Image forming apparatus, control method, and program

Abstract

The pattern files used for virus detection are appropriately updated according to the user's environment. [Solution] The image forming apparatus 4 includes a data receiving unit 43 that receives data, a virus detection unit 51 that performs virus detection processing on the data received by the data receiving unit 43, a first acquisition unit 53 that downloads and acquires a pattern file 25 to be used in the virus detection processing from an external network 8, a second acquisition unit 55 that downloads and acquires the pattern file 25 from an internal network 3 or a connected storage device 15, and a control unit 57 that switches which of the first acquisition unit 53 and the second acquisition unit 55 to operate depending on the usage environment of the external network 8.

Description

Technical Field

[0001] The present invention relates to an image forming apparatus, a control method, and a program, and particularly to a technique for updating a pattern file for detecting a computer virus (hereinafter simply referred to as a "virus") in an image forming apparatus.

Background Art

[0002] An image forming apparatus such as an MFP (Multifunction Peripherals) installed in an office is a device shared by a plurality of users and has a plurality of functions such as a scan function, a print function, and a copy function. The image forming apparatus receives print target data via a network or transmits image data generated by a scan function. If the image forming apparatus is infected with a computer virus, there is a possibility that the virus infection spreads to other devices connected to the network. In addition, there is also a possibility that an image forming apparatus infected with a virus leaks confidential information such as customer information. Therefore, in recent years, an image forming apparatus has a virus detection function for preventing virus infection, similar to a general personal computer (PC) (for example, Patent Documents 1, 2, and 3).

[0003] A pattern file is used for virus detection. The pattern file is an electronic file that defines patterns such as virus characteristics and accumulates patterns of various viruses. This pattern file is sequentially updated to a file corresponding to the latest virus in a server device accessible via the Internet. Therefore, the image forming apparatus can detect the latest virus by downloading the latest pattern file from the server device via online communication via the Internet and using it for virus detection.

[0004] However, depending on the office environment in which the image forming machine is installed, it may not be possible to connect the machine to an external network such as the internet. In such cases, the image forming machine cannot use the latest pattern files. On the other hand, the image forming machine can receive various data via an internal network such as a LAN (Local Area Network) within the office. Therefore, if other devices connected to the internal network become infected with the latest virus, the image forming machine may become infected with the virus through data received from those other devices.

[0005] Therefore, in order to protect image forming machines from viruses, it is desirable that the pattern files used by the image forming machine can be updated even in environments where the image forming machine cannot connect to an external network such as the internet. [Prior art documents] [Patent Documents]

[0006] [Patent Document 1] Japanese Patent Publication No. 2019-220111 [Patent Document 2] Japanese Patent Publication No. 2020-119448 [Patent Document 3] Japanese Patent Publication No. 2023-21234 [Overview of the Initiative] [Problems that the invention aims to solve]

[0007] The present invention was made to solve the above problems, and aims to provide an image forming apparatus, a control method, and a program that can appropriately update pattern files according to the user's operating environment. [Means for solving the problem]

[0008] To achieve the above objective, the invention according to claim 1 is an image forming apparatus comprising: a data receiving unit that receives data; a virus detection unit that performs virus detection processing on the data received by the data receiving unit; a first acquisition unit that downloads and acquires a pattern file to be used in the virus detection processing from an external network; a second acquisition unit that downloads and acquires a pattern file to be used in the virus detection processing from an internal network or a connected storage device; and a control unit that switches which of the first acquisition unit and the second acquisition unit to operate according to the usage environment of the external network.

[0009] The invention according to claim 2 is an image forming apparatus according to claim 1, characterized in that the control unit operates the first acquisition unit to acquire a pattern file when the usage environment is such that it can be connected to the external network.

[0010] The invention according to claim 3 is an image forming apparatus according to claim 1, wherein the control unit operates the second acquisition unit to acquire a pattern file when the usage environment does not permit connection to the external network.

[0011] The invention according to claim 4 is an image forming apparatus according to claim 1, further comprising a difference detection unit that detects a difference file between a pattern file stored on an external server connected to the external network and a pattern file used in the virus detection process, wherein the first acquisition unit downloads the difference file detected by the difference detection unit when downloading a pattern file from the external network.

[0012] The invention according to claim 5 is an image forming apparatus according to claim 1, characterized in that the second acquisition unit downloads a pattern file from a shared folder of an information processing device connected to the internal network.

[0013] The invention according to claim 6 is an image forming apparatus according to claim 1, further comprising a connection unit for connecting the storage device, wherein the second acquisition unit downloads a pattern file from the storage device connected to the connection unit.

[0014] The invention according to claim 7 is an image forming apparatus according to claim 1, characterized in that the second acquisition unit downloads the entire pattern file used in the virus detection process.

[0015] The invention according to claim 8 is an image forming apparatus according to claim 1, wherein the second acquisition unit downloads an encrypted pattern file and decrypts the encrypted pattern file after the download.

[0016] The invention according to claim 9 is an image forming apparatus according to claim 1, further comprising a file update unit that updates the pattern file used in the virus detection process with a pattern file acquired by the first acquisition unit or the second acquisition unit, wherein the file update unit updates the pattern file at a time when no job is being executed.

[0017] The invention according to claim 10 is an image forming apparatus according to claim 9, characterized in that the file update unit updates the pattern file when the apparatus is started up after power is turned on.

[0018] The invention according to claim 11 is an image forming apparatus according to claim 9, characterized in that the file update unit updates the pattern file when it returns from power saving mode.

[0019] The invention according to claim 12 is an image forming apparatus according to claim 9, characterized in that the file update unit updates the pattern file when transitioning from normal power supply mode to power saving mode.

[0020] The invention according to claim 13 is a configuration characterized in that, in the image forming apparatus according to claim 9, the file update unit updates the pattern file immediately after the pattern file is downloaded from the storage device by the second acquisition unit.

[0021] The invention according to claim 14 is an image forming apparatus according to claim 9, further comprising a storage unit having a first storage area and a second storage area in which a pattern file is stored, wherein the virus detection unit reads a pattern file from one of the first storage area and the second storage area and executes the virus detection process, and the file update unit updates the pattern file stored in the other of the first storage area and the second storage area.

