JP2009009469A - Log storage device and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve the security of equipment by suppressing information leakage or illegal use involved by a maintenance staff or an equipment manager. <P>SOLUTION: Operation process parts 1 and 3 operate equipment. An input part 15 accepts the input of the identification information of equipment. A permission discrimination part 17 discriminates the presence/absence of identification information pertinent to preliminarily set use permission information concerning the equipment. When the existence of the identification information is discriminated by a permission discrimination part 17, a mode control part 9 controls the setting of a processing mode corresponding to the identification information. A log storage part 11 extracts prescribed standard log information from the operation information according to operation process parts 1 and 3 (modules A to D). Under a processing mode whose setting is controlled by the mode control part 9, the log storage part 11 extracts the detail log information having more detail content than that of standard log information from the operation information corresponding to the processing mode. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a log storage device and a log storage program, and more particularly to an improvement of a log storage device and a log storage program that are suitable for mounting in an electronic device such as a multi function peripheral (MFP).

  In recent years, with the advancement of information processing functions and multi-functionality in multifunction devices and other electronic devices, specific information held in the device has been identified from the viewpoint of preventing information leakage and unauthorized use. Increasingly, it is not desirable to be used by non-users.

  Moreover, in general, in the case of multifunction peripherals, maintenance inspections are often performed by maintenance personnel dispatched from an external maintenance company, and there is a need for a device that prevents leakage of stored information inside the device and unauthorized use.

  For example, Japanese Patent Laying-Open No. 2005-332299 (Patent Document 1) is a proposal of this type.

This patent document 1 is an information processing apparatus having a service mode for entering when a service person who performs maintenance of an information processing apparatus performs maintenance of the information processing apparatus, and as a service person who performs maintenance of the information processing apparatus Registration screen providing means for providing a registration screen for registering a service person, and authentication information necessary for the service person registered on the registration screen as a service person to maintain the information processing apparatus to enter the service mode Input screen providing means for providing an input screen for inputting information, and improving information processing apparatus security by suppressing information leakage and unauthorized use involved by a service person who performs maintenance of the information processing apparatus. is there.
JP 2005-332299 A

  However, in Patent Document 1 described above, by providing a means for only registered service personnel to enter the service mode, it is possible to improve the security of the device by suppressing information leakage, unauthorized use, etc. involving the service person. Although it is possible, there is a problem that the user does not know what operation is actually performed by the service person who enters the service mode.

  The present invention has been made to solve such a problem, and a log storage device that can easily prevent information leakage, unauthorized use, etc. involving maintenance personnel and device managers, and improve device security, and The purpose is to provide a log storage program.

  In order to solve such a problem, the log storage device according to the present invention permits an operation process unit that operates a device, an input unit that accepts input of identification information that uses at least the device, and the use of the device. In order to determine whether or not there is identification information corresponding to the use permission information set in advance, and when the permission determination unit determines the presence of the identification information, the processing mode corresponding to the identification information is set and controlled. The standard log information corresponding to the processing mode is extracted under the processing mode set and controlled by the mode control unit. A log extracting unit that extracts detailed log information having more detailed contents from the operation information and stores the extracted information.

  In the log storage device of the present invention, the permission determination unit determines whether there is identification information corresponding to the use permission information corresponding to the detailed log information having different contents, and the log extraction unit corresponds to the use permission information. It is also possible to extract detailed log information of the contents that have been processed.

  In the log storage device of the present invention, the log extracting unit may extract detailed log information from the operation information output from the operation process unit based on an operation on the device.

  In the log storage device of the present invention, the input unit may be configured to accept the input of maintenance execution identification information as the identification information.

  The log storage program according to the present invention permits a computer that stores and controls log information of an operation process unit that operates a device to receive input of identification information that uses the device, and permits the use of the device. In order to determine whether or not there is identification information corresponding to preset use permission information, and when the presence of the identification information is determined in the permission determination process, the processing mode corresponding to the identification information is set and controlled. The standard log information corresponding to the processing mode is extracted under the processing mode set and controlled by the mode control processing. A log extraction process that extracts detailed log information having more detailed contents from the operation information, and a log that stores the log information in the log storage unit. It is intended to execute a storage process.

  In the log accumulation program of the present invention, the permission determination process determines whether there is identification information corresponding to the use permission information corresponding to the detailed log information having different contents, and the log extraction process corresponds to the use permission information. It is also possible to extract detailed log information of the contents that have been processed.

