Image forming apparatus

Abstract

To provide an image forming apparatus serving as an information processing device and a control method thereof that enable an administrator or the like of the information processing device to review the usage between the first start-up of the information processing device and a change of an initially set administrator password, to determine occurrence of an illegitimate use and details thereof, and to consider countermeasures against the illegitimate use.SOLUTION: An image forming apparatus includes: an operation unit; a storage unit which stores in advance an initial password being an initially set administrator password; a log recording unit which records the content of operations input through the operation unit, as operation history information, in the storage unit; a password input monitoring unit which confirms whether the administrator password has been input or not; a password changing unit which changes, when confirming that a password different from an initial password has been input, the administrator password and stores the input password as a new administrator password; and a log presentation unit which presents the operation history information when the administrator password is changed.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, and more particularly to an information processing apparatus having a function of authenticating an administrator using a password.

Background Art

[0002] Conventionally, in information processing apparatuses such as personal computers, mobile terminals, and image forming apparatuses, in order to allow only pre-registered users or administrators to use the information processing apparatus, there are those having an authentication function using a user-specific ID and password.

[0003] For example, Patent Document 1 discloses a password setting method for performing user authentication between a device used by a user connected via a network and a communication terminal. When the user's password is already set in the device, user authentication is performed by the user inputting the password on the communication terminal. When the user's password is not set in the device, the user is requested to set a password, and when the passwords input twice by the user on the communication terminal match, the password is stored in the device, and after successful user authentication, an application screen is output to prevent the use of the device without setting a password.

[0004] There is also a device that installs an information processing apparatus and requests the administrator of the information processing apparatus to change the administrator password initially set in the apparatus at the first startup of the information processing apparatus. In a device that requests the change of the administrator password, in order to prevent unauthorized use by malicious persons, there are some devices in which functions that can be used in the information processing apparatus cannot be executed until the administrator password is changed.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0006] However, in an information processing apparatus that requires changing a pre-set administrator password as in a conventional information processing apparatus, due to various circumstances, there may be a case where the administrator is not present at the time of installation and the administrator password cannot be changed immediately. Also, in a conventional information processing apparatus, when it is required to change the administrator password and the use of the apparatus is completely prevented until this password is changed, unless the administrator of the information processing apparatus changes the administrator password, the initial setting operation by the installer at the time of installation and the input operation by a user who wants to use the information processing apparatus become impossible, which is very inconvenient.

[0007] On the other hand, if input operations by not only the administrator but also general users who want to use the information processing apparatus are enabled after the information processing apparatus is started for the first time until the pre-set administrator password is changed, it is convenient for general users, but unauthorized use by malicious persons (for example, theft of stored information or intrusion of unauthorized software) is also possible, which is not preferable in terms of security, and there may be a case where the administrator does not notice that unauthorized use has occurred.

[0008] Therefore, this invention has been made in consideration of the above circumstances, and monitors the usage status of the information processing apparatus after the information processing apparatus is started for the first time until the initially set administrator password is changed, checks the usage status retrospectively, enables the administrator of the information processing apparatus, etc. to judge the presence and details of unauthorized use, etc., and provides an information processing apparatus capable of considering countermeasures in case of unauthorized use as an issue.

Means for Solving the Problems

[0009] [[ID=2,6]] The present invention provides an information processing apparatus comprising: an operation unit; a storage unit that pre-stores an initial password which is the initial value of an administrator password; a log recording unit that records operation details input using the operation unit in the storage unit as operation history information; a password input monitoring unit that checks whether an administrator password has been input; a password change unit that changes the administrator password and stores the input password as the new administrator password when the password input monitoring unit confirms that a password different from the initial password has been input; and a log presentation unit that presents the operation history information when the administrator password has been changed by the password change unit.

[0010] In addition, the operation history information recorded in the storage unit is characterized in that at least an operator, a date, and operation details are stored in association with each other.

[0011] Further, the log recording unit records, as the operation history information, operation details input using the operation unit in the storage unit from when the information processing apparatus is first started up until the administrator password is changed to a password different from the initial password.

[0012] Furthermore, the apparatus further comprises a display unit, and when the information processing apparatus is started up, if the administrator password remains the same as the initial password and has not been changed, a password change request screen for requesting a change of the administrator password is displayed on the display unit.

[0013] Furthermore, it further includes a display unit and a password authentication unit that authenticates the input administrator password. When the password authentication unit confirms that the input administrator password matches the initial password while the administrator password remains unchanged from the initial password, an administrator information setting screen for setting information related to the administrator including the administrator password is displayed on the display unit. After that, if the administrator password is changed by the operation unit, the changed administrator password is stored in the storage unit as the changed password, and the changed password is used for the authentication of the administrator password performed by the password authentication unit.

[0014] Furthermore, it further includes a display unit for displaying information, and the log presentation unit is characterized by displaying the history information on the display unit.

[0015] Furthermore, it further includes an image output unit for printing information, and the log presentation unit is characterized by printing the operation history information on printing paper by the image output unit.

[0016] Furthermore, it further includes a communication unit for communicating information via a network, and the log presentation unit is characterized by transmitting the history information to another information processing device via the network by the communication unit.

[0017] The present invention also relates to a method for managing history information of an information processing apparatus, wherein the information processing apparatus includes an operation unit for a user of the information processing apparatus to input information, and a storage unit for pre-storing an initial password which is an initial value of an administrator password. The method includes a log recording step of recording the operation content input using the operation unit as operation history information in the storage unit, a password input monitoring step of checking whether an administrator password has been input, and a password change step of changing the administrator password and storing the input password as a new administrator password when it is confirmed in the password input monitoring step that a password different from the initial password has been input, and a log presentation step of presenting the operation history information when the administrator password is changed. The present invention provides a method for managing history information of an information processing apparatus, characterized by including the above steps.

Effects of the Invention

[0018] According to the present invention, the operation content input using the operation unit is recorded as operation history information in the storage unit, and when the administrator password is changed by the password change unit, the operation history information is presented. Therefore, after starting the information processing apparatus for the first time and before changing the initially set administrator password, the usage status of the information processing apparatus is stored, and based on the presented operation history information, an administrator or the like of the information processing apparatus can retrospectively check the usage status of the information processing apparatus, determine the presence and content of unauthorized use or the like, and further consider countermeasures in case of unauthorized use.

Brief Description of the Drawings

[0019]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Mode for Carrying Out the Invention

[0020] Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that the present invention is not limited by the description of the following examples. Further, the present invention is an information processing apparatus, and as the information processing apparatus, there are various apparatuses such as a personal computer, a communication apparatus, a display apparatus, and an image forming apparatus, and the following embodiments are applicable to any of these information processing apparatuses. In the following embodiments, among information processing apparatuses, an image forming apparatus that inputs a document in which information such as images, graphics, and characters is described and has functions such as printing will be described.

