Image forming apparatus and method for operating image forming apparatus

Abstract

To provide an image forming apparatus in which an operation before an encryption process is executed is restricted.SOLUTION: An image forming apparatus includes a control unit, a storage unit, a display unit, an operation unit, and an external interface. When executing an initial setting process in a first state in which use of the external interface is restricted, the control unit displays an inquiry screen on the display unit inquiring whether to encrypt the storage unit, and encrypts the storage unit on the basis of receipt of an operation on the operation unit to encrypt the storage unit, and after encrypting the storage unit, sets a second state in which the restriction on use of the external interface is released.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present disclosure relates to an image forming apparatus and the like. [Background technology]

[0002] An installation including initial settings, which is performed when an image forming apparatus is installed in a user's office, etc., is referred to as an initial installation. In the initial settings, passwords for an administrator of the image forming apparatus, a default user, etc. are set.

[0003] Furthermore, there exist terminals that encrypt setting values ​​for security reasons. For example, Patent Document 1 discloses that a MAC (Media Access Control) address is encrypted during initial configuration of a terminal. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2008-028877 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, Patent Document 1 does not mention any restriction on use before encryption processing is executed, so a user can freely use the terminal even before encryption processing is executed.

[0006] An object of the present disclosure is to provide an image forming apparatus or the like that is capable of restricting operations that may be performed before encryption processing is executed. [Means for solving the problem]

[0007] The present disclosure provides an image forming apparatus including a control unit, a memory unit, a display unit, an operation unit, and an external interface, wherein, when performing an initial setting process in a first state in which use of the external interface is restricted, the control unit displays a query screen on the display unit inquiring as to whether or not to encrypt the memory unit, and based on receipt of an operation to encrypt the memory unit at the operation unit, encrypts the memory unit, and after encrypting the memory unit, sets a second state in which restriction on use of the external interface is lifted.

[0008] The present disclosure also provides an operation method for an image forming device having an external interface and a memory unit, in which, when performing an initial setting process in a first state in which use of the external interface is restricted, a query screen is displayed to inquire as to whether or not to encrypt the memory unit, and based on receiving an operation to encrypt the memory unit, the memory unit is encrypted, and after encrypting the memory unit, a second state in which the restriction on use of the external interface is lifted is set. Effect of the Invention

[0009] According to the present disclosure, it is possible to provide an image forming apparatus or the like in which operations before encryption processing is executed are restricted. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a state transition diagram of a typical image forming apparatus. [Diagram 2] 1 is a functional block diagram of an image forming apparatus according to a first embodiment of the present disclosure. [Diagram 3] 5 is a flowchart for explaining an operation when performing initial settings of the image forming apparatus according to the first embodiment of the present disclosure. [Figure 4] 5 is a flowchart for explaining an operation when an initial setup wizard of the image forming apparatus according to the first embodiment of the present disclosure is executed. [Diagram 5]5 is a flowchart for explaining an operation when performing encryption processing of the image forming apparatus according to the first embodiment of the present disclosure. [Figure 6] 13 is an example of a user consent screen for information handling that is displayed on a display unit by the image forming apparatus according to the first embodiment of the present disclosure. [Figure 7] 13 is an example of a password setting screen (for administrator) displayed on a display unit by the image forming apparatus according to the first embodiment of the present disclosure. [Figure 8] 4 is an example of a security setting screen displayed on a display unit by the image forming apparatus according to the first embodiment of the present disclosure. [Figure 9] 10 is a flowchart for explaining the operation of an image forming apparatus according to a second embodiment of the present disclosure. [Figure 10] 13 is a flowchart for explaining the operation of an image forming apparatus according to a third embodiment of the present disclosure. [Figure 11] 13 is a flowchart for explaining the operation of an image forming apparatus according to a fourth embodiment of the present disclosure. [Figure 12] 13 is a flowchart for explaining the operation of an image forming apparatus according to a fifth embodiment of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] The image forming apparatus is, for example, a multi-function printer (MFP). Currently, the storage unit of an image forming apparatus with a standard configuration is not encrypted. If the user wishes to encrypt the storage unit, the user must purchase a function for encrypting the storage unit as an option for the image forming apparatus. Therefore, when the image forming apparatus is delivered to the user and before the option is applied, it is possible to remove the storage unit from the image forming apparatus and read and write data to the storage unit. In this respect, an image forming apparatus with a general configuration has a security risk. Note that the new European IoT standard requires secure storage of data even for image forming apparatuses with a standard configuration.

