JP2008262500A - Log information recording device, electronic equipment, log information recording method, log information recording program, and computer-readable storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a log information recording device, for setting an internal clock to a correct standard time as needed and correcting time information in log information with high accuracy, and to provide electronic equipment or the like using the log information recording device. <P>SOLUTION: The log information recording device comprises a clock correction means 15 for correcting the internal clock 12 to a current standard time; an error determination means 16 which determines a time difference between the time of the internal clock 12 and the standard time when correcting the internal clock 12; and a time information correction means 14 which corrects an error of time information in log information on the basis of the determined time difference and the time elapsed from the previous clock correction to the current clock correction. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a log information recording apparatus, an electronic device, a log information recording method, a log information recording program, and a computer-readable recording medium, and in particular, a copier and a facsimile apparatus having various recording (logging) functions using time stamps. The present invention relates to log information management technology for image processing apparatuses such as printers and electronic devices such as computers.

  In recent years, security-related logs of electronic devices including computers have become increasingly important functions from the viewpoint of security. Such a security-related log is called an audit log, and one of the components is a time stamp. The log information is required to be accurate in the record (time stamp) of the time when the event occurred. This is also described as a reliable time stamp in the Common Criteria, a global security evaluation standard.

  By the way, the time stamp is an important element for the log information, but the timepiece of the electronic device is not always kept in an accurate state. For example, even if you have an internal clock that operates with a backup power supply even when the power is off, the time gradually shifts over time.

  In order to solve this problem, a system time (NTP: Network Time Protocol) is required to require the electronic device administrator to set the time periodically or from the time server to set the computer clock periodically over the network. There are also ways to encourage usage. However, if the administrator neglects to set the time regularly or cannot connect to the NTP server due to a network failure, and the internal clock shifts greatly, the reliability of the log information using that time stamp Sex is steadily decreasing. For example, when security tracking is performed based on time, tracking may become difficult if the time stamp shift becomes large.

There is also a recording apparatus on the premise that the internal clock deviates from the standard time (see, for example, Patent Document 1). In the recording device of this document, when a re-recording command is input, the deviation between the current time of the internal clock and the time of the clock device with a correction function is calculated, and the recorded log is based on the time deviation. The time information is corrected. The clock device with a correction function is configured to receive an FM broadcast, detect a time signal broadcast at least once a day, and correct its own internal clock according to the time signal.
JP-A-1-260320

  However, the recording device of Patent Document 1 requires a clock device with a correction function that corrects the standard time at least once a day, and when a re-recording command is received, the correct time is set in the clock device with a correction function. There must be. In addition, the time information correction method takes a long time since the deviation between the internal clock and the clock device with correction function at the time of receiving the re-recording command is equally applied to the correction of all time information. For time information, there is a risk that the error will increase.

  The present invention has been made in consideration of the above circumstances, and not only can the internal clock be set to the correct standard time when necessary, but also a log information recording apparatus capable of correcting the time information in the log information with high accuracy. It is an object of the present invention to provide an electronic device using a log information recording device.

  In order to solve the above-mentioned problem, the invention according to claim 1 is log information for recording device operation information and time information, which is a time indicated by an internal clock at the time of operation of the device, as log information in a recording device. In the recording apparatus, a clock correction unit that corrects the internal clock to a current standard time, an error determination unit that calculates a time difference between the internal clock and the standard time when correcting the internal clock, and the obtained time difference; Time information correcting means for correcting an error in time information in the log information from an elapsed time from the previous clock correction to the current clock correction is provided.

  According to a second aspect of the present invention, in the log information recording apparatus according to the first aspect, the clock correction unit records an operation of correcting the internal clock as the log information.

  According to a third aspect of the present invention, in the log information recording apparatus according to the first or second aspect, the clock correction means includes an input unit for inputting the standard time.

  According to a fourth aspect of the present invention, there is provided notification means for sending an email at a designated date and time, the error determination means determines the next time to correct the internal clock, and the notification means It is characterized in that a date and time for sending an e-mail for prompting correction of the clock is designated.

  According to a fifth aspect of the present invention, there is provided the log information recording apparatus according to the fourth aspect, wherein after the notification means transmits an e-mail for prompting the correction of the internal clock, the internal clock is actually corrected until the internal clock is corrected. It is characterized by continuously sending dunning mails at time intervals.

