Information system, document reading system, image forming system, and program

Abstract

To provide an information system, a document reading system, and an image forming system that improve safety after a program included in an own system is replaced with a restoration program in a case where an acquisition source of the restoration program for the program included in the own system is limited.SOLUTION: When a defect is detected in a program included in an own device, a CPU 72A of a control unit 70 replaces the program included in the own device with reference to the latest restoration program 86 among a restoration programs 86 for the programs included in the own device or the other devices that can be used by the own device.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present disclosure relates to an information system, a document reading system, and an image forming system. [Background technology]

[0002] For example, Patent Document 1 discloses an information processing device that starts a plurality of modules in sequence following the start of a boot program, and each module includes a detection means that detects tampering with the next module to be started by using verification information for verifying the signature of the next module to be started, and a startup means that starts the next module to be started when the signature verification by the detection means is successful. and each module holds the verification information and its own signature in advance. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-075000 A Summary of the Invention [Problem to be solved by the invention]

[0004] The present disclosure aims to provide an information system, a document reading system, an image forming system, and a program that improves safety after a program possessed by a system is replaced with a restoration program when there are limited sources from which to obtain the restoration program for the program possessed by the system. [Means for solving the problem]

[0005] The information system of the first aspect includes a processor, and when the processor detects a defect in a program possessed by the system, the processor replaces the program possessed by the system by referring to the latest restoration program among restoration programs for the program possessed by the system or another system available to the system.

[0006] In a second aspect of the information system, in the information system described in the first aspect, when the processor detects that a first other system having the latest restoration program is in processing operation, it determines whether to exclude the first other system from the available other systems.

[0007] An information system of a third aspect is the information system described in the second aspect, further comprising a reception unit, and the processor determines whether to exclude the first other system from the available other systems based on the result received by the reception unit.

[0008] An information system of a fourth aspect is an information system described in any one of the first to third aspects, in which the processor notifies a second other system other than the first other system of address information of a first system having the latest restoration program.

[0009] An information system of a fifth aspect is an information system described in any one of the first to fourth aspects, further comprising an indication unit, and when the processor detects the defect, the indication unit indicates that the defect has been detected.

[0010] An information system of a sixth aspect is the information system according to the fifth aspect, wherein the processor indicates on the indication unit that the program has been replaced.

[0011] A seventh aspect of the information system is an information system described in any one of the first to sixth aspects, wherein when the processor detects a defect in the program possessed by the processor, the processor notifies other systems possessing the program of a possible defect in the program.

[0012] An original reading system according to an eighth aspect includes the information system according to any one of the first to seventh aspects, and a reading device that reads an image recorded on a recording medium.

[0013] An image forming system of a ninth aspect includes the image forming system according to the eighth aspect, a document reading system, and an image forming section that forms an image on a recording medium.

[0014] The program of the tenth aspect causes a computer to execute a process in which, when a defect is detected in a program possessed by the own system, the computer replaces the program possessed by the own system with the latest restoration program among restoration programs for the program possessed by the own system or another system available to the own system. Effect of the Invention

[0015] According to the information system of the first aspect, in cases where there are limited sources for obtaining restoration programs for programs possessed by the system itself, security after replacement can be improved compared to a case where the programs possessed by the system itself are always replaced with the restoration programs of the system itself.

[0016] According to the information system of the second aspect, when the first information system is in the middle of a processing operation, it is possible to retain the possibility of replacing the program of the first information system early by referencing a restoration program from another information system, compared to waiting until the processing operation of the first information system is completed.

[0017] According to the information system of the third aspect, when a program held by the system is replaced with a restoration program, the user of the system can determine the priority between improving safety after the replacement and speeding up the replacement.

[0018] According to the information system of the fourth aspect, it is possible to cause other information systems available from the information system itself to recognize an information system that has the latest restoration program.

[0019] According to the information system of the fifth aspect, it is possible to notify a user of the system of a defect in a program contained in the system.

[0020] According to the information system of the sixth aspect, it is possible to notify a user of the system that the malfunction of the system has been resolved.

[0021] According to the information system of the seventh aspect, it is possible to notify other information systems that use the same program as the own system of a possible defect in that program.

[0022] According to the document reading system of the eighth aspect, in a case where there are limited sources from which a restoration program for a program possessed by the document reading system can be obtained, it is possible to improve security after the program possessed by the document reading system is replaced with the restoration program.

[0023] According to the image forming system of the ninth aspect, in a case where there are limited sources from which a restoration program for a program possessed by the image forming system can be obtained, it is possible to improve security after a program possessed by the image forming system is replaced with a restoration program.

