Image forming apparatus, virus quarantine system, and virus quarantine method

Abstract

To provide an image forming apparatus and the like that can reduce a processing load related to update of a pattern file and reliably perform the update of the pattern file.SOLUTION: An image forming apparatus comprises: a control unit that can carry out virus quarantine using a pattern file; and a storage unit that can store the pattern file. The control unit, when connected to a network, determines whether update of the pattern file stored in the storage unit can be performed, when determining that the update of the pattern file can be performed, updates the pattern file, and carries out virus quarantine by using the updated pattern file.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present disclosure relates to an image forming apparatus and the like. Background Art

[0002] As a general method for preventing infection with computer viruses (hereinafter simply referred to as viruses), there is a method in which an anti-virus program is installed on an information processing apparatus such as a computer terminal, and regular virus scans are performed to remove invading viruses. This method is a useful way to suppress virus infection on the side of the information processing apparatus, but it is necessary to update pattern files provided by vendors of anti-virus programs and the like in order to counteract new types of viruses.

[0003] Incidentally, a multifunction device integrating a plurality of functions such as FAX, a printer, and a scanner is also one type of information processing apparatus. Among jobs executed by a multifunction device, there are jobs that can be implemented, for example, by communicating with an external apparatus connected via a communication network such as a network. Therefore, data handled by the multifunction device itself, or an external apparatus connected via the multifunction device, may become a target of virus attacks.

[0004] For this reason, some multifunction devices are provided with a function of performing virus scanning on data handled by the multifunction device, application programs installed in the multifunction device, the system, and stored data. In order to maintain the safe state of such a multifunction device, it is necessary to periodically update the pattern file for virus scanning, and a function of updating the pattern file at a preset timing by an apparatus administrator or the like is provided.

[0005] For example, Patent Document 1 discloses an image forming apparatus that checks whether a pattern file is the latest version by communicating with a server when recovering from an energy saving mode, and updates the pattern file to the latest state when it is confirmed that the pattern file is not the latest version. Prior Art Documents [Patent Documents]

[0006] [Patent Document 1] Japanese Patent Publication No. 2019-220111 [Overview of the Initiative] [Problems that the invention aims to solve]

[0007] In many cases, multifunction printers switch to energy-saving mode after a few seconds (around 5 seconds) if no operation is performed, and operation (recovery from energy-saving mode) is often performed immediately after switching to energy-saving mode. Therefore, if the configuration is such that the pattern file is updated each time the printer switches to energy-saving mode and recovers from it, as in Patent Document 1, the processing load on the multifunction printer's computing unit is large, which can affect user operation.

[0008] Furthermore, unlike other information processing devices such as computer terminals and smartphones, multifunction printers are often used without being connected to a network. Therefore, even if the pattern file is updated each time the device recovers from energy-saving mode, update errors can still occur due to the lack of network connectivity.

[0009] This disclosure aims to provide an image forming apparatus, etc., that can reduce the processing burden related to updating pattern files and reliably perform pattern file updates. [Means for solving the problem]

[0010] To solve the above problems, the image forming apparatus according to this disclosure comprises a control unit capable of virus quarantine using a pattern file and a storage unit capable of storing the pattern file, wherein when the control unit is connected to a network, it determines whether or not it is possible to update the pattern file stored in the storage unit, and if it determines that it is possible to update the pattern file, it updates the pattern file and performs virus quarantine using the updated pattern file.

[0011] Furthermore, the virus quarantine system according to this disclosure comprises a server capable of providing pattern files and an image forming apparatus capable of acquiring the pattern files via a network, wherein the image forming apparatus comprises a control unit capable of performing virus quarantine using the pattern files and a storage unit capable of storing the pattern files, wherein when the control unit connects to the network, it determines whether or not it is possible to update the pattern files stored in the storage unit, and if it determines that it is possible to update the pattern files, it updates the pattern files and performs virus quarantine using the updated pattern files, and the server stores the update history of the pattern files in the image forming apparatus.

[0012] Furthermore, the virus quarantine method relating to this disclosure is characterized by performing virus quarantine using a pattern file, storing the pattern file, determining whether or not it is possible to update the stored pattern file when connected to a network, updating the pattern file if it is determined that it is possible to update the pattern file, and performing virus quarantine using the updated pattern file. [Effects of the Invention]

[0013] According to this disclosure, it is possible to provide an image forming apparatus, etc., that can reduce the processing burden related to updating pattern files and reliably perform pattern file updates. [Brief explanation of the drawing]

[0014] [Figure 1] It is a diagram explaining the overall configuration of the virus quarantine system according to the first embodiment. [Figure 2] It is a functional configuration diagram of the multifunction peripheral according to the first embodiment. [Figure 3] It is a diagram explaining an example data configuration of an update information table. [Figure 4] It is a diagram explaining an example data configuration of a history information table. [Figure 5] It is a functional configuration diagram of the management server according to the first embodiment. [Figure 6] It is a diagram explaining an example data configuration of an update history table. [Figure 7] It is a flowchart explaining the processing flow of the first embodiment. [Figure 8] It is a flowchart explaining the processing flow of the first embodiment. [Figure 9] It is a diagram explaining an operation example of the first embodiment. [Figure 10] It is a diagram explaining an operation example of the first embodiment. [Figure 11] It is a diagram explaining an operation example of the first embodiment. [Figure 12] It is a diagram explaining an operation example of the first embodiment. [Figure 13] It is a diagram explaining an example data configuration of a fixed period management table. [Figure 14] It is a flowchart explaining the processing flow of the second embodiment. [Figure 15] It is a diagram explaining an operation example of the second embodiment. [Figure 16] It is a functional configuration diagram of the multifunction peripheral according to the third embodiment. [Figure 17] It is a flowchart explaining the processing flow of the third embodiment. [Figure 18] It is a diagram explaining an operation example of the third embodiment. [Figure 19] It is a flowchart explaining the processing flow of the fourth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0015] Embodiments of this disclosure will be described below with reference to the drawings. In this disclosure, a multifunction printer capable of processing jobs in various operating modes such as fax, print, and scan will be described as an example of an image forming apparatus. The following embodiments are examples for illustrating this disclosure, and the technical scope of the description in the claims is not limited to the following description.

[0016] [1 First Embodiment] In the first embodiment, when connected to a network, it determines whether or not it is possible to update the pattern file stored in the memory unit. If it determines that it is possible to update the pattern file, it updates the pattern file and performs virus quarantine using the updated pattern file.

[0017] Here, the pattern file relating to this disclosure is a file (database) that records the characteristics of viruses used in virus quarantine (hereinafter sometimes referred to as virus scanning) of data handled by a multifunction printer, application programs installed on the multifunction printer, systems, and stored data. The antivirus application performs a virus scan of the target data by pattern matching with the pattern file. It is desirable that the pattern file be updated regularly to respond to new viruses, and the updated pattern file is provided by the vendor, which is the manufacturer and distributor of the antivirus application (program), either through network download or distribution of a recording medium on which the pattern file is stored. In the following description, the updated pattern file will be described as being provided by network download from a server prepared by the vendor (vendor server).