  According to a sixth aspect of the present invention, there is provided an electronic apparatus having log information recording means for recording operation information and time information, which is a time indicated by the internal clock when the operation occurs, in the recording device as log information. A time correction means for correcting the time to the standard time, an error determination means for obtaining a time difference between the internal clock and the standard time when the internal clock is corrected, the time difference obtained from the previous time correction And time information correcting means for correcting an error of time information in the log information from the elapsed time up to.

  According to a seventh aspect of the present invention, in the electronic device according to the sixth aspect, the clock correction means records an operation of correcting the internal clock as the log information.

  According to an eighth aspect of the present invention, in the electronic device according to the sixth or seventh aspect, the clock correction means includes an input unit for inputting the standard time.

  Further, the invention of claim 9 is provided with a notification means for sending a mail at a designated date and time, the error determination means determines the next time to correct the internal clock, and the notification means It is characterized in that a date and time for sending an e-mail for prompting correction of the clock is designated.

  The electronic device according to a tenth aspect of the present invention is the electronic device according to the ninth aspect, wherein the notifying unit transmits a mail for urging the correction of the internal clock to a predetermined time interval until the internal clock is actually corrected. It is characterized by continuing to send a reminder email.

  The invention of claim 11 is a log information recording method for recording operation information of a device and time information which is a time indicated by an internal clock when the operation of the device occurs as a log information. A clock correction step for correcting the current time to a current standard time, an error determination step in which an error determination means determines a time difference between the internal clock and the standard time when correcting the internal clock, and the determined time difference, The time information correcting means includes a time information correcting step for correcting an error in the time information based on an elapsed time from the previous clock correction to the current clock correction.

  According to a twelfth aspect of the present invention, in the log information recording method according to the eleventh aspect, the clock correction step records an operation of correcting the internal clock as the log information.

  The invention according to claim 13 is the log information recording method according to claim 11 or 12, wherein the clock correction step has an input step of inputting the standard time.

  The invention of claim 14 is a log information recording program for causing a log information recording device to record operation information of a device and time information which is a time indicated by an internal clock when the operation of the device occurs. The log information recording device includes a clock correction function for correcting the internal clock to a current standard time, an error determination function for determining a time difference between the internal clock and the standard time when the internal clock is corrected, and the determination. A time information correction function for correcting an error in time information in the log information is realized from the time difference obtained and the elapsed time from the previous clock correction to the current clock correction.

  Further, the invention of claim 15 is the log information recording program according to claim 14, wherein the clock correction function causes the log information recording device to record an operation of correcting the internal clock as log information. To do.

  Further, the invention of claim 16 is the log information recording program according to claim 14 or 15, wherein the log information recording device comprises an input means for inputting the standard time, and the clock correction function is the log information recording The apparatus is characterized in that the time is corrected to the standard time input by the input means.

  The invention according to claim 17 is a computer-readable recording medium on which the log information recording program according to any one of claims 14 to 16 is recorded.

  According to the present invention, the internal clock can be maintained at a desired accuracy, and the time information in the log information can be corrected with high accuracy simultaneously with the correction of the internal clock. Therefore, it is possible to provide an electronic device that can store accurate log information.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram showing a functional configuration of a log information recording apparatus according to an embodiment of the present invention. The log information recording apparatus shown in the figure is premised on storing event information from other electronic devices (for example, copiers, printers, various servers, etc.) that want to store log information, but most of the functions are software. Since it is realized by software, it is easy to incorporate this function into the electronic device itself.

  In the figure, the log information writing means 11 receives various event information from the electronic device as the parent device, and writes it into the log information file 13 together with the current time (time stamp) indicated by the internal clock 12.

  The event information varies depending on the function of the electronic device that records the operation record. For example, the name of the user who used it, the use start time, the end time, the time when the print file was received, the size of the file (number of pages), This is information such as the print start time and the end time. These events are input to the log information recording device from the electronic device as the parent device via a communication interface (not shown). If it is incorporated in the electronic device of the parent apparatus, for example, the log information writing means 11 may be activated by a subroutine call, an interrupt, or the like, so there is no need to use a communication interface or the like.

  The internal clock 12 is a device that outputs the current time and the like when referred to, and is mounted on a normal electronic device.

  The time information correction means 14 is a means for correcting an error in the time (time stamp) portion of the accumulated log information. The corrected log information can be transmitted to an electronic device as a parent device or printed out by a printing device (not shown) upon request.

  As described above, if the internal clock 12 is continuously used without correction, errors accumulate. The clock correction means 15 corrects this error and returns it to the correct time. The clock correction means 15 may be configured such that the user inputs the date manually by referring to radio, television broadcast, telephone time signal service, or the like, or a radio clock or an NTP (Network Time on network). (Protocol) server may be used for automatic correction without human intervention. If it is performed manually, the cost of the present apparatus can be reduced.

