Image processing apparatus, control method and control program of image processing apparatus

Abstract

To provide an image processing apparatus configured to reduce the time and effort of a user for configuring setting data, a control method and a control program of the image processing apparatus.SOLUTION: An image processing apparatus 10 includes a body 101 having an image processing function, an update processing unit 172, and a rewrite processing unit 173. The update processing unit 172 updates, when it is determined that firmware FW0 for use in control of the body 101 has been altered, the firmware FW0 to authorized firmware. The rewrite processing unit 173 rewrites, when updating the firmware FW0 to the authorized firmware, setting data for use in operation of the body 101, with backup data.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an image processing apparatus, a control method for an image processing apparatus, and a control program. [Background technology]

[0002] As a related technology, an image processing device (information processing device) is known, such as a multifunction device that integrates multiple functions such as a scanning function and a printing function, and stores firmware (control program) in a storage means (see, for example, Patent Document 1).

[0003] An image processing device according to a related art includes a detection unit that detects whether firmware stored in a storage unit has been tampered with, and an update unit that updates the firmware to another firmware when tampering is detected. This image processing device also includes a rewrite unit that is used in the operation of the image processing device after the firmware has been updated by the update unit and that rewrites setting data set by a user to initial data. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 2019-215754 Summary of the Invention [Problem to be solved by the invention]

[0005] In the configuration of the related art, if firmware tampering is detected, the firmware is updated to another firmware and the setting data is rewritten to the initial data. Therefore, for example, even if the setting data has been changed from the factory default at the time firmware tampering is detected, the setting data is rewritten to the initial data, and the user must reset the setting data.

[0006] An object of the present invention is to provide an image processing apparatus, a control method for an image processing apparatus, and a control program that can reduce the effort required for a user to set setting data. [Means for solving the problem]

[0007] According to one aspect of the present invention, an image processing device includes a main body having an image processing function, an update processing unit, and a rewrite processing unit. When the update processing unit determines that firmware used to control the main body has been tampered with, the update processing unit updates the firmware to genuine firmware. When updating the firmware to the genuine firmware, the rewrite processing unit rewrites setting data used to operate the main body using backup data.

[0008] A control method for an image processing device according to another aspect of the present invention includes, when it is determined that firmware used to control a main body having an image processing function has been tampered with, updating the firmware to genuine firmware, and, when updating the firmware to the genuine firmware, rewriting setting data used to operate the main body using backup data.

[0009] A control program according to another aspect of the present invention is a control program for causing one or more processors to perform the following operations when it is determined that firmware used to control a main body having an image processing function has been tampered with: updating the firmware to genuine firmware; and, when updating the firmware to the genuine firmware, rewriting configuration data used to operate the main body using backup data. [Effects of the Invention]

[0010] According to the present invention, it is possible to provide an image processing apparatus, a control method for an image processing apparatus, and a control program that can reduce the effort required for a user to set setting data. [Brief explanation of the drawings]

[0011] [Figure 1] FIG. 1 is a schematic block diagram of an image processing device according to the first embodiment. [Figure 2] FIG. 2 is a schematic diagram showing the appearance of the image processing device according to the first embodiment. [Figure 3] FIG. 3 is a flowchart showing an example of the operation of the image processing device according to the first embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0012] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The following description will discuss preferred embodiments of the present invention with reference to the accompanying drawings. The preferred embodiments are merely examples of the present invention and are not intended to limit the technical scope of the present invention.

[0013] (Embodiment 1) [1] Overall configuration of image processing device First, the overall configuration of an image processing device 10 according to this embodiment will be described with reference to FIGS.

[0014] The image processing device 10 according to this embodiment is, for example, a multifunction peripheral having multiple functions, such as a scanning function for acquiring image data from an original, a printing function for forming an image based on the image data, a facsimile function, and a copying function. The image processing device 10 may be a printer, scanner, facsimile machine, copier, etc., as long as it has an image processing function including at least one of the function for forming an image and the function for acquiring image data.