[0012] The image forming apparatus of the present disclosure sets a first state in which the use of an external interface (I / F) is restricted until initial settings are made by a user. The external I / F refers to a means capable of outputting data to the outside of the image forming apparatus, and is a communication unit and a connection unit. More specifically, the external I / F includes a network I / F, a Universal Serial Bus (USB), a Bluetooth (registered trademark) communication device, a Near Field Communication (NFC) communication device, and the like.

[0013] Furthermore, the image forming device of the present disclosure restricts use of the main functions of the image forming device, in addition to the external I / F, until the user performs initial settings. The main functions are functions other than those related to the initial settings, specifically, the copy function, scanner function, fax function, printer function, etc., of the image forming device / multifunction device.

[0014] The image forming apparatus of the present disclosure executes an initial setting, and preferably executes encryption of the storage unit, and then sets a second state in which restrictions on the external I / F and main functions are partially or completely lifted.

[0015] [1. First embodiment] [1.1 State transition diagram] Figure 1 is a general state transition diagram of an image forming device. Figure 1 shows the transitions between three states: the state immediately after the image forming device is assembled at the factory, the factory shipment state, and the state in which the image forming device is being operated by an end user.

[0016] Immediately after assembly at the factory is completed (state 1), the scanner unit is set to factory shipping state 5 when shipping settings 3 are performed. Immediately after the transition to factory shipping state 5, the scanner unit is locked (state 7) to prevent damage to the scanner unit during transportation. The scanner unit corresponds to image input section 45, which will be described later. In state 7, the scanner unit is transported to the installation location, the scanner unit is unlocked (9), the device transitions to state 11, and the device is shipped to the end user. It is also possible to lock the scanner unit again (13) from state 11 and return to state 7.

[0017] After the image forming device is set to state 11, it is delivered to a user, and the user performs initial settings 15. More specifically, during initial settings 15, an initial setup wizard, which will be described later, is executed in the image forming device, and encryption processing is further executed as necessary. After initial settings 15 have been executed, the image forming device transitions to state 19. In state 19, the administrator's personal data has been registered by the initial setup wizard, and no additional accounts have been registered. In accordance with the registration work performed by the administrator or the like, additional accounts are registered through the procedure of custom user registration 21, and the image forming device transitions to state 23. There may be a procedure 25 for returning a state in which some of the additional accounts desired to be registered have been registered to an unregistered state.

[0018] State 23 is a state in which the administrator's personal data has been registered by the initial installation wizard, and an additional account has been registered. In state 23, other settings related to the image forming apparatus, for example, various settings related to main functions, may be registered. These other settings can be initialized in state 23 while maintaining the administrator's personal data and the additional account registration. Arrow 27 indicates this procedure. The procedure 29 of erasing all custom users by user is a procedure for initializing both these other settings and the additional account registration.

[0019] Step 31 is a step for returning an image forming apparatus that is in a state 19 or 23 to a factory-shipped state, that is, state 11. This step is performed, for example, when a user who has purchased an image forming apparatus disposes of the image forming apparatus or transfers it to a third party.

[0020] [1.2 Image forming device 40] 2 is a functional block diagram of the image forming apparatus 40. The image forming apparatus 40 has a display unit 41, an operation unit 43, an image input unit 45, an image forming unit 47, a communication unit 49, a connection unit 51, a first storage unit 53, a second storage unit 55, and a control unit 57.

[0021] In the following description with reference to FIG. 2, image forming apparatus 40 is in a state immediately after shipment from the factory, which corresponds to state 11 in FIG. 1. Furthermore, in addition to state 11, image forming apparatus 40 is delivered to the user with restrictions on the use of the external I / F and main functions. The restrictions on the use of the external I / F may prohibit use entirely, or may permit use only for specific communication partners / connection partners and prohibit use for other communication partners / connection partners. The restrictions on the use of the main functions may prohibit use entirely, or may prohibit use of some of the main functions and permit use of others.

[0022] The display unit 41 displays images and characters. For example, the display unit 41 is configured with a liquid crystal display (LCD) or an organic EL (Electro-Luminescence) panel. The display unit 41 may be a standalone display device, or may further include an externally connected display device.

[0023] The operation unit 43 accepts operation input from a user. For example, the operation unit 43 is configured with hardware keys and software keys. The operation unit 43 also includes task keys for executing tasks such as fax transmission and image scanning, and a stop key for canceling an operation. The operation unit 43 may also include physical operation keys such as task keys, a stop key, a power key, and a power saving key. The display unit 41 and the operation unit 43 may be integrated into a touch panel display.

