JP2022132074A - Printer and method for controlling printer - Google Patents

Abstract

To execute print processing according to a print request transmitted from a reliable external device.SOLUTION: In a system, an external device, a server having an authentication function, and an image processing apparatus can communicate with each other via a network. The server performs user authentication on a user who uses the system. When the external device transmits a print request to the image processing apparatus, the image processing apparatus checks device information on the external device acquired from the print request. When the user authentication and the checking of the external device are successful, the image processing apparatus executes printing according to the print request from the external device for which checking has been successful.SELECTED DRAWING: Figure 4

Description

The present invention relates to a printing apparatus having a secure mode capable of executing print processing in response to a print request from a reliable external device.

A system is known in which a firewall is installed between an external network and an internal network in order to protect the internal network and the personal computers and printers connected to the internal network from attacks and unauthorized access from the external network. there is This system is a perimeter defense model that defends against attacks from external networks at the perimeter of a firewall. However, in the future, telework, shared offices, satellite offices, etc. will spread due to the diversification of work styles, and people and devices will be dispersed. This makes it difficult for the perimeter defense model to protect personal computers and printers. Therefore, it is necessary to support a zero-trust defense model that does not trust the boundary of the firewall (= zero trust) and protects at each.

As an example of such a model, Japanese Patent Application Laid-Open No. 2002-200002 describes a method in which a security policy is defined in advance in a printing apparatus, a received print job is verified as to whether it conforms to the security policy, and if not, the print job is executed. Techniques for limiting are disclosed.

Japanese Unexamined Patent Application Publication No. 2015-3407

However, in Japanese Patent Laid-Open No. 2002-100000, only determination is made as to whether the received print job conforms to the security policy, and it is not determined whether the print job has been sent from a reliable external device.

SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to execute print processing according to a print request sent from a reliable external device after confirming that the external device is reliable.

The present invention provides a system in which an external device, a server having an authentication function, and an image processing apparatus can communicate via a network, and authentication means for performing user authentication on the server for a user using the system. sending means for the external device to send a print request to the image processing device; confirmation means for the image processing device to check device information of the external device acquired from the print request with the server; When authentication by means and confirmation by said confirmation means are successful, said image processing apparatus executes printing in accordance with a print request from said successfully confirmed external device.

According to the present invention, print processing can be executed according to a print request sent from the reliable external device.

system configuration diagram (A), (B), and (C) are hardware configuration diagrams of the MFP 1000 (A), (B), and (C) are software configuration diagrams of the MFP 1000 Sequence diagram of the multi-function device, external device, and authentication server in the embodiment Flowchart diagram of ZT mode transition processing Screen example for port setting for each application in ZT mode A table showing the relationship between print applications and ports Example of screen when setting application for each port in ZT mode

A printing apparatus for carrying out the present invention will be described below with reference to the drawings. In the following embodiments, a multi-function peripheral (digital multi-function peripheral/MFP/Multi Function Peripheral) having a network cooperation function will be described as an example of a printing apparatus. As long as it is a device having a network cooperation function, the present invention will be described with a multifunction device as an example of an image processing device. be.

(Example 1)
FIG. 1 is a network configuration diagram.

The MFP 1000 having a print function can transmit and receive print data, scanned image data, device management information, and the like to and from the external device 101 via the network 100 .

In addition, the multi-function device 1000 can also communicate with an authentication server 102 having an authentication function via the network 100 . Also, the authentication server 102 can communicate with a cloud storage, a file server, or the like via the network 100 . In FIG. 1, there is one each of the MFP 1000, the external device 101, and the authentication server 102, but a plurality of each or a plurality of any one of them may be provided. Although the authentication server 102 is configured separately from the MFP 1000 , it may be configured within the MFP 1000 or within the external device 101 .

