Information processing apparatus

Abstract

To provide an image forming device that is an information processing device allowing an administrator or the like of the information processing device to determine whether unauthorized use has been performed and details of it and examine countermeasures by checking later how the information processing apparatus has been used before an initially set administrator password is modified after initial start; and also provide a control method of the same.SOLUTION: An image forming device includes: an operation unit: a storage unit which stores in advance an initial password which is an initial value of an administrator password; a log recording unit which records contents of operation input through the operation unit, as operation history information, on the storage unit; a password input monitoring unit which checks whether the administrator password has been input; a password modification unit which modifies the administrator password when an input of a password different from the initial password is found, and stores the input password as a new administrator password; and a log presentation unit which presents the operation history information when the administrator password is modified.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, and more particularly to an information processing apparatus having a function of authenticating an administrator using a password.

Background Art

[0002] Conventionally, in information processing apparatuses such as personal computers, mobile terminals, and image forming apparatuses, in order to allow only pre-registered users or administrators to use the information processing apparatus, there are those having an authentication function using a user-specific ID and password.

[0003] For example, Patent Document 1 describes a password setting method for performing user authentication between a device used by a user connected via a network and a communication terminal. When the user's password is already set in the device, the user inputs the password on the communication terminal to perform user authentication. When the user's password is not set in the device, the user is requested to set a password, and when the passwords input twice by the user on the communication terminal match, the password is stored in the device, and after the user authentication is successful, an application screen is output to prevent the use of the device without setting a password.

[0004] There is also a device that installs an information processing apparatus and requests the administrator of the information processing apparatus to change the administrator password that is initially set in the device at the first startup of the information processing apparatus. In a device that requests the change of the administrator password, in order to prevent unauthorized use by malicious persons, there are some devices in which functions that can be used in the information processing apparatus cannot be executed until the administrator password is changed.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

SUMMARY OF THE INVENTION

PROBLEMS TO BE SOLVED BY THE INVENTION

[0006] However, in an information processing apparatus that requires changing a pre-set administrator password like a conventional information processing apparatus, due to various circumstances, there may be a case where the administrator is not present at the time of installation and the administrator password cannot be changed immediately. Also, in a conventional information processing apparatus that requires changing the administrator password and completely prevents the use of the apparatus until this password is changed, unless the administrator of the information processing apparatus changes the administrator password, the initial setting operation by the installer at the time of installation and the input operation by a user who wants to use the information processing apparatus become impossible, which is very inconvenient.

[0007] On the other hand, if input operations by not only administrators but also general users who want to use the information processing apparatus are enabled after the information processing apparatus is started for the first time until the pre-set administrator password is changed, it is convenient for general users, but unauthorized use by malicious persons (for example, theft of stored information or intrusion of unauthorized software) becomes possible, which is not preferable in terms of security, and there may be a case where the administrator does not notice that unauthorized use has occurred.

[0008] Therefore, the present invention has been made in consideration of the above circumstances, and monitors the usage status of the information processing apparatus after the information processing apparatus is started for the first time until the initially set administrator password is changed, checks the usage status afterwards, enables the administrator of the information processing apparatus or the like to determine the presence and details of unauthorized use, etc., and provides an information processing apparatus capable of considering countermeasures in case of unauthorized use as an issue.

MEANS FOR SOLVING THE PROBLEMS

[0009] The present invention provides an information processing apparatus comprising: an operation unit; a storage unit that pre-stores an initial password which is the initial value of an administrator password; a log recording unit that records the operation content input using the operation unit in the storage unit as operation history information; a password input monitoring unit that checks whether an administrator password has been input; a password change unit that changes the administrator password and stores the input password as a new administrator password when it is confirmed by the password input monitoring unit that a password different from the initial password has been input; and a log presentation unit that presents the operation history information when the administrator password is changed by the password change unit.

[0010] Further, the operation history information recorded in the storage unit is characterized in that at least an operator, a date, and the operation content are stored in association with each other.

[0011] Further, the log recording unit records the operation content input using the operation unit in the storage unit as the operation history information from when the information processing apparatus is first started until the administrator password is changed to a password different from the initial password.

[0012] Further, the information processing apparatus further comprises a display unit, and when the information processing apparatus is started, if the administrator password remains unchanged from the initial password, a password change request screen for requesting to change the administrator password is displayed on the display unit.

[0013] Furthermore, it further includes a display unit and a password authentication unit that authenticates the input administrator password. When the password authentication unit confirms that the input administrator password matches the initial password while the administrator password remains unchanged from the initial password, an administrator information setting screen for setting information related to the administrator including the administrator password is displayed on the display unit. After that, if the administrator password is changed by the operation unit, the changed administrator password is stored in the storage unit as the changed password, and the changed password is used for the authentication of the administrator password performed by the password authentication unit.

[0014] Furthermore, it further includes a display unit for displaying information, and the log presentation unit is characterized by displaying the history information on the display unit.

[0015] Furthermore, it further includes an image output unit for printing information, and the log presentation unit is characterized by printing the operation history information on printing paper by the image output unit.

[0016] Furthermore, it further includes a communication unit for communicating information via a network, and the log presentation unit is characterized by transmitting the history information to another information processing device via the network by the communication unit.

[0017] The present invention also relates to a method for managing history information of an information processing apparatus, the information processing apparatus comprising an operation unit for a user of the information processing apparatus to input information, and a storage unit for storing in advance an initial password which is an initial value of an administrator password. The method includes a log recording step of recording the operation content input using the operation unit in the storage unit as operation history information, a password input monitoring step of checking whether an administrator password has been input, and a password change step of changing the administrator password and storing the input password as a new administrator password when it is confirmed in the password input monitoring step that a password different from the initial password has been input. The method further includes a log presentation step of presenting the operation history information when the administrator password is changed. The present invention provides a method for managing history information of an information processing apparatus, characterized by the above steps.

Effect of the Invention

[0018] According to the present invention, the operation content input using the operation unit is recorded in the storage unit as operation history information, and when the administrator password is changed by the password change unit, the operation history information is presented. Therefore, after starting the information processing apparatus for the first time and before changing the initially set administrator password, the usage status of the information processing apparatus is stored. The presented operation history information enables the administrator of the information processing apparatus or the like to retrospectively check the usage status of the information processing apparatus, determine the presence and content of unauthorized use or the like, and further consider countermeasures in case of unauthorized use.