[0018] [1.1 Functional Configuration] [1.1.1 Overall Structure] Figure 1 is a schematic diagram illustrating the overall configuration of the virus quarantine system 100 according to the first embodiment. The virus quarantine system 100 includes a multifunction printer 10a, 10b, and 10c as an image forming apparatus, a management server 30 as a server, and a vendor server 50.

[0019] The multifunction printers 10a, 10b, and 10c and the management server 30 are connected via a network NW1, such as a LAN (Local Area Network), and are configured to communicate with each other. The management server 30 is also connected to a vendor server 50 via network NW1 and a network NW2, such as the Internet, and is configured to be able to communicate with each other and obtain update pattern files from the vendor server 50.

[0020] Figure 1 illustrates a network NW1 with three multifunction devices 10 connected: 10a, 10b, and 10c. However, there may be only one multifunction device 10, or more than three multifunction devices 10 may be connected to the network NW1. While the multifunction device 10 is used as an example of an image forming apparatus, the image forming apparatus is not limited to a multifunction device 10; for example, it could be a copier, fax machine, printer, etc. Furthermore, the network NW1 may also be connected to an information processing device, such as a computer terminal capable of outputting execution instructions for print jobs, scan jobs, etc., to the multifunction device 10.

[0021] [1.1.2 About the Multifunction Printer 10 (10a, 10b, and 10c)] Next, we will describe the multifunction printer 10 (10a, 10b, and 10c). Since multifunction printers 10a, 10b, and 10c can have the same configuration, they will be referred to as multifunction printer 10 unless there is a need to distinguish between them.

[0022] Figure 2 is a functional configuration diagram of the multifunction device 10. The multifunction device 10 comprises a control unit 11, a display unit 13, an operation input unit 15, an image forming unit 17, an image reading unit 19, a communication unit 21, and a storage unit 25.

[0023] The control unit 11 controls the entire multifunction device 10. The control unit 11 is composed of, for example, one or more arithmetic units (CPU (Central Processing Unit), etc.). The control unit 11 realizes its functions by reading and executing various programs stored in the storage unit 25.

[0024] The display unit 13 displays various information to the user, etc. The display unit 13 can be made up of, for example, an LCD (Liquid Crystal Display) or an organic EL (Electro-Luminescence) display.

[0025] The operation input unit 15 receives information input from the user or other party. The operation input unit 15 can be configured as a touch panel display that allows input via the display unit 13. In this case, the input method to the touch panel display can be, for example, a resistive touch method, an infrared touch method, an electromagnetic induction method, a capacitive touch method, etc.

[0026] The image forming unit 17 forms an image on paper, which serves as a recording medium, based on image data. The image forming unit 17 feeds paper from a paper feeding unit (not shown), forms an image on the paper based on the image data, and then discharges the paper from a paper discharge unit (not shown). The image forming unit 17 can be configured, for example, by a laser printer using an electrophotographic method. In this case, the image forming unit 17 performs image formation using toner supplied from a toner cartridge (not shown) corresponding to the toner color (for example, cyan, magenta, yellow, black, etc.).

[0027] The image reading unit 19 generates image data by scanning and reading the original document image. The image reading unit 19 can be configured as a scanner device equipped with an image sensor such as a CCD (Charge Coupled Device) or CIS (Contact Image Sensor). The configuration of the image reading unit 19 is not particularly limited as long as it is capable of generating image data by reading reflected light from the original document image with the image sensor.

[0028] The communication unit 21 is equipped with an interface for wired / wireless communication with other devices such as the management server 30 via a network NW1 such as a LAN, WAN (Wide Area Network), the Internet, or a fax line (telephone line). The communication unit 21 is also equipped with a network connection detection unit 211 for detecting connections to the network NW1. The network connection detection unit 211 can be configured, for example, as a connection connector for an Ethernet® cable (e.g., a LAN cable) conforming to the TCP / IP protocol, or as part of a Wi-Fi® antenna. The network connection detection unit 211 can be configured as hardware resources, software resources, or a combination thereof, as long as it can detect the connection of the multifunction device 10 to the network NW1 and output a signal (connection signal) indicating that a connection has been made to the control unit 11.

[0029] The memory unit 25 stores various programs and data necessary for the operation of the multifunction printer 10. The memory unit 25 can be composed of storage devices such as RAM (Random Access Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), and ROM (Read Only Memory).

[0030] In the first embodiment, the storage unit 25 stores a job control program 251, a display processing program 252, and an antivirus program 253, and reserves a pattern file storage area 254, an update information storage area 255, a scan history storage area 256, and a server information storage area 257.

[0031] The job control program 251 is a program read by the control unit 11 to control processing on a job-by-job basis in each operation mode such as fax, print, and scan. After reading the job control program 251, the control unit 11 functions as a job execution unit and can execute jobs by controlling the display unit 13, operation input unit 15, image forming unit 17, image reading unit 19, communication unit 21, etc.

[0032] The display processing program 252 is a program that the control unit 11 reads when controlling the screen display on the display unit 13. After reading the display processing program 252, the control unit 11 displays on the display unit 13, for example, a settings screen that accepts input such as various setting values, execution instructions, and termination instructions related to job execution, a home screen that allows switching between the settings screens, and various settings screens related to virus scan settings, which will be described later.

[0033] The antivirus program 253 is a program that the control unit 11 reads when updating pattern files or performing a virus scan. By reading the antivirus program 253, the control unit 11 functions as an antivirus application. After reading the antivirus program 253, the control unit 11 performs a virus scan on the data handled by the multifunction printer 10, application programs installed on the multifunction printer 10, the system, and stored data by pattern matching with the pattern files stored in the pattern file storage area 254.

[0034] Furthermore, the antivirus program 253 includes an update settings program 2531. The control unit 11, upon reading the update settings program 2531, accepts settings for update settings, including whether or not to perform periodic updates of pattern files (pattern updates), the date and time of the pattern file updates, and settings for virus scan parameters, including whether or not to perform a virus scan, and the date and time of the virus scan, via the virus scan settings screen described later.

[0035] The pattern file storage area 254 is a storage area that stores pattern files obtained from the management server 30.

[0036] The update information storage area 255 is a storage area that stores information regarding the update history of pattern files, for example, as an update information table. The information stored in the update information storage area 255 will be explained using Figure 3. Figure 3 is a diagram illustrating an example of the data structure of the update information table.

[0037] The update information table includes the following items to store: the date and time of the previous update, whether the update was successful or not, the date and time of the next update, and the pattern file (version).

