A safety monitoring system and an image forming apparatus

Abstract

The application discloses a safety monitoring system and an image forming device, and relates to the technical field of image forming. The system comprises a first RTC battery and a data board; the data board is provided with a first monitoring unit; a first electrode end of the first RTC battery is connected with the first monitoring unit, and a second electrode end of the first RTC battery is connected with a grounding end on equipment, so that the first RTC battery can supply power for a real-time clock circuit of the first monitoring unit; the first monitoring unit is used for executing a safety defense action and / or outputting safety risk information when the data board is disassembled to disconnect the first RTC battery. When the data board is disassembled and the first RTC battery is disconnected, the first RTC battery cannot supply power for the real-time clock circuit, so that the real-time clock circuit appears abnormal; if the data board is electrified at this time, corresponding safety measures are executed; if the data board is not electrified at this time and is then powered on again, corresponding safety measures are also executed due to the detection of the abnormal clock signal of the real-time clock circuit.

Description

Technical Field

[0001] This invention relates to the field of image forming technology, and more particularly to a security monitoring system and an image forming apparatus. Background Technology

[0002] With societal development, personal information security is receiving increasing attention. Printers, as essential equipment in modern offices, play a crucial role in information transmission and improving work efficiency. However, current technologies typically protect printer data security at the firmware level, which still presents a risk of information leakage due to malicious disassembly of the printer data board. Therefore, it is necessary to implement anti-disassembly measures for the printer data board. Summary of the Invention

[0003] In view of the shortcomings of the existing technology, the purpose of this invention is to provide a security monitoring system and image forming apparatus to help reduce the occurrence of information leakage after the data board is maliciously disassembled, and to improve security early warning performance.

[0004] According to a first aspect of the present invention, a safety monitoring system is provided, comprising: a first RTC battery and a data board; the data board is provided with a first monitoring unit;

[0005] The first terminal of the first RTC battery is used to connect to the first monitoring unit, and the second terminal of the first RTC battery is used to connect to the ground terminal on the device, so that the first RTC battery can power the real-time clock circuit of the first monitoring unit.

[0006] The first monitoring unit is used to perform security defense actions and / or output security risk information when the data board is disassembled to disconnect the first RTC battery.

[0007] The safety monitoring system of the present invention connects the first terminal of the first RTC battery to the first monitoring unit and connects the second terminal of the first RTC battery to the ground terminal of the device, so that the first RTC battery can supply power to the real-time clock circuit of the first monitoring unit. When the data board is removed, the first RTC battery is disconnected and cannot supply power to the real-time clock circuit, causing it to malfunction. If the data board is powered at this time, corresponding safety measures will be implemented. If the data board is not powered at this time and is then powered on again, corresponding safety measures will also be implemented because the clock signal of the real-time clock circuit is detected to be abnormal.

[0008] In some implementations, it further includes: a first conductive connector;

[0009] The first conductive connector is used to connect the data board to the device;

[0010] The second terminal of the first RTC battery is used to connect to the ground terminal of the device through the first conductive connector.

[0011] In some implementations, it also includes: a second conductive connector;

[0012] The second conductive connector is used to connect an external power supply to the first monitoring unit and to connect the data board to the device;

[0013] The first monitoring unit is also used to perform the security defense action or output the security risk information when disconnected from the external power supply.

[0014] In some embodiments, the first conductive connector is a metal isolation unit; the data board further includes a storage unit;

[0015] The metal isolation unit is used to mount the storage unit on the device and isolate the storage unit from external circuits;

[0016] The second terminal of the first RCT battery is used to connect to the ground terminal on the device through the metal isolation unit.

[0017] In some embodiments, the first conductive connector is an elastic component;

[0018] The second terminal of the first RCT battery is used to connect to the ground terminal of the device via the elastic component.

[0019] In some implementations, it also includes: a second monitoring unit;

[0020] The second monitoring unit is used to connect to the first monitoring unit;

[0021] The second monitoring unit is further configured to output the security risk information when disconnected from the first monitoring unit; and / or

[0022] The first monitoring unit is also configured to output the security risk information when disconnected from the second monitoring unit.

[0023] In some implementations, it also includes: a second RTC battery;

[0024] The first terminal of the second RTC battery is used to connect to the second monitoring unit, and the second terminal of the second RTC battery is used to connect to the ground terminal on the device, so that the second RTC battery can power the real-time clock circuit of the second monitoring unit.

[0025] The second monitoring unit is further configured to receive a first clock signal sent by the first monitoring unit, and output the security risk information when the first clock signal is inconsistent with the second clock signal of the second monitoring unit; and / or

[0026] The first monitoring unit is further configured to receive the second clock signal, and when the first clock signal and the second clock signal are inconsistent, to perform the security defense action and / or output the security risk information.

[0027] In some implementations, it also includes: a third conductive connector;

[0028] The third conductive connector is used to connect the data board or the second monitoring unit to the device;

[0029] The second terminal of the second RTC battery is used to connect to the ground terminal of the device via the third conductive connector.

[0030] In some embodiments, the third conductive connector is used to connect the data board to the device, and is the same connector as the first conductive connector.

