Image processing device, notification method, and program

Abstract

To notify a user of a coping method.SOLUTION: An image processing apparatus comprises: a first printing unit; a printing control unit that performs control of the first printing unit; a control unit that performs control other than at least the control of the first printing unit; a first alteration detection unit that detects alteration of a first program stored in a first non-volatile memory and executed by the control unit; a second alteration detection unit that detects alteration of a second program stored in a second non-volatile memory and executed by the printing control unit; and a notification unit that performs a first notification according to a first detection result from the first alteration detection unit and a second notification according to a second detection result from the second alteration detection unit, the first notification and the second notification different in the details of notification.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present invention relates to an image processing apparatus, a notification method, and a program.

Background Art

[0002] In order to ensure the security at the time of computer startup, Secure Boot, which is a function for verifying the legitimacy of startup programs, is known. There is a multifunction peripheral corresponding to Secure Boot (see Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, in the multifunction peripheral described in Patent Document 1, although the legitimacy of the program to be executed by the CPU (Central Processing Unit) is verified, when tampering is detected, regardless of the tampering location, the startup of the multifunction peripheral is stopped and the process ends.

Means for Solving the Problems

[0005] In order to solve the above problems, one aspect of the present disclosure includes a first printing unit, a printing control unit that controls the first printing unit, a control unit that performs at least control other than the control of the first printing unit, a first tampering detection unit that detects tampering of a first program stored in a first non-volatile memory and executed by the control unit, a second tampering detection unit that detects tampering of a second program stored in a second non-volatile memory and executed by the printing control unit, and a first detection result by the first tampering detection unit And a second detection result by the second tampering detection unit Based on the above, if the first tampering detection unit detects tampering with the first program, and if the second tampering detection unit detects tampering with the second program, and each other different Includes solutionsIn the notification content, According to the first detection result First Notice and According to the second detection result Second notice users A notification unit that performs the action, The first detection process by the first tampering detection unit and the second detection process by the second tampering detection unit are performed in parallel. It is an image processing device.

[0006] Furthermore, one aspect of the present disclosure relates to a notification method in an image processing apparatus comprising: a first printing unit; a printing control unit for controlling the first printing unit; and a control unit for controlling at least the first printing unit; the notification method comprising: a first tamper detection step for detecting tampering with a first program stored in a first non-volatile memory and executed by the control unit; a second tamper detection step for detecting tampering with a second program stored in a second non-volatile memory and executed by the printing control unit; and a first detection result obtained from the first tamper detection step. And Second detection result from the second tampering detection step Based on the above, if tampering with the first program is detected in the first tampering detection step, and if tampering with the second program is detected in the second tampering detection step, and each other different Includes solutions In the notification content, According to the first detection result First Notice and According to the second detection result Second notice users The notification steps to be taken, and Furthermore, the first detection process performed by the first tampering detection step and the second detection process performed by the second tampering detection step are carried out in parallel. This is the notification method.

[0007] Furthermore, one aspect of the present disclosure provides an image processing apparatus comprising a computer for an image processing apparatus having a first printing unit, a printing control unit for controlling the first printing unit, and a control unit for controlling at least the first printing unit, the computer for the computer includes a first tamper detection step for detecting tampering with a first program stored in a first non-volatile memory and executed by the control unit, a second tamper detection step for detecting tampering with a second program stored in a second non-volatile memory and executed by the printing control unit, and a first detection result obtained from the first tamper detection step. And Second detection result from the second tampering detection step Based on the above, if tampering with the first program is detected in the first tampering detection step, and if tampering with the second program is detected in the second tampering detection step, and each other different Includes solutions In the notification content, According to the first detection result First Notice and According to the second detection result Second notice users The notification steps to be performed and the steps to be executed A program wherein the first detection process by the first tamper detection step and the second detection process by the second tamper detection step are performed in parallel. It is a program. [Brief explanation of the drawing]

[0008] [Figure 1] It is a diagram showing an example of the configuration of a printer according to an embodiment of the present invention. [Figure 2] It is a diagram showing an example of the functional configuration of a first substrate and a second substrate according to an embodiment of the present disclosure. [Figure 3] It is a diagram showing an example of main body startup processing and printing unit startup processing according to an embodiment of the present disclosure. [Figure 4] It is a diagram showing an example of a failure notification screen according to an embodiment of the present disclosure. [Figure 5] It is a diagram showing an example of a head replacement notification screen according to an embodiment of the present disclosure. [Figure 6] It is a diagram showing an example of the functional configuration of a first substrate and a second substrate according to Modification 1 of an embodiment of the present disclosure. [Figure 7] It is a diagram showing an example of main body startup processing and printing unit startup processing according to Modification 1 of an embodiment of the present disclosure. [Figure 8] It is a diagram showing an example of the functional configuration of a third substrate according to Modification 2 of an embodiment of the present disclosure.

