Information processing device, information processing system, and information processing program

Abstract

To provide an information processing apparatus, an information processing system, and an information processing program capable of detecting unauthorized export of device information.SOLUTION: A generation detection unit 56 detects generation information representing old and new generations of an image forming apparatus 12 to which log information is transmitted, and generation information of all image forming apparatuses 12 connected to a communication line to which the image forming apparatus 12 is connected. Then, based on detection results of the generation detection unit 56, an unauthorized operation determination unit 58 identifies a device configuration connected to the communication line, and determines whether or not a device that can be imported to or has a possibility of being imported to the communication line exists in the communication line, for determining whether or not an export operation is a normal operation or an unauthorized operation.SELECTED DRAWING: Figure 4

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, an information processing system, and an information processing program.

Background Art

[0002] Patent Document 1 discloses a log holding unit that holds a plurality of logs regarding a plurality of operations performed from a user's terminal on a server that can store a file in which predetermined important information is recorded, and an important information detection unit that detects that important information is recorded in a specific file that is a file acquired by the user's terminal from the server. When it is detected that important information is recorded in a specific file, an alert notification unit that notifies a predetermined auditor of information for identifying the log regarding the acquisition operation of the specific file has been proposed.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] When managing a device to be managed individually, when an export operation of information stored in the device is performed, it is not known whether there is a device that can import the exported information, so illegal export of the device's information cannot be detected.

[0005] Therefore, an object of the present invention is to provide an information processing apparatus, an information processing system, and an information processing program capable of detecting illegal export of device information.

Means for Solving the Problems

[0006] To achieve the above objective, the information processing device according to the first embodiment includes a processor, which detects an export operation of predetermined information of a device under management, and when it detects the export operation, it performs a process to detect the export operation as an invalid export operation if there is no other device that can import or has the potential to import information to the device to which the device that detected the export operation is connected.

[0007] Furthermore, in the information processing device according to the second embodiment, the device has backward compatibility characteristics, and the processor detects the device that can be imported or may be imported using generation information representing the new and old generations of the device included in the communication network and the number of the device connected to the communication network.

[0008] Furthermore, in the information processing device according to the third embodiment, the processor detects the generation information from the model information of the device, as in the information processing device according to the second embodiment.

[0009] Furthermore, in the information processing device according to the fourth embodiment, in the information processing device according to any one of the first to third embodiments, the processor receives log information of the device that detected the export operation from the device, and performs the processing using the received log information.

[0010] Furthermore, in the information processing device according to the fifth embodiment, in the information processing device according to the first to third embodiments, the processor receives provisional log information from the device that detected the export operation, including the export operation, before executing the export operation, and performs the processing using the provisional log information.

[0011] Furthermore, in the information processing device according to the sixth embodiment, the processor, in the information processing device according to the fifth embodiment, causes the device to stop executing the export operation by transmitting the detection result of an unauthorized export operation to the device.

[0012] Furthermore, in the information processing device according to the seventh embodiment, the processor shares the generation information and the number of devices connected to the communication network among the devices connected to the communication network, and as a device, detects unauthorized export operations of its own device.

[0013] Furthermore, in the information processing device according to the eighth embodiment, in the information processing device according to any one of the first to seventh embodiments, the processor detects an export operation as invalid if there is no import operation within a predetermined time after the export operation.

[0014] Furthermore, the information processing system according to the ninth embodiment includes a device that transmits log information of its own device when it detects an export operation, and an information processing device that, upon receiving log information from the device, performs processing to detect the export operation as an unauthorized export operation if there is no other device capable of importing or potentially capable of importing in the communication network to which the device that detected the export operation is connected.

[0015] Furthermore, the information processing program according to the tenth embodiment causes a computer to detect an export operation of predetermined information of a device under management, and if such an export operation is detected, it causes the computer to execute a process to detect the export operation as an invalid export operation if there are no other devices that can import or have the potential to import information to the communication network to which the device that detected the export operation is connected. [Effects of the Invention]

[0016] According to the first embodiment, an information processing device capable of detecting the unauthorized export of device information can be provided.

[0017] According to the second aspect, it becomes possible to detect whether or not there is another device that can be imported or potentially imported.

[0018] According to the third embodiment, it becomes possible to identify generational information.

[0019] According to the fourth aspect, it becomes possible to detect an unauthorized export operation of an external device that has detected an export operation.

[0020] According to the fifth aspect, it becomes possible to detect an unauthorized export operation of an external device that has detected an export operation before the execution of the export operation.

[0021] According to the sixth aspect, it is possible to prevent the execution of an unauthorized export operation.

