the security module is a module based on a trusted root.

[0035] On the other hand, an embodiment of the present invention provides an image forming apparatus, including: one or more processors; a memory; and one or more computer programs, where the one or more computer programs are stored in the memory, and the one or more computer programs include instructions, when the instructions are executed by the image forming apparatus, causing the image forming apparatus to execute the above image forming method.

[0036] On the other hand, an embodiment of the present invention provides a computer-readable storage medium, where the computer-readable storage medium includes a stored program, and when the program runs, it controls a device where the computer-readable storage medium is located to execute the above image forming method.

[0037] In the technical solution provided by the embodiment of the present invention, an image forming apparatus is provided with a security module, and through the security module, at least one first instruction data in the job data is verified according to the set job policy, and the image forming operation can be executed based on the job data only when the verification is successful, which avoids executable codes or Trojan programs in the job data on which the image forming apparatus executes the image forming operation, ensures the legality of the job data, thereby avoiding the risk of information leakage and improving the data security.

Description of the Drawings

[0038] Figure 1 It is a flowchart of an image forming method provided by an embodiment of the present invention;

[0039] Figure 2 It is a flowchart of another image forming method provided by an embodiment of the present invention;

[0040] Figure 3 It is a schematic diagram of an image forming method provided by an embodiment of the present invention;

[0041] Figure 4 It is a schematic diagram of the job policy in an embodiment of the present invention;

[0042] Figure 5 It is a flowchart of operating and processing job data provided by an embodiment of the present invention;

[0043] Figure 6 It is a schematic diagram of the structure of an image forming apparatus provided by an embodiment of the present invention;

[0044] Figure 7 It is a schematic diagram of the structure of another image forming apparatus provided by an embodiment of the present invention.

Detailed Embodiments

[0045] To better understand the technical solution of the present invention, the embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0046] It should be clear that the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts belong to the scope of protection of the present invention.

[0047] The terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms of "a", "the" and "said" used in the embodiments of the present invention and the appended claims are also intended to include the plural forms, unless the context clearly indicates otherwise.

[0048] It should be understood that the term "and / or" used herein is merely a description of the association relationship between associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist simultaneously, and B exists alone. Additionally, the character " / " herein generally represents an "or" relationship between the preceding and following associated objects.

[0049] An embodiment of the present invention provides an image forming method, which is applied to an image forming apparatus having a built-in security module. In the embodiment of the present invention, examples of the image forming apparatus include: an inkjet printer, a laser printer, a light emitting diode (LED) printer, a copier, a scanner, or a multifunctional integrated machine fax machine, and a multi-functional peripheral (MFP) that performs the above functions in a single device. The image forming apparatus includes an image forming control unit and an image forming unit. Among them, the image forming control unit is used to control the entire image forming apparatus, and the image forming unit is used to form an image on the fed paper under the control of the image forming control unit based on the image forming data and a developer such as toner stored in the consumable.

[0050] In the embodiment of the present invention, the image forming apparatus can add a security module on the basis of the built-in image forming control unit and image forming unit. The security module can be a module based on a trusted root. The security module based on the trusted root is a hardware module, a software module, or a module combining software and hardware of the trusted root. Then, the image forming apparatus integrates the trusted computing function. A service module for data parsing can be set in the image forming apparatus. Since the trusted root is an independent security protection system, the security module can be set in parallel with the service module without affecting the normal task allocation and resource scheduling of the image forming apparatus, and can monitor the service module for data parsing, thereby efficiently improving the information security capability of the image forming apparatus.

[0051] Figure 1 is a flowchart of an image forming method provided by an embodiment of the present invention. As Figure 1 shown, the method includes:

[0052] Step 102, the image forming apparatus obtains job data from a terminal device, and the job data includes at least one first instruction data.

[0053] In the embodiment of the present invention, the terminal device includes, but is not limited to, a smart phone, a tablet computer, a personal computer (PC), etc.

[0054] The terminal device sends an image forming job request to the image forming apparatus, and the image forming job request includes job data, so that the image forming apparatus can obtain the job data from the image forming job request.