Mode for Carrying Out the Invention

[0009] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. FIG. 1 is a diagram showing an example of the configuration of a printer 1 according to the present embodiment. The printer 1 is, as an example, an inkjet printer. The printer 1 includes a first substrate 2, a second substrate 3, a printing unit 4, a display panel 5, and an LED (Light Emitting Diode) 6.

[0010] The first substrate 2 includes a first CPU (Central Processing Unit) 20 and a first ROM (Read Only Memory) 21. The first substrate 2 is also referred to as a main body substrate.

[0011] The first CPU 20 reads various programs from the first ROM 21 and executes various controls according to the read various programs. The first CPU 20 incorporates a plurality of internal storage media such as registers. The first CPU 20 temporarily stores data from the first ROM 21 in the internal storage media and performs arithmetic processing on this data. The first CPU 20 outputs the arithmetic result to a register and further outputs it from the register to a RAM (Random Access Memory). Note that the RAM is provided on the first board 2 and the RAM is not shown in FIG. 1.

[0012] The first ROM 21 is a main storage device that stores various programs, data, parameters, etc. for the first CPU 20 to perform various operations and controls. The various programs include a first program P10 and a first forgery detection program P11. The first ROM 21 can retain the stored content even when the power supplied to the first ROM 21 is zero.

[0013] The first program P10 is a program for performing various controls on the printer 1 main body. The various controls include starting the printer 1 main body, etc. The first program P10 is the firmware of the printer 1 main body. The printer 1 main body is the part of the printer 1 excluding the printing unit 4. Therefore, the various controls performed by the first program P10 do not include the control of the printing unit 4.

[0014] The first forgery detection program P11 is a program for detecting forgery of the first program P10. That is, the first forgery detection program P11 is a program for executing secure boot. Secure boot refers to a function of verifying the legitimacy of a startup program in order to ensure the security when a computer starts up.

[0015] The second board 3 includes a second CPU 30 and a second ROM 31. As an example, the second board 3 is replaceable. The second board 3 may be provided in the printer 1 in a non-replaceable manner. The second board 3 is also referred to as a head board.

[0016] The second CPU 30 reads various programs from the second ROM 31 and executes various controls according to the read programs. The second CPU 30 has multiple internal storage media, such as registers. The second CPU 30 temporarily stores data from the second ROM 31 in the internal storage media and performs calculations on it. The second CPU 30 outputs the calculation results to the registers, and then outputs them from the registers to the RAM. The RAM is provided on the second board 3 and is not shown in Figure 1.

[0017] The second ROM 31 is a main memory that stores various programs, data, and parameters for the second CPU 30 to perform various calculations and controls. These programs include the second program P20 and the second tamper detection program P21. The second ROM 31 can retain its stored contents even when the power supplied to it is zero.

[0018] The second program, P20, is a program for controlling the printing unit 4. Controlling the printing unit 4 includes controlling the inkjet head. The second program, P20, is the firmware for the printing unit 4.

[0019] The second tamper detection program P21 is a program that detects tampering with the second program P20. In other words, the second tamper detection program P21 is a program that executes Secure Boot.

[0020] The printing unit 4 performs printing. The printing unit 4 includes a print head 40. The print head 40 is an inkjet print head.

[0021] The display panel 5 displays various information using text or images. The display panel 5 also accepts user input. The display panel 5 is, for example, a touch panel and displays buttons corresponding to user input. The display panel 5 includes liquid crystal display panels, organic EL (Electro-Luminescence) display panels, and the like.

[0022] LED6 provides various notifications by lighting up.

[0023] Figure 2 shows an example of the functional configuration of the first substrate 2 and the second substrate 3 according to this embodiment. The main control unit 200 is located on the first circuit board 2. The main control unit 200 performs control other than the control of the printing unit 4. The main control unit 200 is realized by executing processing according to the first program P10 read by the first CPU 20 from the first ROM 21. The main control unit 200 includes a first tamper detection unit 201, a notification unit 202, an operation reception unit 203, and a recovery mode transition unit 204.