[0015] As shown in FIG. 1, the image processing device 10 includes an automatic document feeder 11, an image reading unit 12, an image forming unit 13, a paper feeder 14, a display unit 15, an operation unit 16, a control unit 17, a communication unit 18, and a storage unit 19. The automatic document feeder 11 is an ADF (Auto Document Feeder), and is therefore represented as "ADF" in FIG. 1 and will also be referred to as "ADF 11" in the following description. In this embodiment, as shown in FIG. 2, the image processing device 10 includes a main body 101. The ADF 11, the image reading unit 12, the image forming unit 13, the paper feeder 14, the display unit 15, the operation unit 16, the control unit 17, the communication unit 18, and the storage unit 19 are provided in the main body 101.

[0016] The ADF 11 transports a document whose image is to be read by the image reading unit 12. The ADF 11 includes a document setting unit, a plurality of transport rollers, a document holder, a paper discharge unit, and the like.

[0017] The image reading unit 12 reads an image from a document and outputs image data corresponding to the read image. The image reading unit 12 includes a document table, a light source, a plurality of mirrors, an optical lens, a CCD (Charge Coupled Device), and the like.

[0018] Image forming unit 13 forms an image on a sheet by electrophotography based on image data output from image reading unit 12. Image forming unit 13 also forms an image on a sheet based on image data input from an information processing device external to image processing device 10, such as a personal computer. Image forming unit 13 has four image forming units corresponding to four colors, C (cyan), M (magenta), Y (yellow), and K (black), an optical scanning device, an intermediate transfer belt, a secondary transfer roller, a fixing device, etc. Image forming unit 13 may also be configured to form an image on a sheet by an image forming method other than electrophotography, such as an inkjet method.

[0019] The image forming unit 13 forms an image on a sheet using toner as a developer. When the image forming unit 13 forms an image using an inkjet method, ink (another example of a developer) is supplied instead of toner. The toner supplied to the image forming unit 13 includes toner of multiple colors, for example, C (cyan), M (magenta), Y (yellow), and K (black). After the image is formed in the image forming unit 13, the sheet is discharged (supplied) to an extension device or the like for post-processing.

[0020] The paper feed unit 14 supplies sheets to the image forming unit 13. The paper feed unit 14 has a paper feed cassette, a manual feed tray, a sheet transport path, a plurality of transport rollers, etc. The image forming unit 13 forms an image on the sheets supplied from the paper feed unit 14. The sheets supplied to the image forming unit 13 are, for example, paper, but are not limited to paper and may be, for example, a resin film, etc.

[0021] The display unit 15 is a user interface for presenting (displaying) information to the user in the image processing device 10. The display unit 15 displays various types of information in response to control instructions from the control unit 17. In the present embodiment, as an example, the display unit 15 includes a liquid crystal display, and displays a display screen including various types of information on the liquid crystal display.

[0022] The operation unit 16 is, for example, a user interface for accepting operation inputs by the user on the display screen displayed on the display unit 15. The operation unit 16 accepts various operations by the user, for example, by outputting electrical signals in response to the user's operations. In this embodiment, as an example, the operation unit 16 has a switch, a touch panel, or the like.

[0023] Furthermore, the image processing device 10 may include, in addition to or instead of the display unit 15 and the operation unit 16, an audio output unit, an audio input unit, and the like, as a user interface.

[0024] The control unit 17 mainly comprises a computer system having one or more processors and one or more memories, and performs overall control of the image processing device 10. In the image processing device 10, the one or more processors execute programs to realize the functions of the control unit 17. In this embodiment, as an example, the control unit 17 includes a CPU (Central Processing Unit).

[0025] The program may be pre-recorded in one or more memories, provided via a telecommunications line such as the Internet, or provided by being recorded on a non-transitory recording medium readable by a computer system, such as a memory card or an optical disk. The one or more processors are composed of one or more electronic circuits including semiconductor integrated circuits. Furthermore, the computer system referred to here includes a microcontroller having one or more processors and one or more memories. The control unit 17 may be a control unit provided separately from the main control unit that comprehensively controls the image processing device 10.