[0022] The invention according to claim 15 is a configuration characterized in that, in the image forming apparatus according to claim 14, the file update unit switches the target of reading the pattern file by the virus detection unit from the one storage area to the other storage area after updating the pattern file.

[0023] The invention according to claim 16 is a control method for an image forming apparatus, comprising: a data reception step of receiving data; a virus detection step of executing a virus detection process on the data received in the data reception step; a first acquisition step of downloading and acquiring a pattern file used in the virus detection process from an external network; a second acquisition step of downloading and acquiring a pattern file used in the virus detection process from an internal network or a connected storage device; and a control step of switching which of the first acquisition step and the second acquisition step to operate according to the usage environment of the external network.

[0024] The invention according to claim 17 is a program that causes an image forming apparatus to execute a data reception step of receiving data, a virus detection step of executing virus detection processing on the data received in the data reception step, a first acquisition step of downloading and acquiring a pattern file used in the virus detection processing from an external network, a second acquisition step of downloading and acquiring a pattern file used in the virus detection processing from an internal network or a connected storage device, and a control step of switching which of the first acquisition step and the second acquisition step to operate according to the usage environment of the external network.

Advantages of the Invention

[0025] According to the present invention, the pattern file used in the virus detection processing can be appropriately updated according to the user's usage environment.

Brief Description of the Drawings

[0026] [Figure 1] It is a conceptual diagram showing the overall configuration of a network system including an image forming apparatus. [Figure 2] It is a block diagram showing an example of the hardware configuration of an image forming apparatus. [Figure 3] It is a block diagram showing the functional configuration of a control unit. [Figure 4] It is a diagram exemplifying the acquisition mode of a pattern file by a first acquisition unit. [Figure 5] It is a diagram exemplifying the acquisition mode of a pattern file by a second acquisition unit. [Figure 6] It is a diagram exemplifying an example of update processing by a file update unit. [Figure 7] It is a diagram exemplifying another example of update processing by a file update unit. [Figure 8] It is a flowchart showing an example of the main processing procedure regarding the update of a pattern file. [Figure 9]This flowchart shows an example of a detailed processing procedure for file retrieval. [Figure 10] This flowchart shows an example of a detailed processing procedure for file updates. [Figure 11] This flowchart shows an example of a detailed processing procedure for file updates. [Figure 12] This flowchart shows an example of a detailed processing procedure for online data acquisition. [Figure 13] A flowchart showing an example of the detailed processing steps for offline data acquisition. [Modes for carrying out the invention]

[0027] Preferred embodiments of the present invention will be described in detail below with reference to the drawings. In the embodiments described below, elements common to all are denoted by the same reference numerals, and redundant explanations of these elements will be omitted.

[0028] Figure 1 is a conceptual diagram showing the overall configuration of a network system 1 including an image forming apparatus 4, which is one embodiment of the present invention. This network system 1 is a system in which an internal network 3, such as a LAN, installed in an office 2, and an external network 8, such as the internet, are interconnected via a relay device 7, such as a router. Multiple image forming apparatuses 4, information processing devices 5 and 6, and a relay device 7 are installed in office 2. The image forming apparatuses 4, information processing devices 5 and 6, and the relay device 7 are all connected to the internal network 3 and can communicate with each other via the internal network 3. The relay device 7 is also connected to the external network 8 and can communicate with a server device 9 installed on a cloud such as the internet. The server device 9 is an external server installed in an external environment different from the internal network 3 to which the image forming apparatuses 4 are connected.

[0029] The image forming apparatus 4 is configured, for example, as an MFP (Multifunction Printer) and has multiple functions such as scanning, printing, and copying. The image forming apparatus 4 includes an operation panel 10, a scanner unit 11, and a printer unit 12. The operation panel 10 is the user interface for when a user operates the image forming apparatus 4. When a scan job is started in the image forming apparatus 4, the scanner unit 11 optically reads the image of the document set by the user and generates image data. When a print job is started in the image forming apparatus 4, the printer unit 12 forms the image to be printed onto a sheet such as printing paper and outputs it.

[0030] Information processing device 5 is a local server installed in office 2. For example, information processing device 5 has the functionality of a file server. Information processing device 5 shares files with image forming apparatus 4 and information processing device 6, which are connected to the internal network 3. Information processing device 5 can access an external network 8, such as the internet, via relay device 7, and can download various data via the external network 8.

[0031] Information processing device 6 is a personal computer (PC) installed in office 2. For example, information processing device 6 is a computer used by users working in office 2. Like information processing device 5, information processing device 6 can access an external network 8 such as the internet via relay device 7, and can download various data via the external network 8.

[0032] Figure 2 is a block diagram showing an example of the hardware configuration of the image forming apparatus 4. The image forming apparatus 4 comprises an operation panel 10, a scanner unit 11, a printer unit 12, a communication interface 13, a connection interface 14, a control unit 20, and a storage unit 30. Each of these units is connected to a bus 18 located inside the image forming apparatus 4, and can communicate data with each other via the bus 18.

[0033] The control panel 10 comprises a display unit 10a and an operation unit 10b. The display unit 10a is, for example, a color liquid crystal display and displays various operation screens that the user can operate. The operation unit 10b is, for example, a touchscreen placed on the screen of the display unit 10a and accepts user input on the operation screen.

[0034] The communication interface 13 connects the image forming apparatus 4 to the internal network 3 and performs communication via the internal network 3. The connection interface 14 is a connection part for connecting a storage device 15 such as a USB memory device.

[0035] The control unit 20 comprehensively controls the operation of the image forming apparatus 4. The control unit 20 includes a CPU 21 and a memory 22. The CPU 21 is a hardware processor that reads and executes computer-readable programs stored in the storage unit 30. The memory 22 stores temporary data and other information generated when the CPU 21 executes programs.

[0036] The storage unit 30 is a non-volatile storage device, such as a hard disk drive (HDD) or a solid-state drive (SSD). The storage unit 30 pre-stores a basic program 23 and a virus detection program 24. The basic program 23 is a program that controls the basic operation of the image forming apparatus 4. The virus detection program 24 is a program that enables a virus detection application to perform virus detection processing in the image forming apparatus 4. By having the virus detection application reside in the image forming apparatus 4, the image forming apparatus 4 can perform virus detection processing when sending and receiving data via the internal network 3.