[0024] According to the program of the tenth aspect, in a case where there are limited sources from which a restoration program for a program possessed by the system can be obtained, a program can be obtained that improves security after a program possessed by the system is replaced with a restoration program. [Brief description of the drawings]

[0025] [Figure 1] 1 is a front cross-sectional view illustrating an image forming apparatus according to an embodiment of the present disclosure. [Diagram 2] FIG. 2 is a block diagram illustrating a functional configuration of a control unit according to an embodiment of the present disclosure. [Diagram 3] 1 is a diagram illustrating a state in which an image forming apparatus according to an embodiment of the present disclosure is connected to a network. [Figure 4] 11 is a flow diagram showing a procedure in which a control unit replaces a program according to an embodiment of the present disclosure. FIG. [Diagram 5] A figure explaining the procedure for a control unit to replace a program according to one embodiment of the present disclosure, and a figure showing a list of address information including the version of the restored program stored in another image forming device acquired by the control unit and the status of the other image forming device. [Figure 6] 5, and is a diagram illustrating the procedure in which a control unit according to an embodiment of the present disclosure replaces a program, and is a diagram illustrating the result of sorting the list of address information in order of newest version of the restored program. [Figure 7] 7 is a diagram illustrating the procedure for a control unit to replace a program according to an embodiment of the present disclosure following FIG. 6, and shows the result after removing the top record in the address information list until an image forming device that is not currently performing processing is at the top of the address information list. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0026] Hereinafter, an example of an embodiment of the present disclosure will be described with reference to the drawings. In each drawing, the same or equivalent components and parts are given the same reference numerals. In addition, the dimensional ratios of the drawings are exaggerated for the convenience of explanation and may differ from the actual ratios.

[0027] In the following description, a user refers to a person who uses the image forming apparatus 10, and the number of users is not limited.

[0028] (Image forming apparatus 10) The image forming apparatus 10 shown in FIG. 1 is an example of an "image forming system" according to this embodiment. The image forming apparatus 10 is a so-called MFP (Multifunction Printer), and has a function of receiving a print job and forming an image on a document G, and a function of reading an image from the document G as image data. The image forming apparatus 10 also has an e-mail function of attaching image data to an e-mail and sending it to another image forming apparatus 10, and a facsimile function of sending it using a facsimile line. As shown in FIG. 1, the image forming apparatus 10 includes, from bottom to top, an image forming section 20 that forms an image on the document G, and a document reading section 60 that reads the image formed on the document G. The image forming apparatus 10 also includes a control section 70 that controls the image forming section 20 and the document reading section 60, and a touch panel 92 that displays the state of the image forming apparatus 10. The document G is an example of a "recording medium" in this embodiment.

[0029] (Image forming unit 20) The image forming section 20 has an image forming unit 18, a storage section 14, and a transport section 16. The image forming unit 18, the storage section 14, and the transport section 16 are housed in a housing 10A of the image forming apparatus 10.

[0030] The image forming section 20 is provided with four image forming units 18Y, 18M, 18C, and 18K, which are yellow (Y), magenta (M), cyan (C), and black (K). In the following description, when there is no need to distinguish between Y, M, C, and K, Y, M, C, and K may be omitted.

[0031] The image forming units 18 of each color are detachably attached to the housing 10A. Each image forming unit 18 of each color includes an image carrier 36, a charging roll 38 that charges the surface of the image carrier 36, and an exposure device 42 that irradiates the charged image carrier 36 with exposure light. Each image forming unit 18 of each color includes a developing device 40 that develops an electrostatic latent image formed by exposing the charged image carrier 36 to light using the exposure device 42, and visualizes the electrostatic latent image as a toner image.

[0032] 1, and a primary transfer roll 44 that transfers the toner images formed by the image forming units 18 of each color onto the transfer belt 22. The image forming unit 20 further includes a secondary transfer roll 46 that transfers the toner images transferred onto the transfer belt 22 onto an original G, and a fixing device 50 that applies heat and pressure to the original G onto which the toner image has been transferred to fix the toner image onto the original G.

[0033] The toner images formed on the surfaces of the image carriers 36 of the respective colors are transferred to the transfer belt 22 by the primary transfer roll 44. The toner images on the surface of the transfer belt 22 are transferred to the document G at a transfer position T.

[0034] The storage unit 14 is provided with a storage member 26 that can be pulled out from the housing 10A of the image forming apparatus 10 toward the front side in the device depth direction, and documents G are stacked on this storage member 26. Furthermore, the storage unit 14 is provided with a delivery roll 30 that delivers the topmost document G stacked on the storage member 26 to a transport path 28 that constitutes the transport unit 16.