[0031] In some embodiments, it further includes a power board, wherein the power board is provided with the second monitoring unit.

[0032] In some implementations, it also includes: a fourth conductive connector;

[0033] The fourth conductive connector is used to electrically connect the second monitoring unit to the data board;

[0034] The second monitoring unit is also used to output the security risk information when the electrical connection with the data board is disconnected.

[0035] According to a second aspect of the present invention, an image forming apparatus is provided, comprising a security monitoring system according to any one of the above claims.

[0036] Compared with the prior art, the security monitoring system and image forming apparatus of the present invention have at least the following technical effects: the first terminal of the first RTC battery is connected to the first monitoring unit, and the second terminal of the first RTC battery is connected to the ground terminal on the device, so that the first RTC battery can supply power to the real-time clock circuit of the first monitoring unit. When the data board is removed, the first RTC battery is disconnected, and the first RTC battery cannot supply power to the real-time clock circuit, causing it to malfunction. If the data board is powered at this time, corresponding safety measures will be implemented. If the data board is not powered at this time and is then powered on again, corresponding safety measures will also be implemented because an abnormal clock signal of the real-time clock circuit is detected. Therefore, in the various embodiments of this application, through the cooperation of the first conductive element, the first RTC battery, and the first monitoring unit, it is easy to know when the data board is removed, so as to promptly execute security defense actions and / or output security risk information, thereby reducing the risk of data board theft or information leakage on the device, and helping to improve security early warning performance. Attached Figure Description

[0037] Figure 1 This is a circuit diagram of a safety monitoring system according to an embodiment of the present invention;

[0038] Figure 2 This is a schematic diagram of a first structural design of a data board in a safety monitoring system according to an embodiment of the present invention;

[0039] Figure 3 This is a circuit diagram showing the connection between the first monitoring unit and an external power supply according to an embodiment of the present invention.

[0040] Figure 4 This is a schematic diagram of a second structure of the data board of a safety monitoring system according to an embodiment of the present invention;

[0041] Figure 5 This is a schematic diagram of a third structure of the data board of a safety monitoring system according to an embodiment of the present invention;

[0042] Figure 6 This is a schematic diagram of the fourth structure of the data board of the safety monitoring system according to one embodiment of the present invention;

[0043] Figure 7 This is a schematic diagram of a first type of module for connecting a data board and a power board according to an embodiment of the present invention;

[0044] Figure 8 This is a schematic diagram of a second module for connecting a data board and a power board according to an embodiment of the present invention;

[0045] Figure 9 This is a flowchart of a safety monitoring method according to an embodiment of the present invention;

[0046] Figure 10This is a flowchart illustrating how to determine whether a metal isolation device is malfunctioning according to an embodiment of the present invention.

[0047] Figure 11 This is a flowchart of the second monitoring unit's insertion detection according to an embodiment of the present invention;

[0048] Figure 12 This is a flowchart illustrating the joint detection by the first detection unit and the second detection unit according to an embodiment of the present invention.

[0049] Figure 13 This is a flowchart illustrating how to determine whether a protective cover is abnormal according to an embodiment of the present invention.

[0050] Figure 14 This is a schematic diagram of the structure of an image forming apparatus according to an embodiment of the present invention. Detailed Implementation

[0051] The present invention will now be described in further detail with reference to the accompanying drawings.

[0052] This invention provides a security monitoring system, such as... Figure 1 and Figure 2As shown, the safety monitoring system includes a first RTC battery 100 and a data board 200; the data board 200 is equipped with a first monitoring unit 210. The first RTC battery 100 is the power source for the Real-Time Clock, typically a button cell battery. The first monitoring unit 210 can be a System on Chip (SOC) integrating a real-time clock circuit, or the first monitoring unit 210 includes both an SOC and a real-time clock circuit. To ensure the real-time clock circuit provides accurate real-time time even during power loss, it must be powered by an external power source. Therefore, the first terminal (positive terminal) of the first RTC battery 100 is connected to the first monitoring unit 210, and the second terminal (negative terminal) is connected to the ground terminal on a device (not shown), enabling the first RTC battery 100 to power the real-time clock circuit of the first monitoring unit 210. Specifically, the first RTC battery 100... The first terminal of the first RTC battery 100 is connected to the first monitoring unit 210 via diode D1 and resistor R1. That is, the first terminal of the first RTC battery 100 is connected to the positive terminal of diode D1, the negative terminal of diode D1 is connected to the first terminal of resistor R1, the second terminal of resistor R1 is grounded through capacitor C1, and the second terminal of resistor R1 is connected to the first terminal of the first monitoring unit 210, so that the first RTC battery 100 supplies power to the real-time clock circuit of the first monitoring unit 210. This device is an image forming device (also known as an image forming apparatus). In addition, once the first RTC battery 100 is disconnected, the first RTC battery 100 cannot work normally. At this time, the real-time clock circuit also malfunctions due to lack of power supply, such as being reset.

