Image forming apparatus and method for controlling image forming apparatus

Abstract

To allow an administrator or the like of an information processing apparatus to check the state of use of the information processing apparatus in a period from the first start-up until a change of an initially-set administrator password after the period, to determine the presence or absence and the details of unauthorized use and consider countermeasures.SOLUTION: An information processing apparatus comprises: an operation unit; a storage unit that stores in advance an initial password that is an initial value of an administrator password; a log recording unit that records, in the storage unit, the details of operations input by using the operation unit as operation history information; a password input monitoring unit that checks whether the administrator password is input; a password changing unit that, when input of a password different from the initial password is confirmed, changes the administrator password, and stores the input password as a new administrator password; and a log presentation unit that presents the operation history information when the administrator password is changed.SELECTED DRAWING: Figure 12

Description

[Technical Field]

[0001] The present invention relates to an image forming apparatus and a control method for the image forming apparatus, and more particularly to an image forming apparatus and a control method for the image forming apparatus that have a function of authenticating an administrator using a password. [Background technology]

[0002] Conventionally, information processing devices such as personal computers, mobile terminals, and image forming devices have had an authentication function that uses a user's unique ID and password to allow only pre-registered users or administrators to use the information processing device.

[0003] For example, Patent Document 1 describes a password setting method for performing user authentication between a device used by a user connected via a network and a communication terminal, in which if a user password has already been set on the device, the user is authenticated by inputting the password on the communication terminal, and if a user password has not been set on the device, the user is requested to set a password, and if the passwords entered twice by the user on the communication terminal match, the password is stored on the device, and after user authentication is successful, an application screen is output, thereby preventing the device from being used without a password being set.

[0004] Furthermore, some information processing devices require the administrator of the information processing device to change the administrator password that is initially set in the device when the information processing device is installed and started up for the first time. In some devices that require the administrator password to be changed, functions available on the information processing device cannot be executed until the administrator password is changed in order to prevent unauthorized use by malicious individuals. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2004-310372 Summary of the Invention [Problem to be solved by the invention]

[0006] However, in information processing devices that require the administrator password, which is initially set in advance, to be changed, such as conventional information processing devices, there are cases where, due to various circumstances, the administrator is not present at the time of installation and is unable to change the administrator password immediately. Furthermore, in conventional information processing devices, if a change of the administrator password is required and use of the device is completely prevented until the password is changed, unless the administrator of the information processing device changes the administrator password, the initial setting operations by the installer at the time of installation and input operations by users who wish to use the information processing device will not be possible, which is extremely inconvenient.

[0007] On the other hand, if input operations are allowed not only by the administrator but also by general users who want to use the information processing device until the administrator password, which is initially set up after the information processing device is started for the first time, is changed, this is convenient for general users, but it also allows for unauthorized use by malicious individuals (for example, theft of stored information or the intrusion of illegal software), which is undesirable from a security standpoint, and the administrator may not even notice that unauthorized use has occurred.

[0008] Therefore, this invention has been made in consideration of the above circumstances, and aims to provide an information processing device that can monitor the usage status of the information processing device from the time the information processing device is started for the first time until the initially set administrator password is changed, and can check the usage status after the fact, allowing the administrator of the information processing device to determine whether or not there has been any fraudulent use and the details of such use, and to consider countermeasures in the event of fraudulent use. [Means for solving the problem]

[0009] The present invention provides an information processing device comprising an operation unit, a memory unit that pre-stores an initial password that is an initial value for an administrator password, a log recording unit that records operation details entered using the operation unit in the memory unit as operation history information, a password input monitoring unit that checks whether an administrator password has been entered, a password change unit that changes the administrator password and stores the entered password as a new administrator password when the password input monitoring unit confirms that a password different from the initial password has been entered, and a log presentation unit that presents the operation history information when the administrator password is changed by the password change unit.

[0010] The operation history information recorded in the storage unit is characterized in that at least the operator, date, and operation content are stored in association with each other.

[0011] The log recording unit is also characterized in that it records the operation content entered using the operation unit as the operation history information in the memory unit from the time the information processing device is started for the first time until the administrator password is changed to a password different from the initial password.

[0012] The information processing device may further include a display unit, and when the information processing device is started, if the administrator password remains the initial password and has not been changed, a password change request screen requesting that the administrator password be changed is displayed on the display unit.

[0013] The system further comprises a display unit and a password authentication unit that authenticates the input administrator password, and when the administrator password remains unchanged as the initial password and the password authentication unit confirms that the input administrator password matches the initial password, it displays an administrator information setting screen on the display unit that sets information about the administrator including the administrator password, and when the administrator password is changed by the operation unit, it stores the changed administrator password in the memory unit as a changed password and uses the changed password to authenticate the administrator password performed by the password authentication unit.

[0014] The system further includes a display unit for displaying information, and the log presentation unit displays the history information on the display unit.

[0015] The log presenting unit may further include an image output unit that prints information, and the log presenting unit may print the operation history information on printing paper using the image output unit.

[0016] The information processing device may further include a communication unit that communicates information via a network, and the log presentation unit may transmit the history information to another information processing device via the network using the communication unit.

[0017] The present invention also provides a history information management method for an information processing device, the information processing device comprising an operation unit through which a user of the information processing device inputs information, and a memory unit that pre-stores an initial password that is an initial value for an administrator password, and comprising: a log recording step that records operation details input using the operation unit in the memory unit as operation history information; a password input monitoring step that checks whether an administrator password has been input; a password change step that changes the administrator password and stores the input password as a new administrator password when it is confirmed in the password input monitoring step that a password different from the initial password has been input; and a log presentation step that presents the operation history information when the administrator password is changed. [Effects of the Invention]

[0018] According to this invention, the operation details input using the operation unit are recorded in the memory unit as operation history information, and when the administrator password is changed by the password change unit, the operation history information is presented. This stores the usage status of the information processing device from the time the information processing device is started for the first time until the initially set administrator password is changed, and the presented operation history information allows the administrator of the information processing device, etc. to check the usage status of the information processing device after the fact, determine whether there has been any fraudulent use, etc., and the details of such use, and further allows for consideration of countermeasures in the event of fraudulent use. [Brief explanation of the drawings]