[0055] The image forming apparatus can support multiple printing languages. For example, the printing languages can include Printing Control Language (PCL for short), PCLXL, (PostScript, PS for short) language, or Graphics Device Interface (GDI) language, etc. Since the job data needs to be parsed by the image forming apparatus, the printing language of the job data is the printing language supported by the image forming apparatus. For example, the printing language of the job data can be PCL, PS language, or GDI language, etc.

[0056] Each printing language has its corresponding instruction data, so the job data will include the first instruction data corresponding to the printing language of the job data. For example, when the printing language corresponding to the job data is PCL, the job data includes the first instruction data corresponding to PCL.

[0057] Step 104: The image forming apparatus verifies the at least one first instruction data according to the set job policy through the security module. If the verification is successful, step 106 is executed; if the verification fails, step 108 is executed.

[0058] The job policy can be used to judge the legality of the job data. The job policy can include the second instruction data corresponding to at least one printing language. The first instruction data includes the first instruction data format. Then step 104 can specifically include:

[0059] Step 1042: The image forming apparatus queries the second instruction data from the job policy according to the printing language of the job data. The second instruction data is the instruction data corresponding to the first instruction data in the job policy, and the second instruction data includes the second instruction data format. In the embodiment of the present invention, step 1042 specifically includes:

[0060] The image forming apparatus queries the second instruction data corresponding to the printing language of the job data from the job policy. The number of the second instruction data corresponding to the printing language of the job data can be one or more; the image forming apparatus queries the second instruction data from the instruction data corresponding to the printing language of the job data, and the second instruction data is the instruction data corresponding to the first instruction data.

[0061] Step 1044: Judge whether the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are both the same. If so, step 106 is executed; if not, step 108 is executed.

[0062] If it is determined that the second instruction data format of the second instruction data and the first instruction format of the first instruction data are the same, it indicates that the job data is legal data and has not been intercepted and modified by malicious users. It is determined that the verification of the job data is successful, and then step 106 can be continued. Among them, when the number of the second instruction data and the number of the first instruction data are both multiple, determining that the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same specifically means: determining that the second instruction data format of each second instruction data and the first instruction data format of the first instruction data are the same.

[0063] If it is determined that at least one of the second instruction data format of the second instruction data and the first instruction data format of the first instruction data is different, it indicates that the job data is illegal data, and this job data may have been intercepted and modified by malicious users. It is determined that the verification of the job data fails, and then step 108 can be continued. Among them, when the number of the second instruction data and the number of the first instruction data are both multiple, determining that at least one of the second instruction data format of the second instruction data and the first instruction data format of the first instruction data is different specifically means: determining that at least one of the second instruction data format of each second instruction data and the first instruction data format of the first instruction data is different.

[0064] Step 106: The image forming apparatus performs an image forming operation based on the job data.

[0065] If the verification is successful, it indicates that the job data is legal data, and the image forming apparatus can perform a normal image forming operation based on the job data.

[0066] Step 108: The image forming apparatus performs operation processing on the job data or discards the job data.

[0067] If the verification fails, it indicates that the job data includes illegal data. If the illegal data is inserted data, the image forming apparatus can perform an image forming operation based on the remaining data other than the illegal data in the job data. Or, if the verification fails, it indicates that the job data includes illegal data. If the illegal data is not inserted data, the image forming apparatus rejects performing an image forming operation based on the job data, discards the job data, and the process ends; or, if the verification fails, it indicates that the job data includes illegal data. At this time, regardless of whether the illegal data is inserted data or not, the image forming apparatus directly rejects performing an image forming operation based on the job data, discards the job data, and the process ends.

[0068] In the technical solution provided by the embodiment of the present invention, the image forming apparatus is provided with a security module, and through the security module, at least one first instruction data in the job data is verified according to the set job policy, and the image forming operation can be executed based on the job data only when the verification is successful, avoiding executable codes or Trojan programs in the job data on which the image forming apparatus executes the image forming operation, ensuring the legality of the job data, thus avoiding the risk of information leakage and improving the data security.