Brief Description of the Drawings

[0019]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Mode for Carrying Out the Invention

[0020] Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that the present invention is not limited by the description of the following examples. Further, although the present invention is an information processing apparatus, there are various apparatuses such as a personal computer, a communication apparatus, a display apparatus, and an image forming apparatus as the information processing apparatus, and the following embodiments are applicable to any of these information processing apparatuses. In the following embodiments, among information processing apparatuses, an image forming apparatus that inputs a document in which information such as images, graphics, and characters is described and has functions such as printing will be described.

[0021] <Configuration of Image Forming Apparatus> FIG. 1 shows a configuration block diagram of an example of the image forming apparatus of the present invention. An image forming apparatus (hereinafter, also referred to as MFP: Multifunction Peripheral or multi-function machine) 1 is a device that processes image data, and is, for example, an electronic device equipped with functions such as a copying function, a printing function, a document reading (scanning) function, a document editing function, a document storage function, a document transmission (fax, FAX) function, and a communication function. In the following embodiments, the image forming apparatus 1 of the present invention will be described as particularly having a printing function and a document reading (scanning) function, but it may also be equipped with other functions.

[0022] In FIG. 1, the image forming apparatus (MFP) 1 of the present invention mainly includes a control unit 11, an operation unit 12, a display unit 13, an image processing unit 14, a communication unit 18, a log recording unit 21, a password input monitoring unit 22, a password authentication unit 23, a password change unit 24, a log presentation unit 25, and a storage unit 50. The image processing unit 14 mainly consists of an image input unit 15, an image forming unit 16, and an image output unit 17.

[0023] The control unit 11 is a part that controls the operations of each component such as the operation unit and the image processing unit, and is mainly realized by a microcomputer composed of a CPU, a ROM, a RAM, an I / O controller, a timer, etc. Based on the control program stored in advance in the ROM etc., the CPU organically operates various hardware to execute the image forming function, log recording function, etc. of the present invention.

[0024] Among the above components, the log recording unit 21, the password input monitoring unit 22, the password authentication unit 23, and the password change unit 24 are functional blocks in which the CPU executes respective processes based on a predetermined program.

[0025] The operation unit 12 is a part where the user of the image forming apparatus inputs information, and is an input device for performing a predetermined input operation to operate the image forming apparatus. For example, it is a part for inputting information such as characters and for selecting input of functions, and a keyboard, a mouse, a touch panel, etc. are used. Examples of keys operated by the user include an operation start key, a function selection key, and a setting key. The user can execute functions such as a copy function or an administrator setting function by, for example, operating a touch panel or inputting an operation to start a reading operation. In particular, in the administrator setting function, operations such as inputting a touch panel or a predetermined selection key are performed to change the administrator password, register users who use the image forming apparatus, and set connection information to a network.

[0026] The display unit 13 is a part that displays information, and displays information necessary for executing each function, the result of executing the function, etc. to notify the user. For example, an LCD, an organic EL display, etc. are used, and when a touch panel is used as the operation unit 12, the display unit 13 and the touch panel are arranged so as to overlap each other. On the display unit 13, for example, settings of setting items used for printing of the image forming apparatus, information necessary for executing a document reading function, etc., an operation screen of the selected function, a password input screen, an administrator information setting screen, etc. are displayed using characters, symbols, figures, images, icons, animations, videos, etc.

[0027] In particular, in this invention, as will be described later, when the information processing apparatus is started, if the administrator password remains the initial password and has not been changed, a password change request screen that requests changing the administrator password is displayed on the display unit 13.

[0028] The image processing unit 14 is a part that executes the image forming function, which is the main function of the image forming apparatus, and mainly includes an image input unit 15, an image forming unit 16, and an image output unit 17. Mainly, the image input unit 15 is a part that inputs predetermined image data, the image forming unit 16 is a part that converts the input image data into information that can be printed, etc., and the image output unit 17 is a part that outputs the formed print information, etc. to printing paper, etc.

[0029] The image input unit 15 is a part that inputs image data of a document on which an image, characters, graphics, etc. are described. For example, it is a part that reads a document placed on a document table or the like. As the image input unit 15, a scanner (reading device) that reads a document on which information is described is used. The image forming apparatus 1 includes a document placement table (document table) on which a document is placed and a document cover that holds down the document in order to read the document. Further, the image forming apparatus 1 may include an automatic document feeder (ADF: Automatic Document Feeder) that places a plurality of documents and automatically conveys and reads the plurality of documents one by one. In this case, a document on which an image or the like is described is read by a scanner, and the image data of the document is stored in the storage unit 50.

[0030] Also, there are various methods for inputting image information. For example, an interface for connecting an external storage medium such as a USB memory corresponds to the image input unit 15. An electronic data file such as image information to be input is stored in an external storage medium such as a USB memory. The USB memory or the like is connected to an input interface such as a USB terminal, and a predetermined input operation is performed by the operation unit 12. Thus, a desired electronic data file stored in the USB memory or the like may be read out and stored in the storage unit 50 as input image data.

[0031] When printing input image data on a recording medium, for example, the image forming unit 16 generally continuously performs each process of charging, exposure, development, transfer, cleaning, discharging, and fixing to form the input image data on the recording medium. In the development process, toner is supplied from a toner cartridge to a developing device, and an electrostatic latent image formed on the surface of the charged photosensitive drum is developed to form a toner image corresponding to the electrostatic latent image. The toner image formed on the surface of the photosensitive drum is transferred onto a recording medium by a transfer device, and then is fixed on the recording medium by being heated by a fixing device. In addition, the image forming unit 16 converts the input image data into information in a form that can be transferred or displayed.

[0032] The image output unit 17 is a part that outputs the formed input image data. For example, it corresponds to a printer that prints information such as the input image data, and prints the input image data of the read manuscript on a predetermined printing paper (paper medium). However, the output of the input image data is not limited to printing, and also includes storage of the input image data of the scanned manuscript, FAX transmission of the input image data of the scanned manuscript, and the like. For example, storing the input image data of the read manuscript in an external storage medium such as a USB memory, transmitting the input image data to other information processing devices or servers via a network such as the Internet, and classifying and storing it in a specific storage folder also correspond to image output.

