Authentication device, authentication method, and authentication program
The authentication device and method enable secure password management for device maintenance, preventing unauthorized access and ensuring timely maintenance by using IC chip devices, thus enhancing device security and maintenance efficiency.
Patent Information
- Application Number
- JP2021152384
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Priority Date
- 2020-10-19
- Filing Date
- 2021-09-17
- Publication Date
- 2025-07-30
- Estimated Expiration
- 2041-09-17
AI Technical Summary
Existing authentication systems for device maintenance allow unauthorized personnel to change passwords, leading to improper maintenance and potential delays in executing maintenance due to password recovery processes.
An authentication device and method that allows password changes and resets without requiring additional hardware, using IC chip devices to manage and control access, ensuring only authorized personnel can perform maintenance.
Prevents improper maintenance and ensures prompt execution of maintenance by allowing password changes and resets without additional hardware, thereby maintaining device integrity and operational readiness.
Smart Images

Figure 0007715588000001 
Figure 0007715588000002 
Figure 0007715588000003
Abstract
Description
Technical Field
[0001] The present invention relates to an authentication device, an authentication method, and an authentication program for permitting maintenance of a device to be maintained.
Background Art
[0002] For long-term use of printers, facsimiles, etc., regular maintenance is essential.
[0003] For example, ink or paper dust may adhere to the surface of a transport roller that transports printed matter in a printer. A transport roller with adhered ink may transfer the ink to the printed matter and stain it. Also, a transport roller with adhered paper dust may slip and cause a problem in transporting the printed matter. Therefore, it is necessary to perform maintenance such as cleaning the transport roller regularly.
[0004] Maintenance needs to be performed according to appropriate procedures. If inappropriate maintenance is performed, a decline in print quality or a failure of the device may occur. For this reason, maintenance by a professional maintenance staff is necessary.
[0005] Regarding this, a technique is known in which a maintenance staff permitted to perform maintenance performs maintenance by password authentication (see Patent Document 1).
Prior Art Documents
Patent Documents
[0006]
Patent Document 1
Summary of the Invention
Problems to be Solved by the Invention
[0007] In the above-described technology, in order to prevent improper maintenance by persons other than maintenance staff, the maintenance staff may change the password.
[0008] Here, the maintenance staff may forget the changed password by changing the password many times, etc. In this case, maintenance can be performed by notifying the server that manages the password or contacting the department that manages the password to issue a new password.
[0009] However, since it takes time to issue a new password, there may be a situation where maintenance of the device to be maintained, such as a printer, cannot be executed promptly.
[0010] The present invention has been made in view of the above, and an object thereof is to provide an authentication device, an authentication method, and an authentication program that can suppress improper maintenance of a device to be maintained and can suppress a situation where maintenance cannot be executed promptly.
Means for Solving the Problems
[0011] According to one aspect of the present invention, there is provided an authentication device including: storage means for storing a password for permitting maintenance of a device to be maintained; change means for changing the password without requiring attachment of a device for changing the password to the present device; and reset means for resetting the password when a predetermined external device is attached to the present device.
[0012] According to another aspect of the present invention, there is provided an authentication method characterized in that the password stored in the storage means of the authentication device can be changed without requiring attachment of a device for changing the password for permitting maintenance of a device to be maintained to the authentication device, and the password can be reset when a predetermined external device is attached to the authentication device.
[0013] According to another aspect of the present invention, there is provided an authentication program for causing an authentication device including storage means for storing a password for permitting maintenance of a device to be maintained to execute change means capable of changing the password without requiring attachment of a device for changing the password to the authentication device, and reset means for making the password resetable when a predetermined external device is attached to the authentication device.
Advantages of the Invention
[0014] According to the present invention, it is possible to suppress inappropriate maintenance being performed on the device to be maintained, and to suppress a situation where maintenance cannot be executed promptly.
Brief Description of the Drawings
[0015]
Figure 1
Figure 2
Figure 3
Figure 4
Figure 5
Figure 6
Figure 7
Figure 8
Figure 9
Figure 10
Figure 11
Embodiments for Carrying Out the Invention
[0016] Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the drawings, the same or equivalent parts and components are denoted by the same or equivalent reference numerals, and the description thereof will be omitted or simplified.
[0017] [First Embodiment] FIG. 1 is a block diagram showing the configuration of an image forming apparatus provided with an authentication device according to the first embodiment of the present invention.
[0018] As shown in FIG. 1, an image forming apparatus (corresponding to the apparatus to be maintained) 1 according to the first embodiment includes a printer unit 2, an operation panel 3, an IC communication unit 4, a mounting unit 5, a storage unit (corresponding to storage means) 6, and a control unit 7. Note that an authentication device is configured by each unit except the printer unit 2 of the image forming apparatus 1.
[0019] The printer unit 2 forms an image on a printing medium while conveying the printing medium such as paper. The printer unit 2 includes a conveyance roller for conveying the printing medium, an inkjet head for discharging ink onto the printing medium for printing, and the like. Note that the printer unit 2 is not limited to the inkjet method, and may perform printing by other methods such as the stencil printing method.
[0020] The operation panel 3 displays various screens and receives input operations by a user or the like. The operation panel 3 includes a display unit 11 and an input unit 12.
[0021] The display unit 11 displays various input screens and the like. The display unit 11 includes a liquid crystal display panel or the like.
[0022] The input unit 12 receives input operations by the user or the like and outputs operation signals corresponding to the operations. The input unit 12 includes various operation keys, a touch panel, and the like.
[0023] The IC communication unit 4 communicates with the first IC chip device 101 and the second IC chip device (corresponding to an external device) 102, which will be described later. The IC communication unit 4 is a reader / writer device that reads information from and writes information to the first IC chip device 101 and the second IC chip device 102.
[0024] The mounting unit 5 is a part where the first IC chip device 101 and the second IC chip device 102 are mounted. The mounting unit 5 is configured such that the first IC chip device 101 and the second IC chip device 102 can be detachably mounted. The first IC chip device 101 and the second IC chip device 102 are selectively mounted on the mounting unit 5.
