JP2008112371A - Image forming apparatus, server device, interface setting method, storage medium and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To control the state of the specific interface of an image forming apparatus equipped with a plurality of interfaces from a server device. <P>SOLUTION: A server device is notified of the status of the interface (S122 to S124). Then, the state of the interface other than any interface used for communication with the server device is switched from a valid state to an invalid state based on an instruction from the server device (S125 to S127), so that the state of the specific interface of the image forming apparatus equipped with the plurality of interfaces can be controlled from the server device. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an interface setting process of an image forming system including an image forming apparatus having a plurality of interfaces and a server apparatus capable of communicating.

  In recent years, printing via networks has become common with the spread of networks. In particular, since the printer does not require a special network adapter, the host computer to which the printer is locally connected is shared as a print server over the network. The most common method is printing from a client host computer via a printer via a print server.

  Such a printing system is required to have security for preventing information leakage. For this reason, a security server is installed on the network, and the security server is configured to monitor printing of a printing apparatus connected to the network and limit unauthorized printing requests.

  For example, Patent Document 1 below proposes a print server and a printing system that can control the validity / invalidity of an operation for a print job from a client based on settings in the print server.

On the other hand, in addition to the network, the printing apparatus includes, for example, a USB interface as another local interface, and is configured to be able to construct a printing system adapted to the user's usage environment. In addition, there is a printing apparatus including a Centronics interface (parallel interface) as another local interface.
Japanese Patent Laid-Open No. 2000-112665

  However, since such a printing system is a security system on the premise of network connection, the security server does not perform control for monitoring the USB or Centronics interface included in the printing apparatus. In other words, in the case of printing via a local port such as a USB or Centronics interface, the security server cannot monitor this.

  FIG. 13 is a diagram for explaining network printing processing of a conventional printing system.

  In FIG. 13, reference numerals 1302, 1303, and 1305 denote printers, and a data processing apparatus 1307 is locally connected to the printer 1303 via a local port. A security server 1301 manages and monitors the status of the printers 1302, 1303, and 1305.

  A data processing apparatus 1304 is installed with a predetermined OS and functions as a client machine. A predetermined OS is also installed in the data processing apparatus 1307, and a print request is made to the printer 1303 via the printer driver.

  In such a printing system, when a malicious user prints from the data processing apparatus 1307 using the local port of the printer 1303, the security server 1301 is a device that the data processing apparatus 1307 is not monitored. Therefore, there is a problem peculiar to the network that an illegal print request from the data processing apparatus 1307 locally connected to the printer 1303 is processed, and information leakage cannot be reliably restricted.

  SUMMARY An advantage of some aspects of the invention is that it provides a mechanism capable of controlling a state of a specific interface of an image forming apparatus including a plurality of interfaces from a server apparatus. .

  The image forming apparatus of the present invention that achieves the above object has the following configuration.

  An image forming apparatus communicable with a server apparatus, other than being used for communication with the server apparatus based on an instruction from the server apparatus and a notification means for notifying the server apparatus of an interface status Control means for switching the interface state from the valid state to the invalid state.

  The interface setting method of the present invention that achieves the above object has the following configuration.

  An interface setting method in an image forming apparatus communicable with a server apparatus, wherein a notification step of notifying the server apparatus of an interface status and communication with the server apparatus based on an instruction from the server apparatus And a control step of switching the state of the interface other than the use state from the valid state to the invalid state.

  According to the present invention, it is possible to improve the security level of the entire image forming system by controlling the state of a specific interface of the image forming apparatus having a plurality of interfaces from the server apparatus.

  Next, the best mode for carrying out the present invention will be described with reference to the drawings.

<Description of system configuration>
[First Embodiment]
FIG. 1 is a block diagram illustrating a configuration of a printing apparatus according to the first embodiment. In this embodiment, a plurality of different types of interfaces are provided to enable parallel connection with a plurality of host computers.

  The present embodiment is an example of a network interface for connecting to a host computer on a network and a printing apparatus locally connected to the host computer via a predetermined interface cable. There is no limitation on the number of interfaces for local connection.

  In FIG. 1, reference numerals 101 to 104 denote host computers, which have hardware resources and software resources as described later. A printing apparatus 105 includes a controller unit 123, a recording unit 121, and a panel unit 122.