[0026] The communication unit 18 is an interface that executes data communication between the image processing device 10 and an external device connected via a communication network such as the Internet or a LAN (Local Area Network). In the present embodiment, the communication unit 18 is configured to be able to communicate with at least the distribution device 20 (see FIG. 1).

[0027] The storage unit 19 includes one or more nonvolatile memories, and stores in advance information such as programs for causing the control unit 17 to execute various processes. The storage unit 19 also stores setting data used for the operation of the main body 101 of the image processing device 10. The "setting data" referred to in this disclosure refers to setting values ​​(parameters) and the like set by the user, and the operation of the main body 101 is customized by the setting data.

[0028] The distribution device 20 stores an update program UP0 (see FIG. 1) for updating multiple pieces of firmware FW0 (see FIG. 1) used to control the main body 101 of the image processing device 10. The distribution device 20 is, for example, a server device connected to the Internet. The distribution device 20 distributes the update program UP0 to the image processing device 10. In other words, the image processing device 10 is configured to be able to receive the update program UP0 from the distribution device 20 by communicating with the distribution device 20 via the communication unit 18.

[0029] [2] Control unit configuration Next, each functional unit included in the control unit 17 will be described in more detail with reference to Fig. 1. The control unit 17 has an acquisition processing unit 171, an update processing unit 172, a rewrite processing unit 173, a backup processing unit 174, and a detection processing unit 175. That is, the image processing device 10 has the acquisition processing unit 171, the update processing unit 172, the rewrite processing unit 173, the backup processing unit 174, and the detection processing unit 175 as one function of the control unit 17.

[0030] Furthermore, the control unit 17 implements multiple pieces of firmware FW1 to FWn (where "n" is any natural number). When the multiple pieces of firmware FW1 to FWn are not particularly distinguished from one another, each of the pieces of firmware FW1 to FWn is referred to as "firmware FW0." In this disclosure, "firmware" refers to software for controlling a computer system (control unit 17) incorporated into the main body 101 of the image processing device 10, and refers to software that is pre-written into an integrated circuit such as a ROM and incorporated into the main body 101. Firmware FW0 has the function of managing basic control of the main body 101, which has image processing functions.

[0031] The acquisition processing unit 171 executes an acquisition process to acquire an update program UP0. The update program UP0 is a computer program used to update multiple pieces of firmware FW0 used to control the main body 101. When multiple update programs UP0 are to be distinguished, they are referred to as "update programs UPn" (where "n" is an arbitrary natural number). In this embodiment, the program used to update firmware FWn is referred to as update program UPn, and as an example, update program UP5 is used to update firmware FW5 (see FIG. 3).

[0032] In this embodiment, the acquisition processing unit 171 downloads the update program UP0 from the distribution device 20 and acquires the update program UP0 by the communication unit 18 communicating with the distribution device 20 via a communication network such as the Internet or a LAN. That is, the acquisition processing unit 171 acquires the update program UP0 from the distribution device 20 by downloading.

[0033] The update program UP0 acquired (downloaded) by the acquisition processing unit 171 is stored (stored), for example, in the storage unit 19. Specifically, the update program UP0 is stored in a storage area allocated for storing the update program UP0 in the storage unit 19, which is made up of one or more non-volatile memories. The update program UP0 may be stored not only in the storage unit 19 but also in a memory within the control unit 17, for example.

[0034] The update processing unit 172 executes an update process to update the firmware FW0 based on the update program UP0. Specifically, the update processing unit 172 updates the firmware FW0 implemented in the control unit 17 based on the update program UP0 stored in the storage unit 19. Here, the update processing unit 172 updates the firmware FWn using the update program UPn, and therefore, as an example, updates the firmware FW2 using the update program UP2. The update program UP0 used by the update processing unit 172 for the update may be deleted (erased) from the storage unit 19 after the update is completed.