[0025] The first IC chip device 101 and the second IC chip device 102 have IC chips and store various kinds of information in the IC chips. The first IC chip device 101 and the second IC chip device 102 are formed, for example, in a card shape that can be mounted (inserted) into the mounting unit 5.
[0026] The first IC chip device 101 is mounted on the mounting unit 5 during normal use such as a printing operation in the image forming apparatus 1. The first IC chip device 101 stores information such as the serial number of the image forming apparatus 1 on which the first IC chip device 101 is mounted, the destination information of the image forming apparatus 1, information indicating the model of the image forming apparatus 1, and information indicating the type of the IC chip device. Here, the information indicating the type of the IC chip device is information indicating whether it is the first IC chip device 101 or the second IC chip device 102.
[0027] The second IC chip device 102 is to be mounted on the mounting portion 5 when resetting the maintenance password described later. The second IC chip device 102 stores information indicating the type of the IC chip device and information such as the model of the image forming apparatus 1 that can use the second IC chip device 102. The second IC chip device 102 can be commonly used for a plurality of image forming apparatuses 1.
[0028] The second IC chip device 102 has a set number of available uses as a usage condition. The second IC chip device 102 stores the number of available uses of the second IC chip device 102 and the number of uses so far. The number of uses of the second IC chip device 102 is the number of times the maintenance password has been reset with the second IC chip device 102 mounted on the mounting portion 5.
[0029] The storage unit 6 is composed of a storage device such as an HDD (Hard Disk Drive). The storage unit 6 stores various programs.
[0030] Further, the storage unit 6 stores a password (maintenance password) for permitting maintenance of the image forming apparatus 1. The maintenance password can be changed. When the image forming apparatus 1 is shipped, the storage unit 6 stores an initial password as the maintenance password. After the maintenance password is changed from the initial password, the storage unit 6 stores the current (latest) maintenance password and the initial password.
[0031] Here, the maintenance of the image forming apparatus 1 is to clean the conveyance roller of the printer unit 2, the inkjet head, etc.
[0032] The control unit 7 performs control processing in the image forming apparatus 1. The control unit 7 is configured to include a CPU, a RAM, a ROM, etc. The control unit 7 includes a device control unit 21, an authentication unit (corresponding to authentication means) 22, a password change unit (corresponding to change means) 23, and a password reset unit (corresponding to reset means) 24. Each part of the control unit 7 is configured by, for example, the CPU operating according to a program stored in the storage unit 6.
[0033] Here, the authentication unit 22, the password change unit 23, and the password reset unit 24 of the control unit 7 are configured by the CPU executing an authentication program stored in the storage unit 6. The authentication program may be read from a storage medium such as a CD-ROM storing the authentication program and imported into the image forming apparatus 1, or may be transmitted via a network and imported into the image forming apparatus 1.
[0034] The device control unit 21 controls operations such as conveyance of the printing medium in the printer unit 2 and image formation on the printing medium. Further, the device control unit 21 controls maintenance operations such as cleaning of the conveyance rollers of the printer unit 2.
[0035] When a request to shift to the maintenance mode is made, the authentication unit 22 performs password authentication based on whether the password input by an input operation to the input unit 12 matches the current maintenance password stored in the storage unit 6. If the input password matches the current maintenance password stored in the storage unit 6, the authentication unit 22 permits maintenance and shifts the image forming apparatus 1 to the maintenance mode. If the input password does not match the current maintenance password stored in the storage unit 6, the authentication unit 22 does not permit maintenance and does not shift to the maintenance mode. Here, the maintenance mode is a mode for performing maintenance in the image forming apparatus 1.
[0036] The password change unit 23 changes the maintenance password stored in the storage unit 6 according to an input operation on the input unit 12. The password change unit 23 can change the maintenance password stored in the storage unit 6 without the need to install a device (password change device) for changing the password on the image forming apparatus 1 (mounting unit 5). That is, the password change unit 23 can change the maintenance password stored in the storage unit 6 in a state where the first IC chip device 101 is mounted on the image forming apparatus 1 (mounting unit 5).
[0037] Here, the above-described password change device is a device that enables changing the maintenance password using a password change function described later after shifting to the maintenance mode, and is, for example, a device similar to the second IC chip device 102.
[0038] The password reset unit 24 enables resetting the maintenance password stored in the storage unit 6 when the second IC chip device 102 is mounted on the image forming apparatus 1 (mounting unit 5).
[0039] Next, the operation when changing the maintenance password in the image forming apparatus 1 will be described with reference to the flowchart of FIG. 2.
[0040] Here, in a state where the first IC chip device 101 is mounted on the mounting unit 5 and the power of the image forming apparatus 1 is turned on, the processing of the flowchart of FIG. 2 is performed. The first IC chip device 101 is mounted on the mounting unit 5 with the power of the image forming apparatus 1 turned off, and then the power of the image forming apparatus 1 is turned on. At the time when this power is turned on, the image forming apparatus 1 is in the printing mode which is a mode in which the printing operation is possible.
[0041] In step S1 of FIG. 2, the authentication unit 22 determines whether a transition to the maintenance mode is requested. The request for transition to the maintenance mode is made, for example, by operating a mode switch button provided in the input unit 12 for switching between the print mode and the maintenance mode. If it is determined that the transition to the maintenance mode is not requested (step S1: NO), the authentication unit 22 repeats step S1.
[0042] If it is determined that the transition to the maintenance mode is requested (step S1: YES), in step S2, the authentication unit 22 causes the display unit 11 to display the password input screen 31 shown in FIG. 3. The password input screen 31 is a screen for accepting input of a maintenance password by a maintenance staff member who is authorized to perform maintenance on the image forming apparatus 1.
[0043] Returning to FIG. 2, in step S3, the authentication unit 22 determines whether a password has been input by an input operation on the input unit 12. If it is determined that the password has not been input (step S3: NO), the authentication unit 22 repeats step S3.
