Information processing system, inspection method and program
The system addresses inefficient virus scanning in multi-system information processing by holding inspection results during connection switches, reducing inspection time and preventing new virus introduction.
Patent Information
- Application Number
- JP2021043494
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2021-03-17
- Publication Date
- 2025-05-20
- Estimated Expiration
- 2041-03-17
AI Technical Summary
In information processing systems, especially those with multiple connected systems sharing external storage devices, virus inspections are inefficient due to suspended connections causing repeated scanning of the same files, leading to increased inspection time and potential introduction of new viruses during connection switches.
An information processing system that includes an inspection mechanism to hold inspection results when connection destinations are switched, allowing resumed scanning based on stored results to avoid redundant file inspections and ensure no new viruses are introduced.
This approach reduces the time required for inspecting multiple files by avoiding redundant scanning and ensuring quick, efficient virus detection without introducing new threats.
Smart Images

Figure 0007679652000001 
Figure 0007679652000002 
Figure 0007679652000003
Abstract
Description
[Technical field]
[0001] The present invention relates to an information processing system and method for inspecting a plurality of files, and a program for causing a computer to execute the inspection. [Background technology]
[0002] An information processing system such as a PC (Personal Computer) inspects multiple files stored in a storage device at regular intervals to check whether each file is infected with a computer virus. When there are a huge number of files to be inspected, the inspection takes a considerable amount of time, and so the inspection may be interrupted midway to allow other processing to be performed.
[0003] Generally, computer virus scans are performed in ascending or descending order of the initial letters of file names, but scanning according to such a rule is inefficient because the same files are always given priority for scanning.
[0004] Therefore, a technology has been proposed in which the file search order is created randomly, the search status is recorded as in progress when the search is temporarily suspended, and when the search is resumed, the search order is set randomly and the files in the in progress state are searched for first (see, for example, Patent Document 1). Summary of the Invention [Problem to be solved by the invention]
[0005] Computer virus inspections are performed not only on storage devices provided in the information processing system, but also on external storage devices connected to the information processing system. Some information processing systems are composed of multiple systems, and each system shares an external storage device by switching the connection destination. In such information processing systems, inspection is temporarily suspended when the connection destination is switched, and no new viruses are introduced during the time until inspection is resumed when the connection destination is switched again.
[0006] In the above conventional technology, even in a system that guarantees that no new viruses are introduced between the suspension and resumption of such an inspection, there is a possibility that the second and subsequent files after the resumption will be inspected as if they were the same files as before the suspension, which increases the inspection time.
[0007] The present invention is devised to solve the above-mentioned problems, and has an object to provide a system, an apparatus, a method, and a program capable of shortening the time required to inspect a plurality of files. [Means for solving the problem]
[0008] According to the present invention, there is provided an information processing system for inspecting a plurality of files, comprising: An inspection means for inspecting a plurality of files stored in an external storage device connected to the information processing system; A switching means for switching the connection destination of the external storage device; Including, The switching means notifies the inspection means of the switched connection destination when the connection destination is switched; When the connection destination is switched from a predetermined connection destination to another connection destination by the switching means, the inspection means holds the results of the inspected file and suspends the inspection. The connection destination is Can be switched The destination notified by the switching means is the specified destination. If the file is not found, the file inspection is resumed based on the stored result. Effect of the Invention
[0009] According to the present invention, the time required to check a plurality of files can be reduced. [Brief description of the drawings]
[0010] [Figure 1] FIG. 1 is a diagram showing an example of the configuration of an image processing apparatus as an information processing system. [Diagram 2] FIG. 2 is a diagram showing an example of the hardware configuration of a main body controller. [Diagram 3] FIG. 2 is a diagram showing an example of the configuration of a main body section and an operation section included in the image processing apparatus. [Figure 4]FIG. 11 is a sequence diagram showing a process flow for switching the mount destination from the operation unit to the main body unit. [Diagram 5] FIG. 11 is a sequence diagram showing a process flow for switching the mount destination from the main body unit to the operation unit. [Figure 6] 10 is a flowchart showing the flow of another switching process from the operation unit to the main body unit. [Figure 7] 10 is a flowchart showing the flow of another switching process from the main body unit to the operation unit. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
[0011] Hereinafter, the present invention will be described with reference to embodiments, but the present invention is not limited to the embodiments described below.