  In the controller unit 123, reference numeral 110 denotes a CPU that controls the entire apparatus. A ROM 111 stores a control program of the CPU 110 and font information.

  A RAM 112 is used to create work memory and print data used by the CPU 110 during operation. A Centro interface unit 113 functions as a local interface. In the present embodiment, the Centro interface unit 113 controls data transmission / reception with the host computer 101.

  A USB interface unit 114 controls data transmission / reception with the host computer 102. A network interface unit 115 controls data transmission / reception with the host computer 103.

  Reference numeral 116 denotes an extension interface unit which controls data transmission / reception with the host computer 104. Reference numeral 117 denotes a nonvolatile memory EEPROM which stores internal setting information and the like.

  Reference numeral 118 denotes a real time clock RTC for measuring time. An engine interface unit 119 performs communication control with the recording unit 121 that actually prints on paper, and outputs print data.

  A panel interface unit 120 interfaces with the panel unit 122. A recording unit 121 receives print data while taking timing through the engine interface unit 119, and actually prints on paper. A panel unit 122 includes a display unit and a switch for performing an interface between the apparatus and the user.

  Here, each host computer has a basic configuration provided in a generally well-known information processing apparatus, and a typical block configuration is shown in FIG.

  FIG. 2 is a block diagram for explaining the hardware configuration of the host computers 101 to 104 shown in FIG.

  In FIG. 2, reference numeral 200 denotes a CPU as control means, which executes a program stored in a hard disk (HD) 205. Here, examples of the program include an application program, a printer driver program, an OS, a network printer control program of the present invention, and the like.

  The CPU 200 executes the program and performs control to temporarily store information, files, and the like necessary for executing the program in the RAM 202.

  A ROM 201 stores therein various data such as a program such as a basic I / O program, font data used for document processing, and template data.

  Reference numeral 202 denotes a RAM that provides temporary storage means capable of expanding the capacity, and functions as a main memory, work area, and the like of the CPU 200. Reference numeral 203 denotes a flexible disk drive (FDD), which can load a program stored in the FD 204 as a storage medium into the computer system through the FDD 203 as shown in FIG.

  Reference numeral 204 denotes a flexible disk (FD) as a storage medium, which is a storage medium storing a computer-readable program. The storage medium is not limited to the FD, and any medium such as a CD-ROM, a CD-R, a CD-RW, a PC card, a DVD, an IC memory card, an MO, and a memory stick can be used.

  Reference numeral 205 denotes one of external storage devices, which is a hard disk (HD) that functions as a large-capacity memory.

  The HD 205 stores application programs, printer driver programs, OS, network printer control programs, related programs, and the like. A spooler as spool means is secured in the HD 205.

  Note that the spool means is a client spooler in the clients 102 to 104 and a server spooler in the print server. In the print server, job information received from the clients 102 to 104 is stored, and a table for order control is also generated and stored in the external storage device (HD 205).

  Reference numeral 206 denotes a keyboard for inputting instructions. By using the keyboard 206, the user instructs the client computer, or the operator or administrator inputs an instruction of a device control command or the like to the print server. Note that a pointing device 210 may be provided to input an instruction.

  A display 207 displays a command input from the keyboard 206, a printer status, and the like. A system bus 208 controls the flow of data in a computer that is a client or a print server.

  Reference numeral 209 denotes an interface, which is connected to the network 106 shown in FIG. 1 via the interface 209 and can exchange data with an external apparatus on the network including the printing apparatus 105 using a predetermined protocol.

  FIG. 3 is a diagram illustrating the configuration of the printing system according to the present embodiment. In this embodiment, the security server is an example of a printing system that can monitor a plurality of host PCs and printing apparatuses.

  In FIG. 3, a security server 300, host PCs 310a, 310b, and 310c, and printers 301, 302, 303, and 304 that are printing apparatuses are connected to a network 305. Note that the performance of each printer need not be the same. Further, the security server 300 includes hardware equivalent to the hardware resources shown in FIG. In addition, as long as the function equivalent to the security server 300 is executed, the data processing apparatus may be configured as software for executing the function of the security server 300 without being configured as a server apparatus.

  FIG. 4A is a flowchart illustrating an example of a first data processing procedure in the server apparatus according to the present embodiment. This example is a local port monitoring process example of the security server 300 shown in FIG. In addition, S101-S113 show each step. Each step is realized by the CPU of the security server 300 loading a control program from a storage device such as a hard disk into the RAM and executing it.