[0033] The communication unit 18 is a part that communicates information via a network and is a part that performs data communication with other information processing devices. For example, it receives an electronic data file transferred from an information processing device such as a personal computer, a mobile terminal, or a server. In addition, the input image data generated by the image forming apparatus 1 of the present invention is transferred to an external storage device (such as a USB memory) connected to the image forming apparatus 1, or transmitted via a network to an information processing device such as a personal computer or a server owned by the user who input the manuscript.

[0034] As the network, any existing communication network such as a wide area communication network such as the Internet or a LAN can be used, and the communication form may use either wired communication or wireless communication. In addition, as will be described later, in order to have the administrator of the image forming apparatus confirm the presence or absence of unauthorized use or the like, the operation content (operation history information) stored in the storage unit 50 may be transmitted to an information processing device such as a personal computer owned by the administrator.

[0035] The log recording unit 21 is a part in the image forming apparatus that records the operation content input using the operation unit 12 as operation history information in the storage unit 50. For example, it records operation contents such as the operation of changing the administrator password by the administrator, user registration operation, function execution operations such as copy by the user, login operation, image data input operation, and image data transfer operation in the storage unit 50. The operation content is recorded in chronological order and associated with the name (user name) of the user who executed the operation and the date of execution of the operation, and sequentially recorded in the operation history information 51 as shown in FIG. 3 described later. Hereinafter, the operation history information 51 is also referred to as log information. Also, the operation content may be classified according to the person who performed the operation, the type of operation, etc. For example, it consists of an operation item indicating the classification and operation setting information corresponding to the actual operation included in the operation item.

[0036] For example, when the administrator of the image forming apparatus inputs the administrator's ID and password and logs in to the image forming apparatus on October 1, 2019, the information of user name: "administrator", date: "October 1, 2019", operation item of the operation content: "administrator setting", and operation setting information: "login (ID, password)" is associated and additionally stored in the operation history information.

[0037] Also, when user 01 registered in the image forming apparatus faxed to the phone number "06 - 1234 - 5678" of the recipient after logging in on February 3, 2020, the information of user name: "user 01", date: "February 3, 2020", operation item of the operation content: "user operation", and operation setting information: "FAX transmission (06 - 1234 - 5678)" is associated and additionally stored in the operation history information.

[0038] The recording of the operation content may record, for example, all the operation contents performed after the power of the image forming apparatus is turned on until the power is turned off. In addition, in the present invention, particularly to enable the determination of the presence or absence of unauthorized use at the initial installation of the image forming apparatus retrospectively, the log recording unit 21 preferably records all the operation details input using the operation unit 12 as operation history information 51 in the storage unit 50 from when the image forming apparatus is first activated until the administrator password is changed to a password different from the initial password. The initial password is the initial value of the administrator password described later, and is the administrator password (initial password KPW0) preset and stored in the storage unit 50 before the installation of the image forming apparatus.

[0039] The password input monitoring unit 22 is a part that checks whether the administrator password has been input. When the administrator password is input, the input password is stored as the input password (INPW) 54 described later. The confirmation of the input of the administrator password can be determined, for example, by an operation of displaying the administrator password input screen and checking whether information is input in the password input field while this screen is being displayed. The input administrator password (input password INPW) is compared with the initial password KPW0 or the like, and the administrator is authenticated.

[0040] The password authentication unit 23 is a part that authenticates the input administrator password. The initial password KPW0 is preset and stored as the administrator password. When the administrator password remains unchanged from the initial password KPW0, the password authentication unit 23 checks whether the input administrator password matches the initial password KPW0. Assume that the same password as the initial password KPW0 is stored in the change password KPW1 described later when the change process of the administrator password has not been performed.

[0041] In this case, in the authentication of the administrator password, it is checked whether the input administrator password (input password INPW) matches the change password KPW1. If the input password INPW and the changed password KPW1 match, it is determined that the authentication of the administrator password has succeeded. If the input password INPW and the changed password KPW1 do not match, it is determined that the authentication of the administrator password has failed.

[0042] On the other hand, when the administrator password change process is performed, a password different from the initial password KPW0 is stored in the changed password KPW1. After a regular administrator has performed the administrator password change process, if the regular administrator who changed the administrator password enters the same password as the changed password KPW1 as the input password INPW, the authentication of the administrator password succeeds. However, after the administrator password change process is performed, if an administrator or unauthorized user who is unaware that the administrator password has been changed enters the same password as the initial password KPW0 as the input password INPW, the authentication of the administrator password fails.

[0043] In the present invention, after the authentication of the administrator password succeeds, the administrator password is changed. For example, when the password authentication unit 23 confirms that the input administrator password INPW matches the initial password KPW0 while the administrator password remains the initial password KPW0 and has not been changed, an administrator information setting screen for setting information regarding the administrator including the administrator password is displayed on the display unit 13. Thereafter, when the administrator password is changed by the operation unit 12, the changed administrator password is stored in the storage unit 50 as the changed password KPW1. The changed password KPW1 is used for the authentication of the administrator password performed by the password authentication unit 23.

[0044] The password change unit 24 is the part that changes the administrator password. When the password input monitoring unit 22 confirms that a password different from the initial password has been input, the password change unit 24 changes the administrator password and stores the input password as the new administrator password. For example, on an administrator information setting screen for performing administrator settings as described later, when a new administrator password is input as one of the administrator information, the input new administrator password is stored in the change password KPW1. When such an operation to change the administrator password is performed, the operation details of changing this administrator password are additionally stored in the operation history information.

[0045] The log presentation unit 25 is a part that presents the operation history information stored in the storage unit 50. In particular, when the administrator password is changed by the password change unit 24, the operation history information is presented. There are various methods for presenting the operation history information. For example, as described later, the log presentation unit 25 presents the operation history information to the administrator by displaying the operation details recorded in the storage unit 50 on the display unit 13.

[0046] Also, the log presentation unit 25 may present the operation history information to the administrator by printing the operation details recorded in the storage unit 50 on printing paper by the image output unit 17. Alternatively, the log presentation unit 25 may present the operation history information to the administrator by transmitting the operation details recorded in the storage unit 50 through the communication unit 18 via a network to another information processing device (for example, transmitting to a personal computer owned by the administrator or transmitting to the administrator's email address).