[0035] The transport section 16 is provided with a plurality of transport rolls 32 that transport the document G along the transport path 28. The document G that has been sent from the storage member 26 to the transport path 28 by the delivery roll 30 is sent to a transfer position T where the transfer belt 22 and the secondary transfer roll 46 come into contact with each other. As the document G is transported between the transfer belt 22 and the secondary transfer roll 46, a toner image is transferred onto the document G.

[0036] The toner image transferred to the document G is fixed to the document G by the fixing device 50. Then, the document G with the fixed toner image is discharged by the transport rolls 32 to the outside of the housing 10A.

[0037] The configuration and specific functions of the control unit 70 of the image forming apparatus 10 will be described later.

[0038] (Document reading unit 60) The document reading unit 60 is an example of a reading device according to the present embodiment, and includes a transparent plate 62 (so-called platen glass) on which a document G is placed when an image of the document G is to be read. The transparent plate 62 is fitted into an upper portion of a housing 60A of the document reading unit 60.

[0039] An opening / closing cover that opens and closes the transparent plate 62 is disposed above the transparent plate 62. Inside the opening / closing cover, a transport device 64 (so-called ADF device) that transports multiple sheets of document G along a transport path 28 inside the opening / closing cover is provided.

[0040] Also provided inside the housing 60A is an image reading device 52 that reads an image of the original G placed on the transparent plate 62 and an image of the original G transported to the original reading position R by the transport device 64. The original reading unit 60 reads the image of the original G and creates image data based on the control of the control unit 70. That is, the combination of the control unit 70 and the original reading unit 60 is an example of an "original reading system" according to this embodiment.

[0041] (Touch Panel 92) The touch panel 92 is a device that displays the state of the image forming apparatus 10 based on the control of the control unit 70, and is an example of the "indication unit" according to the present embodiment. The touch panel 92 is capable of displaying the state of the image forming apparatus 10 and receiving operations by the user, and has a function as a user interface of the image forming apparatus 10. That is, the touch panel 92 in the present embodiment has both the function of the "display unit 82" and the function of the "reception unit 84" according to the present embodiment. In other words, the touch panel 92 is also an example of a part of the "information processing system" in the present embodiment. The touch panel 92 may be disposed in any position, but as an example, it is disposed on the front surface of the housing 10A of the image forming apparatus 10 as shown in FIG. 1.

[0042] (Control unit 70) The control unit 70 is an example of an "information processing system" in this embodiment, and includes a CPU 72A (Central Processing Unit) and a RAM 72C (Random Access Memory) used as a temporary work area for the CPU 72A, as shown in FIG. 2. The CPU 72A is an example of a "processor" in this embodiment. The control unit 70 also includes a ROM 72B (Read Only Memory), a flash memory 72D, a non-volatile memory 74 that stores a control program for causing the control unit 70 to function, and an input / output unit 78. The control unit 70 according to this embodiment further includes a CPU 76A for facsimile, a ROM 76B for facsimile, and a RAM 76C for facsimile. The various components are connected to the input / output unit 78 and a network interface (hereinafter, "network I / F 80") via a bus 72E.

[0043] Incidentally, in the RAM 72C, a list of address information 88, which is an example of a "list of available information systems" in a program replacement procedure described later (see also FIG. 5), is stored. The list of address information 88 stores the name, network address, status, and version of the restoration program 86 of the image forming apparatus 10 with which communication has been performed.

[0044] Furthermore, the CPU 72A of the control unit 70 reads a control program, which is an example of a "program" in this embodiment, from the ROM 72B, and executes the overall control of the image forming apparatus 10 under the control unit 70. Specifically, as shown in Fig. 2, the touch panel 92, the document reading unit 60, and the image forming unit 20 of the image forming apparatus 10 are connected to an input / output unit 78 of the control unit 70. As a result, the CPU 72A of the control unit 70 controls each of the components of the touch panel 92, the document reading unit 60, and the image forming unit 20.

[0045] The non-volatile memory 74 is an example of a storage device that maintains stored information even if the power supplied to each of the non-volatile memory 74 is cut off, and is, for example, a semiconductor memory or a hard disk. A restoration program 86, which will be described later, is also recorded in the non-volatile memory 74.

[0046] The facsimile CPU 76A, the facsimile ROM 76B, and the facsimile RAM 76C have the same specific configurations as the CPU 72A, the ROM 72B, and the RAM 72C, respectively. The facsimile CPU 76A plays a role in transmitting image data stored in the RAM 72C by the CPU 72A to another device as a facsimile through a facsimile line (such as a telephone line) as image information.