  FIG. 4B is a flowchart illustrating an example of a first data processing procedure in the printing apparatus according to the present embodiment. This example is a message response processing example on the printer 303 side shown in FIG. 3 having a local port. In addition, S121-S127 show each step. Each step is realized by the printer 303 110 loading a control program stored in the ROM 111 into the RAM 112 and executing it.

  In S101 shown in FIG. 4A, the CPU of the security server 300 checks whether or not a preset time has elapsed in order to periodically check the status of each printer connected to the network 305. If the CPU of the security server 300 determines that the set time has elapsed, the process proceeds to S102. If not, the process of S101 is continued while performing other server processes.

  In step S <b> 102, the security server 300 transmits a message requesting status information to the printers 301 to 304 connected to the network 305. Here, the status information is stored in the RAM of each of the printers 301 to 304, and includes information specifying the printer on the network, the type of IF that the printer has, and information indicating whether the IF is valid. .

  FIG. 5 is a diagram showing an example of status information of the printer 303 shown in FIG. The stator information is stored in the RAM provided in the printer 303 as described above. This example shows a state before receiving the latest status information from the printer.

  In FIG. 5, the status information stores information “127.127.127.20” for the IP address 401 and “printer 303” for the printer name 402.

  Further, information “1”, “1”, “0”, and “−1” is stored for the network IF 403, the Centro IF 404, the USB IF 405, and the extended IF 406, respectively. Here, “1” indicates that the IF is valid, “0” indicates that the IF is invalid, and “−1” indicates that the IF is not provided.

  Next, in S103, the security server 300 waits to receive the status information transmitted from the printer. When the status information is received, the process proceeds to S104.

  In step S104, the security server 300 stores the status information received from the printer in a storage device in the server. In step S105, the security server 300 checks whether status information has been requested for all printers on the network. If the security server 300 determines that status information has been requested for all printers, the process advances to step S106. If not, the process from step S102 is performed on a printer that has not requested status information.

  In step S106, the security server 300 refers to the status information received from the printer, and confirms whether there is a printer with the local port enabled on the network.

  FIG. 6 is a diagram showing an example of status information of each printer stored in the storage device in the server by the security server 300 shown in FIG.

  In FIG. 6, the status information stores “127.127.127.18” for the IP address 601 and “printer 301” for the printer name 602.

  In addition, information “1”, “1”, “0”, and “−1” is stored for the network IF 603, the Centro IF 604, the USB IF 605, and the extended IF 606, respectively.

  Here, “1” indicates that the IF is valid, “0” indicates that the IF is invalid, and “−1” indicates that the IF is not provided.

  In this example, as shown in FIG. 5, the printer 303 with the printer name “printer 303” has a centro IF that is a local port, and the IF is enabled. As described above, when there is a printer in which the local port is valid, the process proceeds to S107 shown in FIG. 4, and when there is no printer, the process returns to S101.

  In step S107, the security server 300 notifies the administrator of the security server 300 that there is a printer for which the local port is valid on the network.

  FIG. 7 is a diagram showing an example of a dialog displayed on the display of the security server 300 shown in FIG. This example is an example showing notification from the security server 300 to the server administrator. This screen is displayed on a display device included in the security server 300 under the control of the CPU of the security server 300.

  In FIG. 7, BT1 to BT3 are buttons and instruct a response to the dialog. Here, the button BT1 is pressed when the content of the dialog is affirmed. The button BT2 is pressed when negating the content of the dialog. The button BT3 is pressed when it is desired to display the detailed state. The local port type may be displayed together. When the printer has a plurality of local ports, the status information for each interface may be displayed in a list so as to be identifiable, and display control may be performed so that invalidation can be instructed.

  Furthermore, the structure which notifies the content of a dialog to a portable terminal provided with the function to display a homepage, for example, PDA, a mobile telephone, etc. may be sufficient.

  In step S108, the security server 300 determines whether there is an instruction from the security server administrator to invalidate the local port of the printer via the dialog display screen shown in FIG. That is, it is determined whether or not the button BT1 is pressed.

  If the button BT1 is pressed, the process proceeds to S110. If the button BT2 is pressed, the process returns to S101.

