JP5124241B2 - Information processing apparatus, information processing method, information processing program, and recording medium - Google Patents

Description

  The present invention relates to an information processing apparatus, an information processing method, an information processing program, and a recording medium. Specifically, the function operation instruction content for each function of an information processing apparatus having various functions such as a copying apparatus, a composite apparatus, and a computer. The present invention relates to an information processing apparatus, an information processing method, an information processing program, and a recording medium that monitor an operation and prevent an illegal operation instruction.

  Recently, with the development of information processing devices such as personal computers, files such as documents and images are digitized by a method such as being read by a scanner and stored on a hard disk or the like. Electronic document files include confidential files, and how to secure the security of electronic document files (electronic document files) is an important issue. Sometimes you want to limit itself. In particular, in recent years, unauthorized operations such as snooping and spoofing have also been performed on image processing apparatuses such as composite devices connected to a network, and a defense measure against such unauthorized operations is demanded. It is supposed to be.

  Therefore, conventionally, the user information is requested to be input when the device is operated, the input user information is authenticated by comparing with the previously registered user information, and the identification information indicating the authenticated user is obtained. A technique for informing a previously registered notification destination has been proposed (see Patent Document 1).

  In other words, this prior art prevents the unauthorized operation such as impersonation by authenticating the user who uses the device and notifying the user's identification information to a pre-registered notification destination when using the device. I am trying.

JP 2006-18812 A

  However, in the above prior art, since the user who uses the device is authenticated and the identification information of the user is notified to a previously registered notification destination, impersonation based on the notification result, etc. In addition to being unable to implement stable anti-fraud measures due to the daily operation of the notification destination, the prevention effects against unauthorized operations are limited to those against impersonation, and a wide range of anti-fraud prevention There was a need to improve the effectiveness.

  SUMMARY An advantage of some aspects of the invention is that it provides an information processing apparatus, an information processing method, an information processing program, and a recording medium that reliably and easily monitor an unauthorized operation request and appropriately prevent the unauthorized operation request.

  In order to achieve the above object, the present invention monitors a functional operation instruction for instructing a functional operation to be executed, and if there is a functional operation instruction registered in advance as a warning target in the warning target instruction registration means, While implementing the warning content registered in the warning content registration means for the instruction, and receiving the history of the functional operation instruction via a predetermined communication line, analyze the received history of the functional operation instruction, The warning content corresponding to the function operation instruction of the warning content registration means is updated and registered.

  Further, according to the present invention, when there is a function operation instruction to be watched registered in the alert content registration means, the function operation instruction history is recorded in the history recording means, and the function operation instruction history is registered as a notification destination. Transmit to the notification destination registered in the means.

  According to the present invention, a function operation instruction that instructs a function operation to be executed is monitored. If there is a function operation instruction that is registered in advance as a warning object, the function operation instruction is registered in the warning content registration means. When the function operation instruction is recorded, the function operation instruction is recorded in the history recording unit, and the function operation instruction history is received, the received function operation instruction history is analyzed, and the function of the alarm content registration unit is analyzed. Since the warning content corresponding to the operation instruction is updated and registered, the functional operation instruction history of the warning target is shared between a plurality of devices, and the functional operation instruction is managed with the warning content according to the shared functional operation instruction history It is possible to reliably and easily monitor the illegal operation request and appropriately prevent the illegal operation request.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In addition, since the Example described below is a suitable Example of this invention, various technically preferable restrictions are attached | subjected, However, The scope of the present invention limits this invention especially in the following description. As long as there is no description of the effect, it is not restricted to these aspects.

  1 to 17 are diagrams showing an embodiment of an information processing apparatus, an information processing method, an information processing program, and a recording medium according to the present invention. FIG. 1 is an information processing apparatus, an information processing method, and information according to the present invention. 1 is a system configuration diagram of a document management system 1 to which an embodiment of a processing program and a recording medium is applied. FIG.

  In FIG. 1, a document management system 1 is connected to a network NW such as a LAN (Local Area Network) or the Internet, as a plurality of information processing apparatuses, MFPs (Multi Functional Products) 10a, 10b, 10c, a printer 10d, and a facsimile. The apparatuses 10e and the like are connected, and the information processing apparatuses MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e communicate with each other via the network NW to transmit and receive image data, which will be described later. Send and receive warning-related information in the warning process.

  The MFPs 10a to 10c have a block configuration as shown in FIG. 2, and include a controller board 20, an operation panel 30, a FAX unit 31, an engine 32, a plotter 33, and the like.