[0038] The last update date and time indicates the date and time when the pattern file was updated. The date and time stored as the last update date and time is either a pre-configured periodic update or an update triggered by a network connection, and is stored regardless of whether the update was successful or not. The example in Figure 3 shows that the last pattern file update was performed on "2022.03.15 16:00".

[0039] The update success / failure status indicates the success or failure of the pattern file update performed at the previous update date and time. The example in Figure 3 shows that the pattern file update performed at the previous update date and time "2022.03.15 16:00" failed. For example, it indicates that the pattern file update failed because the network connection was interrupted due to reasons such as a power outage due to switching to energy-saving mode, a power outage due to operation of the power switch, or disconnection of the Ethernet® cable from the connector.

[0040] The next update date and time indicates the date and time of the next update of the pattern file. For example, in the pattern file update settings described later, if the update date and time for periodic updates is set to "yyyy.mm.dd 16:00", then the next update date and time will be "2022.03.16 16:00", which is 24 hours after the previous update date and time "2022.03.15 16:00".

[0041] The pattern file (ver.) represents the name and version of the pattern file stored in the pattern file storage area 254. In particular, the version in the pattern file (ver.) is used by the management server 30 to search for updatable pattern files. Figure 3 is an example showing that the name of the pattern file stored in the pattern file storage area 254 is "12345" and its version is "ver.1.1". The process related to updating pattern files will be explained later.

[0042] Returning to Figure 2, the scan history storage area 256 is a storage area that stores information about the execution history of virus scans, for example, as a history information table. Here, the information stored in the scan history storage area 256 will be explained using Figure 4. Figure 4 is a diagram illustrating an example of the data structure of the history information table.

[0043] The history information table includes the date and time of the last scan, the number of scans, and the pattern file (version) as items to store.

[0044] The last scan date and time represents the most recent execution date and time of a virus scan. The date and time stored as the last scan date and time is the most recent execution date and time of a virus scan performed using an updated or unupdated pattern file, triggered by a periodic update or network connection. Figure 4 is an example of a virus scan performed based on a pattern file updated on "2022.03.14 16:00", which is the day before the last update date and time "2022.03.15 16:00" exemplified in Figure 3. This is an example where the pattern file update at the last update date and time "2022.03.15 16:00" exemplified in Figure 3 failed, so the virus scan performed on "2022.03.14 16:00" is stored as the most recent execution date and time.

[0045] The scan count represents the number of virus scans performed using the pattern file indicated by the pattern file (ver.). The pattern file (ver.) indicates the file name and version of the pattern file used for the virus scan.

[0046] Returning to Figure 2, the server information storage area 257 is a storage area that stores connection information such as accounts and IP addresses necessary for connecting with the management server 30 and the vendor server 50.

[0047] [1.1.3 About Management Server 30] Next, the management server 30 will be described. The management server 30 is a server that periodically or irregularly obtains update pattern files from the vendor server 50 and provides the obtained pattern files to the multifunction printer 10. In providing pattern files to the multifunction printer 10, the management server 30 is also a management server that manages information such as the update history of the pattern files in the multifunction printer 10.

[0048] Figure 5 is a functional configuration diagram of the management server 30. The management server 30 comprises a control unit 31, a display unit 33, an operation input unit 35, a communication unit 37, and a storage unit 39.

[0049] The control unit 31 controls the entire management server 30. The control unit 31 is composed of, for example, one or more arithmetic units (CPU, etc.). The control unit 31 realizes its functions by reading and executing various programs stored in the storage unit 39.

[0050] The display unit 33 displays various information to the user, etc. The display unit 33 can be configured, for example, with an LCD or an organic EL display.

[0051] The operation input unit 35 receives information input from the user or other parties. The operation input unit 35 can be configured using input means such as a keyboard, mouse, or numeric keypad.

[0052] The communication unit 37 is equipped with an interface for wired / wireless communication with other devices such as the multifunction printer 10 or vendor server 50 via a network NW1 or NW2 such as a LAN, WAN, the Internet, or a fax line (telephone line).

[0053] The storage unit 39 stores various programs and data necessary for the operation of the management server 30. The storage unit 39 can be configured with, for example, a storage device such as RAM, HDD, SSD, or ROM.

[0054] In the first embodiment, the storage unit 39 stores a display processing program 391 and a pattern file update program 393, and reserves a pattern file storage area 395, an update history information storage area 397, and a connection information storage area 399.

[0055] The display processing program 391 is a program that the control unit 31 reads when controlling the screen display in the display unit 33. After reading the display processing program 391, the control unit 31 displays on the display unit 33 an unillustrated management screen for managing the update history of pattern files in the multifunction device 10, and an unillustrated acquisition screen for obtaining update pattern files from the vendor server 50.

[0056] The pattern file update program 393 is a program that the control unit 31 reads when executing processing related to the update of pattern files on the managed multifunction printers 10 (10a, 10b, 10c). After reading the pattern file update program 393, the control unit 31 performs tasks such as obtaining the pattern files for update from the vendor server 50 and responding to inquiries regarding the pattern files for update from the multifunction printers 10, as described later. In addition, the control unit 31, after reading the pattern file update program 393, manages information related to the update of pattern files for each multifunction printer 10 (10a, 10b, 10c) as historical information.

[0057] The pattern file storage area 395 is a storage area that stores the update pattern files obtained from the vendor server 50.

[0058] The update history information storage area 397 is a storage area that stores information related to the update history of pattern files in the multifunction device 10, for example, as an update history table. Here, the information stored in the update history information storage area 397 will be explained using Figure 6. Figure 6 is a diagram illustrating an example of the data structure of the update history table.

[0059] The update history table includes the following items to store: the name of the image forming machine, whether the update was successful or not, the update date and time, the pattern file (version), and the updatable pattern file (version).

[0060] The image forming apparatus name represents the name of the image forming apparatus managed by the management server 30. Figure 6 shows an example in which the management server 30 manages three multifunction printers 10a, 10b, and 10c as image forming apparatuses. The management server 30 stores information such as the pattern file update history for each multifunction printer 10 (10a, 10b, 10c) represented by the image forming apparatus name.

[0061] The update success / failure status indicates whether the pattern file update performed on the multifunction device 10 was successful or not. The update date and time indicates the date and time the pattern file was updated on the multifunction device 10. Pattern file (ver.) indicates the name and version of the updated pattern file. Updatable pattern file (ver.) indicates the name and version of the pattern file available for update from the vendor server 50.

[0062] For example, the update history shown in Figure 6, represented by the image forming apparatus name "Multifunction printer 10a," indicates that the update of pattern file "12345 (ver.1.1)" performed on update date and time "2022.03.14 16:00" was "successful." It also indicates that a pattern file available as an update pattern file exists on the management server 30, and that its name and version are "12345 (ver.1.1.1)."

[0063] Returning to Figure 5, the connection information storage area 399 is a storage area that stores connection information such as accounts and IP addresses necessary for connecting with the multifunction printer 10 (10a, 10b, 10c) and the vendor server 50.

