Image forming apparatus

Abstract

After starting the information processing apparatus for the first time, it is an issue to retrospectively check the usage status until the initially set administrator password is changed, so that the administrator of the information processing apparatus can determine the presence and details of unauthorized use and consider countermeasures. 【Solution means】In an information processing apparatus, an operation unit, a storage unit that stores in advance an initial password that is the initial value of the administrator password, a log recording unit that records the operation content input using the operation unit as operation history information in the storage unit, a password input monitoring unit that checks whether the administrator password has been input, and when it is confirmed that a password different from the initial password has been input, a password change unit that changes the administrator password and stores the input password as the new administrator password, and a log presentation unit that presents the operation history information when the administrator password is changed. It is characterized by comprising the above.

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, and more particularly to an information processing apparatus having a function of authenticating an administrator using a password.

Background Art

[0002] Conventionally, in information processing apparatuses such as personal computers, mobile terminals, and image forming apparatuses, in order to allow only pre-registered users or administrators to use the information processing apparatus, there are those having an authentication function using a user-specific ID and password.

[0003] For example, Patent Document 1 discloses a password setting method for performing user authentication between a device used by a user connected via a network and a communication terminal. When the user's password is already set in the device, the user authenticates by entering the password on the communication terminal. When the user's password is not set in the device, the user is requested to set a password, and when the passwords entered twice by the user on the communication terminal match, the password is stored in the device, and after successful user authentication, an application screen is output to prevent the use of the device without setting a password.

[0004] There is also a device that installs an information processing apparatus and requests the administrator of the information processing apparatus to change the administrator password initially set in the apparatus at the first startup of the information processing apparatus. In a device that requests the change of the administrator password, in order to prevent unauthorized use by malicious persons, there are some devices that disable the functions that can be used in the information processing apparatus until the administrator password is changed.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

SUMMARY OF THE INVENTION

PROBLEMS TO BE SOLVED BY THE INVENTION

[0006] However, in an information processing apparatus that requires changing a pre-set administrator password as in a conventional information processing apparatus, due to various circumstances, there may be a case where the administrator is not present at the time of installation and the administrator password cannot be changed immediately. Also, in a conventional information processing apparatus, when it is required to change the administrator password and the use of the apparatus is completely prevented until this password is changed, unless the administrator of the information processing apparatus changes the administrator password, the initial setting operation by the installer at the time of installation and the input operation by a user who wants to use the information processing apparatus become impossible, which is very inconvenient.

[0007] On the other hand, if input operations by not only the administrator but also general users who want to use the information processing apparatus are enabled after the information processing apparatus is started for the first time until the pre-set administrator password is changed, it is convenient for general users, but unauthorized use by malicious persons (for example, theft of stored information or intrusion of unauthorized software) becomes possible, which is not preferable in terms of security, and there may be a case where the administrator does not notice that unauthorized use has occurred.

[0008] Therefore, the present invention has been made in consideration of the above circumstances, and monitors the usage status of the information processing apparatus after the information processing apparatus is started for the first time until the initially set administrator password is changed, checks the usage status afterwards, enables the administrator of the information processing apparatus or the like to determine the presence or absence and details of unauthorized use, and provides an information processing apparatus capable of considering countermeasures in case of unauthorized use.

MEANS FOR SOLVING THE PROBLEMS

[0009] The present invention provides an information processing apparatus comprising: an operation unit; a storage unit that pre-stores an initial password which is the initial value of an administrator password; a log recording unit that records operation details input using the operation unit in the storage unit as operation history information; a password input monitoring unit that checks whether an administrator password has been input; a password change unit that, when the password input monitoring unit confirms that a password different from the initial password has been input, changes the administrator password and stores the input password as the new administrator password; and a log presentation unit that presents the operation history information when the administrator password has been changed by the password change unit.

[0010] Further, the operation history information recorded in the storage unit is characterized in that at least the operator, date, and operation details are stored in association with each other.

[0011] Further, the log recording unit records, as the operation history information, operation details input using the operation unit in the storage unit from when the information processing apparatus is first started up until the administrator password is changed to a password different from the initial password.

[0012] Further, the information processing apparatus further comprises a display unit, and when the information processing apparatus is started up, if the administrator password remains unchanged from the initial password, a password change request screen that requests changing the administrator password is displayed on the display unit.

[0013] Furthermore, it further includes a display unit and a password authentication unit that authenticates the input administrator password. When the administrator password remains unchanged from the initial password and the password authentication unit confirms that the input administrator password matches the initial password, an administrator information setting screen for setting information related to the administrator including the administrator password is displayed on the display unit. After that, when the administrator password is changed by the operation unit, the changed administrator password is stored in the storage unit as the changed password, and the changed password is used for the authentication of the administrator password performed by the password authentication unit.

[0014] Furthermore, it further includes a display unit for displaying information, and the log presentation unit is characterized by displaying the history information on the display unit.

[0015] Furthermore, it further includes an image output unit for printing information, and the log presentation unit is characterized by printing the operation history information on printing paper by the image output unit.

[0016] Furthermore, it further includes a communication unit for communicating information via a network, and the log presentation unit is characterized by transmitting the history information to another information processing device via the network by the communication unit.

[0017] The present invention also relates to a method for managing history information of an information processing apparatus, the information processing apparatus comprising an operation unit for a user of the information processing apparatus to input information, and a storage unit for pre-storing an initial password which is an initial value of an administrator password. The method includes a log recording step of recording the operation content input using the operation unit in the storage unit as operation history information, a password input monitoring step of checking whether an administrator password has been input, and a password change step of changing the administrator password and storing the input password as a new administrator password when it is confirmed in the password input monitoring step that a password different from the initial password has been input. The method further includes a log presentation step of presenting the operation history information when the administrator password is changed. The present invention provides a method for managing history information of an information processing apparatus, characterized by the above steps.

Advantages of the Invention

[0018] According to the present invention, the operation content input using the operation unit is recorded in the storage unit as operation history information, and when the administrator password is changed by the password change unit, the operation history information is presented. Therefore, after starting the information processing apparatus for the first time and before changing the initially set administrator password, the usage status of the information processing apparatus is stored. The presented operation history information enables the administrator of the information processing apparatus or the like to retrospectively check the usage status of the information processing apparatus, determine the presence and content of unauthorized use or the like, and further consider countermeasures in case of unauthorized use.

Brief Description of the Drawings

[0019]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Embodiments for Carrying Out the Invention

[0020] Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that the present invention is not limited by the description of the following examples. Further, although the present invention is an information processing apparatus, there are various apparatuses such as a personal computer, a communication apparatus, a display apparatus, and an image forming apparatus as the information processing apparatus, and the following embodiments are applicable to any of these information processing apparatuses. In the following embodiments, among information processing apparatuses, an image forming apparatus that inputs a document in which information such as images, graphics, and characters is described and has functions such as printing will be described.