[0053] like Figure 2 As shown, the data board 200 is used to install the first RTC battery 100. Specifically, the data board 200 is provided with a battery holder 220 and a first hole 230. The battery holder 220 is used to install the first RTC battery 100. The negative terminal of the battery holder 220 is connected to the first hole 230. When the first RTC battery 100 is installed in the battery holder 220, the positive and negative terminals of the battery holder 220 are connected to the first and second terminals of the first RTC battery 100 respectively. The second terminal of the first RTC battery 100 is connected to the first hole 230 through the negative terminal of the battery holder 220.

[0054] In one alternative implementation, such as Figure 2As shown, the safety monitoring system also includes a first conductive connector (not shown), which is used to connect the data board 200 to the device. The second terminal of the first RTC battery 100 is used to connect to the ground terminal of the device through the first conductive connector. Specifically, the first conductive connector passes through the first hole 230 of the data board 200 and connects to the device to fix the data board 200 to the device. At the same time, the first conductive connector is also connected to the ground terminal of the device, that is, the first hole 230 is connected to the ground terminal of the device through the first conductive connector, and the first hole 230 is connected to the second terminal of the first RTC battery 100. Therefore, the second terminal of the first RTC battery 100 is connected to the ground terminal of the device. For example, the first hole is a screw hole, the first conductive connector is a screw, and the second terminal of the first RTC battery 100 is connected to the ground terminal of the device through the screw hole. At the same time, the screw also fixes the data board 200 to the device.

[0055] like Figure 1The first monitoring unit 210 is used to perform security defense actions and / or output security risk information when the data board 200 is removed to disconnect the first RTC battery 100. Specifically, when the first RTC battery 100 normally supplies power to the real-time clock circuit of the first monitoring unit 210, the clock signal generated by the real-time clock circuit is normal, and the voltage at the first terminal of the first monitoring unit 210 is also normal. Once the data board 200 is removed from the device, the first conductive connector is disconnected first. After the first conductive connector is disconnected, the second terminal of the first RTC battery 100 is immediately disconnected from the ground terminal of the device, thereby disconnecting the first RTC battery 100. At this time, the clock signal generated by the real-time clock circuit is abnormal (i.e., different from the normal clock signal generated by the real-time clock circuit), and the voltage at the first terminal of the first monitoring unit 210 is also abnormal. If the data board 200 is removed while the first monitoring unit 210 is powered on and in a energized state, the first monitoring unit 210 can immediately detect the abnormal clock signal and the abnormal voltage at its own first terminal. The first monitoring unit 210 can then detect the abnormal clock signal and the abnormal voltage at its own first terminal. The first monitoring unit 210 will perform corresponding actions upon detecting abnormal clock signals and / or abnormal voltage at its own first terminal, such as performing security defense actions and / or outputting security risk information. The security defense actions performed by the first monitoring unit 210 may include firmware locking or alarm actions. Since firmware locking cannot be restored by power-on, it is necessary to notify the manufacturer's maintenance personnel for compliant operation before repair. The first monitoring unit 210 may output a warning message indicating that the data board has been removed, such as a control panel error message indicating an abnormal data board status or firmware error. If the data board 200 is removed while the first monitoring unit 210 is powered off, the first RTC battery 100 will be disconnected, preventing it from supplying power to the real-time clock circuit. The clock signal generated by the real-time clock circuit will also be abnormal. After the first monitoring unit 210 is powered on again, it can read the abnormal clock signal and perform corresponding actions based on this abnormal clock signal, such as performing security defense actions and / or outputting security risk information.

[0056] In one alternative implementation, such as Figure 2 The data board 200 is provided with a second hole 240, which can be located at any part of the data board 200, such as the four corners of the data board 200. The data board 200 can also be connected to the device through the second hole 240 via a conductive connector (not shown). In addition, the conductive connector can also be connected to the ground terminal on the device to improve the anti-interference capability of the data board 200. For example, the second hole 240 is a screw hole, the conductive connector is a screw, and the data board 200 is connected to the device through the screw hole, and the data board 200 is connected to the ground terminal on the device.

[0057] In one alternative implementation, such as Figure 3 As shown, the safety monitoring system also includes a second conductive connector (not shown), which connects an external power supply (not shown) to the first monitoring unit 210 and connects the data board 200 to the device. The first monitoring unit 210 is also used to perform safety defense actions or output safety risk information when disconnected from the external power supply. Specifically, the VDD terminal is connected to the external power supply, and the VDD terminal is connected to the first monitoring unit 210 through diode D2 and resistor R2, that is, the VDD terminal is connected to the positive terminal of diode D2, and the negative terminal of diode D1 is connected to the first end of resistor R2. The second end of resistor R2 is grounded through capacitor C2. The second end of resistor R2 is connected to the second end of the first monitoring unit 210. The VDD end is also connected to the second hole 240. The second conductive connector passes through the second hole 240 and connects to the device to fix the data board 200 to the device. Simultaneously, the second conductive connector also connects the VDD end to the device's grounding end, allowing external power to supply power to the first monitoring unit 210 normally through the VDD end. When the data board 200 is not removed from the device, the second conductive connector maintains a normal connection state, and the first monitoring unit 210 is connected to the external power supply. When the sources are in a normal connection state, the voltage at the second terminal of the first monitoring unit 210 is normal (e.g., the level at the second terminal of the first monitoring unit 210 is low), and the first monitoring unit 210 does not perform any security defense actions or output any security risk information, the user can normally replace the first RTC battery 100. Once the data board 200 is removed from the device, the first and second conductive connectors are disconnected first. The first conductive connector is disconnected to break the circuit of the first RTC battery 100, and after the second conductive connector is disconnected, the VDD terminal is disconnected from the device. When the grounding terminal is connected, the external power supply cannot supply power to the first monitoring unit 210 normally through the VDD terminal. The voltage at the second terminal of the first monitoring unit 210 is abnormal (e.g., the level at the second terminal of the first monitoring unit 210 is high). The first monitoring unit 210 saves the abnormal power supply information. When the data board 200 is completely removed from the device, the external power supply is disconnected from the first monitoring unit 210. When the data board 200 is reinstalled and the first monitoring unit 210 is powered on again, the first monitoring unit 210 reads the abnormal power supply information and then performs a safety defense action or outputs safety risk information.