[0044] If it is determined that the password has been input (step S3: YES), in step S4, the authentication unit 22 determines whether the input password matches the current maintenance password stored in the storage unit 6.
[0045] If it is determined that the input password does not match the current maintenance password stored in the storage unit 6 (step S4: NO), the authentication unit 22 disallows maintenance and proceeds to step S11.
[0046] When it is determined that the input password matches the current maintenance password stored in the storage unit 6 (step S4: YES), in step S5, the authentication unit 22 permits maintenance and shifts the image forming apparatus 1 to the maintenance mode. Further, the authentication unit 22 causes the display unit 11 to display a maintenance mode screen 41 shown in FIG. 4.
[0047] The maintenance mode screen 41 is a screen for accepting operations related to maintenance by a maintenance staff. On the maintenance mode screen 41, a plurality of function buttons 42 for selecting various maintenance functions and the like in the maintenance mode are displayed. Among the plurality of function buttons 42, there is a function button 42 for selecting a password change function for changing the maintenance password. Here, so that the function button 42 for selecting the password change function is not recognized by persons other than the maintenance staff, the name of the function may not be indicated on the function button 42, and symbols or the like that are unknown to persons other than the maintenance staff may be indicated.
[0048] Returning to FIG. 2, in step S6, the password change unit 23 determines whether or not the password change function has been selected from the maintenance mode screen 41 by an input operation to the input unit 12.
[0049] When the password change unit 23 determines that the password change function has not been selected (step S6: NO), in step S7, the authentication unit 22 determines whether or not an end of the maintenance mode has been requested. The request for ending the maintenance mode is made, for example, by operating the above-described mode switching button.
[0050] When the authentication unit 22 determines that an end of the maintenance mode has been requested (step S7: YES), the series of processes ends. When the authentication unit 22 determines that an end of the maintenance mode has not been requested (step S7: NO), the process returns to step S6.
[0051] When it is determined that the password change function has been selected (step S6: YES), in step S8, the password change unit 23 causes the display unit 11 to display the password change screen 51 shown in FIG. 5. The password change screen 51 is a screen for changing the maintenance password and is a screen for accepting the input of the changed maintenance password by the maintenance staff.
[0052] Returning to FIG. 2, in step S9, the password change unit 23 determines whether the changed password has been input by an input operation on the input unit 12. If it is determined that the changed password has not been input (step S9: NO), the password change unit 23 repeats step S9.
[0053] If it is determined that the changed password has been input (step S9: YES), in step S10, the password change unit 23 changes the maintenance password stored in the storage unit 6 to the input password. After that, the process proceeds to step S11.
[0054] Here, after shifting to the maintenance mode, if maintenance is instructed by pressing the function button 42 corresponding to another function before the password change function is selected, the device control unit 21 executes maintenance in the printer unit 2. Also, if the end of the maintenance mode is requested without selecting the password change function after the execution of the maintenance, it is determined as "YES" in step S7, and the series of processes ends without changing the password.
[0055] In step S11, the authentication unit 22 determines whether the end of the maintenance mode has been requested. If it is determined that the end of the maintenance mode has not been requested (step S11: NO), the authentication unit 22 repeats step S11. If the authentication unit 22 determines that the end of the maintenance mode has been requested (step S11: YES), the series of processes ends.
[0056] Next, the operation when resetting the maintenance password in the image forming apparatus 1 will be described with reference to the flowchart of FIG. 6.
[0057] The resetting of the maintenance password is performed, for example, when a maintenance staff forgets the maintenance password. When the second IC chip device 102 is mounted on the image forming apparatus 1 (mounting unit 5), the maintenance password can be reset. When resetting the maintenance password, with the power of the image forming apparatus 1 off, the maintenance staff mounts the second IC chip device 102 on the mounting unit 5, and then the power of the image forming apparatus 1 is turned on.
[0058] In step S21 of FIG. 6, the password reset unit 24 determines whether the second IC chip device 102 is mounted on the mounting unit 5 based on the information indicating the type of the IC chip device stored in the IC chip device mounted on the mounting unit 5.
[0059] If the password reset unit 24 determines that the second IC chip device 102 is not mounted on the mounting unit 5, that is, the first IC chip device 101 is mounted on the mounting unit 5 (step S21: NO), the process ends as it is.
[0060] If it is determined that the second IC chip device 102 is mounted on the mounting unit 5 (step S21: YES), in step S22, the password reset unit 24 determines whether the second IC chip device 102 mounted on the mounting unit 5 satisfies the usage conditions.
[0061] Specifically, the password reset unit 24 acquires the available number of uses and the number of uses so far of the second IC chip device 102 from the second IC chip device 102 mounted on the mounting unit 5. Then, when the number of uses of the second IC chip device 102 is less than the available number of uses, the password reset unit 24 determines that the second IC chip device 102 satisfies the usage conditions.
[0062] When the password reset unit 24 determines that the second IC chip device 102 does not meet the usage conditions (step S22: NO), the process ends as it is.
[0063] When it is determined that the second IC chip device 102 meets the usage conditions (step S22: YES), in step S23, the password reset unit 24 temporarily sets the initial password stored in the storage unit 6 as the maintenance password. Also, the password reset unit 24 causes the display unit 11 to display the password input screen 31.
[0064] When the password input screen 31 is displayed, the maintenance staff inputs the initial password by an input operation on the input unit 12 in order to shift the image forming apparatus 1 to the maintenance mode and reset the maintenance password. Here, the initial password has been notified to the maintenance staff in advance, and the maintenance staff stores the initial password.
[0065] In step S24, the authentication unit 22 determines whether a password has been input by an input operation on the input unit 12. When it is determined that no password has been input (step S24: NO), the authentication unit 22 repeats step S24.