[0047] The storage unit 50 is a part that stores information and programs necessary for executing each function of the image forming apparatus of this invention, and semiconductor memory elements such as ROM, RAM, and flash memory, storage devices such as HDD and SSD, and other storage media are used. The storage unit 50 stores, for example, operation history information 51, initial password 52, changed password 53, input password 54, password flag 55, log display method information 56, and the like.

[0048] Here, the initial password (KPW0) 52, the changed password (KPW1) 53, and the input password (INPW) 54 are administrator passwords. The administrator password is the password that an administrator of the image forming apparatus inputs when logging in to the image forming apparatus.

[0049] FIGS. 2 and 3 show explanatory diagrams of an example of the information stored in the storage unit 50. FIG. 2 shows an example of the administrator password (initial password 52, changed password 53, input password 54), password flag 55, and log display method information 56. FIG. 3 shows an example of the operation history information 51.

[0050] The operation history information 51 is information (log information) that stores the history of operation contents input using the operation unit 12 of the image forming apparatus. The history of the operation contents is later confirmed by an administrator or the like of the image forming apparatus and is used to determine the presence or absence of unauthorized use from the history. Therefore, the operation history information 51 stores information necessary for determining the presence or absence of unauthorized use. The operation history information 51 shown in FIG. 3 shows five pieces of history information from history number 1 to 5. In the operation history information 51 of FIG. 3, the name (user name) of the operator, the date, and the operation contents consisting of the operation item and the operation setting information are stored in association with each other.

[0051] For example, the history information of history number 1 means that an administrator with the user name "Administrator KA" performed an input operation of the operation item "Administrator settings" at the date "September 18, 2019, 14:55:30", and by this input operation, a user named "USER22" was additionally registered.

[0052] Also, the history information with history number 3 means that a registered user with the user name "User01" performed an input operation on the operation item "User Operation" at the date "September 19, 2019, 12:20:38", and by this input operation, the function "FAX transmission" was executed in which the destination phone number was set to "06-1234-5678".

[0053] Also, the history information with history number 5 means that an administrator with the user name "Administrator KA" performed an input operation on the operation item "Administrator Settings" at the date "September 21, 2019, 18:50:47", and by this input operation, the function "Display Registered User List" for checking the users registered in the image forming apparatus was executed.

[0054] The operation history information shown in FIG. 3 is an example in one embodiment and is not limited thereto. For example, as operation items, in addition to "Administrator Settings" and "User Operation", there is "Guest User Operation" for an unregistered non-authenticated user. Also, as operation setting information, in addition to "Add User" and "FAX Transmission", there are destination IP address registration, scan transmission, print, copy operation, external storage saving, and the like.

[0055] By checking the operation history information 51 as shown in FIG. 3, the administrator of the image forming apparatus can investigate whether the image forming apparatus has been misused, or whether registered users have made setting changes or executed functions prohibited at the initial startup.

[0056] The initial password (KPW0) 52 is the password of the initial value that is prestored in the storage unit 50 of the image forming apparatus among the administrator passwords. The initial password (KPW0) 52 is stored in the storage unit 50, for example, when the image forming apparatus is shipped. When the image forming apparatus of the present invention is started for the first time after installation, and the installer or administrator attempts to perform initial operations during installation, it is assumed that the administrator password needs to be entered to log in to the image forming apparatus. When logging in at this initial startup, assume that the administrator password to be entered is the initial password (KPW0) 52.

[0057] The installer or administrator can start the installation work and initial setting work, for example, by entering the initial password 52 on the initial setting menu screen. For the initial password (KPW0) 52, the same password may be set for each type of image forming apparatus, or a unique password may be set for each image forming apparatus. However, in order to enable the installer or administrator to perform initial settings and maintenance work during installation, the initial password KPW0 needs to be made public.

[0058] That is, when the initial password KPW0 is made public, those who attempt unauthorized use can also know the initial password KPW0. For example, an unauthorized user can log in using the initial password KPW0 and obtain information stored in the image forming apparatus, or install software for unauthorized use in the image forming apparatus. Therefore, when the initial password KPW0 pre-stored in the image forming apparatus is made public, in order to prevent unauthorized use by unauthorized users, after the initial work at installation is completed, it is necessary to change the administrator password from the initial password KPW0 to another password as soon as possible.

[0059] After changing the administrator password, the initial password KPW0 may be deleted. However, since there may be cases where the image forming apparatus is returned to its initial state such as at the time of shipment, the initial password KPW0 may be fixedly stored without being deleted.

[0060] The changed password (KPW1) 53 is the password stored in the storage unit 50 when the administrator password is changed. For example, in the operation of changing the administrator password, when "KANNEW1" different from the initial password KPW0 is input as the new password, "KANNEW1" is stored in the changed password (KPW1) 53. However, assume that the same password as the initial password KPW0 is stored in advance as the initial value of the changed password (KPW1) 53. When a password different from the initial password KPW0 is stored in the changed password KPW1, thereafter, the changed password KPW1 is used as the administrator password.

[0061] The input password (INPW) 54 is the password input by the administrator when logging in to the image forming apparatus. For example, when an installer or administrator starts installation work or initial setting work and logs in to the initial setting menu screen, input of the administrator password is required, and the input password is stored as the input password (INPW) 54. At the initial startup of the image forming apparatus, in the administrator login authentication, this input password INPW and the initial password KPW0 are compared, and if both passwords match, the authentication is successful. Also, after the administrator password is changed, the input password INPW and the changed password KPW1 are compared, and if both passwords match, the authentication is successful.

[0062] FIG. 2 shows an example of the administrator password (initial password KPW0, changed password KPW1, input password INPW). Here, a case is shown where KANOLD0 is stored as the initial password KPW0, KANNEW1 is stored as the changed password KPW1, and KANNEW1 is stored as the input password INPW. When a different KANNEW1 from the initial password KPW0 is stored in the change password KPW1, the input password INPW is compared with the change password KPW1. Therefore, if the input password INPW is the same KANNEW1 as the change password KPW1, the administrator's login authentication is successful.

