Information processing system and program

Abstract

To inhibit convenience of a user from being reduced by reactivation as compared with unlimited reactivation when recovering mounted hardware from alteration.SOLUTION: An image processing device 10 comprises a control section 11 comprising: an alteration detection section 102 for detecting alteration of hardware for performing first processing, the hardware mounted on the image processing device 10; and a reactivation control section 104 that when second processing by the image processing device 10 is not executed or reserved, reactivates the image processing device 10 for recovering from the alteration and, when the second processing is executed or reserved, reactivates the image processing device 10 if a predetermined condition is satisfied.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to an information processing system and a program. [Background technology]

[0002] In hardware that performs predetermined processing, such as a fax card mounted on an information processing device, the power may be turned off to save power consumption during standby, but there is a risk of tampering when the power is turned off. For this reason, a technique is known that checks whether tampering has occurred when the hardware power is turned on from OFF, and if tampering is detected, restores the tampering (for example, Patent Document 1). In this technique, the information processing device is restarted when restoring the tampering. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2020-082441 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, when an information processing device is restarted to recover from tampering, restrictions are placed on the execution of jobs related to other processes that were executed or scheduled before the restart, which can reduce convenience for users of the information processing device.

[0005] An object of the present invention is to suppress the decrease in user convenience that accompanies a reboot, compared to a case in which a computer is rebooted indefinitely when recovering from tampering with installed hardware. [Means for solving the problem]

[0006] The invention described in claim 1 is an information processing system comprising one or more processors, the one or more processors detecting tampering with hardware that performs a first processing mounted on an information processing device, and if a second processing by the information processing device is not being executed or scheduled, restarting the information processing device to recover from the tampering, and if the second processing is being executed or scheduled, restarting the information processing device to recover from the tampering when predetermined conditions are satisfied. The invention described in claim 2 is the information processing system described in claim 1, characterized in that, when the one or more processors detect tampering with the hardware, they do not turn off the power to the hardware until the tampering is repaired, and do not allow the first processing to be performed. The invention described in claim 3 is the information processing system described in claim 2, characterized in that the one or more processors notify a terminal of a user remotely operating the information processing device that the hardware has been tampered with and that other processing other than the first processing can be performed by the information processing device using the tampered hardware, and perform the other processing based on instructions from the user. The invention described in claim 4 is the information processing system described in claim 3, characterized in that, when multiple pieces of the hardware are installed, the one or more processors cause the first processing to be performed by untampered hardware based on instructions from the user. The invention described in claim 5 is the information processing system described in claim 3, characterized in that when the condition is that a user operating the terminal issues an instruction to restart the information processing device, the one or more processors restart the information processing device to recover from the tampering. The invention described in claim 6 is the information processing system described in claim 5, characterized in that the one or more processors cause the terminal to display a user interface for instructing the information processing device to restart. The invention described in claim 7 is the information processing system described in claim 3, characterized in that when the second process is being executed or reserved, the one or more processors make a reservation for a restart to recover from the tampering, and the condition is that when the second process is completed, the information processing device is restarted to recover from the tampering. The invention described in claim 8 is a program that enables a computer to realize the following functions: a function of detecting tampering of hardware that performs a first processing mounted on an information processing device; a function of restarting the information processing device to recover from the tampering when a second processing by the information processing device is not being executed or scheduled; and a function of restarting the information processing device to recover from the tampering when a predetermined condition is satisfied when the second processing is being executed or scheduled. Effect of the Invention