[0069] Figure 2 It is a flowchart of another image forming method provided by the embodiment of the present invention. Figure 3 It is a schematic diagram of an image forming method provided by the embodiment of the present invention, as Figure 2 and Figure 3 shown, the method includes:

[0070] Step 202, the image forming apparatus obtains job data from the terminal device, the job data includes at least one first instruction data, and the first instruction data includes a first instruction data format.

[0071] The terminal device sends an image forming job request to the image forming apparatus, and the image forming job request includes job data, so that the image forming apparatus can obtain the job data from the image forming job request.

[0072] The image forming apparatus can support multiple printing languages. For example, the printing languages can include PCL, PCLXL, PS language, or GDI language, etc. Since the job data needs to be parsed by the image forming apparatus, the printing language of the job data is the printing language supported by the image forming apparatus. For example, the printing language of the job data can be PCL, PCLXL, PS language, or GDI language, etc.

[0073] Each printing language has its corresponding instruction data, and the job data will include the first instruction data corresponding to the printing language of the job data. The first instruction data includes a first instruction data format. In addition, the first instruction data also includes the first instruction type to which each first instruction data format belongs. In other words, the first instruction data can include the first instruction type and the first instruction data format of the first instruction type. Therefore, the job data includes the first instruction type corresponding to the printing language of the job data and the first instruction data format of the first instruction type. For example, when the printing language corresponding to the job data is PCL, the job data includes multiple first instruction types corresponding to PCL, including "UEL command", "Job controlCommand", "Page control command", and "Page discription command", and the first instruction data format of "UEL command" includes <esc>%-12345X, the first instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", the first instruction data format of "Page control command" includes "Beginpage, End page...", and the first instruction data format of "Page discription command" includes "SetColorSpace, SetCharAngle...". The first instruction types and first instruction data formats corresponding to different printing languages are different. Among them, "UEL command" can be the job header and job tail of job data, and "Job controlCommand", "Page control command" and "Page discription command" are the job body of job data.

[0074] Step 204, the image forming apparatus queries second instruction data from the job policy according to the printing language of the job data. The second instruction data is the instruction data corresponding to the first instruction data in the job policy, and the second instruction data includes a second instruction data format.

[0075] In an embodiment of the present invention, the job policy includes at least one instruction data corresponding to at least one printing language. The instruction data includes an instruction data format. In addition, the instruction data further includes the instruction type to which each instruction data format belongs. In other words, the instruction data can include the instruction type and the instruction data format of the instruction type. Figure 4 It is a schematic diagram of the job policy in an embodiment of the present invention, as Figure 4 shown, the job policy includes instruction types and instruction data formats corresponding to multiple printing languages. Among them, the multiple printing languages include PCL, PCLXL, PS language, and GDI language. Then the job policy includes multiple instruction types corresponding to PCL and the instruction data format of each instruction type, multiple instruction types corresponding to PCLXL and the instruction data format of each instruction type, multiple instruction types corresponding to the PS language and the instruction data format of each instruction type, and multiple instruction types corresponding to the GDI language and the instruction data format of each instruction type.

[0076] As Figure 4 shown, the multiple instruction types corresponding to PCL / PCLXL include "UEL command", "Job controlCommand", "Page control command", and "Page discription command". Among them, the instruction data format of "UELcommand" includes " <esc>%-12345X, ", "The instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", "The instruction data format of "Page control command" includes "Beginpage, End page...", "The instruction data format of "Page discription command" includes "SetColorSpace, SetCharAngle...".

[0077] As Figure 4 shown, multiple instruction types corresponding to the PS language include "UEL command", "Job controlCommand", and "Page control and discription command". Among them, the instruction data format of "UEL command" includes " <esc>“%-12345X”, the instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", and the instruction data format of "Page control and discription command" includes "BeginProlog, BeginSetup".

[0078] As Figure 4 shown, multiple instruction types corresponding to the GDI language include "UEL command", "Job control Command", and "Page control and discription command". Among them, the instruction data format of "UEL command" includes "JZJZ", the instruction data format of "Job control Command" includes "ZJT_DOC_START, ZJT_END_DOC", and the instruction data format of "Page control and discription command" includes "ZJT_START_PAGE, ZJT_END_PAGE".