[0035] Incidentally, as a related technology of this type of image processing device 10, there is known an image processing device (information processing device) that is a multifunction device that integrates multiple functions such as a scanning function and a printing function, and stores firmware (control program) in a storage means.

[0036] An image processing device according to a related art includes a detection unit that detects whether firmware stored in a storage unit has been tampered with, and an update unit that updates the firmware to another firmware when tampering is detected. This image processing device also includes a rewrite unit that is used in the operation of the image processing device after the firmware has been updated by the update unit and that rewrites setting data set by a user to initial data.

[0037] In the configuration of the related art, if firmware tampering is detected, the firmware is updated to another firmware and the setting data is rewritten to the initial data. Therefore, for example, even if the setting data has been changed from the factory default at the time firmware tampering is detected, the setting data is rewritten to the initial data, and the user must reset the setting data.

[0038] In contrast to this, in this embodiment, the configuration described below realizes an image processing device 10, a control method for an image processing device, and a control program that can reduce the effort required for the user to set setting data.

[0039] That is, the image processing device 10 according to this embodiment includes a main body 101 having an image processing function, an update processing unit 172, and a rewrite processing unit 173. When it is determined that firmware FW0 used to control the main body 101 has been tampered with, the update processing unit 172 updates the firmware FW0 to genuine firmware. When updating firmware FW0 to genuine firmware, the rewrite processing unit 173 rewrites setting data used in the operation of the main body 101 using backup data. In this embodiment, the update processing unit 172 and the rewrite processing unit 173 are provided in the control unit 17 as one function of the control unit 17.

[0040] In short, the update processing unit 172 not only executes the update processing for updating the firmware FW0 based on the update program UP0 as described above, but also has the function of updating the firmware FW0 to genuine firmware. In other words, if the firmware FW0 has been tampered with, the update processing unit 172 updates the firmware FW0 to genuine firmware. This makes it possible to prevent the tampered firmware FW0 from being used continuously.

[0041] Since firmware FW0 has been tampered with in this way, when the update processing unit 172 updates firmware FW0 to genuine firmware, the rewrite processing unit 173 rewrites the setting data used in the operation of the main unit 101 using the backup data. Therefore, if tampering of firmware FW0 is detected, even if firmware FW0 is updated to other firmware (genuine firmware), the setting data will be rewritten using the backup data. In other words, by backing up the setting data at some point in time, it is possible to restore the setting data to the setting data at that time, rather than to the initial data. As a result, for example, if the setting data has been changed from the factory default state at the time the backup was made, the setting data can be rewritten with the changed setting data, which has the advantage of reducing the user's effort in resetting the setting data.

[0042] Furthermore, as in the related art, when the setting data is rewritten to initial data and the user resets the setting data, there is a possibility that the user may set the wrong setting. This may result in the setting data being different from what the user originally wanted, which may lead to a decrease in usability of the image processing device. In contrast, in the image processing device 10 according to this embodiment, the setting data is automatically rewritten based on backup data, making it less likely that such an incorrect setting will be made. This allows the image processing device 10 to be used in a state close to the original environment, and also reduces a decrease in usability of the image processing device 10.

[0043] In this way, when the firmware FW0 is determined to have been tampered with and the update processing unit 172 updates the firmware FW0 to the official firmware, the rewrite processing unit 173 executes a rewrite process to rewrite the setting data using the backup data. Specifically, if backup data is stored in the storage unit 19 at the time the firmware FW0 is updated to the official firmware, the rewrite processing unit 173 rewrites the setting data in the storage unit 19 with the backup data. As a result, the setting data is restored to the backup data.