[0007] According to the present invention of claim 1, when tampering of hardware that performs a first process installed in an information processing device is detected, if a second process by the information processing device is not being executed or scheduled, the information processing device is restarted to recover from the tampering, and if a predetermined condition is satisfied if the second process is being executed or scheduled, the information processing device is restarted to recover from the tampering. This makes it possible to restart the information processing device depending on the status of the second process, thereby suppressing a decrease in user convenience due to the restart of the information processing device. According to the present invention of claim 2, when tampering of hardware is detected, the first process is not performed by the hardware until the tampering is repaired. This makes it possible to prevent the spread of the influence of the tampering. In addition, since the tampering is performed when the power is off, new tampering can be prevented by not turning off the power of the tampered hardware. According to the present invention of claim 3, a user who remotely operates an information processing device can instruct the information processing device to execute a process other than the first process by the tampered hardware, thereby improving user convenience. According to the present invention of claim 4, a user who remotely operates an information processing device can instruct execution of the first process by non-tampered hardware, thereby improving user convenience. According to the present invention of claim 5, when a user remotely operating the information processing device from a terminal issues a reboot instruction, the information processing device is rebooted to recover from tampering. This enables recovery processing based on the intention of the user performing remote operation. According to the present invention of claim 6, the user can instruct the information processing device to reboot by remote operation from the terminal, thereby improving user convenience. According to the present invention of claim 7, when the second process is being executed or scheduled, a restart is scheduled to recover from the tampering, and when the second process is completed, the restart is performed to recover from the tampering. This enables planned recovery from the tampering. According to the present invention of claim 8, when tampering of hardware that performs a first process installed in an information processing device is detected, if a second process by the information processing device is not being executed or scheduled, the information processing device is restarted to recover from the tampering, and if a predetermined condition is satisfied if the second process is being executed or scheduled, the information processing device is restarted to recover from the tampering. This makes it possible to restart the information processing device depending on the status of the second process, thereby suppressing a decrease in user convenience due to the restart of the information processing device. [Brief description of the drawings]

[0008] [Figure 1] 1 is a diagram illustrating an example of an overall configuration of an information processing system to which an embodiment of the present invention is applied. [Diagram 2] FIG. 2 illustrates an example of a hardware configuration of an image processing apparatus. [Diagram 3] FIG. 2 illustrates an example of a functional configuration of a control unit of the image processing apparatus. [Figure 4] FIG. 2 illustrates an example of a functional configuration of a control unit of a user terminal. [Diagram 5] 10 is a flowchart showing an example of a processing flow of the image processing device. [Figure 6] 13A and 13B are diagrams showing a specific example of processing when the hardware performing the first processing installed in the image processing device is a fax card that sends and receives faxsimile documents via a telephone line, and the fax card is tampered with. [Figure 7] 11A and 11B are diagrams showing a specific example of processing when one of a plurality of fax cards installed in an image processing apparatus is tampered with. [Figure 8] FIG. 11 is a diagram showing a specific example of a user interface displayed on the image processing device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. <Configuration of information processing system> FIG. 1 is a diagram showing an example of the overall configuration of an information processing system 1 to which the present embodiment is applied. The information processing system 1 is configured by connecting an image processing device 10 and a user terminal 30 via a network 90. ​​The network 90 is, for example, a LAN (Local Area Network), the Internet, a public line network, or the like.

[0010] (Image Processing Device) The image processing device 10 is an information processing device that performs various processes in response to input operations by a user who uses the information processing system 1. For example, the image processing device 10 performs a process of forming an image on a medium such as paper, a process of outputting the recording medium on which the image is formed, a process of reading an image formed on paper or the like, a process of facsimile transmitting the read image, a process of acquiring various transmitted information, etc. Examples of the image processing device 10 include a so-called electrophotographic multifunction machine that forms a toner image on the printing surface of paper, a so-called inkjet printer that ejects ink onto the printing surface of paper, and the like.

[0011] The image processing device 10 stores and manages various types of information in a database. The image processing device 10 also acquires various types of information transmitted from the user terminal 30 via the network 90 and performs various processes. The image processing device 10 also transmits various types of information to the user terminal 30.

[0012] For example, the image processing device 10 checks for tampering of hardware that performs a first process installed in the image processing device 10. If the image processing device 10 detects tampering and the second process is not being executed or scheduled by the image processing device 10, the image processing device 10 restarts the image processing device 10 to recover from the detected tampering. Here, the "hardware that performs the first process" is, for example, a fax card that transmits and receives fax documents. Also, the "second process" is a printout process, etc.

[0013] When the image processing device 10 detects tampering, if the second process is being executed or scheduled by the image processing device 10, the image processing device 10 restarts the image processing device 10 in order to recover from the tampering when a predetermined condition is satisfied. For example, when the second process is completed by the image processing device 10 as the "predetermined condition", the image processing device 10 restarts the image processing device 10 in order to recover from the tampering of the hardware that performs the first process installed in the image processing device 10.