  In the log storage program of the present invention, the log extraction process may be configured to extract the detailed log information from the operation information output from the operation process unit based on an operation on the device.

  In the log storage program of the present invention, the input unit may be configured to accept the input of maintenance execution identification information as the identification information.

  In such a log storage device and log storage program according to the present invention, the input of the identification information of the device is accepted, and the presence / absence of the identification information corresponding to the use permission information set in advance for the device is determined. When the presence of the identification information is determined, the processing mode according to the identification information is set and controlled, and predetermined standard log information is extracted from the operation information according to the operation process unit, while the setting control is performed by the mode control process. Under the specified processing mode, detailed log information corresponding to the processing mode and more detailed than the standard log information is extracted from the operation information, so that information leakage and unauthorized use are suppressed in maintenance and device management. Thus, it is easy to ensure the security of the device.

  In the present invention, in the configuration in which the presence / absence of identification information corresponding to the use permission information corresponding to the detailed log information having different contents is determined, and the detailed log information having the contents corresponding to the use permission information is extracted, the use permission information It is easy to obtain detailed log information with contents corresponding to

  In the present invention, in the configuration in which the detailed log information is extracted from the operation information output from the operation process unit based on the operation on the device, for example, the detailed log information indicating what operation or instruction has been issued to the device Makes it easier to get.

  In the present invention, the configuration that accepts the input of the maintenance execution identification information as the identification information makes it easy to obtain detailed log information based on the operation of the device during the maintenance of the device.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The log storage program according to the present invention will be described in the process of describing the log storage device according to the present invention.

  FIG. 1 is a schematic configuration diagram showing an embodiment of a log storage apparatus according to the present invention.

In FIG. 1, operation process units 1 and 3 are components that execute various functions such as a printing function, an image reading function, a communication function, and the like by an operation of a software program in a multi-function machine 19 to be described later. A and B and modules C and D are formed, and these are individually or connected to control the operation. A specific example of the operation process units 1 and 3 in the multifunction machine 19 will be described later.

  Modules A to D are a set of unit programs that form a software program and realize the operation function of the multifunction device 19, and realize the original operation function of the multifunction device 19.

  The operation process units 1 and 3 and the modules A to D have a function of outputting an operation process ID or module ID which is an identification code of the operation process unit or the module itself, and further, operation information on normal operation and error information at the time of abnormality And connected to the log extraction unit 7 of the log storage unit 5.

  The log storage unit 5 includes a mode control unit 9 and a log storage unit 11 in addition to the log extraction unit 7, details of which will be described later.

  The permission monitoring unit 13 authenticates the received identification information and accepts the input of identification information using the multifunction device 19 and uses permission information set in advance to permit the use of the multifunction device 19. The permission determination unit 17 determines whether or not there is identification information corresponding to the above.

  Authentication of identification information is performed depending on whether or not the identification information exists in a preset authentication list.

  The usage permission information includes, for example, a copying mode, a facsimile (FAX) function, a non-privileged mode that permits extremely limited usage rights such as a standard log display, maintenance rights such as usage rights required for maintenance and log extraction. A detailed log mode A for permitting use authority (maintenance execution) and a detailed log mode B for permitting all use authority as an administrator are preset in a table form in the storage unit 25 described later.

  The identification information is a use authority ID corresponding to any of the use permission information, and the input unit 15 has a function of receiving the input of the identification information (password) and outputting it to the permission determination unit 17.

  The permission determination unit 17 determines whether or not the input identification information (password) is authenticated, determines whether any of the use permission information is applicable, and determines whether the input identification information (password) corresponds to any of the use permission information. In this case, it has a function of outputting detection information corresponding to the right of use to the mode control unit 9.

  When the mode control unit 9 of the log storage unit 5 receives detection information corresponding to the right of use from the permission determination unit 17, a mode corresponding to the right of use, for example, the detailed log mode A (maintenance mode) or the detailed log mode It has a function of setting and controlling the log extraction unit 7 and others so as to operate in B (administrator mode). Details will be described later.

  The log extraction unit 7 has a function of extracting predetermined standard log information based on operation information from the operation process units 1 and 3 and the modules A to D and storing them in the log storage unit 11. Under the processing mode set and controlled by the above, detailed log information having more detailed contents than the standard log information is extracted from the operation information corresponding to the processing mode, and the detailed log information is stored and controlled in the log storage unit 11. It has a function.