  The controller board 20 includes a CPU (Central Processing Unit) 21, a system memory (hereinafter referred to as MEM-P) 22, a north bridge (hereinafter referred to as NB) 23, a south bridge (hereinafter referred to as SB) 24, a NIC ( Network Interface Card (25), Application Specific Integrated Circuit (ASIC) 26, Local Memory (hereinafter referred to as MEM-C) 27, Hard Disk Device (hereinafter referred to as HDD) 28, Non-Volatile Random Access Memory (NVRAM) 29, etc. It has.

  The operation panel 31 is connected to the ASIC 26 of the controller board 20, and the FAX unit 32, the engine 33, and the plotter 34 are connected to the ASIC 26 of the controller board 20 via the PCI bus 40.

  In the controller board 20, the MEM-C 27, the HDD 28, the NVRAM 29, and the like are connected to the ASIC 26, and the CPU 21 and the ASIC 26 are connected via the NB 23 of the CPU chip set. In this way, when the CPU 21 and the ASIC 26 are connected via the NB 23, it is possible to cope with a case where the interface of the CPU 21 is not disclosed.

  Note that the ASIC 26 and the NB 23 are connected not via a PCI bus but via an AGP (Accelerated Graphics Port) 41 to improve performance.

  Although not shown, a communication line such as a public line (PN) is connected to the FAX unit 32, and the FAX unit 32 realizes G3 and G4 facsimile transmission and facsimile reception functions. That is, at the time of fax transmission, the MFPs 10a to 10c perform the necessary image processing by the ASIC 26 and transfer the image data read by the reading unit to the FAX unit 32. The FAX unit 32 converts the data to the communication network. And send by facsimile. Further, when receiving a fax, the MFPs 10a to 10c receive facsimile data from an external facsimile machine or the like via a communication line by the FAX unit 32 and convert it into image data, and print it out on a sheet by the plotter 34, or the HDD 28 Save to.

  The NB 23 is a bridge for connecting the CPU 21, the MEM-P 22, the SB 24, the NIC 25, and the ASIC 26, and the MEM-P 22 is a memory used as a drawing memory for the MFPs 10 a to 10 c. The SB 24 is a bridge for connecting the NB 23 to the ROM, the PCI bus 40, and peripheral devices. The MEM-C 27 is a memory used as a copy image buffer and a code buffer.

  The NIC 25 is connected to a network NW to which other MFPs 10a to 10c, a printer 10d, and a facsimile machine 10e are connected. The NIC 25 is connected to the other MFPs 10a to 10d, the printer 10d, and the facsimile machine 10e via the network NW. Communicate with.

  The ASIC 26 is an image processing IC having image processing hardware elements. The HDD 28 stores image data, document data, programs, font data, forms, and the like. Storage.

  The NVRAM 29 is a memory that retains stored contents even when the MFPs 10a to 10c are turned off. In general, the NVRAM 29 stores initial setting values of various functions and various types of information, and is particularly used in a warning process described later. Various information to be stored is stored.

  The HDD 28 is a large-capacity auxiliary storage device, and stores various programs and data necessary for realizing the functions of the MFPs 10a to 10c, for example, basic programs, information processing programs, and various information of the MFP.

  The operation panel 31 includes various operation keys, a display, and the like, receives input operations from the various operation keys by the operator, and displays various information on the display to the operator. The operation panel 31 is particularly subjected to a warning target operation (functional operation instruction) in a warning process to be described later.

  The engine 33 performs engine control of hardware resources such as a scanner unit and a plotter 34 (not shown), and causes the scanner unit to perform main scanning and sub scanning of the document image to read the document image at a predetermined resolution. Get the data.

  The plotter 34 records and outputs an image on a sheet based on image data to be printed by a predetermined printing method, for example, an electrophotographic method. The plotter 34 is not shown in the case of the electrophotographic system, but is necessary for recording and outputting the image data on the paper by the electrophotographic system using a laser, for example, a photoconductor, an optical writing unit, a developing unit, a charging unit. And a cleaning unit, etc., operate the optical writing unit according to image data and control signals to form an electrostatic latent image on the photosensitive member, and supply the toner to the photosensitive member by the developing unit for development. To form a toner image. The plotter 34 feeds the paper between the photosensitive member and the transfer unit from the paper feeding unit via the paper conveyance path, transfers the toner image on the photosensitive member to the paper, and the paper on which the toner image is transferred. Is transferred to the fixing unit and heated and pressurized by the fixing unit to fix the toner image on the paper, thereby printing out the image on the paper.