[0021] <Configuration of the Image Forming Apparatus> FIG. 1 shows a configuration block diagram of an example of the image forming apparatus of the present invention. An image forming apparatus (hereinafter also referred to as an MFP: Multifunction Peripheral or a multi-function machine) 1 is a device that processes image data. For example, it is an electronic device equipped with functions such as a copying function, a printing function, a document reading (scanning) function, a document editing function, a document storage function, a document transmission (fax, FAX) function, and a communication function. In the following embodiments, the image forming apparatus 1 of the present invention will be described as particularly having a printing function and a document reading (scanning) function, but it may also be equipped with other functions.

[0022] In FIG. 1, the image forming apparatus (MFP) 1 of the present invention mainly includes a control unit 11, an operation unit 12, a display unit 13, an image processing unit 14, a communication unit 18, a log recording unit 21, a password input monitoring unit 22, a password authentication unit 23, a password change unit 24, a log presentation unit 25, and a storage unit 50. The image processing unit 14 mainly consists of an image input unit 15, an image forming unit 16, and an image output unit 17.

[0023] The control unit 11 is a part that controls the operations of each component such as the operation unit and the image processing unit, and is mainly realized by a microcomputer composed of a CPU, a ROM, a RAM, an I / O controller, a timer, etc. Based on a control program stored in advance in the ROM or the like, the CPU organically operates various hardware to execute the image forming function, log recording function, etc. of the present invention.

[0024] Among the above components, the log recording unit 21, the password input monitoring unit 22, the password authentication unit 23, and the password change unit 24 are functional blocks in which the CPU executes respective processes based on a predetermined program.

[0025] The operation unit 12 is a part where the user of the image forming apparatus inputs information, and is an input device for performing a predetermined input operation to operate the image forming apparatus. For example, it is a part for inputting information such as characters and for selecting input of functions, and a keyboard, a mouse, a touch panel, etc. are used. Examples of keys that can be operated by the user include an operation start key, a function selection key, a setting key, and the like. For example, the user can execute a copy function, an administrator setting function, etc. by performing an operation such as inputting a touch panel or an operation start key for a reading operation. In particular, in the administrator setting function, by performing an operation such as inputting a touch panel or a predetermined selection key, the administrator password can be changed, users who use the image forming apparatus can be registered, connection information to the network can be set, and so on.

[0026] The display unit 13 is a part that displays information, and displays information necessary for executing each function, the result of executing the function, etc. to notify the user. For example, an LCD, an organic EL display, etc. are used, and when a touch panel is used as the operation unit 12, the display unit 13 and the touch panel are arranged so as to overlap each other. On the display unit 13, for example, settings of setting items used for printing etc. of the image forming apparatus, information necessary for executing a document reading function etc., an operation screen of the selected function, a password input screen, an administrator information setting screen, etc. are displayed using characters, symbols, graphics, images, icons, animations, videos, etc.

[0027] In particular, in this invention, as will be described later, when the information processing apparatus is started up, if the administrator password remains the initial password and has not been changed, a password change request screen that requests changing the administrator password is displayed on the display unit 13.

[0028] The image processing unit 14 is a part that executes the image forming function which is the main function of the image forming apparatus, and mainly consists of an image input unit 15, an image forming unit 16, and an image output unit 17. Mainly, the image input unit 15 is a part that inputs predetermined image data, the image forming unit 16 is a part that converts the input image data into information that can be printed etc., and the image output unit 17 is a part that outputs the formed print information etc. to printing paper etc.

[0029] The image input unit 15 is a part that inputs image data of a document on which an image, characters, graphics, etc. are described. For example, it is a part that reads a document placed on a document table or the like. As the image input unit 15, a scanner (reading device) that reads a document on which information is described is used. The image forming apparatus 1 includes a document placement table (document table) on which a document is placed and a document cover that holds down the document in order to read the document. Further, the image forming apparatus 1 may include an automatic document feeder (ADF: Automatic Document Feeder) that places a plurality of documents and automatically conveys and reads the plurality of documents one by one. In this case, a document on which an image or the like is described is read by a scanner, and the image data of the document is stored in the storage unit 50.

[0030] Also, there are various methods for inputting image information. For example, an interface for connecting an external storage medium such as a USB memory corresponds to the image input unit 15. An electronic data file such as image information to be input is stored in an external storage medium such as a USB memory. The USB memory or the like is connected to an input interface such as a USB terminal, and a predetermined input operation is performed with the operation unit 12, whereby the desired electronic data file stored in the USB memory or the like is read out and stored in the storage unit 50 as input image data.

[0031] When printing input image data on a recording medium, for example, the image forming unit 16 generally continuously performs each process of charging, exposure, development, transfer, cleaning, discharging, and fixing to form the input image data on the recording medium. In the developing process, toner is supplied from the toner cartridge to the developing device, and the electrostatic latent image formed on the surface of the charged photosensitive drum is developed to form a toner image corresponding to the electrostatic latent image. The toner image formed on the surface of the photosensitive drum is transferred onto the recording medium by a transfer device, and then fixed onto the recording medium by being heated by a fixing device. Further, the image forming unit 16 converts the input image data into information in a form that can be transferred or displayed.

[0032] The image output unit 17 is a part that outputs the formed input image data. For example, it corresponds to a printer that prints information such as the input image data, and prints the input image data of the read manuscript on a predetermined printing paper (paper medium). However, the output of the input image data is not limited to printing, and also includes storage of the input image data of the scanned manuscript, FAX transmission of the input image data of the scanned manuscript, and the like. For example, storing the input image data of the read manuscript in an external storage medium such as a USB memory, transmitting the input image data to other information processing devices or servers via a network such as the Internet, and classifying and storing it in a specific storage folder also correspond to image output.

[0033] The communication unit 18 is a part that communicates information via a network and is a part that performs data communication with other information processing devices. For example, it receives an electronic data file transferred from an information processing device such as a personal computer, a mobile terminal, or a server. Also, the input image data generated by the image forming apparatus 1 of the present invention is transferred to an external storage device (such as a USB memory) connected to the image forming apparatus 1, or transmitted to an information processing device such as a personal computer or a server owned by the user who input the manuscript via a network.

[0034] As the network, any existing communication network such as a wide area communication network such as the Internet or a LAN can be used, and the communication form may use either wired communication or wireless communication. Also, as will be described later, in order to have the administrator of the image forming apparatus confirm the presence or absence of unauthorized use or the like, the operation content (operation history information) stored in the storage unit 50 may be transmitted to an information processing device such as a personal computer owned by the administrator.

