CN212727133U

CN212727133U - Image forming apparatus and security control system

Info

Publication number: CN212727133U
Application number: CN202021576184.3U
Authority: CN
Inventors: 董旺飞; 张军; 王刚; 马龙伟
Original assignee: Zhuhai Pantum Electronics Co Ltd
Current assignee: Hefei Bentu Intelligent Manufacturing Co ltd
Priority date: 2020-07-31
Filing date: 2020-07-31
Publication date: 2021-03-16
Anticipated expiration: 2030-07-31

Abstract

The utility model relates to an image forming device and a safety control system thereof, the image forming device comprises a first control system and a second control system, the first control system comprises a safety module, the safety module is configured to carry out safety supervision on the information of the image forming device; the second control system is configured to control the image forming apparatus to perform an image forming operation, wherein the first control system is electrically connected with the second control system, and when the image forming apparatus is powered off, the first control system controls the second control system to be closed first, and then the first control system is closed again. The image forming apparatus described above enables a second control system for controlling an image forming operation of the image forming apparatus to be monitored by the security module during a power-off process of the image forming apparatus.

Description

Image forming apparatus and security control system

Technical Field

The utility model relates to an image forming technical field, concretely relates to image forming device and safety control system.

Background

With the development of image forming technology, image forming apparatuses are increasingly used in offices and daily life, and common image forming apparatuses include, but are not limited to, printers, copiers, scanners, facsimile machines, or multi-function machines integrating one or more functions of printing, copying, scanning, and faxing. In the related art, print information security has become important, and therefore, an image forming apparatus is supporting security-related functions, such as developing a control System (for example, a System on Chip (SoC) loaded with firmware) capable of cooperating with security monitoring to control data input and output of the image forming apparatus, but it is difficult for the control System in the related art to ensure that the image forming apparatus can be monitored by a security module when the image forming apparatus is powered off, thereby causing a security risk.

SUMMERY OF THE UTILITY MODEL

The embodiment of the utility model provides an image forming device and safety control system can make at the in-process of image forming device outage for control image forming device imaging operation's second control system receives the control of safety module.

In a first aspect, an embodiment of the present invention provides an image forming apparatus including a first control system and a second control system;

the first control system includes a security module configured to perform security supervision of information of the image forming apparatus;

the second control system is configured to control the image forming apparatus to perform an image forming operation, wherein the first control system is electrically connected with the second control system, and when the image forming apparatus is powered off, the first control system controls the second control system to be turned off first, and then the first control system is turned off again.

With reference to the first aspect, in an optional implementation manner, the first control system is specifically configured to: after a power-off instruction is received, after the security module passes dynamic measurement of the second control system, a power-off signal is sent to the second control system first, so that the second control system is powered off first; and when the second control system is determined to be powered off, executing a power-off action.

With reference to the first aspect, in an optional implementation manner, the image forming apparatus further includes a print engine mechanism electrically connected to the second control system, the engine mechanism configured to perform an image forming operation under control of the second control system, and the second control system is specifically configured to:

and receiving the power-off signal of the first control system, storing the current data to be stored based on the power-off signal, controlling the engine mechanism to power off, and executing a power-off action.

With reference to the first aspect, in an optional implementation manner, the image forming apparatus further includes a power switch, the second control system is electrically connected to a power supply of the image forming apparatus through the power switch, and the first control system is electrically connected to the power supply of the image forming apparatus and an enable terminal of the power switch;

the first control system is specifically configured to: after a power-off instruction is received, after the security module passes dynamic measurement of the second control system, an enable invalid signal is sent to the second control system, so that the power switch is switched off, and the power supply stops supplying power to the second control system; and when the second control system is determined to be powered off, executing a power-off action.

With reference to the first aspect, in an optional implementation, the first control system is further configured to: when the first control system and the second control system are in a dormant state, the first control system receives a wake-up instruction to complete wake-up, and sends a wake-up signal to the second control system to wake up the second control system.

With reference to the first aspect, in an optional implementation, the second control system is further configured to:

when the first control system and the second control system are in a dormant state, the second control system receives a wake-up instruction to complete wake-up, and sends a wake-up signal to the first control system to wake up the first control system.