[0014] When the image processing device 10 is connected to a user terminal 30 that remotely operates the image processing device 10, the image processing device 10 notifies the user terminal 30 that the hardware that performs the first processing installed in the image processing device 10 has been tampered with and that processing other than the first processing can be executed. In this case, the image processing device 10 executes processing other than the first processing based on an instruction from the user terminal 30.

[0015] Furthermore, the image processing device 10 is equipped with a plurality of pieces of hardware, and if there is hardware among them that is capable of performing the first processing and has not been tampered with, the image processing device 10 notifies the user terminal 30 of that effect. In this case, the image processing device 10 performs the first processing using the tampered hardware based on an instruction from the user terminal 30.

[0016] Furthermore, as the above-mentioned "predetermined condition," the image processing device 10 restarts its own device to recover from tampering of the hardware that performs the first processing mounted on the image processing device 10, when instructed by the user terminal 30. In this case, the image processing device 10 causes the user terminal 30 to display a user interface for instructing the user terminal 30 to restart the image processing device.

[0017] When the image processing device 10 detects tampering of the hardware that performs the first process installed in the image processing device 10, the power supply of the hardware is not turned off until the tampering is repaired, but is kept ON, and the first process is not performed during that time. The configuration and process of the image processing device 10 will be described in detail later.

[0018] (User terminal) The user terminal 30 is an information processing device such as a smartphone, a tablet terminal, or a personal computer operated by a user who uses the information processing system 1. Application software that enables the operation of the image processing device 10 is installed in the user terminal 30. The user terminal 30 acquires various information transmitted from the image processing device 10 and performs various processes. For example, when control information for displaying that the hardware that performs the first process mounted on the image processing device 10 has been tampered with is transmitted to the user terminal 30, the user terminal 30 displays that the hardware has been tampered with. Furthermore, when control information for displaying that the image processing device 10 can execute processes other than the first process is transmitted to the user terminal 30, the user terminal 30 displays that the other processes can be executed. Furthermore, when control information for displaying that the hardware that has not been tampered with can execute the first process is transmitted to the user terminal 30, the user terminal 30 displays that the hardware that has not been tampered with can execute the first process.

[0019] The user terminal 30 also transmits various types of information to the image processing device 10. For example, the user terminal 30 transmits information inputted to the image processing device 10 to cause the image processing device 10 to execute various processes. For example, the user terminal 30 transmits information inputted to cause the image processing device 10 to execute a second process. The user terminal 30 also transmits information inputted to cause non-tampered hardware to execute a first process. The user terminal 30 also transmits information inputted to cause the image processing device 10 to restart. The configuration and processing of the user terminal 30 will be described in detail later.

[0020] The configuration of the information processing system 1 described above is an example, and the information processing system 1 as a whole may have the function of realizing the above-mentioned processing. Therefore, some or all of the functions of the above-mentioned processing may be shared or cooperated within the information processing system 1. That is, some or all of the functions of the user terminal 30 may be functions of the image processing device 10, and some or all of the functions of the image processing device 10 may be functions of the user terminal 30. Furthermore, some or all of the functions of the user terminal 30 and the image processing device 10 constituting the information processing system 1 may be transferred to another server (not shown) or the like. This promotes processing in the information processing system 1 as a whole, and also makes it possible for the processes to be complemented.

[0021] (Hardware configuration of image processing device) FIG. 2 is a diagram illustrating an example of a hardware configuration of the image processing device 10. As shown in FIG. The image processing device 10 has a control unit 11, a memory 12, a storage unit 13, a communication unit 14, an operation unit 15, a display unit 16, a reading unit 17, and an image forming unit 18. These units are connected to each other via a data bus, an address bus, a PCI (Peripheral Component Interconnect) bus, etc.

[0022] The control unit 11 is a processor that controls the functions of the user terminal 30 through the execution of various software such as an OS (operating system) and application software. The control unit 11 is composed of, for example, a CPU (Central Processing Unit). The memory 12 is a storage area that stores various software and data used for executing the software, and is used as a working area for calculations. The memory 12 is composed of, for example, a RAM (Random Access Memory).

[0023] The storage unit 13 is a storage area for storing input data for various software programs and output data from various software programs. The storage unit 13 is composed of, for example, a hard disk drive (HDD), a solid state drive (SSD), a semiconductor memory, etc., used for storing programs and various setting data. The storage unit 13 stores a database for storing various information.