[0035] The log recording unit 21 is a part in the image forming apparatus that records the operation content input using the operation unit 12 as operation history information in the storage unit 50. For example, it records operation contents such as an operation to change the administrator password by the administrator, a user registration operation, a function execution operation such as copying by the user, a login operation, an image data input operation, and an image data transfer operation in the storage unit 50. The operation contents are recorded in chronological order, and are sequentially recorded in the operation history information 51 as shown in FIG. 3 described later, in association with the name (user name) of the user who executed the operation and the date when the operation was executed. Hereinafter, the operation history information 51 is also referred to as log information. Also, the operation contents may be classified according to the person who performed the operation, the type of operation, etc. For example, it consists of an operation item indicating the classification and operation setting information corresponding to the actual operation included in the operation item.

[0036] For example, when the administrator of the image forming apparatus inputs the administrator's ID and password and logs in to the image forming apparatus on October 1, 2019, the information of user name: "administrator", date: "October 1, 2019", operation item of the operation content: "administrator setting", and operation setting information: "login (ID, password)" is associated and additionally stored in the operation history information.

[0037] Also, when user 01 registered in the image forming apparatus faxed to the phone number "06 - 1234 - 5678" of the recipient after logging in on February 3, 2020, the information of user name: "user 01", date: "February 3, 2020", operation item of the operation content: "user operation", and operation setting information: "FAX transmission (06 - 1234 - 5678)" is associated and additionally stored in the operation history information.

[0038] Recording of the operation contents may be performed, for example, for all operation contents performed after the power of the image forming apparatus is turned on until the power is turned off. In addition, in the present invention, in particular, in order to be able to retrospectively determine whether there has been unauthorized use at the initial installation of the image forming apparatus, the log recording unit 21 preferably records all operation contents input using the operation unit 12 as operation history information 51 in the storage unit 50 from when the image forming apparatus is first activated until the administrator password is changed to a password different from the initial password. The initial password is the initial value of the administrator password described later, and is the administrator password (initial password KPW0) preset and stored in the storage unit 50 before the installation of the image forming apparatus.

[0039] The password input monitoring unit 22 is a part that checks whether the administrator password has been input. When the administrator password is input, the input password is stored as the input password (INPW) 54 described later. The confirmation of the input of the administrator password may be determined, for example, by an operation of displaying an administrator password input screen and checking whether information is input in the password input field while this screen is being displayed. The input administrator password (input password INPW) is compared with the initial password KPW0 or the like, and the administrator is authenticated.

[0040] The password authentication unit 23 is a part that authenticates the input administrator password. The initial password KPW0 is preset and stored as the administrator password. The password authentication unit 23 checks whether the input administrator password matches the initial password KPW0 while the administrator password remains unchanged from the initial password KPW0. In a state where the change process of the administrator password has not been performed, it is assumed that the same password as the initial password KPW0 is stored in the change password KPW1 described later.

[0041] In this case, in the authentication of the administrator password, it is checked whether the input administrator password (input password INPW) matches the change password KPW1. When the input password INPW matches the changed password KPW1, it is determined that the authentication of the administrator password has succeeded. When the input password INPW does not match the changed password KPW1, it is determined that the authentication of the administrator password has failed.

[0042] On the other hand, when the administrator password change process is performed, a password different from the initial password KPW0 is stored in the changed password KPW1. After a regular administrator has performed the administrator password change process, if the regular administrator who changed the administrator password enters the same password as the changed password KPW1 as the input password INPW, the authentication of the administrator password succeeds. However, after the administrator password change process is performed, if an administrator or unauthorized user who is unaware that the administrator password has been changed enters the same password as the initial password KPW0 as the input password INPW, the authentication of the administrator password fails.

[0043] In the present invention, after the authentication of the administrator password succeeds, the administrator password is changed. For example, when the password authentication unit 23 confirms that the input administrator password INPW matches the initial password KPW0 while the administrator password remains the initial password KPW0 and has not been changed, an administrator information setting screen for setting information regarding the administrator including the administrator password is displayed on the display unit 13. Thereafter, when the administrator password is changed by the operation unit 12, the changed administrator password is stored in the storage unit 50 as the changed password KPW1. The changed password KPW1 is used for the authentication of the administrator password performed by the password authentication unit 23.

[0044] The password change unit 24 is the part for changing the administrator password. When the password input monitoring unit 22 confirms that a password different from the initial password has been input, the password change unit 24 changes the administrator password and stores the input password as the new administrator password. For example, on an administrator information setting screen for performing administrator settings as described later, when a new administrator password is input as one of the administrator information, the input new administrator password is stored in the change password KPW1. When such an operation to change the administrator password is performed, the operation details of changing this administrator password are additionally stored in the operation history information.

[0045] The log presentation unit 25 is a part that presents the operation history information stored in the storage unit 50. In particular, when the administrator password is changed by the password change unit 24, the operation history information is presented. There are various methods for presenting the operation history information. For example, as described later, the log presentation unit 25 presents the operation history information to the administrator by displaying the operation details recorded in the storage unit 50 on the display unit 13.

[0046] Also, the log presentation unit 25 may present the operation history information to the administrator by printing the operation details recorded in the storage unit 50 on printing paper by the image output unit 17. Alternatively, the log presentation unit 25 may present the operation history information to the administrator by transmitting the operation details recorded in the storage unit 50 by the communication unit 18 via a network to another information processing device (for example, transmission to a personal computer owned by the administrator or transmission to the administrator's email address).

[0047] The storage unit 50 is a part that stores information and programs necessary for executing each function of the image forming apparatus of this invention, and semiconductor memory elements such as ROM, RAM, and flash memory, storage devices such as HDD and SSD, and other storage media are used. The storage unit 50 stores, for example, operation history information 51, initial password 52, changed password 53, input password 54, password flag 55, log display method information 56, and the like.

[0048] Here, the initial password (KPW0) 52, the changed password (KPW1) 53, and the input password (INPW) 54 are administrator passwords. The administrator password is the password that an administrator of the image forming apparatus inputs when logging in to the image forming apparatus.

[0049] FIGS. 2 and 3 show explanatory diagrams of an example of the information stored in the storage unit 50. FIG. 2 shows an example of the administrator password (initial password 52, changed password 53, input password 54), password flag 55, and log display method information 56. FIG. 3 shows an example of the operation history information 51.

[0050] The operation history information 51 is information (log information) that stores the history of the operation contents input using the operation unit 12 of the image forming apparatus. The history of the operation contents is later confirmed by an administrator or the like of the image forming apparatus and is used to determine the presence or absence of unauthorized use from the history. Therefore, the operation history information 51 stores information necessary for determining the presence or absence of unauthorized use. The operation history information 51 shown in FIG. 3 shows five pieces of history information from history number 1 to 5. In the operation history information 51 of FIG. 3, the name (user name) of the operator, the date, and the operation contents including the operation item and the operation setting information are stored in association with each other.