[0019] [Figure 1] 1 is a block diagram showing the configuration of an embodiment of an image forming apparatus according to the present invention; [Figure 2] FIG. 2 is an explanatory diagram of an embodiment of information stored in a storage unit in the present invention. [Figure 3] FIG. 2 is an explanatory diagram of an embodiment of information stored in a storage unit in the present invention. [Figure 4]3 is an explanatory diagram of an example of an initial setting menu screen displayed on a display unit in the present invention. FIG. [Figure 5] 3 is an explanatory diagram of an example of an initial setting menu screen displayed on a display unit in the present invention. FIG. [Figure 6] FIG. 2 is an explanatory diagram of an example of an administrator setting menu screen displayed on a display unit in the present invention. [Figure 7] FIG. 10 is an explanatory diagram of an example of an administrator password input screen displayed on a display unit in the present invention. [Figure 8] FIG. 2 is an explanatory diagram of an example of an administrator information setting screen displayed on a display unit in the present invention. [Figure 9] 10 is an explanatory diagram of an example of a password mismatch warning screen displayed on a display unit in the present invention; FIG. [Figure 10] 10 is a flowchart of an embodiment of a log recording process in the present invention. [Figure 11] 10 is a flowchart of an embodiment of a password change process in the present invention. [Figure 12] 10 is a flowchart of an embodiment of a password change process in the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0020] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. However, the present invention is not limited to the following embodiments. Furthermore, although the present invention is directed to an information processing device, there are various types of information processing devices, such as personal computers, communication devices, display devices, and image forming devices, and the following embodiments can be applied to any of these information processing devices. In the following embodiment, an image forming apparatus, which is an information processing apparatus, is described as inputting a document containing information such as images, graphics, and characters and has functions such as printing.

[0021] <Configuration of image forming device> FIG. 1 shows a block diagram of the configuration of an image forming apparatus according to an embodiment of the present invention. An image forming device (hereinafter referred to as an MFP: Multifunction Peripheral, or multifunction device) 1 is a device that processes image data, and is an electronic device that has, for example, a copying function, a printing function, a document reading (scanning) function, a document editing function, a document saving function, a document sending (fax) function, and a communication function. In the following embodiment, the image forming apparatus 1 of the present invention will be described as having a printing function and a document reading (scanning) function in particular, but may have other functions.

[0022] In FIG. 1, the image forming device (MFP) 1 of the present invention mainly comprises a control unit 11, an operation unit 12, a display unit 13, an image processing unit 14, a communication unit 18, a log recording unit 21, a password input monitoring unit 22, a password authentication unit 23, a password change unit 24, a log presentation unit 25, and a memory unit 50. The image processing unit 14 is mainly composed of an image input unit 15, an image forming unit 16, and an image output unit 17.

[0023] The control unit 11 is a part that controls the operation of each component such as the operation unit and image processing unit, and is realized mainly by a microcomputer that includes a CPU, ROM, RAM, an I / O controller, a timer, and the like. The CPU organically operates various hardware components based on a control program stored in advance in a ROM or the like, and executes the image forming function, log recording function, and the like of the present invention.

[0024] Among the above components, the log recording unit 21, password entry monitoring unit 22, password authentication unit 23, and password change unit 24 are functional blocks in which the CPU executes the respective processes based on a predetermined program.

[0025] The operation unit 12 is a section where a user of the image forming apparatus inputs information and is an input device for performing predetermined input operations to operate the image forming apparatus. For example, it is a section where information such as characters is input and function selection input is input, and a keyboard, mouse, touch panel, etc. are used. Keys operated by the user include an operation start key, a function selection key, a setting key, and the like. The user can execute a copy function, an administrator setting function, or the like by operating the touch panel or pressing a start key for a reading operation, for example. In particular, the administrator setting function allows the user to change the administrator password, register users who will use the image forming apparatus, and set connection information for the network by operating the touch panel or entering predetermined selection keys.

[0026] Display unit 13 is a part that displays information, and displays information necessary for executing each function, the results of executing the function, etc. to inform the user. For example, if an LCD, an organic EL display, or the like is used and a touch panel is used as operation unit 12, display unit 13 and the touch panel are arranged so as to overlap each other. The display unit 13 displays, for example, the setting of setting items used for printing, etc. of the image forming device, information necessary to execute document reading functions, etc., the operation screen for the selected function, the password input screen, the administrator information setting screen, etc., using characters, symbols, figures, images, icons, animations, videos, etc.

[0027] In particular, in this invention, as will be described later, when the information processing device is started up, if the administrator password remains the initial password and has not been changed, a password change request screen requesting that the administrator password be changed is displayed on the display unit 13.

[0028] The image processing unit 14 is a unit that executes the image forming function, which is the main function of the image forming apparatus, and is mainly composed of an image input unit 15, an image forming unit 16, and an image output unit 17. Mainly, the image input unit 15 is a unit that inputs specified image data, the image forming unit 16 is a unit that converts the input image data into information that can be printed, etc., and the image output unit 17 is a unit that outputs the formed printing information, etc. onto printing paper, etc.

[0029] The image input unit 15 is a part that inputs image data of a document on which images, characters, figures, etc. are written, and is a part that reads a document placed on a document table, for example. As the image input unit 15, a scanner (reading device) that reads a document on which information is written is used. In order to read an original, the image forming apparatus 1 includes an original placement table (original table) on which the original is placed, and an original cover that holds the original. The image forming apparatus 1 may also include an automatic document feeder (ADF) that allows a plurality of original documents to be placed thereon and automatically transports and reads the original documents one by one. In this case, a document containing an image or the like is read by a scanner, and image data of the document is stored in the storage unit 50 .

[0030] There are various methods for inputting image information. For example, the image input unit 15 corresponds to an interface for connecting an external storage medium such as a USB memory. An electronic data file such as image information to be input may be stored in an external storage medium such as a USB memory, and the USB memory or the like may be connected to an input interface such as a USB terminal, and the desired electronic data file stored in the USB memory or the like may be read out by performing a predetermined input operation on the operation unit 12, and stored in the storage unit 50 as input image data.

[0031] For example, when printing input image data on a recording medium, the image forming unit 16 generally performs the steps of charging, exposing, developing, transferring, cleaning, de-electrifying, and fixing in succession to form the input image data on the recording medium. In the developing process, toner is supplied from a toner cartridge to the developing device, and the electrostatic latent image formed on the charged surface of the photosensitive drum is developed to form a toner image corresponding to the electrostatic latent image. The toner image formed on the surface of the photosensitive drum is transferred onto a recording medium by a transfer device, and then fixed onto the recording medium by heating by a fixing device. Furthermore, the image forming unit 16 converts input image data into information in a format that can be transferred or displayed.