[0024] The image input unit 45 reads an image (original) and outputs it as image data. The image input unit 45 is configured with a general scanner unit (image input device). The image input unit 45 may input image data from an external storage medium such as a USB memory, or may receive an image via a network.

[0025] Image forming unit 47 forms (prints) an image on a medium such as copy paper based on image data. The printing method of image forming unit 47 is arbitrary, and may be, for example, any of an inkjet printer, a laser printer, a thermal transfer printer, etc. Image forming unit 47 may be a monochrome printer or a color printer. Image forming unit 47 may include a paper feed mechanism that supplies the medium, a transport mechanism that transports the medium, a sorter mechanism that sorts the medium after the image is formed, etc.

[0026] The communication unit 49 is an external I / F that connects to a network. For example, it is configured with an interface that can connect to a wired LAN (Local Area Network), a wireless LAN, or an LTE (Long Term Evolution) network. When the communication unit 49 is connected to a network, it is connected to other devices or an external network. In addition, the communication unit 49 may be an interface that performs short-range wireless communication, such as NFC (Near field communication) or Bluetooth (registered trademark).

[0027] The connection unit 51 connects the image forming apparatus 40 to other devices. For example, the connection unit 51 is a USB interface to which a USB memory or the like is connected. The connection unit 51 may be an interface such as HDMI (registered trademark) other than the USB interface.

[0028] In the present disclosure, the communication unit 49 and the connection unit 51 may be collectively referred to as an external I / F. As described above, the image forming apparatus 40 is currently in a state immediately after shipment from the factory, and use of the external I / F is restricted.

[0029] The first and second storage units 53 and 55 store various programs and various data necessary for the operation of the image forming apparatus. The first and second storage units 53 and 55 include a recording device capable of temporary storage such as a dynamic random access memory (DRAM) or a non-temporary recording device such as a solid state drive (SSD) composed of a semiconductor memory or a hard disk drive (HDD) composed of a magnetic disk. Although the first and second storage units 53 and 55 are configured as one unit for convenience of explanation, they may be configured as separate units for each purpose, such as an area used for executing a program (main storage area), an area for saving programs and data (auxiliary storage area), an area used for caching, etc. The first and second storage units 53 and 55 may be two storage areas in one storage device, or may be two separate storage devices. The image forming apparatus 40 may have three or more storage devices.

[0030] The first storage unit 53 has an encryption key storage unit 53A and an evacuation storage unit 53B. The encryption key storage unit 53A stores an encryption key generated by an encryption key generation unit 57A described later. When the encryption method is a common key encryption method, one key common to encryption and decryption is stored. When the encryption method is a public key method, both an encryption key and a decryption key are stored. The evacuation storage unit 53B temporarily stores data stored in the second storage unit 55 when encrypting the second storage unit 55. The first storage unit 53 is not subject to encryption by the encryption unit 57B described later.

[0031] When the user selects to execute the encryption process described below, the second storage unit 55 is subject to encryption by the encryption unit 57B described below. In this embodiment, it is assumed that the image forming device 40 is in a state immediately after shipment from the factory, and the second storage unit 55 is not encrypted.

[0032] The control unit 57 controls the entire image forming apparatus 40. The control unit 57 is composed of one or more control devices and control circuits, such as a CPU (Central Processing Unit) and a SoC (System on a Chip). The control unit 57 can implement each function by reading out a program stored in the storage unit and executing the process. In particular, the control unit 57 has an encryption key generation unit 57A, an encryption unit 57B, a decryption unit 57C, and a special mode unit 57D.

[0033] The encryption key generating unit 57A generates an encryption key for executing encryption processing. The encryption method is not particularly limited. The encryption method may be a common key encryption method or a public key encryption method. The encryption unit 57B encrypts the second storage unit 55 using the encryption key generated by the encryption key generating unit 57A. After the second storage unit 55 is encrypted, the decryption unit 57C decrypts the data using the encryption key stored in the encryption key storage unit 53A when reading data from the second storage unit 55. The special mode unit 57D controls the image forming device 40 according to an operation mode assumed to be used when a serviceman or the like performs maintenance on the image forming device 40.

[0034] [1.3 Initial Settings] 3 is a flow chart for explaining the operation when performing the initial setting of the image forming apparatus 40. The following will explain with reference to FIG.

[0035] The control unit 57 executes an initial setup wizard (step S1). The initial setup wizard determines various setting values ​​of the image forming apparatus 40. The initial setup wizard will be described in detail later.