  That is, the log extraction unit 7 normally has a function of extracting standard log information based on operation information from the operation process units 1 and 3 and the modules A to D, and storing and controlling the standard log information in the log storage unit 11.

  On the other hand, when the maintenance mode is set, for example, it is determined whether or not a log extraction condition corresponding to the maintenance is satisfied, and the operation process units 1 and 3 based on the maintenance operation (for example, key operation or execution command operation) or modules A to A. When the detailed log information that matches the log extraction condition is extracted from the operation information of D and set to the administrator mode, it matches the log extraction condition from the operation information of all the operation process units 1, 3 and modules A to D Detailed log information to be extracted.

  In addition, for the sake of convenience, the rough log information consisting of some of the main information items is standard log information, and the detailed log information includes the account name, operation time, key operation, and execution command related to the identification information. Have

  The log storage unit 11 is a memory that stores the standard log information and the detailed log information output from the log extraction unit 7 in a readable / writable manner.

  Since such a log storage device according to the present invention can be installed in the multi-function device 19, the log storage device will be described through the description of the multi-function device 19.

  FIG. 2 is a block diagram showing a multifunction machine 19 equipped with a log storage device according to the present invention.

  In FIG. 2, the multifunction machine 19 includes an image reading unit 23, a storage unit 25, an input unit 27, a display panel unit 29, a printing unit 31, a communication unit 33, and the like, with a main control unit 21 as a main body. . The function of the main control unit 21 will be described later.

  The image reading unit 23 is a known scanner that optically reads an image from, for example, a printed document having a plurality of pages under the control of the main control unit 21 and generates electronic document data as a print job by performing a filtering process or the like. The generated document data is sequentially stored in the storage unit 25 for each page of the document.

  The storage unit 25 stores the document data read by the image reading unit 23, the document data received by the communication unit 33, the above-described use permission information and log information under the control of the main control unit 21, and the main control unit. For example, a hard disk (HDD) or the like that stores 21 operation programs. That is, the storage unit 25 also functions as the log storage unit 11 described above.

  The input unit 27 is, for example, a keyboard or a touch panel input unit disposed on the upper portion of the apparatus main body case (not shown), and performs printing, reading start instructions, the number of printed sheets, communication in order to execute a printing function, an image reading function, a communication function, and the like. In addition to receiving the input of the other party, etc., it has a function of receiving an input of ID (password) as the identification information and use permission information described above and outputting it to the main control unit 21.

  Similarly, the display panel unit 29 is, for example, a liquid crystal type display unit disposed at the upper part of the apparatus main body case and also serves as the input unit 27. The operation state of the multifunction device 19 is controlled by the main control unit 21. And the above-described identification information and use permission information can be displayed.

  The printing unit 31 is a black and white or color printing engine that prints document data, log information, and the like stored in the storage unit 25 on printing paper and discharges them under the control of the main control unit 21. Therefore, detailed description and illustration are omitted.

  The communication unit 33 is known to transmit and receive image data and the like to and from an external electronic device 37 according to a predetermined protocol with respect to a network 35 such as a public communication line, the Internet, or an in-house LAN as a notification destination under the control of the main control unit 21. It is an interface part.

  The main control unit 21 includes a CPU, a ROM that stores an operation program for the CPU, a RAM that is a temporary storage unit for processing information, and an input / output interface (none of which are shown). In addition to controlling the unit 25, the input unit 27, the display panel unit 29, the printing unit 31, and the communication unit 33 and carrying out some of these functions to execute the main functions of the multifunction machine 19, it has the following functions: Yes.

  That is, the main control unit 21 has a function as the permission determination unit 17 that determines the presence / absence of identification information corresponding to use permission information set in advance for the multifunction machine 19.

  The main control unit 21 has a function as the mode control unit 9 for setting and controlling the processing mode according to the identification information when the permission determination unit 17 determines the presence of the identification information, and the operation process unit operation Standard log information is extracted from the operation information according to the process units 1 and 3 (modules A to D), mode setting control is performed by the mode control unit 9, and detailed log information corresponding to the processing mode is displayed under the processing mode. It has a function as the log extracting unit 7 that extracts from the operation information and stores the standard log information and the detailed log information in the storage unit 25.

  Accordingly, the image reading unit 23, the input unit 27, the display panel unit 29, the printing unit 31, and the communication unit 33 are all in the state in which they are operated by the software program under the control of the main control unit 21 in the multifunction machine 19. This corresponds to the operation process units 1 and 3 (modules A to D).