[0047] More specifically, when the facsimile CPU 76A receives an instruction from the CPU 72A, it reads from the facsimile ROM 76B a program for transmitting image data through a facsimile line, and transmits the image data to another device using the facsimile line.

[0048] If the program executed by the CPU 76A for facsimile is defective (for example, if it has been tampered with), the CPU 72A transfers the restoration program 86 stored in the non-volatile memory 74 to the ROM 76B for facsimile. As a result, the CPU 72A replaces the program recorded in the ROM 76B for facsimile with the restoration program 86, and restores the facsimile function.

[0049] (Network connection) As shown in FIG. 3, a plurality of image forming apparatuses 10 according to this embodiment are arranged within a base. More specifically, the plurality of image forming apparatuses 10 arranged within the base are connected to each other via an internal network such as a LAN (Local Area Network), and each image forming apparatus 10 is connected to the Internet 66. In the following description, any specific image forming apparatus 10 may be referred to as the "own machine", and other image forming apparatuses 10 different from the own machine may be referred to as the "other machine". In other words, the "own machine" and the "other machine" are examples of the "own system" and the "other system" according to this embodiment.

[0050] Furthermore, the CPU 72A may connect to a server (not shown) via the Internet 66 to download and upgrade the restoration program 86. In other words, the CPU 72A may update the restoration program 86 stored in the non-volatile memory 74.

[0051] 3, the multiple image forming apparatuses 10 have the same configuration. As a result, the program (not shown) executed by the CPU 72A, the program (not shown) executed by the CPU 76A for facsimile, and the version of the restoration program 86 may differ for each image forming apparatus 10.

[0052] Furthermore, the CPU 72A may receive an inquiry from another device via the internal network about the version of the restoration program 86 that the device has and the status of the device. When an inquiry is received from another device, the CPU 72A responds to the inquiring device with the version of the restoration program 86 that the device has. Note that an example of the status of the device is when the image forming device 10 is executing a print job.

[0053] (Fax sending program malfunction) However, it is assumed that a malfunction occurs in the program executed by the CPU 76A for facsimile due to unauthorized access or other reasons, and the control unit 70 is unable to transmit image data using the facsimile line. In such a situation, the network administrator of the base tries to restore the network within the base after disconnecting the network within the base from the Internet 66. In other words, the image forming apparatus 10 may restore the facsimile function when the connection with the Internet 66 is cut off.

[0054] Here, when a defect occurs in the program executed by the CPU 76A for facsimile, the CPU 72A of the image forming apparatus 10 according to the present embodiment replaces the program based on the control program and the procedure shown in Fig. 4. In other words, when the CPU 72A detects a defect in the program that the CPU 72A has, it executes the procedure shown in Fig. 4.

[0055] (Program replacement procedure) First, in step S102, the CPU 72A displays on the touch panel 92 that the program executed by the CPU 76A for facsimile is defective. Then, the CPU 72A proceeds to step S104.

[0056] Next, in step S104, the CPU 72A checks whether there is an image forming device 10 with which it can communicate. More specifically, in step S104, the CPU 72A attempts to communicate with each image forming device 10 connected to the base network. If the determination in step S104 is affirmative, that is, if there is an image forming device 10 with which it can communicate, the CPU 72A proceeds to step S106. On the other hand, in step S104, if it is not possible to communicate with any other image forming device 10, including the case where communication has been made with all image forming devices 10 on the base network, the CPU 72A proceeds to step S110.

[0057] Next, in step S106, the CPU 72A acquires the version of the restoration program 86 stored in the non-volatile memory 74 by the communicated image forming device 10, and the status of the communicated image forming device 10. Note that if the communicated image forming device 10 is in the middle of a processing operation, such as when executing a print job, it responds with "Busy" as the status of the image forming device 10. Then, the CPU 72A proceeds to step S108.

[0058] Next, in step S108, the CPU 72A adds a record 90 including the version of the restoration program 86 possessed by the other device and the status of the image forming device 10 to the address information list 88. More specifically, as shown in Fig. 5, the CPU 72A adds a record 90 including the name, network address, status, and version of the restoration program 86 of the communicated image forming device 10 to the address information list 88. Then, the CPU 72A proceeds to step S104.

[0059] In step S110, the CPU 72A adds a record 90 including the name, network address, status, and version of the restoration program 86 of its own device to the address information list 88. Then, the CPU 72A proceeds to step S112.