[0021] <Configuration of Image Forming Apparatus> FIG. 1 shows a configuration block diagram of an example of the image forming apparatus of the present invention. An image forming apparatus (hereinafter also referred to as an MFP: Multifunction Peripheral or a multi-function device) 1 is a device that processes image data, and is, for example, an electronic device having functions such as a copying function, a printing function, a document reading (scanning) function, a document editing function, a document storage function, a document transmission (fax) function, and a communication function. In the following embodiments, the image forming apparatus 1 of the present invention will be described as having, in particular, a printing function and a document reading (scanning) function, but it may also have other functions.

[0022] In FIG. 1, the image forming apparatus (MFP) 1 of the present invention mainly includes a control unit 11, an operation unit 12, a display unit 13, an image processing unit 14, a communication unit 18, a log recording unit 21, a password input monitoring unit 22, a password authentication unit 23, a password change unit 24, a log presentation unit 25, and a storage unit 50. The image processing unit 14 mainly includes an image input unit 15, an image forming unit 16, and an image output unit 17.

[0023] The control unit 11 is a part that controls the operations of each component such as the operation unit and the image processing unit, and is mainly realized by a microcomputer including a CPU, a ROM, a RAM, an I / O controller, a timer, etc. Based on a control program stored in advance in the ROM or the like, the CPU organically operates various hardware to execute the image forming function, the log recording function, etc. of the present invention.

[0024] Among the above components, the log recording unit 21, the password input monitoring unit 22, the password authentication unit 23, and the password change unit 24 are functional blocks in which the CPU executes respective processes based on a predetermined program.

[0025] The operation unit 12 is a part where a user of the image forming apparatus inputs information, and is an input device for performing a predetermined input operation to operate the image forming apparatus. For example, it is a part for inputting information such as characters and for selecting input of functions, and a keyboard, a mouse, a touch panel, etc. are used. Examples of keys operated by the user include an operation start key, a function selection key, and a setting key. The user can execute functions such as a copy function or an administrator setting function by, for example, operating a touch panel or inputting an operation to start a reading operation. In particular, in the administrator setting function, operations such as changing the administrator password, registering users who use the image forming apparatus, and setting connection information to a network are performed by inputting operations on a touch panel or a predetermined selection key.

[0026] The display unit 13 is a part that displays information, and displays information necessary for executing each function and the result of executing the function to inform the user. For example, an LCD, an organic EL display, etc. are used. When a touch panel is used as the operation unit 12, the display unit 13 and the touch panel are arranged so as to overlap each other. On the display unit 13, for example, settings of setting items used for printing of the image forming apparatus, information necessary for executing functions such as a document reading function, an operation screen of the selected function, a password input screen, an administrator information setting screen, etc. are displayed using characters, symbols, figures, images, icons, animations, videos, etc.

[0027] In particular, in this invention, as will be described later, when the information processing apparatus is started up, if the administrator password remains the initial password and has not been changed, a password change request screen that requests changing the administrator password is displayed on the display unit 13.

[0028] The image processing unit 14 is a part that executes the image forming function, which is the main function of the image forming apparatus, and mainly includes an image input unit 15, an image forming unit 16, and an image output unit 17. Mainly, the image input unit 15 is a part that inputs predetermined image data, the image forming unit 16 is a part that converts the input image data into information that can be printed, etc., and the image output unit 17 is a part that outputs the formed print information, etc. to printing paper, etc.

[0029] The image input unit 15 is a part that inputs image data of a document on which images, characters, graphics, etc. are described. For example, it is a part that reads a document placed on a document table or the like. As the image input unit 15, a scanner (reading device) that reads a document on which information is described is used. The image forming apparatus 1 includes a document placement table (document table) on which a document is placed and a document cover that holds down the document in order to read the document. Further, the image forming apparatus 1 may include an automatic document feeder (ADF: Automatic Document Feeder) that places a plurality of documents and automatically conveys and reads the plurality of documents one by one. In this case, a document on which an image or the like is described is read by a scanner, and the image data of the document is stored in the storage unit 50.

[0030] Also, there are various methods for inputting image information. For example, an interface for connecting an external storage medium such as a USB memory corresponds to the image input unit 15. An electronic data file such as image information to be input is saved in an external storage medium such as a USB memory. The USB memory or the like is connected to an input interface such as a USB terminal, and a predetermined input operation is performed with the operation unit 12, whereby the desired electronic data file saved in the USB memory or the like is read out and stored in the storage unit 50 as input image data.

[0031] When printing input image data on a recording medium, for example, the image forming unit 16 generally continuously performs each process of charging, exposure, development, transfer, cleaning, discharging, and fixing to form the input image data on the recording medium. In the developing process, toner is supplied from the toner cartridge to the developing device, and the electrostatic latent image formed on the surface of the charged photosensitive drum is developed to form a toner image corresponding to the electrostatic latent image. The toner image formed on the surface of the photosensitive drum is transferred onto the recording medium by a transfer device, and then is fixed on the recording medium by being heated by a fixing device. In addition, the image forming unit 16 converts the input image data into information in a form that can be transferred or displayed.

[0032] The image output unit 17 is a part that outputs the formed input image data. For example, it corresponds to a printer that prints information such as the input image data, and prints the input image data of the read manuscript on a predetermined printing paper (paper medium). However, the output of the input image data is not limited to printing, and also includes storage of the input image data of the scanned manuscript, FAX transmission of the input image data of the scanned manuscript, and the like. For example, storing the input image data of the read manuscript in an external storage medium such as a USB memory, transmitting the input image data to other information processing devices or servers via a network such as the Internet, and classifying and storing it in a specific storage folder also correspond to image output.

[0033] The communication unit 18 is a part that communicates information via a network, and is a part that performs data communication with other information processing devices. For example, it receives an electronic data file transferred from an information processing device such as a personal computer, a mobile terminal, or a server. In addition, the input image data generated by the image forming apparatus 1 of the present invention is transferred to an external storage device (such as a USB memory) connected to the image forming apparatus 1, or transmitted to an information processing device such as a personal computer or a server owned by the user who input the manuscript via a network.

[0034] As the network, a wide area communication network such as the Internet or any existing communication network such as a LAN can be used, and the communication form may use either wired communication or wireless communication. In addition, as will be described later, in order to have the administrator of the image forming apparatus confirm the presence or absence of unauthorized use or the like, the operation content (operation history information) stored in the storage unit 50 may be transmitted to an information processing device such as a personal computer owned by the administrator.