  Of the accumulated log information, the processing of the time information correcting means 14 for correcting the error of the time portion starts when the clock correcting means 15 corrects the internal clock 12 to the correct time. That is, when the internal clock 12 is corrected, the time information of the log information accumulated so far is corrected. Also, the operation of correcting the internal clock 12 is not the operation of the parent device, but is recorded in the log information file 13 as an event “time setting”. The event information sent from the parent device may include a time stamp by the internal clock of the parent device. In this case, the time stamp of the parent device is not corrected, and only the time stamp (time information) attached by this log information recording device is the target of correction. By doing so, the error of the internal clock of the parent device can also be confirmed, the operation state can be kept good, and can be used as a reference during tracing. Further, from the viewpoint of evidence preservation, it is preferable that the log information is not directly corrected, and the corrected time can be browsed in correspondence with the time of the original log information.

  When the clock correction unit 15 corrects the internal clock 12 to the correct time, the error determination unit 16 should next correct the internal clock 12 based on the degree of error (the time difference between the time indicated by the internal clock 12 and the correct time). Determine the date and time. The date and time when the internal clock 12 determined by the error determination means 16 should be corrected is notified from the notification means 17 to the administrator of this apparatus by e-mail. When the internal clock 12 is automatically corrected, a correction flag and a correction date / time are set.

  When the correction flag and the correction date and time are set, a timer interrupt is generated at the set correction date and time, the clock correction means 15 is automatically activated, the internal clock 12 is corrected, and subsequently the time information correction means 14 Starts and corrects the time part of the log information. Further, the error determination means 16 sets a correction flag and a correction date and time for correcting the internal clock 12 next. Thereafter, this operation is repeated.

  One method for determining the date and time when the internal clock 12 is to be corrected is to calculate in advance from the error specifications of the internal clock. For example, if the maximum monthly difference is 5 seconds and the allowable error range as log information is 10 seconds, the internal clock 12 may be corrected every two months.

  The other is a method of dynamically determining from the previous error. For example, if the specification is a maximum of 5 seconds per month and the allowable error range for log information is 10 seconds, if the administrator changes it once a month, the difference is 2.5 seconds, then 4 months later The internal clock 12 may be corrected. However, when the correction is made manually, the same state does not always continue, so the manager checks the error of the internal clock 12 before two months after the first method is obtained. You should send an email.

  If the internal clock 12 can be automatically corrected, it may be corrected at predetermined time intervals regardless of the above method.

  FIG. 2 is a block diagram showing a hardware configuration of a main part of the log information recording apparatus according to the present embodiment. In the log information recording apparatus, the CPU 21 executes the program stored in the ROM 25 by using the RAM 24 as a work area, thereby realizing various functions described in FIG.

  The external storage device 27 is a storage device using a hard disk device, for example, and can store the log information file 13 shown in FIG. Instead of storing the program in the ROM 25, the program may be stored in the external storage device 27 and executed using the RAM 24.

  The communication I / F 28 is an interface for capturing event information, outputting log information, and transmitting an e-mail, and may use wireless IEEE 802.11, wired IEEE 1284, IEEE 802.3, or the like.

  The internal clock 12 updates the current date, hour, minute and second even when the apparatus is stopped. When the accuracy of the internal clock 12 is not sufficient, the current time may be provided with an accuracy of about milliseconds by using another interval timer (not shown) or the like together.

  The display device 22 and the input unit 23 provide communication means between the device and the user, and are used when displaying the internal clock or setting the time of the internal clock manually. You may comprise with a liquid crystal display, a keyboard, a mouse | mouth, etc.

  The radio clock 29 is a device for automatically correcting the internal clock 12. It has already been commercialized and can be easily incorporated into electronic circuits. This radio clock 29 receives a standard radio wave of 40 KHz or 60 KHz according to the region of use in Japan, extracts the current time (year / month / day / hour / minute) from the standard time code sent once per minute, This is supplied to the CPU 21. Although the time of the time code is accurate, the time code is composed of pulse signals with an interval of 1 second, so it is not suitable for the method of reading the time frequently and is often used for calibration of other clocks. Also in this embodiment, the radio clock 29 is used to calibrate the internal clock 12 to the correct time.

  Next, a time information correction method performed by the time information correction means 14 in the present embodiment will be described.

  FIG. 3 is an example of log information before correction created based on event information. This is an example in which the administrator of the electronic device or the log information recording apparatus of the present embodiment sets the time at midnight on August 1 and August 6, 2006. Here, the time adjustment record is also recorded in the same log file.