[0066] When it is determined that a password has been input (step S24: YES), in step S25, the authentication unit 22 determines whether the input password matches the initial password temporarily set as the maintenance password in step S23. When it is determined that the input password does not match the initial password (step S25: NO), the authentication unit 22 returns to step S24.
[0067] When it is determined that the input password matches the initial password (step S25: YES), in step S26, the authentication unit 22 causes the image forming apparatus 1 to shift to the maintenance mode. Further, the authentication unit 22 causes the maintenance mode screen 41 to be displayed on the display unit 11. Further, when the maintenance mode is entered, the password reset unit 24 cancels the temporary setting of the initial password as the maintenance password.
[0068] Note that before the image forming apparatus 1 with the second IC chip device 102 attached shifts to the maintenance mode, it is in a state of waiting until the shift to the maintenance mode is performed, neither in the printing mode nor in the maintenance mode.
[0069] Next, in step S27, the password reset unit 24 determines whether the password change function has been selected from the maintenance mode screen 41 by an input operation on the input unit 12.
[0070] Here, the resetting of the maintenance password is performed using the password change function in the maintenance mode. Therefore, the maintenance staff who resets the password performs an operation of selecting the password change function from the maintenance mode screen 41.
[0071] When it is determined that the password change function has not been selected (step S27: NO), the password reset unit 24 repeats step S27.
[0072] When it is determined that the password change function has been selected (step S27: YES), in step S28, the password reset unit 24 causes the password change screen 51 to be displayed on the display unit 11.
[0073] When the password change screen 51 is displayed, the maintenance staff inputs the password to be reset by an input operation on the input unit 12.
[0074] In step S29, the password reset unit 24 determines whether the password to be reset has been input by an input operation on the input unit 12. If it is determined that the password to be reset has not been input (step S29: NO), the password reset unit 24 repeats step S29.
[0075] If it is determined that the password to be reset has been input (step S29: YES), in step S30, the password reset unit 24 resets the input password as the maintenance password. That is, the password reset unit 24 changes the current maintenance password stored in the storage unit 6 to the password input as the password to be reset.
[0076] Next, in step S31, the password reset unit 24 updates the usage count of the second IC chip device 102. Specifically, the password reset unit 24 adds "1" to the usage count stored in the second IC chip device 102. Thereby, a series of processes is completed.
[0077] When the maintenance password is reset by the above processing, the maintenance staff turns off the power of the image forming apparatus 1 and removes the second IC chip device 102 from the mounting unit 5. Next, the maintenance staff mounts the first IC chip device 101 on the mounting unit 5 and turns on the power of the image forming apparatus 1. Thereby, the image forming apparatus 1 enters the printing mode. After that, it is possible to shift to the maintenance mode using the maintenance password reset by the above processing and execute maintenance.
[0078] Note that even when the second IC chip device 102 is mounted on the image forming apparatus 1, at least some of the maintenance functions can be executed. After shifting to the maintenance mode in step S26 of FIG. 6 described above, if maintenance is instructed by pressing a function button 42 corresponding to another executable function before the password change function is selected, the device control unit 21 executes maintenance in the printer unit 2.
[0079] As described above, in the image forming apparatus 1, the password changing unit 23 can change the maintenance password stored in the storage unit 6. Further, the password change by the password changing unit 23 can be performed without requiring the installation of a device for changing the password (password change device) to the image forming apparatus 1 (mounting unit 5), that is, while the first IC chip device 101 is mounted.
[0080] Therefore, for example, it is possible to prevent a maintenance staff from being unable to change the password due to loss of the password change device, and thus it is possible to prevent inappropriate maintenance by a person other than the maintenance staff due to password leakage. Also, it is possible to prevent the password change device from being handed to a person other than the maintenance staff and inappropriate maintenance being performed by a person other than the maintenance staff.
[0081] Also, in the image forming apparatus 1, when the second IC chip device 102 is mounted on the mounting unit 5, the password resetting unit 24 can reset the maintenance password stored in the storage unit 6.
[0082] Thereby, for example, even when a maintenance staff forgets the maintenance password, it is possible to reset the password and quickly execute maintenance without waiting for a new password to be issued by notifying a server that manages the password. Therefore, it is possible to prevent a situation where maintenance cannot be quickly executed.
[0083] Therefore, according to the image forming apparatus 1, it is possible to prevent inappropriate maintenance from being performed and to prevent a situation where maintenance cannot be quickly executed.
[0084] In the image forming apparatus 1, when the second IC chip device 102 mounted on the mounting unit 5 satisfies the usage conditions, that is, when the number of times the second IC chip device 102 has been used is less than the available number of times, the password reset unit 24 can reset the password. Thereby, even when the second IC chip device 102 is handed over to a person other than the maintenance staff due to loss or the like, the number of times the second IC chip device 102 can be used is limited, so that inappropriate maintenance by a person other than the maintenance staff can be suppressed.
[0085] In the first embodiment described above, the available number of times is set as the usage condition of the second IC chip device 102, but an expiration date may be set as the usage condition of the second IC chip device 102. In this case, the password reset unit 24 can reset the password when the expiration date of the second IC chip device 102 mounted on the mounting unit 5 has not arrived.
[0086] Both the available number of times and the expiration date may be set as the usage conditions of the second IC chip device 102. In this case, for example, the password reset unit 24 can reset the password when the number of times the second IC chip device 102 mounted on the mounting unit 5 has been used is less than the available number of times and the expiration date of the second IC chip device 102 has not arrived. The usage conditions of the second IC chip device 102 may include at least either the available number of times or the expiration date.
[0087] Also, the usage conditions of the second IC chip device 102 may be omitted.
[0088] Also, steps S23 to S25 of the flowchart in FIG. 6 described above may be omitted. That is, when the second IC chip device 102 mounted on the mounting unit 5 satisfies the usage conditions, the initial password may be temporarily set and the password authentication may be omitted, and the maintenance mode may be entered. Further, the usage conditions of the second IC chip device 102 may be omitted, and when the second IC chip device 102 is mounted on the mounting unit 5, the maintenance mode may be entered as it is.