[0051] For example, the history information of history number 1 means that an administrator with the user name "Administrator KA" performed an input operation of the operation item "Administrator settings" at the date "September 18, 2019, 14:55:30", and by this input operation, a user named "USER22" was additionally registered.

[0052] Also, the history information with history number 3 means that a registered user with the user name "User01" performed an input operation on the operation item "User Operation" at the date "September 19, 2019, 12:20:38", and by this input operation, the function "FAX transmission" was executed in which the destination phone number was set to "06-1234-5678".

[0053] Also, the history information with history number 5 means that an administrator with the user name "Administrator KA" performed an input operation on the operation item "Administrator Settings" at the date "September 21, 2019, 18:50:47", and by this input operation, the function "Display Registered User List" for checking the users registered in the image forming apparatus was executed.

[0054] The operation history information shown in FIG. 3 is an example in one embodiment and is not limited thereto. For example, as operation items, in addition to "Administrator Settings" and "User Operation", there is "Guest User Operation" for unregistered non-authenticated users and the like. Also, as operation setting information, in addition to "Add User" and "FAX Transmission", there are destination IP address registration, scan transmission, print, copy operation, external storage save, and the like.

[0055] By checking the operation history information 51 as shown in FIG. 3, the administrator of the image forming apparatus can investigate whether the image forming apparatus is being misused, or whether setting changes or function executions prohibited at the initial startup are being performed by registered users.

[0056] The initial password (KPW0) 52 is the password of the initial value that is prestored in the storage unit 50 of the image forming apparatus among the administrator passwords. The initial password (KPW0) 52 is stored in the storage unit 50, for example, when the image forming apparatus is shipped. When the image forming apparatus of the present invention is started for the first time after installation, and the installer or administrator attempts to perform initial operations during installation, it is assumed that the administrator password needs to be entered to log in to the image forming apparatus. When logging in at this initial startup, assume that the administrator password to be entered is the initial password (KPW0) 52.

[0057] The installer or administrator can start the installation work and initial setting work, for example, by entering the initial password 52 on the initial setting menu screen. For the initial password (KPW0) 52, the same password may be set for each type of image forming apparatus, or a unique password may be set for each image forming apparatus. However, in order to enable the installer or administrator to perform initial settings and maintenance work during installation, the initial password KPW0 needs to be made public.

[0058] That is, when the initial password KPW0 is made public, those who attempt unauthorized use can also know the initial password KPW0. For example, an unauthorized user can use the initial password KPW0 to log in and obtain the information stored in the image forming apparatus, or install software for unauthorized use in the image forming apparatus. Therefore, when the initial password KPW0 pre-stored in the image forming apparatus is made public, in order to prevent unauthorized use by unauthorized users, after the initial work at installation is completed, it is necessary to change the administrator password from the initial password KPW0 to another password as soon as possible.

[0059] After changing the administrator password, the initial password KPW0 may be erased. However, since there may be cases where the image forming apparatus needs to be returned to its initial state such as at the time of shipment, the initial password KPW0 may be fixedly stored without being erased.

[0060] The changed password (KPW1) 53 is the password stored in the storage unit 50 when the administrator password is changed. For example, when changing the administrator password, if "KANNEW1", which is different from the initial password KPW0, is entered as the new password, "KANNEW1" is stored in the changed password (KPW1) 53. However, assume that the same password as the initial password KPW0 is stored in advance as the initial value of the changed password (KPW1) 53. If a password different from the initial password KPW0 is stored in the changed password KPW1, then hereafter, the changed password KPW1 is used as the administrator password.

[0061] The input password (INPW) 54 is the password entered by the administrator when logging in to the image forming apparatus. For example, when the installer or administrator starts the installation work or the initial setting work and logs in to the initial setting menu screen, the input of the administrator password is required, and the entered password is stored as the input password (INPW) 54. At the initial startup of the image forming apparatus, in the administrator login authentication, this input password INPW and the initial password KPW0 are compared, and if both passwords match, the authentication is successful. Also, after the administrator password is changed, the input password INPW and the changed password KPW1 are compared, and if both passwords match, the authentication is successful.

[0062] FIG. 2 shows an example of the administrator password (initial password KPW0, changed password KPW1, input password INPW). Here, it shows the case where KANOLD0 is stored as the initial password KPW0, KANNEW1 is stored as the changed password KPW1, and KANNEW1 is stored as the input password INPW. When a different KANNEW1 from the initial password KPW0 is stored in the change password KPW1, the input password INPW is compared with the change password KPW1. Therefore, if the input password INPW is the same KANNEW1 as the change password KPW1, the administrator's login authentication is successful.

[0063] The password flag 55 is information for checking whether the administrator password has been changed. For example, as shown in FIG. 2, when the administrator password has been changed, "T" is set and stored in the password flag (PWFLG) 55, and when the administrator password has not been changed, "F" is set and stored in the password flag (PWFLG) 55. As described above, when the same password as the initial password KPW0 is still stored in the change password KPW1, "F" is set and stored in the password flag PWFLG. On the other hand, when a password different from the initial password KPW0 is stored in the change password KPW1, "T" is set and stored in the password flag PWFLG.

[0064] The log presentation method information 56 is information that sets the method for presenting operation history information (log information) to the administrator of the image forming apparatus. The operation history information (log information) is presented to the administrator by the method set in the log presentation method information 56. As methods for presenting the operation history information (log information), for example, as shown in FIG. 2, there are display, printing, data communication, etc. Among these presentation methods, any one of these methods may be set and stored in the log presentation method information 56.

[0065] When "display" is set and stored in the log presentation method information 56, the operation history information (log information) is displayed on the display unit 13 of the image forming apparatus. When "print" is set and stored in the log presentation method information 56, the operation history information (log information) is printed on a predetermined printing paper by the image output unit 17 of the image forming apparatus. When "data communication" is set and stored in the log presentation method information 56, the communication unit 18 transmits operation history information (log information) to an information processing device such as a personal computer, a mobile terminal, or a management server owned by the administrator. Note that the method of presenting the operation history information (log information) is not limited to the above three methods. For example, presentation methods such as FAX or social network services may be adopted. Yes.

[0066] <Example of log recording process> Here, an example of a process (log recording process) of recording the history of input operations by the log recording unit 21 will be described. The input operations are performed by the administrator, user, maintenance personnel, etc. of the image forming apparatus. However, after the first startup (initial startup) of the image forming apparatus, until the administrator password is changed, there is a possibility that a person attempting unauthorized use (hereinafter referred to as an unauthorized user) may pose as a legitimate administrator and perform an input operation. Therefore, in order for the administrator to be able to check the usage status of the image forming apparatus retrospectively and determine the presence or absence of unauthorized use, regardless of who performed the input operation, all input operations performed on the image forming apparatus after the initial startup of the image forming apparatus shall be recorded. Also, as described above, the content of the input operation shall be additionally stored in the operation history information 51.