[0024] The communication unit 14 transmits and receives data between the user terminal 30 and the outside via the network 90. ​​The operation unit 15 is composed of, for example, a software keyboard, mechanical buttons, switches, etc., and accepts input operations. The operation unit 15 also includes a touch sensor that configures a touch panel integrally with the display unit 16. The display unit 16 is composed of, for example, a liquid crystal display or an organic EL (Electro Luminescence) display used to display information, and displays images, text data, etc.

[0025] The reading unit 17 reads an image recorded on a medium such as paper (e.g., a paper document) as a recording medium. The reading unit 17 is composed of, for example, a CCD type scanner that reduces the reflected light of light irradiated from a light source onto an original document using a lens and receives the light with a CCD (Charge Coupled Devices), or a CIS type scanner that receives the reflected light of light irradiated sequentially from an LED light source onto an original document using a CIS (Contact Image Sensor). The image forming unit 18 forms an image to be printed on the printing surface of paper as a recording medium, for example, by an electrophotographic method or an inkjet method. These units are connected by a data bus, an address bus, a PCI bus, etc.

[0026] (Hardware configuration of user terminal) The hardware configuration of the user terminal 30 is similar to the hardware configuration of the image processing device 10 shown in Fig. 2 except for the reading unit 17 and the image forming unit 18. That is, the user terminal 30 is equipped with a control unit, a memory, a storage unit, a communication unit, an operation unit, and a display unit that have the same functions as the control unit 11, the memory 12, the storage unit 13, the communication unit 14, the operation unit 15, and the display unit 16 shown in Fig. 2, respectively, and illustration and description thereof will be omitted.

[0027] (Functional configuration of the control unit of the image processing device) FIG. 3 is a diagram showing an example of a functional configuration of the control unit 11 of the image processing device 10. As shown in FIG. In the control unit 11 of the image processing device 10, an acquisition unit 101, a tamper detection unit 102, a process management unit 103, a restart control unit 104, a display control unit 105, and a transmission control unit 106 function.

[0028] The acquisition unit 101 acquires various kinds of information. For example, the acquisition unit 101 acquires various kinds of information transmitted from the user terminal 30. Examples of the information transmitted from the user terminal 30 include information input to cause the image processing device 10 to execute a process other than the first process, information input to cause non-tampered hardware to execute the first process, and information input to restart the image processing device 10.

[0029] The tampering detection unit 102 detects tampering of hardware that is installed in the image processing device 10 and performs a first process. The process management unit 103 manages the execution of the second process by the image processing device 10. In addition, the process management unit 103 manages the reservation of the second process by the image processing device 10.

[0030] The restart control unit 104 performs control to restart the image processing device 10. For example, when tampering of hardware that performs a first process mounted on the image processing device 10 is detected, if the second process by the image processing device 10 is not being executed or reserved, the restart control unit 104 restarts the image processing device itself to recover from the detected tampering. At this time, the restart control unit 104 performs control to set the hardware that performs the first process to a state that has not been tampered with when the image processing device 10 is restarted.

[0031] Furthermore, when tampering of the hardware that performs the first processing mounted on the image processing device 10 is detected, and the second processing by the image processing device 10 is being executed or reserved, the restart control unit 104 performs control to restart the image processing device 10 in order to recover from the detected tampering if a predetermined condition is satisfied. At this time, the restart control unit 104 performs control to set the hardware that performs the first processing to a state that has not been tampered with when the image processing device 10 is restarted. Examples of the "predetermined condition" include the completion of the second processing by the image processing device 10 and an instruction from the user terminal 30 to restart the image processing device 10.

[0032] The display control unit 105 performs control to display various information on the display unit 16 (see FIG. 2). For example, the display control unit 105 performs control to display on the display unit 16 a message indicating that the hardware that performs the first processing mounted on the image processing device 10 has been tampered with. The display control unit 105 also performs control to display on the display unit 16 a message indicating that the image processing device 10 is capable of executing other processing.

[0033] Furthermore, the display control unit 105 performs control to display various information on the display unit of the user terminal 30. Specifically, the display control unit 105 transmits control information to the user terminal 30 to display various information on the display unit of the user terminal 30. For example, the display control unit 105 performs control to display on the display unit of the user terminal 30 a message to the effect that hardware that performs the first processing mounted on the image processing device 10 has been tampered with and a message to the effect that the image processing device 10 can execute other processing.