[0012] 1 is a diagram showing an example of the configuration of an image processing device as an information processing system. Here, the information processing system is described as an image processing device, but is not limited to an image processing device as long as it is a device or system composed of multiple systems. Note that the multiple systems may be connected by cable in a wired manner, or may be connected wirelessly (including infrared), or multiple devices may be connected by wire or wirelessly.
[0013] Therefore, the information processing system may be a combination of two or more devices selected from the following: image processing devices, PJ (Projector), IWB (Interactive White Board: a white board with an electronic blackboard function that allows mutual communication), output devices such as digital signage, HUD (Head Up Display) devices, industrial machinery, imaging devices, sound collection devices, medical equipment, network home appliances, automobiles (Connected Cars), notebook PCs, mobile phones, smartphones, tablet terminals, game consoles, PDAs (Personal Digital Assistants), wearable PCs, desktop PCs, etc., or may be composed of two or more of the same devices.
[0014] The image processing device 10 will be described below as an MFP (Multi-Function Peripheral), with a plurality of systems being the main body unit 11 and the operation unit 12.
[0015] The main body 11 and the operation unit 12 are connected by a cable 13. The main body 11 includes a main body controller 20 that controls the operation of the main body 11, a scanner device 21 that reads documents, and a plotter device 22 that prints on paper.
[0016] The main body controller 20 controls, for example, drawing, communication with the scanner device 21 and plotter device 22, communication via the network 14, input from the operation unit 12, etc. The scanner device 21 converts a scanned document into image data and outputs it. The plotter device 22 executes printing based on the image data. The scanner device 21 and the plotter device 22 can include an image processing section that processes the image data, and can execute error diffusion, gamma conversion, etc. as image processing.
[0017] The main body controller 20 can communicate with a terminal device 15, such as a PC, connected to the network 14. The main body controller 20 can also communicate with a terminal device 17, such as a smartphone or a tablet terminal, via a wireless access point 16 connected to the network 14. In this example, the terminal device 17 uses WiFi (registered trademark) to communicate via the wireless access point 16 and the network 14, but it may also communicate directly with the main body 11 using short-range wireless such as Bluetooth (registered trademark). When communicating using short-range wireless, the main body 11 can be provided with a short-range communication circuit.
[0018] The network 14 may be any of a LAN (Local Area Network), a WAN (Wide Area Network), and the Internet, and may be a wired network or a wireless network. The network 14 may be a single network, or may be composed of two or more networks connected by relay devices such as a proxy server and a router.
[0019] The operation unit 12 includes an operation unit controller 23 that controls the operation of the operation unit 12, hard keys 24 operated by the user, a liquid crystal touch panel 25 that displays the screen and accepts operation input, and a removable external storage device 26. The external storage device 26 is a memory card, a USB (Universal Serial Bus) memory, or the like.
[0020] The hard keys 24 are a numeric keypad for receiving set values for image formation conditions such as density setting conditions, a start key for receiving a copy start instruction, etc. The liquid crystal touch panel 25 displays application switching keys, allowing the user to sequentially switch and select a document box function, copy function, printer function, facsimile function, etc. When the document box function is selected, the document box mode is selected, and when the copy function is selected, the copy mode is selected. When the printer function is selected, the printer mode is selected, and when the facsimile function is selected, the facsimile mode is selected. The document box function is a function that stores data read by the copy function, facsimile function, etc. in a storage device such as an HD (Hard Disk) of the main body 11, and allows the data to be used again.
[0021] The operation unit 12 has a connection port for allowing the external storage device 26 to be attached and detached, and the connection port is not limited to one type of external storage device, and two or more connection ports may be provided so as to allow two or more types of external storage devices to be attached and detached.
[0022] The external storage device 26 is shared by two systems (the main body unit 11 and the operation unit 12), and is used by switching the connection destination (mount destination) that is the source of use when each system uses it. Note that mounting means connecting and making it available.