In a second aspect, an embodiment of the present invention provides a safety control system, the method includes:

the safety control system comprises a first control system and a second control system;

With reference to the second aspect, in an optional implementation, the first control system is specifically configured to: after a power-off instruction is received, after the security module passes dynamic measurement of the second control system, a power-off signal is sent to the second control system first, so that the second control system is powered off first; and when the second control system is determined to be powered off, executing a power-off action.

With reference to the second aspect, in an alternative embodiment, the image forming apparatus includes a print engine mechanism electrically connected to the second control system, the engine mechanism for performing an image forming operation under control of the second control system, the second control system being specifically configured to:

With reference to the second aspect, in an optional implementation manner, the image forming apparatus further comprises a power switch, the second control system is electrically connected with a power supply of the image forming apparatus through the power switch, and the first control system is electrically connected with the power supply of the image forming apparatus and an enabling terminal of the power switch;

It can be understood that the embodiment of the utility model provides a through setting up two control system (first control system and second control system), realize carrying out safety monitoring to each information of image forming device through first control system, realize controlling image forming device's formation of image operation through second control system for need not to redevelop and both support safety monitoring and can match the control system who realizes formation of image control with image forming device's engine mechanism again, shortened the development cycle of product and need not to increase control system's complexity.

It can be understood that the embodiment of the present invention realizes the safety monitoring of each information of the image forming apparatus by providing two control systems (the first control system and the second control system), realizes the control of the imaging operation of the image forming apparatus by the first control system, wherein when the image forming apparatus is powered off, the first control system first controls the second control system to be turned off, and then the first control system is turned off, so that the second control system for controlling the imaging operation of the image forming apparatus is monitored by the safety module during the power off process of the image forming apparatus, and meanwhile, by providing two control systems, the present invention does not need to develop a control system which supports the safety monitoring and can be matched with the engine mechanism of the image forming apparatus to realize the imaging control, the development period of the product is shortened without increasing the complexity of a control system.

Drawings

The present invention will be further explained with reference to the drawings and examples.

Fig. 1 is a schematic block diagram of an image forming apparatus according to an embodiment of the present invention;

fig. 2 is another schematic block diagram of an image forming apparatus according to an embodiment of the present invention;

fig. 3 is another schematic block diagram of an image forming apparatus according to an embodiment of the present invention.

DETAILED DESCRIPTION OF EMBODIMENT (S) OF INVENTION

For better understanding of the technical solutions of the present invention, the following detailed descriptions of the embodiments of the present invention are provided with reference to the accompanying drawings.

It should be understood that the described embodiments are only some embodiments of the invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by a person of ordinary skill in the art without creative efforts belong to the protection scope of the present invention.

The terminology used in the embodiments of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in the embodiments of the present invention and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

It should be understood that the term "and/or" as used herein is merely one type of association that describes an associated object, meaning that three relationships may exist, e.g., a and/or B may mean: a exists alone, A and B exist simultaneously, and B exists alone. In addition, the character "/" herein generally indicates that the former and latter related objects are in an "or" relationship.

Referring to fig. 1, an embodiment of the present invention provides an image forming apparatus that can be electrically connected to a terminal device (e.g., a PC (Personal Computer) shown in fig. 1), and that represents an apparatus that prints print data, such as print paper generated by a Computer, on a recording medium, such as print paper. Examples of the image forming apparatus include a copying machine, a printer, a facsimile machine, a scanner, and a multi-function peripheral that performs the above functions in a single device.

In an embodiment of the present invention, an image forming apparatus includes a safety control system including a first control system and a second control system.

The first control system includes a security module configured to perform security supervision on information of the image forming apparatus;

the second control system is configured to control the image forming apparatus to perform an image forming operation, wherein the first control system is electrically connected with the second control system, and when the image forming apparatus is powered off, the first control system controls the second control system to be closed first, and then the first control system is closed again.

