JP2006246407A - Communication control unit and image forming apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication control unit capable of inducing or restricting connection of communication, and image forming apparatus. <P>SOLUTION: If there is a connection request from external equipment (S11:YES), it is judged whether or not the connection request can be authenticated from a communication address or the like of the external equipment (S12). If it is judged that not authenticated (S12:NO), the number of times of access is confirmed (S14) and it is judged whether connection is illegally requested predetermined times or less (S15). If it is judged that illegally requested predetermined times (S15:YES), notification contents corresponding to the number of times of access are read out (S17) and a message with the read notification contents is notified (S18). The number of times of access is made increment (S19) and processing is then returned to step S11. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a communication control apparatus and an image forming apparatus that can guide or limit communication connections.

  An image forming system in which an information processing apparatus such as a personal computer and an image forming apparatus such as a printer or a digital multi-function peripheral are connected on a communication network and the image forming apparatus is shared by a plurality of information processing apparatuses has been proposed. Has been introduced. In addition, as the number of users on the communication network increases, print data to be processed by the image forming apparatus increases. Therefore, an HDD device (HDD: Hard Disk Drive) is mounted on the image forming apparatus or on the communication network. A printer server is installed to enable efficient print processing.

  That is, in an image forming apparatus used in such a system, print data transmitted from the information processing apparatus is temporarily stored in the HDD apparatus so as not to stagnate the processing on the information processing apparatus side, and the printing process is executed. In this stage, print data is sequentially read from the HDD device and processed.

Therefore, even when the printing process is completed, since the print data remains in a state that can be restored in the HDD device, there is a problem that the print data is taken out by someone and information is leaked. Therefore, conventionally, a data communication apparatus has been proposed in which the number of times that the image forming apparatus has received unauthorized access is counted and the line is forcibly cut off when the counted number reaches a threshold value.
JP 2003-283738 A

  However, even if it is a legitimate user, if the connection method is incorrect due to the user's assumptions, or if the settings on the information processing device side are incorrect, etc., try to connect with the same connection method several times. Even in such a case, the data communication apparatus described above forcibly cuts off the line. In other words, since there is no means for disclosing the connection method, there is a problem that even if the connection request is from a legitimate user, the connection is determined to be an illegal connection request and the connection is blocked. Also, when reconnecting a device whose line has been interrupted, it is necessary for the device administrator, network administrator, etc. to cancel the disconnection, which increases the burden on the device administrator and network administrator. Has a point. Furthermore, it is desirable to be able to effectively limit unauthorized access when installed in an environment where connection is not permitted from the outside.

  SUMMARY An advantage of some aspects of the invention is that it provides a communication control device and an image forming apparatus capable of notifying a message for inducing or restricting connection according to an installation environment. To do.

  The communication control device according to the present invention is a communication control device that receives a connection request from an external device and establishes a connection with the external device based on the received connection request, wherein the connection request is an unauthorized connection request. A means for determining whether or not the connection request is determined to be illegal by the means, and a means for notifying the external device of information corresponding to the counted number of reception. And

  In the present invention, it is determined whether or not the connection request from the external device is an unauthorized connection request, the number of times of receiving the connection request determined to be unauthorized is counted, and information corresponding to the number of receptions is sent to the external device. If you are installed in an environment that is intended for sharing, you will be notified of a message for the purpose of guiding the connection, and if you are installed in an environment that is intended to limit connections By notifying a message indicating that the connection is restricted, effective access control according to the installation environment becomes possible.

  The communication control device according to the present invention comprises means for determining whether or not the transmission source of the received connection request is a predetermined transmission source, and if it is determined that the connection request is not the predetermined transmission source, the connection request is an unauthorized connection. It is characterized in that it is determined to be a request.

  In the present invention, when it is determined that the connection request transmission source is not a predetermined transmission source, it is determined that the connection request is an unauthorized connection request. Therefore, a preset communication address, MAC address, domain name It is determined that a connection request from an external device that does not have the information is illegal.

  The communication control device according to the present invention comprises: means for requesting connection authentication information to the external device after receiving the connection request; means for receiving connection authentication information transmitted in response to the request; and the received connection Means for determining whether the authentication information is predetermined connection authentication information, and when determining that the authentication information is not predetermined connection authentication information, the connection request is determined to be an unauthorized connection request. It is characterized by.

  In the present invention, after receiving a connection request, when requesting connection authentication information to an external device, and determining that the connection authentication information transmitted in response to the request is not predetermined connection authentication information, an unauthorized connection is made. Since the request is determined to be a request, only a user who knows predetermined information such as a password can make a valid connection.