[0036] Next, the control unit 57 displays an inquiry screen on the display unit 41 to inquire of the user whether or not to execute encryption processing, and determines whether or not an input to the effect that encryption processing is to be executed has been made (step S3). The encryption processing will be described in detail later.

[0037] If an input to the effect that encryption processing is to be performed is made from the operation unit 43 in response to the inquiry screen (step S3, Yes), the control unit 57 executes the encryption processing, encrypts the second storage unit 55 (step S5), and proceeds to step S9. On the other hand, if an input to the effect that encryption processing is not to be performed is made from the operation unit 43 in response to the inquiry screen (step S3, No), the control unit 57 reboots the image forming device 40 (step S7), and proceeds to step S9. After the reboot, various settings specified in the initial setup wizard are reflected in the operation of the image forming device 40. In step S9, the control unit 57 releases the usage restrictions imposed on the external I / F and main functions.

[0038] [1.3.1 Initial Installation Wizard] The initial setup wizard will now be described. The control unit 57 does not execute the initial setup wizard during the production process of the image forming apparatus 40. At the end of the production process, the control unit 57 is set to execute the initial setup wizard the next time the image forming apparatus 40 is started up. In other words, basically, the control unit 57 executes the initial setup wizard when the image forming apparatus 40 is started up for the first time by a user.

[0039] The initial setup wizard is a process for setting at least a part of various setting values ​​related to the main functions and other functions of the image forming apparatus 40. By executing the initial setup wizard, the initial settings for the image forming apparatus 40 are completed.

[0040] When the initial setup wizard is executed, the control unit 57 displays items that require user specification (input, selection, consent) in wizard format on the display unit 41. The initial setup wizard prepares multiple operation screens classified according to the type of setting item, presents these operation screens to the user one by one, and transitions to the operation screen of the next type depending on the user's confirmation operation. When the user has completed specification for all types, the initial setup wizard ends.

[0041] When the initial setup wizard is finished, the setting values ​​specified by the user are reflected as the setting values ​​of the image forming device 40. At this time, the image forming device 40 is rebooted. Note that the reboot may be omitted if not necessary. Also, the reboot may be performed forcibly.

[0042] 4 is a flow chart for explaining the operation when executing the initial setup wizard of the image forming apparatus 40. The following will explain with reference to FIG.

[0043] The control unit 57 displays a user consent screen for information handling on the display unit 41 and accepts user consent setting for information handling via the operation unit 43 (step S11). Next, the control unit 57 displays a password setting (administrator) screen on the display unit 41 and accepts password setting (administrator) via the operation unit 43 (step S13). Next, the control unit 57 displays a security setting screen on the display unit 41 and accepts security setting via the operation unit 43 (step S15). Next, the control unit 57 displays a screen inquiring whether or not to set other functions on the display unit 41 and determines whether or not an input to set other functions has been made (step S17).

[0044] If an input is made via the operation unit 43 to the effect that other function settings will be made (step S17, Yes), the control unit 57 displays an other function setting screen on the display unit 41 and accepts the other function settings via the operation unit 43 (step S19). For example, settings related to the copy function, scanner function, fax function, printer function, etc. of the image forming device 40 are made, and the initial setup wizard is terminated. On the other hand, if an input is made via the operation unit 43 to the effect that other function settings will not be made (step S17, No), the control unit 57 terminates the initial setup wizard without making other function settings.

[0045] The settings in the initial setup wizard in Fig. 4 are merely examples, and settings not described here may also be set in the initial setup wizard. For example, firmware update settings may also be set as part of the initial setup wizard. In this case, such additional setting items may be set as required setting items such as an administrator password (step S13) or security settings (step S15), or may be set as setting items for which the necessity of setting can be selected such as other function settings (step S19).

[0046] [1.3.2 Encryption process] As shown in Fig. 1, steps S3 and S5, after the initial installation wizard is completed, if the second storage unit 55 is to be encrypted, the control unit 57 executes encryption processing. When executing encryption processing, the control unit 57 saves data and generates a key before rebooting, and automatically reboots after completion, encrypts the second storage unit 55, and restores the data temporarily saved in the save storage unit 53B to the encrypted second storage unit 55. This will be described in detail below.