It can be understood that the embodiment of the present invention, by providing two control systems (the first control system and the second control system), realizes the security monitoring of each information of the image forming apparatus by the first control system, realizes the control of the image forming operation of the image forming apparatus by the second control system, wherein, after the image forming device is powered off, the first control system firstly controls the second control system to be closed, then the first control system is turned off again, so that during the power-off of the image forming apparatus, the second control system for controlling the image forming operation of the image forming apparatus is monitored by the security module, meanwhile, the two control systems are arranged, the control system which supports safety monitoring and can be matched with the engine mechanism of the image forming device to realize imaging control does not need to be developed again, the development period of a product is shortened, and the complexity of the control system does not need to be increased.

The following describes the image forming apparatus, its components, and its operation principle in detail.

The first control System, for example, SoC (System on Chip), in an embodiment of the present invention, is configured to perform data transceiving and command transceiving and other related processing operations, the interface unit thereof can also receive print job data and print, scan and fax commands from a terminal device (for example, the PC shown in fig. 1 and the control panel of the image forming apparatus), or transmit scan, fax data, print, scan and fax status information and the like, and the internal security module thereof is configured to monitor the operation activities corresponding to the second control System in the image forming apparatus.

Trusted Computing (Trusted Computing) in security modules is used for security of behaviors, and is widely used in computers and communication systems to improve the security of the whole system. Information security includes four aspects: equipment safety, data safety, content safety and behavior safety; in order to further improve the behavior safety characteristic of the image forming apparatus, the embodiment introduces a trusted computing function; the functional modules corresponding to the trusted computing supervision module mentioned in this embodiment include four functions: a program (or module) starts/runs a monitoring function (such as a white list strategy), a registration function, an auditing function and an upgrade monitoring function; the specific implementation manner of the trusted computing supervision module may be hardware (e.g., a security module), software (e.g., program code with the functions of the above four modules), or a combination of hardware and software (e.g., a security module and a security code); taking the implementation manner of the program code as an example: the security module comprises a driving layer supervisory program and an application layer supervisory program; the image forming device comprises a driver layer supervisor, an application layer supervisor, a trusted computing supervisor and a white list management module, wherein the driver layer supervisor is responsible for supervising driver layer modules of an image forming device operating system (such as a Linux system), the application layer supervisor is responsible for supervising application layer programs of the image forming device, and the trusted computing supervisor only allows drivers and programs in the white list range to run; drivers and programs in the range of the non-white list are not allowed to run; the trusted computing supervisor can record or report the security event behavior generated on the image forming device; therefore, the trusted computing monitoring program can comprehensively monitor the driving layer and the application layer of the image forming device, and can effectively prevent unsafe behaviors of the application program and the equipment driving.

In some embodiments of the present invention, the first control system is further configured to control the reading and writing of the start-up program by the second control system. In some embodiments of the present invention, the security module supports using DES (Data Encryption Standard )/TDEA (Triple Data Encryption Algorithm) Algorithm to encrypt/decrypt Data, ensures that Data is securely transmitted between the image forming apparatus and the specified user terminal, prevents secret information from being leaked, and supports using APB (advanced Peripheral Bus) interface to perform DMA (Direct Memory Access) operation, allows hardware devices of different speeds to communicate with each other, without depending on a large amount of interrupt loads of CPU (Central Processing Unit, Central storage), and performs security supervision on the start-up, operating status, and print/scan Data of the image forming apparatus.

A second control System, such as SoC (System on Chip), for executing processing operations related to engine control, and referring to fig. 1, for example, the second control System is connected to an engine mechanism of the image forming apparatus, the engine mechanism includes a print engine mechanism and a scan engine mechanism, the print engine mechanism is configured to complete a print operation under the control of the second control System, the scan engine mechanism is configured to complete a scan operation under the control of the second control System, the second control System obtains print data through the first control System and parses the print data to generate an instruction for controlling the print engine mechanism to execute a specific function, and the instruction for executing the specific function by the print engine mechanism is, for example, an LSU (Laser Scanning Unit) exposure parameter, a pickup roller rotation parameter, and the like. For another example, the first control system obtains the scan command, and generates a scan command for controlling the scan engine mechanism to execute a specific function according to the scan command.

In some implementations, the information of the image forming apparatus includes, but is not limited to, any one or more of a firmware upgrade package, scan data, print data, a start-up program corresponding to an operating system of the image forming apparatus, and firmware when the second control system is running. The safety module of the first control system can monitor the information safely, so that the running safety of the image forming device is guaranteed.