[0032] The image output unit 17 is a part that outputs the formed input image data, and corresponds to, for example, a printer that prints information such as input image data, and prints the input image data of the read manuscript on a specified printing paper (paper medium). However, the output of input image data is not limited to printing, but also includes storing input image data of a scanned document, sending input image data of a scanned document by fax, and the like. For example, storing input image data of a scanned document onto an external storage medium such as a USB memory, transmitting input image data to another information processing device or server via a network such as the Internet, and storing the data in a specific storage folder are also examples of image output.

[0033] The communication unit 18 is a part that communicates information via a network, and is a part that performs data communication with other information processing devices. For example, electronic data files transferred from information processing devices such as personal computers, mobile terminals, and servers are received. In addition, the input image data generated by the image forming apparatus 1 of the present invention may be transferred to an external storage device (such as a USB memory) connected to the image forming apparatus 1, or may be transmitted via a network to an information processing device such as a personal computer or server owned by the user who input the original document.

[0034] The network may be any existing communication network, such as a wide area communication network like the Internet or a LAN, and the communication format may be either wired communication or wireless communication. Furthermore, as will be described later, the operation details (operation history information) stored in the memory unit 50 may be sent to an information processing device such as a personal computer owned by the administrator so that the administrator can check for any unauthorized use, etc.

[0035] The log recording unit 21 is a part that records the operation content input using the operation unit 12 in the image forming apparatus in the storage unit 50 as operation history information. For example, the storage unit 50 records operation details such as an administrator's operation to change the administrator password, a user registration operation, a user's operation to execute functions such as copying, a login operation, an image data input operation, and an image data transfer operation. The operation details are recorded in chronological order, and are associated with the name of the user who performed the operation (user name) and the date on which the operation was performed, and are sequentially recorded in operation history information 51 as shown in Fig. 3, which will be described later. Hereinafter, the operation history information 51 is also referred to as log information. The operation contents may also be classified according to the person who performed the operation or the type of operation, and may consist of, for example, an operation item indicating the classification and operation setting information corresponding to the actual operation included in the operation item.

[0036] For example, if an administrator of an image forming device logs in to the image forming device by entering the administrator's ID and password on October 1, 2019, the following information will be associated with the user name: "Administrator", date: "October 1, 2019", operation item of the operation content: "Administrator settings", and operation setting information: "Login (ID, password)", and this information will be added and stored in the operation history information.

[0037] Furthermore, if user 01 registered in the image forming device logs in on February 3, 2020, and then sends a fax to the recipient's telephone number "06-1234-5678," the following information is associated with the user name: "User 01," the date: "February 3, 2020," the operation item of the operation content: "User operation," and the operation setting information: "Send fax (06-1234-5678)," and the information is added and stored in the operation history information.

[0038] The operation details may be recorded by, for example, recording all the operations performed from when the image forming apparatus is powered on until the power is turned off. In addition, in this invention, in particular, in order to be able to determine after the fact whether or not the image forming apparatus has been used fraudulently when it was first installed, it is preferable that the log recording unit 21 records in the memory unit 50 as operation history information 51 all operation details entered using the operation unit 12 from the time the image forming apparatus is started for the first time until the administrator password is changed to a password different from the initial password. The initial password is an initial value of an administrator password, which will be described later, and is an administrator password (initial password KPW0) that is set and stored in advance in the storage unit 50 before the image forming apparatus is installed.

[0039] The password input monitoring unit 22 is a unit that checks whether an administrator password has been entered, and if an administrator password has been entered, stores the entered password as an input password (INPW) 54, which will be described later. The administrator password entry confirmation may be made, for example, by determining whether or not information is entered in the password entry field when an operation to display an administrator password entry screen is performed and this screen is displayed. The entered administrator password (input password INPW) is compared with the initial password KPW0, etc., to authenticate the administrator.

[0040] The password authentication unit 23 is a unit that authenticates the input administrator password. An initial password KPW0 is set and stored in advance as the administrator password, and in a state where the administrator password remains unchanged as the initial password KPW0, a password authentication unit 23 checks whether the input administrator password matches the initial password KPW0. In a state where the administrator password has not been changed, it is assumed that the same password as the initial password KPW0 is stored as the change password KPW1, which will be described later.

[0041] In this case, in authenticating the administrator password, a check is made to see if the entered administrator password (input password INPW) matches the change password KPW1. If the input password INPW and the change password KPW1 match, it is determined that authentication of the administrator password has been successful, and if the input password INPW and the change password KPW1 do not match, it is determined that authentication of the administrator password has failed.

[0042] On the other hand, when the administrator password is changed, a password different from the initial password KPW0 is stored as the changed password KPW1. After a legitimate administrator has performed the administrator password change process, if the legitimate administrator who changed the administrator password enters the same password as the change password KPW1 as the input password INPW, authentication of the administrator password will be successful. However, if an administrator or unauthorized user who is unaware that the administrator password has been changed enters the same password as the initial password KPW0 as the input password INPW after the administrator password change process has been performed, administrator password authentication will fail.

[0043] In this invention, after the administrator password has been successfully authenticated, the administrator password is changed. For example, when the administrator password remains unchanged and remains the initial password KPW0, if the password authentication unit 23 confirms that the entered administrator password INPW matches the initial password KPW0, the display unit 13 displays an administrator information setting screen for setting information about the administrator, including the administrator password. Thereafter, when the administrator password is changed by the operation unit 12, the changed administrator password is stored in the storage unit 50 as a changed password KPW1. The change password KPW1 is used by the password authentication unit 23 to authenticate the administrator password.

[0044] The password change unit 24 is a unit for changing the administrator password. When the password input monitoring unit 22 confirms that a password different from the initial password has been input, the password changing unit 24 changes the administrator password and stores the input password as a new administrator password. For example, when a new administrator password is entered as one piece of administrator information on an administrator information setting screen for setting up an administrator as described below, the entered new administrator password is stored as the changed password KPW1. When such an operation to change the administrator password is performed, the operation content for changing the administrator password is additionally stored in the operation history information.

[0045] The log presentation unit 25 is a part that presents the operation history information stored in the storage unit 50. In particular, when the administrator password is changed by the password change unit 24, the operation history information is presented. There are various methods for presenting operation history information. For example, as will be described later, the log presenting unit 25 presents the operation history information to the administrator by displaying the operation details recorded in the storage unit 50 on the display unit 13.