  The communication control apparatus according to the present invention is characterized by comprising means for notifying the information each time an illegal connection request is received.

  In the present invention, the information is notified each time an unauthorized connection request is received, so that a message from the image forming apparatus is notified to the external device before continuously performing unauthorized access. It becomes.

  The communication control apparatus according to the present invention comprises means for changing information to be notified according to the number of receptions.

  In the present invention, it is possible to change the contents to be notified according to the number of receptions, so that it is possible to notify a message for inducing a connection and a message for guiding the connection in a restricting direction.

  The communication control device according to the present invention is characterized in that each time an illegal connection request is received, the information is changed and the connection method is disclosed step by step.

  In the present invention, every time an illegal connection request is received, the information to be notified is changed and the connection method is disclosed step by step. Get connection method information.

  The communication control device according to the present invention is characterized in that each time an illegal connection request is received, the information is changed and the reason for restricting the connection is disclosed step by step.

  In the present invention, every time an illegal connection request is received, information to be communicated is changed so that the reasons for restricting connection are disclosed step by step. You will know why you are.

  An image forming apparatus according to the present invention includes a communication control apparatus according to any one of the above-described inventions, means for receiving image data transmitted from an external device that has established a connection with the communication control apparatus, and Means for forming an image on a sheet based on the image data.

  In the present invention, image data transmitted from an external device is received, and an image is formed on a sheet based on the received image data. Therefore, the present invention can be applied to a printer device, a digital multifunction peripheral, and the like. It becomes possible.

  In the case of the present invention, it is determined whether or not the connection request from the external device is an unauthorized connection request, the number of receptions of the connection request determined to be unauthorized is counted, and information corresponding to the number of receptions is notified to the external device. Like to do. Therefore, if it is installed in an environment that aims to be shared, a message for guiding the connection is notified, and if it is installed in an environment that restricts connection, the connection is restricted. Can be notified. Therefore, effective access control can be performed according to the installation environment.

  According to the present invention, when it is determined that the connection request transmission source is not a predetermined transmission source, it is determined that the connection request is an unauthorized connection request. Therefore, it is possible to determine that a connection request from an external device that does not have a preset communication address, MAC address, domain name, etc. is an unauthorized connection request.

  In the case of the present invention, after receiving a connection request, when requesting connection authentication information to an external device and determining that the connection authentication information transmitted in response to the request is not predetermined connection authentication information, an unauthorized connection request is made. Judging that it is. Therefore, only a user who knows predetermined information such as a password can make a valid connection, and if an incorrect password or the like is input, it can be determined that the connection request is invalid.

  According to the present invention, the information is notified every time an unauthorized connection request is received, so that the external device is notified of a message from the image forming apparatus before continuously performing unauthorized access. Become.

  In the case of the present invention, it is possible to change the contents to be notified according to the number of receptions. Therefore, it is possible to notify a message for guiding the connection and a message for guiding the connection in the direction in which the connection is restricted.

  In the case of the present invention, every time an illegal connection request is received, the information to be notified is changed and the connection method is disclosed step by step. Therefore, the user of the external device can acquire information on the formal connection method from the disclosed information.

  In the case of the present invention, each time an illegal connection request is received, information to be communicated is changed to disclose the reasons for restricting the connection step by step. Therefore, the user of the external device is informed of the reason why the connection is restricted, and the number of unauthorized access attempts can be reduced. As a result, it is possible to prevent data stored in the image forming apparatus from leaking to the outside.

  In the case of the present invention, image data transmitted from an external device is received, and image formation is performed on a sheet based on the received image data. Therefore, the present invention can be applied to a printer device, a digital multifunction peripheral, or the like. It becomes.

Hereinafter, the present invention will be specifically described with reference to the drawings illustrating embodiments thereof.
FIG. 1 is a schematic diagram showing an overall configuration of an image forming system constructed using an image forming apparatus according to the present invention. In the figure, reference numeral 100 denotes a printer function for receiving a print job from the outside and forming an image on a sheet such as paper or an OHP film (hereinafter simply referred to as paper), and storing image data input from the outside in the apparatus. An image forming apparatus having an electronic filing function. Information processing apparatuses 200, 200,..., 200 are connected to the image forming apparatus 100 via a router R and a communication network N1, and the information processing apparatus is connected via the router R, the gateway G, and an external communication network N2. 300 is connected. Further, the mobile phone 400 can be connected by wireless communication.