[0060] Next, in step S112, the CPU 72A rearranges (sorts) the list of address information 88 based on the version of the restored program 86. More specifically, the CPU 72A rearranges the records 90 so that the records are arranged in descending order of the version of the restored program 86 (in descending order of the version of the restored program 86), as shown in Fig. 6. The CPU 72A then proceeds to step S114.

[0061] Next, in step S114, the CPU 72A extracts the address information of the top image forming device 10 from the address information list 88. For example, in Fig. 6, the CPU 72A extracts the address information of "MFP_4" surrounded by a thick frame. Then, the CPU 72A proceeds to step S116.

[0062] Next, in step S116, the CPU 72A determines whether the status of the multifunction device extracted in step S114 is "Busy." If the CPU 72A determines in step S116 that the status is "Busy," the process proceeds to step S118. On the other hand, if the CPU 72A determines in step S116 that the status is "Busy," the process proceeds to step S124.

[0063] Furthermore, in step S118, the CPU 72A displays on the touch panel 92 a message indicating that the image forming apparatus 10 having the latest restoration program 86 is currently performing a processing operation. Then, the CPU 72A proceeds to step S120.

[0064] Next, in step S120, the CPU 72A receives an instruction from the user as to whether or not to select an image forming apparatus 10 other than the image forming apparatus 10 extracted in step S114. In other words, the CPU 72A receives an instruction from the user as to whether or not to wait for completion of execution of the processing operation of the image forming apparatus 10 extracted in step S114. In other words, in step S120, the CPU 72A determines whether or not to remove the record 90 from the list 88 of address information based on the result received from the user. Then, if the CPU 72A makes an affirmative determination in step S120, it proceeds to step S122. On the other hand, if the CPU 72A makes a negative determination in step S120, it proceeds to step S124.

[0065] Next, in step S122, the CPU 72A removes the top record 90 from the address information list 88, as shown in Fig. 7. Then, the CPU 72A proceeds to step S114.

[0066] In step S124, the CPU 72A obtains the restoration program 86 from the image forming apparatus 10 extracted in step S114. In other words, the CPU 72A transfers the restoration program 86 possessed by the image forming apparatus 10 extracted in step S114 to the RAM 72C. For example, if the image forming apparatus 10 extracted in step S114 is another apparatus, the CPU 72A obtains the restoration program 86 via a network. Also, for example, if the image forming apparatus 10 extracted in step S114 is the own apparatus, the CPU 72A transfers the restoration program 86 stored in the non-volatile memory 74 of the own apparatus to the RAM 72C. Then, the CPU 72A proceeds to step S126.

[0067] Next, in step S126, the CPU 72A replaces the program (the program in which the failure has occurred) stored in the ROM 76B for facsimile with the restored program 86 transferred to the RAM 72C, thereby recovering the facsimile function. Also, in step S126, the CPU 72A displays on the touch panel 92 that the failure has been recovered from. Then, the CPU 72A proceeds to step S128.

[0068] Next, in step S128, the CPU 72A notifies the image forming apparatus 10 included in the address information list 88 of the possibility of a defect in the program executed by the CPU 76A for facsimile. In addition, in step S128, the CPU 72A notifies the image forming apparatus 10 included in the address information list 88 of the address of the image forming apparatus 10 having the most recent version of the restoration program 86 for the program executed by the CPU 76A for facsimile. Note that the image forming apparatus 10 having the most recent version of the restoration program 86 is an example of the "first system" in this embodiment. Also, among the image forming apparatuses 10 having other restoration programs 86, the image forming apparatus 10 having the restoration program 86 other than the most recent version is an example of the "second system" in this embodiment. Then, the CPU 72A completes a series of procedures.

[0069] In step S128, the image forming apparatus 10 that has been notified of the possibility of a defect checks whether or not a defect has occurred in the program executed by the CPU 76A of the image forming apparatus 10. If the CPU 76A of the image forming apparatus 10 determines that a defect has occurred in the program executed by the CPU 76A of the image forming apparatus 10, the image forming apparatus 10 executes the procedure shown in Fig. 4. That is, from the perspective of the image forming apparatus 10 that has been notified of the possibility of a defect in step S128, the image forming apparatus 10 is another example of the "own machine" in this embodiment.

[0070] However, in step S128, image forming apparatus 10 that has been notified of the possibility of a defect may omit the procedures from step S104 to step S116 shown in Fig. 6. In other words, in step S128, image forming apparatus 10 that has been notified of the possibility of a defect may obtain restoration program 86 from image forming apparatus 10 that has the most recent version of restoration program 86, without checking whether there is an image forming apparatus 10 that can communicate with the image forming apparatus 10 itself.