[0044] Furthermore, in this embodiment, the rewrite processing unit 173 determines the authenticity of the backup data using "signature data," which will be described later. "Signature data," as used in this disclosure, is data for proving the authenticity of the backup data, and is only attached to authentic backup data. If signature data is attached to the backup data, the rewrite processing unit 173 uses the backup data to rewrite the setting data. In other words, if signature data is not attached to the backup data, the rewrite processing unit 173 will not rewrite the setting data using the backup data. This ensures that authentic backup data is used to rewrite the setting data, improving the reliability of the setting data rewrite.

[0045] The backup processing unit 174 generates backup data based on the setting data that has already been set. That is, in a state in which the user has set the setting data (including changes to the setting data), the backup data is generated based on the setting data stored in the storage unit 19. Specifically, the backup processing unit 174 copies the setting data stored in the storage unit 19 and stores it in the storage unit 19 as backup data. This makes it possible to automatically back up the setting data.

[0046] In this embodiment, the backup processing unit 174 generates backup data based on the setting data when it is determined that the firmware FW0 has not been tampered with. In other words, the timing at which the backup processing unit 174 backs up the setting data includes the time when it is determined that the firmware FW0 has not been tampered with. This allows authentic setting data to be used as backup data, improving the reliability of rewriting the setting data.

[0047] Furthermore, the backup processing unit 174 generates backup data based on the setting data when a specific operation is performed by the user. The "specific operation" here refers to a specific operation performed by the user on, for example, the operation unit 16, and includes, for example, an operation to change the setting data and a backup operation performed at any timing. In other words, the timing at which the backup processing unit 174 backs up the setting data includes when the user performs an operation to change the setting data or a backup operation. This makes it possible to back up the setting data, for example, every time the user changes the setting data or at any timing, making it easier for the rewrite processing unit 173 to restore the latest (or nearly latest) setting data.

[0048] Furthermore, the backup processing unit 174 adds signature data to the backup data when generating it. That is, adding signature data to the backup data serves as proof that the backup data is genuine backup data generated by the backup processing unit 174. Therefore, only genuine backup data can be used to rewrite the setting data, improving the reliability of the setting data rewrite.

[0049] The detection processing unit 175 detects whether firmware FW0 has been tampered with. Then, the update processing unit 172 determines whether firmware FW0 has been tampered with based on the detection result of the detection processing unit 175. In short, when the detection processing unit 175 detects that firmware FW0 has been tampered with, it is determined that firmware FW0 has been tampered with, and in this case, the update processing unit 172 updates firmware FW0 to genuine firmware.

[0050] In the present embodiment, as an example, the detection processing unit 175 detects whether firmware FW0 has been tampered with by using a digital signature and a decryption key for firmware FW0. The digital signature and the decryption key for firmware FW0 are stored in the memory of the control unit 17 or in the storage unit 19. That is, the detection processing unit 175 calculates a first hash value from firmware FW0 implemented in the control unit 17, obtains a second hash value from the digital signature using the decryption key, and detects that firmware FW0 has been tampered with when the first hash value and the second hash value do not match. However, the method for detecting whether firmware FW0 has been tampered with is not limited to this method.

[0051] [3] Control method for image processing device Hereinafter, with reference to Fig. 3, a control method for the image processing device 10, which is executed mainly by the control unit 17 in the image processing device 10, will be described. Here, steps S1, S2, etc. in the flowchart shown in Fig. 3 each represent the numbers of processing procedures (steps) executed mainly by the control unit 17 of the image processing device 10. The control unit 17 is mainly composed of a computer system having one or more processors and one or more memories, and the following processing is realized by the one or more processors executing a control program.

[0052] <Steps S1 and S2> In this embodiment, as an example, each time the image processing device 10 is started up (including returning from standby (energy saving) mode to normal mode), the detection processing unit 175 detects whether the firmware FW0 has been tampered with. That is, when the image processing device 10 is started up in step S1, the detection processing unit 175 detects whether the firmware FW0 has been tampered with in the next step S2. At this time, if the detection processing unit 175 detects that the firmware FW0 has been tampered with (S2: Yes), the image processing device 10 shifts the processing to step S3. On the other hand, if the detection processing unit 175 does not detect that the firmware FW0 has been tampered with (S2: No), the image processing device 10 shifts the processing to step S4.