[0022] According to the seventh aspect, it becomes possible for the device itself connected to the communication network to detect an unauthorized export operation.

[0023] According to the eighth aspect, it becomes possible to detect an unauthorized export operation even in a device configuration where it is unknown whether there is another device that can be imported or may be imported.

[0024] According to the ninth aspect, it is possible to provide an information processing system capable of detecting an unauthorized export of device information.

[0025] According to the tenth aspect, it is possible to provide an information processing program capable of detecting an unauthorized export of device information.

Brief Description of Drawings

[0026] [Figure 1] It is a diagram showing a schematic configuration of an information processing system including an image forming apparatus according to the first embodiment. [Figure 2] It is a block diagram showing a main part configuration of an electrical system of an image forming apparatus according to the first embodiment. [Figure 3] It is a block diagram showing a main part configuration of an electrical system of a server according to the first embodiment. [Figure 4] It is a functional block diagram of an image forming apparatus and a server in an information processing system according to the first embodiment. [Figure 5]This figure shows an example of log information. [Figure 6] This figure shows an example of the model name, firmware version, and generation version. [Figure 7] This diagram shows an example of the logic used to determine fraudulent activity. [Figure 8] This flowchart shows an example of the processing flow performed in the image forming apparatus of the information processing system according to the first embodiment. [Figure 9] This flowchart shows an example of the processing flow performed by the server of the information processing system according to the first embodiment. [Figure 10] This flowchart shows an example of the processing flow performed in the image forming apparatus of the information processing system according to the second embodiment. [Figure 11] This flowchart shows an example of the processing flow performed by the server of the information processing system according to the second embodiment. [Figure 12] This figure shows a functional block diagram of the image forming apparatus of the information processing device according to the third embodiment. [Figure 13] This flowchart shows an example of the processing flow performed in the image forming apparatus of the information processing system according to the third embodiment. [Figure 14] This flowchart shows an example of the processing flow performed on the server after an export operation is performed in the information processing system according to this embodiment. [Modes for carrying out the invention]

[0027] (First Embodiment) Hereinafter, an example of an embodiment of the present invention will be described in detail with reference to the drawings. Figure 1 is a diagram showing a schematic configuration of an information processing system including an image forming apparatus according to this embodiment.

[0028] As shown in Figure 1, the information processing system 10 according to this embodiment includes an image forming apparatus 12 and a server 14 as an information management device.

[0029] The image forming apparatus 12 and the server 14 are connected to each other via a communication line 16, such as a WAN (Wide Area Network) or the Internet. The image forming apparatus 12 and the server 14 are also capable of sending and receiving various types of data to and from each other via the communication line 16.

[0030] The image forming apparatus 12 is, as an example, an image forming apparatus having multiple functions such as a facsimile function, an image reading function, an image forming function, a copying function, a storage function for storing image information, and a transmission function for transmitting image information. In addition, although Figure 1 shows two image forming apparatuses 12A and 12B, it is not limited to two, and there may be three or more.

[0031] Server 14 has a SIEM (Security Information and Event Management) function that monitors events of multiple information devices such as image forming apparatuses 12 that are under management and detects security risks.

[0032] Figure 2 is a block diagram showing the main electrical components of the image forming apparatus 12 according to this embodiment.

[0033] As shown in Figure 2, the image forming apparatus 12 according to this embodiment includes a control unit 20 which contains a CPU (Central Processing Unit) 20A, a ROM (Read Only Memory) 20B, and a RAM (Random Access Memory) 20C. The CPU 20A controls the overall operation of the image forming apparatus 12. The RAM 20C is used as a work area, etc., when various programs are executed by the CPU 20A. The ROM 20B stores various control programs and various parameters in advance. The various parts of the control unit 20 of the image forming apparatus 12 are electrically connected by a system bus 42.

[0034] On the other hand, the image forming apparatus 12 according to this embodiment is equipped with an HDD (hard disk drive) 26 for storing various data and application programs. The image forming apparatus 12 is also equipped with a display control unit 28 connected to a user interface 22, which controls the display of various operation screens on the display of the user interface 22. The image forming apparatus 12 is also equipped with an operation input detection unit 30 connected to the user interface 22, which detects operation instructions input via the user interface 22. In the image forming apparatus 12, the HDD 26, the display control unit 28, and the operation input detection unit 30 are electrically connected to a system bus 42. In this embodiment, an example is described in which the image forming apparatus 12 is equipped with an HDD 26, but it is not limited to this, and a non-volatile storage unit such as flash memory may also be provided.