[0064] [1.1.4 About Vendor Server 50] The vendor server 50 is a server managed by a vendor that provides the antivirus program 253. The vendor server 50 can be configured as an information processing device such as a computer terminal, and can be configured as a service server that provides pattern files for updates. The vendor server 50 may be a pull-type service server that sends the corresponding pattern file to the management server 30 in response to a pattern file acquisition request from the management server 30, or it may be a push-type service server that actively distributes updatable pattern files, and there are no particular restrictions on its functional configuration.

[0065] [1.2 Processing Flow] [1.2.1 Processing flow for the multifunction printer 10] Next, the processing flow of the multifunction device 10 according to the first embodiment will be explained using the flowchart in Figure 7. The processing described here is performed by the control unit 11 of the multifunction device 10 when it reads the antivirus program 253, etc.

[0066] When connected to network NW1, the control unit 11 of the multifunction printer 10 determines whether or not communication with the management server 30 is possible (step S10 → step S20). The control unit 11 can determine whether or not it is connected to network NW1 by acquiring the connection signal output from the network connection detection unit 211. Then, based on the IP address information of the management server 30 stored in the server information storage area 257, the control unit 11 determines whether or not communication with the management server 30 is possible, for example by executing a ping command.

[0067] If the control unit 11 determines that communication with the management server 30 is possible, it queries the management server 30 for the existence of an update pattern file (step S20; Yes → step S30). In this case, the control unit 11 notifies the management server 30 of the version of the pattern file (ver.) stored in the update information storage area 255, and determines whether an update pattern file exists based on whether the management server 30 has a newer version of the pattern file than that version. Alternatively, the control unit 11 may query the management server 30 for the existence of an update pattern file and determine whether an update pattern file exists by comparing the pattern file (ver.) in the update history table stored in the update history information storage area 397 with the updateable pattern file (ver.). On the other hand, if the control unit 11 determines that communication with the management server 30 is not possible, it waits until communication with the management server 30 becomes possible (step S20; No).

[0068] If the control unit 11 determines, based on the query to the management server 30, that a new version of the pattern file exists, it determines that the pattern file can be updated (step S40; Yes → step S50). On the other hand, if it determines that there is no new version of the pattern file, the control unit 11 moves the process to step S100 and performs a virus scan using the pattern file (unupdated) stored in the pattern file storage area 254 (step S40; No → step S100).

[0069] After determining that the pattern file can be updated, the control unit 11 obtains the update pattern file from the management server 30 and starts updating the pattern file (step S60).

[0070] Furthermore, while the pattern file is being updated, the control unit 11 can display a message on the display unit 13 indicating that the pattern file is being updated (step S70).

[0071] The control unit 11 then determines whether the pattern file update is complete (step S80). If it determines that the pattern file update is complete, the control unit 11 outputs the update result to the management server 30 (step S80; Yes → step S90). On the other hand, if it determines that the pattern file update is not complete, the control unit 11 continues processing (step S80; No).

[0072] The control unit 11 performs a virus scan using the pattern file and terminates the process (step S100).

[0073] [1.2.2 Processing flow of management server 30] Next, the processing flow of the management server 30 according to the first embodiment will be explained using the flowchart in Figure 8. The processing described here is performed by the control unit 31 of the management server 30 when it reads the pattern file update program 393, etc.

[0074] The control unit 31 of the management server 30 connects to the vendor server 50 (step S300).

[0075] The control unit 31 queries the vendor server 50 to determine whether there are any updatable pattern files based on the update history table it manages (step S310).

[0076] If there is an updatable pattern file, that is, if there is a pattern file with a newer version than the version of the managed pattern file, the control unit 31 retrieves the pattern file (step S320; Yes → step S330). If there is no pattern file with a newer version than the version of the managed pattern file, the control unit 31 returns to step S300 (step S320; No → step S300).

[0077] The control unit 31 stores the acquired pattern file in the pattern file storage area 395 and updates the item "updatable pattern file (ver.)" in the update history table (step S340).

[0078] Next, the control unit 31 determines whether or not the multifunction device 10 has inquired about the existence of an update pattern file (step S350). If the multifunction device 10 has inquired about the existence of an update pattern file, the control unit 31 determines whether or not the corresponding update pattern file has already been obtained (step S350; Yes → step S360). If it determines that the corresponding update pattern file has already been obtained, the control unit 31 sends the pattern file to the multifunction device 10 (step S360; Yes → step S370). On the other hand, if the multifunction device 10 has not inquired about the existence of an update pattern file, the control unit 31 returns to step S300 (step S350; No → step S300).

[0079] The control unit 31 then determines whether or not it has obtained the update result from the multifunction printer 10 (step S380). If it determines that it has obtained the update result, the control unit 31 updates the update history table with the update result as the update history and terminates the process (step S380; Yes → step S390). If it determines that it has not obtained the update result from the multifunction printer 10, the control unit 31 waits until it obtains the update result (step S380; No).

[0080] By the way, if in step S360 it is determined that the corresponding update pattern file has not been obtained, the control unit 31 notifies the multifunction device 10 of this fact and terminates the process (step S360; No → step 400).

[0081] [1.3 Example of Operation] Next, an example of operation according to the first embodiment will be described. Figure 9 is a conceptual diagram showing the timing sequence of processing and operation between the multifunction device 10, the management server 30, and the vendor server 50 according to the first embodiment.

[0082] Figure 9 illustrates the process and operation of updating a pattern file on the multifunction printer 10a as an example. Here, the horizontal axis of Figure 9 represents the passage of time, and the explanation focuses on the process and operation related to updating the pattern file after "2022.03.14 16:00" (see the update information table in Figure 3 and the update history table in Figure 6). It is assumed that the multifunction printer 10a had stored the pattern file related to pattern file "12345 (ver.1.0)" prior to "2022.03.14 16:00".

[0083] First, the management server 30 obtains the update pattern file from the vendor server 50 (at any time before "2022.03.14 16:00"). At this time, the management server 30 is assumed to have obtained a newer pattern file "12345 (ver.1.1)" than the pattern file stored in the multifunction printer 10a.

[0084] On March 14, 2022, at 4:00 PM, the multifunction printer 10a performs a periodic update of its pattern file. The multifunction printer 10a queries the management server 30 for the availability of an update pattern file. The management server 30 notifies the multifunction printer 10a that it has the pattern file "12345 (ver. 1.1)" as the update pattern file. Upon receiving the notification, the multifunction printer 10a retrieves the pattern file "12345 (ver. 1.1)" sent from the management server 30 and updates its pattern file. As a result of this update, the pattern file stored in the multifunction printer 10a is updated to the pattern file "12345 (ver. 1.1)".