[0037] Furthermore, the memory unit 30 has two memory areas, a first memory area 31 and a second memory area 32, for storing pattern files 25 used in virus detection processing.

[0038] Figure 3 is a block diagram showing the functional configuration of the control unit 20. When power is supplied to the image forming apparatus 4, the CPU 21 of the control unit 20 reads and executes the basic program 23 and the virus detection program 24 from the storage unit 30. The execution of the basic program 23 by the CPU 21 causes the control unit 20 to function as the operation control unit 40. The virus detection program 24 is executed by the CPU 21 after the operation control unit 40 is started. The execution of the virus detection program 24 by the CPU 21 causes the control unit 20 to function as the virus detection application 50. The virus detection application 50 resides in the control unit 20 when power is supplied to the image forming apparatus 4, except when it is in power-saving mode.

[0039] The operation control unit 40 includes a network setting unit 41, a job control unit 42, and a power control unit 45.

[0040] The network configuration unit 41 configures the network settings of the image forming apparatus 4. For example, the administrator of the image forming apparatus 4 can switch the image forming apparatus 4 to administrator configuration mode by operating the operation panel 10. The network configuration unit 41 functions in that administrator configuration mode and configures the network settings based on the administrator's configuration operations. For example, the administrator can configure the network settings by operating the administrator configuration screen displayed on the display unit 10a in administrator configuration mode.

[0041] Furthermore, in administrator setting mode, the administrator can also import pattern files 25 used for virus detection processing from a storage device 15 connected to the connection interface 14 into the image forming apparatus 4.

[0042] The network configuration unit 41 sets whether or not to allow connection to the external network 8 based on configuration operations performed by the administrator. For example, the administrator may configure the system to prohibit the image forming apparatus 4 from connecting to the external network 8 for security reasons. In this case, the network configuration unit 41 prohibits the image forming apparatus 4 from connecting to the external network 8 via the relay device 7. The network configuration unit 41 records and manages such network settings in configuration information.

[0043] The job control unit 42 controls the execution of jobs in the image forming apparatus 4. For example, the job control unit 42 controls the execution of jobs specified by the user by controlling the operation of the scanner unit 11 and the printer unit 12. The job control unit 42 includes a data receiving unit 43 and a data transmitting unit 44. The data receiving unit 43 receives data subject to job execution via the internal network 3. For example, the information processing device 6 sends image data to be printed as a print job to the image forming apparatus 4. The data receiving unit 43 receives data included in such print jobs, etc. The data transmitting unit 44 transmits data via the internal network 3. For example, the job control unit 42 executes a scan job to generate image data. The data transmitting unit 44 transmits such image data to other information processing devices 6, etc., connected to the internal network 3.

[0044] The power control unit 45 controls the power state of the image forming apparatus 4. For example, the power control unit 45 switches between normal power supply mode and power saving mode. Normal power supply mode is a mode in which power is supplied to each part of the image forming apparatus 4, and is a power mode in which the image forming apparatus 4 can execute jobs. Power saving mode is a mode in which power consumption is reduced by cutting off the power supply to at least a part of the image forming apparatus 4, and is a power mode in which the image forming apparatus 4 cannot execute jobs. In normal power supply mode, if a job is not used by the user for a predetermined period of time, the power control unit 45 switches the power mode from normal power supply mode to power saving mode. Also, in power saving mode, if user operation on the operation panel 10 is detected, or if data is received via the internal network 3, the power control unit 45 returns the power mode from power saving mode to normal power supply mode. When returning from power saving mode to normal power supply mode, the power control unit 45 performs a recovery process. This recovery process takes a certain amount of time from start to finish.

[0045] The virus detection application 50 performs virus detection processing at appropriate times to prevent the image forming apparatus 4 from becoming infected with a virus. The virus detection application 50 comprises a virus detection unit 51, a first acquisition unit 53, a second acquisition unit 55, a control unit 57, and a file update unit 58.

[0046] The virus detection unit 51 performs virus detection processing on data received by the job control unit 42 via the internal network 3. The virus detection unit 51 also performs virus detection processing on data to be transmitted when the job control unit 42 transmits data externally via the internal network 3. If the virus detection unit 51 does not detect a virus, it permits subsequent processing of the received data and the data to be transmitted. Conversely, if the virus detection unit 51 detects a virus, it discards the received data and the data to be transmitted to prevent virus infection.

[0047] The virus detection unit 51 includes a file reading unit 52. The file reading unit 52 reads a pattern file 25 from either the first storage area 31 or the second storage area 32. For example, the file reading unit 52 reads the pattern file 25 from either the first storage area 31 or the second storage area 32 when the image forming apparatus 4 is started up, or when the image forming apparatus 4 returns from power-saving mode to normal power supply mode. The pattern file 25 is an electronic file that defines patterns such as the characteristics of a virus. The pattern file 25 stores patterns of various viruses. The virus detection unit 51 performs virus detection processing based on the pattern file 25 read by the file reading unit 52. Therefore, the virus detection unit 51 detects that a virus is contained in the data if the data to be subjected to virus detection processing contains a pattern that matches a pattern stored in the pattern file 25.

[0048] Pattern file 25 is updated periodically to address new viruses. Server devices 9, located on the cloud such as the internet, publish and provide the latest pattern file 25, which enables the detection of new viruses, to the external network 8.

[0049] The first acquisition unit 53 and the second acquisition unit 55 acquire the latest pattern file 25. The first acquisition unit 53 and the second acquisition unit 55 acquire the pattern file 25 using different methods.

[0050] The control unit 57 controls the operation of activating either the first acquisition unit 53 or the second acquisition unit 55 to acquire the latest pattern file 25. The control unit 57 switches which of the first acquisition unit 53 or the second acquisition unit 55 to operate depending on the usage environment of the external network 8. Specifically, the control unit 57 refers to the setting information managed by the network setting unit 41 and activates either the first acquisition unit 53 or the second acquisition unit 55 based on that setting information. If the image forming apparatus 4 is permitted to connect to the external network 8, the control unit 57 activates the first acquisition unit 53. Conversely, if the image forming apparatus 4 is prohibited from connecting to the external network 8, the control unit 57 activates the second acquisition unit 55.