  Next, the operation of the above-described log storage device according to the present invention will be briefly described with reference to the flowchart of FIG.

  In FIG. 3, when identification information for maintenance or administrator is input from the input unit 15 and the program is started (logged in), the permission monitoring unit 13 determines whether or not the identification information can be authenticated in step S1, If step S1 is NO without authentication, the process returns and repeats step S1, and thereafter, the power is shut off or the process of the step (not shown) leaves the flowchart of FIG.

  On the other hand, if the identification information is authenticated and step S1 is YES, the permission monitoring unit 13 determines which use permission information the identification information corresponds to in step S2.

  If the determination result is “no authority”, the mode control unit 9 sets the log extraction unit 7 to the standard log mode in step S3 and proceeds to step S6. If the determination result is “maintenance authority”, step S4. The mode control unit 9 sets the log extraction unit 7 to the detailed log mode A and proceeds to step S6. If the determination result is “administrator authority”, the mode control unit 9 sets the log extraction unit 7 in step S5. Is set to the detailed log mode B, and the process proceeds to step S6.

  In step S6, when each key operation or command operation of the multifunction device 19 is input, in step S7, the log extraction unit 7 determines whether or not the operation matches the log extraction condition. If S7 is NO, it is determined whether or not to log out in step S8.

  If the log extraction conditions match and step S7 is YES, in step S9, the log extraction unit 7 extracts detailed log information from the operation information for the operation, and performs storage processing for the detailed log information. Proceeding to S8, it is determined whether or not the log extraction unit 7 is logout.

  If step S8 is not logout but step S8 is NO, the process returns to step S6 and steps S6 to S8 are repeated. If step S8 is YES after logout, the mode control unit 9 switches the log extraction unit 7 in step S10. Switch to the standard log mode and end after the following processing.

  Such a processing procedure corresponds to the log storage program according to the present invention.

  As described above, the log storage device according to the present invention includes the operation process units 1 and 3 (modules A to D) that operate the multifunction device 19, the input unit 15 that receives input of identification information that uses the multifunction device 19, and the When the permission determining unit 17 determines the presence or absence of the identification information, the permission determining unit 17 determines whether or not there is identification information corresponding to the use permission information set in advance to permit the use of the multifunction device 19. A mode control unit 9 for setting and controlling the processing mode according to the identification information, and predetermined standard log information is extracted from the operation information according to the operation process units 1 and 3 (modules A to D), and the mode control unit 9 Under the processing mode set and controlled by, detailed log information corresponding to the processing mode and having more detailed contents than the standard log information is extracted from the operation information and stored in the log storage unit 11. It has a log extraction unit 7 that.

  Therefore, the usage state of the multifunction device 19 is monitored. For example, when a maintenance person or administrator inputs identification information and logs in, the operation process units 1 and 3 (modules A to A) are operated according to the operations of the maintenance person and the administrator. Detailed log information can be extracted from the operation information of D) and stored.

  In addition, the presence or absence of identification information corresponding to the usage permission information corresponding to the detailed log information with different contents is determined, and the detailed log information with the content corresponding to the usage permission information is extracted. It is possible to automatically change and leave detailed log information while improving security.

  In addition, since detailed log information is extracted from the operation information of the operation process units 1 and 3 (modules A to D) based on an operation on the multi-function device 19, it is possible to accumulate more detailed log information as the use authority is stronger, and stronger use. It can be expected to prevent fraudulent acts against authorized users, and detailed log information from maintenance personnel can be used for maintenance work history (certification).

  In the above-described embodiment, the operation process units 1 and 3 and the modules A to D forming the operation process units 1 and 3 have been described separately. However, the operation process units 1 and 3 in the present invention include the elements themselves and the elements forming the same.

  Further, the input unit 15 of the present invention can achieve the object of the present invention as long as it has a function of accepting at least the input of identification information for using the device.

  Further, the part that receives the input of the device identification information is not limited to the input unit 15 of the multi-function device 19. For example, a configuration in which an input is received from the external electronic device 37 via the network 35 and the communication unit 33 and logged in is also possible. The communication unit 33 may be formed as an input unit in accordance with this.

  Furthermore, in the present invention, the standard log information and the detailed log information are stored in the storage unit 11 or printed by the printing unit 31, stored in an external memory (not shown) such as a USB memory, or the main control unit 21. A configuration in which an e-mail or the like is created and notified from the communication unit 33 to the external electronic device 37 via the network 35 is also possible.