FIG. 2A is a block diagram showing a schematic configuration of the MFP 1000. As shown in FIG. A CPU 201 executes a software program of the MFP 1000 and controls the entire apparatus. A ROM 202 is a read-only memory and stores a boot program, fixed parameters, and the like for the MFP 1000 . A RAM 203 is a random access memory, and is used for storing programs and temporary data when the CPU 201 executes software programs. The HDD 204 is a hard disk drive that stores system software, applications, and various data. The CPU 201 executes the boot program stored in the ROM 202, expands the program stored in the HDD 204 in the RAM 203, and executes the expanded program. A network I/F control unit 205 controls transmission and reception of data with the network 100 . A scanner I/F control unit 206 controls reading of an original by the scanner 211 . A printer I/F control unit 207 controls print processing by the printer 210 and the like. A panel control unit 208 controls a touch panel type operation panel 212 to control the display of various information and the input of instructions from the user. In this embodiment, the panel control section will be described as an example of the display control section. A bus 209 connects the CPU 201, ROM 202, RAM 203, HDD 204, network I/F control unit 205, scanner I/F control unit 206, printer I/F control unit 207, and panel control unit 208 so that they can communicate with each other. ing. The CPU 201 transmits and receives control signals and data signals between devices connected to the bus 209 via the bus 209 .

FIG. 2B is a block diagram showing a schematic configuration of the external device 101. As shown in FIG.

A CPU 221 executes a software program for the external device 101 and controls the entire apparatus. A ROM 222 is a read-only memory and stores a boot program, fixed parameters, and the like for the external device 101 . A RAM 223 is a random access memory, and is used for storing programs and temporary data when the CPU 221 executes software programs. The HDD 224 is a hard disk drive and stores system software, applications, and various data. The CPU 221 executes the boot program stored in the ROM 222, expands the program stored in the HDD 224 in the RAM 223, and executes the expanded program. A network I/F control unit 225 controls transmission and reception of data with the network 100 . The panel control unit 228 controls the touch panel type operation panel 220 to control the display of various information and the input of instructions from the user. In this embodiment, the touch panel type operation panel 220 will be described as an input device, but the input device may be an I/O device such as a keyboard or mouse. The operation panel 228 may be a display that does not function as an input device as long as it has an input device such as a keyboard and a mouse. A bus 229 connects the CPU 221, ROM 222, RAM 223, HDD 224, network I/F control section 225, and panel control section 228 so that they can communicate with each other. The CPU 221 transmits and receives control signals and data signals between devices connected to the bus 229 via the bus 229 .

FIG. 2C is a block diagram showing a schematic configuration of the authentication server 102. As shown in FIG.

A CPU 231 executes a software program of the authentication server 102 and controls the entire apparatus. A ROM 232 is a read-only memory and stores a boot program, fixed parameters, and the like for the authentication server 102 . The RAM 233 is a random access memory, and is used for storing programs and temporary data when the CPU 231 executes software programs. The HDD 234 is a hard disk drive that stores system software, applications, and various data. The HDD 234 stores an authentication DB that links and manages machine information of the MFP 1000 and the external device 101 and user authentication information. The CPU 231 executes the boot program stored in the ROM 232, expands the program stored in the HDD 234 in the RAM 233, and executes the expanded program. A network I/F control unit 235 controls transmission and reception of data with the network 100 . A bus 239 connects the CPU 231, ROM 232, RAM 233, HDD 234, and network I/F control unit 235 so that they can communicate with each other. The CPU 231 transmits/receives control signals and data signals between devices connected to the bus 239 via the bus 239 .

FIG. 3A is a block diagram illustrating software modules included in the MFP 1000. As shown in FIG. The software module shown in FIG. 3A is implemented by the CPU 201 executing a program developed in the RAM 203. FIG.

Network driver 301 controls network I/F control device 205 connected to network 110 to transmit and receive data to and from the outside via network 110 .

A network control unit 302 controls communication below the transport layer in a network communication protocol such as TCP/IP to transmit and receive data.

A communication control unit 303 is a module for controlling a plurality of communication protocols supported by the MFP 1000 . The communication control unit 303 causes the network control unit 302 to open or block a network port for using a network communication protocol. In this embodiment, the HTTPS port will be described as an example of this network communication, but encrypted communication such as TLS supported by the multifunction peripheral 1000 is also executed by the communication control unit 303 .