  The information processing apparatus 200 is a personal computer, a workstation, or the like. When a driver program (printer driver) for using the image forming apparatus 100 via the communication network N1 is installed in the information processing apparatus 200 and authorized authority on the network is given, the information processing apparatus 200 uses the printer driver. An output process can be executed by generating a print job and transmitting the generated print job to the image forming apparatus 100. Further, the information processing apparatus 200 having a legitimate authority establishes a connection with the image forming apparatus 100 using the function of the printer driver, reads the image data stored in the image forming apparatus 100, and performs output processing. Can be executed.

  The information processing apparatus 300 is a personal computer, a workstation, or the like. When the printer driver described above is installed in the information processing apparatus 300 and a proper authority is given on the network, the information processing apparatus 300 establishes a connection with the image forming apparatus 100 using the function of the printer driver, Image data stored in the image forming apparatus 100 can be read and output processing can be executed.

  In addition, when authorized authority on the network is given, the mobile phone 400 can establish a connection with the image forming apparatus 100 by wireless communication, and after establishing the connection, the mobile phone 400 can establish the connection with the image forming apparatus. Image data is transmitted to 100, and output processing can be executed.

  In this embodiment, when a connection request from an external device (information processing devices 200 and 300 and mobile phone 400) is illegal, a message corresponding to the number of times is notified. Here, an unauthorized connection request (unauthorized access) is a connection request from an external device that does not have a valid authority on the network. For example, a connection request from an external device having a communication address, MAC address, or domain name that is not set in advance in the image forming apparatus 100, and a connection request from an external device that cannot be authenticated by a password input at the time of the connection request Is targeted.

  FIG. 2 is a block diagram illustrating an internal configuration of the image forming apparatus 100. The image forming apparatus 100 includes a CPU 101, and various types of hardware are connected to the CPU 101 via a bus 102. The CPU 101 loads the control program stored in advance in the ROM 103 onto the RAM 104 and executes it, thereby operating the entire hardware as the image forming apparatus according to the present invention.

  Hereinafter, the configuration of various hardware connected to the bus 102 will be described. The management unit 105 is configured by a non-volatile semiconductor memory, and a part of the storage area is used as an access management table 105a for managing connections from external devices. In the access management table 105a, for example, the communication address, MAC address, domain name, and the like of an external device that is permitted to be connected are registered. The CPU 101 refers to the information registered in the access management table 105a to connect. Determine whether or not. When a password (connection authentication information) is requested when a connection request is made from an external device, the access management table 105a registers the communication address of the external device and the password required for the external device in association with each other. . The CPU 101 requests a password at the time of a connection request from an external device, and determines whether or not connection is possible based on the password transmitted from the external device.

  The operation panel 106 includes an operation unit 106a that receives a user's operation instruction and a display unit 106b that displays information to be notified to the user. The operation unit 106a includes various hardware keys, and accepts setting of the number of output copies, setting of density at the time of image formation, and the like. The display unit 106b includes a liquid crystal display, an LED display, or the like, and displays an operation status of the image forming apparatus 100, a set value input through the operation unit 106a, and the like. In addition, a touch panel type software key is arranged in a part of the display unit 106b so as to accept a selection operation or the like by the user.

   The communication IF 107 includes an interface that conforms to a predetermined communication standard. The communication IF 107 receives a connection request from the information processing apparatus 200 connected to the communication network N1 or the information processing apparatus 300 connected to the external communication network N2, and when the connection request satisfies a predetermined condition A response signal is returned to establish a connection with the information processing apparatus 200 or 300. In addition, after the connection with the information processing apparatuses 200 and 300 is established, a print job transmitted from the information processing apparatuses 200 and 300 is received and information to be notified to the information processing apparatuses 200 and 300 is transmitted. . The communication IF 107 controls such transmission / reception of various information.

  The wireless communication IF 108 is an interface for performing wireless communication with the mobile phone 400, an antenna circuit that receives radio waves in a predetermined frequency range transmitted from the mobile phone 400, and converts radio waves received by the antenna circuit into digital signals. A signal generation circuit, an oscillation circuit that generates radio waves in a predetermined frequency range based on a signal transmitted to the mobile phone 400, and the like (not shown) are provided. The wireless communication IF 108 receives a connection request from the mobile phone 400 by the antenna circuit, and when the connection request satisfies a predetermined condition, returns a response signal to the mobile phone 400 to establish a communication connection. In addition, after the connection with the mobile phone 400 is established, image data for output transmitted from the mobile phone 400 is received and information to be notified to the mobile phone 400 is transmitted. The wireless communication IF 108 controls such transmission / reception of various information.