[0047] FIG. 5 is a flow chart for explaining the operation when performing the encryption process of the image forming apparatus 40. The control unit 57 copies data from the second storage unit 55 to the save storage unit 53B (step S51). At this point, the second storage unit 55 is not encrypted. Next, the encryption key generation unit 57A of the control unit 57 generates an encryption key and stores the generated encryption key in the encryption key storage unit 53A (step S53). Next, the control unit 57 reboots the image forming apparatus 40 (step S55). Next, the encryption unit 57B of the control unit 57 encrypts the second storage unit 55 using the encryption key stored in the encryption key storage unit 53A (step S57). Next, the control unit 57 copies the data copied to the save storage unit 53B in step S51 to the second storage unit 55 (step S59). Since the second storage unit 55 has already been encrypted, the data is encrypted by the encryption unit 57B and stored in the second storage unit 55. Next, the control unit 57 deletes the data copied to the save storage unit 53B in step S51 from the save storage unit 53B (step S61).

[0048] [1.3.3 Screen example]

[0049] Fig. 6 is an example of a user consent screen for information handling that is displayed on the display unit 41 by the image forming apparatus 40. A user consent screen for information handling 91 is displayed on the display unit 41 in step S11 of Fig. 4. The user consent screen for information handling 91 has an explanatory text 93 explaining the handling of personal information, arrows 95, 97, and a knob 99 for scrolling the explanatory text 93, a check box 101 that the user can check when the user agrees with the explanatory text 93, a back button 103, and a next button 105 for instructing screen transition to a password setting screen (administrator) 111 that is displayed on the display unit 41 in the next step S13.

[0050] It is preferable that input to the check box 101 is accepted only after the entirety of the explanatory text 93 is displayed by the arrows 95, 97, and the knob 99. It is preferable that an operation on the next button 105 is accepted after the check box 101 is checked, and is not accepted when the check box is unchecked.

[0051] 7 is an example of a password setting screen (administrator) displayed on the display unit 41 by the image forming apparatus 40. The password setting screen (administrator) 111 is displayed on the display unit 41 in step S13 of FIG. 4 when an administrator password has not been registered in the image forming apparatus 40. The password setting screen (administrator) 111 is a screen for setting a password for the administrator. The password setting screen (administrator) 111 has input fields 113 and 115, a back button 117, and a next button 119.

[0052] When the back button 117 is operated, the control unit 57 executes a screen transition to a user consent screen 91 for information handling displayed on the display unit 41 in step S11. When the next button 119 is operated, the control unit 57 executes a screen transition to a security setting screen 251 displayed on the display unit 41 in step S15. Both input fields 113 and 115 are areas for inputting an administrator's password. To prevent an incorrect password from being set, the password setting screen (administrator) 111 requires that the same password be entered in both input fields 113 and 115. The control unit 57 compares the two passwords entered in the input fields 113 and 115, and enables the next button 119 only if they match.

[0053] Fig. 8 is an example of a security setting screen displayed on display unit 41 by image forming apparatus 40. Security setting screen 251 is displayed on display unit 41 in step S15 of Fig. 4. Security setting screen 251 has firmware restore setting buttons 253 and 255, encryption setting buttons 257 and 259, a back button 261, and a next button 263.

[0054] The firmware restore setting buttons 253 and 255 are buttons for setting whether or not to attempt repair when damage to the firmware is detected. When the firmware restore setting button 253 is operated, the control unit 57 executes repair processing when it detects firmware damage. When the firmware restore setting button 255 is operated, the control unit 57 does not automatically execute repair processing even if it detects firmware damage.

[0055] The encryption setting buttons 257 and 259 are buttons for setting whether or not to execute encryption processing for the second storage unit 55. If the next button 263 is operated with the encryption setting button 257 operated and the initial setup wizard is ended, the control unit 57 selects "Yes" in step S3 of Fig. 3 and executes the encryption processing. On the other hand, if the next button 263 is operated after the encryption setting button 259 is operated and the initial setup wizard is ended, the control unit 57 selects "No" in step S3 of Fig. 3 and reboots the image forming apparatus 40.

[0056] [1.3.4 Effects] According to the first embodiment, the image forming device 40 is shipped from the factory with restrictions on the use of the external I / F and main functions, but after the initial installation wizard queries the user as to whether or not to perform encryption processing (step S15), the restrictions on the use of the external I / F and main functions are lifted (step S9).

[0057] Therefore, according to the first embodiment, before the user inquires about whether or not to perform encryption processing, the external I / F and main functions are restricted in use, thereby preventing information leakage from the image forming device 40.

[0058] Furthermore, according to the first embodiment, it is possible to lift the restrictions on the use of the external I / F and main functions after inquiring of the user as to whether or not to perform encryption processing.

[0059] Furthermore, according to the first embodiment, if the user so desires, encryption processing can be performed, thereby reducing the risk of information leakage.