The encryption processing unit 304 is a module for executing various encryption processing such as data encryption/decryption processing, electronic signature generation/verification, and hash value generation. The encryption processing unit 304 also performs encryption processing in encrypted communication processing such as TLS executed by the communication control unit 303 .

A print/read processing unit 305 is a module for executing functions such as printing by the printer 210 and reading of an original by the scanner 211 . A device control unit 306 is a module for generating control commands and control data for the MFP 1000 and controlling the MFP 1000 in an integrated manner. Scanning and printing instructions to the MFP 1000 can also be executed by user instructions via the operation panel 212 that is the display unit of the MFP 1000 . Control of the operation panel 212 and the panel controller 208 is performed by the UI controller 307 .

The authentication management unit 308 is a module that performs authentication processing from the external device 101 communicating with the communication control unit 303 through the network 100 . In response to an externally requested command (for example, PDL printing), the connection destination information of the external device 101 and data to be acquired are provided to the data acquisition unit 309, which will be described later. The data acquisition unit 309 receives the job type and connection destination information requested by the external device 101 from the authentication management unit 308 and issues a data acquisition command to the data acquisition control unit 309 .

A data acquisition unit 309 is a module for acquiring data from the external device 101 communicating with the communication control unit 303 through the network 100 . In other words, the data acquisition unit functions as a reception unit that receives data transmitted from the external device 101 . In this embodiment, since it is possible to block ports other than a predetermined network port, the data acquisition unit 309 accesses the external device 101 based on the information provided by the authentication management unit 308, and accesses the external device 101 for control. It also acquires data and generates jobs. The control unit having the software configuration of the MFP 1000 shown in FIG. 3A is hereinafter referred to as a control unit 1. The control unit 1 includes the CPU 201, ROM 202, RAM 203, HDD 204, etc. of the multifunction machine 1000. FIG. In the subsequent sequences and flowcharts, the part processed by the MFP 1000 is stored in any one of the ROM 202 , RAM 203 and HDD 204 of the control unit 1 and executed by the CPU 201 .

FIG. 3B is a block diagram illustrating software modules that the external device 101 has. Note that the software module shown in FIG. 3B is implemented by the CPU 221 executing a program developed in the RAM 223. FIG.

Network driver 321 controls network I/F control device 225 connected to network 100 to transmit and receive data to and from the outside via network 100 .

The network control unit 322 controls communication below the transport layer in a network communication protocol such as TCP/IP to transmit and receive data.

The communication control unit 323 is a module for controlling multiple communication protocols supported by the external device 101 . Encrypted communication such as TLS supported by the external device 101 is also executed by the communication control unit 323 .

The encryption processing unit 324 is a module for executing various encryption processing such as data encryption/decryption processing, electronic signature generation/verification, and hash value generation. Encryption processing is also performed by the encryption processing unit 324 in encrypted communication processing such as TLS executed by the communication control unit 323 .

Control of the operation panel 220 and the panel controller 228 is performed by the UI controller 327 . A job control unit 328 generates a job according to an input from the UI control unit 327 and transmits the job to other external devices and multifunction peripherals through the network 100 .

Hereinafter, the control unit having the software configuration of the external device 101 shown in FIG. In this specification, the control unit 2 includes the CPU 221, ROM 222, RAM 223, HDD 224, etc. of the external device 101. FIG. In the subsequent sequences and flow charts, portions processed by the external device 101 are stored in any one of the ROM 222, RAM 223, and HDD 224 of the control unit 2 and executed by the CPU 221. FIG.

FIG. 3C is a block diagram illustrating software modules that the authentication server 102 has. Note that the software module shown in FIG. 3C is implemented by the CPU 231 executing a program developed in the RAM 233. FIG.

Network driver 331 controls network I/F control device 235 connected to network 100 to transmit and receive data to and from the outside via network 100 .