[0023] When the operation unit 12 inspects a file stored in the external storage device 26, the external storage device 26 is mounted on the operation unit 12, and when printing of a file stored in the external storage device 26 is performed, the mount destination is switched from the operation unit 12 to the main body unit 11.
[0024] Switching of the mount destination is triggered, for example, by the user selecting one of the files stored in the external storage device 26 on the operation unit 12, setting the number of copies to be printed and the like using the hard keys 24, starting printing, and the operation unit 12 accepting the instruction. When the mount destination is switched to the main body unit 11, the main body unit 11 receives an instruction from the operation unit 12 and executes printing of the selected file.
[0025] Here, printing of a file stored in the external storage device 26 has been described, but this is not limited to printing, and may also be storing scanned image data in the external storage device 26. In the case of storing scanned image data, the mount destination is also switched when the operation unit 12 receives an instruction to read a document.
[0026] 2 is a diagram showing an example of a hardware configuration of the main body controller 20 included in the main body 11. The main body controller 20 has a CPU (Central Processing Unit) 30, a system memory (MEM-P) 31, a north bridge (NB) 32, a south bridge (SB) 33, an ASIC (Application Specific Integrated Circuit) 34, a local memory (MEM-C) 35 which is a storage unit, an HDD (Hard Disk Drive) controller 36, and an HD 37. The NB 32 and the ASIC 34 are connected by an AGP (Accelerated Graphics Port) bus 38.
[0027] The CPU 30 is a control unit that performs overall control of the image processing device 10. The NB 32 is a bridge for connecting the CPU 30 with the MEM-P31, the SB 33, and the AGP bus 38. The NB 32 has a memory controller that controls reading and writing to the MEM-P31, a PCI (Peripheral Component Interconnect) master, and an AGP target.
[0028] The MEM-P31 is composed of a ROM (Read Only Memory) 31a, which is a memory for storing programs and data that realize each function of the main body controller 20, and a RAM (Random Access Memory) 31b, which is used for developing programs and data, and as a drawing memory during memory printing, etc. The programs stored in the RAM 31b may be provided as files in an installable or executable format, recorded on a computer-readable recording medium such as a CD-ROM (Compact Disk Read Only Memory), a CD-R (Compact Disk Recordable), or a DVD (Digital Versatile Disc).
[0029] The SB33 is a bridge for connecting the NB32 with PCI devices and peripheral devices. The ASIC34 is an IC (Integrated Circuit) for image processing purposes having hardware elements for image processing, and plays the role of a bridge connecting the AGP bus 38, the PCI bus 39, the HDD controller 36, and the MEM-C35. The ASIC34 is composed of a PCI target and an AGP master, an arbiter (ARB) which is the core of the ASIC34, a memory controller which controls the MEM-C35, a plurality of DMACs (Direct Memory Access Controllers) which rotate image data by hardware logic, etc., and a PCI unit which transfers data between the scanner device 21 and the plotter device 22 via the PCI bus 39.
[0030] Incidentally, a USB interface and an IEEE1394 (Institute of Electrical and Electronics Engineers 1394) interface may be connected to the ASIC 34.
[0031] The MEM-C35 is a local memory used as an image buffer for copying and a code buffer. The HD37 is a storage for storing image data, font data used during printing, and forms. The HDD controller 36 controls the reading and writing of data from and to the HD37 under the control of the CPU30. The AGP bus 38 is a bus interface for a graphics accelerator card proposed to speed up graphic processing, and by directly accessing the MEM-P31 at high throughput, the graphics accelerator card can be made faster.
[0032] Here, the hardware configuration of the main body controller 20 has been described, but the operation unit controller 23 also includes similar hardware such as a CPU, HD, ROM, RAM, etc., and therefore a description of the hardware configuration of the operation unit controller 23 will be omitted.
[0033] 3 is a diagram showing an example of the configuration of the main body 11 and the operation unit 12 included in the image processing device 10. The main body 11 includes a main body controller 20, a scanner device 21, and a plotter device 22, and the main body controller 20 includes an OS (Operating System) 40, a communication control unit 41, a communication I / F 42, a print control unit 43, and a transmission control unit 44.