[0053] <Step S3> If firmware FW0 has been tampered with (S2: Yes), the update processing unit 172 updates firmware FW0 to correct firmware, that is, genuine firmware (S3). At this time, the update processing unit 172, for example, takes the firmware in the initial state, that is, at the time of shipment from the factory, as the genuine firmware and updates firmware FW0 to the genuine firmware based on an initialization program pre-stored in the storage unit 19. However, this example is not limiting, and the update processing unit 172 may, for example, take firmware FW0 of an immediately previous version or a specific version as the genuine firmware and update firmware FW0 to the genuine firmware based on an update program UP0.

[0054] <Step S4> If firmware FW0 has not been tampered with (S2: No), the backup processing unit 174 backs up the setting data stored in the storage unit 19 at that time. Specifically, the backup processing unit 174 copies the setting data stored in the storage unit 19 and stores it as backup data in a separate area of ​​the storage unit 19. Furthermore, the backup processing unit 174 assigns signature data to the backup data so that it can be confirmed later that the backup data has been saved by an untampered program.

[0055] Furthermore, when the user performs a specific operation, such as an operation to change the setting data or a backup operation at any timing, on the operation unit 16, the backup processing unit 174 also backs up the setting data stored in the storage unit 19 at that time. Even in this case, the backup processing unit 174 assigns signature data to the backup data.

[0056] <Step S5> In step S5, which follows step S3, the rewrite processing unit 173 verifies the signature data attached to the backup data. If the signature data is attached to the backup data (S5: Yes), the backup data is recognized as genuine backup data, and the rewrite processing unit 173 proceeds to step S6 to rewrite the setting data using the backup data. On the other hand, if the signature data is not attached to the backup data (S5: No), the backup data is recognized as fraudulent backup data, and the rewrite processing unit 173 proceeds to step S7.

[0057] <Step S6> In step S6, the rewrite processing unit 173 rewrites the setting data in the storage unit 19 with the backup data stored in the storage unit 19. As a result, the setting data in the storage unit 19 is rewritten with the backup data that was stored in the storage unit 19 when the firmware FW0 was updated to the regular firmware (S3), and the setting data is restored to the backup data.

[0058] <Step S7> In step S7, the rewrite processing unit 173 rewrites the setting data in the storage unit 19 with the initial data that has been stored in advance in the storage unit 19. In other words, if the verification of the signature data fails (S5: No), the setting data in the storage unit 19 is rewritten with the predetermined initial data at the time of shipment from the factory. Alternatively, in step S7, the rewrite processing unit 173 may not rewrite the setting data (in other words, maintain the setting data in the storage unit 19).

[0059] The image processing method procedure described above is merely an example, and the order of the processes shown in the flowchart of FIG. 3 may be changed as appropriate, or processes may be added.

[0060] For example, in step S6, before rewriting the setting data to backup data, changes to the setting data from the initial data at the time of shipment from the factory may be presented to the user on display unit 15 or the like, and the user may select whether or not to rewrite the setting data to backup data. In this case, if the user selects rewriting to backup data, rewrite processing unit 173 rewrites the setting data to backup data, and if the user does not select rewriting to backup data, rewrite processing unit 173 rewrites the setting data to, for example, initial data. If there are multiple items of setting data, the user may be allowed to select whether or not to rewrite to backup data for each item of setting data.

[0061] Furthermore, when backing up the setting data, version information of the firmware FW0 being used may be stored in association with the backup data. This makes it possible to update the firmware FW0 to a version of regular firmware that allows the setting data stored as backup data to function correctly in step S3. Similarly, in step S6, it is also possible to rewrite the setting data to backup data that will function correctly with the updated firmware FW0. However, this function is not necessary if the correct firmware has been backed up in the main unit 101, for example.