The network control unit 332 controls communication below the transport layer in a network communication protocol such as TCP/IP to transmit and receive data. The communication control unit 333 is a module for controlling multiple communication protocols supported by the authentication server 102 . Encrypted communication such as TLS supported by the authentication server 102 is also executed by the communication control unit 333 . The encryption processing unit 334 is a module for executing various encryption processing such as data encryption/decryption processing, electronic signature generation/verification, and hash value generation. Encryption processing is also performed by the encryption processing unit 334 in encrypted communication processing such as TLS executed by the communication control unit 333 . An authentication DB management unit 338 issues, manages, and inquires about each digital certificate for other external devices and multi-function devices connected via the network 100, and also creates a DB of various user authentication information such as user IDs and passwords. A module for management. In this embodiment, information about the MFP 1000, the external device 101, and the user who performs printing is registered in advance in the authentication server 102, and the digital certificate issued at that time is issued to the MFP 1000 and the external device 101, respectively. Described as holding. In this embodiment, an example of using a digital certificate as a device authentication means will be described. It is also possible to use means for authenticating at the time of use.

The control unit having the software configuration of the authentication server 102 shown in FIG. 3C is hereinafter referred to as control unit 3 . In this specification, the control unit 3 includes the CPU 231, ROM 232, RAM 233, HDD 234, etc. of the authentication server 102. FIG. In the subsequent sequences and flowcharts, portions processed by the authentication server 102 are stored in any one of the ROM 232 , RAM 233 and HDD 234 of the control unit 3 and executed by the CPU 231 .

The multi-function device 1000 can transition to a mode in which one or more network ports are forcibly blocked (hereinafter referred to as ZT (Zero Trust) mode). FIG. 4 is a diagram showing the print processing sequence in the ZT mode. Each sequence in the MFP 1000 is stored in any one of the ROM 202 , RAM 203 and HDD 204 of the control unit 1 and executed by the CPU 201 . Each sequence in the external device 101 is stored in any one of the ROM 222 , RAM 223 and HDD 224 of the control unit 2 and executed by the CPU 221 . Each sequence in the authentication server 102 is stored in any one of the ROM 232 , RAM 233 and HDD 234 of the control unit 3 and executed by the CPU 231 . If the ZT mode is not set, steps S403 to S405 and S407 to S409 are not performed, and the printing process of S412 is performed by steps S405, S410, and S411.

The ZT mode of this embodiment is an example of a security mode, forcibly blocking one or more network ports, and accepting only data from external devices whose safety has been guaranteed in advance by an SSL (TLS) certificate. It is one of the functions of the MFP 1000 . The most secure state is when the number of permitted network ports is 0 (all network ports are blocked), and the MFP 1000 provides the local copy function. In this embodiment, an HTTPS port will be described as an example of a predetermined network port that is not blocked in the ZT mode.

First, the user requests the MFP 1000 to switch to the ZT mode (S401). The request source may be the user directly requesting the MFP 100 or the MFP 1000 via the external device 101 . The details of the transition processing to the ZT mode executed by the request of S401 will be described later.

A user requests user authentication to the printing system including the multifunction peripheral 1000 and the authentication server 102 via the external device 101 (S403). Specifically, the user performs this when the printer driver and the MFP 1000 respond on the external device. Normally, the printer driver acquires the functions, consumables information, error information, etc. of the MFP 1000 via the network and generates a screen suited to the capabilities of the MFP. A user authentication request is also made in this capability response. Here, the external device 101 communicates (not shown) with the MFP 1000 and receives information as to whether the ZT mode has been entered. The external device 101 receives a user authentication request from the user. The external device 101 notifies the authentication server 102 of the user ID and password received at the time of request as user information (S404). In the present embodiment, a fixed password method in which a user ID and a password match is used as a user authentication means. In the case of the one-time password method, after S404 between the external device 101 and the authentication server 102, a one-time password is issued (from the authentication server 102 to the external device 101) and input (from the external device 101 to the authentication server 102). to) is entered. The authentication server 102 makes an inquiry to an authentication management DB (not shown) in the server and returns the result to the external device 101, thereby causing the external device 101 to transition to the user logon state (S405). The external device 101 is in the user's logon state, allowing the user to operate during the period.