[0024] The head control unit 300 is located on the second circuit board 3. The head control unit 300 controls the printing unit 4. The head control unit 300 is realized by the second CPU 30 executing processing according to the second program P20 read from the second ROM 31. The head control unit 300 includes a second tamper detection unit 301.

[0025] The first tamper detection unit 201 detects tampering with the first program P10. The first program P10 is stored in the first ROM 21 and executed by the main control unit 200. The first tamper detection unit 201 is realized by the first CPU 20 executing processing according to the first tamper detection program P11 read from the first ROM 21. The process by which the first tamper detection unit 201 detects tampering with the first program P10 is called the first detection process.

[0026] The second tamper detection unit 301 detects tampering with the second program P20. The second program P20 is stored in the second ROM 31 and executed by the head control unit 300. The second tamper detection unit 301 is realized by the second CPU 30 executing processing according to the second tamper detection program P21 read from the second ROM 31. The process by which the second tamper detection unit 301 detects tampering with the second program P20 is called the second detection process.

[0027] Notification unit 202 issues the first notification and the second notification. The first notification is a notification corresponding to the first detection result by the first tampering detection unit 201. The first notification includes a notification to show the user how to deal with the situation if tampering with the first program P10 is detected. Such solutions may include, for example, restarting the printer 1 or updating the first program P10. The notification unit 202 lights up the LED 6 as the first notification.

[0028] The second notification is a notification corresponding to the second detection result by the second tampering detection unit 301. The second notification includes, for example, a notification to show the user that the printing unit 4 is malfunctioning if tampering with the second program P20 is detected, or a notification to show the user how to deal with the problem. Such a solution may include, for example, replacing the print head 40.

[0029] The notification unit 202 issues a first notification based on the first detection result from the first tampering detection unit 201, and a second notification based on the second detection result from the second tampering detection unit 301, with different notification content for each.

[0030] The operation reception unit 203 receives operations from the user. These operations include operations to restart printer 1.

[0031] The recovery mode transition unit 204 transitions to recovery mode after a reboot if a predetermined first condition is met. The predetermined first condition is that tampering has been detected by at least one of the first tampering detection unit 201 and the second tampering detection unit 301. Alternatively, the predetermined first condition may be that tampering has been detected by both the first tampering detection unit 201 and the second tampering detection unit 301.

[0032] Next, with reference to Figure 3, the main unit startup process and the print unit startup process will be described. Figure 3 is a diagram showing an example of the main unit startup process and the print unit startup process according to this embodiment. The main unit startup process is performed by the main unit control unit 200. The print unit startup process is performed by the head control unit 300. The main unit startup process and the print unit startup process are performed when the power of the printer 1 is turned on, respectively. In this embodiment, the main unit startup process and the print unit startup process are performed in parallel.

[0033] Step S10: The first tamper detection unit 201 performs the first detection process. That is, the first tamper detection unit 201 performs the process to detect tampering with the first program P10. The first tamper detection unit 201 obtains the signature data stored in the first ROM 21. The first tamper detection unit 201 also calculates a hash value from the first program P10 stored in the first ROM 21. The first tamper detection unit 201 performs the first detection process by performing signature verification using the public key, the obtained signature data, and the calculated hash value. The public key is a public key used for tamper verification. The public key is held in advance by the first tamper detection unit 201. Subsequently, the main control unit 200 executes the process of step S20.

[0034] Step S20: The first tamper detection unit 201 determines whether or not it has detected tampering with the first program P10. If the signature verification process fails, the first tamper detection unit 201 determines that it has detected tampering. If the signature verification process is successful, the first tamper detection unit 201 determines that it did not detect tampering. If the first tampering detection unit 201 determines that tampering has been detected (step S20; YES), the main control unit 200 executes the process in step S40. On the other hand, if the first tampering detection unit 201 determines that tampering has not been detected (step S20; NO), the main control unit 200 executes the process in step S50.

[0035] Step S30: The notification unit 202 gives a first notification. As the first notification, the notification unit 202 lights up, for example, LED 6. After that, the main control unit 200 executes the process of step S40.

[0036] In this context, the illumination of LED6 signifies a notification prompting the user to restart the printer 1. Therefore, the content of the first notification is different from the notification indicating a malfunction, which will be discussed later. It should be noted that the user is already aware of the meaning of the notification when LED6 illuminates, as explained in the instruction manual.