[0079] In practical applications, as Figure 4 shown, the job policy can also include instruction types and instruction data formats corresponding to other printing languages, which will not be listed one by one here.

[0080] In an embodiment of the present invention, as an alternative solution, as Figure 3 shown, the image forming apparatus can internally solidify the job policy and store the job policy in the security module. When the job policy needs to be updated, the image forming apparatus realizes the update of the job policy through the firmware update process.

[0081] In an embodiment of the present invention, as another alternative solution, as Figure 3 shown, the management center configures the job policy and sends the configured job policy to the image forming apparatus, so that the image forming apparatus obtains the job policy and stores the job policy in the security module. When the job policy needs to be updated, the management center can reconfigure the job policy and send the reconfigured job policy to the image forming apparatus, so that the image forming apparatus obtains the reconfigured job policy to realize the update of the job policy, thereby realizing the customized processing of the job policy.

[0082] For example, as Figure 4 As shown, in step 204, when the print language of the job data is PCL, the instruction data corresponding to PCL is queried from the job policy, and multiple second instruction data are queried from the instruction data corresponding to PCL. The second instruction data corresponds to the first instruction data. The second instruction data includes the second instruction data format. In addition, the second instruction data further includes the second instruction type to which each second instruction data format belongs. In other words, the second instruction data may include the second instruction type and the second instruction data format of the second instruction type. The second instruction types of the multiple second instruction data queried from the job policy include "UEL command", "Job control Command", "Page control command", and "Page discription command". The second instruction data format of "UEL command" includes " <esc>%-12345X,", the second instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", the second instruction data format of "Page control command" includes "Begin page, End page...", and the second instruction data format of "Pagediscription command" includes "SetColorSpace, SetCharAngle...".

[0083] Step 206: The image forming apparatus determines whether the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same. If so, step 208 is executed; if not, step 212 is executed.

[0084] In an embodiment of the present invention, if the image forming apparatus determines that the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same, it determines that the verification is successful and executes step 208; if the image forming apparatus determines that at least one of the second instruction data format of the second instruction data and the first instruction data format of the first instruction data is different, it determines that the verification fails and executes step 210.

[0085] In an embodiment of the present invention, specifically, the image forming apparatus determines whether the first instruction data format of each first instruction type and the second instruction data format of each second instruction type are the same.

[0086] For example, as Figure 4 shown, the first instruction data format of "UEL command" includes " <esc>%-12345X, ", "The first instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", "The first instruction data format of "Pagecontrol command" includes "Begin page, End page...", "The first instruction data format of "Pagediscription command" includes "SetColorSpace, SetCharAngle...". "The second instruction data format of "UEL command" includes " <esc>%-12345X,", the second instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", the second instruction data format of "Page control command" includes "Begin page, End page...", and the second instruction data format of "Page discription command" includes "SetColorSpace, SetCharAngle...". Then, the image forming apparatus determines that the first instruction data format of each first instruction type and the second instruction data format of each second instruction type are the same, indicating that the job data is legal data and has not been intercepted and modified by malicious users, and the verification of the job data is successful.

[0087] For another example, as Figure 4 shown, the first instruction data format of "UEL command" includes " <esc>%-12345X, ", "The first instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", "The first instruction data format of "Page control command" includes "Begin page, End page...", "The first instruction data format of "Pagediscription command" includes "SetColorSpace, XXX...". "The second instruction data format of "UELcommand" includes " <esc>%-12345X, ", "The second instruction data format of "Job control Command" includes "ENTER, EOJ, FSAPPED...", "The second instruction data format of "Page control command" includes "Begin page, End page...", "The second instruction data format of "Page discription command" includes "SetColorSpace, SetCharAngle...". Among them, the first instruction data format of "Page discription command" includes "SetColorSpace, XXX..." and the second instruction data format of "Page discription command" includes "SetColorSpace, SetCharAngle...", which are different. Therefore, if the image forming apparatus determines that at least one of the first instruction data format of each first instruction type and the second instruction data format of each second instruction type is different, it indicates that the job data is illegal data, and the job data may be intercepted and modified by malicious users, resulting in a failure to verify the job data.