[0051] The first acquisition unit 53 can access the server device 9 via the external network 8 and directly downloads and acquires the pattern file 25 from the server device 9. Figure 4 illustrates the manner in which the first acquisition unit 53 acquires the pattern file 25. As shown in Figure 4, the first acquisition unit 53 accesses the server device 9 via the external network 8. The server device 9 has a storage unit 9a that stores the pattern file 25 used in the virus detection process, and exposes the storage area of ​​the storage unit 9a to the external network 8. Address information for accessing the storage unit 9a of the server device 9 is pre-registered in the first acquisition unit 53. Based on that address information, the first acquisition unit 53 accesses the server device 9 via the external network 8. The first acquisition unit 53 then determines whether or not the pattern file 25 held in the server device 9 has been updated. If the pattern file 25 in the server device 9 has been updated, the first acquisition unit 53 downloads and acquires the latest pattern file 25 from the server device 9, as shown by arrow D1.

[0052] The first acquisition unit 53 includes a difference detection unit 54. The difference detection unit 54 detects the difference between the pattern file 25 held in the image forming apparatus 4 and the latest pattern file 25 stored in the server device 9. For example, the difference detection unit 54 performs a version comparison between the pattern file 25 held in the image forming apparatus 4 and the pattern file 25 stored in the server device 9. Based on the results of the version comparison, the difference detection unit 54 detects the difference file necessary to update the pattern file 25 of the image forming apparatus 4 to the latest version. For example, the server device 9 publishes a list of difference files between different versions. The difference detection unit 54 detects the difference file by referring to that list. Alternatively, the difference detection unit 54 may notify the server device 9 of the version of the pattern file 25 held in the image forming apparatus 4 and detect the difference file based on the response from the server device 9.

[0053] When the first acquisition unit 53 downloads the pattern file 25 from the server device 9, it downloads the difference files detected by the difference detection unit 54. The amount of data in the difference files is less than the total amount of data in the pattern file 25. Therefore, the first acquisition unit 53 can efficiently acquire the latest pattern file 25 by downloading the difference files from the server device 9. In this way, the first acquisition unit 53 connects to the server device 9 via the external network 8 and acquires the pattern file 25 online from the server device 9.

[0054] The second acquisition unit 55 acquires the pattern file 25 within the environment of office 2 without connecting to the external network 8. Figure 5 is an example of how the second acquisition unit 55 acquires the pattern file 25. As shown in Figure 5, the information processing device 5 has a shared folder 5a that is accessible via the internal network 3. The information processing device 6 also has a shared folder 6a that is accessible via the internal network 3.

[0055] For example, the administrator of the image forming apparatus 4 operates the information processing devices 5 and 6, connects them to the external network 8, and accesses the server device 9. The administrator then pre-saves the latest pattern file 25, which is held in the server device 9, into the shared folders 5a and 6a of the information processing devices 5 and 6. At this time, the information processing devices 5 and 6 retrieve the encrypted pattern file 25 from the server device 9 and save it to the shared folders 5a and 6a. By encrypting the pattern file 25 saved in the shared folders 5a and 6a, unauthorized tampering with the pattern file 25 can be prevented.

[0056] Alternatively, a pattern file acquisition program may be installed on the information processing devices 5 and 6, and a configuration may be adopted in which the information processing devices 5 and 6 automatically access the server device 9 periodically. In this case, the information processing devices 5 and 6 can automatically download the latest pattern file 25 from the server device 9 and automatically save it to the shared folders 5a and 6a.

[0057] The second acquisition unit 55 accesses one of the shared folders 5a and 6a via the internal network 3. The addresses (paths) of the shared folders 5a and 6a that the second acquisition unit 55 accesses are pre-configured in the second acquisition unit 55. For example, if the shared folder 5a of the information processing device 5 is set as the access destination, the second acquisition unit 55 accesses the shared folder 5a via the internal network 3 and determines whether or not the pattern file 25 is stored in the shared folder 5a. If the pattern file 25 is stored in the shared folder 5a, the second acquisition unit 55 downloads and acquires the pattern file 25 from the shared folder 5a of the information processing device 5, as shown by arrow D2. Also, if the shared folder 6a of the information processing device 6 is set as the access destination, the second acquisition unit 55 downloads and acquires the pattern file 25 from the shared folder 6a of the information processing device 6, as shown by arrow D3.

[0058] Furthermore, if a storage device 15 is attached to the connection interface 14, the second acquisition unit 55 can also acquire the pattern file 25 from that storage device 15. That is, the second acquisition unit 55 determines whether or not the pattern file 25 is stored in the storage area 15a of the storage device 15. If the pattern file 25 is stored in the storage area 15a, the second acquisition unit 55 downloads and acquires the pattern file 25 from the storage device 15, as shown by arrow D4.

[0059] In this way, the second acquisition unit 55 acquires the pattern file 25 from a device other than the server device 9 without connecting to the server device 9. This type of acquisition is called offline acquisition.

[0060] The pattern file 25 acquired by the second acquisition unit 55 is encrypted to prevent tampering, as described above. Therefore, the second acquisition unit 55 is equipped with a decryption processing unit 56. The decryption processing unit 56 decrypts the pattern file 25 acquired from the information processing devices 5, 6 or the storage device 15. Through the decryption process by the decryption processing unit 56, the pattern file 25 is restored to an electronic file that can be used for virus detection processing.

[0061] The control unit 57 selectively activates either the first acquisition unit 53 or the second acquisition unit 55 based on the network settings made by the network setting unit 41. In other words, the control unit 57 controls the system so that the latest pattern file 25 can be properly acquired even if the usage environment of the external network 8 is different.

[0062] The file update unit 58 functions when the pattern file 25 is acquired by the first acquisition unit 53 or the second acquisition unit 55. The file update unit 58 updates the pattern file 25 used by the virus detection unit 51 when performing virus detection processing with the pattern file 25 acquired by the first acquisition unit 53 or the second acquisition unit 55. As a result of the update by the file update unit 58, the virus detection unit 51 is able to perform virus detection processing based on the latest pattern file 25.