[0046] Furthermore, the log presenting unit 25 may present the operation history information to the administrator by printing the operation details recorded in the storage unit 50 on a printing paper by the image output unit 17. Alternatively, the log presentation unit 25 may present the operation history information to the administrator by transmitting the operation details recorded in the memory unit 50 to another information processing device via the network using the communication unit 18 (for example, to a personal computer owned by the administrator or to the administrator's email address).

[0047] The memory unit 50 is a part that stores information and programs necessary to execute each function of the image forming apparatus of the present invention, and may be implemented using semiconductor memory elements such as ROM, RAM, and flash memory, storage devices such as HDDs and SSDs, or other storage media. The storage unit 50 stores, for example, operation history information 51, an initial password 52, a change password 53, an input password 54, a password flag 55, log presentation method information 56, and the like.

[0048] Here, the initial password (KPW0) 52, the change password (KPW1) 53, and the input password (INPW) 54 are administrator passwords. The administrator password is a password that the administrator of the image forming apparatus enters when logging in to the image forming apparatus.

[0049] 2 and 3 are explanatory diagrams showing an example of information stored in the storage unit 50. FIG. FIG. 2 shows an example of an administrator password (initial password 52, change password 53, input password 54), a password flag 55, and log presentation method information 56. FIG. 3 shows an example of the operation history information 51.

[0050] The operation history information 51 is information (log information) that stores the history of operation contents input using the operation unit 12 of the image forming apparatus. The operation history is later checked by an administrator of the image forming apparatus, and is used to determine whether or not there has been any unauthorized use. Therefore, the operation history information 51 stores information necessary to determine whether or not there has been any fraudulent use. The operation history information 51 shown in FIG. 3 includes five pieces of history information with history numbers 1 to 5. The operation history information 51 in FIG. 3 stores the name of the operator (user name), the date, and the operation content consisting of the operation item and operation setting information in association with each other.

[0051] For example, the history information for history number 1 indicates that an administrator with the user name "Administrator KA" performed an input operation for the operation item "Administrator Settings" on the date "September 18, 2019, 14:55:30," and that this input operation resulted in the process of additionally registering a user named "USER22."

[0052] In addition, the history information for history number 3 indicates that a registered user with the user name "User 01" performed an input operation for the operation item "User Operation" on the date "September 19, 2019, 12:20:38," and that this input operation executed the function "Send FAX" with the destination phone number set to "06-1234-5678."

[0053] Furthermore, the history information for history number 5 indicates that an administrator with the user name "Administrator KA" performed an input operation for the operation item "Administrator settings" on the date "September 21, 2019, 18:50:47," and that this input operation executed a function called "Display registered user list" to check the users registered in the image forming device.

[0054] The operation history information shown in FIG. 3 is an example, and is not limited to this. For example, operation items include "administrator settings" and "user operations," as well as "guest user operations" for unregistered, unauthenticated users. In addition to "user addition" and "fax transmission," the operation setting information also includes destination IP address registration, scan transmission, print, copy operation, and external storage storage.

[0055] By checking the operation history information 51 as shown in FIG. 3, the administrator of the image forming device can investigate whether the image forming device is being used fraudulently, or whether a registered user has changed settings or executed functions that are prohibited at initial startup.

[0056] The initial password (KPW0) 52 is an initial password of the administrator password that is stored in advance in the storage unit 50 of the image forming apparatus. The initial password (KPW0) 52 is stored in the storage unit 50, for example, when the image forming apparatus is shipped. When the image forming apparatus of the present invention is installed and started for the first time, and an installer or administrator attempts to perform initial installation work, the installer or administrator must enter an administrator password to log in to the image forming apparatus. When logging in at this initial startup, the administrator password to be entered is assumed to be the initial password (KPW0)52.

[0057] An installer or administrator can start the installation or initial setting work by, for example, entering the initial password 52 on the initial setting menu screen. The initial password (KPW0) 52 may be the same for each type of image forming apparatus, or may be a unique password for each image forming apparatus. However, the initial password KPW0 must be made public during installation so that the installer or administrator can perform initial setup and maintenance work.

[0058] In other words, if the initial password KPW0 is made public, anyone attempting to use the system fraudulently will also be able to know the initial password KPW0. For example, a fraudulent user may log in using the initial password KPW0 and obtain information stored in the image forming device, or install software for fraudulent use into the image forming device. Therefore, if the initial password KPW0 pre-stored in the image forming device is made public, the administrator password must be changed from the initial password KPW0 to another password as soon as possible after the initial installation work is completed in order to prevent unauthorized use by unauthorized users.

[0059] After changing the administrator password, the initial password KPW0 may be erased, but since the image forming device may be returned to its initial state at the time of shipment, the initial password KPW0 may be stored permanently without being erased.

[0060] The change password (KPW1) 53 is a password stored in the storage unit 50 when an operation to change the administrator password is performed. For example, when changing the administrator password, if the new password “KANNEW1” different from the initial password KPW0 is entered, “KANNEW1” is stored as the change password (KPW1) 53. However, the initial value of the change password (KPW1) 53 is the same as the initial password KPW0, and is stored in advance. If a password different from the initial password KPW0 is stored as the change password KPW1, the change password KPW1 will be used as the administrator password from that point on.

[0061] The input password (INPW) 54 is the password entered by the administrator when logging in to the image forming apparatus. For example, when an installer or administrator starts installation or initial setup work and logs in on the initial setup menu screen, the administrator password is requested to be entered, and the entered password is stored as input password (INPW) 54. When the image forming apparatus is initially started, the input password INPW is compared with the initial password KPW0 in the administrator login authentication, and if the two passwords match, the authentication is successful. Furthermore, after the administrator password is changed, the input password INPW is compared with the changed password KPW1, and if the two passwords match, authentication is successful.

[0062] FIG. 2 shows an example of administrator passwords (initial password KPW0, change password KPW1, input password INPW). Here, a case is shown in which KANOLD0 is stored as the initial password KPW0, KANNEW1 is stored as the change password KPW1, and KANNEW1 is stored as the input password INPW. If KANNEW1, which is different from the initial password KPW0, is stored as the change password KPW1, the input password INPW and the change password KPW1 are compared, and if the input password INPW is KANNEW1, which is the same as the change password KPW1, the administrator's login authentication is successful.