[0063] The password flag 55 is information for checking whether the administrator password has been changed. For example, as shown in FIG. 2, when the administrator password has been changed, "T" is set and stored in the password flag (PWFLG) 55, and when the administrator password has not been changed, "F" is set and stored in the password flag (PWFLG) 55. As described above, when the same password as the initial password KPW0 remains stored in the change password KPW1, "F" is set and stored in the password flag PWFLG. On the other hand, when a password different from the initial password KPW0 is stored in the change password KPW1, "T" is set and stored in the password flag PWFLG.

[0064] The log presentation method information 56 is information for setting the method of presenting the operation history information (log information) to the administrator of the image forming apparatus. The operation history information (log information) is presented to the administrator by the method set in the log presentation method information 56. As methods of presenting the operation history information (log information), for example, as shown in FIG. 2, there are display, printing, data communication, etc. Among these presentation methods, any one method may be set and stored in the log presentation method information 56.

[0065] When "display" is set and stored in the log presentation method information 56, the operation history information (log information) is displayed on the display unit 13 of the image forming apparatus. When "print" is set and stored in the log presentation method information 56, the operation history information (log information) is printed on a predetermined printing paper by the image output unit 17 of the image forming apparatus. When "data communication" is set and stored in the log presentation method information 56, the communication unit 18 transmits operation history information (log information) to an information processing device such as a personal computer, a mobile terminal, or a management server owned by the administrator. Note that the method for presenting the operation history information (log information) is not limited to the above three methods. For example, presentation methods such as FAX or social network services may be adopted. Yes.

[0066] <Example of log recording process> Here, an example of a process (log recording process) for recording the history of input operations by the log recording unit 21 will be described. The input operations are performed by the administrator, user, maintenance personnel, etc. of the image forming apparatus. However, after the image forming apparatus is first started up (initial startup) and before the administrator password is changed, there is a possibility that a person attempting unauthorized use (hereinafter referred to as an unauthorized user) may impersonate a legitimate administrator and perform an input operation. Therefore, in order for the administrator to be able to check the usage status of the image forming apparatus retrospectively and determine the presence or absence of unauthorized use, all input operations performed on the image forming apparatus after the initial startup of the image forming apparatus shall be recorded regardless of who performed the input operation. Also, as described above, the content of the input operation shall be additionally stored in the operation history information 51.

[0067] Fig. 10 shows a flowchart of an example of the log recording process. In step S1 of Fig. 10, the operation unit 12 checks whether an input operation has been performed. For example, it is checked whether an input operation has been performed using a keyboard, a mouse, a touch panel, etc. In step S2, if there is an input operation, the process proceeds to step S3; otherwise, the process returns to step S1.

[0068] In step S3, the content of the input operation is acquired. The content of the input key, the content selected by the mouse or touch panel, etc. is acquired. For example, as described above, the content of the input operation consists of an operation item and operation setting information.

[0069] In step S4, the user who performed the input operation and the date when the input operation was performed are acquired. If it is the administrator of the image forming apparatus or a registered user, in principle, authentication processing using the ID and password is performed and logged in. For example, the ID may be acquired as the user name. However, when the input operation is performed by an unknown user, the user name may be acquired as "unknown person". Also, for the date, the time (year / month / day / hour / minute / second) when an input such as a key was performed may be acquired as the date.

[0070] In step S5, the acquired input operation content, user name, and date are associated and additionally stored in the operation history information 51. Note that the information stored in the operation history information is not limited to the above information, and information necessary for checking the usage status of the image forming apparatus, such as touch operation (touch position) and key operation log information, may also be stored.

[0071] <Example of password change process> Here, an example of processing related to the administrator password (input monitoring of the administrator password, authentication of the administrator password, change of the administrator password, etc.) will be described. FIGS. 11 and 12 show a flowchart of an example of the password change process. In step S31 of FIG. 11, assuming that the power of the image forming apparatus is turned on, the control unit 11 activates each hardware so that the main functions of the image forming apparatus can be executed.

[0072] In step S32, the control unit 11 checks the password flag PWFLG. Here, as described above, for example, it is checked whether the PWFLG is "T" (changed) or "F" (not changed). In step S33, if the password flag PWFLG is "F" (not changed), the process proceeds to step S35; otherwise (PWFLG = "T": changed), the process proceeds to step S34.

[0073] In step S34, the initial setting menu screen is displayed on the display unit 13. FIG. 4 shows an explanatory diagram of an example of the initial setting menu screen displayed on the display unit. This initial setting menu screen is the screen when the administrator password has been changed. On this screen, for example, a statement such as "Please select the function to execute" and selectable functions (copy, scan, administrator settings, etc.) are displayed. The administrator or user may perform an input operation to select the function to be executed while viewing this screen.

[0074] In step S35, an initial setting menu screen including a request for setting the administrator password is displayed on the display unit 13. FIG. 5 shows an explanatory diagram of an example of the initial setting menu screen displayed on the display unit. This initial setting menu screen is the screen when the administrator password has not been changed. On this screen, for example, a statement such as "The administrator password has not been changed. Please select administrator settings to change the administrator password." and a selection area of "administrator settings" are displayed.

[0075] If the person performing the input operation is an administrator, an input operation to select "administrator settings" may be performed while viewing this screen. However, if the person performing the input operation is a non - administrator user, for example, a selection area of "cancel" is selected. When "cancel" is selected, for example, the initial setting menu screen of FIG. 4 may be displayed.

[0076] In step S36, the operation unit 12 checks whether an input operation has been performed. In step S37, if an input operation for selecting "Administrator Settings" is performed, the process proceeds to step S38; otherwise, the process returns to step S32. Here, since only the processing related to the administrator password will be described, if a selection area other than "Administrator Settings" is selected, it is assumed that the process returns to step S32, but usually, the selected function is executed. The functions other than "Administrator Settings" will be omitted.

[0077] In step S38, the display unit 13 displays an administrator settings menu screen. FIG. 6 shows an explanatory diagram of an example of the administrator settings menu screen displayed on the display unit. In FIG. 6, for example, a statement such as "Please select the function to execute" and selection areas for several functions related to "Administrator Settings" are displayed. Examples of several functions related to "Administrator Settings" include, as shown in FIG. 6, "User Registration", "Change Administrator Password", "Display User List", "Network Connection Settings", etc.