[0060] [1.3.5 Modification of the first embodiment] In the above description, the image forming apparatus 40 is shipped from the factory with the use of functions other than those related to the external I / F and the initial setting restricted, and these restrictions on use are lifted by executing the operation of Fig. 3, but the functions to be restricted at the time of shipment from the factory can be arbitrarily determined. Also, although the use of the external I / F, that is, the communication unit 49 and / or the connection unit 51 is restricted, the use of other functional blocks shown in Fig. 2 may be restricted.

[0061] In "1.3 Initial Settings", the restrictions on use of the external I / F and main functions are lifted (step S9) regardless of whether encryption processing is performed or not. Instead, the restrictions on use may be lifted when encryption processing is performed, and not lifted when encryption processing is not performed.

[0062] In addition, the usage restrictions to be lifted may be different depending on whether or not encryption processing is performed. For example, the usage restrictions may be lifted completely when encryption processing is performed, and only part of the usage restrictions may be lifted when encryption processing is not performed.

[0063] [2. Second embodiment] A second embodiment will be described. The second embodiment deals with a power outage that occurs while the initial installation wizard is being executed. In the second embodiment, if a power outage occurs between the start and end of the initial installation wizard, all user-specified contents are discarded and the initial installation wizard is restarted the next time the wizard is started. The second embodiment differs in that an additional step is provided between steps S1 and S3. The following description will focus on only the differences in configuration and processing from the first embodiment.

[0064] 9 is a flowchart for explaining the operation of image forming apparatus 40. If a power outage occurs while the initial setup wizard is being executed (step S81, Yes), the next time image forming apparatus 40 is turned on (step S83), control unit 57 discards the setting values ​​determined by the initial setup wizard before the power outage (step S85) and restarts the initial setup wizard from the beginning (step S1). If no power outage occurs while the initial setup wizard is being executed (step S81, No), the process proceeds to step S3.

[0065] According to the second embodiment, even if a power interruption occurs while the initial setup wizard is being executed, the initial setup work of the image forming apparatus 40 can be redone by simply powering the image forming apparatus 40 on thereafter.

[0066] The above operation is a so-called rollback, but the initial setup wizard may be continued by roll forward. That is, in the above operation, the setting values ​​determined before the power outage were discarded in step S85, but instead of discarding these setting values, they may be retained and pending setting values ​​may be determined. In this case, the setting values ​​determined before the power outage may or may not be displayed.

[0067] [3. Third embodiment] A third embodiment will be described. In the third embodiment, the power interruption occurs during execution of data evacuation. That is, the third embodiment corresponds to a power interruption that occurs during execution of copying data from the second storage unit 55 to the evacuation storage unit 53B, which is performed in step S51 in the first embodiment. In the third embodiment, when a power interruption occurs during execution of data evacuation, the setting values ​​determined in the initial setup wizard are discarded. After that, when the image forming apparatus 40 is turned on again, the initial setup wizard is redone. Here, only the parts of the configuration and processing that are different from the first embodiment will be mainly described. In the third embodiment, instead of step S51, the operation described below is executed.

[0068] 10 is a flow chart for explaining the operation of the image forming apparatus 40. The control unit 57 starts copying from the second storage unit 55 to the backup storage unit 53B (step S91). If a power interruption occurs (step S95, yes) before this copying is completed (step S93, no), the next time the image forming apparatus 40 is powered on (step S97), the control unit 57 discards the setting values ​​determined in the initial setup wizard executed immediately before (step S99) and returns to step S1. If the copying started in step S91 is completed without a power interruption (step S93, yes), the process proceeds to step S53.

[0069] According to the third embodiment, if a power interruption occurs during data backup from the second storage unit 55 to the backup storage unit 53B, the process can be restarted from an appropriate step.

[0070] [4. Fourth embodiment] A fourth embodiment will be described. The fourth embodiment is intended to cope with a power interruption that occurs while restoring encrypted data from the save storage unit 53B to the second storage unit 55, and automatically redoes the encryption process when the image forming apparatus 40 is started after the power interruption. Here, only the configuration and processing that are different from the first embodiment will be mainly described.

[0071] Fig. 11 is a flowchart for explaining the operation of the image forming apparatus 40. The operation of this flowchart is executed instead of step S59 of Fig. 5. If a power interruption occurs before the control unit 57 starts copying data from the backup storage unit 53B to the second storage unit 55 (step S101) and the copy is completed (step S103, No; step S105, Yes), the next time the image forming apparatus 40 is powered on (step S107), the control unit 57 discards the data being copied to the second storage unit 55 (step S109) and returns to step S53 to start over with the encryption key generation and encryption process of the second storage unit 55.