[0037] LED6 may blink instead of remaining lit. Furthermore, the meaning of the notification may be distinguished by the color of LED6 when it is lit or blinking. Instead of lighting the LED 6 as a first notification, the notification unit 202 may display a string of text on the display panel 5. For example, the notification unit 202 may display a string of text such as "Please restart." on the display panel 5. Since the display panel 5 is controlled by the main control unit 200, the display panel 5 can only display various information after the main control unit 200 has started up. However, the display panel 5 has the function of displaying simple information such as monochrome strings of text. Therefore, even before the main control unit 200 has started up, the display panel 5 can display monochrome strings of text, etc. Alternatively, instead of lighting the LED 6 as a first notification, the notification unit 202 may turn off the display panel 5 by cutting off the power supply to the display panel 5.

[0038] Step S40: After the main unit of printer 1 is restarted by the main unit control unit 200, the recovery mode transition unit 204 transitions to recovery mode. The main unit of printer 1 is restarted when the operation reception unit 203 receives a restart operation from the user. Note that the main unit of printer 1 may be restarted automatically.

[0039] In recovery mode, for example, the notification unit 202 provides a notification to the user prompting them to update the firmware, which is the first program P10. The notification unit 202 provides this notification by, for example, displaying a string such as "Please update the firmware" on the display panel 5.

[0040] Step S50: The main unit control unit 200 starts up. That is, the first program P10, which is the firmware for the printer 1 main unit, is started up. After that, the main unit control unit 200 executes the process of step S60 when one of steps S130 and S150, described later, is executed and the second detection result from the second tamper detection unit 301 is obtained from the head control unit 300.

[0041] Step S60: The main control unit 200 determines whether the second tampering detection unit 301 has detected tampering with the second program P20. If the main control unit 200 determines that the second tampering detection unit 301 has detected tampering with the second program P20 (Step S60; YES), it executes the process in Step S70. On the other hand, if the main control unit 200 determines that the second tampering detection unit 301 has not detected tampering with the second program P20 (Step S60; NO), it executes the process in Step S80.

[0042] Step S70: The notification unit 202 issues a second notification. As a second notification, the notification unit 202 issues a notification to the user, for example, to indicate that the printing unit 4 is malfunctioning. In other words, the content of the second notification is a notification that the unit is malfunctioning. As a second notification, the notification unit 202 displays the malfunction notification screen D1 on the display panel 5. Figure 4 shows an example of the malfunction notification screen D1. The malfunction notification screen D1 contains a string such as "It is malfunctioning." This string may also be "Error." Subsequently, the main control unit 200 executes the process of step S75.

[0043] The notification unit 202 may also issue a second notification prompting the user to replace the head 40. In this case, the notification unit 202 displays the head replacement notification screen D2 on the display panel 5 as the second notification. Figure 5 shows an example of the head replacement notification screen D2. The head replacement notification screen D2 includes text such as "Please replace the head."

[0044] Step S75: The main control unit 200 disables the printing function. At this point, the main control unit 200 keeps all functions other than the printing function enabled. The operation of the main control unit 200 with the printing function disabled and all other functions enabled is also called degraded operation. Therefore, the main control unit 200 starts degraded operation.

[0045] Step S80: The main control unit 200 starts operating normally. With this, the main unit control unit 200 terminates the main unit startup process.

[0046] Step S110: The second tamper detection unit 301 performs the second detection process. That is, the second tamper detection unit 301 performs processing to detect tampering with the second program P20. The second tamper detection unit 301 obtains the signature data stored in the second ROM 31. The second tamper detection unit 301 also calculates a hash value from the second program P20 stored in the second ROM 31. The second tamper detection unit 301 performs the second detection process by performing signature verification processing using the public key, the obtained signature data, and the calculated hash value. The public key is the public key used for tamper verification. The public key is held in advance by the second tamper detection unit 301. Subsequently, the head control unit 300 executes the process of step S120.

[0047] Step S120: The second tamper detection unit 301 determines whether or not it has detected tampering with the second program P20. The second tamper detection unit 301 determines that it has detected tampering if the signature verification process fails. The second tamper detection unit 301 determines that it did not detect tampering if the signature verification process is successful. If the second tampering detection unit 301 determines that tampering has been detected (step S120; YES), the head control unit 300 executes the process in step S130. On the other hand, if the second tampering detection unit 301 determines that tampering has not been detected (step S120; NO), the head control unit 300 executes the process in step S150.

[0048] Step S130: The head control unit 300 outputs a detection result to the main control unit 200 indicating that tampering has been detected, as a second detection result from the second tampering detection unit 301. Subsequently, the head control unit 300 executes the process of step S140.