[0058] To prevent misdiagnosis of system-related issues, each hole (i.e., screw hole) is silkscreened during the assembly stage. This allows maintenance personnel to determine whether the problem was caused by human error. If the silkscreen is damaged, it is determined to be caused by human error.

[0059] In one alternative implementation, such as Figure 4As shown, the first conductive connector is a metal isolation unit 300. The data board 200 also includes a storage unit 250. The metal isolation unit 300 is used to mount the storage unit 250 on the device and isolate the storage unit 250 from external circuits. The second terminal of the first RTC battery 100 is used to connect to the ground terminal on the device through the metal isolation unit 300. Specifically, the metal isolation unit 300 is provided with at least two third holes 310. The data board is provided with holes that mate with the third holes 310. The second terminal of the first RTC battery 100 is connected to any one of the third holes 310. The isolation unit 300 clamps the data board 200 onto the device via a conductive connector (not shown) passing through any one of the third holes 310 and the hole that mates with the third hole 310, thus fixing the data board 200 onto the device. This places the storage unit 250 on the data board 200 onto the device. Since the storage unit 250 is located between the metal isolation unit 300 and the data board 200, the metal isolation unit 300 can isolate the storage unit 250 from external circuits. Simultaneously, the conductive connector is also connected to the device's ground terminal. Because the metal isolation unit 300 is conductive, the first RTC battery... The second terminal of the first RTC battery 100 is connected to the ground terminal of the device via the metal isolation unit 300. Once the data board 200 is removed from the device or the metal isolation unit 300 is removed from the data board 200, the conductive connector is first disconnected. After the conductive connector is disconnected, the metal isolation unit 300 is immediately disconnected from the ground terminal of the device, thereby disconnecting the second terminal of the first RTC battery 100 from the ground terminal of the device. The first monitoring unit 210 can determine that the metal isolation unit 300 is not properly covered based on the disconnection of the second terminal of the first RTC battery 100 from the ground terminal of the device. For example... The third hole 310 includes two parts, which are respectively located at the upper left corner and the lower right corner of the metal isolation unit 300. The metal isolation unit 300 is connected to the grounding terminal of the device through the third hole 310 at the upper left corner via a conductive connector. The metal isolation unit 300 can also be connected to the grounding terminal of the device through the third hole 310 at the lower right corner via a conductive connector. The second terminal of the first RTC battery 100 can be connected to any one or both of the third holes 310. The third hole 310 is a screw hole, the conductive connector is a screw, and the metal isolation unit 300 is connected to the grounding terminal of the device through the screw through the screw hole.

[0060] like Figure 4As shown, the storage unit 250 includes DDR (Double Data Rate SDRAM) 251 and flash memory 252. The tamper protection provided on the data board 200 is intended to protect the internal information of the DDR 251 and flash memory 252. However, for someone with a certain level of soldering skill, this can be done by soldering without disassembling the board, which would significantly reduce the effectiveness of the protection. Adding a new metal isolation unit 300 not only effectively prevents the chips from being removed but also provides shielding protection.

[0061] In one alternative implementation, such as Figure 5 As shown, the first conductive component is an elastic component 400. The second terminal of the first RTC battery 100 is used to connect to the grounding terminal of the device through the elastic component 400. Specifically, the data board 200 is fixed to the screw seat of the sheet metal part 500 of the device by screws. The sheet metal part 500 is connected to the grounding terminal of the device. The back of the data board 200 is opposite to the sheet metal part 500. The first RTC battery 100 is disposed on the front of the data board 200. A protective cover 600 is provided on the front of the data board 200 to protect the first RTC battery 100 from damage. Disassembly; The second terminal of the first RTC battery 100 is connected to the ground terminal of the data board 200 via an elastic member 400. The elastic member 400 includes a conductive plate 410 and an elastic element 420. The conductive plate 410 is disposed on the back of the data board 200 and connected to the second terminal of the first RTC battery 100. When the data board 200 is fixed to the screw seat of the sheet metal part 500 by screws, the elastic element 420 connects the conductive plate 410 and the sheet metal part 500, thereby allowing the second terminal of the first RTC battery 100 to be connected to the ground terminal of the device via the elastic member 400. This method can replace... Figure 2 The second terminal of the first RTC battery 100 shown is connected to the ground terminal of the device through the first hole 230 and the first conductive connector, which can also be used as an alternative. Figure 4 The second terminal of the first RTC battery 100 shown is connected to the ground terminal of the device through a metal isolation unit 300; for example, the conductive plate 410 is a conductive copper surface and the elastic element 420 is a spring.