  The engine 33 controls a scanner (not shown), reads an image of a document, and acquires image data.

  The MFPs 10a to 10c are stored in the hard disk 28 or a ROM (not shown), and the CPU 21 executes a basic program of the MFPs 10a to 10c and an information processing program (to be described later) that operate on the operation system (hereinafter referred to as OS). A functional module as shown in FIG. 3 is constructed.

  The MFPs 10a to 10c execute an information processing program for executing the alert process of the present invention recorded on a recording medium such as a CD (Compact Disc), a CD-RW (Compact Disc Rewritable), a DVD (Digital Video Disk), or a flexible disk. The information processing apparatus is constructed as an information processing apparatus that executes a warning process by being read and introduced into a ROM, a hard disk 218, or the like (not shown) and the CPU 21 executing the information processing program.

  As illustrated in FIG. 3, the MFPs 10 a to 10 c execute the basic program and the information processing program, and as illustrated in FIG. 3, the operation management unit 51, the history management unit 52, the notification transmission unit 53, the notification reception unit 54, and the notification analysis unit 55. , A user authentication unit 56, an image creation unit 57, a user information storage unit 58, a history storage unit 59, a history setting storage unit 60, a notification setting storage unit 61, and other functional modules are constructed. A storage unit 58, a history storage unit 59, a history setting storage unit 60 and a notification setting storage unit 61 are constructed on the HDD 28. In FIG. 3, the user information storage unit 58, the history storage unit 59, the history setting storage unit 60, and the notification setting storage unit 61 are described as being constructed on the HDD 28, but are constructed on the HDD 28. For example, it may be built on the NVRAM 29.

  A notification receiving unit (reception unit) 54 monitors notifications from other MFPs 10a to 10c, the printer 10d, the facsimile apparatus 10e, and the like via the NIC 25, and according to the received content, the received content is notified to a notification analysis unit 55, The information is transferred to the notification setting storage unit 61 and the notification transmission unit 53.

  When the received content delivered from the notification receiving unit 54 is a warning notification, the notification analysis unit (analysis means) 55 analyzes the type of the warning notification and sets the notification based on the warning notification type of the analysis result. The implementation content is determined with reference to the notification type / implementation content table stored in the storage unit 60.

  The history setting storage unit (warning target instruction registration means, warning content registration means) 60 stores, for example, a notification type / implementation content table associating the notification type and the implementation content as shown in FIG. Then, with respect to a function operation instruction type (hereinafter referred to as notification type) that requires notification of transmission to an unregistered destination (facsimile transmission, mail transmission), the security level is set to the current security level “3”. The security level is set to the current security level with respect to the content of setting that the security level is set to (the maximum security level is “5”) and the notification type that requires notification of the operation of the MFPs 10a to 10c at midnight. Implementation content of setting the security level to which the level “1” is added (the maximum security level is “2”) For the notification type that is a function operation instruction, an implementation content is registered in which the security level is set to a security level obtained by adding the level “3” to the current security level (the maximum security level is “10”). An example is shown, and in addition to these contents, various contents are registered in the notification type / implementation contents table. The MFPs 10a to 10c according to the present embodiment manage the implementation content (operation specifications) for the notification type as security of the warning process by a numerical value named security level. The security level and the specific content of the implementation content are managed. The contents are as shown in FIG. 5 and are stored in the history setting storage unit 60 as an implementation contents table.

  In the notification setting storage unit (notification destination registration means) 61, the notification destination that performs the notification process in the warning process is registered as a notification destination device list as shown in FIG. 6, and in FIG. The MFPs 10a to 10c, the printer 10d, and the facsimile machine 10e of the system 1 are registered as MFPa, MFPb, MFPc, printer d, and FAXe, and the transmission necessity information indicating whether or not the addresses and notification targets are “O”. As the function types indicated by “x”, functions of printing, mail, FAX, authentication, and clock are registered. For example, when the notification destination device list in FIG. 6 is registered in the notification setting storage unit 61 of the MFP 10a and the MFP 10a notifies the other MFPs 10b, 10c, the printer d, and the facsimile apparatus 10e, The authentication function type is notified to the MFP 10b with “◯”, but not to the MFP 10c, the printer 10d, and the facsimile machine 10e with “x”.