[0072] According to the fourth embodiment, if a power interruption occurs during data copying from the backup storage unit 53B to the encrypted second storage unit 55, the process can be restarted from an appropriate step.

[0073] [5. Fifth Embodiment] A fifth embodiment will be described. In the above-mentioned embodiment, the usage restrictions on the external I / F and main functions are not released until the initial installation wizard is completed. In the fifth embodiment, a special mode for service personnel is prepared. In the special mode, the usage restrictions on the external I / F and main functions are released.

[0074] The following will be described with reference to Fig. 12. When the operation of Fig. 3 is not being executed and the operation unit 43 receives an operation for switching to the special mode (step S111), the special mode unit 57D releases the restrictions on the use of the external I / F and main functions (step S113). The operation for switching to the special mode includes, for example, performing a special operation not disclosed to general users, logging in using a user name and password preset for a service person, and the like.

[0075] In the special mode, all operational restrictions on the image forming apparatus 40 are lifted. At this time, the special mode unit 57D permits the user to use all functions of the image forming apparatus 40, including the external I / F and main functions (step S115). A service person or the like can use the functions of the image forming apparatus 40 without restrictions to perform maintenance work on the image forming apparatus 40.

[0076] When a predetermined operation for ending the special mode is received via the operation unit 43 (step S117), the special mode unit 57D resumes the restrictions on the use of the external I / F and main functions (step S119) and reboots the image forming device 40 (step S121).

[0077] According to the fifth embodiment, a service person or the like can perform maintenance work or the like even before the initial installation wizard is executed.

[0078] In the special mode, instead of lifting restrictions on all functions, restrictions on only some of the functions may be lifted.

[0079] In the above description, it is assumed that the operation for switching to the special mode is performed when the operation in Fig. 3 is not being executed, but switching to the special mode may be permitted even while the initial installation wizard is being executed. However, it is preferable to prohibit switching to the special mode while encryption processing is being executed.

[0080] If you switch to a special mode while the initial installation wizard is running, you can perform a so-called rollback, which discards the setting values ​​already determined in the initial installation wizard, or you can perform a so-called rollforward, which retains the setting values ​​already determined and makes decisions about setting values ​​that have not yet been set.

[0081] Depending on the operation content in the special mode, it may be determined whether or not rebooting is required in step S121.

[0082] In the special mode, when all or some of the setting items to be set in the initial installation wizard have been determined, the execution of the initial installation wizard in step S1 of FIG. 3 may be omitted and the process may proceed to step S3.

[0083] [6. Modifications] The present disclosure is not limited to the above-described embodiments and modifications, and various modifications are possible. In other words, the technical scope of the present disclosure also includes embodiments obtained by combining technical means that are appropriately modified within the scope of the gist of the present disclosure.

[0084] In the above embodiment, it has been described that the necessity of encryption processing of the storage unit is determined, and encryption processing is executed if necessary. However, the present disclosure is not limited to this. During shipping settings after assembly at a factory, the image forming apparatus may be caused to determine whether encryption processing is required and execute encryption processing according to the region of the shipping destination. In this case, for example, in an image forming apparatus shipped to Europe, after the initial installation wizard, as shown in FIG. 3, the necessity of encryption processing is determined and encryption processing is executed. On the other hand, in an image forming apparatus shipped outside Europe, it is considered to omit the necessity of encryption processing determination (step S4) and encryption processing (step S5) from FIG. 3.

[0085] In the above embodiment, the process of FIG. 3 is performed by the user on the image forming apparatus shipped from the factory, but the present disclosure is not limited to this. For example, the process of FIG. 3 may be performed before shipping from the factory. In this case, in the initial installation wizard executed before shipping from the factory, dummy data is set as various setting values, and encryption processing is executed. When the image forming apparatus arrives at the user's location, the control unit executes processing to update the various setting values ​​set in the initial installation wizard according to user input.

[0086] In the above embodiment, the encryption process is described as being executed following the initial installation wizard, but to further enhance security, the encryption process may be executed periodically to generate a new encryption key and encrypt the second memory unit using the new encryption key.

[0087] In the above-described embodiment, it is basically assumed that a user newly installs an image forming apparatus, but the present disclosure is not limited thereto. For example, when a user disposes of an image forming apparatus, when the user returns a leased image forming apparatus to a leasing company, or when the user gives up the image forming apparatus, the process of FIG. 3 may be executed. In this case, the initial installation wizard sets appropriate values ​​(random values, predetermined fixed values, etc.) as the setting values ​​of various settings, and then performs encryption processing. As a result, even if a third party obtains the storage unit from the given-up image forming apparatus, the data can be protected from the third party because it is encrypted.