[0088] In practical applications, some first instruction data formats can be set with corresponding first values, that is, the first instruction data also includes the first values corresponding to the first instruction data format. However, it is impossible for the set job policy to include all the values corresponding to the second instruction data format. Therefore, in the embodiments of the present invention, the set job policy may not include the values corresponding to the second instruction data format. In the process of verifying the first instruction data by the image forming apparatus in the embodiments of the present invention, if it is required that the first instruction data and the second instruction data are exactly the same, the verification may not be achievable. Therefore, as an alternative solution, when verifying the instruction data, only the instruction data format of the instruction data can be verified, that is, the verification of the instruction data is achieved through step 206, and there is no need to verify the values corresponding to the instruction data format. For example, "SetCharAngle" in the first instruction data has a corresponding first value, but the value corresponding to "SetCharAngle" is not set in the job policy. Therefore, when verifying the first instruction data, only whether the instruction data format "SetCharAngle" is the same needs to be verified, and there is no need to verify the value corresponding to "SetCharAngle".

[0089] As another alternative, in the first instruction data, if the number of the first values corresponding to the first instruction data format is countable, then the corresponding second values can be set for the second instruction data format in the job policy. Further, the second instruction data further includes the second values corresponding to the second instruction data format, and the values corresponding to the instruction data format can be verified to implement the verification of the first instruction data. The first instruction data further includes the first values corresponding to the first instruction data format. If the image forming apparatus in step 206 determines that both the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same, step 207 is executed.

[0090] Step 207: The image forming apparatus determines whether both the second value of the second instruction data and the first value of the first instruction data are the same. If so, step 208 is executed; if not, step 210 is executed.

[0091] If the image forming apparatus determines that both the second value of the second instruction data and the first value of the first instruction data are the same, it indicates that the job data is legal data and has not been intercepted and modified by a malicious user, and it is determined that the verification of the job data is successful. Then, step 208 can be continued; if the image forming apparatus determines that at least one of the second value of the second instruction data and the first value of the first instruction data is different, it indicates that the job data is illegal data, and the job data may have been intercepted and modified by a malicious user, and it is determined that the verification of the job data fails. Then, step 210 can be continued. In the embodiment of the present invention, specifically, the image forming apparatus determines whether each first value of each first instruction data and each second value of each second instruction data are the same.

[0092] Step 208: The image forming apparatus performs an image forming operation based on the job data.

[0093] In the embodiment of the present invention, as Figure 3 shown, steps 204 to 207 can be executed by the security module in the image forming apparatus. If the verification is successful, it indicates that the job data is legal data, and then the service module in the image forming apparatus can perform a normal image forming operation based on the job data. For example, the service module may include a graphic formation control unit and an image forming unit. Among them, the image formation control unit is used to control the entire image forming apparatus, and the image forming unit is used to form an image on the conveyed paper under the control of the image formation control unit based on the image formation data and the developer such as toner stored in the consumable.

[0094] Step 210: The image forming apparatus operates and processes the job data according to the second instruction data or discards the job data.

[0095] Figure 5 A flowchart for operating and processing job data provided by an embodiment of the present invention is as follows Figure 5 As shown, step 210 may specifically include:

[0096] Step 2102: The image forming apparatus filters out illegal data from the job data according to the second instruction data.

[0097] Since the second instruction data is the instruction data set in the job policy, the first instruction data and the second instruction data in the job data can be compared, and the data in the first instruction data that is different from the second instruction data is determined as illegal data. Among them, the inserted data is the data inserted into the original job data. In other words, the inserted data is the data inserted into the second instruction data. In other cases, the illegal data may be the data obtained after modifying the original job data. In other words, the illegal data is the data obtained after modifying the data in the second instruction data.

[0098] Step 2104: The image forming apparatus determines whether the illegal data is inserted data. If so, step 2106 is executed; if not, step 2108 is executed.