[0035] Furthermore, the image forming apparatus 12 according to this embodiment includes a reading control unit 32 that controls the optical image reading operation by the document reading unit 46 and the document feeding operation by the document transport unit, and an image forming control unit 34 that controls the image forming processing by the image forming unit 24 and the transport of paper to the image forming unit 24 by the transport unit 25. The image forming apparatus 12 also includes a communication line I / F (interface) unit 36 ​​connected to a communication line 16 and performing transmission and reception of communication data with other external devices such as a server 14 connected to the communication line 16, and an image processing unit 44 that performs various image processing. The image forming apparatus 12 also includes a facsimile I / F (interface) unit 38 connected to a telephone line (not shown) and performing transmission and reception of facsimile data with a facsimile device connected to the telephone line. The image forming apparatus 12 also includes a transmission / reception control unit 40 that controls the transmission and reception of facsimile data via the facsimile I / F unit 38. In the image forming apparatus 12, the transmission / reception control unit 40, the reading control unit 32, the image forming control unit 34, the communication line I / F unit 36, the facsimile I / F unit 38, and the image processing unit 44 are electrically connected to the system bus 42.

[0036] With the above configuration, the image forming apparatus 12 according to this embodiment uses the CPU 20A to access the RAM 20C, ROM 20B, and HDD 26, respectively. The image forming apparatus 12 also uses the CPU 20A to control the display of information such as operation screens and various messages on the user interface 22 display via the display control unit 28. The image forming apparatus 12 also uses the CPU 20A to control the operation of the document reading unit 46 and document transport unit via the reading control unit 32. The image forming apparatus 12 also uses the CPU 20A to control the operation of the image forming unit 24 and transport unit 25 via the image forming control unit 34, and to control the transmission and reception of communication data via the communication line I / F unit 36, respectively. The image forming apparatus 12 also uses the CPU 20A to control the transmission and reception of facsimile data via the facsimile I / F unit 38 using the transmission and reception control unit 40. Furthermore, the image forming apparatus 12 uses the CPU 20A to understand the operation content in the user interface 22 based on the operation input detection unit 30, and performs various controls based on this operation content.

[0037] The user interface 22 includes an authentication information reading unit, such as a card reader, for acquiring authentication information to use various functions of the image forming apparatus 12, and user authentication is performed based on the information read by the authentication information reading unit.

[0038] Next, the main components of the electrical system of the server 14 according to this embodiment will be described. Figure 3 is a block diagram showing the main components of the electrical system of the server 14 according to this embodiment.

[0039] As shown in Figure 3, the server 14 according to this embodiment includes a CPU 14A, ROM 14B, RAM 14C, HDD 14D, keyboard 14E, display 14F, and a communication line interface (I / F) unit 14G. The CPU 14A controls the overall operation of the server 14. The ROM 14B stores various control programs and parameters in advance. The RAM 14C is used as a work area when the CPU 14A executes various programs. The HDD 14D stores various data and application programs. In the server 14, the HDD 14D functions as storage 16D for storing information. The keyboard 14E is used to input various information. The display 14F is used to display various information. The communication line interface (I / F) unit 14G is connected to the communication line 16 and transmits and receives various data with other devices connected to the communication line 16. All of the above parts of the server 14 are electrically interconnected by a system bus 14H. In this embodiment, the server 14 is described as having an HDD 14D, but it is not limited to this, and may also have other non-volatile storage devices such as flash memory.

[0040] With the above configuration, the server 14 in this embodiment uses the CPU 14A to access the ROM 14B, RAM 14C, and HDD 14D, acquire various data via the keyboard 14E, and display various information on the display 14F. The server 14 also uses the CPU 14A to control the transmission and reception of communication data via the communication line I / F unit 14G.

[0041] Next, the functional configurations of the image forming apparatus 12 and the server 14 in the information processing system 10 according to this embodiment, which is configured as described above, will be explained. Figure 4 is a functional block diagram of the image forming apparatus 12 and the server 14 in the information processing system 10 according to this embodiment.

[0042] The image forming apparatus 12 has the functions of an export operation detection unit 50 and a log transmission unit 52, which are performed by the CPU 20A executing a program stored in the ROM 20B of the control unit 20.

[0043] The export operation detection unit 50 detects export operations that retrieve predetermined information, such as setting information and destination information, from the image forming apparatus 12, which is the device being managed. It may also detect cloning operations that instruct the unit to perform cloning, which copies the setting information and other information of the image forming apparatus 12 to another image forming apparatus 12, etc.

[0044] The log transmission unit 52 transmits log information from the image forming apparatus 12 to the server 14 when an export operation is detected by the export operation detection unit 50. Examples of log information include audit events, model name, firmware version, date and time, as shown in Figure 5.