[0049] Step S140: The head control unit 300 stops.

[0050] Step S150: The head control unit 300 outputs a detection result to the main control unit 200 indicating that no tampering was detected, as a second detection result from the second tampering detection unit 301. Subsequently, the head control unit 300 executes the process of step S160.

[0051] Step S160: The head control unit 300 is activated. That is, the second program P20, which is the firmware for the printing unit 4, is activated. After that, the head control unit 300 executes the process of step S170.

[0052] Step S170: The head control unit 300 starts operating normally. With this, the head control unit 300 terminates the printing unit startup process.

[0053] As described above, the main unit startup process and the printing unit startup process are performed in parallel. The main unit startup process includes a first detection process by the first tampering detection unit 201. The printing unit startup process includes a second detection process by the second tampering detection unit 301. Therefore, in this embodiment, the first detection process and the second detection process are performed in parallel.

[0054] As described above, the contents of the first notification and the second notification include countermeasures. These countermeasures are the actions that the user should take to ensure the device operates normally if tampering with the firmware used to operate the device is detected.

[0055] For example, the countermeasure is a method that the user should take to ensure that printer 1 operates normally when tampering is detected in the first program P10, which is the firmware of printer 1. In this embodiment, the first notification content is a notification prompting the user to restart printer 1, as an example of a countermeasure when tampering with the first program P10 is detected.

[0056] Furthermore, the countermeasures refer to the actions the user should take to ensure the proper operation of the printing unit 4 if tampering is detected with the firmware of the printing unit 4, such as the second program P20. The second notification is an example of a countermeasure when tampering with the second program P20 is detected, and it prompts the user to replace the print head 40.

[0057] Herein, a first modified example of this embodiment will be described. In this embodiment, the case in which the main unit control unit 200 and the head control unit 300 enter recovery mode after the main unit of the printer 1 is restarted was described. In this modified example, the case in which the head control unit 300 does not enter recovery mode after the main unit of the printer 1 is restarted will be described. Note that the same reference numerals are used for components identical to those in the above-described embodiment, and descriptions of identical components and operations may be omitted.

[0058] Figure 6 shows an example of the functional configuration of the first substrate 2a and the second substrate 3 according to this modified example. Comparing the first substrate 2a and the second substrate 3 according to this modified example with the first substrate 2 and the second substrate 3 according to the embodiment described above, the difference is that the second main control unit 200a is provided on the first substrate 2a. Here, the configuration of the second substrate 3 is the same as in the embodiment described above.

[0059] The second main unit control unit 200a includes a first tampering detection unit 201, a notification unit 202, an operation reception unit 203, and a tampering control unit 205. Comparing the second main unit control unit 200a with the main unit control unit 200 according to the above embodiment, the second main unit control unit 200a differs from the main unit control unit 200 in that it includes a tampering control unit 205 instead of a recovery mode transition unit 204.

[0060] The tamper detection control unit 205, when tampering is detected by either the first tamper detection unit 201 or the second tamper detection unit 301, proceeds to a process other than the process of transitioning to recovery mode after a restart. The tamper detection control unit 205 may also proceed to a process other than the process of transitioning to recovery mode after a restart if tampering is detected by both the first tamper detection unit 201 and the second tamper detection unit 301. A process other than the process of transitioning to recovery mode is, for example, a process of instructing the head control unit 300 to maintain a standby state.

[0061] Figure 7 shows an example of the main unit startup process and the printing unit startup process according to this modified example. In this modified example, the main unit startup process and the printing unit startup process are performed in parallel, similar to the embodiment described above. The processes from step S210 to step S230, from step S250 to step S280, and from step S310 to step S370 are the same as the processes from step S10 to step S30, from step S50 to step S80, and from step S110 to step S170 in Figure 3, so their explanation is omitted.

[0062] After the processing in step S230, the second main unit control unit 200a executes the processing in step S240. Step S240: After the printing unit 4 is restarted by the second main unit control unit 200a, the tampering control unit 205 does not transition to recovery mode. The tampering control unit 205 transitions to a process other than the process of transitioning to recovery mode. As a process other than the process of transitioning to recovery mode, the tampering control unit 205 may, for example, instruct the second main unit control unit 200a to maintain a standby state.