[0063] The password flag 55 is information for checking whether the administrator password has been changed. For example, as shown in FIG. 2, if the administrator password has been changed, the password flag (PWFLG) 55 is set to "T", and if the administrator password has not been changed, the password flag (PWFLG) 55 is set to "F". As described above, when the same password as the initial password KPW0 remains stored as the change password KPW1, the password flag PWFLG is set to "F". On the other hand, if a password different from the initial password KPW0 is stored as the change password KPW1, the password flag PWFLG is set to "T".

[0064] Log presentation method information 56 is information that sets a method for presenting operation history information (log information) to the administrator of the image forming apparatus. The operation history information (log information) is presented to the administrator using the method set in the log presentation method information 56. Methods for presenting operation history information (log information) include, for example, display, printing, data communication, etc., as shown in FIG. 2, and any one of these presentation methods may be set and stored in log presentation method information 56.

[0065] If "display" is set and stored in the log presentation method information 56, the operation history information (log information) is displayed on the display unit 13 of the image forming apparatus. If "print" is set and stored in the log presentation method information 56, the image output unit 17 of the image forming apparatus prints the operation history information (log information) on a predetermined printing paper. If "data communication" is set and stored in the log presentation method information 56, the communication unit 18 transmits operation history information (log information) to an information processing device such as a personal computer or mobile terminal owned by the administrator, or a management server. Please note that the methods for presenting operation history information (log information) are not limited to the above three methods. For example, other methods of presentation such as fax or social networking services may be used. stomach.

[0066] <Example of log recording process> Here, an example of a process (log recording process) in which the log recording unit 21 records the history of input operations will be described. The input operation is performed by the administrator, user, maintenance person, or the like of the image forming apparatus. However, after the image forming device is installed and started up for the first time (initial startup), until the administrator password is changed, there is a possibility that a person attempting to use the device fraudulently (hereinafter referred to as an fraudulent user) may impersonate the legitimate administrator and perform input operations. Therefore, in order to enable the administrator to check the usage status of the image forming device after the fact and to determine whether or not there has been any fraudulent use, all input operations performed on the image forming device after the initial startup of the image forming device will be recorded, regardless of who performed the input operations. As described above, the content of the input operation is additionally stored in the operation history information 51.

[0067] FIG. 10 shows a flowchart of an embodiment of the log recording process. In step S1 of FIG. 10, it is checked whether or not an input operation has been performed by the operation unit 12. For example, it is checked whether an input operation has been performed using a keyboard, a mouse, a touch panel, or the like. In step S2, if an input operation is performed, the process proceeds to step S3, and if not, the process returns to step S1.

[0068] In step S3, the content of the input operation is acquired. Obtains the contents of entered keys, contents selected with the mouse or touch panel, etc. For example, the content of the input operation is made up of operation items and operation setting information, as described above.

[0069] In step S4, the user who performed the input operation and the date on which the input operation was performed are acquired. In principle, if the user is an administrator of the image forming apparatus or an already registered user, an authentication process using an ID and password is performed to log in, so for example, the ID can be acquired as the user name. However, if an input operation is performed by an unknown user, the user name may be acquired as "unknown person." The date may be obtained as the time (year, month, day, hour, minute, second) when a key or other input is made.

[0070] In step S5, the acquired input operation content, user name, and date are associated with each other and additionally stored in the operation history information 51. The information stored in the operation history information is not limited to the above information, and may also include information necessary to check the usage status of the image forming device, such as log information of touch operations (touch positions) and key operations.

[0071] <Example of password change process> Here, an embodiment of processes related to the administrator password (administrator password input monitoring, administrator password authentication, administrator password change, etc.) will be described. 11 and 12 show a flowchart of an embodiment of the password change process. In step S31 of FIG. 11, when the image forming apparatus is powered on, the control unit 11 starts up each piece of hardware so that the main functions of the image forming apparatus can be executed.

[0072] In step S32, the control unit 11 checks the password flag PWFLG. Here, as described above, for example, it is checked whether PWFLG is "T" (changed) or "F" (unchanged). In step S33, if the password flag PWFLG is "F" (unchanged), the process proceeds to step S35, and if not (PWFLG="T": changed), the process proceeds to step S34.

[0073] In step S34, the display unit 13 displays an initial setting menu screen. FIG. 4 shows an example of an initial setting menu screen displayed on the display unit. This initial setting menu screen is displayed when the administrator password has already been changed. This screen displays, for example, the phrase "Please select the function to perform" and selectable functions (copy, scan, administrator settings, etc.). The administrator or user can simply look at this screen and perform an input operation to select the function they want to execute.

[0074] In step S35, the display unit 13 displays an initial setting menu screen including a request to set an administrator password. FIG. 5 shows an example of an initial setting menu screen displayed on the display unit. This initial setting menu screen is the screen when the administrator password has not been changed. This screen displays, for example, the message "The administrator password has not been changed. Please select administrator settings to change the administrator password." and a selection area called "Administrator settings."

[0075] If the person performing the input operation is an administrator, he or she can perform the input operation by selecting "Administrator Settings" while looking at this screen. However, if the person performing the input operation is a user other than the administrator, for example, the selection area "Cancel" is selected. If "Cancel" is selected, for example, the initial setting menu screen of FIG. 4 may be displayed.

[0076] In step S36, it is checked whether or not an input operation has been performed by the operation unit 12. In step S37, if an input operation to select "Administrator Settings" has been performed, the process proceeds to step S38; otherwise, the process returns to step S32. Here, only the process related to the administrator password will be explained, so if a selection area other than "Administrator Settings" is selected, the process will return to step S32. The functions other than "Administrator Settings" are omitted.

[0077] In step S38, the display unit 13 displays an administrator setting menu screen. FIG. 6 shows an explanatory diagram of an example of the administrator setting menu screen displayed on the display unit. In FIG. 6, for example, the phrase "Please select the function to perform" and a selection area for several functions related to "Administrator Settings" are displayed. Some of the functions related to "Administrator Settings" include, for example, "User Registration," "Change Administrator Password," "Display User List," and "Network Connection Settings," as shown in FIG.

[0078] However, functions are not limited to these, and other functions such as "energy saving settings," "copy settings," "fax settings," "scan settings," and "printer settings" may also be displayed as functions related to "administrator settings." The administrator can simply perform an input operation to select the function to be executed while viewing this screen. In the following flow, a case where "Change Administrator Password" is selected and input from among the displayed functions will be described.