[0045] Server 14 has the functions of a log receiving unit 54, a generation detection unit 56, a fraudulent operation determination unit 58, and a warning unit 60, which are performed by the CPU 14A executing a program stored in ROM 14B.

[0046] The log receiving unit 54 receives log information transmitted from the log transmitting unit 52 of the image forming apparatus 12.

[0047] The generation detection unit 56 detects generation information representing the new and old generations of the image forming apparatus 12 to which the log information was transmitted, and generation information for all image forming apparatuses 12 connected to the communication line 16 to which the said image forming apparatus 12 is connected. Specifically, it detects generation information from the model information of each image forming apparatus 12, or from the model information and FW version. For example, as shown in Figure 6, information such as the model name, FW version, and generation version is collected from each image forming apparatus 12 connected to the communication line 16, and generation information is detected by detecting the generation version from the model name and FW version of the image forming apparatus 12 that transmitted the log information. In the following, the case in which the generation version is detected from the model name without using the FW version will be described as an example.

[0048] The fraudulent operation determination unit 58 identifies the equipment configuration connected to the communication line 16 based on the detection results of the generation detection unit 56, and determines whether an export operation is fraudulent based on the identified equipment configuration. Exporting is the process of extracting data from equipment, and one example of this is when cloning, which replicates data between equipment. Depending on the equipment configuration, exporting may be possible but importing may not, and such operations are considered highly likely to be fraudulent. Therefore, the fraudulent operation determination unit 58 determines whether an export operation is a normal operation or a fraudulent operation by determining whether there is equipment on the communication line 16 that can be imported or has the potential to be imported into the communication line 16. More specifically, the fraudulent operation determination unit 58 detects fraudulent export operations using the logic for determining fraudulent operations shown in Figure 7. In Figure 7, a normal export operation is shown as a normal operation, and a fraudulent export operation is shown as a fraudulent operation. In the determination logic of Figure 7, if an export operation is performed when there is only one equipment of generation version (NEW) on the communication line 16, the export operation is determined to be a fraudulent export operation. Furthermore, if two generation version (NEW) units are present on communication line 16 and an export operation is performed, the export operation will be judged as a normal export operation. Also, if only one old generation version (OLD) unit is present on communication line 16 and an export operation is performed, the export operation will be judged as an invalid export operation. Furthermore, if one generation version (OLD) and one generation version (NEW) unit are present on communication line 16, and an export operation is performed on the generation version (OLD) image forming apparatus 12, it will be judged as a normal export operation, while an export operation is performed on the generation version (NEW) image forming apparatus 12, it will be judged as an invalid export operation. Also, if one generation version (OLD) image forming apparatus 12 and two generation version (NEW) image forming apparatuses 12 are present on communication line 16, and an export operation is performed on the generation version (OLD) image forming apparatus 12, it will be judged as a normal export operation, while an export operation is performed on the generation version (NEW) image forming apparatus 12, it will be judged as a normal export operation.Furthermore, if an export operation is performed when two generation version (OLD) image forming machines 12 are present on the communication line 16, it will be determined to be a normal export operation. Also, if two generation version (OLD) image forming machines 12 and one generation version (NEW) image forming machine 12 are present on the communication line 16, an export operation performed on the generation version (OLD) image forming machine 12 will be determined to be a normal export operation, while an export operation performed on the generation version (NEW) image forming machine 12 will be determined to be an invalid export operation. In addition, if there are two generation version (OLD) and two generation version (NEW) image forming machines 12 on the communication line 16, an export operation performed on either image forming machine 12 will be determined to be a normal export operation.

[0049] In detail, a prerequisite for cloning is that the data must be backward compatible. Backward compatibility means that data can be imported from an older generation to a newer generation or to the same generation of equipment, but not from a newer generation to an older generation. Therefore, for example, if there is only one cloning-capable device on the communication line 16, the export operation will be judged as an unauthorized export operation because it is highly likely to be an unauthorized data exfiltration.

[0050] Furthermore, even if there are two or more devices, if the configuration consists only of two devices (old and new), data exported from the old device can be imported into the new device, but data exported from the new device cannot be imported into the old device, and this will be judged as an unauthorized export operation.

[0051] The warning unit 60 issues a warning if an unauthorized export operation is performed. For example, the warning unit 60 may notify the administrator via email or other means that an unauthorized export may have occurred. Alternatively, it may output log information to a predetermined output destination.

[0052] Next, we will describe the specific processes performed in each part of the information processing system 10 according to this embodiment, which is configured as described above.