As shown in fig. 1, in some implementations of the invention, the image forming apparatus further includes a first memory, which may be a non-volatile memory, such as NOR flash, NAND flash, EEPROM (erasable programmable read only memory), FRAM (ferroelectric memory), MRAM (magnetic RAM), NVSRAM (non-volatile static memory), and the like. The first memory is configured to store a boot program and security check information corresponding to an operating system of the image forming apparatus.

When the image forming device is powered on, the first control system and the safety module are started, the first control system controls the safety module to read the starting program and the safety verification information stored in the first memory, static measurement is carried out on the starting program according to the safety verification information, and when the static measurement passes, the first control system controls the second control system to read the starting program stored in the first memory and load the starting program.

When the image forming device is powered off, the first control system controls the second control system to be closed firstly, and then the first control system is closed again.

In particular, the first control system is specifically configured to: after the first control system receives a power-off instruction through a control panel or a terminal device end (for example, a PC shown in fig. 2), if the dynamic measurement of the security module on the second control system passes, the first control system first sends a power-off signal to the second control system, so that the second control system is powered off first; the first control system detects the power-off condition of the second control system, and executes the power-off action of the first control system after determining that the second control system is powered off.

In particular, the second control system is specifically configured to: and receiving a power-off signal of the first control system, storing the current data to be stored based on the power-off signal, controlling the printing engine mechanism and/or the scanning engine mechanism to be powered off, and executing the power-off action of the printing engine mechanism and/or the scanning engine mechanism.

It can be understood that the above process can realize that the image forming apparatus is supervised by the security module from the power-on starting to the power-off closing, thereby greatly improving the security of the image forming apparatus and further improving the reliability of the image forming apparatus.

It can be understood that, after receiving the power-off signal of the first control system, the second control system in the embodiment of the present application stores the current data to be stored, which can prevent data loss and ensure data security.

Referring to fig. 2, in an implementation, the image forming apparatus further includes a power supply, a first switch, a second switch, and a power switch, wherein the security module is connected to the first memory through the first switch, the second control system is connected to the first memory through the second switch, the second control system is connected to the power supply of the image forming apparatus through the power switch, and the first control system is connected to the first switch, the second switch, and an enable terminal of the power switch.

Specifically, as shown in fig. 2, the security module is connected to a first end (a) of the first switch, a second end (Y) of the first switch is connected to the first memory, and a first port (GPIO) of the first control system is connected to an enable End (EN) of the first switch; the second control system is connected with a first end (A) of the second switch, a second end (Y) of the second switch is connected with the first memory, and a first port (GPIO) of the first control system is connected with an enabling End (EN) of the second switch; and a second port (GPIO) of the first control system is connected with an enable End (EN) of the power switch, and the first control system is connected with the power supply.

The security module is connected with the first end (A) of the first switch, the second end (Y) of the first switch and the first memory, the first port (GPIO) of the first control system and the enable End (EN) of the first switch, the second control system and the first end (A) of the second switch, the second end (Y) of the second switch and the first memory, the first port (GPIO) of the first control system and the enable End (EN) of the second switch, and the second port (GPIO) of the first control system and the enable End (EN) of the power switch through SPI (Serial Peripheral Interface) buses.

In one or more embodiments of the present invention, the first switch, the second switch and the power switch may be a switch circuit having a metal-oxide-semiconductor (MOS) transistor as a switch.

When the image forming device is powered on, the first control system and the safety module are started, the first control system controls the first switch to be connected through generating an enabling effective signal, the second switch generates an enabling ineffective signal, the power switch is disconnected, the safety module reads a starting program and safety check information stored in the first storage, static measurement is conducted on the starting program according to the safety check information, after the static measurement is passed, the first control system controls the first switch to be disconnected through generating the enabling ineffective signal, the enabling effective signal is generated, the second switch and the power switch are controlled to be connected, the second control system reads the starting program stored in the first storage, and the starting program is loaded.

The enable invalid signal may be a high level signal, and the enable valid signal may be a low level signal; alternatively, the enable disable signal may be a low signal and the enable signal may be a high signal.