[0089] [Second Embodiment] Next, a second embodiment in which a part of the above-described first embodiment is modified will be described.
[0090] In the second embodiment, an expiration date is set for the maintenance password stored in the storage unit 6.
[0091] In the second embodiment, when changing the maintenance password, the expiration date to be set for the password is input by an input operation on the input unit 12. When the expiration date to be set for the password is input, the password change unit 23 sets the input expiration date for the password and stores it in the storage unit 6 in association with the password.
[0092] At the time of shipment of the image forming apparatus 1, a predetermined expiration date may be set for the initial password stored in the storage unit 6 as the maintenance password, or the expiration date input by an input operation on the input unit 12 may be set.
[0093] Next, the operation when shifting to the maintenance mode in the image forming apparatus 1 of the second embodiment will be described with reference to the flowchart of FIG. 7.
[0094] The processes of steps S41 to S44 in FIG. 7 are the same as the processes of steps S1 to S4 in FIG. 2 described above.
[0095] If it is determined in step S44 that the input password does not match the current maintenance password stored in the storage unit 6 (step S44: NO), the authentication unit 22 proceeds to step S47 with maintenance not permitted.
[0096] If it is determined that the input password matches the current maintenance password stored in the storage unit 6 (step S44: YES), in step S45, the authentication unit 22 determines whether the current time is within the expiration date of the password.
[0097] If it is determined that the current time is within the expiration period of the password (step S45: YES), in step S46, the authentication unit 22 permits maintenance and shifts the image forming apparatus 1 to the maintenance mode. Further, the authentication unit 22 causes the display unit 11 to display the maintenance mode screen 41. After that, the authentication unit 22 proceeds to step S47.
[0098] If it is determined in step S45 that the expiration period of the password has passed (step S45: NO), the authentication unit 22 disallows maintenance and proceeds to step S47.
[0099] The process of step S47 is the same as the process of step S11 in FIG. 2 described above. If the authentication unit 22 determines in step S47 that an end of the maintenance mode is requested (step S47: YES), the series of processes ends.
[0100] Here, after the shift to the maintenance mode and before an end of the maintenance mode is requested, if maintenance is instructed by pressing the function button 42 on the maintenance mode screen 41, the device control unit 21 executes maintenance in the printer unit 2. Also, when the password change function is selected from the maintenance mode screen 41, the password is changed by the processes of steps S8 to S10 in FIG. 2 described above.
[0101] As described above, in the second embodiment, an expiration period is set for the maintenance password. Thereby, even if the password is leaked, it is possible to suppress inappropriate maintenance by persons other than maintenance staff.
[0102] Note that the expiration date of the maintenance password may be determined based on the importance of various types of maintenance in the image forming apparatus 1 and the frequency of execution of various types of maintenance. For example, the higher the importance of the maintenance with the highest execution frequency, the shorter the expiration date of the password may be set. Also, for example, the higher the frequency of performing the most important maintenance, the shorter the expiration date of the password may be set.
[0103] Also, the expiration date of the maintenance password may be determined based on the frequency of password leakage. For example, it is estimated that the frequency of password leakage is proportional to the frequency of password reset using the second IC chip device 102, and the higher the frequency of password reset, the shorter the expiration date of the password may be set.
[0104] [Third Embodiment] Next, a third embodiment in which a part of the first embodiment described above is modified will be described.
[0105] In the third embodiment, when the second IC chip device 102 mounted on the image forming apparatus 1 (mounting unit 5) is included in the list of invalid IC chip devices (corresponding to invalid device information), the password reset unit 24 invalidates the second IC chip device 102.
[0106] Here, the above-mentioned list of invalid IC chip devices indicates the second IC chip device 102 to be invalidated. Specifically, the list of invalid IC chip devices is a list of the serial numbers of the second IC chip devices 102 to be invalidated. The second IC chip device 102 to be invalidated is, for example, the second IC chip device 102 that may have been passed to someone other than the maintenance staff due to loss or the like.
[0107] The list of invalid IC chip devices is generated in a server device (not shown) that can be connected to the image forming apparatus 1 via a network. Specifically, when the serial number of the second IC chip device 102 that may have been passed to someone other than the maintenance staff due to loss is input into the server device, the server device registers the serial number of the second IC chip device 102 in the list of invalid IC chip devices. Each time the server device updates the list of invalid IC chip devices, it transmits the list of invalid IC chip devices to the image forming apparatus 1 via the network. When the image forming apparatus 1 receives the list of invalid IC chip devices transmitted by the server device, the authentication unit 22 stores the list of invalid IC chip devices in the storage unit 6.
[0108] Next, the operation when resetting the maintenance password in the image forming apparatus 1 of the third embodiment will be described with reference to the flowcharts of FIGS. 8 and 9.
[0109] The processes of steps S51 and S52 in FIG. 8 are the same as the processes of steps S21 and S22 in FIG. 6 described above.
[0110] In step S52, when it is determined that the second IC chip device 102 satisfies the usage conditions (step S52: YES), in step S53, the password reset unit 24 determines whether the second IC chip device 102 mounted on the mounting unit 5 is included in the list of invalid IC chip devices stored in the storage unit 6.
[0111] Specifically, the password reset unit 24 acquires the serial number of the second IC chip device 102 from the second IC chip device 102 mounted on the mounting unit 5. Here, the serial number of the second IC chip device 102 is stored in advance in the second IC chip device 102. When the serial number of the second IC chip device 102 mounted on the mounting unit 5 is included in the list of invalid IC chip devices, the password reset unit 24 determines that the second IC chip device 102 is included in the list of invalid IC chip devices.
[0112] When it is determined that the second IC chip device 102 mounted on the mounting unit 5 is not included in the list of failed IC chip devices (step S53: NO), the password reset unit 24 proceeds to step S54. The processes of steps S54 to S62 are the same as the processes of steps S23 to S31 in FIG. 6 described above.