[0053] First, the processing performed in the image forming apparatus 12 will be described. Figure 8 is a flowchart showing an example of the processing flow performed in the image forming apparatus 12 of the information processing system 10 according to this embodiment. Note that Figure 8 starts when an operation is performed on the image forming apparatus 12.

[0054] In step 100, the CPU 20A identifies the operation performed on the image forming apparatus 12 and proceeds to step 102. Specifically, the export operation detection unit 50 identifies the operation performed on the image forming apparatus 12 and detects the export operation.

[0055] In step 102, the CPU 20A determines whether or not an export operation has been performed. If the determination is positive, the process proceeds to step 104; otherwise, the image forming apparatus 12 terminates its processing.

[0056] In step 104, the CPU 20A sends log information of the audit event to the server 14 and terminates processing in the image forming apparatus 12. That is, the log transmission unit 52 sends log information from the image forming apparatus 12 to the server 14. For example, it transmits information such as the audit event, model name, FW (firmware) version, date and time, as shown in Figure 5, as log information.

[0057] Next, the processing performed by the server 14 will be described. Figure 9 is a flowchart showing an example of the processing flow performed by the server 14 of the information processing system 10 according to this embodiment. Note that the processing in Figure 9 starts when log information is transmitted from the image forming apparatus 12 in step 104 described above.

[0058] In step 200, the CPU 14A receives log information transmitted from the image forming apparatus 12 and proceeds to step 202. That is, the log receiving unit 54 receives log information transmitted from the log transmitting unit 52 of the image forming apparatus 12. Note that the reception of log information by the server 14 in step 200 corresponds to the detection of a predetermined information export operation of the managed device.

[0059] In step 202, the CPU 14A identifies the generation version from the model name of the log information source and proceeds to step 204. That is, the generation detection unit 56 detects the generation information of the image forming apparatus 12 to which the log information was transmitted, and the generation information of all image forming apparatuses 12 connected to the communication line 16 to which the said image forming apparatus 12 is connected. More specifically, the generation information is detected from the model information of each image forming apparatus 12. For example, as shown in Figure 6, information such as the model name, FW version, and generation version is collected from each image forming apparatus 12 connected to the communication line 16, and the generation version is detected from the model name of the image forming apparatus 12 that transmitted the log information.

[0060] In step 204, the CPU 14A determines whether the operation is normal or illegitimate based on the generation version and the number of devices, and proceeds to step 206. That is, the illegitimate operation determination unit 58 determines whether the export operation is normal or illegitimate based on the device configuration connected to the communication line 16. For example, the illegitimate operation determination unit 58 detects an illegitimate export operation using the logic for determining an illegitimate operation shown in Figure 7.

[0061] In step 206, CPU 14A determines whether or not the export operation is invalid. If the determination is positive, the process proceeds to step 208; otherwise, the server 14 terminates its processing.

[0062] In step 208, CPU 14A issues a warning and terminates the server 14's processing. Specifically, the warning unit 60 issues a warning by, for example, notifying the administrator via email or other means that an unauthorized export may have occurred. Alternatively, it issues a warning by outputting log information to a predetermined output destination.

[0063] (Second Embodiment) Next, an information processing system according to the second embodiment will be described. Since the basic configuration is the same as that of the first embodiment, the same reference numerals will be used for the description, and the description of the configuration will be omitted.

[0064] In the first embodiment, although it detects whether or not an unauthorized export operation has been performed, it does not prevent the unauthorized extraction of information itself because it detects the unauthorized export operation after the export operation has been executed.

[0065] Therefore, in this embodiment, when an export operation is performed, instead of executing it immediately, temporary log information is sent to the server 14 to inquire whether it is a normal export operation or an invalid export operation.

[0066] In this embodiment, when the export operation detection unit 50 detects an export operation, the log transmission unit 52 sends provisional log information to the server 14, assuming that the export operation has been performed, before executing the export.

[0067] On server 14, the log receiving unit 54 receives temporary log information. Subsequently, as in the first embodiment, the fraudulent operation determination unit 58 determines whether an export operation is fraudulent based on the equipment configuration connected to the communication line 16, and returns the determination result to the image forming apparatus 12. As a result, if the image forming apparatus 12 detects that an export operation is fraudulent, the export operation is stopped, preventing the extraction of information through a fraudulent export operation.

[0068] Next, we will describe the specific processes performed in each part of the information processing system 10 according to this embodiment.

[0069] First, the processing performed in the image forming apparatus 12 will be described. Figure 10 is a flowchart showing an example of the processing flow performed in the image forming apparatus 12 of the information processing system 10 according to this embodiment. Figure 10 starts when an operation is performed on the image forming apparatus 12. Also, processes common to the processing in Figure 8 are denoted by the same reference numerals and described accordingly.