[0078] However, it is not limited to these functions, and in addition, "Energy Saving Settings", "Copy Settings", "FAX Settings", "Scan Settings", "Printer Settings", etc. may also be displayed as functions related to "Administrator Settings". The administrator may perform an input operation to select the function to be executed while viewing this screen. In the following flow, the case where "Change Administrator Password" is selected and input among the displayed functions will be described.

[0079] In step S39, it is checked whether "Change Administrator Password" is selected and input. In step S40, if "Change administrator password" is input, proceed to step S41; otherwise, return to step S38. However, if another function is selected, the selected function is executed, but the explanation is omitted here.

[0080] In step S41, display an administrator password input screen on the display unit 13. Fig. 7 shows an explanatory diagram of an example of the administrator password input screen displayed on the display unit. In Fig. 7, for example, display the text "Please enter the administrator password" and a display area for entering the "administrator password". The administrator can enter the administrator password before the change while looking at this screen.

[0081] If the administrator password has never been changed, enter the initial password KPW0. On the other hand, if the administrator password has been changed, enter the same password as the one stored in the change password KPW1. After entering the password, select and input the "OK" display area to confirm the password input.

[0082] In step S42, if the administrator password is entered, proceed to step S43; otherwise, return to step S41. In step S43, store the entered administrator password as the input password INPW. In step S44, compare the entered administrator password (input password INPW) with the change password KPW1. Assuming that the same password as the initial password KPW0 is stored in the change password KPW1 as the initial value, if the administrator password has never been changed, the input password INPW and the initial password KPW0 will be compared.

[0083] In step S45, if the input password INPW matches the changed password KPW1, the process proceeds to step S51 in FIG. 12. On the other hand, if the input password INPW does not match the changed password KPW1, the process proceeds to step S46.

[0084] In step S46, if the passwords do not match, the administrator authentication has failed. Therefore, since the administrator password is incorrect, a warning screen indicating that the administrator authentication has failed is displayed on the display unit 13. After displaying the warning screen, the process may end, or re - entry of the correct administrator password may be requested.

[0085] FIG. 9 shows an explanatory diagram of an example of the password - mismatch warning screen displayed on the display unit. In the administrator's password - mismatch warning screen of FIG. 9, for example, a statement such as "The administrator password has already been changed. Please enter the correct administrator password" and a display area for entering the "administrator password" are displayed. Here, if the administrator password is re - entered, the process may return to step S42.

[0086] In step S51 of FIG. 12, the administrator information setting screen is displayed on the display unit 13. FIG. 8 shows an explanatory diagram of an example of the administrator information setting screen displayed on the display unit. The administrator enters the new administrator password etc. after the change while looking at this screen. In the administrator information setting screen of FIG. 8, for example, a statement such as "Please enter administrator information" and a display area for entering administrator information such as the administrator password are displayed.

[0087] FIG. 8 shows a case where, as administrator information, a new administrator password (new password), the administrator's email address (E - mail), and the administrator's phone number are to be entered. However, the administrator information is not limited to these, and for example, age, department name, employee ID, social network service account, etc. may also be allowed to be input. After entering the new password, etc., select and input the "OK" display area to confirm the input of the administrator information.

[0088] In step S52, if a new password, etc. is entered, proceed to step S53; otherwise, return to step S51. In step S53, store the input new password INPW in the change password KPW1. In step S54, set the password flag PWFLG to "T" indicating changed (PWFLG = T).

[0089] In step S55, read the operation history information 51 from the storage unit 50. In step S56, if information is stored in the log presentation method information 56, proceed to step S57; otherwise, proceed to step S60. In step S57, read the log presentation method information 56.

[0090] In step S58, based on the read log presentation method information 56 the log presentation unit 25 presents the operation history information 51. For example, if "display" is stored in the log presentation method information 56, present the operation history information 51 as shown in FIG. 3 on the display unit 13.

[0091] Alternatively, if "print" is stored in the log presentation method information 56, print the operation history information 51 on a predetermined printing paper by the image output unit 17. Or, if "data communication" is stored in the log presentation method information 56, transmit the operation history information 51 by the communication unit 18 to a predetermined destination information processing device such as a personal computer owned by the administrator that has been registered in advance.

[0092] In step S59, if an input (log display end input) meaning that the administrator ends the log display is given, the process ends; otherwise, the process returns to step S58.

[0093] In step S60, since the log display method information 56 is not set yet, a log display method selection screen is displayed on the display unit 13. On the log display method selection screen, for example, selection areas for a plurality of log display methods such as "display", "print", "data communication", etc. are displayed, and the administrator is asked to select a desired display method. In step S61, if the administrator selects and inputs a log display method, the process proceeds to step S62; otherwise, the process returns to step S60. In step S62, the selected log display method is stored in the log display method information 56. Then, the process proceeds to step S58.

[0094] <Embodiment of Administrator Password Change and Operation History Information Display> Hereinafter, an embodiment in which the administrator password is changed and then the operation history information is displayed will be described. In the following embodiment, the method of displaying the operation history information is "display".

[0095] (Embodiment 1) Here, a case where a regular administrator changes the administrator password from the initial password KPW0 to a different password will be described.

[0096] Operation 01: The installer of the image forming apparatus installs the image forming apparatus and performs initial setting operations at the time of installation. At this time, assume that the administrator password is set to the initial password KPW0, and the change password KPW1 is also set to the initial password KPW0. The installer can log in to the image forming apparatus using, for example, the known initial password KPW0 and perform the initial setting operations at the time of installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0097] Operation 02: An operation is performed by a registered user to execute a predetermined function of the image forming apparatus while the administrator of the image forming apparatus has not changed the administrator password. If the administrator of the image forming apparatus has already registered the information of this user, the user can log in to the image forming apparatus using the registered information. This function execution operation of this user is added and stored in the operation history information 51 as "Operation 02".

[0098] Operation 03: An operation is performed by the administrator of the image forming apparatus to change the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the changed password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 03".

[0099] Operation of the image forming apparatus: Since the administrator password is changed in the above Operation 03, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above three operations (Operation 01 to Operation 03), these three operations are displayed. The display of the operation history information 51 may always be automatically displayed when the administrator password is changed. Alternatively, it may be displayed when the administrator performs a specific operation (an operation requesting the display of the operation history information 51).