  FIG. 4 shows log information after the log information shown in FIG. 3 is corrected. It was found that there was no error on August 1, but it was 5 seconds behind on August 6. This is the difference that was found when the internal clock was set to the correct standard time (the internal clock was 23:59:55 on August 5). The time information is corrected by the following formula.

Correct time (unknown number) = time before correction + number of days elapsed since last time adjustment before correction * error per day (1 second)
Therefore, in the case of 0:00 on August 2,
The correct time (unknown number) = August 2, 0: 00 + 1 day * 1 second = August 2, 0: 0: 01.

  In the above example, for ease of explanation, the unit of error is one day and the number of elapsed days is also one day, but it is of course possible to calculate the unit in seconds.

  Next, the operation of the log information recording apparatus of this embodiment will be described with reference to the drawings. This operation is the same even when the log information recording apparatus is incorporated in an electronic device.

  FIG. 5A is a flowchart showing an operation related to log information processing according to the present invention.

  When the time correction of the internal clock 12 is started manually or automatically, the error determination unit 16 calculates the time difference between the current time of the internal clock 12 and the correct time, and the clock correction unit 15 sets the internal clock to the correct time. (Step 101).

  Next, the time information correction means 14 searches for the log information in which the internal clock 12 was corrected last time in order to correct the time information of the log information accumulated in the log information file 13, and moves the pointer to the next line ( Step 102). Then, the time information in the log information indicated by the pointer is corrected by the method described above (step 103), and the pointer is advanced to the next line (step 104). If there is log information on the next line, steps 103 and 104 are performed and repeated until there is no log information (step 105 / NO).

  When there is no log information (step 105 / NO), the internal clock correction record is written in the log information file 13 as log information (step 106). Then, the e-mail transmission date / time is set and the transmission flag is reset so as to be in time for the next correction of the internal clock 12 (step 107).

  Although not shown in the figure, when the internal clock 12 is configured to be automatically corrected, the correction flag and the internal clock 12 are set next, as described in the explanation of FIG. Set the correction date and time to be corrected.

  FIG. 5B is a flowchart showing a processing flow of the notification means 17. This means is activated by a timer interrupt or the like when the time for sending a mail for urging correction of the internal clock set by the error judgment means 16 has come.

  First, a clock correction prompting mail is transmitted (step 111). The mail address is the administrator of the registered log recording device or electronic device, and the content is the date and time (or date limit) when the internal clock should be corrected. Next, a transmission date and a transmission flag for transmitting the reminder mail are set (step 112). This is because the dunning mail is transmitted after the transmission of the mail until the clock is corrected, and the transmission date may be the next day.

  As described above, there is provided a means for correcting the internal clock manually or automatically so that the error does not accumulate in the internal clock. At this time, the time information in the log information accumulated up to that time can be reduced by a method with less error. Because it corrects, log information is maintained with high accuracy. If the internal clock is corrected when it is desired to correct the log information, the log information is also corrected at the same time.

  The above-described embodiment is a preferred embodiment of the present invention, and the scope of the present invention is not limited to the above-described embodiment alone, and various modifications are made without departing from the gist of the present invention. Implementation is possible.

  That is, the log information recording apparatus of the above-described embodiment operates by processing, means, and functions executed by a computer according to program instructions. The program sends a command to each component of the computer, calculates the time difference between the current time of the internal clock 12 and the correct time by the predetermined processing and function as described above, for example, the error determination means 16, The clock correction means 15 sets the internal clock to the correct clock, and the time information correction means 14 corrects the time information of the log information stored in the log information file 13 and uses the correction record as log information in the log information file. 13 is written. Thus, each process and means in the log information recording apparatus of the above-described embodiment are realized by specific means in which the program and the computer cooperate.

  Then, the program code stored in the storage medium by the computer (CPU) of the log information recording apparatus via the computer-readable recording medium that records the program code of the software that realizes the function of the above-described embodiment, that is, the storage medium The object of the present invention can also be achieved by reading and executing.

  Further, the program can be loaded and executed directly on a computer through a communication line without going through a recording medium, and the object of the present invention can be achieved similarly. In this case, the program code itself read from the storage medium or loaded and executed through the communication line realizes the functions of the above-described embodiment.

  And the storage medium which memorize | stored the program code comprises this invention. As a storage medium for supplying the program code, for example, a floppy (registered trademark) disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, nonvolatile memory card, ROM, magnetic tape, or the like is used. be able to.