[0035] The log recording unit 21 is a part in the image forming apparatus that records the operation content input using the operation unit 12 as operation history information in the storage unit 50. For example, operation contents such as an operation to change the administrator password by the administrator, a user registration operation, a function execution operation such as copying by the user, a login operation, an image data input operation, and an image data transfer operation are recorded in the storage unit 50. The operation contents are recorded in chronological order, and are associated with the name (user name) of the user who executed the operation and the date when the operation was executed, and are sequentially recorded in the operation history information 51 as shown in FIG. 3 described later. Hereinafter, the operation history information 51 is also referred to as log information. Also, the operation contents may be classified according to the person who performed the operation, the type of operation, etc. For example, it consists of an operation item indicating the classification and operation setting information corresponding to the actual operation included in the operation item.

[0036] For example, when the administrator of the image forming apparatus inputs the administrator's ID and password and logs in to the image forming apparatus on October 1, 2019, the information of user name: "administrator", date: "October 1, 2019", operation item of the operation content: "administrator setting", and operation setting information: "login (ID, password)" is associated and additionally stored in the operation history information.

[0037] Also, when user 01 registered in the image forming apparatus faxed to the phone number "06-1234-5678" of the recipient after logging in on February 3, 2020, the information of user name: "user 01", date: "February 3, 2020", operation item of the operation content: "user operation", and operation setting information: "FAX transmission (06-1234-5678)" is associated and additionally stored in the operation history information.

[0038] Recording of the operation contents may be performed, for example, for all operation contents performed after the power of the image forming apparatus is turned on until the power is turned off. In addition, in the present invention, in particular, in order to be able to retrospectively determine whether there has been unauthorized use at the initial installation of the image forming apparatus, the log recording unit 21 preferably records, as operation history information 51, all operation details input using the operation unit 12 in the storage unit 50 from when the image forming apparatus is first activated until the administrator password is changed to a password different from the initial password. The initial password is the initial value of the administrator password described later, and is the administrator password (initial password KPW0) preset and stored in the storage unit 50 before the installation of the image forming apparatus.

[0039] The password input monitoring unit 22 is a part that checks whether the administrator password has been input. When the administrator password is input, the input password is stored as the input password (INPW) 54 described later. The confirmation of the input of the administrator password may be determined, for example, by an operation of displaying the administrator password input screen and checking whether information is input in the password input field while this screen is being displayed. The input administrator password (input password INPW) is compared with the initial password KPW0 or the like, and the administrator is authenticated.

[0040] The password authentication unit 23 is a part that authenticates the input administrator password. The initial password KPW0 is preset and stored as the administrator password. The password authentication unit 23 checks whether the input administrator password matches the initial password KPW0 while the administrator password remains unchanged from the initial password KPW0. Assume that in a state where the change process of the administrator password has not been performed, the same password as the initial password KPW0 is stored in the change password KPW1 described later.

[0041] In this case, for the authentication of the administrator password, it is checked whether the input administrator password (input password INPW) matches the change password KPW1. If the input password INPW matches the changed password KPW1, it is determined that the authentication of the administrator password has succeeded. If the input password INPW and the changed password KPW1 do not match, it is determined that the authentication of the administrator password has failed.

[0042] On the other hand, when the administrator password change process is performed, a password different from the initial password KPW0 is stored in the changed password KPW1. After a regular administrator has performed the administrator password change process, if the regular administrator who changed the administrator password enters the same password as the changed password KPW1 as the input password INPW, the authentication of the administrator password succeeds. However, after the administrator password change process is performed, if an administrator or unauthorized user who is unaware that the administrator password has been changed enters the same password as the initial password KPW0 as the input password INPW, the authentication of the administrator password fails.

[0043] In this invention, after the authentication of the administrator password succeeds, the administrator password is changed. For example, when the password authentication unit 23 confirms that the input administrator password INPW matches the initial password KPW0 while the administrator password remains the initial password KPW0 and has not been changed, an administrator information setting screen for setting information regarding the administrator including the administrator password is displayed on the display unit 13. After that, when the administrator password is changed by the operation unit 12, the changed administrator password is stored in the storage unit 50 as the changed password KPW1. The changed password KPW1 is used for the authentication of the administrator password performed by the password authentication unit 23.

[0044] The password change unit 24 is the part that changes the administrator password. When the password input monitoring unit 22 confirms that a password different from the initial password has been input, the password change unit 24 changes the administrator password and stores the input password as the new administrator password. For example, on the administrator information setting screen for performing administrator settings as described later, when a new administrator password is input as one of the administrator information, the input new administrator password is stored in the change password KPW1. When such an operation to change the administrator password is performed, the operation details of changing this administrator password are additionally stored in the operation history information.

[0045] The log presentation unit 25 is a part that presents the operation history information stored in the storage unit 50. In particular, when the administrator password is changed by the password change unit 24, the operation history information is presented. There are various methods for presenting the operation history information. For example, as described later, the log presentation unit 25 presents the operation history information to the administrator by displaying the operation details recorded in the storage unit 50 on the display unit 13.

[0046] Also, the log presentation unit 25 may present the operation history information to the administrator by printing the operation details recorded in the storage unit 50 on printing paper by the image output unit 17. Alternatively, the log presentation unit 25 may present the operation history information to the administrator by transmitting the operation details recorded in the storage unit 50 via the communication unit 18 to another information processing device through a network (for example, transmitting to a personal computer owned by the administrator or transmitting to the administrator's email address).

[0047] The storage unit 50 is a part that stores information and programs necessary for executing each function of the image forming apparatus of this invention, and semiconductor memory elements such as ROM, RAM, and flash memory, storage devices such as HDD and SSD, and other storage media are used. The memory unit 50 stores, for example, operation history information 51, initial password 52, changed password 53, input password 54, password flag 55, log display method information 56, and the like.

[0048] Here, the initial password (KPW0) 52, the changed password (KPW1) 53, and the input password (INPW) 54 are administrator passwords. The administrator password is the password that an administrator of the image forming apparatus inputs when logging in to the image forming apparatus.

[0049] FIGS. 2 and 3 show explanatory diagrams of an example of the information stored in the memory unit 50. FIG. 2 shows an example of the administrator password (initial password 52, changed password 53, input password 54), password flag 55, and log display method information 56. FIG. 3 shows an example of the operation history information 51.

[0050] The operation history information 51 is information (log information) that stores the history of operation contents input using the operation unit 12 of the image forming apparatus. The history of the operation contents is later confirmed by an administrator or the like of the image forming apparatus and is used to determine the presence or absence of unauthorized use from the history. Therefore, the operation history information 51 stores information necessary for determining the presence or absence of unauthorized use. The operation history information 51 shown in FIG. 3 shows five pieces of history information from history number 1 to 5. In the operation history information 51 of FIG. 3, the name (user name) of the operator, the date, and the operation contents consisting of the operation item and the operation setting information are stored in association with each other.