[0099] If the image forming apparatus determines that the illegal data is inserted data, it indicates that the data in the original job data has not been modified, and the data other than the inserted data in the job data can be parsed and image formation can be performed, without discarding all job data. Then step 2106 is executed; if the image forming apparatus determines that the illegal data in the job data is not inserted data, it indicates that the data in the original job data has been modified, and the illegal data is the data obtained after modifying the original job data. This illegal data cannot be parsed and can only be discarded.

[0100] Step 2106: The image forming apparatus performs an image forming operation based on the remaining data other than the illegal data in the job data.

[0101] When the illegal data is inserted data, the remaining data other than the inserted data in the job data has not been modified. Therefore, this remaining data can be parsed, and after the image forming apparatus parses the remaining data, it can perform an image forming operation based on the parsed remaining data.

[0102] Step 2108: The image forming apparatus discards the job data.

[0103] As Figure 3 As shown, the security module can perform legality filtering on the job data sent by the terminal device based on the set job policy, and send the filtered legal job data to the service module, where the service module performs an image formation operation based on the job data; for the filtered illegal job data, the security module can filter out the illegal data from the job data according to the second instruction data. If the illegal data is inserted data, the remaining data in the job data except the illegal data can be sent to the service module, and the service module performs an image formation operation based on the remaining data; if the illegal data is not inserted data, the job data is discarded, thus improving the user experience. When the illegal data is not inserted data, the service module does not need to perform an image formation operation based on the job data, realizing an operation of discarding illegal job data with high efficiency. When the illegal data is inserted data, the service module can perform an image formation operation based on the remaining data in the job data except the illegal data, thus avoiding performing an image formation operation on the illegal job data, ensuring the validity of the job data obtained by the subsequent service module, and further improving the information security capability of the product.

[0104] In the embodiment of the present invention, if the verification fails in step 104, the image forming apparatus may further execute step 105.

[0105] Step 105: The image forming apparatus generates a trust report.

[0106] When the image forming apparatus fails to verify, it indicates that illegal data appears in the job data. At this time, a trust report can be generated, and the trust report can include the reason for the verification failure. The image forming apparatus can store the trust report and display the trust report on the user management interface, so that the user can know the reason for the verification failure through the displayed trust report, thus improving the user experience.

[0107] In the technical solution provided by the embodiment of the present invention, the image forming apparatus is provided with a security module, and through the security module, at least one first instruction data in the job data is verified according to the set job policy, and the image formation operation can be performed based on the job data only when the verification is successful, avoiding executable code or Trojan programs in the job data on which the image forming apparatus performs the image formation operation, ensuring the legality of the job data, thus avoiding the risk of information leakage and improving the security of the data.

[0108] Figure 6 It is a schematic structural diagram of an image forming apparatus provided by an embodiment of the present invention, as Figure 6 shown, the image forming apparatus further includes: an acquisition module 11, a security module 12, and a service module 13. Among them, the security module 12 is a module based on a trusted root.

[0109] The acquisition module 11 is used to acquire job data from a terminal device, and the job data includes at least one first instruction data. The security module 12 is used to verify the at least one first instruction data according to the set job policy. The service module 13 is used to perform an image forming operation based on the job data if the security module 12 verifies successfully.

[0110] In an embodiment of the present invention, the job policy includes at least one second instruction data corresponding to at least one printing language, and the first instruction data includes a first instruction data format. Specifically, the security module 12 is used to query the second instruction data from the job policy according to the printing language of the job data. The second instruction data is the instruction data corresponding to the first instruction data in the job policy, and the second instruction data includes a second instruction data format; determine whether both the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same; if it is determined that both the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same, trigger the service module 13 to execute the step of performing the image forming operation based on the job data.

[0111] In an embodiment of the present invention, the first instruction data further includes a first value corresponding to the first instruction data format, and the second instruction data further includes a second value corresponding to the second instruction data format. Specifically, the security module 12 is used to determine whether both the second value of the second instruction data and the first value of the first instruction data are the same; if it is determined that both the second value of the second instruction data and the first value of the first instruction data are the same, trigger the service module 13 to execute the step of performing the image forming operation based on the job data.