[0085] After a scheduled update, the network connection may be lost due to reasons such as a power outage accompanying the transition to energy-saving mode, a power outage due to operation of the power switch, or disconnection of the Ethernet® cable from the connector. If this event persists until the next scheduled update, the scheduled update on "2022.03.15 16:00" will not be performed (the update information table in Figure 3 shows the update status at this time).

[0086] However, in the first embodiment, when a connection to the network NW1 is made, it is determined whether or not it is possible to update the pattern file stored in the pattern file storage area 254, and if it is determined that it is possible to update the pattern file, the pattern file can be updated.

[0087] In other words, for example, if the multifunction printer 10a connects to network NW1 at "2022.03.16 08:00", the multifunction printer 10 will perform a pattern file update regardless of the next scheduled update date and time "2022.03.16 16:00". At this time, if the management server 30 has obtained a pattern file "12345 (ver.1.1.1)" which is a newer version than the pattern file "12345 (ver.1.1)", the multifunction printer 10a will obtain the pattern file "12345 (ver.1.1.1)" and perform a pattern file update. As a result of this update, the pattern file stored in the multifunction printer 10a will be updated to the pattern file "12345 (ver.1.1.1)".

[0088] Figure 10 illustrates an example of the data structure of the update information table (a), history information table (b), and update history table (c) after the pattern file has been updated at the timing of "2022.03.16 08:00" in Figure 9.

[0089] The update information table shown in Figure 10(a) shows that, as illustrated in Figure 3, the date and time represented by the previous update date and time has been updated to "2022.03.16 08:00", the update success status to "Success", the next update date and time to "2022.03.16 16:00", and the pattern file (ver.) to "12345 (ver.1.1.1)".

[0090] The history information table shown in Figure 10(b) shows that, as illustrated in the example in Figure 4, the date and time represented by the previous scan date and time was updated to "2022.03.16 08:00", and the pattern file (ver.) was updated to "12345 (ver.1.1.1)".

[0091] The update history table shown in Figure 10(c) shows that, based on the example in Figure 6, the update status of the multifunction printer 10a was updated to "successful," the date and time represented by the update date and time was updated to "2022.03.16 08:00," the pattern file (ver.) was updated to "12345 (ver.1.1.1)," and the updateable pattern file (ver.) was updated to "-."

[0092] Thus, in the first embodiment, the pattern file stored in the pattern file storage area 254 can be updated when a connection to the network NW1 is triggered, and a virus scan can be performed using the updated pattern file.

[0093] Next, Figure 11 illustrates an example configuration of the settings screen W10, which accepts settings for updating pattern files (pattern update settings).

[0094] The settings screen W10 can be displayed on the display unit 13 via a home screen or the like (not shown). The settings screen W10 can also be displayed as a Web-UI on a display device of a computer terminal (not shown), such as a PC or smartphone, using a web browser. In this case, the computer terminal is configured to output the virus scan settings received via the Web-UI to the multifunction device 10.

[0095] The settings screen W10 illustrated in Figure 11 includes a virus scan settings area R10 and a registration button B10.

[0096] The virus scan settings area R10 includes the virus scan settings sub-area R101, which primarily accepts settings related to virus scanning, and the pattern update settings sub-area R103, which accepts settings for updating pattern files.

[0097] The virus scan settings sub-area R101 includes a pull-down menu for enabling / disabling virus scans and various checkboxes for setting the timing of virus scan execution. For example, if a user wants to perform a virus scan at a predetermined time, they can check the "Perform scan at a specified time" checkbox and specify the desired start time for the virus scan via the pull-down menu to have the virus scan performed at the predetermined time.

[0098] The pattern update setting sub-area R103 includes various checkboxes and other elements that allow users to configure the timing of pattern file updates. For example, if a user wishes to update the pattern files at a predetermined time (periodic update), they can check the "Perform update at a predetermined time" checkbox and specify the desired start time for the pattern file update via the pull-down menu to have the pattern file update performed at the predetermined time.

[0099] Furthermore, the registration button B10 is a button that accepts the registration of various parameters received via the virus scan setting area R10. When the registration button B10 is selected, the control unit 11 stores the parameters received via the virus scan setting area R10 in the storage unit 25 and uses them for processing virus scans and pattern file updates, or for generating the update information table illustrated in Figure 3 or the history information table illustrated in Figure 4.

[0100] Figure 12 illustrates an example configuration of a message screen W20 that the control unit 11 displays on the display unit 13 during pattern file updates. The message screen W20 comprises a message display area R20 and an OK button B12. The display of the message screen W20 is an example of operation corresponding to the process in step S70 of Figure 7.

[0101] The message display area R20 is a display area that indicates that the pattern file is being updated. Figure 12 is an example in which the message to the user, "The pattern file is being updated because the network has been connected," is displayed in the message display area R20, along with "Pattern file: 12345 (ver. 1.1.1)" as the pattern file being updated.

[0102] The OK button B12 is a button that accepts the user's confirmation after they have viewed the message displayed in the message display area R20. When the user selects the OK button B12, the control unit 11 updates the pattern file and can transition to a screen such as a home screen (not shown), a settings screen related to job execution, or a settings screen related to virus scan settings as exemplified in Figure 11.

[0103] As described above, according to the first embodiment, when the multifunction printer connects to a network, it determines whether or not it is possible to update the pattern file stored in the memory unit. If it determines that it is possible to update the pattern file, it updates the pattern file and performs a virus scan using the updated pattern file. Therefore, compared to, for example, updating the pattern file each time the device recovers from energy-saving mode, it is possible to reduce the processing burden related to updating the pattern file. Furthermore, since the connection to the network is used as the trigger for updating the pattern file, no update errors will occur due to the lack of a network connection.

[0104] [2 Second Embodiment] The second embodiment determines whether or not a pattern file needs to be updated based on whether the network connection date and time relative to the update date and time of the reference pattern file is longer or shorter than a set period of time.

[0105] [2.1 Functional Configuration] The configuration of the virus quarantine system according to the second embodiment can be substantially the same as that of the virus quarantine system 100 according to the first embodiment, so the same reference numerals are used and the explanation of its functional configuration is omitted. The multifunction device 10 according to the second embodiment differs from the first embodiment in that it can control the updating of pattern files based on a management table for a certain period, as illustrated in Figure 13.

[0106] Figure 13 illustrates an example of the data structure of a fixed-period management table according to the second embodiment. The fixed-period management table shown in Figure 13 is an example in which parameters related to the updating of pattern files, such as whether or not periodic updates are performed, the date and time of periodic updates, the fixed-period setting, whether or not scan settings are performed, the date and time of scans, and the pattern file (ver.), are set for each user (administrator).

[0107] For example, for administrator A, the following settings are configured: periodic update “Yes”, periodic update date and time “yyyy.mm.dd. 16:00”, fixed period “1h”, scan “Yes”, scan date and time “yyyy.mm.dd. 16:00”, and pattern file (ver.) “12345 (ver.1.1.1)”.