Next, the user issues a print request to the external device 101 so that the MFP 1000 can print (S406). Since the print request is an operation performed from the external device 101, the operation is enabled only during the logon period of the user according to S405. The external device 101 requests device authentication in order to access the MFP 1000 that performs printing (S407). In the device authentication request, the digital certificate of the external device 101 issued when the external device 101 is registered in advance in the authentication server 102 is sent. In this embodiment, a digital certificate is used as an example of the device information of the external device 101, but the type of device information is not limited. The MFP 1000 inquires of the authentication server 102 whether the received device authentication request is for the external device 101 that can be trusted. Before that, the MFP 1000 notifies the authentication server 102 of a MFP authentication request in order to access the authentication server 102 for authentication of the MFP 1000 (S408). In the MFP authentication request, a digital certificate of the MFP 1000 that was issued when the MFP 1000 was registered in the authentication server 102 in advance is sent. The authentication server 102 verifies the received digital certificate of the MFP 1000 and returns the result to the MFP 1000 . When the authentication of the multifunction device 1000 succeeds, the multifunction device 1000 requests the authentication server 102 for the public key necessary for verifying the received digital certificate of the external device 101 to request device authentication of the external device 101 ( S409). The authentication server 102 returns the digital certificate of the authentication server 102 to the MFP 1000 . Note that the digital certificate of the authentication server 102 may be stored in the MFP 1000 in advance. After that, the MFP 1000 verifies the digital certificate of the external device 101 using the public key obtained from the obtained digital certificate of the authentication server 102, and responds as the authentication result of the device authentication request. Note that the device authentication sequence from S407 to S409 need not be performed for each print request. If the device authentication of the external device 101 and the MFP 1000 is performed in advance via the authentication server 102 (for the second and subsequent printings with this device configuration), these steps may be omitted.

After the authentication of the external device 101 is successful, the external device 101 issues a print request to the MFP 1000 (S410). Note that the print request (S410) may be made before the device authentication request S407. In that case, the processing from S407 to S409 is performed only when the first print request is made. In response to the print request, the MFP 1000 acquires print data and its attribute information as a print job from the external device 101 (S411). The MFP 1000 executes print processing from the acquired print job (S412). The MFP 1000 can execute print processing according to a print request from the successfully authenticated external apparatus 101 .

Next, details of the ZT mode transition processing (S402) will be described. This step is started in response to a ZT mode shift request from the user to the multifunction device 1000 . Regarding the ZT mode transition request, an example will be described in which the user sets a remote UI that accesses the MFP 1000 via the network from the web browser of the external device. Note that the ZT mode transition request may be set by a local UI displayed on the touch panel type operation panel 212 .

FIG. 6 is a diagram showing a screen (600) on the web browser of the PC connected to the MFP 1000. As shown in FIG. This screen displays HTML obtained from the multifunction device 1000 by the user inputting the IP address of the multifunction device 1000 into the address bar 601 installed in the web browser 600 . This screen is a screen 602 for the administrator who changes and saves the setting values of the multifunction peripheral 1000, and is a screen on which settings regarding the ZT mode can be made as one of security settings for the administrator. A ZT mode setting selection area 603 is an area for changing the setting of the ZT mode by selecting an ON/OFF check box. Selection of the ON check box triggers the ZT mode transition, and the MFP 1000 transitions to the ZT mode. Details of the ZT mode transition processing in the multifunction machine 1000 will be described with reference to the flowchart of FIG.

In response to the ZT mode transition request from the UI control unit 307, the communication control unit 303 confirms the security state of the network environment in which the multifunction peripheral 1000 is installed. , otherwise, the process proceeds to S508. To determine locations with a high risk of external attacks, the presence or absence of a firewall within the same network is checked, and if a firewall exists, it is determined that the internal network environment is protected. Alternatively, a specific server (not shown) that communicates with a non-secure protocol may be provided outside the network, and if the MFP 1000 can communicate with the specific server, it can be determined that the risk of external attacks is high.