[0034] The communication control unit 41, the print control unit 43, and the transmission control unit 44 can be realized by one or more processing circuits. Here, the processing circuit in this specification includes a processor (CPU) programmed to execute each function by software, such as a processor implemented by an electronic circuit, an ASIC, a DSP (Digital Signal Processor), an FPGA (Field Programmable Gate Array), a conventional circuit module, and other devices designed to execute each function described above. The OS 40 is executed by one or more processing circuits.
[0035] The OS 40 is software that provides basic functions for controlling the operation of the main body controller 20. The communication control unit 41 controls data communication with the operation unit 12 and the terminal devices 15 and 17 via a communication I / F 42, which is a communication device such as USB, serial, wired LAN, wireless LAN, Bluetooth (registered trademark), or IrDA (Infrared Data Association). The communication control unit 41 transfers data received from the outside to the print control unit 43 or transmission control unit 44, and transfers data from the print control unit 43 or transmission control unit 44 to the outside.
[0036] The print control unit 43 controls the scanner device 21, plotter device 22, etc., and manages print jobs. The transmission control unit 44 manages transmission jobs such as email and folder delivery. Folder delivery is a function that sends data to a specified folder and accumulates it.
[0037] The operation unit 12 includes an operation unit controller 23, hard keys 24, an LCD touch panel 25, and an external memory device 26, and the operation unit controller 23 includes an OS 50, a communication control unit 51, a communication I / F 52, an operation information input / output unit 53, an external memory device control unit 54, an external memory device switching unit 55, and an application (hereinafter abbreviated as app) 56.
[0038] The communication control unit 51, the operation information input / output unit 53, the external storage device control unit 54, and the external storage device switching unit 55 can also be realized by one or more processing circuits. The OS 50 and the application 56 are executed by one or more processing circuits. Note that the application 56 is executed by one or more processing circuits to realize a predetermined function, but the following description will be given assuming that the application 56 executes the predetermined process.
[0039] The OS 50 is software that provides basic functions for controlling the operation of the operation unit controller 23. The communication control unit 51 controls data communication with the main body unit 11 via a communication I / F 52 that is a communication device such as USB, serial, wired LAN, wireless LAN, Bluetooth (registered trademark), IrDA, etc. The communication control unit 51 transfers data received from the outside to the operation information input / output unit 53, the external storage device control unit 54, the external storage device switching unit 55, and the application 56, and transfers data from the operation information input / output unit 53, the external storage device control unit 54, the external storage device switching unit 55, and the application 56 to the outside.
[0040] The operation information input / output unit 53 displays a screen to the user on the liquid crystal touch panel 25 and accepts user operations from the hard keys 24 and the liquid crystal touch panel 25. The operation information input / output unit 53 stores the correspondence between the functions of the main body unit 11 and the applications 56 of the operation unit 12 and the device to which the external storage device 26 is to be mounted. The operation information input / output unit 53 determines the device to which the external storage device 26 is to be mounted based on the stored correspondence in accordance with the function of the main body unit 11 or the applications 56 of the operation unit 12 activated from the operation unit 12.
[0041] The external storage device switching unit 55 switches the mount destination of the external storage device 26. For example, when the external storage device 26 is mounted on the main body 11 while the operation unit 12 is mounted, the mounting by the operation unit 12 is temporarily released, and the external storage device 26 is mounted as storage of the main body 11 via a USB or the like. Also, when the external storage device 26 is mounted on the main body 11 and the operation unit 12 is to be used as the source, the mounting by the main body 11 is temporarily released, and the external storage device 26 is mounted on the operation unit 12.
[0042] The application 56 is an application program such as an image viewing application that runs on the operation unit 12. The application 56 includes a media printing application, a security application, etc. Note that the functions included in the main body unit 11 or the operation unit 12 do not necessarily need to be implemented inside the main body unit 11 or the operation unit 12, and may be realized as functions available on the network 14.
[0043] The media print application is an application for printing files stored in the external storage device 26. The security application is an application for inspecting whether files stored in storage devices such as the HD 37 and the external storage device 26 are infected with computer viruses. The security application inspects not only computer viruses but also other malware such as Trojan horses, and performs inspections by virus scanning. Furthermore, if the security application performs inspections and finds files infected with viruses, it removes the viruses. Virus removal is achieved by deleting or isolating the infected files.