[0108] Note that settings such as whether or not to perform periodic updates, setting the date and time of periodic updates, whether or not to perform scans, setting the date and time of scans, and the pattern file (ver.) are the same as those described in the first embodiment, so their explanation here is omitted.

[0109] For a certain period, the settings can be adjusted as needed according to the scheduled update time. For example, if the scheduled update time is set to a specific time such as "yyyy.mm.dd. 16:00" (daily), it is possible to set it in units of hours (h). Also, as shown in the example for Administrator B, if the scheduled update time is set to a specific date such as "yyyy.mm.10. 00:00" (for example, the 10th of every month), it is possible to set it in units of days (24h).

[0110] Furthermore, the period corresponding to the scheduled update time can also be set based on the type of pattern file to be applied to the virus scan. Here, let's assume that the release interval for the update pattern file "67890 (ver.1.0)" applied by administrator B is longer than that for the pattern file "12345 (ver.1.1.1)" applied by administrator A. In this case, even if the same scheduled update time and period are set as for pattern file "12345 (ver.1.1.1)", there is a high possibility that the update pattern file for pattern file "67890 (ver.1.0)" has not yet been released, and administrator B may fail to update the pattern file. In the management table for fixed periods, etc. according to the second embodiment, the scheduled update time and period can be set individually based on the type of pattern file to be applied to the virus scan, thus enabling more optimal pattern file updates.

[0111] Figure 13 is an example where there are three administrators, A, B, and C, but the number of administrators is not limited to this, nor are the settings limited to this. Furthermore, it is possible to set multiple parameters for the same setting item (for example, for pattern file (ver.), both pattern file "12345 (ver.1.1.1)" and pattern file "67890 (ver.1.0)" can be set). Incidentally, some or all of the parameters set in the management table for a certain period of time can be pre-set as initial parameters that cannot be manipulated by the user (administrator).

[0112] [2.2 Processing Flow] Next, the processing flow of the multifunction device 10 according to the second embodiment will be explained using the flowchart in Figure 14. Note that the same step reference numerals will be used for parts where the processing can be the same as that described in Figure 7 of the first embodiment.

[0113] When connected to network NW1, the control unit 11 of the multifunction printer 10 determines whether or not communication with the management server 30 is possible (step S10 → step S20). The control unit 11 can determine whether or not it is connected to network NW1 by acquiring the connection signal output from the network connection detection unit 211. Then, based on the IP address information of the management server 30 stored in the server information storage area 257, the control unit 11 can determine whether or not communication with the management server 30 is possible, for example, by executing a ping command.

[0114] If the control unit 11 determines that communication with the management server 30 is possible, it checks the update date and time related to the previous periodic update (previous periodic update date and time) (Step S20; Yes → Step S110). On the other hand, if it determines that communication with the management server 30 is not possible, the control unit 11 waits until communication with the management server 30 becomes possible (Step S20; No).

[0115] Next, the control unit 11 determines whether the period since the last periodic update date and time is longer than a certain period (step S120). In this case, the control unit 11 can make the determination in step S120 by calculating the elapsed period since the last periodic update date and time and comparing that elapsed period with the certain period. If the control unit 11 determines that the period since the last periodic update date and time is longer than the certain period, it queries the management server 30 for the presence of an update pattern file (step S120; Yes → step S30).

[0116] If the control unit 11 determines, based on the query to the management server 30, that a new version of the pattern file exists, it determines that the pattern file can be updated (step S40; Yes → step S50). On the other hand, if it determines that there is no new version of the pattern file, the control unit 11 moves the process to step S100 and performs a virus scan using the pattern file (unupdated) stored in the pattern file storage area 254 (step S40; No → step S100).

[0117] After determining that the pattern file can be updated, the control unit 11 obtains the update pattern file from the management server 30 and starts updating the pattern file (step S60).

[0118] The control unit 11 then determines whether the pattern file update is complete (step S80). If it determines that the pattern file update is complete, the control unit 11 outputs the update result to the management server 30 (step S80; Yes → step S90). On the other hand, if it determines that the pattern file update is not complete, the control unit 11 continues processing (step S80; No).

[0119] The control unit 11 performs a virus scan using the updated pattern file and terminates the process (step S100).

[0120] By the way, in step S120, if the control unit 11 determines that the period since the last periodic update date and time is shorter than a certain period, it checks the next periodic update date and time (next periodic update date and time) (step S120; No → step S130). Then, the control unit 11 determines whether the period until the next periodic update date and time is shorter than a certain period (step S140). In this case, the control unit 11 can determine this by calculating the period until the next periodic update date and time and comparing the elapsed period with the certain period. If the control unit 11 determines that the period until the next periodic update date and time is shorter than a certain period, it does not update the pattern file. The control unit 11 moves the process to step S100 and performs a virus scan using the pattern file (unupdated) stored in the pattern file storage area 254 (step S40; No → step S100). On the other hand, if the control unit 11 determines that the period until the next periodic update date and time is longer than a certain period, it moves the process to step S30 (step S140; No → step S30).

[0121] [2.3 Example of Operation] Next, an example of operation according to the second embodiment will be described. Figure 15 is a conceptual diagram showing the timing sequence of processing and operation between the multifunction device 10 and the management server 30 according to the second embodiment.

[0122] Figure 15 illustrates the process and operation of updating a pattern file in the multifunction printer 10a as an example. Here, the horizontal axis of Figure 15 represents the passage of time, and the explanation focuses on the process and operation related to updating the pattern file from "2022.03.14 16:00" onwards. Furthermore, the control unit 11 of the multifunction printer 10a is described as performing control related to the updating of the pattern file based on the parameters set for administrator A in the management table for a certain period, as exemplified in Figure 13.

[0123] Figure 15(a) shows the case where the update time of the reference pattern file is set as the last periodic update time, and the network connection time relative to that last periodic update time is longer than a set period. Note that the operation example described here corresponds to the process of step S120;Yes → step S30 in Figure 14.

[0124] In Figure 15(a), a scheduled update was performed at "2022.03.14 16:00," and subsequently, the network connection was disconnected due to reasons such as a power outage due to transitioning to energy-saving mode, a power outage due to operation of the power switch, or disconnection from the Ethernet® cable connector. Then, the multifunction printer 10a was connected to network NW1 at "2022.03.14 19:00." In this case, 3 hours (h), which is longer than a certain period (1 hour (h)), elapsed from "2022.03.14 16:00," the time of the previous scheduled update, until the connection to network NW1 was established.

[0125] In this example, the control unit 11 of the multifunction printer 10a performs a pattern file update triggered by a connection to the network NW1.

[0126] On the other hand, Figure 15(b) shows a case where the update date and time of the reference pattern file is set as the next periodic update date and time, and the network connection date and time for that next periodic update date and time is shorter than a set period. Note that the operation example described here corresponds to the process of step S140;Yes → step S100 in Figure 14.