[0112] In an embodiment of the present invention, specifically, if it is determined that at least one of the second value of the second instruction data and the first value of the first instruction data is different, the security module 12 is used to operate and process the job data according to the second instruction data or discard the job data.

[0113] In an embodiment of the present invention, specifically, if it is determined that at least one of the second instruction data format of the second instruction data and the first instruction data format of the first instruction data is different, the security module 12 is used to operate and process the job data according to the second instruction data or discard the job data.

[0114] In an embodiment of the present invention, specifically, the security module 12 is used to filter out illegal data from the job data according to the second instruction data; determine whether the illegal data is inserted data, and if it is determined that the illegal data is inserted data, trigger the service module 13 to perform an image forming operation based on the remaining data other than the illegal data in the job data.

[0115] In the embodiment of the present invention, the business module 13 is also used to generate a trustworthy report if the security module 12 fails to verify

[0116] In the embodiment of the present invention, the device further includes: a curing module 14. The curing module 14 is used to internally curate the operation strategy and store the operation strategy in the security module 12. Alternatively, the acquisition module 11 is also used to acquire the operation strategy from the management center and store the operation strategy in the security module 12.

[0117] In the technical solution provided by the embodiment of the present invention, the image forming device is provided with a security module, and through the security module, at least one first instruction data in the job data is verified according to the set job policy. The image forming operation can be performed based on the job data only when the verification is successful, thereby avoiding the job data based on which the image forming device performs the image forming operation contains executable code or Trojan program, ensuring the legitimacy of the job data, thereby avoiding the risk of information leakage and improving data security.

[0118] An embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the embodiment of the above-mentioned image forming method.

[0119] An embodiment of the present invention provides an image forming device, comprising: one or more processors; a memory; and one or more computer programs, wherein the one or more computer programs are stored in the memory, and the one or more computer programs include instructions, which, when executed by the image forming device, enable the image forming device to perform the above-mentioned image forming method.

[0120] Figure 7 A schematic diagram of the structure of another image forming device provided by an embodiment of the present invention is shown in FIG. Figure 7 As shown, the image forming device 20 includes: a processor 21, a memory 22, and a computer program 23 stored in the memory 22 and executable on the processor 21. When the computer program 23 is executed by the processor 21, the image forming method applied in the embodiment is implemented. To avoid repetition, it is not described one by one here. Alternatively, when the computer program is executed by the processor 21, the functions of each model / unit in the image forming device applied in the embodiment are implemented. To avoid repetition, it is not described one by one here.

[0121] The image forming device 20 includes, but is not limited to, a processor 21 and a memory 22. Those skilled in the art will appreciate that Figure 7 This is only an example of the image forming apparatus 20, and does not limit the image forming apparatus 20. It may include more or fewer components than those shown, or combine certain components, or different components. For example, the image forming apparatus may further include an input / output device, a network access device, a bus, etc.

[0122] The so-called processor 21 may be a central processing unit (CPU), or may also be other general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0123] The memory 22 may be an internal storage unit of the image forming apparatus 20, such as a hard disk or memory of the image forming apparatus 20. The memory 22 may also be an external storage device of the image forming apparatus 20, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. provided on the image forming apparatus 20. Further, the memory 22 may also include both an internal storage unit and an external storage device of the image forming apparatus 20. The memory 22 is used to store computer programs and other programs and data required by the image forming apparatus. The memory 22 may also be used to temporarily store data that has been output or will be output.

[0124] Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the above-described systems, apparatuses, and units may refer to the corresponding processes in the foregoing method embodiments, and will not be described herein again.

[0125] In several embodiments provided by the present invention, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections to each other can be through some interfaces, and the indirect couplings or communication connections of devices or units can be in electrical, mechanical, or other forms.

[0126] The units described as separate components may or may not be physically separated. The components displayed as units may or may not be physical units, that is, they can be located in one place or distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0127] In addition, in each embodiment of the present invention, the functional units can be integrated in a processing unit, or each unit can exist physically alone, or two or more units can be integrated in one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of hardware plus software functional units.