The starting program includes but is not limited to a Boot program, an Uboot program, an operating system program, and the like, wherein the operating system program includes initializing a DDR (Double Data Rate SDRAM ), initializing a cache, initializing a serial port, initializing a network card, and the like.

The security check information may include a check code, and the process of the security module performing static measurement on the start program according to the security check information may be: the safety module reads the starting program and the safety check information, generates operation check information according to the starting program, and outputs information on whether the static measurement of the starting program passes or not by comparing whether the operation check information and the safety check information meet a preset relation or not; for example, the security module performs logical operation on the start program through its own operation circuit or operation code to obtain operation check information, the security module further compares the operation check information and the security check information through a logical comparison circuit or a logical comparison code to determine whether the operation check information and the security check information satisfy a predetermined relationship (e.g., equal), and if so, outputs information that the static metric of the start program passes, and if not, outputs information that the static metric of the start program does not pass.

The embodiment of the utility model provides an in the safety check-up code in the information can be directly deposited in advance, also can be in advance (for example, before dispatching from the factory) to complete starting procedure check up and regard the check-up result that obtains as safety check-up information with preset rule, and store this safety check-up information. When static measurement is needed (for example, after sale, when the use process needs to be started), the safety module reads the starting program and the safety check information according to the requirements, performs logic operation on the starting program to obtain operation check information, then compares the operation check information with the safety check information, if the operation check information and the safety check information are consistent, the starting program is complete and is not modified, if the operation check information and the safety check information are inconsistent, the starting program is modified, at the moment, if the second control system reads and executes the starting program, potential safety hazards exist, and therefore the safety module does not allow the second control system to be started so as to guarantee safe operation of the second control system.

When the image forming device is powered off, if the dynamic measurement of the safety module in the first control system to the firmware in the operation of the second control system passes, the first control system generates an enabling invalid signal to control the second switch to be switched off, and then controls the power switch to be switched off, and when the second control system is switched off, the first control system generates an enabling invalid signal to control the first switch to be switched off, and then the first switch is synchronously switched off.

The process of the second control system performing dynamic measurement on the firmware of the second control system during operation through the security module may be: when the second control system runs to a specified position of the firmware, acquiring a password corresponding to the specified position, asking for a reference password corresponding to the specified position from the security module, comparing the password corresponding to the specified position with the reference password corresponding to the specified position, when the password corresponding to the specified position and the reference password corresponding to the specified position meet a preset relationship (for example, equal), continuing to execute the firmware by the second control system, and when the password corresponding to the specified position and the reference password corresponding to the specified position do not meet the preset relationship (for example, equal), stopping executing the firmware, thereby judging whether the firmware operated by the second control system is tampered, so as to ensure the security of the second control system. The first control system and the second control system can realize information interaction in the dynamic measurement process through the SPI bus.

As shown in fig. 2, in some embodiments of the present invention, the image forming apparatus may further include a second memory configured to store firmware when the second control system operates, the second memory is connected to the second control system, and may be specifically connected via an SPI bus, and the second memory may be a non-volatile memory, such as a NOR flash, a NAND flash, an EEPROM (erasable programmable read only memory), an FRAM (ferroelectric memory), an MRAM (magnetic RAM), and an NVSRAM (non-volatile static memory).

And after the second control system finishes loading the starting program, the second control system reads and loads the firmware stored in the second memory and used for the second control system to run, and the firmware used for the second control system to run is dynamically measured through the safety module.

As shown in fig. 2, in some embodiments of the present invention, the image forming apparatus may further include a third memory, the third memory is configured to store firmware when the first control system operates, the third memory is connected to the first control system, and may be specifically connected through an SPI bus, and the third memory may be a non-volatile memory, such as a NOR flash, a NAND flash, an EEPROM (erasable programmable read only memory), an FRAM (ferroelectric memory), an MRAM (magnetic RAM), an NVSRAM (non-volatile static memory), and the like.

In some embodiments of the present invention, the first control system may be further configured to: when the first control system and the second control system are in a sleep state, after the first control system receives a wake-up command through a control panel or a terminal device (for example, a PC shown in fig. 2), the first control system first completes wake-up and then sends a wake-up signal to the second control system to wake up the second control system, thereby realizing wake-up of the whole safety control system.