[0127] In Figure 15(b), it is assumed that the multifunction printer 10a was connected to network NW1 at "2022.03.14 15:10" after the network connection was disconnected due to reasons such as power outage due to transition to energy-saving mode, power outage due to operation of the power switch, etc., or disconnection from the Ethernet® cable connector. If the next scheduled update date and time is "2022.03.14 16:00", the time from connection to network NW1 to the next scheduled update date and time is shorter than a certain period (1 hour (h)).

[0128] In this case, the control unit 11 of the multifunction printer 10a does not perform a pattern file update triggered by a connection to the network NW1, but waits for the scheduled update date and time to arrive before performing the pattern file update.

[0129] As illustrated in Figure 15, in the second embodiment, if the network connection time for the previous periodic update is longer than a set period, the pattern file is updated to minimize the time lag associated with updating the pattern file. On the other hand, if the network connection time for the next periodic update is shorter than a set period, the pattern file update is restricted to prevent the pattern file from being updated repeatedly in a short period of time.

[0130] As described above, according to the second embodiment, in addition to the effects of the first embodiment, it is possible to determine whether or not to update the pattern file depending on whether the network connection date and time relative to the update date and time of the reference pattern file is longer or shorter than a set period of time, thereby enabling the maintenance of appropriate pattern files for virus scanning.

[0131] [3 Third Embodiment] The third embodiment is a configuration in which, once it is determined that the pattern file can be updated, the system asks the user whether or not they wish to update the pattern file.

[0132] [3.1 Functional Configuration] The configuration of the virus quarantine system, management server, and vendor server according to the third embodiment can be substantially the same as that of the virus quarantine system 100, management server 30, and vendor server 50 according to the first embodiment; therefore, the same reference numerals are used and a description of their functional configuration is omitted.

[0133] [3.1.1 About the 70 Multifunction Printer] Figure 16 is a functional configuration diagram of the multifunction printer 70 according to the third embodiment. The multifunction printer 70 includes a storage unit 75 in place of the storage unit 25 of the multifunction printer 10 according to the first embodiment.

[0134] In the third embodiment, the storage unit 75 stores a job control program 251, a display processing program 252, and an antivirus program 753, and reserves a pattern file storage area 254, an update information storage area 255, a scan history storage area 256, and a server information storage area 257.

[0135] The antivirus program 753 includes an update setting program 2531 and an update inquiry program 7531. The update inquiry program 7531 is a program that the control unit 11 reads when it asks the user whether or not to update the pattern files.

[0136] [3.2 Processing Flow] [3.2.1 Processing flow for the 70-function multifunction printer] Next, the processing flow of the multifunction printer 70 according to the third embodiment will be explained using the flowchart in Figure 17. The processing flow of the multifunction printer 70 according to the third embodiment includes a process to inquire with the user about whether or not the pattern file can be updated, between the process related to determining whether the pattern file can be updated, which is described in step S50 in Figure 7 of the first embodiment, and the process related to starting the pattern file update, which is described in step S60. Other processes can be the same. Therefore, explanations of processes that can be the same will be omitted.

[0137] If the control unit 11 determines that the pattern file is updatable, it asks the user whether or not to update the pattern file (step S50 → step S150).

[0138] Upon receiving an inquiry about whether the pattern file can be updated, and receiving a pattern file update instruction from the user, the control unit 11 starts updating the pattern file (Step S160; Yes → Step S60). On the other hand, if the user does not give a pattern file update instruction, the control unit 11 terminates the process (Step S160; No → Terminate).

[0139] Figure 18 illustrates one example configuration of an inquiry screen W30 that the control unit 11 displays on the display unit 13 as an inquiry regarding whether or not the pattern file can be updated. The inquiry screen W30 includes an inquiry content display area R22, a Yes button B14, and a No button B16. The display of the inquiry screen W30 is an example of operation corresponding to the process in step S150 of Figure 17.

[0140] The inquiry content display area R22 is a display area that displays a message to the user asking whether or not to update the pattern file. Figure 18 is an example in which the inquiry content to the user is, "You are now connected to the network, do you want to update the pattern file?" and the pattern file to be updated is, "Pattern file: 12345 (ver. 1.1.1)", displayed in the inquiry content display area R22.

[0141] The Yes button B14 accepts input from the user indicating that the pattern file should be updated. When the user selects the Yes button B14, the control unit 11 determines that the instruction to update the pattern file has been received (step S160 in Figure 17; Yes). The No button B16 accepts input from the user indicating that the pattern file cannot be updated. When the user selects the No button B16, the control unit 11 determines that the pattern file cannot be updated (step S160 in Figure 17; No).

[0142] As described above, according to the third embodiment, in addition to the effects of the first embodiment, if it is determined that the pattern file can be updated, the system is configured to ask the user whether or not to update the pattern file. Therefore, for example, it is possible to prevent the user's job execution from being hindered by updating the pattern file.

[0143] [4 Fourth Embodiment] The fourth embodiment is a configuration in which the processing order for updating the pattern file is controlled depending on whether there are ongoing jobs or jobs waiting to be processed.

[0144] [4.1 Functional Configuration] Since the configuration of the virus quarantine system according to the fourth embodiment can be substantially the same as that of the virus quarantine system 100 according to the first embodiment, the same reference numerals are used and a description of its functional configuration is omitted.

[0145] [4.2 Processing Flow] Next, the processing flow of the multifunction device 10 according to the fourth embodiment will be explained using the flowchart in Figure 19. The processing flow of the multifunction device 10 according to the fourth embodiment differs from the processing after the process related to the determination of whether the pattern file can be updated, which was explained in step S50 in Figure 7 of the first embodiment. Therefore, the processing from step S50 onwards will be explained.

[0146] If the control unit 11 determines that the pattern file is updatable, it determines whether or not there are any jobs in progress (step S50 → step 170).

[0147] If the control unit 11 determines that there is a job in progress, it continues the job (step S170; Yes → step S180). Next, the control unit 11 determines whether the job in progress has finished (step S190a). If it determines that the job in progress has finished, the control unit 11 starts updating the pattern file (step S190a; Yes → step S60a). On the other hand, if it determines that the job in progress has not finished, it continues processing until that job is completed (step S190a; No).

[0148] After determining that an ongoing job has finished, the control unit 11 retrieves the update pattern file from the management server 30 and starts updating the pattern file (step S60a).

[0149] The control unit 11 then determines whether the pattern file update is complete (step S80a). If it determines that the pattern file update is complete, the control unit 11 outputs the update result to the management server 30 (step S80a; Yes → step S90a). On the other hand, if it determines that the pattern file update is not complete, the control unit 11 continues processing until the update is completed (step S80a; No).

[0150] The control unit 11 performs a virus scan using the updated pattern file and terminates the process (step S100a).