[0044] Here, the inspection of a plurality of files will be described as an inspection as to whether or not they are infected with a virus, but the present invention is not limited to this.
[0045] When the external storage device 26 is attached to the operation unit 12 and mounted on the operation unit 12, the files stored in the external storage device 26 become available. If a virus-infected file is present among the files stored in the external storage device 26, the infection may spread within the image processing device 10, and the infected file may be sent to the outside via e-mail, fax, or the like, spreading the virus. For this reason, when starting to use the device, the security app executes a virus scan to check whether there are any virus-infected files.
[0046] Since a virus scan is a time-consuming task, there are cases where the user selects one of the files stored in the external storage device 26 during the virus scan and prints the file. In this case, the virus scan is temporarily interrupted, the mount destination of the external storage device 26 is switched from the operation unit 12 to the main body unit 11, and the plotter device 22 of the main body unit 11 prints the selected file.
[0047] When printing of the file is completed, the mount destination of the external storage device 26 can be switched from the main body 11 to the operation unit 12, and the virus scan can be resumed.
[0048] During the time when the mount destination is switched from the operation unit 12 to the main body unit 11, and then switched from the main body unit 11 to the operation unit 12, the external storage device 26 remains attached to the operation unit 12, only the source of use is switched, and there is no access from the outside. Since the main body unit 11 executes a predetermined process such as printing in response to an instruction from the operation unit 12, the operation unit 12 is a system that the main body unit 11 can trust. Then, during the time from when the virus scan is interrupted to when it is resumed, the external storage device 26 to be scanned continues to be connected to the reliable operation unit 12, and it is guaranteed that no new viruses have been introduced.
[0049] In such a state, if the virus scan is restarted from the beginning, the checks up to the time of interruption will be wasted, which is inefficient. Also, the safety of the external storage device 26 cannot be quickly confirmed.
[0050] Therefore, when the scan is interrupted, the results of the scan up to that point are stored before the interruption, and when the scan is resumed, the virus scan is resumed based on the stored scan results, thereby shortening the time until the scan of the external storage device 26 is completed, and making it possible to confirm the safety of the external storage device 26 more quickly.
[0051] Specific processing will be described with reference to Fig. 4. This processing is executed by the external storage device switching unit 55 and the apps 56 of the operation unit controller 23. Here, the external storage device switching unit 55 will be described as a monitoring service 60 functioning as a switching means, and the apps 56 will be described as a security app 61 functioning as an inspection means, and apps other than the security app 61. In this example, the apps other than the security app 61 will be simply referred to as apps 62, and the external storage device 26 will be simply referred to as a medium. The apps 62 include apps such as a media printing app that function as an instruction means for instructing the main body unit 11 to perform a predetermined process such as printing.
[0052] 4 is a sequence diagram showing a process flow when switching the mount destination from the operation unit 12 to the main body unit 11. The security application 61 registers itself in advance in the monitoring service 60 as a destination to which inquiries should be made when switching the mount destination (S1). This allows the monitoring service 60 to receive an inquiry before executing the switching process when switching the mount destination.
[0053] When a medium is mounted on the operation unit 12, the monitoring service 60 notifies the security application 61 in the operation unit 12 that a medium has been mounted on the operation unit 12 (S2). The notification includes information on the mount destination as well as information on the type of the medium. The information on the type of the media is information classified according to the type of media, such as a memory card, a USB memory, etc.
[0054] If only one type of media can be attached to the operation unit 12, the notification may only include information about the mount destination.
[0055] The security application 61 receives the notification and starts a virus scan (S3). Based on the information on the type of media included in the notification, the security application 61 executes a virus scan of the corresponding type of media. The virus scan can be executed in ascending or descending order of the initial characters of the file names, or the files can be randomly rearranged and executed in the rearranged order. However, when rearranging the files randomly, it is necessary to store the randomly rearranged order. The virus scan can also be executed in ascending or descending order of the file update date and time, type, size, creation date and time, creator, etc. Note that the ascending order is from "a" to "n" when the initial characters of the file name are hiragana, from "A" to "Z" and "a" to "z" when the initial characters are alphabetic, and from "0" to "9" when the initial characters are numeric. The descending order is the opposite of the ascending order.