[0067] Fig. 10 shows a flowchart of an example of the log recording process. In step S1 of Fig. 10, the operation unit 12 checks whether an input operation has been performed. For example, it is checked whether an input operation has been performed using a keyboard, mouse, touch panel, etc. In step S2, if there is an input operation, the process proceeds to step S3; otherwise, the process returns to step S1.

[0068] In step S3, the content of the input operation is acquired. The content of the input key, the content selected by the mouse or touch panel, etc. is acquired. For example, as described above, the content of the input operation consists of an operation item and operation setting information.

[0069] In step S4, the user who performed the input operation and the date when the input operation was performed are acquired. If it is the administrator of the image forming apparatus or a registered user, in principle, authentication processing using the ID and password is performed and logged in. For example, the ID may be acquired as the user name. However, when the input operation is performed by an unknown user, the user name may be acquired as "unknown person". Also, for the date, the time (year / month / day / hour / minute / second) when an input such as a key was performed may be acquired as the date.

[0070] In step S5, the acquired input operation content, user name, and date are associated and additionally stored in the operation history information 51. Note that the information stored in the operation history information is not limited to the above information, and information necessary for checking the usage status of the image forming apparatus, such as touch operation (touch position) and key operation log information, may also be stored.

[0071] <Example of password change process> Here, an example of processing related to the administrator password (input monitoring of the administrator password, authentication of the administrator password, change of the administrator password, etc.) will be described. FIGS. 11 and 12 show a flowchart of an example of the password change process. In step S31 of FIG. 11, assuming that the power of the image forming apparatus is turned on, the control unit 11 activates each hardware so that the main functions of the image forming apparatus can be executed.

[0072] In step S32, the control unit 11 checks the password flag PWFLG. Here, as described above, for example, it is checked whether the PWFLG is "T" (changed) or "F" (not changed). In step S33, if the password flag PWFLG is "F" (not changed), the process proceeds to step S35; otherwise (PWFLG = "T": changed), the process proceeds to step S34.

[0073] In step S34, the initial setting menu screen is displayed on the display unit 13. FIG. 4 shows an explanatory diagram of an example of the initial setting menu screen displayed on the display unit. This initial setting menu screen is the screen when the administrator password has been changed. On this screen, for example, the words "Please select the function to execute" and selectable functions (copy, scan, administrator settings, etc.) are displayed. The administrator or user may perform an input operation to select the function to be executed while viewing this screen.

[0074] In step S35, an initial setting menu screen including a request for setting the administrator password is displayed on the display unit 13. FIG. 5 shows an explanatory diagram of an example of the initial setting menu screen displayed on the display unit. This initial setting menu screen is the screen when the administrator password has not been changed. On this screen, for example, the words "The administrator password has not been changed. Please select administrator settings to change the administrator password." and a selection area of "Administrator settings" are displayed.

[0075] If the person performing the input operation is the administrator, an input operation to select "Administrator settings" may be performed while viewing this screen. However, if the person performing the input operation is a user who is not the administrator, for example, a selection area of "Cancel" is selected. When "Cancel" is selected, for example, the initial setting menu screen in FIG. 4 may be displayed.

[0076] In step S36, the operation unit 12 checks whether an input operation has been performed. In step S37, if an input operation for selecting "Administrator Settings" is performed, the process proceeds to step S38; otherwise, it returns to step S32. Here, since only the processing related to the administrator password will be described, if a selection area other than "Administrator Settings" is selected, it is assumed that the process returns to step S32, but usually, the selected function is executed. The functions other than "Administrator Settings" are omitted.

[0077] In step S38, the display unit 13 displays the administrator settings menu screen. FIG. 6 shows an explanatory diagram of an example of the administrator settings menu screen displayed on the display unit. In FIG. 6, for example, the text "Please select the function to execute" and selection areas for several functions related to "Administrator Settings" are displayed. Several functions related to "Administrator Settings" include, for example, as shown in FIG. 6, "User Registration", "Change Administrator Password", "Display User List", "Network Connection Settings", etc.

[0078] However, it is not limited to these functions, and in addition, "Energy Saving Settings", "Copy Settings", "FAX Settings", "Scan Settings", "Printer Settings", etc. may also be displayed as functions related to "Administrator Settings". The administrator may perform an input operation to select the function to be executed while viewing this screen. In the following flow, the case where "Change Administrator Password" among the displayed functions is selected and input will be described.

[0079] In step S39, it is checked whether "Change Administrator Password" is selected and input. In step S40, if "Change administrator password" is input, the process proceeds to step S41; otherwise, it returns to step S38. However, if another function is selected, the selected function is executed, but the description is omitted here.

[0080] In step S41, a screen for inputting the administrator password is displayed on the display unit 13. Fig. 7 shows an explanatory diagram of an example of the administrator password input screen displayed on the display unit. In Fig. 7, for example, a statement "Please enter the administrator password" and a display area for entering the "administrator password" are displayed. The administrator may input the administrator password before the change while looking at this screen.

[0081] If the administrator password has never been changed, the initial password KPW0 is input. On the other hand, if the administrator password has been changed, the same password as that stored in the change password KPW1 is input. After inputting the password, the "OK" display area is selected and input to confirm the password input.

[0082] In step S42, if the administrator password is input, the process proceeds to step S43; otherwise, it returns to step S41. In step S43, the input administrator password is stored as the input password INPW. In step S44, the input administrator password (input password INPW) is compared with the change password KPW1. Assuming that the same password as the initial password KPW0 is stored in the change password KPW1 as the initial value, if the administrator password has never been changed, the input password INPW and the initial password KPW0 will be compared.

[0083] In step S45, if the input password INPW matches the changed password KPW1, the process proceeds to step S51 in FIG. 12. On the other hand, if the input password INPW does not match the changed password KPW1, the process proceeds to step S46.

[0084] In step S46, if the passwords do not match, the administrator authentication has failed. Therefore, since the administrator password is incorrect, a warning screen indicating that the administrator authentication has failed is displayed on the display unit 13. After displaying the warning screen, the process may end, or the re - entry of the correct administrator password may be requested.

[0085] FIG. 9 shows an explanatory diagram of an example of the password - mismatch warning screen displayed on the display unit. In the administrator's password - mismatch warning screen of FIG. 9, for example, a statement such as "The administrator password has already been changed. Please enter the correct administrator password" and a display area for entering the "administrator password" are displayed. Here, if the administrator password is re - entered, the process may return to step S42.

[0086] In step S51 of FIG. 12, the administrator information setting screen is displayed on the display unit 13. FIG. 8 shows an explanatory diagram of an example of the administrator information setting screen displayed on the display unit. The administrator enters the new administrator password after the change, etc., while viewing this screen. In the administrator information setting screen of FIG. 8, for example, a statement such as "Please enter administrator information" and a display area for entering administrator information such as the administrator password are displayed.