[0063] After the processing in step S330, the head control unit 300 executes the processing in step S340. Step S340: After the print unit 4 is restarted by the head control unit 300, the tampering control unit 205 does not transition to recovery mode. The tampering control unit 205 transitions to a process other than the process of transitioning to recovery mode. As a process other than the process of transitioning to recovery mode, the tampering control unit 205 may, for example, instruct the head control unit 300 to maintain a standby state.

[0064] A second modified example of this embodiment will now be described. As described above, in the printing unit startup process according to the first modified example, the printer does not transition to recovery mode after the printer 4 is restarted. On the other hand, in the printing unit startup process according to the embodiment described above, the printer transitions to recovery mode after the printer 4 is restarted. A changeover switch may be provided in the printer 1 to switch whether or not to transition to recovery mode after the printer 4 is restarted. Depending on the state of the changeover switch, the main unit control unit 200 switches whether to activate the recovery mode transition unit 204 to transition to recovery mode after the printer 4 is restarted, or whether to activate the tampering control unit 205 to not transition to recovery mode after the printer 4 is restarted.

[0065] A third modified example of this embodiment will now be described. In the embodiments and the first modified example described above, an example was given in which the main unit startup process and the printing unit startup process are performed in parallel, but this is not limited to this. The main unit startup process and the printing unit startup process may be performed sequentially. For example, the processes from steps S110 to S170 shown in Figure 3 may be performed as the printing unit startup process, and then the processes from steps S10 to S80 may be performed as the main unit startup process. When the processes from steps S110 to S170 shown in Figure 3 are performed as the printing unit startup process, and then the processes from steps S10 to S80 are performed as the main unit startup process, in steps S130 and S150, the head control unit 300 stores the second detection result in a RAM (not shown) provided on the first substrate 2 or the first a substrate 2a. In step S60, the main unit control unit 200 determines whether the second tampering detection unit 301 has detected tampering with the second program P20 based on the second detection result stored in the RAM.

[0066] As another example, the main unit startup process may involve steps S10 to S50 as shown in Figure 3, followed by the printing unit startup process from steps S110 to S170, and then the main unit startup process from steps S60 to S80.

[0067] Now, a fourth modified example of this embodiment will be described. In the embodiments described above, the case in which the printer 1 is equipped with two circuit boards, a first circuit board 2 and a second circuit board 3, was explained. In this modified example, the case in which the printer 1 is equipped with a single circuit board, a third circuit board 7b, will be explained. Note that components identical to those in the embodiments described above are denoted by the same reference numerals, and descriptions of identical components and operations may be omitted.

[0068] Figure 8 shows an example of the functional configuration of the third substrate 7b according to this embodiment. The main unit control unit 200 and the head unit control unit 300 are provided on the third substrate 7b. The functional configuration of the main unit control unit 200 provided on the third substrate 7b is the same as the functional configuration of the main unit control unit 200 provided on the first substrate 2. The functional configuration of the head unit control unit 300 provided on the third substrate 7b is the same as the functional configuration of the head unit control unit 300 provided on the first substrate 2.

[0069] In the embodiments and modifications described above, an example was given where the first program P10 and the second program P20 are different programs, but this is not limited to this. The first program P10 and the second program P20 may be a single program.

[0070] In the embodiments and modifications described above, an example was given where the printer is an inkjet printer, but it is not limited to this. The printer may be a serial head printer or a line head printer. The printer may also be a laser printer. In the embodiments and modifications described above, an example was given where the image processing device is a printer, but this is not the only example. The image processing device may also be a multifunction device equipped with printing capabilities.

[0071] As described above, the image processing apparatus according to this embodiment comprises a first printing unit, a printing control unit, a control unit, a first tampering detection unit 201, a second tampering detection unit 301, and a notification unit 202. The print control unit controls the first printing unit. The control unit performs control other than the control of the first printing unit. The first tamper detection unit 201 detects tampering with the first program P10, which is stored in the first non-volatile memory and executed by the control unit. The second tamper detection unit 301 detects tampering with the second program P20, which is stored in the second non-volatile memory and executed by the print control unit. The notification unit 202 issues a first notification based on the first detection result from the first tampering detection unit 201 and a second notification based on the second detection result from the second tampering detection unit 301, with different notification content for each. In this embodiment, the printer 1 is an example of an image processing device. The printing unit 4 is an example of a first printing unit. The head control unit 300 is an example of a print control unit. The main unit control unit 200 is an example of a control unit. The first ROM 21 is an example of a first non-volatile memory. The second ROM 31 is an example of a second non-volatile memory.