[0079] In step S39, it is checked whether "change administrator password" is selected and input. In step S40, if "change administrator password" is entered, the process proceeds to step S41, and if not, the process returns to step S38. However, if another function is selected, the selected function is executed, but the explanation thereof will be omitted here.

[0080] In step S41, the display unit 13 displays an administrator password input screen. FIG. 7 shows an example of an administrator password input screen displayed on the display unit. In FIG. 7, for example, the message "Please enter the administrator password" and a display area for entering the "administrator password" are displayed. The administrator can simply enter the administrator password before it was changed while looking at this screen.

[0081] If you have never changed the administrator password, enter the initial password KPW0. On the other hand, if the administrator password has been changed before, the same password as that stored in the changed password KPW1 is entered. After entering the password, select and enter the "OK" display area to confirm the password entry.

[0082] In step S42, if the administrator password is entered, the process proceeds to step S43, and if not, the process returns to step S41. In step S43, the input administrator password is stored as the input password INPW. In step S44, the input administrator password (input password INPW) is compared with the change password KPW1. If the change password KPW1 is initially set to the same password as the initial password KPW0, and the administrator password has never been changed, the input password INPW will be compared with the initial password KPW0.

[0083] In step S45, if the input password INPW and the change password KPW1 match, the process proceeds to step S51 in FIG. On the other hand, if the input password INPW and the change password KPW1 do not match, the process proceeds to step S46.

[0084] If the passwords do not match in step S46, authentication of the administrator has failed, and a warning screen indicating that the administrator passwords do not match and that authentication of the administrator has failed is displayed on the display unit 13. After displaying the warning screen, the process may be terminated, or the user may be prompted to re-enter the correct administrator password.

[0085] FIG. 9 shows an example of a password mismatch warning screen displayed on the display unit. The administrator password mismatch warning screen in Figure 9 displays, for example, the text "The administrator password has already been changed. Please enter the correct administrator password," along with a display area for entering the "administrator password." If the administrator password is re-entered, the process returns to step S42.

[0086] In step S51 of FIG. 12, an administrator information setting screen is displayed on the display unit 13. FIG. 8 shows an explanatory diagram of an example of an administrator information setting screen displayed on the display unit. The administrator inputs the new administrator password and other information while viewing this screen. The administrator information setting screen in FIG. 8 displays, for example, the phrase "Please enter administrator information" and a display area for entering administrator information such as an administrator password.

[0087] FIG. 8 shows a case where a new administrator password (new password), the administrator's mail address (email), and the administrator's phone number are entered as administrator information. However, the administrator information is not limited to these pieces of information, and it may also be possible to input, for example, age, department name, employee ID, social network service account, and the like. After entering a new password, etc., select and enter the "OK" display area to confirm the entry of administrator information.

[0088] In step S52, if a new password or the like is entered, the process proceeds to step S53, and if not, the process returns to step S51. In step S53, the input new password INPW is stored as the changed password KPW1. In step S54, the password flag PWFLG is set to "T" (PWFLG=T) to indicate that the password has been changed.

[0089] In step S55, the operation history information 51 is read from the storage unit 50. In step S56, if information is stored in the log presentation method information 56, the process proceeds to step S57, and if not, the process proceeds to step S60. In step S57, the log presentation method information 56 is read out.

[0090] In step S58, the log presentation unit 25 selects a log presentation method based on the read log presentation method information 56. Then, operation history information 51 is presented. For example, if "display" is stored in the log presentation method information 56, the operation history information 51 as shown in FIG.

[0091] Alternatively, if "print" is stored in the log presentation method information 56, the image output unit 17 prints the operation history information 51 on a predetermined printing paper. Alternatively, if "data communication" is stored in the log presentation method information 56, the operation history information 51 is transmitted by the communication unit 18 to an information processing device of a predetermined destination registered in advance, such as a personal computer owned by the administrator.

[0092] In step S59, if the administrator inputs an input meaning to end the log presentation (log presentation end input), the process ends, and if not, the process returns to step S58.

[0093] In step S60, since the log presentation method information 56 has not yet been set, the display unit 13 is caused to display a log presentation method selection screen. The log presentation method selection screen displays a selection area for a plurality of log presentation methods, such as "display," "print," and "data communication," and allows the administrator to select a desired presentation method. In step S61, if the administrator has selected and input a log presentation method, the process proceeds to step S62; otherwise, the process returns to step S60. In step S62, the selected log presentation method is stored in the log presentation method information 56. After that, the process proceeds to step S58.

[0094] <Embodiment of Administrator Password Change and Operation History Information Presentation> An embodiment in which the administrator password is changed and then operation history information is presented will be described below. In the following embodiment, the method of presenting operation history information is "display."

[0095] (Embodiment 1) Here, a case will be described in which a legitimate administrator changes the administrator password from the initial password KPW0 to a different password.

[0096] Operation 01: An installer of the image forming apparatus installs the image forming apparatus and performs initial setting operations at the time of installation. At this time, the initial password KPW0 is set as the administrator password, and the initial password KPW0 is also set as the change password KPW1. The installer can log in to the image forming apparatus using, for example, a known initial password KPW0 and perform the initial setting operations at the time of installation. This initial setting operation is additionally stored in the operation history information 51 as "operation 01."

[0097] Operation 02: In a state where the administrator of the image forming apparatus has not changed the administrator password, a registered user performs an operation to execute a predetermined function of the image forming apparatus. If the administrator of the image forming apparatus has already registered information about this user, the user can log in to the image forming apparatus using the registered information. This user's function execution operation is additionally stored in the operation history information 51 as “operation 02”.

[0098] Operation 03: The administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in Fig. 8, the administrator inputs a new password that is different from the initial password KPW0. The input new password is stored as a changed password KPW1. This password change operation by the administrator is additionally stored in the operation history information 51 as “operation 03”.

[0099] Image forming device operation: Since the administrator password was changed in operation 03 above, operation history information 51 is presented as in step S58 of FIG. Here, since the operation history information 51 includes at least the above three operations (operation 01 to operation 03), these three operations are displayed. The operation history information 51 may be automatically displayed whenever the administrator password is changed. Alternatively, the administrator may perform a specific operation (an operation to request the display of the operation history information 51) to display the information.