  The history setting storage unit 60 stores, as history management target conditions, functional operations to which history information should be recorded and history levels to be recorded among various functional operations of the multifunction devices 10a to 10c. As shown in FIG. 7, as a function operation to be recorded, a minimum history is recorded for every copy log, scanner and mail transmission log, FAX transmission log, authentication failure log, etc. A history level is registered as a history item when a history is recorded.

  The history management unit 52 monitors various functional operations of the MFPs 10 a to 10 c, acquires a functional operation history to be recorded from among the history management target conditions of the history storage unit 59, records it in the history storage unit 59, and As for the operation history, the notification history information corresponding to the history level of the history management target condition is constructed, and the constructed notification history information is passed to the notification transmission unit 53. For example, when the functional operation to be notified is an authentication failure, the notification history information includes the type of the functional operation to be notified (“authentication failure”), the user name, the date and the destination address as shown in FIG. Acquired and recorded.

  When the notification history information is passed from the history management unit 52, the notification transmission unit (transmission means) 53 refers to the notification destination device list of the notification setting storage unit 61 shown in FIG. On the other hand, a transmission destination whose transmission necessity information is “◯” is specified, and the notification history information is transmitted to the transmission destination.

  The operation management unit 51 monitors the functional operation instruction operation performed by the user using the operation panel 31, and notifies the CPU 21 and the like of the control of the functional operation according to the functional operation instruction operation. This function operation instruction operation is, for example, a copy operation, a scanner operation, or a setting management operation of the MFPs 10a to 10c.

  Further, the operation management unit 51 monitors the operation on the operation panel 31 and outputs the operation content to the history management unit 52. The history management unit 52 is a function to be recorded in the history management target condition of the history storage unit 59. For the operation (function operation instruction) registered as an operation, the operation content is recorded in the history storage unit 59.

  Further, when an authentication instruction operation is performed from the operation panel 31, the operation management unit 51 refers to registered user information in the user information storage unit 58 of the HDD 28 and performs user authentication processing for authenticating a user (user). .

  Therefore, the operation management unit 51, the history management unit 52, and the user authentication unit 56 monitor an operation that is a functional operation instruction, and if there is a warning target operation registered in the history setting storage unit 60, the operation The warning contents registered in the history setting storage unit 60 are executed, and the operation history is recorded as a control unit in the history storage unit 59.

  The user information storage unit 58 is constructed on the HDD 28 and stores user information regarding users who are permitted to use the MFPs 10a to 10c, such as user names, IDs, and affiliations. As for this user information, user information input by an administrator having management authority using the operation panel 31 or by another MFP 10a to 10c or a management computer (not shown) is sent to the CPU 21. Are registered in the user information storage unit 58 of the HDD 28 under the control of.

  The image creating unit 57 uses the engine 33 and the plotter 34 to execute functional operation processing such as copy processing and scanner processing.

  The notification analysis unit 55 receives the user information when the functional operation instruction of the functional operation instruction signal received from the MFPs 10a to 10c, the printer 10d, and the facsimile device 10e as external devices and received by the notification reception unit 54 is an authentication operation. User authentication of the user who has sent the function operation instruction is performed with reference to the user information in the storage unit 58.

  In the above description, the MFPs 10a to 10c have been described. However, the same applies to the printer 10d and the facsimile apparatus 10e, which are other information processing apparatuses, and the parts of the present invention other than the basic functional parts of the MFPs 10a to 10c. In particular, the operation management unit 51, history management unit 52, notification transmission unit 53, notification reception unit 54, notification analysis unit 55, user authentication unit 56, user information storage unit 58, history storage unit 59, history shown in FIG. The functional modules such as the setting storage unit 60 and the notification setting storage unit 61 include similar functional modules.

  Next, the operation of this embodiment will be described. The MFPs 10a to 10c of the present embodiment record an operation history which is a function operation instruction history of a notification target registered in advance, and notify the operation history to a notification destination in a group registered in advance. A warning process to share the warnings of user operations among multiple devices and monitor the operation history, which is a function operation instruction history that is registered in advance, not just for impersonation or stealing, and to manage it appropriately. Run.

  In the following description, a warning process performed by the MFP 10a will be described in order to clarify the description.

  First, a warning process executed by the MFP 10a when the MFP 10a receives a warning notification from the other MFPs 10b, 10c, the printer 10d, the facsimile machine 10e, etc. as external devices will be described with reference to FIG. FIG. 9 shows a warning process when a warning notification that a facsimile (FAX) transmission to an unregistered destination has been received by an external device as a warning target operation is received.