[0063] Figure 6 shows an example of the update process performed by the file update unit 58. Figure 6 illustrates a state in which the file reading unit 52 of the virus detection unit 51 reads the pattern file 25 from the first storage area 31 and uses it for virus detection processing. In this case, the file update unit 58 updates the pattern file 25 stored in the second storage area 32 with the pattern file 25 acquired by the first acquisition unit 53 or the second acquisition unit 55.

[0064] When the first acquisition unit 53 acquires the pattern file 25, that pattern file 25 is a differential file. Therefore, the file update unit 58 adds the differential file acquired by the first acquisition unit 53 to the pattern file 25 in the second storage area 32. As a result, the pattern file 25 in the second storage area 32 becomes the latest pattern file 25.

[0065] Furthermore, when the pattern file 25 is acquired by the second acquisition unit 55, that pattern file 25 contains all files, not just differential files. Therefore, the file update unit 58 updates the entire pattern file 25 stored in the second storage area 32 by replacing it with the pattern file 25 acquired by the second acquisition unit 55. As a result, the pattern file 25 in the second storage area 32 is overwritten and updated with the latest pattern file 25.

[0066] Figure 7 shows another example of the update process performed by the file update unit 58. Figure 7 illustrates a state in which the file reading unit 52 of the virus detection unit 51 reads the pattern file 25 from the second storage area 32 and uses it for the virus detection process. In this case, the file update unit 58 updates the pattern file 25 stored in the first storage area 31 with the pattern file 25 acquired by the first acquisition unit 53 or the second acquisition unit 55.

[0067] When the first acquisition unit 53 acquires the pattern file 25, that pattern file 25 is a differential file. In this case, the file update unit 58 adds the differential file acquired by the first acquisition unit 53 to the pattern file 25 in the first storage area 31. As a result, the pattern file 25 in the first storage area 31 becomes the latest pattern file 25.

[0068] Furthermore, when the pattern file 25 is acquired by the second acquisition unit 55, that pattern file 25 contains all files, not just differential files. Therefore, the file update unit 58 updates the entire pattern file 25 stored in the first storage area 31 by replacing it with the pattern file 25 acquired by the second acquisition unit 55. As a result, the pattern file 25 in the first storage area 31 is overwritten and updated with the latest pattern file 25.

[0069] When the pattern file 25 in either the first storage area 31 or the second storage area 32 is updated as described above, the file update unit 58 instructs the file read unit 52 to change the storage area. As a result, the file read unit 52 changes the storage area when it reads the pattern file 25 next time. Alternatively, if the file read unit 52 receives a change instruction from the file update unit 58, it may immediately change the storage area and read the pattern file 25.

[0070] The virus detection application 50, configured as described above, is automatically started when power is supplied to the image forming apparatus 4 and resides in the control unit 20. Therefore, when the image forming apparatus 4 receives data via the internal network 3, the virus detection application 50 can perform virus detection processing on the received data. Also, when the image forming apparatus 4 transmits data via the internal network 3, the virus detection application 50 can perform virus detection processing on the transmitted data. In other words, the virus detection application 50, which resides in the control unit 20, performs virus detection processing in conjunction with the execution of jobs by the image forming apparatus 4.

[0071] The virus detection application 50 acquires the latest pattern file 25 at predetermined times. Then, the virus detection application 50 updates the pattern file 25 used for virus detection processing to the latest pattern file 25 at times when no jobs are being executed in the image forming apparatus 4. Timings when no jobs are being executed in the image forming apparatus 4 include, for example, immediately after the image forming apparatus 4 is started up, when it transitions from normal power supply mode to power saving mode, and when it returns from power saving mode to normal power supply mode. By updating the pattern file 25 at times when no jobs are being executed, the virus detection application 50 can update the pattern file 25 without affecting the virus detection processing. The following describes the specific processing procedure by such a virus detection application 50.

[0072] Figures 8 to 13 are flowcharts illustrating an example of the processing procedure for updating the pattern file 25 by the virus detection application 50. The virus detection application 50 is started when the power to the image forming apparatus 4 is turned on and begins processing based on the flowchart in Figure 8.

[0073] When the virus detection application 50 is started in the control unit 20 of the image forming apparatus 4, it executes a file acquisition process (step S10). The file acquisition process includes processes such as acquiring a pattern file 25 from the storage device 15 based on administrator operations in administrator setting mode, and acquiring a pattern file 25 based on network settings. Details of the file acquisition process (step S10) will be described later.

[0074] When the virus detection application 50 starts up, it performs a file acquisition process (step S10) and then determines whether the update flag has been set by that file acquisition process (step S10) (step S11). The update flag is information indicating that the latest pattern file 25 has been acquired. If the update flag is set (YES in step S11), the virus detection application 50 executes the file update process (step S12). No jobs are executed immediately after the image forming apparatus 4 starts up. Therefore, if the latest pattern file 25 is acquired immediately after startup, the virus detection application 50 executes the file update process (step S12) as is. If the update flag has not been set by the file acquisition process (step S10) (NO in step S11), the process in step S12 is skipped. Details of the file update process (step S12) will be described later.

[0075] Subsequently, the virus detection application 50 determines whether a predetermined time has elapsed (step S13). That is, the virus detection application 50 determines whether a predetermined time has elapsed since the previous file acquisition process (steps S10, S14). If the predetermined time has elapsed (YES in step S13), the virus detection application 50 executes the file acquisition process again (step S14). If the predetermined time has not elapsed (NO in step S13), the process in step S14 is skipped.

[0076] Next, the virus detection application 50 determines whether or not it is time for the image forming apparatus 4 to recover from power saving mode (step S15). If it is time to recover from power saving mode (YES in step S15), the virus detection application 50 determines whether or not the update flag is set (step S16). If the update flag is set (YES in step S16), the virus detection application 50 executes the file update process (step S17). In other words, the virus detection application 50 executes the file update process while the recovery process by the power control unit 45 is being performed. If it is not time to recover from power saving mode (NO in step S15), steps S16 and S17 are skipped. Also, if the update flag is not set (NO in step S16), step S17 is skipped.

[0077] Next, the virus detection application 50 determines whether or not it is time for the image forming apparatus 4 to switch to power saving mode (step S18). If it is time to switch to power saving mode (YES in step S18), the virus detection application 50 determines whether or not the update flag is set (step S19). If the update flag is set (YES in step S19), the virus detection application 50 executes the file update process (step S20). In other words, the virus detection application 50 executes the file update process while the power control unit 45 is performing the process of switching to power saving mode. If it is not time to switch to power saving mode (NO in step S18), steps S19 and S20 are skipped. Also, if the update flag is not set (NO in step S19), step S20 is skipped.