[0051] For example, the history information of history number 1 means that an administrator with the user name "Administrator KA" performed an input operation of the operation item "Administrator settings" at the date "September 18, 2019, 14:55:30", and by this input operation, a user named "USER22" was additionally registered.

[0052] Also, the history information with history number 3 means that the registered user with the user name "User01" performed an input operation on the operation item "User Operation" at the date and time of "September 19, 2019, 12:20:38", and by that input operation, the function of "FAX transmission" was executed in which the destination phone number was set to "06-1234-5678".

[0053] Also, the history information with history number 5 means that the administrator with the user name "Administrator KA" performed an input operation on the operation item "Administrator Settings" at the date and time of "September 21, 2019, 18:50:47", and by that input operation, the function of "Display Registered User List" for checking the users registered in the image forming apparatus was executed.

[0054] The operation history information shown in FIG. 3 is an example in one embodiment and is not limited thereto. For example, as operation items, in addition to "Administrator Settings" and "User Operation", there are "Guest User Operations" of unregistered non-authenticated users and the like. Also, as operation setting information, in addition to "Add User" and "FAX Transmission", there are destination IP address registration, scan transmission, print, copy operation, external storage save, and the like.

[0055] By checking the operation history information 51 as shown in FIG. 3, the administrator of the image forming apparatus can investigate whether the image forming apparatus is being misused, or whether registered users have made setting changes or executed functions prohibited at the initial startup.

[0056] The initial password (KPW0) 52 is the initial value password among the administrator passwords that is pre-stored in the storage unit 50 of the image forming apparatus. The initial password (KPW0) 52 is stored in the storage unit 50, for example, when the image forming apparatus is shipped. When the image forming apparatus of the present invention is started for the first time after installation, and the installer or administrator attempts to perform initial operations during installation, it is assumed that the administrator password needs to be entered to log in to the image forming apparatus. When logging in during this initial startup, assume that the administrator password to be entered is the initial password (KPW0) 52.

[0057] The installer or administrator can start the installation work and initial setting work, for example, by entering the initial password 52 on the initial setting menu screen. For the initial password (KPW0) 52, the same password may be set for each type of image forming apparatus, or a unique password may be set for each image forming apparatus. However, in order to enable the installer or administrator to perform initial settings and maintenance work during installation, the initial password KPW0 needs to be made public.

[0058] That is, when the initial password KPW0 is made public, those who attempt unauthorized use can also know the initial password KPW0. For example, an unauthorized user can use the initial password KPW0 to log in and obtain information stored in the image forming apparatus, or install software for unauthorized use in the image forming apparatus. Therefore, when the initial password KPW0 pre-stored in the image forming apparatus is made public, in order to prevent unauthorized use by unauthorized users, after the initial work during installation is completed, it is necessary to change the administrator password from the initial password KPW0 to another password as soon as possible.

[0059] After changing the administrator password, the initial password KPW0 may be deleted. However, since there may be cases where the image forming apparatus is returned to its initial state such as at the time of shipment, the initial password KPW0 may be fixedly stored without being deleted.

[0060] The changed password (KPW1) 53 is the password stored in the storage unit 50 when the administrator password is changed. For example, when changing the administrator password, if "KANNEW1", which is different from the initial password KPW0, is entered as the new password, "KANNEW1" is stored in the changed password (KPW1) 53. However, assume that the same password as the initial password KPW0 is stored in advance as the initial value of the changed password (KPW1) 53. When a password different from the initial password KPW0 is stored in the changed password KPW1, thereafter, the changed password KPW1 is used as the administrator password.

[0061] The input password (INPW) 54 is the password entered by the administrator when logging in to the image forming apparatus. For example, when an installer or administrator starts installation work or initial setting work and logs in to the initial setting menu screen, input of the administrator password is required, and the entered password is stored as the input password (INPW) 54. At the initial startup of the image forming apparatus, in the administrator login authentication, this input password INPW and the initial password KPW0 are compared, and if both passwords match, the authentication is successful. Also, after the administrator password is changed, the input password INPW and the changed password KPW1 are compared, and if both passwords match, the authentication is successful.

[0062] FIG. 2 shows an example of the administrator password (initial password KPW0, changed password KPW1, input password INPW). Here, it shows a case where KANOLD0 is stored as the initial password KPW0, KANNEW1 is stored as the changed password KPW1, and KANNEW1 is stored as the input password INPW. When a different KANNEW1 from the initial password KPW0 is stored in the change password KPW1, the input password INPW is compared with the change password KPW1. Therefore, if the input password INPW is the same KANNEW1 as the change password KPW1, the administrator's login authentication is successful.

[0063] The password flag 55 is information for checking whether the administrator password has been changed. For example, as shown in FIG. 2, when the administrator password has been changed, "T" is set and stored in the password flag (PWFLG) 55, and when the administrator password has not been changed, "F" is set and stored in the password flag (PWFLG) 55. As described above, when the same password as the initial password KPW0 is still stored in the change password KPW1, "F" is set and stored in the password flag PWFLG. On the other hand, when a password different from the initial password KPW0 is stored in the change password KPW1, "T" is set and stored in the password flag PWFLG.

[0064] The log presentation method information 56 is information for setting the method of presenting the operation history information (log information) to the administrator of the image forming apparatus. The operation history information (log information) is presented to the administrator by the method set in the log presentation method information 56. As methods for presenting the operation history information (log information), for example, as shown in FIG. 2, there are display, printing, data communication, etc. Among these presentation methods, any one of these methods may be set and stored in the log presentation method information 56.

[0065] When "display" is set and stored in the log presentation method information 56, the operation history information (log information) is displayed on the display unit 13 of the image forming apparatus. When "print" is set and stored in the log presentation method information 56, the operation history information (log information) is printed on a predetermined printing paper by the image output unit 17 of the image forming apparatus. When "data communication" is set and stored in the log display method information 56, the communication unit 18 transmits operation history information (log information) to an information processing device such as a personal computer, a mobile terminal, or a management server owned by the administrator. Note that the method of presenting the operation history information (log information) is not limited to the above three methods. For example, presentation methods such as FAX or social network services may be adopted. Yes.

[0066] <Example of log recording process> Here, an example of a process (log recording process) of recording the history of input operations by the log recording unit 21 will be described. The input operations are performed by the administrator, user, maintenance staff, etc. of the image forming apparatus. However, after the first startup (initial startup) of the image forming apparatus, until the administrator password is changed, there is a possibility that a person attempting unauthorized use (hereinafter referred to as an unauthorized user) may pose as a legitimate administrator and perform input operations. Therefore, in order for the administrator to be able to check the usage status of the image forming apparatus retrospectively and determine the presence or absence of unauthorized use, regardless of who performed the input operation, all input operations performed on the image forming apparatus after the initial startup of the image forming apparatus shall be recorded. Also, as described above, the content of the input operation shall be additionally stored in the operation history information 51.