[0088] The programs that run on each device in the embodiments are programs that control the CPU and the like (programs that make a computer function) so as to realize the functions of the above-described embodiments. Information handled by these devices is temporarily stored in a temporary storage device (e.g., RAM) during processing, and is then stored in various storage devices such as ROMs (Read Only Memories) and HDDs, and is read, modified, and written by the CPU as necessary.

[0089] Here, the recording medium for storing the program may be any of semiconductor media (e.g., ROM, non-volatile memory cards, etc.), optical recording media / magneto-optical recording media (e.g., DVD (Digital Versatile Disc), MO (Magneto Optical Disc), MD (Mini Disc), CD (Compact Disc), BD (Blu-ray (registered trademark) Disc), etc.), magnetic recording media (e.g., magnetic tape, flexible disk, etc.), etc. Furthermore, not only are the functions of the above-mentioned embodiments realized by executing the loaded program, but the functions of the present disclosure may also be realized by processing in cooperation with an operating system or other application programs, etc., based on instructions from the program.

[0090] In addition, when distributing the program on the market, the program can be stored in a portable recording medium and distributed, or transferred to a server computer connected via a network such as the Internet. In this case, the storage device of the server computer is of course included in the present disclosure. [Explanation of symbols]

[0091] 1 Factory assembly 5 Factory default settings 7 European factory settings (scanner locked) 11 European factory settings (scanner unlocked) 17 End-user operational status 19 Initialized (personal data included, no additional accounts registered) 23 Initialized (with personal data and additional account registration) 40 Image forming device 41 Display section 43 Operation section 45 Image input section 47 Image forming section 49 Communications Department 51 Connection 53 1st memory section 53A Encryption key storage unit 53B Backup memory section 55 2nd memory section 57 Control Unit 57A Encryption key generation section 57B Encryption section 57C Decoding section 57D Special mode section 105, 119, 263 Next button 103, 117, 261 Back button 91 User consent screen for handling of information 93 Description 95, 97, Arrow 99 Knob 101 Check box 111 Password setting screen (administrator) 113, 115 Input field 251 Security Settings Screen 253, 255 Firmware restore setting button 257, 259 Encryption setting button

Claims

1. An image forming apparatus including a control unit, a storage unit, a display unit, an operation unit, and an external interface, The control unit is When executing an initial setting process in a first state in which the use of the external interface is restricted, a query screen is displayed on the display unit to inquire whether or not to encrypt the storage unit; encrypting the storage unit based on receipt of an operation to encrypt the storage unit via the operation unit; and after encrypting the storage unit, setting a second state in which the restriction on use of the external interface is lifted. Image forming device.

2. a first storage unit that is not a target of the encryption and a second storage unit that is a target of the encryption; The control unit is storing an initial setting value input during execution of the initial setting process in the second storage unit; When an operation to encrypt the storage unit is received by the operation unit, the initial setting value stored in the second storage unit is copied to the first storage unit, and then the second storage unit is encrypted. The image forming apparatus according to claim 1 .

3. the control unit copies the initial setting value from the first storage unit to the second storage unit after encrypting the second storage unit; The image forming apparatus according to claim 2 .

4. the control unit copies the initial setting value from the first storage unit to the second storage unit, and then deletes the initial setting value from the first storage unit. The image forming apparatus according to claim 3 .

5. The device has at least one of the following functions: copy function, scanner function, fax function, and printer function; The control unit is capable of executing the encryption without making settings related to the functions. The image forming apparatus according to claim 1 .

6. The image forming apparatus according to claim 2 , wherein the control unit re-executes the initial setting process when a power interruption occurs.

7. The image forming apparatus according to claim 3 , wherein the control unit executes the encryption again when a power interruption occurs in a state in which the initial setting value is being copied from the first storage unit to the second storage unit.

8. a special mode which is an operation mode for a service person of the image forming apparatus; When starting the special mode, the control unit sets the second state, When the special mode is ended, the control unit sets the first state. The image forming apparatus according to claim 1 .

9. A method for operating an image forming apparatus having an external interface and a storage unit, comprising: When executing an initial setting process in a first state in which the use of the external interface is restricted, a query screen is displayed to inquire whether or not to encrypt the storage unit; encrypting the storage unit based on receipt of an operation to encrypt the storage unit; and after encrypting the storage unit, setting a second state in which the restriction on use of the external interface is lifted. A method of operating an image forming apparatus.

Images