  The image memory 109 is a page memory that stores image data for output in units of pages, and can store image data of a predetermined number of pages. The image data stored in the image memory 109 is image data developed from a print job received by the communication IF 107 or image data received by the wireless communication IF 108. The stored image data is read from the image memory 109 in accordance with an instruction from the CPU 101 and transferred to the image forming unit 110 described later.

  The image forming unit 110 forms an image on a sheet based on the image data transferred from the image memory 109. For this reason, the image forming unit 110 includes a photosensitive drum for carrying a toner image, a charger for charging the photosensitive drum to a predetermined potential, and a laser beam that emits laser light according to image data received from the outside. A laser writing device for generating an electrostatic latent image, a developing device for supplying toner to the electrostatic latent image formed on the surface of the photosensitive drum for visualization, and a toner image formed on the surface of the photosensitive drum for paper A transfer device or the like (not shown) for transferring the image is provided, and an image desired by a user is formed on a sheet by electrophotography. In addition to the electrophotographic method using a laser writing device, the image forming may be performed by an inkjet method, a thermal transfer method, a sublimation method, or the like.

  The HDD 111 includes a disk-shaped magnetic recording medium, and a part of the storage area is used as a data storage area for storing image data input from the outside. When a request is received through the operation panel 106 or when a request from the information processing apparatuses 200 and 300 is received through the communication IF 107, the data stored in the data storage area is read out. Therefore, when it is necessary to execute the output process again due to an insufficient number of output copies, a failure in the output process, etc., the image data stored in the data storage area is arbitrarily read and the output process is executed. Can do. This data storage area is divided into a work area 111a and a storage area 111b. The work area 111a is mainly used as an area for temporarily storing data during work. When the work area 111a has a small free space, the work area 111a is stored in the work area 111a after a predetermined time has elapsed. Is automatically stored in the storage area 111b. The storage area 111b is an area for storing data organized according to the file format of the data, for each folder created by the user, and the like. The storage area 111b is stored unless an operation instruction such as erasure is performed.

FIG. 3 is a chart showing the contents notified by the image forming apparatus 100 to the connection request transmission source when an unauthorized access is received. In the present embodiment, the notification contents are made different depending on the number of times of unauthorized access. If the number of unauthorized accesses from a certain external device (information processing device 200, 300 or mobile phone 400) is the first, the notification content is “Could not access. Please check again and try again.” Notify the external device of the message. As a result, the user of the external device knows that the access has failed for some reason, and tries to reconnect as necessary. When the number of unauthorized accesses from the same external device is the second time, a message with a notification content “Please contact the administrator” is notified to the external device. As a result, the user of the external device attempts to reconnect after making an inquiry to the administrator as necessary. Further, when the number of unauthorized accesses from the same external device is the third time, a notification content message “Administrator is XXX” is notified to the external device. As a result, the user of the external device knows the name of the administrator to be inquired, and can acquire information necessary for connection from the administrator. .
In this way, it is possible to guide the connection by changing the message to be notified according to the number of unauthorized accesses.

FIG. 4 is a chart showing another content notified by the image forming apparatus 100 to the connection request transmission source when an unauthorized access is received. If the number of unauthorized accesses from a certain external device (information processing device 200, 300 or mobile phone 400) is the first, the notification content is “Could not access. Please check again and try again.” Notify the external device of the message. As a result, the user of the external device knows that the access has failed for some reason, and tries to reconnect as necessary. When the number of unauthorized accesses from the same external device is the second time, a message with a notification content “Please check the network address” is notified to the external device. As a result, the user of the external device checks the network address and tries to reconnect as necessary. Furthermore, when the number of unauthorized accesses from the same external device is the third time, a message with a notification content “Prohibit access since the access from the external network is restricted” is sent to the external device. Notice. As a result, the user of the external device knows that the connection is not permitted.
In this way, by changing the message to be notified according to the number of times of unauthorized access, it is possible to guide the connection to be restricted.

  The message shown in FIG. 3 is the notification content for the purpose of guiding the connection of the external device, and the message shown in FIG. 4 is the notification content for the purpose of restricting the connection of the external device, but any message is notified. It is desirable to arbitrarily set this depending on the installation environment of the image forming apparatus 100. Further, a message to be notified may be used properly according to the connection destination of the external device. For example, the information processing device 200 connected to the communication network N1 is notified of a message for the purpose of inducing the connection, and the information processing device 300 connected to the external communication network N2 is connected to the information processing device 200. The message may be notified for the purpose of restricting.