[0067] FIG. 10 shows a flowchart of an example of the log recording process. In step S1 of FIG. 10, it is checked whether an input operation has been performed by the operation unit 12. For example, it is checked whether an input operation has been performed using a keyboard, a mouse, a touch panel, etc. In step S2, if there is an input operation, the process proceeds to step S3; otherwise, the process returns to step S1.

[0068] In step S3, the content of the input operation is acquired. The content of the input key, the content selected by the mouse or touch panel, etc. are acquired. For example, as described above, the content of the input operation consists of an operation item and operation setting information.

[0069] In step S4, the user who performed the input operation and the date when the input operation was performed are acquired. If it is the administrator of the image forming apparatus or a registered user, in principle, authentication processing using the ID and password is performed and logged in. For example, the ID may be acquired as the user name. However, when the input operation is performed by an unknown user, the user name may be acquired as "unknown person". Also, for the date, the time (year / month / day / hour / minute / second) when an input such as a key was performed may be acquired as the date.

[0070] In step S5, the acquired input operation content, user name, and date are associated and additionally stored in the operation history information 51. Note that the information stored in the operation history information is not limited to the above information, and information necessary for confirming the usage status of the image forming apparatus, such as touch operation (touch position) and key operation log information, may also be stored.

[0071] <Example of Password Change Processing> Here, an example of processing related to the administrator password (input monitoring of the administrator password, authentication of the administrator password, change of the administrator password, etc.) will be described. FIG. 11 and FIG. 12 show a flowchart of an example of password change processing. In step S31 of FIG. 11, assuming that the power of the image forming apparatus is turned on, the control unit 11 activates each hardware so that the main functions of the image forming apparatus can be executed.

[0072] In step S32, the control unit 11 checks the password flag PWFLG. Here, as described above, for example, it is checked whether the PWFLG is "T" (changed) or "F" (not changed). In step S33, if the password flag PWFLG is "F" (not changed), the process proceeds to step S35; otherwise (PWFLG = "T": changed), the process proceeds to step S34.

[0073] In step S34, the initial setting menu screen is displayed on the display unit 13. FIG. 4 shows an explanatory diagram of an example of the initial setting menu screen displayed on the display unit. This initial setting menu screen is the screen when the administrator password has been changed. On this screen, for example, the text "Please select the function to execute" and selectable functions (copy, scan, administrator settings, etc.) are displayed. The administrator or user may perform an input operation to select the function to be executed while viewing this screen.

[0074] In step S35, an initial setting menu screen including a request for setting the administrator password is displayed on the display unit 13. FIG. 5 shows an explanatory diagram of an example of the initial setting menu screen displayed on the display unit. This initial setting menu screen is the screen when the administrator password has not been changed. On this screen, for example, the text "The administrator password has not been changed. Please select administrator settings to change the administrator password." and a selection area "Administrator settings" are displayed.

[0075] If the person performing the input operation is an administrator, an input operation to select "Administrator settings" may be performed while viewing this screen. However, if the person performing the input operation is a non - administrator user, for example, a selection area "Cancel" is selected. When "Cancel" is selected, for example, the initial setting menu screen of FIG. 4 may be displayed.

[0076] In step S36, the operation unit 12 checks whether an input operation has been performed. In step S37, if an input operation to select "Administrator Settings" is performed, the process proceeds to step S38; otherwise, it returns to step S32. Here, since only the processing related to the administrator password will be described, if a selection area other than "Administrator Settings" is selected, it is assumed that the process returns to step S32. Normally, however, the selected function is executed. The functions other than "Administrator Settings" will be omitted.

[0077] In step S38, the display unit 13 displays an administrator settings menu screen. FIG. 6 shows an explanatory diagram of an example of the administrator settings menu screen displayed on the display unit. [[ID=,15]] In FIG. 6, for example, a statement such as "Please select the function to execute" and selection areas for several functions related to "Administrator Settings" are displayed. Examples of several functions related to "Administrator Settings" include, as shown in FIG. 6, "User Registration", "Change Administrator Password", "Display User List", "Network Connection Settings", etc.

[0078] However, it is not limited to these functions. In addition, "Energy Saving Settings", "Copy Settings", "FAX Settings", "Scan Settings", "Printer Settings", etc. may also be displayed as functions related to "Administrator Settings". The administrator may perform an input operation to select the function to be executed while viewing this screen. In the following flow, the case where "Change Administrator Password" among the displayed functions is selected and input will be described.

[0079] In step S39, it is checked whether "Change Administrator Password" is selected and input. In step S40, if "Change administrator password" is input, the process proceeds to step S41; otherwise, it returns to step S38. However, if another function is selected, the selected function is executed, but the explanation is omitted here.

[0080] In step S41, a screen for inputting the administrator password is displayed on the display unit 13. Fig. 7 shows an explanatory diagram of an example of the administrator password input screen displayed on the display unit. In Fig. 7, for example, the text "Please enter the administrator password" and a display area for entering the "administrator password" are displayed. The administrator may input the administrator password before the change while looking at this screen.

[0081] If the administrator password has never been changed, the initial password KPW0 is input. On the other hand, if the administrator password has been changed, the same password as that stored in the change password KPW1 is input. After inputting the password, select and input the "OK" display area to confirm the password input.

[0082] In step S42, if the administrator password is input, the process proceeds to step S43; otherwise, it returns to step S41. In step S43, the input administrator password is stored as the input password INPW. In step S44, the input administrator password (input password INPW) is compared with the change password KPW1. Assuming that the same password as the initial password KPW0 is stored as the initial value in the change password KPW1, if the administrator password has never been changed, the input password INPW and the initial password KPW0 will be compared.

[0083] In step S45, if the input password INPW matches the changed password KPW1, the process proceeds to step S51 in FIG. 12. On the other hand, if the input password INPW does not match the changed password KPW1, the process proceeds to step S46.

[0084] In step S46, if the passwords do not match, the administrator authentication has failed. Therefore, since the administrator password is incorrect, a warning screen indicating that the administrator authentication has failed is displayed on the display unit 13. After displaying the warning screen, the process may end, or re-entry of the correct administrator password may be requested.

[0085] FIG. 9 shows an explanatory diagram of an example of a password mismatch warning screen displayed on the display unit. In the administrator's password mismatch warning screen of FIG. 9, for example, a statement such as "The administrator password has already been changed. Please enter the correct administrator password" and a display area for entering the "administrator password" are displayed. Here, if the administrator password is re-entered, the process may return to step S42.