[0071] Furthermore, in step S128, the CPU 72A of the image forming apparatus itself may cause the image forming apparatus 10 that has been notified of the possibility of a defect to inspect whether or not a defect has occurred in the program executed by the CPU 76A of the image forming apparatus 10. In other words, in step S128, the inspection by the image forming apparatus 10 that has been notified of the possibility of a defect may be started by the CPU 72A of the image forming apparatus itself, or may be determined and started by the CPU 72A of the image forming apparatus 10.

[0072] Next, the operation and effects of the image forming apparatus 10 according to the present embodiment will be described.

[0073] (Action and Effects) When the control unit 70 of this embodiment detects a defect in a program stored in its own device, it replaces the program stored in its own device with the latest restoration program 86 among the restoration programs 86 for the programs stored in its own device or in other devices that can be used by the own device. This improves safety after replacement when sources for obtaining the restoration program 86 for the programs stored in its own device are limited, compared to a case where the programs stored in its own device are always replaced with the restoration program 86 of its own device.

[0074] Furthermore, when the control unit 70 of this embodiment detects that the image forming apparatus 10 having the latest restoration program 86 is in a processing operation, it determines whether to remove the image forming apparatus 10 from the address information list 88. This allows the restoration program 86 to be referenced from another image forming apparatus 10 when the image forming apparatus 10 having the latest version of the restoration program 86 is in a processing operation, compared to waiting until the processing operation of the image forming apparatus 10 is completed. This also leaves the possibility of replacing the program of the own apparatus earlier, compared to waiting until the processing operation of the image forming apparatus 10 having the latest version of the restoration program 86 is completed when the image forming apparatus 10 having the latest version of the restoration program 86 is in a processing operation.

[0075] Moreover, the control unit 70 of this embodiment further includes a receiving unit 84, and the CPU 72A determines whether to remove the image forming device 10 from the address information list 88 based on the result of reception by the receiving unit 84. This allows the user of the own machine to determine the priority between improving safety after replacement and speeding up the replacement when replacing a program held by the own machine with the restoration program 86.

[0076] Furthermore, the control unit 70 of the present embodiment notifies the address information of the image forming apparatus 10 having the latest restoration program 86 to the image forming apparatuses 10 other than the image forming apparatus 10. This allows the other control units 70 available from the image forming apparatus 10 to recognize the control unit 70 having the latest restoration program 86.

[0077] Moreover, the control unit 70 of this embodiment further includes a touch panel 92, and when the CPU 72A detects a defect, it displays a message indicating that a defect has been detected on the touch panel 92. This makes it possible to notify a user of the device of a defect in a program included in the device.

[0078] Furthermore, the control unit 70 of this embodiment displays the fact that the program has been replaced on the touch panel 92. This makes it possible to notify the user of the own device that the malfunction of the own device has been resolved.

[0079] Furthermore, when the control unit 70 of this embodiment detects a defect in a program that its own device has, it notifies other devices that have the program of the possibility of a program defect, thereby making it possible to notify other control units 70 that use the same program as its own device of the possibility of a program defect.

[0080] Furthermore, the combination of the control unit 70 and the document reading unit 60 of this embodiment includes the control unit 70 described in this embodiment, and the document reading unit 60 that reads an image recorded on the document G. This makes it possible to improve safety after replacing the program held by the device itself with the restoration program 86 in a case where the source of acquisition of the restoration program 86 for the program held by the combination of the control unit 70 and the document reading unit 60 is limited.

[0081] Moreover, the image forming apparatus 10 of the present embodiment includes the image forming device 10, a document reading system, and an image forming unit 20 that forms an image on a document G. In this way, in a case where sources for obtaining a restoration program 86 for a program held by the image forming apparatus 10 are limited, it is possible to improve safety after replacing a program held by the image forming apparatus 10 with the restoration program 86.

[0082] Furthermore, the control program executed by the CPU 72A of this embodiment causes the computer to execute a process of replacing the program held by the own device with the latest restoration program 86 among the restoration programs 86 for the program held by the own device or another device available to the own device, when a defect is detected in the program held by the own device. In this way, in a case where sources for obtaining the restoration program 86 for the program held by the own device are limited, a program that improves safety after the program held by the own device is replaced with the restoration program 86 can be obtained, compared to a case where the program held by the own device is always replaced with the restoration program 86 of the own device.