In still other embodiments of the present invention, the first control system may be further configured to: when the first control system and the second control system are in a dormant state, the second control system receives the awakening instruction to complete awakening, and sends an awakening signal to the first control system to awaken the first control system so as to awaken the second control system, thereby realizing awakening of the whole safety control system.

The utility model discloses in some embodiments, when need carry out firmware upgrading to first control system, the firmware upgrading package that first control system corresponds is received to the safety module to carry out safety verification to the firmware upgrading package that first control system corresponds, pass through the back when safety verification, first control system carries out firmware upgrading according to the firmware upgrading package that first control system corresponds again.

Specifically, the security module can acquire a firmware upgrade package corresponding to the first control system from the terminal device, then generate an enable invalid signal to an enable End (EN) of the power switch through a second port (GPIO) of the first control system, so that the second control system disconnects the power supply, the security module receives the firmware upgrade package corresponding to the first control system, and performs security verification on the firmware upgrade package corresponding to the first control system, after the security verification is passed, the first control system performs firmware upgrade according to the firmware upgrade package corresponding to the first control system, after the firmware upgrade is completed, the second port (GPIO) of the first control system generates an enable valid signal to the enable End (EN) of the power switch, so that the second control system is connected with the power supply and restarted.

The utility model discloses in some embodiments, when need carry out firmware upgrading to second control system, the firmware upgrading package that second control system corresponds is received to safety module to carry out safety verification to the firmware upgrading package that second control system corresponds, pass through the back when safety verification, send the firmware upgrading package that second control system corresponds for second control system again, make second control system carry out firmware upgrading according to the firmware upgrading package that second control system corresponds.

Specifically, the security module may obtain a firmware upgrade package corresponding to the first control system from the terminal device, perform security verification on the firmware upgrade package corresponding to the second control system, and send the firmware upgrade package corresponding to the second control system after the security verification is passed; the first control system further performs state interaction with the second control system, for example, the second control system reports firmware upgrade state information to the first control system in real time, and the first control system is further connected with a reset end of the second control system, when the second control system completes firmware upgrade, the second control system reports firmware upgrade completion information to the first control system, the first control system sends a reset valid signal (for example, a high level signal or a low level signal) to the reset end of the second control system, and after the second control system is reset, the start program and the firmware are reloaded.

In the embodiment of the present invention, the state interaction between the first control system and the second control system can be realized by UART (Universal Asynchronous Receiver/Transmitter).

As shown in fig. 1, in one or more implementable manners, the security module may be further configured to receive the print data, perform security verification on the print data, and transmit the print data to the second control system after the security verification is passed, so that the second control system controls the print engine mechanism of the image forming apparatus to complete the print processing of the print data according to the print data.

Specifically, a user can send a print job to the image forming apparatus through the terminal device, where the print job includes print data, the security module receives the print data and performs security verification on the print data, and after the security verification passes, the print data is sent to the second control system, and specifically, the print data can be encrypted and then sent to the second control system, and the second control system decrypts the print data and then generates a print instruction according to the print data, and then sends the print data and the print instruction to the print engine mechanism of the image forming apparatus, so as to control the print engine mechanism of the image forming apparatus to complete the print operation on the print job.

Continuing with fig. 1, in one or more implementations, the security module may be further configured to receive a scan command and perform security verification on the scan command, and after the security verification passes, send the scan command to the second control system, where the second control system generates a scan instruction according to the scan command to control a scan engine mechanism of the image forming apparatus to scan a document to be scanned, so as to obtain scan data and send the scan data to the security module, and the security module performs security verification on the scan data, and after the security verification passes, sends the scan data to the terminal device.

Continuing as shown in fig. 1, specifically, a user may send a scan command to the image forming apparatus through the terminal device or a control panel of the image forming apparatus, where the scan command is used to instruct the image forming apparatus to scan a document to be scanned, the security module may be further configured to receive the scan command and perform security verification on the scan command, after the security verification passes, the scan command is generated to the second control system, the second control system controls a scan engine mechanism of the image forming apparatus to scan the document to be scanned according to the scan command to obtain scan data, and sends the scan data to the security module, the security module performs security verification on the scan data, and after the security verification passes, the scan data may be encrypted, and then the encrypted scan data is sent to the driving end of the terminal device.