  As shown in FIG. 9, the MFP 10a checks whether the notification receiving unit 54 has received from the other MFPs 10b, 10c, etc. via the NIC 25 (step S101), and if there is no reception, ends the processing.

  In step S101, the notification receiving unit 54 checks whether the reception is a warning notification reception, and if it is not a warning notification, notifies the CPU 21 or the like of the reception, and the CPU 21 responds to the received content. Execute the process. If the reception is a warning notification, the notification receiving unit 54 passes the warning notification to the notification analysis unit 55 (step S101).

  This warning notification is, for example, in XML (Extensible Markup Language) in the case of warning notification that FAX transmission has been performed to an unregistered destination when the MFP 10a ID is “1” and account is “aaa”. The content is as shown in FIG.

  Upon receiving the warning notification from the notification receiving unit 54, the notification analysis unit 55 analyzes the notification content (step S102), and refers to the notification type / implementation content table of the notification setting storage unit 61 shown in FIG. The implementation content corresponding to the type of warning notification is referred to (step S103), and the implementation content is determined (step S104). For example, if the notification content is FAX transmission to an unregistered destination, the notification analysis unit 55 performs a process of adding the security level “3” to the current security level as shown in FIG. For example, when the security level is “0”, the security level is set to “3” obtained by adding “3” to “0”, and the implementation contents corresponding to the set current security level are shown in FIG. Referring to the execution content table of the history setting storage unit 60 shown in FIG. 4, the current warning execution content is changed to the warning execution content “record all operation history” set for the security level “3”. change.

  Then, when determining the implementation content corresponding to the received warning notification, the notification analysis unit 55 registers the determined implementation content in the implementation content table of the history setting storage unit 60, and this registered history setting is described later. A history as shown in FIG. 7 is recorded for each content.

  Next, when the user performs an operation to cause the MFP 10 a to perform a functional operation on the operation panel 31, the operation management unit 51 monitors a functional operation instruction operation performed using the operation panel 31. When an authentication operation instruction operation from the panel 31 is performed, a user authentication process for authenticating the user is performed with reference to registered user information in the user information storage unit 58 of the HDD 28. The operation management unit 51 also uses the operation panel 31 to record a function operation instruction operation to be recorded, which is registered as a history management target condition in the history storage unit 59, such as a copy operation, a scanner operation, and a setting management operation of the MFP 10a. When a functional operation instruction operation is performed, the operation content is acquired and passed to the history management unit 52, and the history management unit 52 records the operation content in the history storage unit 59.

  The history management unit 52 constructs the operation content notified from the operation management unit 51 as, for example, history information as illustrated in FIG. 8, and passes the constructed notification history information to the notification transmission unit 53.

  When the notification history information is passed from the history management unit 52, the notification transmission unit 53 refers to the notification destination device list shown in FIG. 6 and sets the notification destination (transmission destination) according to the function type of the notification history information. In particular, the notification history information is transmitted to the notification destination as notification contents and notified. When the ID of the MFP 10a is “1” and the account is “aaa”, for example, when notification of user authentication failure is performed, the notification content is as shown in FIG.

  The notification destination is registered by operating the operation panel 31. When the notification destination registration mode is selected, the operation management unit 51 displays the notification destination on the display of the operation panel 31, as shown in FIG. A screen for input is displayed (step S201). The notification destination input screen is, for example, a notification destination input screen G1 as shown in FIG. 13 and displayed on the display of the operation panel 31.

  When the notification destination address is input on the notification destination input screen G1, the operation management unit 51 passes the notification destination information to the notification transmission unit 53 (step S202), and the notification transmission unit 53 passes the notification destination. The destination information is registered in the notification destination device list as shown in FIG. 6 of the notification setting storage unit 61 (step S203).

  Further, the MFP 10a can make a notification destination registration request for registering itself and requesting notification to the MFPs 10b, 10c, the printer 10d, and the facsimile machine 10e, which are external devices, as notification destinations of warning notifications.

  That is, as illustrated in FIG. 14, when the notification destination registration request mode is selected on the operation panel 31, the operation management unit 51 operates the notification destination registration request screen for inputting the address of the external device that performs the notification destination registration request. This is performed on the display of the panel 31 (step S301). This notification destination registration request screen is the same as the notification destination input screen G1 shown in FIG.