[0056] The monitoring service 60 notifies the security application 61 in the operation unit 12 as well as the application 62 and the like that the medium has been mounted on the operation unit 12 (S4).
[0057] For example, the application 62 receives a selection of one of the files stored in the medium from the user, and when an instruction is given to print the selected file, it requests the monitoring service 60 to switch the mount destination (S5). When the monitoring service 60 receives the mount destination switch request from the application 62, it makes an inquiry to the security application 61 that is registered as the inquiry destination when the mount destination is switched (S6). Unlike the above notification, the inquiry is made only to the registered inquiry destination. For this reason, "oneway" is written in FIG. 4. The inquiry is for inquiring whether it is OK to switch the mount destination, and includes information on the mount destination and information on the type of media. Here, the mount destination is the main unit 11, but the mount destination may be another system.
[0058] Upon receiving an inquiry from the monitoring service 60, the security application 61 suspends the currently running virus scan (S7). At this time, the security application 61 holds the scan results of the virus scans that have been executed up to that point. The scan results include information on the scanned file and information on whether the file is infected with a virus.
[0059] When starting a virus scan, the security application 61 can create a list that defines the scan order based on the information of the files stored in the external storage device 26, and execute a virus scan according to the list. The security application 61 can set a flag for each file in the list, and set a flag for a file that has been scanned, so that it is possible to know how far the scan has been completed. This makes it easy to know where to resume a scan when it is interrupted. Note that this method is just one example, and any method can be used as long as it can distinguish between scanned files and unscanned files, and can scan only unscanned files after resuming.
[0060] The security application 61 returns a response to the inquiry to the monitoring service 60 (S8). The response is a response indicating that the mount destination may be switched. Upon receiving the response from the security application 61, the monitoring service 60 switches the mount destination from the operation unit 12 to the main body unit 11 (S9). After switching the mount destination, the monitoring service 60 notifies the security application 61 and the application 62 that unmounting has been performed from the operation unit 12 (S10, S11). The notification includes information on the type of media, information on the mount destination, and the cause of unmounting. The cause of unmounting indicates the reason for unmounting. Examples of the reason include switching of the media mount destination, etc.
[0061] The monitoring service 60 notifies the security application 61 and the application 62 that the media has been mounted on the main unit 11 (S12, S13). The notification includes the media type information, the mount destination information, and the mount cause. The mount cause indicates the reason for mounting. Examples of the reason include switching of the media mount destination.
[0062] 5 is a sequence diagram showing a process flow when switching the mount destination from the main body unit 11 to the operation unit 12. In this example, switching of the mount destination from the main body unit 11 to the operation unit 12 will be described, but switching of the mount destination from another system to the operation unit 12 may also be possible.
[0063] The application 62 receives a notification that the process instructed to the main unit 11 has been executed, and requests the monitoring service 60 to switch the mount destination (S1). When the monitoring service 60 receives the mount destination switching request from the application 62, it makes an inquiry to the security application 61 that is registered as the inquiry destination when switching the mount destination (S2). The inquiry is made only to the registered inquiry destination. The inquiry asks whether it is OK to switch the mount destination, and includes information on the mount destination and information on the type of media.
[0064] The security application 61 returns a response to the inquiry from the monitoring service 60 (S3). The response is a response indicating that the mount destination may be switched. Upon receiving the response from the security application 61, the monitoring service 60 switches the mount destination from the main unit 11 to the operation unit 12 (S4). After switching the mount destination, the monitoring service 60 notifies the security application 61 and the application 62 that they have been unmounted from the main unit 11 (S5, S6). The notification includes the cause of unmounting, in addition to information on the type of media and information on the mount destination.
[0065] The monitoring service 60 notifies the security application 61 and the application 62 that the media has been mounted on the operation unit 12 (S7, S8). The notification includes the media type information, the mount destination information, and the mount cause.
[0066] The security application 61 receives a notification from the monitoring service 60 that the file has been mounted on the operation unit 12, and resumes the virus scan based on the scan results recorded during the temporary suspension (S9). Since the scan results include the results of scanned files, it is possible to perform a virus scan on files that have not yet been scanned.