[0128] The above-mentioned integrated units implemented in the form of software functional units can be stored in a computer-readable storage medium. The above-mentioned software functional units are stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute some steps of the methods described in each embodiment of the present invention. The foregoing storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical discs that can store program codes.

[0129] The above are only the preferred embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the scope of protection of the present invention.< / esc> < / esc> < / esc> < / esc> < / esc> < / esc> < / esc> < / esc>

Claims

1. An image forming method, characterized in that, The method is applied to an image forming apparatus which is built-in with a security module. The method includes: Obtaining job data from a terminal device, where the job data includes at least one first instruction data; Through the security module, verifying the at least one first instruction data according to a set job policy. If the verification is successful, perform an image forming operation based on the job data; The job policy includes at least one second instruction data corresponding to at least one printing language, and the first instruction data includes a first instruction data format; The verifying the at least one first instruction data according to the set job policy includes: According to the printing language of the job data, query the second instruction data from the job policy. The second instruction data is the instruction data corresponding to the first instruction data in the job policy, and the second instruction data includes a second instruction data format; Determine whether both the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same; If it is determined that both the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are the same, perform the step of performing an image forming operation based on the job data.

2. The method according to claim 1, wherein The first instruction data further includes a first value corresponding to the first instruction data format, and the second instruction data further includes a second value corresponding to the second instruction data format; Before performing the image forming operation based on the job data, it further includes: Determine whether both the second value of the second instruction data and the first value of the first instruction data are the same; If it is determined that both the second value of the second instruction data and the first value of the first instruction data are the same, perform the step of performing an image forming operation based on the job data.

3. The method according to claim 2, wherein The method further includes: If it is determined that at least one of the second value of the second instruction data and the first value of the first instruction data is different, operate on the job data according to the second instruction data or discard the job data.

4. The method according to claim 1, wherein The method further includes: If it is determined that at least one of the second instruction data format of the second instruction data and the first instruction data format of the first instruction data is different, operate on the job data according to the second instruction data or discard the job data.

5. The method according to claim 3, characterized in that The operating on the job data according to the second instruction data includes: Filter out illegal data from the job data according to the second instruction data; Determine whether the illegal data is inserted data; If it is determined that the illegal data is inserted data, perform an image forming operation based on the remaining data in the job data other than the illegal data.

6. The method according to claim 4, wherein The operating on the job data according to the second instruction data includes: Filter out illegal data from the job data according to the second instruction data; Determine whether the illegal data is inserted data; If it is determined that the illegal data is inserted data, perform an image forming operation based on the remaining data in the job data other than the illegal data.

7. The method according to claim 1, wherein The method further includes: If the verification fails, a trusted report is generated.

8. The method according to any one of claims 1 to 7, characterized in that, The method further includes: Internally solidifying the job policy and storing the job policy in the security module; or, Obtaining the job policy from the management center and storing the job policy in the security module.

9. An image forming apparatus, characterized in that, It includes: An acquisition module, configured to acquire job data from a terminal device, where the job data includes at least one first instruction data; A security module, configured to verify the at least one first instruction data according to a set job policy; A service module, configured to, if the security module verifies successfully, perform an image forming operation based on the job data; The job policy includes at least one second instruction data corresponding to at least one printing language, and the first instruction data includes a first instruction data format; Specifically, the security module is configured to query the second instruction data from the job policy according to the printing language of the job data, where the second instruction data is the instruction data in the job policy corresponding to the first instruction data, and the second instruction data includes a second instruction data format; determine whether the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are both the same; if it is determined that the second instruction data format of the second instruction data and the first instruction data format of the first instruction data are both the same, trigger the service module to perform the step of performing the image forming operation based on the job data.

10. The device according to claim 9, characterized in that, The security module is a module based on a trusted root.

11. An image forming apparatus, characterized in that, It includes: One or more processors; A memory; And one or more computer programs, where the one or more computer programs are stored in the memory, and the one or more computer programs include instructions, when the instructions are executed by the image forming device, enabling the image forming device to execute the image forming method according to any one of claims 1 to 8.

12. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored program, where, when the program runs, it controls the device where the computer-readable storage medium is located to execute the image forming method according to any one of claims 1 to 8.

Images