[0070] In step 100, the CPU 20A identifies the operation performed on the image forming apparatus 12 and proceeds to step 102. Specifically, the export operation detection unit 50 identifies the operation performed on the image forming apparatus 12 and detects the export operation.

[0071] In step 102, the CPU 20A determines whether or not an export operation has been performed. If the determination is positive, the process proceeds to step 103; otherwise, the image forming apparatus 12 terminates its processing.

[0072] In step 103, CPU 20A sends audit event log information to server 14 before starting the export and proceeds to step 106. That is, log transmission unit 52 sends hypothetical log information assuming that an export operation has been performed to server 14 to inquire whether or not an unauthorized export operation has been performed.

[0073] In step 106, the CPU 20A determines whether or not it has received a result for the query from the server 14. It waits until this determination is affirmative and then proceeds to step 108.

[0074] In step 108, CPU 20A determines whether the export operation is an invalid export operation based on the results of the query received from server 14. If the determination is negative, the process proceeds to step 110; if it is positive, the process proceeds to step 112.

[0075] In step 110, the CPU 20A performs an export operation to complete the series of processes in the image forming apparatus 12.

[0076] On the other hand, in step 112, CPU 20A cancels the export operation and proceeds to step 114. In other words, if the export operation is invalid, the export operation is stopped to prevent the extraction of information through an invalid export operation.

[0077] In step 114, the CPU 20A issues a warning and terminates processing in the image forming apparatus 12. The warning may be issued by, for example, sending an email or other notification to the administrator informing them that an unauthorized export has occurred. Alternatively, the warning may be issued by outputting log information to a predetermined output destination.

[0078] Next, the processing performed by the server 14 will be described. Figure 11 is a flowchart showing an example of the processing flow performed by the server 14 of the information processing system 10 according to this embodiment. Note that the processing in Figure 11 starts when temporary log information is transmitted from the image forming apparatus 12 in step 103 described above. Also, processing that is common with the processing in Figure 9 will be described using the same reference numerals.

[0079] In step 200, the CPU 14A receives log information transmitted from the image forming apparatus 12 and proceeds to step 202. That is, the log receiving unit 54 receives temporary log information transmitted from the log transmitting unit 52 of the image forming apparatus 12. The reception of temporary log information by the server 14 in step 200 corresponds to the detection of a predetermined information export operation of the managed device.

[0080] In step 202, the CPU 14A identifies the generation version from the model name of the log information source and proceeds to step 204. That is, the generation detection unit 56 detects the generation information of the image forming apparatus 12 to which the log information was transmitted, and the generation information of all image forming apparatuses 12 connected to the communication line 16 to which the said image forming apparatus 12 is connected. More specifically, the generation information is detected from the model information of each image forming apparatus 12. For example, as shown in Figure 6, information such as the model name, FW version, and generation version is collected from each image forming apparatus 12 connected to the communication line 16, and the generation version is detected from the model name of the image forming apparatus 12 that transmitted the log information.

[0081] In step 204, the CPU 14A determines whether the operation is normal or illegitimate based on the generation version and the number of devices, and proceeds to step 205. That is, the illegitimate operation determination unit 58 determines whether the export operation is normal or illegitimate based on the configuration of the devices connected to the communication line 16. For example, the illegitimate operation determination unit 58 detects an illegitimate export operation using the logic for determining an illegitimate operation shown in Figure 7.

[0082] In step 205, the CPU 14A returns the result of the decision in step 204 to the image forming apparatus 12 that sent the log information, and the series of processes of the server 14 ends. Note that by performing the process in step 205, the decision in step 106 described above is affirmed.

[0083] (Third embodiment) Next, the information processing system 10 according to the third embodiment will be described. Figure 12 is a functional block diagram of the image forming apparatus 12 of the information processing system 10 according to this embodiment.

[0084] In each of the embodiments described above, the server 14 determined whether the export operation was a normal export operation or an invalid export operation. However, in this embodiment, the server 14 shown in Figure 1 is omitted, and the image forming apparatus 12 functions as an information processing device. That is, in this embodiment, the image forming apparatus 12 determines whether the export operation to its own device is a normal export operation or an invalid export operation.

[0085] The image forming apparatus 12 according to this embodiment incorporates some of the functions of the server 14 in each of the above embodiments. Specifically, as shown in Figure 12, the image forming apparatus 12 has the functions of an export operation detection unit 50, a generation detection unit 56, a fraudulent operation determination unit 58, and a warning unit 60. Since each function basically has the same function as in each of the above embodiments, only the differences will be briefly explained.