[0062] Furthermore, the image processing device 10 may output a report on the history of detection of tampering of the firmware FW0, the history of updates to the firmware FW0, and / or the history of rewriting of setting data, etc. In this case, an explanation of each type of history may be added to the report.

[0063] [4] Variation Multiple components included in the image processing device 10 may be distributed across multiple housings. For example, the update processing unit 172, the rewrite processing unit 173, the backup processing unit 174, the detection processing unit 175, etc. are not limited to being configured as a function of the control unit 17, and may be provided in a housing separate from the control unit 17. In other words, at least some of the update processing unit 172, the rewrite processing unit 173, the backup processing unit 174, and the detection processing unit 175 do not have to be integrated with the housing 100 of the image processing device 10, and may be provided in a housing separate from the control unit 17.

[0064] Furthermore, the storage destination of the setting data is not limited to the storage unit 19 including a nonvolatile memory, but may be, for example, an external storage device, a server on a network, cloud computing, or the like.

[0065] Similarly, the storage location of the update program (including the initialization program) used when updating firmware FW0 to the official firmware is not limited to the memory unit 19 including non-volatile memory, but may also be, for example, an external storage device, a server on a network, cloud computing, etc.

[0066] [Appendix to the invention] The following is a summary of the invention extracted from the above-described embodiment. Note that the configurations and processing functions described in the following supplementary notes can be selected and combined as desired.

[0067] <Appendix 1> a main body having an image processing function; an update processing unit that updates the firmware used to control the main body to genuine firmware when it is determined that the firmware has been tampered with; a rewrite processing unit that rewrites setting data used for operation of the main body using backup data when updating the firmware to the genuine firmware, Image processing device.

[0068] <Appendix 2> a backup processing unit that generates the backup data based on the setting data that has already been set; 2. The image processing device according to claim 1.

[0069] <Appendix 3> the backup processing unit generates the backup data based on the setting data when it is determined that the firmware has not been tampered with. 3. The image processing device according to claim 2.

[0070] <Appendix 4> the backup processing unit generates the backup data based on the setting data when a specific operation is performed by a user. 4. The image processing device according to claim 2 or 3.

[0071] <Appendix 5> the backup processing unit adds signature data when generating the backup data; 5. The image processing device according to any one of Supplementary Notes 2 to 4.

[0072] <Appendix 6> the rewriting processing unit rewrites the setting data using the backup data when the signature data is attached to the backup data; 6. The image processing device according to claim 5. [Explanation of symbols]

[0073] 10 Image processing device 101 Main Unit 172 Update processing section 173 Rewrite Processing Unit 174 Backup processing section FW0, FW1 to FWn firmware

Claims

1. a main body having an image processing function; an update processing unit that updates the firmware used to control the main body to genuine firmware when it is determined that the firmware has been tampered with; a rewrite processing unit that rewrites setting data used for operation of the main body using backup data when updating the firmware to the genuine firmware, Image processing device.

2. a backup processing unit that generates the backup data based on the setting data that has already been set; The image processing device according to claim 1 .

3. the backup processing unit generates the backup data based on the setting data when it is determined that the firmware has not been tampered with. The image processing device according to claim 2 .

4. the backup processing unit generates the backup data based on the setting data when a specific operation is performed by a user.

4. The image processing device according to claim 2 or 3.

5. the backup processing unit adds signature data when generating the backup data; 4. The image processing device according to claim 2 or 3.

6. the rewriting processing unit rewrites the setting data using the backup data when the signature data is attached to the backup data; The image processing device according to claim 5 .

7. updating the firmware used to control the main body having the image processing function to genuine firmware when it is determined that the firmware has been tampered with; and when updating the firmware to the genuine firmware, rewriting setting data used for operation of the main body using backup data. A method for controlling an image processing device.

8. updating the firmware used to control the main body having the image processing function to genuine firmware when it is determined that the firmware has been tampered with; When updating the firmware to the genuine firmware, rewriting setting data used for operation of the main body using backup data; A control program for causing one or more processors to execute the above.

Images