[0100] By viewing the display of the operation history information 51, the administrator can check the operations entered and functions executed from the time the image forming apparatus was installed until the administrator password was changed. For example, by looking at the operation history information 51 as shown in FIG. 3 and checking the operation details, the administrator can determine whether or not an unauthorized operation has been performed. If no unauthorized operations are found, the administrator does not need to take any special action. However, if any unauthorized operation is confirmed, the administrator should analyze the unauthorized operation and consider necessary countermeasures.

[0101] (Embodiment 2) Here, a case will be described in which, after a registered authorized user performs a specific operation, the administrator changes the administrator password from the initial password KPW0 to a different password. The specific operations are setting operations predetermined by the administrator, and are not illegal operations, but refer to operations or functions (hereinafter referred to as prohibited operations) that the user is not desired to perform before changing the administrator password.

[0102] Prohibited operations include, for example, an operation of transmitting image data stored in an image forming apparatus to another information processing apparatus, a fax transmission operation, an operation of saving image data in an external storage, and an E-mail operation of the image data. There are operations such as sending emails. These operations and functions may result in information leakage or unauthorized use. Furthermore, the prohibited operations may be set and stored in advance in the storage unit 50 of the image forming apparatus by an administrator or an installation technician.

[0103] Operation 01: As in the first embodiment, the person in charge of installing the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, the initial password KPW0 is set as the administrator password, and the initial password KPW0 is also set as the change password KPW1. The installer can log in to the image forming apparatus using, for example, a known initial password KPW0 and perform the initial setting operations at the time of installation. This initial setting operation is additionally stored in the operation history information 51 as "operation 01."

[0104] Operation 02: As in the first embodiment, in a state where the administrator of the image forming apparatus has not changed the administrator password, a registered user performs an operation to execute a predetermined function of the image forming apparatus. If the administrator of the image forming apparatus has already registered information about this user, the user can log in to the image forming apparatus using the registered information. This user's function execution operation is additionally stored in the operation history information 51 as “operation 02”. Here, it is assumed that operation 02 is a prohibited operation, "fax transmission operation." In this case, the operation history information 51 stores "fax transmission operation" as the operation content.

[0105] Operation 03: The administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in Fig. 8, the administrator inputs a new password that is different from the initial password KPW0. The input new password is stored as a changed password KPW1. This password change operation by the administrator is additionally stored in the operation history information 51 as “operation 03”.

[0106] Image forming device operation: Since the administrator password was changed in operation 03 above, operation history information 51 is presented as in step S58 of FIG. Here, since the operation history information 51 includes at least the above three operations (operation 01 to operation 03), these three operations are displayed. In this second embodiment, the displayed operation history information 51 includes a prohibited operation, "Fax transmission operation."

[0107] By viewing the display of operation history information 51, the administrator can confirm that a prohibited operation, "fax sending operation," was performed by a user between the time the image forming device was installed and the time the administrator password was changed. For example, by looking at the operation history information 51 as shown in Figure 3 and checking the operation content, an administrator can confirm that in history number 3, user 01 performed a prohibited operation, a "fax sending operation." In this way, when a prohibited operation by a user is confirmed, the administrator can consider necessary countermeasures and take appropriate action against the user who performed the prohibited operation.

[0108] Furthermore, if the prohibited operations set by the administrator are set and stored in advance in the memory unit 50, when presenting the operation history information 51, the log presentation unit 25 may automatically check whether or not there is a prohibited operation in the operation history information 51, and if there is a prohibited operation, may display, together with the operation history information 51, that the prohibited operation has been performed. Alternatively, the column for history number 3, which contains a prohibited operation, may be highlighted, or the column for history number 3 may be displayed in a color different from the display colors of the other history numbers. This allows the administrator to easily and reliably recognize that a prohibited operation has occurred.

[0109] (Embodiment 3) Here, a case will be described in which an unauthorized user masquerades as a legitimate administrator, logs into the image forming apparatus using the initial administrator password KPW0, and performs an operation related to a specific administrator setting. In this case, the system may be used fraudulently by a fraudulent user, but the authorized administrator can confirm the fraudulent use after the fact and consider countermeasures.

[0110] Operation 01: As in the first embodiment, the person in charge of installing the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, the initial password KPW0 is set as the administrator password, and the initial password KPW0 is also set as the change password KPW1. The installer can log in to the image forming apparatus using, for example, a known initial password KPW0 and perform the initial setting operations at the time of installation. This initial setting operation is additionally stored in the operation history information 51 as "operation 01."

[0111] Operation 02: With the administrator password not changed, an unauthorized user who is not the administrator of the image forming device attempts to log in to the image forming device using the initial password KPW0. This login operation by the unauthorized user is additionally stored in the operation history information 51 as “operation 02.” This login operation itself is the same as the operation performed by a legitimate administrator, and is therefore stored in the operation history information 51 as a legitimate login operation.

[0112] Operation 03: After logging in, the unauthorized user performs operations related to administrator settings. For example, suppose the administrator performs the "Display registered user list" operation. Alternatively, the unauthorized user may also perform operations such as "scan and send" that are performed by the user. This operation by the unauthorized user regarding administrator settings is additionally stored in the operation history information 51 as “operation 03.” This operation is also similar to the operation performed by a legitimate administrator or user, and is therefore stored in the operation history information 51 as a legitimate operation.

[0113] Operation 04: The authorized administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in Fig. 8, the administrator inputs a new password that is different from the initial password KPW0. The input new password is stored as a changed password KPW1. This password change operation by the administrator is additionally stored in the operation history information 51 as “operation 04.”

[0114] Image forming device operation: Since the administrator password was changed in operation 04 above, operation history information 51 is presented as in step S58 of FIG. Here, since the operation history information 51 includes at least the above four operations (operation 01 to operation 04), these four operations are displayed.

[0115] The authorized administrator of the image forming device looks at the display of operation history information 51 and checks the operations entered and functions executed from the time the image forming device was installed until the administrator password was changed. For example, if the login operation in operation 02 and the "Display registered user list" operation in operation 03 are operations that the legitimate administrator does not remember performing, the legitimate administrator can determine that these operations may be unauthorized operations performed by an unauthorized user.

[0116] If no unauthorized operations are found, the authorized administrator does not need to take any special action. However, if it is determined that there is a possibility of fraudulent manipulation, the authorized administrator should analyze the fraudulent manipulation and consider necessary countermeasures. For example, a legitimate administrator may recognize that a registered user's personal information may have been leaked because a "list of registered users" is displayed, and may investigate the leak of the user's personal information.