[0100] The administrator can check the operations input and functions executed after the image forming apparatus is installed and before the administrator password is changed by looking at the display of the operation history information 51. For example, by checking the operation history information 51 as shown in FIG. 3, the administrator can determine whether an unauthorized operation has been performed by verifying the operation details. If no unauthorized operation is confirmed, the administrator does not need to take any special action. However, if an unauthorized operation is confirmed, the administrator may analyze the unauthorized operation and consider necessary countermeasures.

[0101] (Embodiment 2) Here, a case will be described where, after a registered regular user performs a specific operation, the administrator changes the administrator password from the initial password KPW0 to a different password. The specific operation is a setting operation determined in advance by the administrator, which is not an unauthorized operation but means an operation or function (hereinafter referred to as a prohibited operation) that the user should not perform before the administrator password is changed.

[0102] Examples of prohibited operations include an operation of transmitting image data stored in the image forming apparatus to another information processing apparatus, a fax transmission operation, an external storage saving operation, an E mail transmission operation, and the like. These operations and functions may lead to information leakage or unauthorized use. Also, the prohibited operations may be preset and stored in the storage unit 50 of the image forming apparatus by the administrator or the installation person in charge.

[0103] Operation 01: Similar to Embodiment 1, the installation person in charge of the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, it is assumed that the administrator password is set to the initial password KPW0, and the change password KPW1 is also set to the initial password KPW0. The installation person in charge can log in to the image forming apparatus using, for example, the known initial password KPW0 and perform the initial setting operation at the time of installation. This initial setting operation is designated as "Operation 01" and additionally stored in the operation history information 51.

[0104] Operation 02: Similar to Embodiment 1, when the administrator of the image forming apparatus has not changed the administrator password, a registered user performs an operation to execute a predetermined function of the image forming apparatus. Assuming that the administrator of the image forming apparatus has already registered the information of this user, the user can log in to the image forming apparatus using the registered information. This function execution operation of this user is designated as "Operation 02" and additionally stored in the operation history information 51. Here, assume that Operation 02 is the "fax transmission operation" which is a prohibited operation. In this case, "fax transmission operation" is stored in the operation content of the operation history information 51.

[0105] Operation 03: The administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the changed password KPW1. This administrator password change operation is designated as "Operation 03" and additionally stored in the operation history information 51.

[0106] Operation of the image forming apparatus: Since the administrator password is changed in the above Operation 03, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above three operations (Operation 01 to Operation 03), these three operations are displayed. In this Embodiment 2, the displayed operation history information 51 includes the "fax transmission operation" which is a prohibited operation.

[0107] By viewing the display of the operation history information 51, the administrator can confirm that after the image forming apparatus is installed and before the administrator password is changed, the "fax transmission operation", which is a prohibited operation, has been performed by the user. For example, by viewing the operation history information 51 as shown in FIG. 3, the administrator can confirm that at history number 3, the "fax transmission operation", which is a prohibited operation, has been performed by user 01 by checking the operation details. In this way, when a prohibited operation by the user is confirmed, the administrator can consider necessary countermeasures and take appropriate actions against the user who performed the prohibited operation.

[0108] Also, when the prohibited operations set by the administrator are preset and stored in the storage unit 50, when presenting the operation history information 51, the log presentation unit 25 automatically checks whether there are any prohibited operations in the operation history information 51. If there are prohibited operations, it may display that a prohibited operation has been performed together with the operation history information 51. Alternatively, the column of history number 3 with prohibited operations may be highlighted, or the display color of the column of history number 3 may be displayed in a color different from the display colors of other history numbers. Thereby, the administrator can easily and surely recognize that there have been prohibited operations.

[0109] (Embodiment 3) Here, a case will be described where an unauthorized user impersonates a legitimate administrator, logs in to the image forming apparatus using the initial password KPW0 of the administrator password, and performs operations related to specific administrator settings. In this case, although unauthorized use by the unauthorized user may occur, afterwards, the legitimate administrator can confirm that there has been unauthorized use and consider countermeasures.

[0110] Operation 01: Similar to Embodiment 1, the person in charge of installing the image forming apparatus installs the image forming apparatus and performs initial setting operations at the time of installation. At this time, assume that the administrator password has not been changed yet, and the initial password KPW0 is still set for the change password KPW1 as well. For example, the installer can log in to the image forming apparatus using the known initial password KPW0 and perform the initial setting operation at the time of installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0111] Operation 02: Without changing the administrator password, an unauthorized user who is not an administrator of the image forming apparatus logs in to the image forming apparatus using the initial password KPW0. This unauthorized user's login operation is added and stored in the operation history information 51 as "Operation 02". Since this login operation itself is the same as the operation performed by a legitimate administrator, it is stored in the operation history information 51 as a legitimate login operation.

[0112] Operation 03: After the unauthorized user logs in, the unauthorized user performs an operation related to administrator settings. For example, assume that the unauthorized user performs an operation of "displaying the registered user list" according to the administrator settings. Alternatively, the unauthorized user can also perform operations such as "scan and send" executed by a user. This unauthorized user's operation related to administrator settings is added and stored in the operation history information 51 as "Operation 03". Since this operation is also the same as the operation performed by a legitimate administrator or user, it is stored in the operation history information 51 as a legitimate operation.

[0113] Operation 04: A legitimate administrator of the image forming apparatus changes the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the change password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 04".

[0114] Operation of the image forming apparatus: In the above Operation 04, since the administrator password has been changed, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above four operations (Operation 01 to Operation 04), these four operations are displayed.

[0115] The legitimate administrator of the image forming apparatus checks the operations input and functions executed after the image forming apparatus was installed until the administrator password was changed by looking at the display of the operation history information 51. For example, if the above login operation of Operation 02 and the operation of "displaying the registered user list" of Operation 03 are operations that the legitimate administrator has no recollection of performing, the legitimate administrator can determine that these operations may have been unauthorized operations performed by an unauthorized user.

[0116] If no unauthorized operation is confirmed, the legitimate administrator does not need to take special measures. However, if it is determined that there may have been an unauthorized operation, the legitimate administrator may analyze the unauthorized operation and consider necessary countermeasures. For example, since the "registered user list display" has been performed, the legitimate administrator may recognize that there is a possibility that the personal information of the registered users has been leaked, and can conduct an investigation regarding the leakage of the users' personal information.