[0034] Furthermore, when the image processing device 10 is equipped with a plurality of pieces of hardware, and among them there is other hardware that can perform the first processing and has not been tampered with, the display control unit 105 performs control to display that fact on the display unit of the user terminal 30. Furthermore, the display control unit 105 performs control to display a user interface for instructing the image processing device 10 to be restarted on the display unit of the user terminal 30.

[0035] The transmission control unit 106 performs control for transmitting various types of information via the communication unit 14 (see FIG. 2). Specifically, the transmission control unit 106 performs control for transmitting various types of information to the user terminal 30. For example, the transmission control unit 106 performs control for transmitting control information for displaying various types of information on the user terminal 30.

[0036] Examples of the control information for displaying various information on the user terminal 30 include control information for displaying a message that the hardware that performs the first processing mounted on the image processing device 10 has been tampered with, and control information for displaying a message that the image processing device 10 can execute other processing. Other examples include control information for displaying a message that there is other hardware that can execute the first processing and has not been tampered with, and control information for displaying a user interface for instructing the image processing device 10 to restart.

[0037] (Functional configuration of the control unit of the user terminal) FIG. 4 is a diagram illustrating an example of a functional configuration of the control unit of the user terminal 30. As shown in FIG. In the control section of the user terminal 30, an acquisition section 301, a transmission control section 302, and a display control section 303 function.

[0038] The acquisition unit 301 acquires various information. For example, the acquisition unit 301 acquires input information that is received by an operation unit of the own device. The acquisition unit 301 also acquires various information transmitted from the image processing device 10 and the outside. Among the information acquired by the acquisition unit 301, information transmitted from the image processing device 10 includes, for example, control information for displaying on the user terminal 30 that the hardware that performs the first processing mounted on the image processing device 10 has been tampered with, control information for displaying on the user terminal 30 that the image processing device 10 can execute processing other than the first processing, and control information for displaying on the user terminal 30 that the hardware that has not been tampered with can execute the first processing.

[0039] The transmission control unit 302 controls the transmission of various information via the communication unit. Specifically, the transmission control unit 302 controls the transmission of various information to the image processing device 10 and to the outside. For example, the transmission control unit 302 controls the transmission of input information acquired by the acquisition unit 301 to the image processing device 10. Examples of the input information transmitted to the image processing device 10 include information input to cause the image processing device 10 to execute a second process, information input to cause unaltered hardware to execute a first process, and information input to restart the image processing device 10.

[0040] The display control unit 303 performs control to display various information on the display unit. For example, the display control unit 303 performs control to share and display an operation screen of the image processing device 10 on the display unit. The display control unit 303 also performs control to display on the display unit a message that the hardware that performs the first processing mounted on the image processing device 10 has been tampered with. The display control unit 303 also performs control to display on the display unit a message that the image processing device 10 can execute processing other than the first processing. The display control unit 303 also performs control to display on the display unit a message that the hardware that has not been tampered with can execute the first processing.

[0041] <Processing flow> (Processing flow of image processing device) FIG. 5 is a flowchart showing an example of the flow of processing by the image processing device 10.

[0042] When the image processing device 10 satisfies the conditions for switching to the power saving mode (YES in step 501), it turns off the power supply of the hardware that performs the first process mounted on the image processing device 10 (step 502). On the other hand, when the conditions for switching to the power saving mode are not satisfied (NO in step 501), the image processing device 10 repeats the determination process in step 501 until the conditions for switching to the power saving mode are satisfied.

[0043] Then, when input information for executing the second process is transmitted from the user terminal 30 (YES in step 503), the image processing device 10 starts the second process (step 504). On the other hand, when input information for executing the second process is not transmitted (NO in step 503), the image processing device 10 repeats the determination process in step 503 until input information for executing the second process is transmitted.

[0044] When an event occurs that causes the power supply of the hardware that performs the first processing to be turned on (YES in step 505), the image processing device 10 turns on the power supply of the hardware that performs the first processing (step 506) and checks for tampering of the hardware that performs the first processing (step 507). On the other hand, when an event occurs that causes the power supply of the hardware that performs the first processing to be turned on (NO in step 505), the image processing device 10 repeats the determination process in step 505 until an event occurs that causes the power supply of the hardware that performs the first processing to be turned on.