  Further, referring to the log storage program according to the present invention, the log storage program according to the present invention is set in advance in order to allow the input acceptance processing for accepting the input of identification information for using the device and the use of the device. Permission determination processing for determining presence / absence of identification information corresponding to the used permission information, and mode control processing for setting and controlling a processing mode according to the identification information when the presence of the identification information is determined by the permission determination processing Then, predetermined standard log information is extracted from the operation information according to the operation process units 1 and 3 (modules A to D), and corresponds to the processing mode under the processing mode set and controlled by the mode control processing. Log extraction processing for extracting detailed log information having more detailed contents than the standard log information from the operation information, and storing the log information in the log storage unit 11 By executing that the log storage processing in a computer, it is possible to obtain the same effect as the above-described log storing apparatus

  Also in such a log storage program according to the present invention, the permission determination process determines the presence or absence of identification information corresponding to the use permission information corresponding to the detailed log information having different contents, and the log extraction process determines the use permission. A configuration for extracting detailed log information having contents corresponding to information, a configuration for extracting the detailed log information from the operation information output from the operation process unit based on an operation on the device, and the input processing. However, it is also possible to accept the input of maintenance execution identification information as the identification information, and it is possible to obtain the same effect as the log storage device described above.

  The present invention is not limited to the above-described multi-function device 19 but can be widely applied to printers, personal computers, and other electronic devices that operate with software.

It is a schematic block diagram which shows embodiment of the log storage apparatus which concerns on this invention. 1 is an external view showing a multifunction machine that implements a log storage device according to the present invention. It is a flowchart explaining operation | movement of the log storage apparatus based on this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1, 3 Operation | movement process part 5 Log storage part 7 Log extraction part 9 Mode control part 11 Log storage part 13 Permit monitoring part 15 Input part 17 Permit discrimination | determination part 19 Multifunction machine (electronic device)
21 Main control unit (log storage unit)
23 Image reading unit (operation process unit)
25 Storage unit (log storage unit)
27 Input section (operation process section)
29 Operation panel section (operation process section)
31 Printing Department (Operation Process Department)
33 Communication Department (Operation Process Department)
35 Network 37 Electronic devices A, B, C, D Module

Claims (8)

An operation process unit for operating the device;
An input unit that accepts input of identification information that uses at least the device;
A permission determination unit that determines the presence or absence of the identification information corresponding to the use permission information set in advance to permit the use of the device;
When this permission determination unit determines the presence of the identification information, a mode control unit for setting and controlling a processing mode according to the identification information;
Predetermined standard log information is extracted from the operation information according to the operation process unit, and the processing mode set and controlled by the mode control unit corresponds to the processing mode and has more detailed contents than the standard log information. A log extractor for extracting detailed log information from the operation information;
A log storage device comprising: The permission determining unit determines whether or not there is the identification information corresponding to the use permission information corresponding to the detailed log information having different contents, and the log extracting unit is configured to store the detailed log having contents corresponding to the use permission information. The log storage device according to claim 1, which extracts information. The log storage device according to claim 1, wherein the log extraction unit extracts the detailed log information from the operation information output from the operation process unit based on an operation on the device. The log storage device according to claim 1, wherein the input unit receives an input of identification information for performing maintenance as the identification information. For the computer that stores and controls the log information of the operation process section that operates the device,
An input acceptance process for accepting input of identification information using the device;
Permission determination processing for determining presence / absence of the identification information corresponding to use permission information set in advance to permit use of the device;
A mode control process for setting and controlling a processing mode according to the identification information when the presence of the identification information is determined in the permission determination process;
Predetermined standard log information is extracted from the operation information according to the operation process unit, and the processing mode is set and controlled by the mode control processing, and the contents corresponding to the processing mode are more detailed than the standard log information. Log extraction processing for extracting detailed log information having from the operation information;
Log storage processing for storing the log information in a log storage unit;
A log storage program characterized in that The permission determination process determines the presence / absence of the identification information corresponding to the use permission information corresponding to the detailed log information having different contents, and the log extraction process includes the detail log having contents corresponding to the use permission information. 6. The log storage program according to claim 5, which extracts information. The log storage program according to claim 5 or 6, wherein the log extraction process extracts the detailed log information from the operation information output from the operation process unit based on an operation on the device. The log storage program according to any one of claims 5 to 7, wherein the input process accepts input of maintenance execution identification information as the identification information.

Images