  In step S109, the security server 300 transmits a message requesting the invalidation of the local port to the printer (in this example, the printer 303) designated by the administrator of the security server.

  Next, in S110, the security server 300 waits to receive the status information transmitted from the printer. When the status information is received, the process proceeds to S111.

  In step S111, the security server 300 stores the status information received from the printer (in this example, the printer 303) in the storage device in the security server 300, and the process returns to step S101. Here, the storage device may be a hard disk or a RAM.

  FIG. 8 is a diagram showing an example of status information of the printer 303 shown in FIG. The stator information is stored in the RAM provided in the printer 303 as described above. This example shows a state after receiving the latest status information from the printer.

  In FIG. 8, the status information stores “127.127.127.20” for the IP address 401 and “printer 303” for the printer name 402.

  Further, information “1”, “1”, “0”, and “−1” is stored for the network IF 403, the Centro IF 404, the USB IF 405, and the extended IF 406, respectively. Here, “1” indicates that the IF is valid, “0” indicates that the IF is invalid, and “−1” indicates that the IF is not provided.

  Next, in S103, the security server 300 waits to receive the status information transmitted from the printer. When the status information is received, the process proceeds to S104.

  As a result, the status state shown in FIG. 5 is an example of status information after updating the printer 303 as shown in FIG. 8, and the Centro IF is updated from “1 (valid)” to “0 (invalid)”. Is done.

  On the other hand, the printer 303 waits to receive a message from the security server 300 in S121 shown in FIG. 4B. When a message is received from the security server 300, in step S122, the CPU 110 of the printer 303 determines whether the type of the received message is a request for status. If it is determined that the type of message received by the CPU 110 is a request for status, the process proceeds to S123. In step S123, the printer that has received the message requesting the status information refers to the status information and checks whether each IF of the printer is currently valid.

  In step S124, the printer transmits the result of whether each IF held by the printer confirmed in step S123 is currently valid to the security server 300 as the latest status information, and then returns.

  On the other hand, if it is determined in S122 that the received message is other than the status request, the process proceeds to S125.

  In step S125, the CPU 110 determines whether the received message is a message requesting invalidation of the local port. If the CPU 110 determines that the message is a request for invalidating the local port, the received printer (in this example, the printer 303 shown in FIG. 3) invalidates the instructed local port. . Next, in S112, the printer (the printer 303 in this example) updates the stored status information, transmits the updated result to the security server 300 as new status information, and returns.

  On the other hand, if it is determined in S125 that the received message is invalid or not a request for the local port, this process is returned. In addition, you may perform control which transfers to another process. The above is the description of the processing of the printing system shown in FIG.

  Thereby, the security server 300 can validate or invalidate the local port provided in the printer 303.

  More specifically, if the local port of the printer 303 is enabled according to the content instructed by the user in the dialog shown in FIG. Can be enabled or disabled.

  Next, processing when the printer in the printing system receives print data will be described with reference to FIG.

  FIG. 9 is a flowchart illustrating an example of a second data processing procedure in the printing apparatus according to the present exemplary embodiment. This example is a message response processing example on the printer 303 side shown in FIG. 3 having a local port. S301 to S308 indicate each step. Each step is realized by the CPU 110 of the printers 301 to 304 loading a control program stored in the ROM 111 into the RAM 112 and executing it.

  In step S301, each of the printers 301 to 304 illustrated in FIG. 3 determines whether print data has been received from the outside. If the CPU 110 determines that the print data has been received, the process proceeds to step S302 to start the print process. If it is determined that the print data has not been received, the process in step S301 is continued while performing other print processes.

  In step S302, each printer specifies what interface has received the print data. In step S <b> 303, each printer refers to the status information stored in the RAM 112, and the CPU 110 checks whether the IF that received the print data is valid.

  Here, in S304, the CPU 110 of each printer reads the received data buffered in the RAM 112.

  In step S305, each printer determines whether the IF that received the data is valid based on the confirmation result of the status information in step S303. If the CPU 110 of each printer determines that the IF that received the data is valid, the process proceeds to S306. If it is determined to be invalid, the process proceeds to S307.

  In step S306, each printer analyzes the received data read in step S304, and performs data processing based on the analysis result.

  Note that the data processing here is specifically to generate a raster image to be printed on paper from print data.