[0078] Next, the virus detection application 50 determines whether or not the shutdown of the image forming apparatus 4 has started (step S21). If the shutdown has not started (NO in step S21), the virus detection application 50 returns to step S13. In this case, the virus detection application 50 repeatedly executes the processes from step S13 onward. On the other hand, if the shutdown has started (YES in step S21), the virus detection application 50 terminates its processing.

[0079] Figure 9 is a flowchart showing an example of a detailed processing procedure for the file acquisition process (steps S10, S14). When the virus detection application 50 starts the file acquisition process (steps S10, S14), it determines whether the current operating mode is administrator mode or not (step S30).

[0080] If the system is in administrator mode (YES in step S30), the virus detection application 50 determines whether a storage device 15 is connected to the connection interface 14 (step S31). If the storage device 15 is connected (YES in step S31), the virus detection application 50 determines whether there has been an instruction to obtain the pattern file 25 from the storage device 15 (step S32). In other words, the virus detection application 50 determines whether it has received an instruction from the administrator in administrator mode. If it has received an instruction from the administrator (YES in step S32), the virus detection application 50 checks whether the pattern file 25 is stored in the storage device 15 (step S33). If the pattern file 25 is stored in the storage device 15 (YES in step S33), the virus detection application 50 downloads and obtains the pattern file 25 from the storage device 15 (step S34).

[0081] The pattern file 25 stored in the memory device 15 is encrypted. Therefore, the virus detection application 50 decrypts the acquired pattern file 25 and restores the pattern file 25 that can be used in the virus detection process (step S35). After that, the virus detection application 50 performs a file update process (step S36).

[0082] On the other hand, if the system is not in administrator mode (NO in step S30), the virus detection application 50 proceeds to step S37. Also, if the storage device 15 is not connected (NO in step S31), the virus detection application 50 proceeds to step S37. Furthermore, if the system has not received instructions from the administrator (NO in step S32), the virus detection application 50 proceeds to step S37. In addition, if the pattern file 25 is not stored in the storage device 15 (NO in step S33), the virus detection application 50 proceeds to step S37.

[0083] The virus detection application 50 checks the network settings (step S37). The virus detection application 50 then determines whether it is possible to connect to the external network 8 and obtain the pattern file 25 online (step S38). If online acquisition is possible (YES in step S38), the virus detection application 50 executes the online acquisition process (step S39). That is, the virus detection application 50 accesses the server device 9 via the external network 8 and starts the process of obtaining the pattern file 25 from the server device 9. Details of this online acquisition process (step S39) will be described later.

[0084] Furthermore, if online acquisition of the pattern file 25 is impossible (NO in step S38), the virus detection application 50 performs an offline acquisition process (step S40). That is, the virus detection application 50 starts the process of acquiring the pattern file 25 without accessing the server device 9. Details of this offline acquisition process (step S40) will be described later.

[0085] Next, Figures 10 and 11 are flowcharts showing an example of a detailed processing procedure for the file update process (steps S17, S20, S36). This file update process is performed after the pattern file 25 has been acquired. When the virus detection application 50 starts the file update process, it determines whether or not the pattern file 25 has been acquired online, as shown in Figure 10 (step S50). If the pattern file 25 is downloaded from the server device 9 via the external network 8, the virus detection application 50 determines that it was acquired online. If the pattern file is downloaded from a device other than the server device 9, the virus detection application 50 determines that it was acquired offline, not online.

[0086] If the pattern file 25 is obtained online (YES in step S50), the virus detection application 50 obtains the pattern file 25 as a differential file. In this case, the virus detection application 50 checks the storage area of ​​the pattern file 25 currently being used by the virus detection unit 51 (step S51). That is, the virus detection application 50 checks whether the pattern file 25 is being read from the first storage area 31 or the second storage area 32. The virus detection application 50 then determines whether the pattern file 25 in the first storage area 31 is currently being used by the virus detection unit 51 (step S52).

[0087] If the pattern file 25 in the first storage area 31 is in use (YES in step S52), the virus detection application 50 updates the pattern file 25 in the second storage area 32 differentially (step S53). That is, the virus detection application 50 updates the pattern file 25 in the second storage area 32 by adding the differential file of the pattern file 25 obtained online from the server device 9. As a result, the pattern file 25 in the second storage area 32 is updated to the latest pattern file 25. Subsequently, the virus detection application 50 changes the area to be read by the virus detection unit 51 from the first storage area 31 to the second storage area 32 (step S54). As a result, the virus detection unit 51 reads the latest pattern file 25 from the second storage area 32 and performs the virus detection process.

[0088] In response to this, if the pattern file 25 in the second storage area 32 is in use (NO in step S52), the virus detection application 50 updates the pattern file 25 in the first storage area 31 differentially (step S55). That is, the virus detection application 50 updates the pattern file 25 in the first storage area 31 by adding the differential file of the pattern file 25 obtained online from the server device 9. As a result, the pattern file 25 in the first storage area 31 is updated to the latest pattern file 25. Subsequently, the virus detection application 50 changes the area to be read by the virus detection unit 51 from the second storage area 32 to the first storage area 31 (step S56). As a result, the virus detection unit 51 reads the latest pattern file 25 from the first storage area 31 and executes the virus detection process.

[0089] Subsequently, if the update flag is set, the virus detection application 50 resets the update flag (step S57). Furthermore, it is preferable that the virus detection application 50 updates the pattern files 25 in the storage area that have not been updated to the latest pattern file 25 after the virus detection unit 51 has read the latest pattern file 25.

[0090] On the other hand, if the pattern file 25 is acquired offline (NO in step S50), the virus detection application 50 proceeds to the flowchart in Figure 11. The virus detection application 50 checks the storage area of ​​the pattern file 25 currently being used by the virus detection unit 51 (step S61). That is, the virus detection application 50 checks whether the pattern file 25 is being read from either the first storage area 31 or the second storage area 32. The virus detection application 50 then determines whether the pattern file 25 in the first storage area 31 is currently being used by the virus detection unit 51 (step S62).