[0045] When the image processing device 10 detects tampering of the hardware that performs the first processing (YES in step 508), it causes the user terminal 30 to display the fact that tampering has been detected (step 509). At this time, the fact that tampering has been detected is displayed on the screen of the display unit 16 (see FIG. 2) of the image processing device 10, and the user terminal 30 may share and display this screen. When tampering of the hardware that performs the first processing has not been detected (NO in step 508), the processing of the image processing device 10 returns to the judgment processing of step 501.

[0046] When input information for restarting the image processing device 10 is transmitted from the user terminal 30 (YES in step 510), the image processing device 10 restarts its own device to recover from the tampering (step 512) and ends the process (END). Even if input information for restarting the image processing device 10 is not transmitted (NO in step 510), if the second process by the image processing device 10 is completed (YES in step 511), the image processing device 10 restarts its own device to recover from the tampering (step 512) and ends the process (END).

[0047] On the other hand, if input information for restarting the image processing device 10 has not been sent (NO in step 510) and the second processing by the image processing device 10 has not been completed (NO in step 511), the process returns to the judgment processing in step 510.

[0048] <Example> 6(A) and (B) are diagrams showing a specific example of processing when the hardware performing the first processing installed in the image processing device 10 is a fax card that sends and receives faxsimile documents via a telephone line and the fax card is tampered with.

[0049] As shown in Fig. 6(A), when the image processing device 10 equipped with the fax card 141 satisfies the condition for switching to the power saving mode, the image processing device 10 turns off the power of the fax card 141 as shown in Fig. 6(B). Now, assume that the fax card 141 has been tampered with. After that, when input information for executing the printout process is transmitted from the user terminal 30 as the "print instruction" shown in Fig. 6(A), the image processing device 10 starts the printout process.

[0050] After starting printout processing, when the image processing device 10 detects an incoming call to the fax card 141, it turns on the power of the fax card 141 and checks for tampering with the fax card 141, as shown in Fig. 6(B). If the image processing device 10 detects tampering with the fax card, it displays a message on the user terminal 30 to the effect that tampering has been detected. At this time, the image processing device 10 does not turn off the power of the fax card 141 until the tampering is repaired, but keeps it ON, and during that time does not allow the fax card 141 to send or receive faxsimile documents.

[0051] The image processing device 10 restarts itself to recover from the tampering when input information for restarting the image processing device 10 is transmitted from the user terminal 30. Even if input information for restarting the image processing device 10 is not transmitted, the image processing device 10 restarts itself to recover from the tampering when the printout process by the image processing device 10 is completed.

[0052] FIG. 7 is a diagram showing a specific example of processing when one of a plurality of fax cards installed in the image processing device 10 is tampered with.

[0053] 7, image processing device 10 equipped with fax cards 141 and 142 turns off the power of fax cards 141 and 142 when the condition for switching to the power saving mode is satisfied. Here, it is assumed that fax card 141 has been tampered with, but fax card 142 has not been tampered with. After that, when input information for executing the printout process is transmitted as a "print instruction" from user terminal 30, image processing device 10 starts the printout process.

[0054] After starting printout processing, when image processing device 10 detects an incoming call to fax card 141, it turns on the power of fax card 141 and checks for tampering with fax card 141. If image processing device 10 detects tampering with the fax card, it displays the detection of tampering on user terminal 30. At this time, image processing device 10 does not turn off the power of fax card 141 until the tampering is repaired, but keeps it ON, and during that time, does not allow fax card 141 to send or receive faxsimile documents.

[0055] Then, when fax card 142 is capable of transmitting and receiving fax-simile documents and has not been tampered with, image processing device 10 notifies user terminal 30 of that effect. In this case, image processing device 10 transmits and receives fax-simile documents using fax card 142 that has not been tampered with, based on an instruction from user terminal 30.

[0056] The image processing device 10 restarts itself to recover from the tampering when input information for restarting the image processing device 10 is transmitted from the user terminal 30. Even if input information for restarting the image processing device 10 is not transmitted from the user terminal 30, the image processing device 10 restarts itself to recover from the tampering if the printout process is completed.