[0086] In step S51 of FIG. 12, an administrator information setting screen is displayed on the display unit 13. FIG. 8 shows an explanatory diagram of an example of an administrator information setting screen displayed on the display unit. While viewing this screen, the administrator enters the new administrator password after the change, etc. In the administrator information setting screen of FIG. 8, for example, a statement such as "Please enter administrator information" and a display area for entering administrator information such as the administrator password are displayed.

[0087] FIG. 8 shows a case where, as administrator information, a new administrator password (new password), the administrator's email address (email), and the administrator's phone number are entered. However, the administrator information is not limited to these, and for example, age, department name, employee ID, social network service accounts, etc. may also be allowed to be input. After entering the new password, etc., select and input the "OK" display area to confirm the input of the administrator information.

[0088] In step S52, if a new password, etc. is entered, proceed to step S53; otherwise, return to step S51. In step S53, store the entered new password INPW in the change password KPW1. In step S54, set the password flag PWFLG to "T" indicating changed (PWFLG = T).

[0089] In step S55, read the operation history information 51 from the storage unit 50. In step S56, if information is stored in the log presentation method information 56, proceed to step S57; otherwise, proceed to step S60. In step S57, read the log presentation method information 56.

[0090] In step S58, based on the read log presentation method information 56 the log presentation unit 25 presents the operation history information 51. For example, if "display" is stored in the log presentation method information 56, present the operation history information 51 as shown in Figure 3 on the display unit 13.

[0091] Or, if "print" is stored in the log presentation method information 56, print the operation history information 51 on a predetermined printing paper by the image output unit 17. Or, if "data communication" is stored in the log presentation method information 56, transmit the operation history information 51 by the communication unit 18 to a predetermined destination information processing device such as a personal computer owned by the administrator that has been registered in advance.

[0092] In step S59, if an input (log display end input) meaning that the administrator ends the log display is given, the process ends; otherwise, the process returns to step S58.

[0093] In step S60, since the log display method information 56 is not yet set, a log display method selection screen is displayed on the display unit 13. On the log display method selection screen, for example, selection areas for a plurality of log display methods such as "display", "print", "data communication", etc. are displayed, and the administrator is asked to select a desired display method. In step S61, if the administrator selects and inputs a log display method, the process proceeds to step S62; otherwise, the process returns to step S60. In step S62, the selected log display method is stored in the log display method information 56. Then, the process proceeds to step S58.

[0094] <Embodiment of Administrator Password Change and Operation History Information Presentation> Hereinafter, an embodiment in which the administrator password is changed and then the operation history information is presented will be described. In the following embodiment, the presentation method of the operation history information is "display".

[0095] (Embodiment 1) Here, a case where a regular administrator changes the administrator password from the initial password KPW0 to a different password will be described.

[0096] Operation 01: The installer of the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, it is assumed that the administrator password is set to the initial password KPW0, and the initial password KPW0 is also set to the change password KPW1. The installer can log in to the image forming apparatus using, for example, the known initial password KPW0 and perform the initial setting operation at the time of installation. This initial setting operation is designated as "Operation 01" and additionally stored in the operation history information 51.

[0097] Operation 02: With the administrator of the image forming apparatus not having changed the administrator password, a registered user performs an operation to execute a predetermined function of the image forming apparatus. Assuming that the administrator of the image forming apparatus has already registered the information of this user, the user can log in to the image forming apparatus using the registered information. This function execution operation of this user is designated as "Operation 02" and additionally stored in the operation history information 51.

[0098] Operation 03: The administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the changed password KPW1. This administrator password change operation is designated as "Operation 03" and additionally stored in the operation history information 51.

[0099] Operation of the image forming apparatus: In the above Operation 03, since the administrator password has been changed, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above three operations (Operations 01 to 03), these three operations are displayed. The display of the operation history information 51 may always be automatically displayed when the administrator password is changed. Alternatively, the administrator may perform a specific operation (an operation to request the display of the operation history information 51) to cause it to be displayed.

[0100] The administrator can view the display of the operation history information 51 and confirm the operations input and functions executed after the image forming apparatus was installed and before the administrator password was changed. For example, by viewing the operation history information 51 as shown in FIG. 3 and confirming the operation content, the administrator can determine whether an unauthorized operation has been performed. If no unauthorized operation is confirmed, the administrator does not need to take special measures. However, if an unauthorized operation is confirmed, the administrator may analyze the unauthorized operation and consider necessary countermeasures.

[0101] (Embodiment 2) Here, a case will be described where, after a registered regular user performs a specific operation, the administrator changes the administrator password from the initial password KPW0 to a different password. The specific operation is a setting operation determined in advance by the administrator, which is not an unauthorized operation, but means an operation or function (hereinafter referred to as a prohibited operation) that the user is not desired to perform before changing the administrator password.

[0102] Examples of prohibited operations include an operation of transmitting image data stored in the image forming apparatus to another information processing apparatus, a fax transmission operation, an external storage saving operation, an E-mail transmission operation of image data, etc. These operations and functions have the possibility of information leakage and unauthorized use. Also, the prohibited operations may be preset and stored in the storage unit fifty of the image forming apparatus by the administrator or the installation person in charge.

[0103] Operation 01: Similar to Embodiment 1, the installation person in charge of the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, it is assumed that the administrator password is set to the initial password KPW0, and the change password KPW! is also set to the initial password KPW0. The installation person in charge can log in to the image forming apparatus using, for example, the known initial password KPW0 and perform the initial setting operation at the time of installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0104] Operation 02: Similar to Embodiment 1, in a state where the administrator of the image forming apparatus has not changed the administrator password, a registered user performs an operation to execute a predetermined function of the image forming apparatus. Assuming that the administrator of the image forming apparatus has already registered the information of this user, the user can log in to the image forming apparatus using the registered information. This function execution operation of this user is added and stored in the operation history information 51 as "Operation 02". Here, assume that Operation 02 is the "fax transmission operation" which is a prohibited operation. In this case, "fax transmission operation" is stored in the operation content of the operation history information 51.

[0105] Operation 03: The administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the changed password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 03".

[0106] Operation of the image forming apparatus: In the above Operation 03, since the administrator password is changed, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above three operations (Operation 01 to Operation 03), these three operations are displayed. In this Embodiment 2, the displayed operation history information 51 includes the "fax transmission operation" which is a prohibited operation.

[0107] By viewing the display of the operation history information 51, the administrator can confirm that after the image forming apparatus is installed and before the administrator password is changed, the "fax transmission operation", which is a prohibited operation, has been performed by the user. For example, by viewing the operation history information 51 as shown in FIG. 3, the administrator can confirm that at history number 3, the "fax transmission operation", which is a prohibited operation, has been performed by user 01 by checking the operation details. In this way, when a prohibited operation by the user is confirmed, the administrator can consider necessary countermeasures and take appropriate actions against the user who performed the prohibited operation.