[0062] In one alternative implementation, such as Figure 6 As shown, in Figure 5 Based on the above, the first RTC battery 100 is placed on the back of the data board 200, which can also protect the first RTC battery 100 from being removed. In addition, the protective cover 600 can be omitted, saving costs.

[0063] In one alternative implementation, such as Figure 7As shown, the safety monitoring system also includes a power board 700, on which a second monitoring unit 710 is provided. The second monitoring unit 710 can be an MCU (Microcontroller Unit). The second monitoring unit 710 is used to connect to a first monitoring unit 210 on the data board 200. The second monitoring unit 710 is used to output safety risk information when disconnected from the first monitoring unit 210; and / or the first monitoring unit 210 is used to output safety risk information when disconnected from the second monitoring unit 710. When the first monitoring unit 210 is in a powered-on state, if the data board 200 is removed from the device, the first monitoring unit 210 can immediately detect and execute the corresponding operation. However, if the data board 200 is de-energized while the first monitoring unit 210 is powered off, the first monitoring unit 210 can immediately detect and execute the corresponding operation. If the data board 200 is removed from the device and then reinstalled under power failure, this situation is difficult to detect. However, it can be protected by the protective measures on the side of the first monitoring unit 210. That is, when the data board 200 is removed, the second monitoring unit 710 is disconnected from the first monitoring unit 210, and the communication between the second monitoring unit 710 and the first monitoring unit 210 is interrupted. The first monitoring unit 210 can output security risk information when it is disconnected from the second monitoring unit 710, and the second monitoring unit 710 can also output security risk information when it is disconnected from the first monitoring unit 210.

[0064] In one alternative implementation, such as Figure 7As shown, the security monitoring system also includes a second RTC battery 800; the first terminal of the second RTC battery 800 is used to connect to the second monitoring unit 710, and the second terminal of the second RTC battery 800 is used to connect to the ground terminal on the device, so that the second RTC battery 800 can power the real-time clock circuit of the second monitoring unit 710. The power supply of the real-time clock circuit of the second monitoring unit 710 by the second RTC battery 800 is similar to the power supply of the first monitoring unit 210 by the first RTC battery 100, and therefore will not be repeated here. The second monitoring unit 710 is also used to receive the first clock signal sent by the first monitoring unit 210, and output security risk information when the first clock signal is inconsistent with the second clock signal of the second monitoring unit 710; and / or the first monitoring unit 210 is also used to receive the second clock signal sent by the second monitoring unit 710, and perform security defense actions and / or output security risk information when the first clock signal is inconsistent with the second clock signal, that is, when it... If someone maliciously removes the data board 200, installs a data-stealing module, and then reinstalls it, the second monitoring unit 710 of the power board 700 or the first monitoring unit 210 of the data board 200 will receive the clock signal sent by the other party when the power is turned on. Since the first clock signal sent by the restored first monitoring unit 210 is different from the original, both the second monitoring unit 710 and the first monitoring unit 210 can determine the security risk of theft by comparing the inconsistency between the first clock signal and the second clock signal. Alternatively, if someone maliciously removes the data board 200 and replaces it with another data board, the second monitoring unit 710 of the power board 700 will receive the clock signal sent by the other party when the power is turned on. Since the data board is no longer the original data board 200, the first clock signal received by the second monitoring unit 710 is also different from the original first clock signal. The second monitoring unit 710 can determine the security risk of theft by comparing the inconsistency between the first clock signal and the second clock signal.

[0065] In one alternative implementation, such as Figure 7As shown, the safety monitoring system also includes a third conductive connector (not shown), which is used to connect the data board 200 or the second monitoring unit 710 to the device; the second terminal of the second RTC battery 800 is used to connect to the ground terminal of the device through the third conductive connector; specifically, when the third conductive connector is used to connect the second monitoring unit 710 to the device, the power board 700 with the second monitoring unit 710 may have a hole (such as a screw hole), the second terminal of the second RTC battery 800 is connected to the hole, and the third conductive connector (such as a screw) is connected to the device through the hole of the power board 700 to fix the power board 700 to the device (similar to how the first conductive connector connects the data board 200 to the device), and the third conductive connector is also connected to the ground terminal of the device; so that the second RTC battery 800... The second terminal of the TC battery 800 is connected to the ground terminal on the device (similar to how the first conductive connector connects the second terminal of the first RTC battery 100 to the ground terminal on the device); when the third conductive connector is used to connect the data board 200 to the device, the second terminal of the second RTC battery 800 can be connected to the first hole 230 of the data board 200. In this case, the third conductive connector and the first conductive connector are the same connector, that is, the third conductive connector is the first conductive connector. The third conductive connector is connected to the device by passing through the first hole 230 of the data board 200 to fix the data board 200 to the device. At the same time, the third conductive connector is also connected to the ground terminal of the device, so that the ground terminal of the device is connected to the second terminal of the first RTC battery 100 and the second terminal of the second RTC battery 800 respectively.