[0113] When it is determined that the second IC chip device 102 mounted on the mounting unit 5 is included in the list of failed IC chip devices (step S53: YES), in step S63, the password reset unit 24 writes failure information to the second IC chip device 102. As a result, the second IC chip device 102 fails, and a series of processes ends.
[0114] As described above, in the third embodiment, when the second IC chip device 102 mounted on the image forming apparatus 1 is included in the list of failed IC chip devices, the password reset unit 24 invalidates the second IC chip device 102. Thereby, even when there is a possibility that the second IC chip device 102 has been handed to a person other than the maintenance staff due to loss or the like, it is possible to invalidate the second IC chip device 102, so that inappropriate maintenance by a person other than the maintenance staff can be suppressed.
[0115] In the third embodiment described above, the server device generates the list of failed IC chip devices, and the image forming apparatus 1 acquires the list of failed IC chip devices from the server device. However, the image forming apparatus 1 may generate the list of failed IC chip devices.
[0116] Further, without the image forming apparatus 1 acquiring the list of failed IC chip devices from the server device, the server device may determine whether the second IC chip device 102 mounted on the mounting unit 5 is included in the list of failed IC chip devices, and the image forming apparatus 1 may acquire the result from the server device.
[0117] Also, when the image forming apparatus 1 is in an environment where it cannot be connected to a server apparatus via a network, it may be possible to make a wired connection to the image forming apparatus 1 via a USB cable or the like, and the image forming apparatus 1 may obtain a list of invalidated IC chip devices from the server apparatus via a dedicated device such as a tablet terminal that can be connected to the server apparatus via a network.
[0118] Also, a list of invalidated IC chip devices may be embedded in the firmware of the image forming apparatus 1, and the list of invalidated IC chip devices may be updated when the firmware is updated.
[0119] Also, a list of invalidated IC chip devices may be downloaded to the image apparatus from an external medium such as a USB memory in which the list of invalidated IC chip devices is stored.
[0120] Also, in the above-described third embodiment, as information indicating the second IC chip device 102 to be invalidated in the list of invalidated IC chip devices, the serial number of the second IC chip device 102 is used, but other information may be used, or the serial number of the second IC chip device 102 and other information may be combined.
[0121] Also, in the third embodiment as well as in the second embodiment, an expiration date may be set for the maintenance password.
[0122] [Fourth Embodiment] Next, a fourth embodiment in which a part of the above-described first embodiment is modified will be described.
[0123] FIG. 10 is a block diagram showing the configuration of an image forming apparatus according to the fourth embodiment. As shown in FIG. 10, the image forming apparatus 1A according to the fourth embodiment has a configuration in which a GPS reception unit 61 is added to the image forming apparatus 1 of the above-described first embodiment.
[0124] The GPS reception unit 61 receives signals from GPS satellites via an antenna (not shown).
[0125] In the image forming apparatus 1A, the authentication unit 22 obtains the current position of the image forming apparatus 1A based on the signals from GPS satellites received by the GPS receiving unit 61. Further, when the image forming apparatus 1A has moved by a predetermined distance or more and there is no maintenance deficiency in the image forming apparatus 1A before the movement, the authentication unit 22 permits the maintenance of the image forming apparatus 1A without performing password authentication.
[0126] Here, the maintenance deficiency includes non - implementation of necessary maintenance and implementation of inappropriate maintenance. Also, the above - mentioned predetermined distance is preset as a moving distance estimated when the image forming apparatus 1A moves a relatively large distance such as a movement between different offices.
[0127] Next, the operation when shifting to the maintenance mode in the image forming apparatus 1A will be described with reference to the flowchart of FIG. 11.
[0128] The process of step S71 in FIG. 11 is the same as the process of step S1 in FIG. 2 described above. In step S71, when it is determined that a shift to the maintenance mode is requested (step S71: YES), in step S72, the authentication unit 22 determines whether the request for the current shift to the maintenance mode is the first request for shifting to the maintenance mode after the image forming apparatus 1A has moved by a predetermined distance or more.
[0129] Here, the authentication unit 22 periodically or irregularly calculates the position of the image forming apparatus 1A based on the signals from GPS satellites and stores the calculated position of the image forming apparatus 1A in the storage unit 6. When the distance between the currently calculated position of the image forming apparatus 1A and the previously calculated position of the image forming apparatus 1A is equal to or greater than the predetermined distance, the authentication unit 22 determines that the image forming apparatus 1A has moved by a predetermined distance or more.
[0130] When it is determined that the request to shift to the current maintenance mode is a request to shift to the first maintenance mode after the image forming apparatus 1A has moved a predetermined distance or more (step S72: YES), in step S73, the authentication unit 22 determines whether or not a maintenance error flag described later based on the maintenance before the image forming apparatus 1A last moved a predetermined distance or more is stored in the storage unit 6.
[0131] When it is determined that the maintenance error flag based on the maintenance before the image forming apparatus 1A last moved a predetermined distance or more is not stored in the storage unit 6 (step S73: NO), the authentication unit 22 proceeds to step S74. The processes of steps S74 and S75 are the same as the processes of steps S46 and S47 in FIG. 7 described above.
[0132] Here, after the shift to the maintenance mode by step S74 and before the end of the maintenance mode is requested, if maintenance is instructed by pressing the function button 42 on the maintenance mode screen 41, the device control unit 21 executes maintenance in the printer unit 2. Also, when the password change function is selected from the maintenance mode screen 41, the password is changed by the processes of steps S8 to S10 in FIG. 2 described above.
[0133] As described above, when the authentication unit 22 determines that the maintenance error flag based on the maintenance before the image forming apparatus 1A last moved a predetermined distance or more is not stored in the storage unit 6 (step S73: NO), it permits maintenance of the image forming apparatus 1A without password authentication and shifts the image forming apparatus 1A to the maintenance mode. Here, as will be described later, the fact that the maintenance error flag based on the maintenance before the image forming apparatus 1A last moved a predetermined distance or more is not stored in the storage unit 6 means that there was no defect in the maintenance of the image forming apparatus 1A before that movement.