[0072] With this configuration, the image processing device according to this embodiment can provide different notification content for the first notification based on the first detection result and the second notification based on the second detection result. Therefore, different notification content can be provided to the user depending on whether tampering with the first program P10 or the second program P20 is detected.

[0073] Furthermore, in the image processing apparatus according to this embodiment, the first notification content of the first notification and the second notification content of the second notification include a method for dealing with the issue. With this configuration, the image processing device according to this embodiment can notify the user of countermeasures if tampering with the first program P10 or the second program P20 is detected.

[0074] Furthermore, in the image processing apparatus according to this embodiment, the first notification content of the first notification is different from the notification content for fault handling, and the second notification content of the second notification is the notification content for fault handling. With this configuration, the image processing device according to this embodiment can notify the user of a malfunction only when tampering with the second program P20 is detected, and does not notify the user of a malfunction when tampering with the first program P10 is detected. Therefore, the user can be notified of appropriate information depending on the type of program that has been tampered with. An example of a notification different from the malfunction notification is, as mentioned above, a notification prompting the user to restart the printer 1.

[0075] Furthermore, in the image processing apparatus according to this embodiment, the control unit is provided on the first substrate 2, and the printing control unit is provided on the second substrate 3, and the second substrate 3 is replaceable. With this configuration, the image processing device according to this embodiment can deal with the detection of tampering with the second program P20 by replacing the second substrate 3.

[0076] Furthermore, in the image processing apparatus according to this embodiment, the first detection process by the first tampering detection unit 201 and the second detection process by the second tampering detection unit 301 are performed in parallel. With this configuration, the image processing apparatus according to this embodiment performs the first detection process and the second detection process in parallel, thus reducing the time required for the first detection process and the second detection process compared to when they are performed sequentially.

[0077] Furthermore, the image processing apparatus according to this embodiment includes a recovery mode transition unit 204. The recovery mode transition unit 204 transitions to recovery mode after a restart if a predetermined first condition is met. The predetermined first condition is that tampering has been detected by at least one of the first tampering detection unit 201 and the second tampering detection unit 301, or that tampering has been detected by both the first tampering detection unit 201 and the second tampering detection unit 301. With this configuration, the image processing device according to this embodiment can enter recovery mode after restarting if tampering is detected in either or both of the first program P10 and the second program P20. Therefore, even if tampering is detected, it can be dealt with by the recovery mode.

[0078] Furthermore, the image processing apparatus according to the first modified example of this embodiment includes a tampering control unit 205. When tampering is detected by either or both of the first tampering detection unit 201 and the second tampering detection unit 301, the tampering control unit 205 proceeds to a process other than the process of transitioning to recovery mode after restarting. With this configuration, in the image processing apparatus according to the first modified example of this embodiment, if tampering is detected in either or both of the first program P10 and the second program P20, and it is not appropriate to transition to recovery mode after restarting, the system can transition to a process other than recovery mode.

[0079] Furthermore, in the image processing apparatus according to this embodiment, the first program P10 and the second program P20 are different programs. With this configuration, the image processing device according to this embodiment can independently detect tampering with the first program P10 and tampering with the second program P20.

[0080] Furthermore, in the image processing apparatus according to this embodiment, the first printing unit includes an inkjet head. With this configuration, the image processing apparatus according to this embodiment can notify the user of a second notification when tampering with the second program executed by the print control unit, which controls at least the inkjet head, is detected.

[0081] Furthermore, some parts of the image processing apparatus in the above-described embodiment, such as the control unit and the print control unit, may be implemented using a computer. In that case, the program for implementing this control function may be recorded on a computer-readable recording medium, and the program recorded on this recording medium may be loaded into a computer system and executed. Here, "computer system" refers to a computer system built into the image processing apparatus, and includes hardware such as an OS and peripheral devices. Furthermore, "computer-readable recording medium" refers to portable media such as flexible disks, magneto-optical disks, ROMs, CD-ROMs, and storage devices such as hard disks built into a computer system. Moreover, "computer-readable recording medium" may also include those that dynamically hold programs for a short period of time, such as communication lines used when transmitting programs via networks such as the Internet or communication lines such as telephone lines, and those that hold programs for a certain period of time, such as volatile memory inside a computer system that acts as a server or client in such cases. Furthermore, the above-mentioned program may be for implementing some of the functions described above, and may also be able to implement the above-mentioned functions in combination with programs already recorded in the computer system. Furthermore, some or all of the image processing apparatus in the above-described embodiment may be implemented as an integrated circuit such as an LSI (Large Scale Integration). Each functional block of the image processing apparatus may be individually processorized, or some or all of them may be integrated into a single processor. In addition, the method of implementing the integrated circuit is not limited to LSIs; it may also be implemented using dedicated circuits or general-purpose processors. Furthermore, if an integrated circuit technology that can replace LSIs emerges due to advances in semiconductor technology, an integrated circuit using that technology may be used.