As a result of the determination in step S507, if it is determined that the MFP 1000 is installed in an installation environment where the risk of external attacks is not high, the communication control unit 303 prompts the user through the UI control unit 307 whether to shift to the ZT mode. A confirmation screen for confirmation is displayed on the display unit (S508). The installation environment where the risk of external attacks is not high is specifically assumed to be an environment connected to an internal network protected against external attacks by a firewall or the like. If a ZT mode transition request is received from the UI control unit 307 by user operation, the process proceeds to step S501; otherwise, this flow ends.

In response to the ZT mode shift request from the UI control unit 307, the communication control unit 303 blocks the network ports other than the HTTPS port for the network control unit 302 (S501). According to this flow, the copying machine 1000 is limited to communication protocols other than the HTTPS port in the transport layer, so that the multi-function machine 1000 can protect against threats even when data is received from the outside.

A permitted application selection area 604 is an area for selecting and permitting the use of a function of the MFP 1000 that requires network communication. Functions that require network communication include a print application, a scan application, and a box (storage in general including inside and outside the multifunction machine) application. While the ZT mode can protect against the threat of attacks from the outside, the functions that can be used are limited when network ports other than the HTTPS port are blocked. Therefore, the use of each application is allowed in stages according to the communication protocol and the external device to which it is connected. In this embodiment, FIG. 7 is used for dividing the print application into four stages (Lv. will be used for explanation.

FIG. 7 is a categorized table in which applications are classified into print paths so that a more secure print application is selected according to stages.

Applications permitted at level 1 are IPP(S) provided as a standard function by the operating system (OS) of the external device, and print applications based on IPP-Infra specifications based on IPP. A print application provided by a cloud authenticated by the MFP 1000 may also be used. When enabling these functions, the IPP port or IPPS port is opened in addition to the HTTPS port.

Applications permitted at level 2 are print applications realized within office security such as offices, in-house clouds, and on-premise servers. Specifically, there are a forced hold print application that stores print data in a PC or an in-house cloud for printing, and an on-premise print application that operates an on-premise server and a multifunction device as a set. When enabling these functions, the RAW port is further opened. Generally, the RAW protocol is a non-secure printing protocol, but its security is ensured by office security.

Applications permitted at level 3 are print applications that are realized directly between the multifunction peripheral and the PC via the network. For example, it is a driver print that inputs binary data generated from a PC via a printer driver. Another example is direct printing, in which a PDF (Portable Document Format) or XPS (XML Paper Specification) is input by an LPR command. When enabling these functions, the LPD port is further opened. Like the RAW protocol, the LPD protocol is also an insecure printing protocol, but its security depends on the environment in which the MFP is installed.

Level 4 is a print application such as USB-DEVICE or USB-HOST, which is performed by directly connecting the multifunction machine and the device. These are applications that are permitted by the administrator of the multifunction device depending on the purpose of use, since the user directly connects the multifunction device to his/her own PC or USB flash memory for printing.

The communication control unit 303 allows the user to print application Lv. By pressing the update button 606, it is detected that the IPP application 1 and the cloud print application 1 of No. 1 have been selected (S502). The communication control unit 303 compares the network port used by the selected application with the currently opened network port, and determines whether or not there is a new network port to be opened (S503). Alternatively, when the selection of the application is canceled, it is determined whether or not there is a network port that can be blocked from the list of network ports necessary for the subsequently selected application (S503). If there is no need to open/close a new network port, the process proceeds to S505, otherwise the process proceeds to S504.

In this embodiment, since the above two applications are selected immediately after ZT migration (HTTPS port only), the communication control unit 303 needs to open the IPPS port required for IPP printing. and discriminate. Then, it requests the network control unit 302 to open the IPPS port. The network control unit 302 performs IPPS port open processing (S504). After completion of the opening process, the communication control unit 303 displays the currently opened network port in the open network port display area 605 (S505). After updating the display, the communication control unit 303 waits for application selection in step S502 unless another application is selected and the web browser is not closed. (S506).