  Hereinafter, the operation of the image forming apparatus 100 will be described. FIG. 5 is a flowchart illustrating a procedure of processing executed by the image forming apparatus 100 when a connection request is received from an external device. The CPU 101 of the image forming apparatus 100 determines whether there is a connection request from an external device (step S11). When it is determined that there is no connection request from the external device (S11: NO), the process waits until there is a connection request.

  If it is determined that there is a connection request from an external device (S11: YES), the CPU 101 determines whether or not the connection request can be authenticated (step S12). That is, the CPU 101 refers to the access management table 105a to determine whether or not the connection request can be authenticated by determining whether or not the connection request is from an external device that is permitted to connect. If a password is requested when a connection request is made, the connection request is authenticated at this point, and the connection request is authenticated by checking the password returned from the external device with the password registered in the access management table 105a. Determine if you can.

  If it is determined that the connection request can be authenticated (S12: YES), the CPU 101 establishes a connection with the transmission source of the connection request (step S13). After the connection with the external device is established, the image forming apparatus 100 can receive a processing request from the external device, receives a print job or a read request for data stored in the HDD 111, and executes each processing. .

  If it is determined in step S12 that the connection request cannot be authenticated (S12: NO), the CPU 101 confirms the number of accesses from the external device (step S14), and the number of accesses is equal to or less than a predetermined number (eg, 3 times or less). ) Is determined (step S15). That is, the CPU 101 counts the number of illegal connection requests received from the same external device, and when it is determined that the counted number exceeds the predetermined number (S15: NO), the CPU 101 communicates with the external device. Disconnect (step S16).

  On the other hand, if it is determined that the number of times of receiving an unauthorized connection request is equal to or less than the predetermined number (S15: YES), the CPU 101 reads out the contents of notification according to the number of accesses (step S17). The message is notified to the external device (step S18). Then, after incrementing the access count (step S19), the CPU 101 returns the process to step S11.

  In the present embodiment, the CPU 101 of the image forming apparatus 100 is configured to count the number of times of unauthorized access based on the contents registered in the access management table 105a. The structure which gives a function may be sufficient. In that case, the communication IF 107 and the wireless communication IF 108 count the number of times of unauthorized access, and notify the message according to the counted number, thereby performing guidance for the purpose of connecting or blocking communication. .

1 is a schematic diagram showing an overall configuration of an image forming system constructed using an image forming apparatus according to the present invention. 2 is a block diagram illustrating an internal configuration of the image forming apparatus. FIG. 6 is a chart showing contents notified by an image forming apparatus to a connection request transmission source when an unauthorized access is received. 10 is a chart showing another content that the image forming apparatus notifies the connection request transmission source when receiving unauthorized access. 7 is a flowchart illustrating a procedure of processing executed by the image forming apparatus when a connection request is received from an external device.

Explanation of symbols

100 Image forming apparatus 101 CPU
103 ROM
104 RAM
105 Management Unit 105a Access Management Table 106 Operation Panel 107 Communication IF
108 Wireless communication IF
109 Image memory 110 Image forming unit 111 HDD
200,300 Information processing device 400 Mobile phone
N1, N2 communication network

Claims (8)

In a communication control device that receives a connection request from an external device and establishes a connection with the external device based on the received connection request,
Means for determining whether or not the connection request is an unauthorized connection request; means for counting the number of times of reception of a connection request determined to be unauthorized by the means; and information corresponding to the counted number of receptions And a communication control device.   Means for determining whether or not the transmission source of the received connection request is a predetermined transmission source, and when determining that the connection request is not the predetermined transmission source, it is determined that the connection request is an unauthorized connection request; The communication control apparatus according to claim 1, wherein the communication control apparatus is provided.   After receiving the connection request, means for requesting connection authentication information to the external device, means for receiving connection authentication information transmitted in response to the request, and the received connection authentication information is predetermined connection authentication information. 2. The apparatus according to claim 1, further comprising means for determining whether or not there is a connection request, and determining that the connection request is an unauthorized connection request when it is determined that the connection authentication information is not predetermined. Communication control device.   4. The communication control apparatus according to claim 1, further comprising means for notifying the information each time an illegal connection request is received.   The communication control apparatus according to any one of claims 1 to 4, further comprising means for changing information to be notified according to the number of receptions.   6. The communication control apparatus according to claim 5, wherein each time an illegal connection request is received, the information is changed and a connection method is disclosed step by step.   6. The communication control apparatus according to claim 5, wherein each time an illegal connection request is received, the information is changed to disclose the reasons for connection limitation step by step.   A communication control device according to any one of claims 1 to 7, a means for receiving image data transmitted from an external device established by the communication control device, and based on the received image data An image forming apparatus comprising: means for forming an image on a sheet.

Images