[0082] Although one embodiment of this disclosure has been described in detail above with reference to the drawings, the specific configuration is not limited to that described above, and various design changes can be made without departing from the gist of this disclosure. [Explanation of Symbols]

[0083] 1…Printer, 4…Printing unit, 200…Main unit control unit, 201…First tamper detection unit, 202…Notification unit, 300…Head control unit, 301…Second tamper detection unit, P10…First program, P20…Second program

Claims

1. First Printing Department, A print control unit that controls the first printing unit, A control unit that performs control other than the control of the first printing unit, A first tamper detection unit that detects tampering with a first program stored in a first non-volatile memory and executed by the control unit, A second tamper detection unit that detects tampering with a second program stored in a second non-volatile memory and executed by the print control unit, A notification unit provides the user with a first notification corresponding to the first detection result and a second notification corresponding to the second detection result, with notification content that includes different countermeasures depending on whether the first tampering detection unit detects tampering with the first program or the second tampering detection unit detects tampering with the second program, based on the first detection result and the second detection result of the second tampering detection unit. Equipped with, The first detection process by the first tampering detection unit and the second detection process by the second tampering detection unit are performed in parallel. Image processing device.

2. The content of the first notification mentioned above is different from the content of the notification regarding the malfunction. The content of the second notification mentioned above is a notification that the device is being treated as a malfunction. The image processing apparatus according to claim 1.

3. The control unit is provided on the first substrate, The printing control unit is provided on the second substrate, The second substrate is replaceable. The image processing apparatus according to claim 1 or claim 2.

4. The system includes a recovery mode transition unit that, when a predetermined first condition is met, transitions to recovery mode after a restart. The predetermined first condition is that tampering has been detected by at least one of the first tampering detection unit and the second tampering detection unit, or that tampering has been detected by both the first tampering detection unit and the second tampering detection unit. The image processing apparatus according to any one of claims 1 to 3.

5. The system includes a tampering detection control unit that, when tampering is detected by either or both of the first tampering detection unit and the second tampering detection unit, transitions to a process other than transitioning to recovery mode after a restart. The image processing apparatus according to any one of claims 1 to 3.

6. The first program and the second program are different programs. The image processing apparatus according to any one of claims 1 to 5.

7. The first printing unit includes an inkjet head, The image processing apparatus according to any one of claims 1 to 6.

8. First Printing Department, A print control unit that controls the first printing unit, A control unit that performs control other than the control of the first printing unit, In a notification method for an image processing device equipped with, A first tamper detection step for detecting tampering with a first program stored in a first non-volatile memory and executed by the control unit, A second tamper detection step for detecting tampering with a second program stored in a second non-volatile memory and executed by the print control unit, A notification step in which, based on the first detection result from the first tampering detection step and the second detection result from the second tampering detection step, a notification is given to the user, with notification content that includes different countermeasures depending on whether tampering to the first program is detected in the first tampering detection step or whether tampering to the second program is detected in the second tampering detection step, and a first notification corresponding to the first detection result and a second notification corresponding to the second detection result, It has, The first detection process performed by the first tampering detection step and the second detection process performed by the second tampering detection step are performed in parallel. Notification method.

9. First Printing Department, A print control unit that controls the first printing unit, A control unit that performs control other than the control of the first printing unit, The computer of the image processing device equipped with, A first tamper detection step for detecting tampering with a first program stored in a first non-volatile memory and executed by the control unit, A second tamper detection step for detecting tampering with a second program stored in a second non-volatile memory and executed by the print control unit, A notification step in which, based on the first detection result from the first tampering detection step and the second detection result from the second tampering detection step, a notification is given to the user, with notification content that includes different countermeasures depending on whether tampering to the first program is detected in the first tampering detection step or whether tampering to the second program is detected in the second tampering detection step, and a first notification corresponding to the first detection result and a second notification corresponding to the second detection result, A program to execute, The first detection process performed by the first tampering detection step and the second detection process performed by the second tampering detection step are performed in parallel. program.

Images