[0067] The virus scan ends when it has been completed for all files stored on the medium. If a virus scan is set to be performed on a specific file on the medium, the virus scan ends when it has been completed for the specific file. The specific file may be a file in a specific folder.
[0068] A virus scan is also performed on a storage device provided in the image processing device 10, in addition to the external storage device 26. The storage device is a storage device such as a HD provided in the main body unit 11, and a storage device provided in the operation unit 12. Unlike the external storage device 26, a virus scan on a storage device provided in the image processing device 10 is always attached and can be performed during times when the image processing device 10 is not in use, such as at night, and therefore a lower priority is set for the virus scan process on the external storage device 26.
[0069] When there is a low-priority virus scan process and a high-priority virus scan process for the external storage device 26, the high-priority virus scan process will be executed, but it is inefficient if nothing is executed when the high-priority virus scan process is interrupted. Therefore, it is possible to execute the low-priority virus scan process during the time between when the high-priority virus scan process is interrupted and when it is resumed.
[0070] Another process when switching the mount destination will be described with reference to Fig. 6. Fig. 6 is a flowchart showing the flow of another switching process from the operation unit 12 to the main body unit 11. The security application 61 of S6 shown in Fig. 4 receives an inquiry from the monitoring service 60 and starts this process from step 100. In step 101, the security application 61 interrupts the virus scan process of the media (media scan).
[0071] In step 102, security application 61 checks whether there is a virus scan process (scan job) waiting. When there are multiple scan jobs, security application 61 has a function of queuing those jobs and executing scan jobs in order starting with the highest priority. Queuing refers to managing scan jobs using a queue. Note that a queue is a data structure that arranges scan jobs in the order in which they were input, and retrieves scan jobs that were input first in order. Here, it is checked whether there is a scan job with a low priority waiting.
[0072] If there is a scan job with a lower priority, the security application 61 proceeds to step 103, starts the waiting scan job, and in step 104, ends the switch.
[0073] On the other hand, if there is no scan job with a lower priority in step 102, the process goes to a scan standby state and proceeds to step 104, where the process ends. Incidentally, the process shown in Fig. 6 is a process when a media scan is executed and then interrupted, and therefore is a process when there is no job with a higher priority than the media scan.
[0074] Next, another switching process from the main body unit 11 to the operation unit 12 will be described with reference to Fig. 7. Upon receiving a notification that the security application 61 has mounted the operation unit 12 in S8 shown in Fig. 5, this process starts from step 200. In step 201, the security application 61 compares the priority of the ongoing job with that of the media scan based on preset priority information. The ongoing job is a job currently being executed by the security application 61, such as a scan job of another medium or a storage device included in the image processing device 10. The priority information is information indicating the priority associated with each job.
[0075] In step 202, the security application 61 judges whether the media scan has a higher priority as a result of the comparison. If it is judged to have a higher priority, the process proceeds to step 203, where the currently running job is interrupted. Then, in step 204, the security application 61 resumes the media scan, and in step 205, the switching is completed.
[0076] On the other hand, if it is determined in step 202 that the level is lower, the process proceeds to step 205, where the switching process ends. In this case, the security application 61 continues the job being executed, and resumes the media scan after the job being executed is completed.
[0077] As described above, according to the present invention, a plurality of files can be efficiently inspected, and the time required for inspecting the plurality of files can be reduced.