[0057] FIG. 8 is a diagram showing a specific example of a user interface displayed on the image processing device 10. As shown in FIG. If the second process is being executed or reserved when the image processing device 10 detects tampering, a screen as shown in Fig. 8 is displayed on the display unit 16 of the image processing device 10. The screen shown in Fig. 8 displays five types of operation buttons labeled "Copy", "Scan", "Fax", "Print", and "Job", respectively, along with a message indicating that tampering has occurred, saying "The fax function is currently unavailable. Please restart the device." The screen shown in Fig. 8 is also displayed in common on the user terminal 30, and allows remote operation from the user terminal 30.

[0058] The user can learn from the information displayed on the screen shown in Fig. 8 that a restart is required to use the fax function, and that copy, scan, print, and job functions are each available. Note that in the example of Fig. 8, five types of operation buttons labeled "Copy," "Scan," "Fax," "Print," and "Job" are displayed in the same manner, but, for example, only the button labeled "Fax" may be inactivated so that it cannot be pressed.

[0059] <Other embodiments> Although the present embodiment has been described above, the present invention is not limited to the above-mentioned embodiment. Moreover, the effects of the present invention are not limited to those described in the above-mentioned embodiment. For example, the configuration of the information processing system 1 shown in FIG. 1 and the hardware configuration of the image processing device 10 shown in FIG. 2 are merely examples for achieving the object of the present invention, and are not particularly limited. Moreover, the functional configuration of the image processing device 10 shown in FIG. 3 and the functional configuration of the user terminal 30 shown in FIG. 4 are also merely examples, and are not particularly limited. It is sufficient that the information processing system 1 of FIG. 1 has a function capable of executing the above-mentioned processing as a whole, and the functional configuration used to realize this function is not limited to the example of FIG. 3 or the example of FIG. 4.

[0060] In addition, the order of the steps of the processing of the image processing device 10 shown in Fig. 5 is merely an example and is not particularly limited. The processing is not limited to the chronological processing according to the illustrated order of steps, but may be performed in parallel or individually without necessarily being chronological. In addition, the specific examples shown in Figs. 6 to 8 are merely examples and are not particularly limited.

[0061] (Additional Note) (((1))) one or more processors; The one or more processors: Detecting tampering with hardware that performs a first process and is installed in the information processing device; if the second process by the information processing device is not being executed or scheduled, rebooting the information processing device to recover from the tampering; When the second process is being executed or scheduled, if a predetermined condition is satisfied, the information processing device is restarted to recover from the tampering. Information processing system. (((2))) When the one or more processors detect tampering of the hardware, the one or more processors do not turn off the power of the hardware until the tampering is repaired, and do not allow the first process to be performed. An information processing system according to (((1))). (((3))) The one or more processors: notifying a terminal of a user remotely operating the information processing device of the fact that the hardware has been tampered with and that another process other than the first process can be performed by the information processing device using the tampered hardware; The other process is performed based on an instruction from the user. 2. An information processing system according to claim 1, wherein the information processing system is an information processing system according to claim 1. (((4))) When a plurality of pieces of the hardware are installed, the one or more processors cause the first process to be performed by the hardware that has not been tampered with based on an instruction from the user. The information processing system according to (((3))). (((5))) The one or more processors are characterized in that, when a user who operates the terminal issues an instruction to restart the information processing device, the one or more processors restart the information processing device to recover from the tampering. The information processing system according to (((3))) or (((4))). (((6))) The one or more processors cause the terminal to display a user interface for instructing the terminal to reboot the information processing device. 13. An information processing system according to any one of ((3))) to (((5))). (((7))) The one or more processors: If the second process is being executed or scheduled, a restart is scheduled to be performed to recover from the tampering. The condition is characterized in that, when the second process is completed, the information processing device is restarted in order to recover from the tampering. 1. An information processing system according to any one of ((1)) to ((3)). (((8))) On the computer, a function of detecting tampering with hardware that performs a first process and is installed in the information processing device; a function of restarting the information processing device to recover from the tampering when the second process by the information processing device is not being executed or scheduled; a function of restarting the information processing device to recover from the tampering when a predetermined condition is satisfied in a case where the second process is being executed or scheduled; A program to achieve this.