[0134] In step S72, when it is determined that the request to shift to the current maintenance mode is not a request to shift to the first maintenance mode after the image forming apparatus 1A has moved a predetermined distance or more (step S72: NO), the authentication unit 22 proceeds to step S76. Also, in step S73, when it is determined that the maintenance error flag is stored in the storage unit 6 (step S73: YES), the authentication unit 22 proceeds to step S76. The processes of steps S76 to S78 are the same as the processes of steps S2 to S4 in FIG. 2 described above.
[0135] In step S78, when it is determined that the input password matches the current maintenance password stored in the storage unit 6 (step S78: YES), the authentication unit 22 permits maintenance and proceeds to step S74. When it is determined that the input password does not match the current maintenance password stored in the storage unit 6 (step S78: NO), the authentication unit 22 disallows maintenance and proceeds to step S75.
[0136] Here, the above-described maintenance error flag will be explained. Among various types of maintenance in the image forming apparatus 1A, there are those that are set to be executed when predetermined execution conditions are satisfied. For example, there is maintenance that is set to be executed when the number of printed sheets after the previous maintenance reaches a predetermined number, and maintenance that is set to be executed periodically. When this type of maintenance is not executed even after a predetermined period has elapsed since the execution conditions were satisfied, the authentication unit 22 determines that the necessary maintenance has not been performed and stores the maintenance error flag in the storage unit 6.
[0137] Also, after the maintenance in the image forming apparatus 1A is performed, when a problem such as a failure in the portion related to the maintenance occurs within a predetermined period, the authentication unit 22 determines that inappropriate maintenance has been performed and stores the maintenance error flag in the storage unit 6.
[0138] That is, the maintenance error flag indicates that there is a deficiency in the maintenance of the image forming apparatus 1A. Therefore, the fact that the maintenance error flag based on the maintenance before the movement of the image forming apparatus 1A by a predetermined distance or more is not stored in the storage unit 6 means that there is no deficiency in the maintenance of the image forming apparatus 1A before the movement. Here, as described above, the deficiency in maintenance includes non - implementation of necessary maintenance and implementation of inappropriate maintenance.
[0139] As described above, in the image forming apparatus 1A, when the image forming apparatus 1A moves by a predetermined distance or more and there is no deficiency in the maintenance of the image forming apparatus 1A before the movement, the authentication unit 22 permits the maintenance of the image forming apparatus 1A without performing password authentication. Thereby, when the image forming apparatus 1A moves a relatively large distance such as between different business offices and it is desired to quickly perform the maintenance of the image forming apparatus 1A at the destination, the request can be responded to, so that the convenience can be improved.
[0140] In addition, when the maintenance of the image forming apparatus 1A is permitted without performing password authentication as described above, thereafter, while the image forming apparatus 1A does not move by a predetermined distance or more, the maintenance of the image forming apparatus 1A may be permitted without performing password authentication until a predetermined multiple - time maintenance.
[0141] Also, when the maintenance of the image forming apparatus 1A is permitted without performing password authentication as described above, the maintenance may be permitted according to an operation on the input unit 12 for shifting to the maintenance mode, and the shift to the maintenance mode may be performed.
[0142] Also, similar to the second embodiment, in the fourth embodiment, an expiration date may be set for the maintenance password.
[0143] Also, in the fourth embodiment as well as in the third embodiment, when the second IC chip device 102 mounted on the image forming apparatus 1A is included in the list of invalidated IC chip devices, the second IC chip device 102 may be invalidated.
[0144] [Other Embodiments] As described above, the present invention has been described with reference to the first to fourth embodiments. However, the description and drawings that form a part of this disclosure should not be construed as limiting the invention. Various alternative embodiments, examples, and operation techniques will become apparent to those skilled in the art from this disclosure.
[0145] In the above-described first to fourth embodiments, the case where the image forming apparatus is the device to be maintained has been described. However, the device to be maintained is not limited to the image forming apparatus as long as it is a device that requires maintenance.
[0146] In the above-described first to fourth embodiments, the password was reset for the image forming apparatus 1(1A) by mounting the second IC chip device 102. However, the dedicated device described above may be connected to the image forming apparatus 1(1A), and the password may be reset using the application installed in the dedicated device.
[0147] In the above-described first to fourth embodiments, two-step authentication may be performed by IC card authentication and password authentication.
[0148] In this case, when a transition to the maintenance mode is requested, the authentication unit 22 causes the display unit 11 to display a message instructing the maintenance staff to hold the IC card over an IC card reader (not shown) provided in the image forming apparatus 1(1A). When the maintenance staff holds the IC card over the IC card reader, the IC card reader acquires the identification information (ID) of the maintenance staff from the IC card. The authentication unit 22 transmits an authentication request including the identification information of the maintenance staff acquired by the IC card reader from the IC card and the serial number of the image forming apparatus 1(1A) to the server device.
[0149] When the server device that has received the authentication request determines that the maintenance staff indicated by the identification information included in the authentication request is registered as a maintenance staff member who can perform maintenance on the image forming apparatus 1 (1A) that is the source of the authentication request, the server device sends a maintenance permission signal to the image forming apparatus 1 (1A) that is the source of the authentication request.
[0150] When the image forming apparatus 1 (1A) receives the maintenance permission signal, the authentication unit 22 causes the display unit 11 to display the password input screen 31 of FIG. 3. When the password is input and the input password matches the current maintenance password stored in the storage unit 6, the authentication unit 22 permits maintenance and shifts the image forming apparatus 1 (1A) to the maintenance mode.
[0151] By performing two-factor authentication in this way, the security of the image forming apparatus 1 (1A) can be improved.
[0152] When performing two-factor authentication, instead of acquiring the identification information of the maintenance staff from the IC card, the dedicated device described above may be connected to the image forming apparatus 1 (1A), and the image forming apparatus 1 (1A) may acquire the identification information (ID) input by the maintenance staff to the dedicated device.