[0117] (Embodiment 4) Here, we will explain the case where an unauthorized user impersonates a legitimate administrator, changes the administrator password from the initial password KPW0 to a different password, and then performs operations related to specific administrator settings. In this case, the system may be used fraudulently by a fraudulent user, but the authorized administrator can confirm the fraudulent use after the fact and consider countermeasures.

[0118] Operation 01: As in the first embodiment, the person in charge of installing the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, the initial password KPW0 is set as the administrator password, and the initial password KPW0 is also set as the change password KPW1. The installer can log in to the image forming apparatus using, for example, a known initial password KPW0 and perform the initial setting operations at the time of installation. This initial setting operation is additionally stored in the operation history information 51 as "operation 01."

[0119] Operation 02: With the administrator password not changed, an unauthorized user who is not the administrator of the image forming device attempts to log in to the image forming device using the initial password KPW0. This login operation by the unauthorized user is additionally stored in the operation history information 51 as “operation 02.” This login operation itself is the same as the operation performed by a legitimate administrator, and is therefore stored in the operation history information 51 as a legitimate login operation.

[0120] Operation 03: An unauthorized user attempts to change the administrator password. For example, as shown in Fig. 8, an unauthorized user inputs a new password that is different from the initial password KPW0. The input new password is stored as a changed password KPW1. This password change operation by the administrator is additionally stored in the operation history information 51 as “operation 03”. This password change operation itself is the same as the operation performed by a legitimate administrator, and is therefore stored in the operation history information 51 as a legitimate operation.

[0121] Operation 04: After logging in, the unauthorized user performs operations related to administrator settings. For example, suppose the administrator performs the "Display registered user list" operation. This operation by the unauthorized user regarding administrator settings is additionally stored in the operation history information 51 as “operation 04.” This operation is also similar to the operation performed by a legitimate administrator or user, and is therefore stored in the operation history information 51 as a legitimate operation.

[0122] Operation 05: The authorized administrator of the image forming apparatus logs in to the image forming apparatus using the administrator password. Here, the legitimate administrator does not know the above operation 03 and believes that the current administrator password is still the initial password KPW0, so he enters the initial password KPW0 and performs the operation to log in to the image forming apparatus.

[0123] However, the administrator password has already been changed by operation 03 above, and a password different from the initial password KPW0 has been set as the changed password KPW1. Therefore, even if a legitimate administrator inputs the initial password KPW0 as the input password INPW, since it differs from the changed password KPW1, authentication of the administrator will fail.

[0124] Image forming device operation: If administrator authentication fails, a warning screen indicating an administrator password mismatch, such as that shown in Figure 9, will be displayed. Even if the legitimate administrator enters the initial password KPW0 again and attempts to log in to the image forming apparatus, authentication of the administrator will fail. The legitimate administrator who confirmed this failure in administrator authentication has never changed the administrator password himself, but because authentication of the administrator using the initial password KPW0 failed, it can be determined that there is a possibility that an unauthorized user has logged in and changed the administrator password.

[0125] In this case, the legitimate administrator cannot log in and therefore cannot display and check the operation history information 51, but from the inability to log in, it can be determined that there is a possibility of unauthorized operation and necessary countermeasures can be considered. The authorized administrator may take measures such as restoring the image forming device to its factory settings, initializing the administrator password (returning the changed password KPW1 to the initial password KPW0), or contacting the retailer. [Explanation of symbols]

[0126] 1. Image forming device (MFP), 11 control section, 12 Operation section, 13 Display section, 14 Image processing unit, 15 Image input unit, 16 Image forming unit, 17 Image output unit, 18 Communications Department, 21 Log recording section, 22 Password entry monitoring unit, 23 Password authentication section, 24 Password change section, 25 Log presentation section, 50 storage section, 51 Operation history information, 52 Initial password, 53 Change password, 54 Input password, 55 password flag, 56 Log presentation method information

Claims

1. The device includes a storage unit, a display unit, and a control unit, the storage unit is capable of storing an initial password that is an initial value of an administrator password and the administrator password; the display unit is capable of displaying a password entry screen, The control unit An image forming apparatus characterized in that it determines whether the administrator password entered via the password input screen matches the initial password, and if they match, it determines that the initial password is stored in the memory unit as the administrator password.

2. The control unit 2. The image forming apparatus according to claim 1, wherein the image forming apparatus determines whether the administrator password entered via the password input screen matches the initial password, and if they do not match, determines that a password different from the initial password is stored in the memory unit as the administrator password.

3. 3. The image forming apparatus according to claim 1, wherein the initial password is stored in the storage unit in advance before the image forming apparatus is installed.

4. The control unit An image forming apparatus as described in any one of claims 1 to 3, characterized in that when it is determined that the initial password is stored in the memory unit as the administrator password, a first screen including a message prompting the user to change the administrator password, a first button for selecting to proceed with the change process, and a second button for selecting not to proceed with the change process is displayed on the display unit.

5. The control unit 5. The image forming apparatus according to claim 4, wherein when the first button is selected on the first screen, a second screen for changing the administrator password is displayed on the display unit.

6. The control unit 6. The image forming apparatus according to claim 4, wherein when the second button is selected on the first screen, a third screen is displayed on the display unit.

7. The control unit 5. The image forming apparatus according to claim 4, wherein when it is determined that a password different from the initial password is stored in the memory unit as the administrator password, a third screen is displayed on the display unit without going through the first screen.

8. 8. The image forming apparatus according to claim 6, wherein the third screen is an initial screen on which at least one of a copy, a fax, and a scan function can be selected.

9. The control unit 6. The image forming apparatus according to claim 5, wherein the second screen is displayed on the display unit when authentication of the administrator is successful.

10. the second screen includes an input area for a new administrator password and a third button for selecting execution of the change process; The control unit 10. The image forming apparatus according to claim 5, wherein when the new administrator password is entered in the input area and the third button is selected, the new administrator password is stored in the memory unit as the administrator password.

11. A control method for an image forming apparatus including a storage unit, a display unit, and a control unit, comprising: an initial password, which is an initial value of an administrator password, and the administrator password are stored in the storage unit; A password entry screen is displayed on the display unit, A control method for an image forming apparatus, characterized in that it determines whether the administrator password entered via the password input screen matches the initial password, and if they match, it determines that the initial password is stored in the memory unit as the administrator password.

Images