[0062] According to the present invention (((1))), when tampering of hardware that performs a first process installed in an information processing device is detected, if a second process by the information processing device is not being executed or scheduled, the information processing device is restarted to recover from the tampering, and if the second process is being executed or scheduled, the information processing device is restarted to recover from the tampering when a predetermined condition is satisfied. This allows the information processing device to be restarted depending on the status of the second process, making it possible to suppress a decrease in user convenience due to the restart of the information processing device. According to the present invention (((2))), when tampering of hardware is detected, the first process is not performed by the hardware until the tampering is repaired. This makes it possible to prevent the spread of the effects of the tampering. In addition, since the tampering is performed while the power is off, new tampering can be prevented by not turning off the power of the tampered hardware. According to the present invention (((3))), a user who remotely operates an information processing device can instruct the information processing device to execute a process other than the first process by the tampered hardware, thereby improving user convenience. According to the present invention (((4))), a user who remotely operates an information processing device can instruct the first process to be executed by non-tampered hardware, thereby improving user convenience. According to the present invention (((5))), when a user remotely operating the information processing device from a terminal issues a reboot instruction, the information processing device is rebooted to recover from tampering. This enables recovery processing based on the intention of the user performing remote operation. According to the present invention (((6))), the user can instruct the information processing device to reboot by remote operation from the terminal, thereby improving user convenience. According to the present invention (((7))), when the second process is being executed or scheduled, a restart is scheduled to recover from the tampering, and when the second process is completed, a restart is performed to recover from the tampering. This allows planned recovery from the tampering. According to the present invention (((8))), when tampering of hardware that performs a first process installed in an information processing device is detected, if a second process by the information processing device is not being executed or scheduled, the information processing device is restarted to recover from the tampering, and if the second process is being executed or scheduled, the information processing device is restarted to recover from the tampering when a predetermined condition is satisfied. This allows the information processing device to be restarted depending on the status of the second process, making it possible to suppress a decrease in user convenience due to the restart of the information processing device. [Explanation of symbols]

[0063] 1...information processing system, 10...image processing device, 11...control unit, 30...user terminal, 90...network, 101...acquisition unit, 102...tampering detection unit, 103...processing management unit, 104...restart control unit, 105...display control unit, 106...transmission control unit, 301...acquisition unit, 302...transmission control unit, 303...display control unit

Claims

1. One or more processors; The one or more processors: Detecting tampering with hardware that performs a first process and is installed in the information processing device; if the second process by the information processing device is not being executed or scheduled, rebooting the information processing device to recover from the tampering; When the second process is being executed or scheduled, if a predetermined condition is satisfied, the information processing device is restarted to recover from the tampering. Information processing system.

2. When the one or more processors detect tampering of the hardware, the one or more processors do not turn off the power of the hardware until the tampering is repaired, and do not allow the first process to be performed. The information processing system according to claim 1 .

3. The one or more processors: notifying a terminal of a user remotely operating the information processing device of the fact that the hardware has been tampered with and that another process other than the first process can be performed by the information processing device using the tampered hardware; The other process is performed based on an instruction from the user. The information processing system according to claim 2 .

4. When a plurality of pieces of the hardware are installed, the one or more processors cause the first process to be performed by the hardware that has not been tampered with based on an instruction from the user. The information processing system according to claim 3 .

5. the one or more processors are characterized in that, when the condition is that a user who operates the terminal issues an instruction to restart the information processing device, the one or more processors restart the information processing device to recover from the tampering. The information processing system according to claim 3 .

6. The one or more processors cause the terminal to display a user interface for instructing a reboot of the information processing device.

6. The information processing system according to claim 5.

7. The one or more processors: When the second process is being executed or scheduled, a restart is scheduled to be performed to recover from the tampering. The condition is characterized in that, when the second process is completed, the information processing device is restarted in order to recover from the tampering. The information processing system according to claim 3 .

8. On the computer, a function of detecting tampering of hardware that performs a first process and is installed in the information processing device; a function of restarting the information processing device to recover from the tampering when the second process by the information processing device is not being executed or scheduled; a function of restarting the information processing device to recover from the tampering when a predetermined condition is satisfied in a case where the second process is being executed or scheduled; A program to achieve this.

Images