[0153] As described above, the present invention naturally includes various embodiments and the like not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims that are reasonable from the above description.
[0154] [Appendix] This application discloses the following inventions.
[0155] (Appendix 1) Storage means for storing a password for permitting maintenance of the device to be maintained; Changing means capable of changing the password without requiring the attachment of a device for changing the password to this device; Resetting means for making the password resetable when a predetermined external device is attached to this device An authentication device characterized by comprising
[0156] (Appendix 2) Usage conditions including at least one of the number of available uses and the expiration date are set for the external device, The authentication device according to Appendix 1, wherein the reset means enables resetting of the password when the external device meets the usage conditions.
[0157] (Appendix 3) The authentication device according to Appendix 1 or 2, wherein an expiration date is set for the password.
[0158] (Appendix 4) The authentication device according to any one of Appendices 1 to 3, wherein when the invalidation device information indicating the external device to be invalidated includes the external device mounted on this device, the external device mounted on this device is invalidated.
[0159] (Appendix 5) The authentication device further comprises authentication means for permitting maintenance of the device to be maintained by password authentication using the password, The authentication means permits maintenance of the device to be maintained without performing password authentication when the device to be maintained has moved a predetermined distance or more and there are no deficiencies in the maintenance of the device to be maintained before the movement. The authentication device according to any one of Appendices 1 to 4.
[0160] (Appendix 6) The password can be changed without requiring attachment of a device for changing the password for permitting maintenance of the device to be maintained, which is stored in the storage means of the authentication device, to the authentication device, When a predetermined external device is attached to the authentication device, the password can be reset An authentication method characterized by the above.
[0161] (Appendix 7) An authentication device comprising a storage means for storing a password for permitting maintenance of a device to be maintained, a changing means for changing the password without requiring attachment of a device for changing the password to the authentication device, a resetting means for making the password resetable when a predetermined external device is attached to the authentication device, and an authentication program for executing the above.
Explanation of Signs
[0162] 1, 1A Image forming apparatus 2 Printer unit 3 Operation panel 4 IC communication unit 5 Attachment unit 6 Storage unit 7 Control unit 11 Display unit 12 Input unit 21 Device control unit 22 Authentication unit 23 Password change unit 24 Password reset unit 31 Password input screen 41 Maintenance mode screen 42 Function button 51 Password change screen 61 GPS reception unit 101 First IC chip device 102 Second IC chip device
Claims
1. Storage means for storing a password for permitting maintenance of the device to be maintained; Changing means for changing the password without requiring attachment of a device for changing the password to this device; Resetting means for resetting the password when a predetermined external device different from the device is attached to this device An authentication device characterized by comprising the above.
2. Storage means for storing a password and an initial password for permitting maintenance of the device to be maintained; Changing means for changing the password without requiring attachment of a device for changing the password to this device; Resetting means for resetting the password when a predetermined external device in which the initial password is not stored is attached to this device, when the maintenance staff of the device to be maintained remembers the password, the password can be changed by the changing means without requiring attachment of a device for changing the password to this device, when the maintenance staff forgets the password, when the external device is attached to this device and the input password matches the initial password stored in the storage means, the password can be reset by the resetting means. An authentication device characterized by this.
3. Use conditions including at least one of the number of available uses and the expiration date are set in the external device, The authentication device according to claim 1 or 2, wherein the resetting means can reset the password when the external device satisfies the use conditions.
4. The authentication device according to any one of claims 1 to 3, wherein an expiration date is set for the password.
5. The authentication device according to any one of claims 1 to 4, wherein when the invalidation device information indicating the external device to be invalidated includes the external device attached to this device, the resetting means invalidates the external device attached to this device.
6. Storage means for storing a password for permitting maintenance of the device to be maintained; Changing means for changing the password without requiring attachment of a device for changing the password to this device; Resetting means for resetting the password when a predetermined external device is attached to this device, Authentication means for permitting maintenance of the device to be maintained by password authentication using the password, wherein the authentication means permits maintenance of the device to be maintained without performing password authentication when the device to be maintained has moved by a predetermined distance or more and there is no defect in the maintenance of the device to be maintained before the movement. The authentication device is characterized by this.
7. The password can be changed without requiring attachment of a device for changing the password for permitting maintenance of the device to be maintained, which is stored in the storage means of the authentication device, to the authentication device, and when a predetermined external device different from the device is attached to the authentication device, the password can be reset This is a characteristic authentication method.
8. When the maintenance staff of the device to be maintained remembers the password for permitting maintenance of the device to be maintained, which is stored in the storage means of the authentication device, the password can be changed without requiring attachment of a device for changing the password to the authentication device, and when the maintenance staff has forgotten the password, and a predetermined external device in which the initial password stored in the storage means is not stored is attached to the authentication device and the input password matches the initial password stored in the storage means, the password can be reset This is a characteristic authentication method.
9. In an authentication device provided with storage means for storing a password for permitting maintenance of a device to be maintained, changing means capable of changing the password without requiring attachment of a device for changing the password to the authentication device, and resetting means for resetting the password when a predetermined external device different from the device is attached to the authentication device An authentication program for executing.
10. In an authentication device provided with storage means for storing a password and an initial password for permitting maintenance of a device to be maintained, when the maintenance staff of the device to be maintained remembers the password, changing means capable of changing the password without requiring attachment of a device for changing the password to the authentication device, When the maintenance staff forgets the password, if a predetermined external device in which the initial password is not stored is attached to the authentication device and the input password matches the initial password stored in the storage means, a reset means for making the password resetable and An authentication program for execution.
Citation Information
Patent Citations
Information processing apparatus
JP2010061579A
Image forming system
JP2010258770A
Authentication system, storage medium, authorization device, and verification device
JP2011004317A
Authentication apparatus
JP2019012297A
Systems and methods for setting and resetting a password
US20030182584A1