[0066] In one optional implementation, the second monitoring unit 710 may share an RTC battery with the first monitoring unit 210, that is, the second monitoring unit 710 and the first monitoring unit 210 may be powered by the first RTC battery 100 or the second RTC battery 800.

[0067] In one alternative implementation, such as Figure 8 As shown, the safety monitoring system also includes a fourth conductive connector (not shown), which is used to electrically connect the second monitoring unit 710 to the data board 200. The second monitoring unit 710 is also used to output safety risk information when the electrical connection with the data board 200 is disconnected; that is, the second monitoring unit 710 is electrically connected to the VDD terminal of the data board 200 through the fourth conductive connector (such as a connecting wire). Figure 3As shown, when the data board 200 is not disassembled, the second conductive connector maintains a normal connection state, the first monitoring unit 210 is in a normal connection state with the external power supply, the voltage of the second terminal of the first monitoring unit 210 is normal (e.g., the level of the second terminal of the first monitoring unit 210 is low), and the second monitoring unit 710 can detect that the voltage of the second terminal of the first monitoring unit 210 is normal through the fourth conductive connector. The second monitoring unit 710 does not execute the output of safety risk information. Once the data board 200 is disassembled from the device, the second conductive connector is first disassembled. After the second conductive connector is disassembled, the VDD terminal is disconnected from the ground terminal of the device. The external power supply cannot supply power to the first monitoring unit 210 normally through the VDD terminal. The voltage of the second terminal of the first monitoring unit 210 is abnormal (e.g., the level of the second terminal of the first monitoring unit 210 is high), and the second monitoring unit 710 can detect the abnormal voltage of the second terminal of the first monitoring unit 210 through the fourth conductive connector. The second monitoring unit 710 executes the output of safety risk information.

[0068] In this embodiment, the first terminal of the first RTC battery 100 is connected to the first monitoring unit 210, and the second terminal of the first RTC battery 100 is connected to the ground terminal on the device, so that the first RTC battery 100 can supply power to the real-time clock circuit of the first monitoring unit 210. When the data board 200 is removed, the first RTC battery 100 is disconnected, and it cannot supply power to the real-time clock circuit, causing it to malfunction. If the data board 200 is powered at this time, corresponding safety measures will be implemented. If the data board 200 is not powered at this time and is then powered on again, corresponding safety measures will also be implemented because an abnormal clock signal of the real-time clock circuit is detected. Therefore, in the various embodiments of this application, through the cooperation of the first conductive element, the first RTC battery 100, and the first monitoring unit 210, it is easy to know when the data board 200 is removed, so as to promptly execute security defense actions and / or output security risk information, thereby reducing the risk of the data board 200 being stolen or information being leaked on the device, and at the same time helping to improve security early warning performance.

[0069] This invention provides a security monitoring method, executed in... Figures 1 to 8 The security monitoring system shown is, for example Figure 9 As shown, the safety monitoring method includes:

[0070] S100: The first RTC battery 100 supplies power to the real-time clock circuit of the first monitoring unit 210;

[0071] S200: When the data board 200 is removed to disconnect the first RTC battery 100, the first monitoring unit 210 performs a security defense action and / or outputs security risk information.

[0072] In one optional implementation, the security monitoring method further includes the first monitoring unit 210 performing a security defense action or outputting the security risk information when the first monitoring unit 210 is disconnected from the external power supply.

[0073] In one optional implementation, the security monitoring method further includes the first monitoring unit 210 outputting security risk information when the first monitoring unit 210 is disconnected from the second monitoring unit 710.

[0074] In an optional embodiment, the security monitoring method further includes a second monitoring unit 710 receiving a first clock signal sent by a first monitoring unit 210, and outputting security risk information when the first clock signal is inconsistent with a second clock signal of the second monitoring unit 720; and / or

[0075] The first monitoring unit 210 receives the second clock signal and performs security defense actions and / or outputs security risk information when the first clock signal and the second clock signal are inconsistent.

[0076] In one optional implementation, the safety monitoring method further includes a second monitoring unit 710 that outputs safety risk information when it is disconnected from the data board 200.

[0077] It should be noted that the steps involved in the safety monitoring method have been explained in detail in the safety monitoring system, so they will not be repeated here.

[0078] In one alternative implementation, such as Figure 10 As shown, the safety monitoring method includes:

[0079] A11: Start, the first monitoring unit 210 detects whether the voltage at the first terminal of the first monitoring unit 210 is normal. If the voltage signal is normal, proceed to step A12. If the voltage signal is abnormal, proceed to step A13.

[0080] A12: The first monitoring unit 210 determines that the metal isolation unit 300 is under normal coverage and proceeds to step A11;

[0081] A13: The first monitoring unit 210 determines that the metal isolation unit 300 is abnormal or has no coverage, and proceeds to step A14;

[0082] A14: The first monitoring unit 210 executes a firmware error / lockdown and notifies the user to call a maintenance technician; proceed to step A15;

[0083] A15: The repair personnel check whether there are signs of disassembly on the screw rubber ring. If signs of disassembly are detected, proceed to step A16; if no signs of disassembly are detected, proceed to step A17.