[0083] [Variations] In the above description, when the CPU 72A detects in step S116 that the image forming apparatus 10 having the latest restoration program 86 is in a processing operation, the process proceeds to step S118; however, the technology according to the present embodiment is not limited to this. For example, the restoration program 86 may be acquired from the image forming apparatus 10 having the latest restoration program 86, regardless of whether the image forming apparatus 10 having the latest restoration program 86 is in a processing operation. In other words, in the above description, after the procedure of step S114, the process may proceed directly to step S124 without making the determination of step S116.

[0084] In the above description, the CPU 72A removes the image forming apparatus 10 in process from the address information list 88 based on the user's selection in step S120, but the technology according to the present embodiment is not limited to this. For example, the CPU 72A may not accept the user's selection in step S120. In other words, the CPU 72A may proceed to step S124 without accepting the user's selection in step S120, or may proceed to step S122.

[0085] In the above description, in step S128, the CPU 72A notifies the image forming apparatus, which is included in the address information list 88, of the address information of the image forming apparatus 10 having the latest restoration program 86, but the technology according to the present embodiment is not limited to this. For example, in step S128, the CPU 72A does not need to notify other apparatuses of the address information of the image forming apparatus 10 having the latest restoration program 86.

[0086] In the above description, the CPU 72A displays on the touch panel 92 that the program is defective in step S102, but the technology according to the present embodiment is not limited to this. For example, in step S102, the CPU 72A does not need to display on the touch panel 92 that the program is defective.

[0087] In the above description, the CPU 72A displays on the touch panel 92 in step S126 a message indicating that the program has recovered from the failure, but the technology according to the present embodiment is not limited to this. For example, in step S126, the CPU 72A does not need to display on the touch panel 92 a message indicating that the program has recovered.

[0088] In the above description, the CPU 72A notifies the image forming apparatus 10 included in the address information list 88 of the possibility of a program defect in step S128, but the technology according to the present embodiment is not limited to this. For example, in step S128, the CPU 72A does not need to notify other apparatuses of the program defect.

[0089] In these modified examples as well, the same functions and effects as those described above can be obtained.

[0090] (Other variations) In the above description, the control unit 70 of the image forming apparatus 10 has been described as an example of an information system, but the technology according to the present embodiment is not limited to this. That is, the technology according to the present embodiment can be similarly applied to a combination of the control unit 70 and a reading unit that does not have the image forming unit 20. In addition, the control unit 70 may be used to replace a program held by the own machine by referring to the latest restoration program 86 among restoration programs 86 for a program held by the own machine or another machine available to the own machine.

[0091] For example, in the above description, the CPU 72A of the control unit 70 executes a procedure to replace a program when the program executed by the CPU 76A for facsimile is defective, but the CPU 76A for facsimile of the control unit 70 may execute a procedure to replace the program.

[0092] In addition, in the above description, the touch panel 92 is used as an example of an indication unit, but the technology according to the present disclosure is not limited to this. For example, instead of a device having a screen such as the touch panel 92, when a defect in the program is detected, a lighting device such as a rotating light may be used to indicate the defect, or an audio device such as a buzzer may be used to indicate the defect.

[0093] In the above description, the image forming unit 20 forms a toner image on the document G, but the technology according to the present disclosure is not limited to this. For example, the image forming unit 20 may form an image on the document G by an inkjet method.

[0094] The above describes an embodiment of the present disclosure with reference to the attached drawings. However, it is clear that a person with ordinary knowledge in the technical field to which the present disclosure pertains can conceive of various modifications or applications within the scope of the technical ideas described in the claims, and it is understood that these also naturally fall within the technical scope of the present disclosure.

[0095] Furthermore, preferred aspects of the present disclosure will be described below.

[0096] (((1))) A processor is provided. When the processor detects a defect in a program owned by the own system, the processor replaces the program owned by the own system with a latest restoration program among restoration programs for the program owned by the own system or another system available to the own system. Information systems.

[0097] (((2))) when the processor detects that a first other system having the latest restoration program is in a processing operation, the processor determines whether to exclude the first other system from the available other systems; The information system described in (((1))).

[0098] (((3))) Further comprising a reception section; The processor determines whether to exclude the first other system from the available other systems based on the result received by the reception unit. 2. An information system as described in (((2))).

[0099] (((4))) The processor notifies a second other system other than the first other system of address information of a first system having the latest restoration program. 1. An information system according to any one of ((1))) to (((3))).

[0100] (((5))) Further comprising a sign portion, When the processor detects the defect, the processor indicates on the indicator that the defect has been detected. 1. An information system according to any one of ((1))) to (((4))).

[0101] (((6))) The processor indicates on the indicator that the program has been replaced. (((5))) Information systems.