[0086] In this embodiment, the generation detection unit 56 detects the generation version of the image forming apparatus 12 and notifies other image forming apparatuses 12 connected to the communication line 16, thereby sharing the generation version and the number of devices among the image forming apparatuses 12 connected to the communication line 16.

[0087] The fraud detection unit then determines whether the export operation is a legitimate or fraudulent operation based on the shared generation version and the number of devices.

[0088] Next, we will describe the specific processes performed in each part of the information processing system 10 according to this embodiment.

[0089] First, the processing performed in the image forming apparatus 12 will be described. Figure 13 is a flowchart showing an example of the processing flow performed in the image forming apparatus 12 of the information processing system 10 according to this embodiment. Figure 13 starts when an operation is performed on the image forming apparatus 12. Processes common to the processing in Figure 10 are denoted by the same reference numerals and will be described accordingly.

[0090] In step 96, the CPU 20A identifies the generation version from the model name of its own device and proceeds to step 98. That is, the generation detection unit 56 detects the generation version from the model name of its own device.

[0091] In step 98, the CPU 20A shares the generation version and the number of devices among the devices when connecting to the communication line 16 and proceeds to step 100. That is, the generation detection unit 56 detects the generation version of the image forming apparatus 12 and notifies other image forming apparatuses 12 connected to the communication line 16, thereby sharing the generation version and the number of devices. Steps 96 and 98 may be omitted if the generation version and the number of devices are already shared, and may be executed only when there is a change in the generation version or the number of devices.

[0092] In step 100, the CPU 20A identifies the operation performed on the image forming apparatus 12 and proceeds to step 102. Specifically, the export operation detection unit 50 identifies the operation performed on the image forming apparatus 12 and detects the export operation.

[0093] In step 102, the CPU 20A determines whether or not an export operation has been performed. If the determination is affirmative, the process proceeds to step 107; otherwise, the image forming apparatus 12 terminates its processing.

[0094] In step 107, the CPU 20A determines whether the operation is normal or abnormal based on the generation version and the number of devices shared among the devices connected to the communication line 16, and then proceeds to step 109. That is, the abnormal operation determination unit 58 determines whether the export operation is normal or abnormal based on the configuration of the devices connected to the communication line 16. For example, the abnormal operation determination unit 58 detects an abnormal export operation using the logic for determining an abnormal operation shown in Figure 7.

[0095] In step 109, the CPU 20A determines, based on the result of step 107, whether the export operation is an invalid export operation. If the determination is negative, the process proceeds to step 110; if it is positive, the process proceeds to step 112.

[0096] In step 110, the CPU 20A performs an export operation to complete the series of processes in the image forming apparatus 12.

[0097] On the other hand, in step 112, CPU 20A cancels the export operation and proceeds to step 114. In other words, if the export operation is invalid, the export operation is stopped to prevent the extraction of information through an invalid export operation.

[0098] In step 114, the CPU 20A issues a warning and terminates processing in the image forming apparatus 12. The warning may be issued by, for example, sending an email or other notification to the administrator informing them that an unauthorized export has occurred. Alternatively, the warning may be issued by outputting log information to a predetermined output destination.

[0099] In each of the above embodiments, depending on the number of devices connected to the communication line 16, such as in the case where there are two image forming apparatuses 12 each of generation version (OLD) and generation version (NEW) connected to the communication line 16, it may not be possible to detect an unauthorized export operation. Therefore, if an import operation is not performed within a predetermined time after an export operation is performed, there is a high possibility of unauthorized extraction of information, and it may be judged as an unauthorized export operation. In this case, for example, the server 14 or the image forming apparatus 12 performs the processing shown in Figure 14. In the following description, the case in which the server 14 performs the processing in Figure 14 will be explained as an example, but as in the third embodiment, the image forming apparatus 12 may also perform the processing. Figure 14 is a flowchart showing an example of the processing flow performed by the server 14 after an export operation is performed in the information processing system 10 according to this embodiment. Note that the processing in Figure 14 starts after the export operation is executed.

[0100] In step 300, the CPU 14A monitors the import operation of the device connected to the communication line 16 and then proceeds to step 302.

[0101] In step 302, CPU 14A determines whether or not an import operation has occurred within a predetermined time. This determination is made because if an export has been performed and no import operation has been performed within a predetermined time, there is a possibility that information has been illegally extracted. Therefore, this determination determines whether or not an illegal operation has occurred. If the determination is negative, the server 14 terminates its processing; if it is positive, the process proceeds to step 304.

[0102] In step 304, CPU 14A determines that the export operation is an invalid export operation and proceeds to step 306.