  The present invention is also effectively implemented by an electronic device equipped with the log information recording apparatus described above.

It is a block diagram which shows the function structure of the log information recording device concerning embodiment of this invention. It is a block diagram which shows the principal hardware structure of the log information recording device concerning embodiment of this invention. It is the figure which showed the example of the log information before correction produced based on event information in the embodiment of the present invention. It is the figure which showed the example of the log information after correction created based on event information in the embodiment of the present invention. It is the flowchart which showed the flow of the log information processing and notification processing in the embodiment of the present invention.

Explanation of symbols

11 Log information writing means 12 Internal clock 13 Log information file 14 Time information correcting means 15 Clock correcting means 16 Error judging means 17 Notifying means 21 CPU
22 display device 23 input unit 24 RAM
25 ROM
27 External storage device 28 Communication I / F
29 radio clock

Claims (17)

In a log information recording device that records operation information of a device and time information that is a time indicated by an internal clock when the operation of the device occurs as log information in the recording device,
Clock correction means for correcting the internal clock to the current standard time;
Error determining means for obtaining a time difference between the internal clock and the standard time when correcting the internal clock;
Time information correction means for correcting an error in time information in the log information from the obtained time difference and an elapsed time from the previous clock correction to the current clock correction;
A log information recording apparatus comprising:   The log information recording apparatus according to claim 1, wherein the clock correction unit records an operation of correcting the internal clock as the log information.   The log information recording apparatus according to claim 1, wherein the clock correction means includes an input unit for inputting the standard time. Provide a notification means to send mail at the specified date and time,
The error determination means determines a time when the internal clock should be corrected next, and designates a date and time when the notification means transmits a mail prompting correction of the internal clock. The log information recording device according to any one of claims.   5. The log according to claim 4, wherein the notification means continues to send the reminder mail at a predetermined time interval after sending the mail prompting the correction of the internal clock until the internal clock is actually corrected. Information recording device. In an electronic apparatus having log information recording means for recording operation information and time information that is a time indicated by an internal clock when an operation occurs as log information in a recording device,
Clock correction means for correcting the internal clock to the current standard time;
Error determining means for obtaining a time difference between the internal clock and the standard time when correcting the internal clock;
Time information correction means for correcting an error in time information in the log information from the obtained time difference and an elapsed time from the previous clock correction to the current clock correction;
An electronic device characterized by comprising:   The electronic device according to claim 6, wherein the clock correction unit records an operation of correcting the internal clock as the log information.   8. The electronic apparatus according to claim 6, wherein the clock correction means includes an input unit for inputting the standard time. Provide a notification means to send mail at the specified date and time,
9. The error determination unit determines a time when the internal clock should be corrected next, and designates a date and time when the notification unit transmits an email prompting the correction of the internal clock. The electronic device according to any one of the above.   10. The electronic device according to claim 9, wherein the notifying unit continues to transmit the reminder mail at a predetermined time interval after transmitting the mail prompting the correction of the internal clock until the internal clock is actually corrected. machine. In a log information recording method for recording operation information of a device and time information that is a time indicated by an internal clock when the operation of the device occurs as log information,
A clock correction step in which the clock correction means corrects the internal clock to the current standard time;
When correcting the internal clock, an error determination step in which an error determination means obtains a time difference between the internal clock and the standard time;
A time information correction step in which a time information correction means corrects an error in the time information from the obtained time difference and an elapsed time from the previous clock correction to the current clock correction;
A log information recording method comprising:   12. The log information recording method according to claim 11, wherein the clock correction step records an operation of correcting the internal clock as the log information.   The log information recording method according to claim 11 or 12, wherein the clock correction step includes an input step of inputting the standard time. A log information recording program that causes a log information recording device to record operation information of a device and time information that is a time indicated by an internal clock when the operation of the device occurs;
In the log information recording device,
A clock correction function for correcting the internal clock to the current standard time;
An error determination function for obtaining a time difference between the internal clock and the standard time when correcting the internal clock;
A time information correction function for correcting an error in time information in the log information from the obtained time difference and an elapsed time from the previous clock correction to the current clock correction;
A log information recording program characterized by realizing the above.   15. The log information recording program according to claim 14, wherein the clock correction function causes the log information recording device to record an operation of correcting the internal clock as log information. The log information recording device includes input means for inputting the standard time,
16. The log information recording program according to claim 14, wherein the clock correction function causes the log information recording device to correct the standard time input by the input unit.   The computer-readable recording medium which recorded the log information recording program of any one of Claim 14 to 16.

Images