[0102] (((7))) When the processor detects a defect in the program of its own system, the processor notifies another system having the program of a possible defect in the program. 1. An information system according to any one of ((1))) to (((6))).

[0103] (((8))) An information system according to any one of (((1))) to (((7))); A reading device that reads an image recorded on a recording medium; A document reading system comprising:

[0104] (((9))) A document reading system according to (((8))), an image forming unit that forms an image on a recording medium; An image forming system comprising:

[0105] (((10))) When a defect is detected in a program owned by the own system, the program owned by the own system is replaced by referring to the latest restoration program among restoration programs for the program owned by the own system or another system available to the own system. A program that causes a computer to carry out processing.

[0106] According to the information system of (((1))), in a case where sources for obtaining restoration programs for programs held by the system are limited, security after replacement can be improved compared to a case where the programs held by the system are always replaced with the system's own restoration programs. According to the information system of (((2))), when a first information system is in the middle of a processing operation, it is possible to retain the possibility of replacing the program of the first system earlier by referencing a restoration program from another information system, compared to waiting until the processing operation of the first information system is completed. According to the information system of (((3))), when a program held by the system is replaced with a restoration program, the user of the system can determine the priority between improving safety after the replacement and speeding up the replacement. According to the information system of (((4))), it is possible to cause other information systems available from the information system to recognize the information system having the latest restoration program. According to the information system of (((5))), it is possible to notify a user of the system of defects in a program contained in the system. According to the information system of (((6))), it is possible to notify a user of the system that a malfunction in the system has been resolved. According to the information system of (((7))), it is possible to notify other information systems that use the same program as the own system of a possible defect in that program. According to the document reading system of (((8))), in a case where there are limited sources from which a restoration program for a program possessed by the document reading system can be obtained, it is possible to improve security after the program possessed by the document reading system is replaced with the restoration program. According to the image forming system of (((9))), in a case where sources for obtaining a restoration program for a program possessed by the image forming system are limited, it is possible to improve security after a program possessed by the image forming system is replaced with a restoration program. According to the program of (((10))), in a case where sources for obtaining a restoration program for a program possessed by the system are limited, a program can be obtained which improves security after a program possessed by the system is replaced with a restoration program. [Explanation of symbols]

[0107] 10 Image forming apparatus (image forming system 10A Housing 14 Storage unit 16 Conveyor section 18 Image forming unit 20 Image forming section 22 Transfer belt 26 Storage material 28 Transport Route 30 Sending Roll 32 Transport roll 36 Image holder 38 Charging Roll 40 Developing device 42 Exposure equipment 44 Primary transfer roll 46 Secondary transfer roll 50 Fixing device 52 Image reading device 60 Document reading unit (an example of a reading device and part of a document reading system) 62 Transparent plate 64 Transport Equipment 60A housing 66 Internet 70 Control Unit Information System 74 Non-volatile memory 80 Network Interface 82 Display unit (example of a sign unit) 84 Reception 86 Recovery Program 88 Address information list 90 records (example of address information) 92 Touch Panel 72A CPU (an example of a processor) 72B ROM 72C RAM 72D Flash Memory 72E Bus 76A CPU (another example of a processor) 76B ROM 76C RAM

Claims

1. A processor is provided. When the processor detects a defect in a program owned by the own system, the processor replaces the program owned by the own system with a latest restoration program among restoration programs for the program owned by the own system or another system available to the own system. Information systems.

2. when the processor detects that a first other system having the latest restoration program is in a processing operation, the processor determines whether to exclude the first other system from the available other systems; 2. The information system of claim 1.

3. Further comprising a reception section; The processor determines whether to exclude the first other system from the available other systems based on the result received by the reception unit.

3. The information system of claim 2.

4. The processor notifies a second other system other than the first other system of address information of a first system having the latest restoration program.

2. The information system of claim 1.

5. Further comprising a sign portion, When the processor detects the defect, the processor indicates on the indicator that the defect has been detected.

2. The information system of claim 1.

6. The processor indicates on the indicator that the program has been replaced.

6. The information system according to claim 5.

7. When the processor detects a defect in the program of its own system, the processor notifies another system having the program of a possible defect in the program.

2. The information system of claim 1.

8. An information system according to any one of claims 1 to 7; A reading device that reads an image recorded on a recording medium; A document reading system comprising:

9. The document reading system according to claim 8 , an image forming unit that forms an image on a recording medium; An image forming system comprising:

10. When a defect is detected in a program owned by the own system, the program owned by the own system is replaced by referring to the latest restoration program among restoration programs for the program owned by the own system or another system available to the own system. A program that causes a computer to carry out processing.

Images