[0084] A16: Determined to be caused by human damage, inform the user, end;

[0085] A17: The first RTC battery has reached the end of its 100-cycle lifespan. Enter maintenance mode to install a new RTC battery. End.

[0086] In one alternative implementation, such as Figure 11 As shown, the safety monitoring method includes:

[0087] A21: Start, the second monitoring unit 710 checks whether the insertion detection is normal, that is, the second monitoring unit 710 checks whether the connection with the first monitoring unit 210 is normal. If the insertion detection is normal, proceed to step A21; if the insertion detection is abnormal, proceed to step A22.

[0088] A22: The second monitoring unit 710 records disconnection status to the storage chip, such as DDR41 or flash memory 42.

[0089] In one alternative implementation, such as Figure 12 As shown, the safety monitoring method includes:

[0090] A31: Start, the first monitoring unit 210 detects whether the voltage at the first terminal of the first monitoring unit 210 is normal. If the voltage signal is normal, proceed to step A31. If the voltage signal is abnormal, proceed to step A32.

[0091] A32: The second monitoring unit 710 checks whether the insertion detection is normal. If the insertion detection is normal, proceed to step A33; if the insertion detection is abnormal, proceed to step A35.

[0092] A33: The first monitoring unit 210 detects whether the second monitoring unit 710 has reported a disconnection record, that is, whether the second monitoring unit 710 records the disconnection status to the storage chip. If it is determined that there is a disconnection record, proceed to step A35; if it is determined that there is no disconnection record, proceed to step A34.

[0093] A34: The first monitoring unit 210 determines that the lifespan of the first RTC battery 100 has ended, enters maintenance mode, installs a new RTC battery, and then resumes operation, ending the process.

[0094] A35: The first monitoring unit 210 determines that the data board has been disassembled and reports a firmware error.

[0095] In one alternative implementation, such as Figure 13 As shown, the safety monitoring method includes:

[0096] A41: Start, the first monitoring unit 210 detects whether the voltage at the first terminal of the first monitoring unit 210 is normal. If the voltage signal is normal, proceed to step A42. If the voltage signal is abnormal, proceed to step A43.

[0097] A42: The first monitoring unit 210 determines that the data board is normal and has not been disassembled, and proceeds to step A41;

[0098] A43: The first monitoring unit 210 determines that the data board is abnormal and may have been disassembled, and proceeds to step A44;

[0099] A44: The first monitoring unit 210 executes a firmware error / lockdown and notifies the user to call a maintenance technician; proceed to step A45;

[0100] A45: The maintenance personnel check whether the protective cover 600 has been disassembled. If disassembly is detected, proceed to step A46; if no disassembly is detected, proceed to step A47.

[0101] A46: Determined to be caused by human damage, inform the user, end;

[0102] A47: The first RTC battery has reached the end of its 100-cycle lifespan. Enter maintenance mode to install a new RTC battery. End.

[0103] An embodiment of the present invention provides an image forming apparatus, which includes the security monitoring system described above.

[0104] This invention provides an image forming apparatus, such as... Figure 14 As shown, Figure 14 The image forming apparatus shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments of the present invention.

[0105] like Figure 14 As shown, the image forming apparatus is represented in the form of a general-purpose computing device. The components of the image forming apparatus may include, but are not limited to: one or more processors 510, a memory 530, and a communication bus 540 connecting different system components (including the memory 530 and the processor 510).

[0106] The communication bus 540 represents one or more of several bus architectures, including a memory bus or memory controller, a peripheral bus, a graphics acceleration port, a processor, or a local bus using any of the various bus architectures. For example, these architectures include, but are not limited to, the Industry Standard Architecture (ISA) bus, the Micro Channel Architecture (MAC) bus, the Enhanced ISA bus, the Video Electronics Standards Association (VESA) local bus, and the Peripheral Component Interconnect (PCI) bus.

[0107] Image forming apparatuses typically include a variety of computer-readable media. These media can be any available media that can be accessed by the image forming apparatus, including volatile and non-volatile media, and removable and non-removable media.

[0108] Memory 530 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) and / or cache memory. The image forming apparatus may further include other removable / non-removable, volatile / non-volatile computer system storage media. Although Figure 14 Not shown, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk") and an optical disc drive for reading and writing to a removable non-volatile optical disc (e.g., a compact disc read-only memory (CD-ROM), a digital video disc read-only memory (DVD-ROM), or other optical media). In these cases, each drive may be connected to the communication bus 540 via one or more data media interfaces. The memory 530 may include at least one program product having a set (e.g., at least one) of program modules configured to perform the functions of the embodiments of the present invention.

[0109] A program / utility having a set (at least one) of program modules can be stored in memory 530. Such program modules include, but are not limited to, an operating system, one or more application programs, other program modules, and program data. Each or some combination of these examples may include an implementation of a network environment. The program modules typically perform the functions and / or methods described in the embodiments of the present invention.