Printing in ZT mode is closed except for authorized network ports. For this reason, print processing cannot be realized by sending print data and its attribute information as a print job to a print port (LPD port, RAW port, etc.) like push-type printing from an external device. As in this embodiment, in response to a request from the outside, the MFP acquires the information necessary for realizing the request from the MFP to an authenticated and reliable device (PULL type). You can block information other than the information you want to acquire. Therefore, the multi-function device can be protected from the threat of malicious external attacks.

In this embodiment, an example has been described in which the user determines and selects whether to shift to the ZT mode, and further confirms whether to shift to the ZT mode according to the installation location of the MFP. You may make a judgment by . In other words, a method of switching the ZT mode only by allowing the user to determine whether or not to shift to the ZT mode and select it may be used. Also, depending on the installation location of the MFP, the display or non-display of the ZT mode selection area 603 or the default setting value may be switched depending on the presence or absence of the firewall. Switch according to the installation location of the MFP. In this case, when it is determined that the location where the MFP is installed is inside the firewall, the UI control unit 307 can be realized by switching the ZT mode setting selection area 603 from display to non-display, or by switching the default value to OFF. .

In this embodiment, an example has been described in which the user selects an application from step-by-step levels according to the reliability of the external device to which the application is connected and the safety of the communication protocol used. However, the selectable application displayed by the UI control unit 307 is a PULL type application that acquires data from the MFP 1000 to the outside. Strict security can be requested by not selecting or hiding applications other than those for receiving data from the cloud or external devices that have been authenticated. Furthermore, even stricter security can be demanded by permitting the selection of applications step by step according to the strength of authentication for the authenticated cloud or data reception system applications from external devices. Specifically, the authentication management unit 308 determines the authentication between the MFP 1000 and the external device based on AAL, and the UI control unit 307 displays and selects applications to be permitted in stages from AAL3 to AAL1. can be realized. AAL is an Authenticator Assurance Level.

As described above, the present invention makes it possible to execute print processing according to a print request sent from a reliable external device after confirming that the external device is reliable.

In this embodiment, an example has been described in which usage is permitted in stages according to the network port of each application and the external device to which it is connected, but it is also possible to display selectable applications for each network port. A screen (800) on the web browser of the PC, which is a screen for setting, will be described with reference to FIG.

The area from 601 to 603 is omitted because it has been described with reference to FIG. A network port area 801 to be opened is a network port required by an application of the MFP 1000 . The UI control unit 307 detects the open selection of the network port specified by the user, and the communication control unit 303 displays the application functioning on that network port in the usable application area 802 . Applications that do not function on the network port in that state may also be displayed in the unusable application area 803 .

In this embodiment, the print application has been described, but the multi-function device 1000 also has other network cooperation functions such as a facsimile application, a (network) storage application, a management application, and a copy application. Fax applications include G3FAX, PCFAX, IFAX, IPFAX, and the like. As a storage application, there are SMB, WebDAV, FTP, etc. as a function of accessing (receiving) from another MFP as a file server, or accessing (sending) to another MFP as a client. Examples of management applications include import and export of an address book, and multiple copy applications that output from a plurality of MFPs in cooperation with a network. It goes without saying that similar effects can be obtained by permitting the use of these functions for each application and opening/closing the network port accordingly, like the print application described in this embodiment.

100 MFP 101 External Device 308 Authentication Management Section 301 Network Driver 306 Print/Reading Processing Section

Claims (20)