[0151] By the way, if it is determined that there are no jobs in progress, the control unit 11 determines whether or not there are jobs waiting to be processed (step S170; No → step S200).

[0152] If the control unit 11 determines that there are jobs waiting to be processed, it puts the execution of those jobs on hold (step S200; Yes → step S210). If the control unit 11 determines that there are no jobs waiting to be processed, it moves the process to step S60b (step S200; No → step S60b).

[0153] After waiting for the job to run, the control unit 11 retrieves the pattern file for updating from the management server 30 and starts updating the pattern file (step S60b).

[0154] The control unit 11 then determines whether the pattern file update is complete (step S80b). If it determines that the pattern file update is complete, the control unit 11 outputs the update result to the management server 30 (step S80b; Yes → step S90b). On the other hand, if it determines that the pattern file update is not complete, the control unit 11 continues processing until the update is completed (step S80a; No).

[0155] The control unit 11 performs a virus scan using the updated pattern file (step S100b). At this time, the control unit 11 sequentially performs virus scans on pending jobs that have been put into standby mode, prioritizing their processing.

[0156] Next, the control unit 11 executes jobs as they are completed (step S220). The control unit 11 determines whether the ongoing job has finished (step S190b). If it determines that the ongoing job has finished, the control unit 11 terminates processing (step S190b; Yes → Terminate). If it determines that the job has not finished, it continues processing until the job is completed (step S190b; No).

[0157] In step S210, the user (administrator) may choose whether to prioritize waiting for pending jobs or updating the pattern file. Furthermore, jobs may be assigned to continue execution and jobs to wait, depending on their type. For example, print jobs and fax jobs received from external devices are executed over a network and are therefore considered to have a high risk of virus infection. Such jobs may be assigned to wait, while jobs that are completed within the multifunction device 10, such as scan jobs and copy jobs, are considered to have a low risk of virus infection and may be assigned to continue execution.

[0158] As described above, according to the fourth embodiment, in addition to the effects of the first embodiment, the impact on user operations on the job executing the processing can be minimized, and the effectiveness of the virus check can be maximized.

[0159] This disclosure is not limited to the embodiments described above, and various modifications are possible. That is, embodiments obtained by combining technical means that are appropriately modified without departing from the gist of this disclosure are also included in the technical scope of this disclosure.

[0160] Furthermore, although the embodiments described above are explained separately for explanatory purposes, they can, of course, be combined and implemented to the extent that is technically possible. In this embodiment, the multifunction device is described as obtaining the update pattern file from the management server, but it is also possible for the multifunction device to obtain the update pattern file directly from the vendor server.

[0161] Furthermore, in the embodiments, the programs that run on each device are programs that control the CPU and the like (programs that make the computer function) in order to realize the functions of the embodiments described above. In the embodiments, a device is assumed in which multiple programs are executed simultaneously as needed through multitasking. The information handled by these devices is temporarily stored in a temporary storage device (for example, RAM) during processing, and then stored in storage devices such as various ROMs (Read Only Memory) and HDDs, and read, modified, and written by the CPU as needed.

[0162] Here, the recording medium for storing the program may be any of the following: semiconductor media (e.g., ROM, non-volatile memory card, etc.), optical recording media / magneto-optical recording media (e.g., DVD (Digital Versatile Disc), MO (Magneto Optical Disc), MD (Mini Disc), CD (Compact Disc), BD (Blu-ray® Disc, etc.)), magnetic recording media (e.g., magnetic tape, flexible disk, etc.). Furthermore, in addition to realizing the functions of the embodiments described above by executing the loaded program, the functions of this disclosure may also be realized by processing in cooperation with the operating system or other application programs based on the instructions of the program.

[0163] Furthermore, when distributing the program to the market, it can be stored on a portable storage medium and distributed, or transferred to a server computer connected via a network such as the Internet. In this case, the storage device of the server computer is, of course, also included in this disclosure. [Explanation of Symbols]

[0164] 10(10a, 10b, 10c), 70 multifunction device 11 Control Unit 13 Display section 15 Operation Input Section 17 Image forming unit 19 Image reading unit 21 Communications Department 211 Network Connection Detection Unit 25, 75 storage section 30 Management Server 31 Control Unit 33 Display section 35 Operation Input Section 37 Communications Department 39 Memory section 50 Vendor Servers 100 Virus Quarantine Systems

Claims

1. A control unit capable of virus quarantine using pattern files, It comprises a storage unit capable of storing the aforementioned pattern file, The control unit, An image forming apparatus characterized by, when connected to a network, determining whether or not to update the pattern file stored in the storage unit based on the length of time until the next scheduled update of the pattern file, controlling the update of the pattern file stored in the storage unit according to the determination result, and performing virus quarantine using the pattern file stored in the storage unit or the updated pattern file.

2. The control unit, The image forming apparatus according to claim 1, characterized in that when connected to the network, the pattern file is updated if the elapsed time since the last update of the pattern file is longer than a certain period of time.

3. The control unit, The image forming apparatus according to claim 1, characterized in that when connected to the network, the pattern file is updated if the period until the next scheduled update of the pattern file is longer than a certain period of time.

4. The control unit, The image forming apparatus according to claim 3, characterized in that when connected to the network, if the period until the next update is shorter than a certain period, the update of the pattern file is restricted.

5. The control unit, The image forming apparatus according to claim 1, characterized in that, if it is determined that the pattern file can be updated, the apparatus inquires with the user whether or not the pattern file can be updated.

6. It includes a job execution unit capable of executing jobs related to image formation, The control unit, The image forming apparatus according to claim 1, characterized in that, if the job execution unit is executing the job, the pattern file is updated after the execution of the job.

7. The control unit, The image forming apparatus according to claim 6, characterized in that, if there are jobs waiting to be processed, the pattern file is updated, and after virus quarantine using the updated pattern file, the jobs waiting to be processed are executed.

8. A server capable of providing pattern files, The system includes an image forming apparatus capable of acquiring the pattern file via a network, The image forming apparatus is A control unit capable of performing virus quarantine using the aforementioned pattern file, It comprises a storage unit capable of storing the aforementioned pattern file, The control unit, When connected to the network, the system determines whether or not to update the pattern file stored in the storage unit based on the length of time until the next scheduled update of the pattern file, controls the update of the pattern file stored in the storage unit according to the determination result, and performs virus quarantine using the pattern file stored in the storage unit or the updated pattern file. The aforementioned server, A virus quarantine system characterized by storing the update history of the pattern file in the image forming apparatus.

9. Perform virus quarantine using pattern files. A virus quarantine method characterized by storing the pattern file in a storage unit, determining whether or not to update the pattern file stored in the storage unit based on the length of the period until the next scheduled update of the pattern file when connected to a network, controlling the update of the pattern file stored in the storage unit according to the determination result, and performing virus quarantine using the pattern file stored in the storage unit or the updated pattern file.

Images