[0108] Also, when the prohibited operations set by the administrator are preset and stored in the storage unit 50, when presenting the operation history information 51, the log presentation unit 25 automatically checks whether there are any prohibited operations in the operation history information 51, and if there are any prohibited operations, it may display that a prohibited operation has been performed together with the operation history information 51. Alternatively, the column of history number 3 with a prohibited operation may be highlighted, or the display color of the column of history number 3 may be displayed in a color different from the display colors of other history numbers. Thereby, the administrator can easily and surely recognize that there has been a prohibited operation.

[0109] (Embodiment 3) Here, a case will be described where an unauthorized user pretends to be a legitimate administrator, logs in to the image forming apparatus using the initial password KPW0 of the administrator password, and performs an operation related to specific administrator settings. In this case, although unauthorized use by the unauthorized user may occur, afterwards, the legitimate administrator can confirm that there has been unauthorized use and can consider countermeasures.

[0110] Operation 01: Similar to Embodiment 1, the person in charge of installing the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, assume that the administrator password is still set to the initial password KPW0, and the change password KPW1 is also set to the initial password KPW0. The installer can log in to the image forming apparatus using, for example, the known initial password KPW0, and perform the initial setting operation at the time of installation. This initial setting operation is designated as "Operation 01" and additionally stored in the operation history information 51.

[0111] Operation 02: An unauthorized user who is not an administrator of the image forming apparatus performs an operation of logging in to the image forming apparatus using the initial password KPW0 without changing the administrator password. This unauthorized user's login operation is designated as "Operation 02" and additionally stored in the operation history information 51. Since this login operation itself is the same as the operation performed by a legitimate administrator, it is stored in the operation history information 51 as a legitimate login operation.

[0112] Operation 03: After logging in, the unauthorized user performs an operation related to administrator settings. For example, assume that the unauthorized user performs an operation of "displaying the registered user list" according to the administrator settings. Alternatively, the unauthorized user can also perform operations such as "scan and send" executed by a user. This unauthorized user's operation related to administrator settings is designated as "Operation 03" and additionally stored in the operation history information 51. Since this operation is also the same as the operation performed by a legitimate administrator or user, it is stored in the operation history information 51 as a legitimate operation.

[0113] Operation 04: A legitimate administrator of the image forming apparatus performs an operation of changing the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the change password KPW1. The password change operation of this administrator is added and stored in the operation history information 51 as "Operation 04".

[0114] Operation of the image forming apparatus: In the above Operation 04, since the administrator password has been changed, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above four operations (Operation 01 to Operation 04), these four operations are displayed.

[0115] The legitimate administrator of the image forming apparatus checks the operations input and functions executed after the image forming apparatus is installed until the administrator password is changed, by looking at the display of the operation history information 51. For example, if the above login operation of Operation 02 and the operation of "displaying the list of registered users" of Operation 03 are operations that the legitimate administrator does not remember doing, the legitimate administrator can determine that these operations may be unauthorized operations executed by an unauthorized user.

[0116] If no unauthorized operation is confirmed, the legitimate administrator does not need to take special measures. However, if it is determined that there may have been an unauthorized operation, the legitimate administrator may analyze the unauthorized operation and consider necessary countermeasures. For example, since the "list of registered users" is displayed, the legitimate administrator may recognize that there is a possibility that the personal information of the registered users has been leaked, and can investigate the leakage of the users' personal information.

[0117] (Embodiment 4) Here, a case will be described where an unauthorized user impersonates a legitimate administrator, changes the administrator password from the initial password KPW0 to a different password, and then performs an operation related to specific administrator settings. In this case, there may be unauthorized use by an unauthorized user, but afterwards, the legitimate administrator can confirm that there has been unauthorized use and can consider countermeasures.

[0118] Operation 01: Similar to Embodiment 1, the installer of the image forming apparatus installs the image forming apparatus and performs initial setting operations at the time of installation. At this time, it is assumed that the administrator password has the initial password KPW0 set, and the change password KPW1 also has the initial password KPW0 set. The installer can, for example, use the known initial password KPW0 to log in to the image forming apparatus and perform initial setting operations at the time of installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0119] Operation 02: An unauthorized user who is not an administrator of the image forming apparatus performs an operation of logging in to the image forming apparatus using the initial password KPW0 without changing the administrator password. This unauthorized user's login operation is added and stored in the operation history information 51 as "Operation 02". This login operation itself is the same as an operation performed by a regular administrator, so it is stored in the operation history information 51 as a regular login operation.

[0120] Operation 03: The unauthorized user performs an operation of changing the administrator password. For example, as shown in FIG. 8, the unauthorized user inputs a new password different from the initial password KPW0. The input new password is stored as the change password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 03". This password change operation itself is the same as an operation performed by a regular administrator, so it is stored in the operation history information 51 as a regular operation.

[0121] Operation 04: After the unauthorized user logs in, the unauthorized user performs an operation related to administrator settings. For example, assume that an operation of "displaying the list of registered users" is performed according to the administrator settings. Regarding this operation related to the administrator settings of unauthorized users as "operation 04", it is additionally stored in the operation history information 51. Since this operation is the same as the operations performed by regular administrators or users, it is stored in the operation history information 51 as a regular operation.

[0122] Operation 05: A regular administrator of the image forming apparatus performs an operation of logging in to the image forming apparatus with the administrator password. Here, since the regular administrator is unaware of the above operation 03 and believes that the current administrator password is still the initial password KPW0, the regular administrator inputs the initial password KPW0 and performs an operation of logging in to the image forming apparatus.

[0123] However, due to the above operation 03, the administrator password has already been changed, and a password different from the initial password KPW0 has been set for the changed password KPW1. Therefore, even if the regular administrator inputs the initial password KPW0 as the input password INPW, since it is different from the changed password KPW1, the administrator authentication fails.

[0124] Operation of the image forming apparatus: When the administrator authentication fails, for example, a warning screen indicating a mismatch of the administrator password as shown in FIG. 9 is displayed. Even if the regular administrator inputs the initial password KPW0 again and performs an operation of logging in to the image forming apparatus, the administrator authentication will fail. The regular administrator who has confirmed the failure of this administrator authentication has not changed the administrator password by himself / herself, but fails the administrator authentication using the initial password KPW0. Therefore, it can be determined that there is a possibility that unauthorized users have logged in and the administrator password has been changed.

[0125] In this case, since the regular administrator cannot log in, the operation history information 51 cannot be displayed for confirmation. However, from the situation where logging in is impossible, it can be judged that there may have been unauthorized operations, and necessary countermeasures can be considered. The regular administrator may implement countermeasures such as returning the image forming apparatus to the state at the time of shipment, initializing the administrator password (processing to return the changed password KPW1 to the initial password KPW0), and contacting the dealer.