[0117] (Embodiment 4) Here, a case will be described where an unauthorized user impersonates a legitimate administrator, changes the administrator password from the initial password KPW0 to a different password, and then performs an operation related to specific administrator settings. In this case, although unauthorized use by an unauthorized user may occur, afterwards, the legitimate administrator can confirm that there has been unauthorized use and can consider countermeasures.

[0118] Operation 01: Similar to Embodiment 1, the installer of the image forming apparatus installs the image forming apparatus and performs initial setting operations during installation. At this time, it is assumed that the administrator password is still set to the initial password KPW0 for both the initial password KPW0 and the change password KPW1. The installer can, for example, use the known initial password KPW0 to log in to the image forming apparatus and perform initial setting operations during installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0119] Operation 02: An unauthorized user who is not an administrator of the image forming apparatus attempts to log in to the image forming apparatus using the initial password KPW0 without changing the administrator password. This unauthorized user's login operation is added and stored in the operation history information 51 as "Operation 02". This login operation itself is the same as the operation performed by a regular administrator, so it is stored in the operation history information 51 as a regular login operation.

[0120] Operation 03: The unauthorized user attempts to change the administrator password. For example, as shown in FIG. 8, the unauthorized user enters a new password different from the initial password KPW0. The entered new password is stored as the change password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 03". This password change operation itself is the same as the operation performed by a regular administrator, so it is stored in the operation history information 51 as a regular operation.

[0121] Operation 04: After logging in, the unauthorized user attempts to perform operations related to administrator settings. For example, assume that an operation of "displaying the list of registered users" is performed according to the administrator settings. This operation related to the administrator settings of unauthorized users is added and stored in the operation history information 51 as "operation 04". Since this operation is the same as the operations performed by regular administrators or users, it is stored in the operation history information 51 as a regular operation.

[0122] Operation 05: A regular administrator of the image forming apparatus performs an operation of logging in to the image forming apparatus with the administrator password. Here, since the regular administrator is unaware of the above operation 03 and believes that the current administrator password is still the initial password KPW0, the regular administrator inputs the initial password KPW0 and performs an operation of logging in to the image forming apparatus.

[0123] However, due to the above operation 03, the administrator password has already been changed, and a password different from the initial password KPW0 is set for the changed password KPW1. Therefore, even if the regular administrator inputs the initial password KPW0 as the input password INPW, since it is different from the changed password KPW1, the administrator authentication fails.

[0124] Operation of the image forming apparatus: When the administrator authentication fails, for example, a warning screen indicating a mismatch of the administrator password as shown in FIG. 9 is displayed. Even if the regular administrator inputs the initial password KPW0 again and performs an operation of logging in to the image forming apparatus, the administrator authentication will fail. Since the regular administrator who has confirmed the failure of this administrator authentication fails the administrator authentication using the initial password KPW0 although he / she has not changed the administrator password himself / herself, it can be determined that there is a possibility that unauthorized users have logged in and the administrator password has been changed.

[0125] In this case, since the regular administrator cannot log in, they cannot display and check the operation history information 51. However, from the situation where login is impossible, it can be judged that there may have been unauthorized operations, and necessary countermeasures can be considered. The regular administrator may implement countermeasures such as returning the image forming apparatus to its shipped state, initializing the administrator password (changing the password KPW1 back to the initial password KPW0), and contacting the dealer.

Explanation of Signs

[0126] 1 Image forming apparatus (MFP), 11 Control unit, 12 Operation unit, 13 Display unit, 14 Image processing unit, 15 Image input unit, 16 Image forming unit, 17 Image output unit, 18 Communication unit, 21 Log recording unit, 22 Password input monitoring unit, 23 Password authentication unit, 24 Password change unit, 25 Log presentation unit, 50 Storage unit, 51 Operation history information, 52 Initial password, 53 Changed password, 54 Input password, 55 Password flag, 56 Log presentation method information

Claims

1. An image forming apparatus including an operation unit, a display unit, and a control unit, the control unit displays a first screen including a request to change the administrator password on the display unit after booting the device until the operation unit accepts an operation to change the administrator password from an initial value; When the operation unit has accepted the operation related to the change, the control unit displays a second screen for selecting a function including at least a copy on the display unit after starting up the device; the first screen further includes a second button for canceling the request to change the administrator password; An image forming apparatus characterized in that, when the second button is selected, the control unit displays on the display unit the second screen that is the same as when the operation unit has already accepted an operation to change the administrator password.

2. 2. The image forming apparatus according to claim 1, wherein the control unit, when the operation unit accepts the operation related to the change, displays a third screen on the display unit for accepting the operation related to the change.

3. 3. The image forming apparatus according to claim 2, wherein the first screen includes a first button for displaying the third screen.

4. An image forming apparatus comprising an operation unit, a display unit, and a control unit, the control unit displays a first screen including a request to change the administrator password on the display unit after booting the device until the operation unit accepts an operation to change the administrator password from an initial value; When the operation unit has accepted the operation related to the change, the control unit displays a second screen for selecting a function including at least a copy on the display unit after starting up the device; the first screen further includes a second button for canceling the request to change the administrator password; When the second button is selected, the control unit displays the second screen on the display unit; a storage unit that stores an initial value of the administrator password in advance, and a log recording unit that records a history of operations inputted using the operation unit as operation history information in the storage unit, The image forming apparatus is characterized in that, when the administrator password is changed from the initial value, the control unit displays on the display unit the operation history information entered from the first start-up of the apparatus to the time the administrator password is changed.

5. A control method for an image forming apparatus, comprising: the image forming apparatus includes an operation unit into which a user of the image forming apparatus inputs information, and a display unit that displays information to the user, the operation unit receiving an operation for changing an administrator password from an initial value, and a display step of displaying a first screen including a request to change the administrator password on the display unit after the apparatus is started up until the change of the administrator password is received, When the operation unit has already accepted the operation related to the change, after starting up the device, a second screen for selecting a function including at least a copy is displayed on the display unit; the first screen further includes a second button for canceling the request to change the administrator password; A control method for an image forming device, characterized in that, when the second button is selected, the second screen is displayed on the display unit, which is the same as when the operation unit has already accepted an operation to change the administrator password.

Images