[0087] FIG. 8 shows a case where, as administrator information, a new administrator password (new password), the administrator's email address (E - mail), and the administrator's phone number are entered. However, the administrator information is not limited to these pieces of information. For example, age, department name, employee ID, social network service accounts, etc. may also be allowed to be input. After entering a new password or the like, select and input the "OK" display area to confirm the input of the administrator information.

[0088] In step S52, if a new password or the like is input, proceed to step S53; otherwise, return to step S51. In step S53, store the input new password INPW in the change password KPW1. In step S54, set the password flag PWFLG to the changed "T" (PWFLG = T).

[0089] In step S55, read the operation history information 51 from the storage unit 50. In step S56, if information is stored in the log presentation method information 56, proceed to step S57; otherwise, proceed to step S60. In step S57, read the log presentation method information 56.

[0090] In step S58, based on the read log presentation method information 56, the log presentation unit 25 presents the operation history information 51. For example, if "display" is stored in the log presentation method information 56, present the operation history information 51 as shown in FIG. 3 on the display unit 13.

[0091] Alternatively, if "print" is stored in the log presentation method information 56, print the operation history information 51 on a predetermined printing paper by the image output unit 17. Or, if "data communication" is stored in the log presentation method information 56, transmit the operation history information 51 by the communication unit 18 to a predetermined destination information processing device such as a personal computer owned by the administrator that has been registered in advance.

[0092] In step S59, if an input (log display end input) meaning that the administrator ends the log display is made, the process ends; otherwise, the process returns to step S58.

[0093] In step S60, since the log display method information 56 has not been set yet, a log display method selection screen is displayed on the display unit 13. On the log display method selection screen, for example, selection areas for a plurality of log display methods such as "display", "print", "data communication", etc. are displayed, and the administrator is asked to select a desired display method. In step S61, if the administrator selects and inputs a log display method, the process proceeds to step S62; otherwise, the process returns to step S60. In step S62, the selected log display method is stored in the log display method information 56. Then, the process proceeds to step S58.

[0094] <Embodiment of Administrator Password Change and Operation History Information Display> Hereinafter, an embodiment in which the administrator password is changed and then the operation history information is displayed will be described. In the following embodiment, the method of displaying the operation history information is "display".

[0095] (Embodiment 1) Here, a case where a regular administrator changes the administrator password from the initial password KPW0 to a different password will be described.

[0096] Operation 01: The installer of the image forming apparatus installs the image forming apparatus and performs initial setting operations at the time of installation. At this time, it is assumed that the administrator password is set to the initial password KPW0, and the initial password KPW0 is also set to the change password KPW1. The installer can log in to the image forming apparatus using, for example, the known initial password KPW0 and perform initial setting operations at the time of installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0097] Operation 02: With the administrator of the image forming apparatus not having changed the administrator password, a registered user performs an operation to execute a predetermined function of the image forming apparatus. Assuming that the administrator of the image forming apparatus has already registered the information of this user, the user can log in to the image forming apparatus using the registered information. This function execution operation of this user is added and stored in the operation history information 51 as "Operation 02".

[0098] Operation 03: The administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the changed password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 03".

[0099] Operation of the image forming apparatus: Since the administrator password was changed in the above Operation 03, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above three operations (Operation 01 to Operation 03), these three operations are displayed. The display of the operation history information 51 may always be automatically displayed when the administrator password is changed. Alternatively, it may be displayed when the administrator performs a specific operation (an operation to request the display of the operation history information 51).

[0100] The administrator can view the operations input and functions executed after the image forming apparatus was installed and before the administrator password was changed by looking at the display of the operation history information 51. For example, by viewing the operation history information 51 as shown in FIG. 3 and confirming the operation content, the administrator can determine whether an unauthorized operation has been performed. If no unauthorized operation is confirmed, the administrator does not need to take special measures. However, if an unauthorized operation is confirmed, the administrator may analyze the unauthorized operation and consider necessary countermeasures.

[0101] (Embodiment 2) Here, the case where, after a registered regular user performs a specific operation, the administrator changes the administrator password from the initial password KPW0 to a different password will be described. The specific operation is a setting operation determined in advance by the administrator, which is not an unauthorized operation, but means an operation or function (hereinafter referred to as a prohibited operation) that the user does not want to perform before changing the administrator password.

[0102] Examples of prohibited operations include an operation of transmitting image data stored in the image forming apparatus to another information processing apparatus, a fax transmission operation, an external storage saving operation, an E mail transmission operation, and the like. These operations and functions may cause information leakage or unauthorized use. Also, the prohibited operations may be preset and stored in the storage unit 50 of the image forming apparatus by the administrator or the installation person in charge.

[0103] Operation 01: Similar to Embodiment 1, the installation person in charge of the image forming apparatus installs the image forming apparatus and performs the initial setting operation at the time of installation. At this time, it is assumed that the administrator password is set to the initial password KPW0, and the change password KPW1 is also set to the initial password KPW0. The installation person in charge can log in to the image forming apparatus using, for example, the known initial password KPW0 and perform the initial setting operation at the time of installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0104] Operation 02: Similar to Embodiment 1, in a state where the administrator of the image forming apparatus has not changed the administrator password, a registered user performs an operation to execute a predetermined function of the image forming apparatus. Assuming that the administrator of the image forming apparatus has already registered the information of this user, the user can log in to the image forming apparatus using the registered information. This function execution operation of this user is added and stored in the operation history information 51 as "Operation 02". Here, assume that Operation 02 is the "fax transmission operation" which is a prohibited operation. In this case, "fax transmission operation" is stored in the operation content of the operation history information 51.

[0105] Operation 03: The administrator of the image forming apparatus performs an operation to change the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the changed password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 03".

[0106] Operation of the image forming apparatus: Since the administrator password is changed in the above Operation 03, the operation history information 51 is presented as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above three operations (Operation 01 to Operation 03), these three operations are displayed. In this Embodiment 2, the displayed operation history information 51 includes the "fax transmission operation" which is a prohibited operation.

[0107] By viewing the display of the operation history information 51, the administrator can confirm that after the image forming apparatus is installed and before the administrator password is changed, the "fax transmission operation", which is a prohibited operation, has been performed by the user. For example, by viewing the operation history information 51 as shown in FIG. 3, the administrator can confirm that at history number 3, the "fax transmission operation", which is a prohibited operation, has been performed by user 01 by checking the operation details. In this way, when a prohibited operation by the user is confirmed, the administrator can consider necessary countermeasures and take appropriate actions against the user who performed the prohibited operation.