[0103] In step 306, CPU 14A issues a warning and terminates the server 14's processing. Specifically, the warning unit 60 issues a warning by, for example, notifying the administrator via email or other means that an unauthorized export may have occurred. Alternatively, it issues a warning by outputting log information to a predetermined output destination.

[0104] In the embodiments described above, examples were given for determining whether an export operation to the image forming apparatus 12 is a normal or fraudulent export operation. However, the device to be judged is not limited to the image forming apparatus 12. For example, it is also possible to determine whether an export operation to a mobile information terminal such as a smartphone or PDA (Personal Data Assistant) is a normal or fraudulent export operation. Specifically, an information processing system may be applied in which multiple mobile information terminals are connected to a communication line, and applications pre-installed on each mobile information terminal provide services such as cloud services. In this case, when an export operation is performed on data managed by an application on a mobile information terminal, the version of the application pre-installed on each mobile information terminal device and the number of mobile information terminals connected to the communication line may be used to detect fraudulent exports in the same manner as in the embodiments described above.

[0105] Furthermore, although the CPU was described as an example of a processor in the above embodiment, the term "processor" refers to a broader term that includes general-purpose processors (such as CPUs) and specialized processors (such as GPUs: Graphics Processing Units, ASICs: Application Specific Integrated Circuits, FPGAs: Field Programmable Gate Arrays, and programmable logic devices).

[0106] Furthermore, the operation of the processor in the above embodiments may not be performed by a single processor, but may be performed by multiple processors located in physically separate locations working together. Also, the order of the processor operations is not limited to the order described in each of the above embodiments, but may be changed as appropriate.

[0107] Furthermore, the processing performed by the image forming apparatus 12 or server 14 according to the above embodiment may be performed by software, by hardware, or by a combination of both. Also, the processing performed by the image forming apparatus 12 or server 14 may be stored as a program on a storage medium and distributed.

[0108] Furthermore, the present invention is not limited to the above, and it is of course possible to implement it in various modified forms without departing from its spirit. [Explanation of Symbols]

[0109] 10 Information Processing Systems 12 Image forming apparatus 14 Servers 14A CPU 20A CPU 50 Export operation detection unit 52 Log transmission section 54 Log receiving unit 56 Generation Detection Unit 58 Unauthorized operation judgment unit 60 Warning section

Claims

1. The processor comprises, Based on log information or operation information of the managed device, the system detects predetermined information export operations performed on the device. When the export operation is detected, in the configuration-managed communication network to which the device that detected the export operation is connected, another device that can be imported or potentially imported is detected using generation information representing the old and new generations of the devices included in the communication network and the number of devices connected to the communication network. An information processing device that performs a process to detect the export operation as an invalid export operation when the aforementioned other device is not available.

2. The aforementioned equipment has backward compatibility characteristics, The information processing apparatus according to claim 1, wherein the processor determines whether or not the device is capable of performing an import based on the generation information and the number of devices.

3. The information processing apparatus according to claim 1, wherein the processor detects the generation information from the model information of the device.

4. The information processing apparatus according to any one of claims 1 to 3, wherein the processor receives the log information of the device that detected the export operation from the device, and detects the export operation using the received log information.

5. The information processing device according to any one of claims 1 to 3, wherein the processor receives provisional log information from the device that detected the export operation, including the export operation, before executing the export operation, and detects the export operation using the provisional log information.

6. The information processing apparatus according to claim 5, wherein the processor transmits the detection result of an unauthorized export operation to the device, thereby causing the device to stop executing the export operation.

7. The information processing apparatus according to claim 1, wherein the processor shares the generation information and the number of devices connected to the communication network among the devices connected to the communication network, and detects an unauthorized export operation of its own device as the device.

8. The information processing device according to any one of claims 1 to 7, wherein the processor detects that an import operation has not been performed within a predetermined time after the export operation as an invalid export operation.

9. A device that transmits log information from its own device when an export operation is detected, An information processing device, upon receiving log information from the aforementioned device, performs the following processing in a configuration-managed communication network to which the device that detected the export operation is connected: generation information representing the new and old generations of the devices included in the communication network and the number of the devices connected to the communication network to detect another device that can be imported or may be imported; and if no such other device exists, it detects the export operation as an invalid export operation. An information processing system that includes this.

10. On the computer, Based on log information or operation information of the managed device, the system detects predetermined information export operations performed on the device. When the export operation is detected, in the configuration-managed communication network to which the device that detected the export operation is connected, another device that can be imported or potentially imported is detected using generation information representing the old and new generations of the devices included in the communication network and the number of devices connected to the communication network. An information processing program for causing the program to execute a process to detect the export operation as an invalid export operation when the aforementioned other device is not available.

Images