  When the address of a request destination for requesting self-registration is input as a notification destination on the notification destination registration request screen, the operation management unit 51 passes notification request information such as the request destination address and a notification request to the notification transmission unit 53. (Step S302), the notification transmitting unit 53 transmits the received notification request information to the external device at the designated address specified in the notification request, and requests a warning notification to itself (step S303).

  The content of the notification destination registration request for the external device is, for example, as shown in FIG. 15 when the notification destination registration request is made in XML. In FIG. 15, the address and the function type print (print), The necessity of notification (enable or disable) for mail (mail), FAX, authentication (userAuth), and clock (clock) is specified.

  The external device that has received the notification destination registration request from the MFP 10a, for example, the MFP 10b, performs notification destination registration processing shown in FIG. That is, as shown in FIG. 16, the MFP 10b checks whether the notification receiving unit 54 has received from other MFPs 10a, 10c, etc. via the NIC 25 (step S401). .

  In step S401, if the notification is received, the notification receiving unit 54 checks whether the reception is reception of a notification destination registration request request. If the reception is not a notification destination registration request request, the notification reception unit 54 notifies the CPU 21 and the like of the reception. Executes processing according to the received content. If the reception is a notification registration request, the notification receiving unit 54 registers the content of the notification destination registration request shown in FIG. 15 in the notification destination device list (see FIG. 6) of the notification setting storage unit 61. The external device that has sent the notification destination registration request request to the notification transmission unit 54, in this embodiment, requests the MFP 10a to send a reply (step S402).

  The notification transmission unit 54 transmits a notification destination device list in the notification setting storage unit 61 that has newly registered the notification destination to the MFP 10a that is the external device that has transmitted the notification destination registration request request. To end the process (step S403).

  In the case of XML, the content to be transmitted to the MFP 10a as the external device in this reply process is, for example, as shown in FIG. 17, and the notification of the addresses of the MFPs 10a to 10c, the printer 10d, and the facsimile device 10e and their function types is provided. Necessary information is described.

  In the above description, the operation of the MFP 10a has been described. However, the same applies to the other information processing apparatuses MFP 10b and 10c, the printer 10d, and the facsimile apparatus 10e.

  As described above, in the information processing apparatuses such as the MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e of the present embodiment, the operation management unit 51 monitors the operation on the operation panel 31, and the alert setting storage unit 61 is alerted beforehand. When the function operation instruction operation registered as is performed, the operation management unit 51 executes the warning contents preset in the history setting storage unit 60 for the function operation instruction operation, and records the operation as a history. When the notification receiving unit 54 receives the operation history from the other MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e, the received operation history is recorded by the notification analysis unit 55. Analyzing and updating and registering the execution contents which are the warning contents corresponding to the operation of the history setting storage unit 60.

  Therefore, it is possible to share the operation history of the alert target among a plurality of devices, manage the operation with the alert contents corresponding to the shared operation history, and monitor the unauthorized operation request reliably and easily, Requests can be prevented appropriately.

  In addition, when information processing apparatuses such as the MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e according to the present embodiment perform a warning target operation that is a function operation instruction registered in advance in the notification setting storage unit 61 as a warning target. The operation history is transmitted from the notification transmission unit 53 to the notification destination registered in the notification setting storage unit 61.

  Therefore, each information processing apparatus can transmit an operation history performed by itself to other information processing apparatuses, and each information processing apparatus can appropriately share the operation history, and an unauthorized operation request can be reliably and easily performed. Monitoring can properly prevent unauthorized operation requests.

  Further, when an operation history transmission request is input, the information processing apparatuses such as the MFPs 10 a to 10 c, the printer 10 d, and the facsimile apparatus 10 e of the present embodiment receive the input operation history transmission request from the notification transmission unit 53. The request is transmitted to other information processing apparatuses such as the other MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e.

  Accordingly, it is possible to appropriately and reliably receive and share an operation history in the information processing apparatus from information processing apparatuses such as the other MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e.

  In addition, in the information processing apparatuses such as the MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e of this embodiment, when the notification receiving unit 54 receives an operation history transmission request, the notification setting storage unit 61 receives the operation history transmission request. The request source of the request is registered as a notification destination.

  Accordingly, the operation history can be reliably transmitted to other information processing apparatuses such as the MFPs 10a to 10c, the printer 10d, and the facsimile machine 10e that require the operation history.

  Furthermore, the information processing apparatuses such as the MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e of the present embodiment need to transmit the operation history to the notification destination for each operation corresponding to the notification destination in the notification setting storage unit 61. No operation information is registered, and the operation history to be transmitted is notified only to the notification destination registered as the transmission necessity information of the operation in the notification setting storage unit 61 as the transmission necessity information of the operation. It is transmitted from the transmission unit 53.