[0108] Also, when the prohibited operations set by the administrator are preset and stored in the storage unit 50, when presenting the operation history information 51, the log presentation unit 25 automatically checks whether there are any prohibited operations in the operation history information 51. If there are prohibited operations, it may display that a prohibited operation has been performed together with the operation history information 51. Alternatively, the column of history number 3 with prohibited operations may be highlighted, or the display color of the column of history number 3 may be displayed in a color different from the display colors of other history numbers. Thereby, the administrator can easily and surely recognize that there have been prohibited operations.

[0109] (Embodiment 3) Here, a case will be described where an unauthorized user impersonates a legitimate administrator, logs in to the image forming apparatus using the initial password KPW0 of the administrator password, and performs operations related to specific administrator settings. In this case, although unauthorized use by the unauthorized user may occur, afterwards, the legitimate administrator can confirm that there has been unauthorized use and consider countermeasures.

[0110] Operation 01: Similar to Embodiment 1, the installer of the image forming apparatus installs the image forming apparatus and performs the initial setting operations at the time of installation. At this time, assume that the administrator password has the initial password KPW0 set, and the change password KPW1 also has the initial password KPW0 set. The installer can log in to the image forming apparatus using, for example, the known initial password KPW0 and perform the initial setting operation at the time of installation. This initial setting operation is set as "Operation 01" and additionally stored in the operation history information 51.

[0111] Operation 02: Without changing the administrator password, an unauthorized user who is not an administrator of the image forming apparatus logs in to the image forming apparatus using the initial password KPW0. This unauthorized user's login operation is set as "Operation 02" and additionally stored in the operation history information 51. This login operation itself is the same as the operation performed by a regular administrator, so it is stored in the operation history information 51 as a regular login operation.

[0112] Operation 03: After the unauthorized user logs in, the unauthorized user performs an operation related to administrator settings. For example, assume that the unauthorized user performs an operation of "displaying the registered user list" according to the administrator settings. Alternatively, the unauthorized user can also perform an operation such as "scan and send" executed by a user. This unauthorized user's operation related to administrator settings is set as "Operation 03" and additionally stored in the operation history information 51. This operation is also the same as the operation performed by a regular administrator or user, so it is stored in the operation history information 51 as a regular operation.

[0113] Operation 04: A regular administrator of the image forming apparatus changes the administrator password. For example, as shown in FIG. 8, the administrator inputs a new password different from the initial password KPW0. The input new password is stored as the change password KPW1. Add and store the administrator password change operation in the operation history information 51 as "Operation 04".

[0114] Operation of the image forming apparatus: In the above Operation 04, since the administrator password has been changed, present the operation history information 51 as in step S58 of FIG. 12. Here, since the operation history information 51 includes at least the above four operations (Operation 01 to Operation 04), these four operations are displayed.

[0115] The legitimate administrator of the image forming apparatus checks the operations input and functions executed after the image forming apparatus is installed until the administrator password is changed, by looking at the display of the operation history information 51. For example, if the above login operation of Operation 02 and the operation of "displaying the registered user list" of Operation 03 are operations that the legitimate administrator does not remember doing, the legitimate administrator can determine that these operations may be unauthorized operations executed by an unauthorized user.

[0116] If no unauthorized operation is confirmed, the legitimate administrator does not need to take special measures. However, if it is determined that there may have been an unauthorized operation, the legitimate administrator may analyze the unauthorized operation and consider necessary countermeasures. For example, since the "registered user list is displayed", the legitimate administrator may recognize that there is a possibility that the personal information of the registered users has been leaked, and can conduct an investigation regarding the leakage of the users' personal information.

[0117] (Embodiment 4) Here, a case will be described where an unauthorized user impersonates a legitimate administrator, changes the administrator password from the initial password KPW0 to a different password, and then performs an operation related to specific administrator settings. In this case, although unauthorized use by an unauthorized user may occur, afterwards, the legitimate administrator can confirm that there has been unauthorized use and can consider countermeasures.

[0118] Operation 01: Similar to Embodiment 1, the installer of the image forming apparatus installs the image forming apparatus and performs initial setting operations during installation. At this time, assume that the administrator password is set to the initial password KPW0, and the change password KPW1 is also set to the initial password KPW0. The installer can, for example, use the known initial password KPW0 to log in to the image forming apparatus and perform initial setting operations during installation. This initial setting operation is added and stored in the operation history information 51 as "Operation 01".

[0119] Operation 02: An unauthorized user who is not an administrator of the image forming apparatus performs an operation of logging in to the image forming apparatus using the initial password KPW0 without changing the administrator password. This unauthorized user's login operation is added and stored in the operation history information 51 as "Operation 02". This login operation itself is the same as an operation performed by a legitimate administrator, so it is stored in the operation history information 51 as a legitimate login operation.

[0120] Operation 03: The unauthorized user performs an operation of changing the administrator password. For example, as shown in FIG. 8, the unauthorized user inputs a new password different from the initial password KPW0. The input new password is stored as the change password KPW1. This administrator password change operation is added and stored in the operation history information 51 as "Operation 03". This password change operation itself is the same as an operation performed by a legitimate administrator, so it is stored in the operation history information 51 as a legitimate operation.

[0121] Operation 04: After the unauthorized user logs in, the unauthorized user performs operations related to administrator settings. For example, assume that an operation of "displaying the list of registered users" is performed according to the administrator settings. Regarding this operation related to the administrator settings of unauthorized users as "Operation 04", it is additionally stored in the operation history information 51. Since this operation is the same as the operations performed by legitimate administrators or users, it is stored in the operation history information 51 as a legitimate operation.

[0122] Operation 05: A legitimate administrator of the image forming apparatus performs an operation of logging in to the image forming apparatus with the administrator password. Here, since the legitimate administrator is unaware of the above Operation 03 and believes that the current administrator password is still the initial password KPW0, the legitimate administrator inputs the initial password KPW0 and performs an operation of logging in to the image forming apparatus.

[0123] However, due to the above Operation 03, the administrator password has already been changed, and a password different from the initial password KPW0 is set for the changed password KPW1. Therefore, even if the legitimate administrator inputs the initial password KPW0 as the input password INPW, since it is different from the changed password KPW1, the administrator authentication fails.

[0124] Operation of the image forming apparatus: When the administrator authentication fails, for example, a warning screen indicating a mismatch of the administrator password as shown in FIG. 9 is displayed. Even if the legitimate administrator inputs the initial password KPW0 again and performs an operation of logging in to the image forming apparatus, the administrator authentication will fail. The legitimate administrator who has confirmed the failure of this administrator authentication can determine that there is a possibility that unauthorized users have logged in and the administrator password has been changed because the authentication of the administrator using the initial password KPW0 fails although the legitimate administrator has not changed the administrator password himself / herself.

[0125] In this case, since the regular administrator cannot log in, the operation history information 51 cannot be displayed for confirmation. However, from the situation where logging in is impossible, it can be judged that there may have been unauthorized operations, and necessary countermeasures can be considered. The regular administrator may implement countermeasures such as returning the image forming apparatus to the state at the time of shipment, initializing the administrator password (changing the password KPW1 back to the initial password KPW0), and contacting the dealer.