As shown in fig. 3, the terminal device (e.g., PC) and the first control system may be connected through a USB (Universal Serial Bus) interface or may be connected through a network port.

Wherein, the embodiment of the utility model provides an in related terminal equipment can be PC, panel computer, cell-phone etc. have the equipment of receiving and dispatching information function the utility model discloses in the implementation, terminal equipment is PC.

Continuing with FIG. 3, in one or more implementable manners, the image forming device includes a control panel for enabling interaction of the image forming device with a user, the control panel typically being a display screen with touch functionality and/or with physical keys.

The control panel is connected with the first control system, the second control system performs state interaction with the first control system, the second control system reports state information of the second control system to the first control system in real time through the UART port, and the first control system displays the state information of the second control system through the control panel.

Illustratively, when the second control system performs a static measurement on the startup procedure, the control panel may display, for example: in image forming apparatus/printer initialization.

Illustratively, when the second control system dynamically measures the firmware, the control panel may display, for example: image forming apparatus/printer dynamics metrics.

Illustratively, when the second control system completes the dynamic measurement of the firmware, the control panel may display, for example: the image forming apparatus/printer is ready.

Illustratively, when the second control system controls the print engine mechanism to perform the print processing, the control panel may display, for example: image forming apparatus/printer printing.

Illustratively, when the second control system controls the scan engine mechanism to perform the scanning process, the control panel may display, for example: image forming apparatus/printer scanning.

Illustratively, when the first control system/the second control system performs firmware upgrade, the control panel may display, for example: image forming apparatus/printer firmware upgrade.

It can be understood that the embodiment of the utility model provides a realize carrying out safety supervision to image forming device's start-up, running state and printing/scanning data through first control system to and control panel, the terminal equipment through first control system and image forming device interact, and the User side can only carry out UI (User Interface ) interaction and data interaction through first control system and image forming device, ensures the information security of User side.

It is clear to those skilled in the art that, for convenience and brevity of description, the specific working process of the safety control method of the image forming apparatus described above may refer to the corresponding content in the foregoing embodiment of the apparatus (i.e. the image forming apparatus), and is not described herein again.

The above description is only a preferred embodiment of the present invention, and should not be taken as limiting the invention, and any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. An image forming apparatus includes a first control system and a second control system;

2. The image forming apparatus according to claim 1, wherein the first control system is specifically configured to: after a power-off instruction is received, after the security module passes dynamic measurement of the second control system, a power-off signal is sent to the second control system first, so that the second control system is powered off first; and when the second control system is determined to be powered off, executing a power-off action.

3. The image forming apparatus according to claim 2, further comprising an engine mechanism electrically connected to the second control system, the engine mechanism for performing an image forming operation under control of the second control system, the second control system being specifically configured to:

4. The image forming apparatus according to claim 2, further comprising a power switch, wherein the second control system is electrically connected to a power supply of the image forming apparatus through the power switch, wherein the first control system is electrically connected to the power supply of the image forming apparatus and to an enable terminal of the power switch;

5. The image forming apparatus according to claim 1, wherein the first control system is further configured to: when the first control system and the second control system are in a dormant state, the first control system receives a wake-up instruction to complete wake-up, and sends a wake-up signal to the second control system to wake up the second control system.

6. The image forming apparatus according to claim 1, wherein the second control system is further configured to:

7. A safety control system is applied to an image forming apparatus and comprises a first control system and a second control system;

8. The safety control system of claim 7, wherein the first control system is specifically configured to: after a power-off instruction is received, after the security module passes dynamic measurement of the second control system, a power-off signal is sent to the second control system first, so that the second control system is powered off first; and when the second control system is determined to be powered off, executing a power-off action.

9. The security control system according to claim 8, wherein the image forming apparatus includes an engine mechanism electrically connected to the second control system, the engine mechanism for performing an imaging operation under control of the second control system, the second control system being specifically configured to:

10. The security control system according to claim 8, wherein the image forming apparatus further comprises a power switch, the second control system is electrically connected to a power supply of the image forming apparatus through the power switch, the first control system is electrically connected to the power supply of the image forming apparatus and to an enable terminal of the power switch;