[0078] While one embodiment of the present invention has been described above, the present invention is not limited to the above-described embodiment, and may be modified within the scope of what a person skilled in the art can conceive, such as changing or deleting components of the present embodiment, or adding other components to the components of the present embodiment. In any aspect, as long as the effects of the present invention are achieved, the present invention is included in its scope. [Explanation of symbols]
[0079] 10...Image processing device 11...Main body 12...Operation unit 13…Cable 14…Network 15, 17...Terminal device 16...Wireless access point 20...Main unit controller 21. Scanner device 22...Plotter device 23...Operation controller 24...Hard key 25...LCD touch panel 26...External storage device 27...Connection I / F 30…CPU 31…MEM-P 31a…ROM 31b…RAM 32…NB 33…SB 34...ASIC 35…MEM-C 36…HDD controller 37…HD 38…AGP bus 39...PCI bus 40…OS 41...Communication control unit 42...Communication I / F 43...Print control unit 44...Transmission control unit 50…OS 51...Communication control unit 52…Communication I / F 53...Operation information input / output section 54...External storage device control unit 55…External storage device switching section 56…App 60…Monitoring services 61…Security app 62…App [Prior art documents] [Patent documents]
[0080] [Patent Document 1] Japanese Patent Publication No. 4622523
Claims
1. 1. An information processing system for inspecting a plurality of files, comprising: An inspection means for inspecting a plurality of files stored in an external storage device connected to the information processing system; A switching means for switching a connection destination of the external storage device; Including, The inspection means, when the connection destination is switched from a specified connection destination to another connection destination by the switching means, retains the results of the inspected file and interrupts the inspection, and when the connection destination is switched back to the specified connection destination by the switching means, resumes file inspection based on the retained results, and is capable of inspecting a plurality of storage devices, including the external storage device, connected to the information processing system in accordance with a preset priority, and interrupts the inspection of the external storage device and performs inspection of storage devices with a lower priority than the external storage device until the inspection is resumed.
2. The information processing system includes: a first system including the inspection means and the switching means; a second system connected to the first system and executing a predetermined process in response to an instruction from the first system; Including, the external storage device is connected to the first system; 2. The information processing system according to claim 1, wherein the switching means switches the connection destination from the first system to the second system in response to an instruction to execute the predetermined process using a file stored in the external storage device.
3. 3. The information processing system according to claim 2, wherein the switching means switches the connection destination from the second system to the first system in response to receiving a notification of completion of execution of the predetermined process from the second system.
4. the information processing system is an image processing apparatus including, as the first system, an operation unit that receives an operation from a user, and, as the second system, a main body unit that executes image processing in response to the received operation; the operation unit includes the inspection means, the switching means, an input / output means for receiving the operation, and an instruction means for instructing the main body to execute image processing, 4. The information processing system according to claim 2, wherein the inspection means executes a virus scan process for the external storage device.
5. 1. A method for inspecting a plurality of files by an information processing system, comprising: A step in which an inspection means included in the information processing system inspects a plurality of files stored in an external storage device connected to the information processing system; a step of storing a result of the file inspected by the inspecting means in response to an instruction to execute a predetermined process using the file stored in the external storage device; A step of switching from a first connection destination to a second connection destination by a switching means included in the information processing system in order to execute the predetermined process; in response to receiving a notification of completion of the execution of the predetermined process, the switching means switches from the second connection destination to the first connection destination; the inspection means restarting inspection of the file based on the stored result; Including, the inspection means is capable of inspecting a plurality of storage devices, including the external storage device, connected to the information processing system in accordance with a preset priority order; The method comprises:
13. A testing method comprising the steps of: suspending a test on the external storage device, and, until the test is resumed, executing a test on a storage device having a lower priority than the external storage device.
6. A program for causing a computer to execute a process for inspecting a plurality of files, causing the computer to function as an inspection means, and inspecting a plurality of files stored in an external storage device connected to the computer by the inspection means; a step of storing a result of the file inspected by the inspecting means in response to an instruction to execute a predetermined process using the file stored in the external storage device; causing the computer to function as a switching unit and switching from a first connection destination to a second connection destination by the switching unit to execute the predetermined process; switching from the second connection destination to the first connection destination by the switching means in response to receiving a notification of completion of the execution of the predetermined process; restarting the inspection of the file based on the results held by the inspection means; Run the command, the inspection means is capable of inspecting a plurality of storage devices, including the external storage device, connected to the computer in accordance with a preset priority order; The program is a program for causing a user to execute a step of interrupting a check on the external storage device and, until the check is resumed, executing a check on a storage device that has a lower priority than the external storage device.
Citation Information
Patent Citations
Information processing device, method and program
JP2017215690A
Image processing apparatus, control method thereof, and program
JP2019213154A
Embedded device, virus scan program execution method, and program
JP2020009066A
Image processing device, virus check method and virus check program
JP2020090057A
File search program and file search method
JP4622523B2