A system in which an external device, a server having an authentication function, and an image processing device can communicate via a network,
authentication means for performing user authentication on the server for a user who uses the system;
a transmission unit for transmitting a print request from the external device to the image processing apparatus;
The image processing apparatus includes confirmation means for confirming device information of the external device acquired from the print request by the server;
A system, wherein, when authentication by the authentication means and confirmation by the confirmation means are successful, the image processing apparatus executes printing in accordance with a print request from the external device for which the confirmation is successful. A setting means for setting the system to a predetermined security mode,
When the predetermined security mode is set and the authentication by the authentication means and the confirmation by the confirmation means are successful, the image processing apparatus follows the print request from the successfully confirmed external device, 3. The system of claim 1, wherein the system performs printing. 3. The image processing apparatus according to claim 2, wherein when the predetermined security mode is not set, the image processing apparatus executes printing according to the received print request without confirmation by the confirmation unit. system. 4. The system according to claim 2, wherein said predetermined security mode is set via a display section of said image processing apparatus. display control means for judging an installation environment of the image processing apparatus and displaying a confirmation screen asking whether to set the predetermined security mode if the environment does not require the setting of the predetermined security mode. 5. A system according to any one of claims 2-4. 6. The user authentication information required for the user authentication is acquired from the user via the external device, and the external device transmits the acquired user authentication information to the server. or the system according to item 1. 3. The image processing apparatus comprises reception means for receiving print data via a plurality of network ports of the image processing apparatus when the confirmation of the external device by the confirmation means is successful. 7. The system of any one of 6. further comprising setting means for setting the system to a predetermined security mode;
a control unit that controls such that only print jobs that pass through a predetermined one or a plurality of network ports out of the plurality of network ports are received by the reception unit when the predetermined security mode is set; 8. The system of claim 7, wherein: wherein, when the predetermined security mode is not set, the control means does not perform control so that the reception means only receives a print job through a predetermined one or a plurality of network ports out of the plurality of network ports. 9. The image processing apparatus according to claim 8. 10. The system according to claim 8 or 9, wherein the predetermined security mode is a mode in which only one or more predetermined network ports among the network ports of the image processing apparatus are allowed to communicate. 11. The security mode according to any one of claims 8 to 10, wherein the predetermined security mode is a mode in which only one or a plurality of network ports designated by a user from among network ports of the image processing apparatus are allowed to communicate. 2. The system according to item 1. 12. The system according to any one of claims 8 to 11, wherein the predetermined security mode is a mode in which a permitted print application is selected. 13. The system according to claim 12, further comprising display control means for displaying a screen for selecting the permitted print application. A system in which an external device, a server having an authentication function, and an image processing device can communicate via a network,
a step of performing user authentication on the server for a user who uses the system;
a step of the external device transmitting a print request to the image processing apparatus;
a step in which the image processing apparatus confirms, with the server, device information of the external apparatus acquired from the print request;
A system comprising: when authentication by the authentication means and confirmation by the confirmation means are successful, the image processing apparatus executes printing in accordance with a print request from the external device for which the confirmation is successful. control method. An image processing apparatus capable of communicating with an external device, a server having an authentication function, and a network,
receiving means for receiving a print request from the external device;
a transmission unit configured to transmit device information of the external device acquired from the print request to the server;
receiving means for receiving print data from an external device that has been successfully confirmed by the server;
printing means for printing the print data received by the second receiving means;
An image processing device comprising: further comprising setting means for setting the system to a predetermined security mode;
the receiving means receives print data via a plurality of network ports of the image processing apparatus;
and control means for controlling, when the predetermined security mode is set, the receiving means to receive only print jobs through one or more predetermined network ports out of the plurality of network ports. 16. The system of claim 15, wherein wherein, when the predetermined security mode is not set, the control means does not perform control so that the reception means only receives a print job through a predetermined one or a plurality of network ports out of the plurality of network ports. 17. The image processing device according to claim 15 or 16. 18. The security mode according to any one of claims 15 to 17, wherein the predetermined security mode is a mode in which only one or a plurality of network ports designated by a user from among network ports of the image processing apparatus are allowed to communicate. 2. The system according to item 1. 19. The system according to any one of claims 15 to 18, wherein the predetermined security mode is a mode in which a permitted print application is selected. An image processing apparatus capable of communicating with an external device, a server having an authentication function, and a network,
receiving a print request from the external device;
a step of transmitting device information of the external device acquired from the print request to the server;
receiving print data from an external device that has been successfully confirmed by the server;
printing the print data received by the second receiving means;
A control method for an image processing device, comprising:

Images