  Therefore, it is possible to transmit only the operation history necessary for the model and function of the operation history transmission destination, to shorten the time required for the transmission process, and to improve the usability of the operation history.

  In addition, information processing apparatuses such as the MFPs 10a to 10c, the printer 10d, and the facsimile machine 10e of the present embodiment are recorded in the operation history and history storage unit 59 received by the notification receiving unit 54 and analyzed by the notification analysis unit 55. The operation histories are compared, and it is determined whether or not the operation history needs to be transmitted based on the comparison result. When it is determined that transmission is necessary, the operation history is transmitted to the notification destination registered in the notification setting storage unit 61. It is transmitted from the unit 53.

  Therefore, when the same operation as that stored in the history storage unit 59 (for example, an operation such as authentication failure) is transmitted from another information processing apparatus such as the MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e. The repeated operation can be shared among information processing apparatuses such as the MFPs 10a to 10c, the printer 10d, and the facsimile apparatus 10e, and the unauthorized operation request can be more reliably and easily monitored to appropriately prevent the unauthorized operation request. Can do.

  The invention made by the present inventor has been specifically described based on the preferred embodiments. However, the present invention is not limited to the above, and various modifications can be made without departing from the scope of the invention. Needless to say.

  The present invention relates to an information processing apparatus such as a printer apparatus, a copying apparatus, a composite apparatus, a scanner, or a computer that appropriately prevents an illegal function operation request due to impersonation or snooping, an information processing method executed by the information processing apparatus, and the information processing The present invention can be used for an information processing program for executing the program and a recording medium for recording the information processing program.

1 is a system configuration diagram of a document management system to which an embodiment of the present invention is applied. FIG. FIG. 2 is a block diagram of a main part of the MFP of FIG. FIG. 3 is a functional block configuration diagram of the MFP of FIG. 2. The figure which shows an example of the alerting | reporting classification and implementation content table stored in the log | history setting memory | storage part of FIG. The figure which shows an example of the implementation content table stored in the log | history setting memory | storage part of FIG. The figure which shows an example of the alerting | reporting destination apparatus list stored in the alerting setting memory | storage part of FIG. The figure which shows an example of the log | history management object conditions stored in the log | history setting memory | storage part of FIG. The figure which shows an example of the alerting | reporting log | history information stored in the log | history memory | storage part of FIG. FIG. 4 is a flowchart showing a warning process when a warning notification is received by the MFP of FIG. 3. FIG. The figure which shows an example of the content of the alert alerting | reporting in the alert process of FIG. FIG. 4 is a flowchart showing a warning process when notifying an external device of an authentication failure by the MFP of FIG. 3. FIG. 6 is a flowchart showing notification destination registration processing by the MFP of FIG. 3. The figure which shows an example of the notification destination input screen used by the notification destination registration process of FIG. 4 is a flowchart showing notification destination registration request processing for an external apparatus by the MFP of FIG. The figure which shows an example of the request content sent to an external device by the notification destination registration request process of FIG. The flowchart which shows the notification destination registration process when the notification destination registration request from an external device is received. The figure which shows an example of the reply content of the registered notification destination by the notification destination registration process of FIG.

Explanation of symbols

1 Document management system 10a to 10c MFP
10d printer 10e facsimile machine 20 controller board 21 CPU
22 System memory 23 North Bridge (NB)
24 South Bridge (SB)
25 NIC
26 ASIC
27 Local memory (MEM-C)
28 Hard Disk Drive (HDD)
29 NVRAM
30 Operation Panel 31 FAX Unit 32 Engine 33 Plotter 40 PCI Bus 41 AGP
51 Operation management unit 52 History management unit 53 Notification transmission unit 54 Notification reception unit 55 Notification analysis unit 56 User authentication unit 57 Imaging unit 58 User information storage unit 59 History storage unit 60 History setting storage unit 61 Notification setting storage unit

Claims (7)