[0110] The image forming apparatus can also communicate with one or more external devices, with one or more devices that enable a user to interact with the image forming apparatus, or with any device (e.g., a network interface card, modem, etc.) that enables the image forming apparatus to communicate with one or more other computing devices. This communication can be performed via the communication interface 520. Furthermore, the image forming apparatus can also communicate via a network adapter (…). Figure 14 (Not shown) communicates with one or more networks (e.g., Local Area Network (LAN), Wide Area Network (WAN), and / or public networks, such as the Internet). The aforementioned network adapter can communicate with other modules of the image forming apparatus via the communication bus 540. It should be understood that, although... Figure 14 As not shown, other hardware and / or software modules may be used in conjunction with the image forming apparatus, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, Redundant Arrays of Independent Drives (RAID) systems, tape drives, and data backup storage systems.

[0111] The processor 510 executes various functional applications and data processing by running programs stored in the memory 530, such as implementing the security monitoring method provided in the embodiments of the present invention.

[0112] The present invention also provides a computer-readable storage medium storing computer instructions that cause the computer to execute the security monitoring method provided in the embodiments of the present invention.

[0113] The aforementioned computer-readable storage medium may be any combination of one or more computer-readable media. A computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof, but is not limited thereto. More specific examples (a non-exhaustive list) of computer-readable storage media include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), or flash memory, optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this document, a computer-readable storage medium may be any tangible medium that contains or stores a program that may be used by or in connection with an instruction execution system, apparatus, or device.

[0114] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, capable of sending, propagating, or transmitting programs for use by or in connection with an instruction execution system, apparatus, or device.

[0115] Program code contained on a computer-readable medium may be transmitted using any suitable medium, including but not limited to wireless, wire, optical fiber, radio frequency (RF), or any suitable combination thereof.

[0116] The above descriptions are merely some embodiments of the present invention. Those skilled in the art can make various modifications and improvements without departing from the inventive concept of the present invention, and these all fall within the scope of protection of the present invention.

Claims

1. A safety monitoring system, characterized in that, include: A first RTC battery and a data board; the data board is equipped with a first monitoring unit; The first terminal of the first RTC battery is used to connect to the first monitoring unit, and the second terminal of the first RTC battery is used to connect to the ground terminal on the device, so that the first RTC battery can power the real-time clock circuit of the first monitoring unit. The first monitoring unit is used to perform security defense actions and / or output security risk information when the data board is removed to disconnect the first RTC battery.

2. The safety monitoring system according to claim 1, characterized in that, Also includes: First conductive connector; The first conductive connector is used to connect the data board to the device; The second terminal of the first RTC battery is used to connect to the ground terminal of the device through the first conductive connector.

3. The safety monitoring system according to claim 1, characterized in that, Also includes: Second conductive connector; The second conductive connector is used to connect an external power supply to the first monitoring unit and to connect the data board to the device; The first monitoring unit is also used to perform the security defense action or output the security risk information when disconnected from the external power supply.

4. The safety monitoring system according to claim 2, characterized in that, The first conductive connector is a metal isolation unit; the data board further includes a storage unit; The metal isolation unit is used to mount the storage unit on the device and isolate the storage unit from external circuits; The second terminal of the first RCT battery is used to connect to the ground terminal on the device through the metal isolation unit.

5. The safety monitoring system according to claim 1, characterized in that, The first conductive connector is an elastic component; The second terminal of the first RCT battery is used to connect to the ground terminal of the device via the elastic component.

6. The safety monitoring system according to any one of claims 1-5, characterized in that, Also includes: Second monitoring unit; The second monitoring unit is used to connect to the first monitoring unit; The second monitoring unit is also configured to output the security risk information when disconnected from the first monitoring unit; and / or The first monitoring unit is also configured to output the security risk information when disconnected from the second monitoring unit.

7. The safety monitoring system according to claim 6, characterized in that, Also includes: Second RTC battery; The first terminal of the second RTC battery is used to connect to the second monitoring unit, and the second terminal of the second RTC battery is used to connect to the ground terminal on the device, so that the second RTC battery can power the real-time clock circuit of the second monitoring unit. The second monitoring unit is further configured to receive a first clock signal sent by the first monitoring unit, and output the security risk information when the first clock signal is inconsistent with the second clock signal of the second monitoring unit; and / or The first monitoring unit is further configured to receive the second clock signal, and when the first clock signal and the second clock signal are inconsistent, to perform the security defense action and / or output the security risk information.

8. The safety monitoring system according to claim 7, characterized in that, Also includes: Third conductive connector; The third conductive connector is used to connect the data board or the second monitoring unit to the device; The second terminal of the second RTC battery is used to connect to the ground terminal of the device via the third conductive connector.

9. The safety monitoring system according to claim 8, characterized in that, The third conductive connector is used to connect the data board to the device, and is the same connector as the first conductive connector.

10. The safety monitoring system according to claim 6, characterized in that, Also includes: A power board, wherein the power board is equipped with the second monitoring unit.

11. The safety monitoring system according to claim 6, characterized in that, Also includes: Fourth conductive connector; The fourth conductive connector is used to electrically connect the second monitoring unit to the data board; The second monitoring unit is also used to output the security risk information when the electrical connection with the data board is disconnected.

12. An image forming apparatus, characterized in that, Includes the security monitoring system as described in any one of claims 1-11.

Images