[0091] If the pattern file 25 in the first storage area 31 is in use (YES in step S62), the virus detection application 50 replaces and updates the entire pattern file 25 in the second storage area 32 (step S63). In the case of offline acquisition, the virus detection application 50 has acquired all files of the latest pattern file 25. Therefore, the virus detection application 50 updates the second storage area 32 by replacing all files of the pattern file 25 in the second storage area 32 with all files of the pattern file 25 acquired offline. As a result, the pattern file 25 in the second storage area 32 is updated to the latest pattern file 25. Subsequently, the virus detection application 50 changes the area to be read by the virus detection unit 51 from the first storage area 31 to the second storage area 32 (step S64). As a result, the virus detection unit 51 reads the latest pattern file 25 from the second storage area 32 and performs the virus detection process. In this case as well, it is preferable that the virus detection application 50 updates the pattern files 25 in the storage area that have not been updated to the latest pattern file 25 after the virus detection unit 51 has read the latest pattern file 25.

[0092] In contrast, if the pattern file 25 in the second storage area 32 is in use (NO in step S62), the virus detection application 50 replaces and updates the entire pattern file 25 in the first storage area 31 (step S65). That is, the virus detection application 50 updates the first storage area 31 by replacing all the files in the pattern file 25 in the first storage area 31 with all the files in the pattern file 25 acquired offline. As a result, the pattern file 25 in the first storage area 31 is updated to the latest pattern file 25. Next, the virus detection application 50 changes the area to be read by the virus detection unit 51 from the second storage area 32 to the first storage area 31 (step S66). As a result, the virus detection unit 51 reads the latest pattern file 25 from the first storage area 31 and performs the virus detection process. In this case as well, it is preferable that the virus detection application 50 updates the pattern files 25 in the storage areas that have not been updated to the latest pattern file 25 after the virus detection unit 51 has read the latest pattern file 25.

[0093] Next, Figure 12 is a flowchart showing an example of a detailed processing procedure for the online acquisition process (step S39). When the virus detection application 50 starts the online acquisition process, it accesses the server device 9 via the external network 8 (step S70). The virus detection application 50 checks the version of the pattern file 25 published on the server device 9 (step S71). Based on the version check, the virus detection application 50 determines whether or not the pattern file 25 on the server device 9 has been updated (step S72). If the pattern file 25 on the server device 9 has not been updated (NO in step S72), the virus detection application 50 terminates the online acquisition process without acquiring the pattern file 25.

[0094] In response to this, if the pattern file 25 of the server device 9 has been updated (YES in step S72), the virus detection application 50 detects the difference file to be obtained from the server device 9 (step S73). That is, the virus detection application 50 detects the difference file between the pattern file 25 of the image forming apparatus 4 and the pattern file 25 of the server device 9. The virus detection application 50 then downloads the difference file for the update from the server device 9 (step S74). If the difference file is successfully obtained from the server device 9, the virus detection application 50 sets an update flag (step S75). This completes the online acquisition process.

[0095] Next, Figure 13 is a flowchart showing an example of a detailed processing procedure for the offline acquisition process (step S40). When the virus detection application 50 starts the offline acquisition process, it accesses the pre-specified shared folders 5a and 6a on the internal network 3 (step S80). The virus detection application 50 determines whether or not the pattern file 25 is stored in the shared folders 5a and 6a (step S81). If the pattern file 25 is not stored in the shared folders 5a and 6a (NO in step S1), the offline acquisition process ends.

[0096] If the pattern file 25 is stored in shared folders 5a and 6a (YES in step S81), the virus detection application 50 checks the version of the pattern file 25 in shared folders 5a and 6a (step S82). Based on the version check, the virus detection application 50 determines whether the pattern file 25 in shared folders 5a and 6a has been updated (step S83). If the pattern file 25 in shared folders 5a and 6a has not been updated (NO in step S83), the offline acquisition process ends.

[0097] In response to this, if the pattern files 25 in shared folders 5a and 6a have been updated (YES in step S83), the virus detection application 50 downloads and obtains the entire pattern files 25 from shared folders 5a and 6a (step S84). At this time, the pattern files 25 to be obtained are encrypted. Therefore, once the virus detection application 50 obtains the pattern files 25, it performs a decryption process to restore the pattern files 25 that can be used in the virus detection process (step S85). Once the decryption process of the pattern files 25 is complete, the virus detection application 50 sets an update flag (step S86). This completes the offline acquisition process.

[0098] As described above, the virus detection application 50 switches between online and offline acquisition of the pattern file 25 depending on the network settings of the image forming apparatus 4. Furthermore, if a storage device 15 is connected to the image forming apparatus 4, the virus detection application 50 can also download the pattern file 25 from that storage device 15. Therefore, even in cases where the image forming apparatus 4 is not connected to an external network 8 such as the internet, the virus detection application 50 can obtain the latest pattern file 25. Consequently, the virus detection application 50 can detect the latest viruses by performing virus detection processing using the latest pattern file 25.

[0099] As described above, the image forming apparatus 4 of this embodiment includes a first acquisition unit 53, a second acquisition unit 55, and a control unit 57. The first acquisition unit 53 downloads and acquires the pattern file 25 used in the virus detection process from an external network 8. The second acquisition unit 55 downloads and acquires the pattern file 25 from an internal network 3 or a connected storage device 15. The control unit 57 then switches which of the first acquisition unit 53 and the second acquisition unit 55 to operate depending on the usage environment of the external network 8 of the image forming apparatus 4.

[0100] The image forming apparatus 4, having this configuration, can acquire the latest pattern file 25 from the external network 8 by operating the first acquisition unit 53 if it is able to connect to the external network 8. Furthermore, if it is not possible to connect to the external network 8, the image forming apparatus 4 can acquire the latest pattern file 25 from the internal network 3 or a connected storage device 15 by operating the second acquisition unit 55. Therefore, even in environments where it cannot connect to an external network 8 such as the internet, the image forming apparatus 4 can appropriately update the pattern file 25 used in virus detection processing.