In an information processing apparatus that executes a function operation according to a function operation instruction,
And warning contents registration unit that is registered in the security level of the sum set to be performed in functional operation the finger 示毎 to advance warning target,
A history recording means for recording a history of functional operation instructions;
When there is a function operation instruction for the alert target that is registered in the alert content registration unit by monitoring the function operation instruction, the security level registered in the alert content registration unit is added to the function operation instruction. And a control means for recording the function operation instruction history in the history recording means,
Receiving means for receiving a history of functional operation instructions in another device connected to a predetermined communication line and sent via the communication line;
The security level registered in the warning content registration unit is added to the functional operation instruction in the other device received by the receiving unit, and the function operation instruction history recording condition according to the security level is added. Analyzing means for setting a record condition of the function operation instruction history according to the security level after the addition based on the history management target condition in which
A notification destination registration means for registering a notification destination of the history of the function operation instruction;
Transmission means for performing transmission via the communication line ,
When there is a function operation instruction for the alert target registered in the alert content registration means, the control means sends the history of the function operation instruction from the transmission means to the alert destination registered in the alert destination registration means. An information processing apparatus that records the function operation instruction history in the history recording unit according to a recording condition of the function operation instruction history that is transmitted and set according to a security level . The information processing apparatus includes a history transmission request input unit that inputs a history transmission request for the function operation instruction history, and the control unit receives the transmission request contents and request destination information from the history transmission request input unit. that the information processing apparatus according to claim 1, wherein the transmitting a transmission request requesting the history of the functional operation instruction from said transmitting means to said request destination. The control means registers the request source of the transmission request request as the notification destination in the notification destination registration means when the reception means receives a request for transmission of the history of functional operation instructions. information processing apparatus in claim 2 wherein. The notification destination registration means registers the transmission necessity information of the function operation instruction history to the notification destination for each function type corresponding to the notification destination, and the control means is a functional operation that is the transmission target The function operation instruction of the instruction history is transmitted from the transmission unit only to the notification destination registered as the transmission necessity information of the function operation instruction in the notification destination registration unit. information processing apparatus according to claim 2 or claim 3, characterized in that.   A warning content registration process for registering in the warning content registration processing means an addition setting of a security level to be performed for each functional operation instruction to be warned in advance among functional operation instructions for instructing a functional operation to be executed;
  A history recording process for recording a history of functional operation instructions in a history recording means;
  When there is a function operation instruction for the alert target that is registered in the alert content registration unit by monitoring the function operation instruction, the security level registered in the alert content registration unit is added to the function operation instruction. And a control process for recording the function operation instruction history in the history recording means,
  A reception process for receiving a history of functional operation instructions in another device connected to a predetermined communication line and sent via the communication line;
  The security level registered in the warning content registration means is added to the functional operation instruction in the other device received in the reception process, and the functional operation instruction history recording condition according to the security level is added. Is based on the history management target condition registered, analysis processing for setting the recording condition of the function operation instruction history according to the added security level;
  Notification destination registration processing for registering the notification destination of the history of functional operation instructions in the notification destination registration means;
  A transmission process for transmitting via the communication line;
  When there is a function operation instruction of the alert target registered in the alert content registration means, a history of the function operation instruction is transmitted from the transmission means to the notification destination registered in the notification destination registration means, and the security level And a recording process for recording the functional operation instruction history in the history recording means in accordance with the recording condition of the functional operation instruction history set in accordance with the information processing method.   A warning content registration processing step of registering in the warning content registration processing means the security level addition setting to be performed for each functional operation instruction to be warned in advance among the functional operation instructions for instructing the functional operation to be executed;
  A history recording processing step for recording a history of functional operation instructions in a history recording means;
  When there is a function operation instruction for the alert target that is registered in the alert content registration unit by monitoring the function operation instruction, the security level registered in the alert content registration unit is added to the function operation instruction. And a control processing step for recording a history of the functional operation instruction in the history recording means,
  A reception processing step of receiving a history of functional operation instructions in another device connected to a predetermined communication line and sent via the communication line;
  The security level registered in the warning content registration means is added to the functional operation instruction in the other device received in the reception process, and the functional operation instruction history recording condition according to the security level is added. An analysis processing step for setting a history recording condition of the function operation instruction according to the security level after the addition based on the history management target condition for which
  A notification destination registration processing step of registering a notification destination of the history of functional operation instructions in notification destination registration means;
  A transmission processing step of performing transmission via the communication line;
  When there is a function operation instruction of the alert target registered in the alert content registration means, a history of the function operation instruction is transmitted from the transmission means to the notification destination registered in the notification destination registration means, and the security level And a recording processing step of recording the functional operation instruction history in the history recording means in accordance with the recording conditions of the functional operation instruction history set in accordance with the information processing program. 7. A computer-readable recording medium on which the information processing program according to claim 6 is recorded .

Images