Explanation of Signs

[0126] 1 Image forming apparatus (MFP), 11 Control unit, 12 Operation unit, 13 Display unit, 14 Image processing unit, 15 Image input unit, 16 Image forming unit, 17 Image output unit, 18 Communication unit, 21 Log recording unit, 22 Password input monitoring unit, 23 Password authentication unit, 24 Password change unit, 25 Log presentation unit, 50 Storage unit, 51 Operation history information, 52 Initial password, 53 Changed password, 54 Input password, 55 Password flag, 56 Log presentation method information

Claims

1. a storage unit for storing an administrator password; A display unit; A control unit, The control unit is when an initial password is stored in the storage unit as the administrator password, displaying a first screen on the display unit, the first screen including a message prompting a process to change the administrator password, a first button for selecting to proceed to the change process, and a second button for selecting not to proceed to the change process; If a first condition is satisfied, a second screen for changing the administrator password is displayed on the display unit; If the second condition is satisfied, a third screen is displayed on the display unit; the first condition is that the first button is selected; The image forming apparatus according to claim 1, wherein the second condition is that the second button is selected.

2. Further comprising an operation unit, The image forming apparatus according to claim 1 , wherein the first condition further includes a case where the operation unit has already accepted input of the administrator password.

3. 3. The image forming apparatus according to claim 1, wherein the first condition further includes a case where the display unit displays a message indicating that the administrator password is still an initial password.

4. The control unit is An image forming apparatus as described in any one of claims 1 to 3, characterized in that when a password different from the initial password is stored in the memory unit as the administrator password, the third screen is displayed on the display unit without going through the first screen.

5. 5. The image forming apparatus according to claim 1, wherein the third screen is an initial screen on which at least one of a copy function, a fax function, and a scan function can be selected.

6. a password authentication unit that authenticates the input administrator password, 6. The image forming apparatus according to claim 1, wherein the first condition further includes a case where the password authentication unit authenticates an administrator based on the initial password input as the administrator password.

7. the second screen includes an input area for inputting a new administrator password and a third button for selecting execution of the change process; The control unit is 7. The image forming apparatus according to claim 1, wherein when a new administrator password is entered in the input area and the third button is selected, the new administrator password is stored in the memory unit as the administrator password.

8. A control method for an image forming apparatus, comprising: the image forming apparatus includes a storage unit that stores an administrator password and a display unit; when an initial password is stored in the storage unit as the administrator password, displaying a first screen on the display unit, the first screen including a message prompting a process to change the administrator password, a first button for selecting to proceed to the change process, and a second button for selecting not to proceed to the change process; If a first condition is satisfied, a second screen for changing the administrator password is displayed on the display unit; If the second condition is satisfied, a third screen is displayed on the display unit; the first condition is that the first button is selected; 4. The method for controlling an image forming apparatus, wherein the second condition is that the second button is selected.

9. the image forming apparatus further comprises an operation unit, 9. The method of controlling an image forming apparatus according to claim 8, wherein the first condition further includes a case where the operation unit has already accepted input of the administrator password.

10. 10. The method of controlling an image forming apparatus according to claim 8, wherein the first condition further includes a case where the display unit displays a message indicating that the administrator password is still an initial password.

11. A control method for an image forming apparatus according to any one of claims 8 to 10, characterized in that, when a password different from the initial password is stored in the memory unit as the administrator password, the third screen is displayed on the display unit without going through the first screen.

12. 12. The method of controlling an image forming apparatus according to claim 8, wherein the third screen is an initial screen on which at least one of a copy, fax, and scan function can be selected.

13. the image forming apparatus further includes a password authentication unit that authenticates the input administrator password, 13. The method of controlling an image forming apparatus according to claim 8, wherein the first condition further includes a case where the password authentication unit authenticates an administrator based on the initial password input as the administrator password.

14. the second screen includes an input area for inputting a new administrator password and a third button for selecting execution of the change process; 14. The method for controlling an image forming apparatus according to claim 8, wherein when a new administrator password is entered in the input area and the third button is selected, the new administrator password is stored in the memory unit as the administrator password.

15. a storage unit for storing an administrator password; A display unit; A control unit, The control unit is when an initial password is stored in the storage unit as the administrator password, displaying a first screen on the display unit, the first screen including a message prompting a process to change the administrator password, a first button for selecting to proceed to the change process, and a second button for selecting not to proceed to the change process; When the first button is selected, a second screen for changing the administrator password is displayed on the display unit; When the second button is selected, a third screen is displayed on the display unit.

16. The control unit is 16. The image forming apparatus according to claim 15, wherein when a password different from the initial password is stored in the memory unit as the administrator password, the third screen is displayed on the display unit without going through the first screen.

17. 17. The image forming apparatus according to claim 15, wherein the third screen is an initial screen on which at least one of a copy, fax, and scan function can be selected.

18. a password authentication unit that authenticates the input administrator password, The control unit is 18. The image forming apparatus according to claim 15, wherein the second screen is displayed on the display unit when the password authentication unit authenticates the administrator based on the initial password input as the administrator password.

19. the second screen includes an input area for inputting a new administrator password and a third button for selecting execution of the change process; The control unit is 19. The image forming apparatus according to claim 15, wherein when a new administrator password is entered in the input area and the third button is selected, the new administrator password is stored in the memory unit as the administrator password.

20. A control method for an image forming apparatus, comprising: the image forming apparatus includes a storage unit that stores an administrator password and a display unit; when an initial password is stored in the storage unit as the administrator password, displaying a first screen on the display unit, the first screen including a message prompting a process to change the administrator password, a first button for selecting to proceed to the change process, and a second button for selecting not to proceed to the change process; When the first button is selected, a second screen for changing the administrator password is displayed on the display unit; a third screen is displayed on the display unit when the second button is selected.

21. 21. The control method for an image forming apparatus according to claim 20, wherein when a password different from the initial password is stored in the memory unit as the administrator password, the third screen is displayed on the display unit without going through the first screen.

22. 22. The method for controlling an image forming apparatus according to claim 20, wherein the third screen is an initial screen on which at least one of a copy, fax, and scan function can be selected.

23. the image forming apparatus further includes a password authentication unit that authenticates the input administrator password, 23. The method for controlling an image forming apparatus according to claim 20, wherein the second screen is displayed on the display unit when the password authentication unit authenticates the administrator based on the initial password input as the administrator password.

24. the second screen includes an input area for inputting a new administrator password and a third button for selecting execution of the change process; 24. The method for controlling an image forming apparatus according to claim 20, wherein when a new administrator password is entered in the input area and the third button is selected, the new administrator password is stored in the memory unit as the administrator password.

Images