[0101] As shown in Figure 1, multiple image forming machines 4 may be installed in Office 2. In that case, the same network settings will be applied to the multiple image forming machines 4. If each image forming machine 4 is connectable to the external network 8, each image forming machine 4 can obtain the latest pattern file 25 from the external network 8 by individually accessing the server device 9 via the external network 8.

[0102] On the other hand, if each image forming apparatus 4 is prohibited from connecting to the external network 8, each image forming apparatus 4 cannot obtain the latest pattern file 25 from the server device 9 via the external network 8. In this case, each image forming apparatus 4 can download the pattern file 25 from the shared folders 5a and 6a of the information processing devices 5 and 6 connected to the internal network 3. Even if the versions of the pattern file 25 held by each image forming apparatus 4 are different, all files of the latest pattern file 25 are stored in the shared folders 5a and 6a. Therefore, each image forming apparatus 4 can update its own pattern file 25 to the latest version by obtaining the pattern file 25 from the shared folders 5a and 6a.

[0103] Preferred embodiments of the present invention have been described above. However, the present invention is not limited to those described in the above embodiments, and various modifications are applicable.

[0104] For example, the above embodiment primarily illustrates the case where the external network 8 is the internet. However, the external network 8 is not limited to the internet.

[0105] Furthermore, the above embodiment illustrates a case where the virus detection program 24 is pre-stored in the storage unit 30 of the image forming apparatus 4. However, the virus detection program 24 is not limited to one that is pre-installed in the image forming apparatus 4. That is, the virus detection program 24 described above can be traded independently. In this case, the virus detection program 24 may be provided recorded on a computer-readable recording medium such as a CD-ROM. Alternatively, the virus detection program 24 may be provided in a form that can be downloaded via a network such as the Internet. [Explanation of Symbols]

[0106] 1 Network System 3. Internal Network 4. Image forming apparatus 5,6 Information Processing Devices 5a,6a Shared folder 8. External Network 9 Server device 14. Connection Interface (Connection Port) 15. Storage Devices 23 Basic Program 24 Virus Detection Programs 25 pattern files 31 1st storage area 32 2nd storage area 40 Operation Control Unit 41 Network Configuration Section 42 Job Control Unit 43 Data receiving unit 44 Data transmission unit 45 Power Control Unit 50 Virus Detection Applications 51 Virus detection unit 52 File reading unit 53 First acquisition part 54 Difference detection unit 55 Second acquisition part 56 Decryption Processing Unit 57 Control Unit 58 File Update Section

Claims

1. A data receiving unit that receives data, A virus detection unit that performs virus detection processing on the data received by the data receiving unit, A first acquisition unit downloads and acquires pattern files used in the aforementioned virus detection process from an external network, A second acquisition unit downloads and acquires pattern files used in the aforementioned virus detection process from an internal network or a connected storage device. A control unit that switches which of the first acquisition unit and the second acquisition unit to operate according to the usage environment of the external network, An image forming apparatus characterized by comprising:

2. The image forming apparatus according to claim 1, characterized in that the control unit operates the first acquisition unit to acquire a pattern file when the usage environment allows connection to the external network.

3. The image forming apparatus according to claim 1, characterized in that the control unit operates the second acquisition unit to acquire a pattern file when the usage environment does not permit connection to the external network.

4. A difference detection unit that detects a difference file between a pattern file stored on an external server connected to the external network and a pattern file used in the virus detection process. Furthermore, The image forming apparatus according to claim 1, characterized in that when the first acquisition unit downloads a pattern file from the external network, it downloads the difference file detected by the difference detection unit.

5. The image forming apparatus according to claim 1, characterized in that the second acquisition unit downloads a pattern file from a shared folder of an information processing device connected to the internal network.

6. A connection part for connecting the aforementioned storage device, Furthermore, The image forming apparatus according to claim 1, characterized in that the second acquisition unit downloads a pattern file from the storage device connected to the connection unit.

7. The image forming apparatus according to claim 1, characterized in that the second acquisition unit downloads the entire pattern file used in the virus detection process.

8. The image forming apparatus according to claim 1, characterized in that the second acquisition unit downloads an encrypted pattern file and decrypts the encrypted pattern file after downloading.

9. A file update unit updates the pattern file used in the virus detection process with the pattern file acquired by the first acquisition unit or the second acquisition unit. Furthermore, The image forming apparatus according to claim 1, characterized in that the file update unit updates the pattern file at a time when no job is being executed.

10. The image forming apparatus according to claim 9, characterized in that the file update unit updates the pattern file when the device is started up after power is turned on.

11. The image forming apparatus according to claim 9, characterized in that the file update unit updates the pattern file when returning from power saving mode.

12. The image forming apparatus according to claim 9, characterized in that the file update unit updates the pattern file when transitioning from normal power supply mode to power saving mode.

13. The image forming apparatus according to claim 9, characterized in that the file update unit updates the pattern file immediately after the pattern file is downloaded from the storage device by the second acquisition unit.

14. A storage unit having a first storage area and a second storage area in which pattern files are stored, Furthermore, The virus detection unit reads a pattern file from one of the first and second storage areas and executes the virus detection process. The image forming apparatus according to claim 9, characterized in that the file update unit updates a pattern file stored in the other of the first and second storage areas.

15. The image forming apparatus according to claim 14, characterized in that, after updating the pattern file, the file update unit switches the target of pattern file reading by the virus detection unit from one storage area to the other storage area.

16. A data reception step where data is received, A virus detection step which performs virus detection processing on the data received in the data reception step, The first acquisition step involves downloading and obtaining a pattern file used in the aforementioned virus detection process from an external network, A second acquisition step involves downloading and obtaining a pattern file to be used in the aforementioned virus detection process from an internal network or a connected storage device. A control step that switches whether to operate the first acquisition step or the second acquisition step depending on the usage environment of the external network, A control method characterized by having the following features.

17. In an image forming apparatus, A data reception step where data is received, A virus detection step which performs virus detection processing on the data received in the data reception step, The first acquisition step involves downloading and obtaining a pattern file used in the aforementioned virus detection process from an external network, A second acquisition step involves downloading and obtaining a pattern file to be used in the aforementioned virus detection process from an internal network or a connected storage device. A control step that switches whether to operate the first acquisition step or the second acquisition step depending on the usage environment of the external network, A program characterized by causing the execution of a specific action.

Images