Explanation of Signs

[0126] 1 Image forming apparatus (MFP), 11 Control unit, 12 Operation unit, 13 Display unit, 14 Image processing unit, 15 Image input unit, 16 Image forming unit, 17 Image output unit, 18 Communication unit, 21 Log recording unit, 22 Password input monitoring unit, 23 Password authentication unit, 24 Password change unit, 25 Log presentation unit, 50 Storage unit, 51 Operation history information, 52 Initial password, 53 Changed password, 54 Input password, 55 Password flag, 56 Log presentation method information

Claims

1. a storage unit that stores an administrator password; a display unit; a control unit, and the control unit when the initial password is stored in the storage unit as the administrator password, displays on the display unit a first screen including a statement prompting a change process of the administrator password, a first button for selecting to proceed with the change process, and a second button for selecting not to proceed with the change process; when a first condition is satisfied, displays on the display unit a second screen for changing the administrator password; when a second condition is satisfied, displays on the display unit a third screen; the first condition is that the first button has been selected; the second condition is that the second button has been selected, a feature of the image forming apparatus.

2. further comprising an operation unit, the image forming apparatus according to claim 1, wherein the first condition further includes a case where the operation unit has already received an input of the administrator password.

3. the image forming apparatus according to claim 1 or 2, wherein the first condition further includes a case where it is displayed on the display unit that the administrator password remains the initial password.

4. the control unit when a password different from the initial password is stored in the storage unit as the administrator password, displays the third screen on the display unit without passing through the first screen, a feature of the image forming apparatus according to any one of claims 1 to 3.

5. the image forming apparatus according to any one of claims 1 to 4, wherein the third screen is an initial screen on which functions related to at least any one of copying, faxing, and scanning can be selected.

6. further comprising a password authentication unit that authenticates the input administrator password, the image forming apparatus according to any one of claims 1 to 5, wherein the first condition further includes a case where the password authentication unit authenticates an administrator based on the initial password input as the administrator password.

7. the second screen includes an input area for a new administrator password and a third button for selecting to execute the change process, the control unit When a new administrator password is input to the input area and the third button is selected, the image forming apparatus according to any one of claims 1 to 6, wherein the new administrator password is stored in the storage unit as the administrator password.

8. A control method for an image forming apparatus, wherein the image forming apparatus includes a storage unit that stores an administrator password and a display unit, when an initial password is stored in the storage unit as the administrator password, a first screen including a statement prompting a change process of the administrator password, a first button for selecting to proceed with the change process, and a second button for selecting not to proceed with the change process is displayed on the display unit, when a first condition is satisfied, a second screen for changing the administrator password is displayed on the display unit, when a second condition is satisfied, a third screen is displayed on the display unit, the first condition is that the first button is selected, the control method for an image forming apparatus, wherein the second condition is that the second button is selected.

9. wherein the image forming apparatus further includes an operation unit, the control method for an image forming apparatus according to claim 8, wherein the first condition further includes a case where the operation unit has already received an input of the administrator password.

10. the control method for an image forming apparatus according to claim 8 or 9, wherein the first condition further includes a case where it is displayed on the display unit that the administrator password remains the initial password.

11. when a password different from the initial password is stored in the storage unit as the administrator password, the third screen is displayed on the display unit without passing through the first screen, the control method for an image forming apparatus according to any one of claims 8 to 10.

12. the control method for an image forming apparatus according to any one of claims 8 to 11, wherein the third screen is an initial screen on which functions related to at least any one of copying, faxing, and scanning can be selected.

13. wherein the image forming apparatus further includes a password authentication unit that authenticates the input administrator password, The control method of the image forming apparatus according to any one of claims 8 to 12, wherein the first condition further includes a case where the password authentication unit authenticates an administrator based on the initial password input as the administrator password.

14. The second screen includes an input area for the new administrator password and a third button for selecting to execute the change process. When a new administrator password is input into the input area and the third button is selected, the new administrator password is stored in the storage unit as the administrator password. The control method of the image forming apparatus according to any one of claims 8 to 13.

15. A storage unit for storing an administrator password, A display unit, A control unit, and The control unit, When the initial password is stored in the storage unit as the administrator password, a first screen including a statement prompting a change process of the administrator password, a first button for selecting to proceed with the change process, and a second button for selecting not to proceed with the change process is displayed on the display unit. When the first button is selected, a second screen for changing the administrator password is displayed on the display unit. An image forming apparatus, wherein when the second button is selected, a third screen is displayed on the display unit.

16. The control unit, When a password different from the initial password is stored in the storage unit as the administrator password, the third screen is displayed on the display unit without passing through the first screen. The image forming apparatus according to claim 15.

17. The third screen is an initial screen on which functions related to at least any one of copying, faxing, and scanning can be selected. The image forming apparatus according to claim 15 or 16.

18. Further comprising a password authentication unit for authenticating the input administrator password, The control unit, When the password authentication unit authenticates an administrator based on the initial password input as the administrator password, the second screen is displayed on the display unit. The image forming apparatus according to any one of claims 15 to 17.

19. The second screen includes an input area for the new administrator password and a third button for selecting to execute the change process. The control unit When a new administrator password is input in the input area and the third button is selected, the image forming apparatus according to any one of claims 15 to 18, characterized in that the new administrator password is stored in the storage unit as the administrator password.

20. A control method for an image forming apparatus, wherein the image forming apparatus includes a storage unit that stores an administrator password and a display unit, When an initial password is stored in the storage unit as the administrator password, a first screen including a statement prompting a change process of the administrator password, a first button for selecting to proceed with the change process, and a second button for selecting not to proceed with the change process is displayed on the display unit. When the first button is selected, a second screen for changing the administrator password is displayed on the display unit. A control method for an image forming apparatus, characterized in that when the second button is selected, a third screen is displayed on the display unit.

21. When a password different from the initial password is stored in the storage unit as the administrator password, the control method for an image forming apparatus according to claim 20, characterized in that the third screen is displayed on the display unit without passing through the first screen.

22. The third screen is an initial screen on which functions related to at least any one of copying, faxing, and scanning can be selected, according to the control method for an image forming apparatus according to claim 20 or 21.

23. The image forming apparatus further includes a password authentication unit that authenticates the input administrator password, The control method for an image forming apparatus according to any one of claims 20 to 22, characterized in that when the password authentication unit authenticates an administrator based on the initial password input as the administrator password, the second screen is displayed on the display unit.

24. The second screen includes an input area for a new administrator password and a third button for selecting to execute the change process, When a new administrator password is input in the input area and the third button is selected, the control method for an image forming apparatus according to any one of claims 20 to 23, characterized in that the new administrator password is stored in the storage unit as the administrator password.

Images