  If it is determined in step S305 that the data is invalid, each printer discards the data read in step S304 from the RAM 112 in step S307.

  In step S308, the CPU 110 of each printer confirms whether data reception has been completed. Here, when the CPU 110 determines that the data reception has ended, each printer ends the processing of the data read from the RAM 112, and the series of printing processes ends.

  On the other hand, if it is determined in S308 that the data reception has not been completed, the process returns to S304, and each printer continues to read the received data.

  As a result, the security server 300 periodically inquires about the status of the interface of the printer connected to the network 305, and acquires the status of the interface of each printer. The administrator can instruct the printer having the interface to be invalidated to invalidate the locally connected interface.

[Second Embodiment]
In the first embodiment, the case where the security server 300 periodically inquires about the status of the interface of the printer connected to the network 305 and acquires the status of the interface of each printer has been described.

  On the other hand, by notifying the connection state from the printer connected to the network 305, the security server 300 periodically inquires about the state of the interface of the printer connected to the network 305 at the timing when the notification is captured. . A configuration may be employed in which the status of each printer interface is acquired in response to this inquiry. The embodiment will be described below.

  Hereinafter, a second embodiment of the printing system shown in FIGS. 1 and 2 will be described. Note that the hardware configuration is the same as in the first embodiment, and a description thereof will be omitted.

  FIG. 10A is a flowchart illustrating an example of a second data processing procedure in the server apparatus according to the present embodiment. This example is a local port monitoring process example of the security server 300 shown in FIG. S1001 to S1011 indicate each step. Each step is realized by the CPU of the security server 300 loading a control program from a storage device such as a hard disk into the RAM and executing it.

  FIG. 10B is a flowchart illustrating an example of a third data processing procedure in the printing apparatus according to the present exemplary embodiment. This example is a message response processing example on the printer 303 side shown in FIG. 3 having a local port. S1021 to S1029 indicate each step. Each step is realized by the printer 303 110 loading a control program stored in the ROM 111 into the RAM 112 and executing it.

  Hereinafter, the processing of the printing system will be described as an example of processing when the printer 304 is newly connected to the network 305 shown in FIG. 3 to which the security server 300 is connected.

  First, in step S <b> 1021, the printer 304 determines whether it is connected to the network 305. If it is determined that the network is connected to the network 305, the process proceeds to S1022.

  In step S1022, the printer 304 broadcasts an event notifying that the printer 304 has connected to the network 305.

  As a result, the security server 300 confirms event reception from the printer in step S1001, and proceeds to step S1002 when an event notifying that the connection to the network 305 has been received, for example. In step S <b> 1002, the security server 300 acquires an IP address that identifies the connected printer 304 and stores the acquired IP address in a storage device in the security server 300.

  In step S <b> 1003, the security server 300 transmits a message requesting status information to the printer 304 connected to the network 305.

  In response, when the printer 304 receives a message in step S1023, in step S1024, the CPU 110 determines whether the message is a message requesting status information. If the printer 304 determines that the message is a message requesting status information, in step S1025, the printer 304 refers to the status information and checks whether the IF of the printer 304 is currently valid.

  In step S1026, the printer 304 transmits the result confirmed in step S1025 to the security server 300 as the latest status information, and the process returns.

  In response to this, when the security server 300 receives the status information from the printer 304 in S1004, the security server 300 stores the status information received from the printer 304 in the storage device in S1005.

  In step S <b> 1006, the security server 300 refers to the status information received from the printer 304 and confirms whether the local port of the printer 304 is valid.

  If it is determined that the local port of the printer 304 is valid, the process advances to step S1007. On the other hand, if it is determined that the local port of the printer 304 is invalid, a series of processes performed when a new printer is connected to the network 305 is terminated.

  In step S1007, the security server 300 notifies the administrator of the security server 300 that the local port of the printer 304 is valid. This notification method is preferably a notification by e-mail, but may be notified by other methods.

  In step S <b> 1008, the security server 300 determines whether there is an instruction to invalidate the local port of the printer 304 from the administrator of the security server. If it is determined that there is an instruction to invalidate the local port of the printer 304, the process advances to step S1009. On the other hand, if it is determined that there is no instruction to invalidate the local port of the printer 304, a series of processes performed when a new printer is connected to the network 305 is terminated.

  In step S1009, the security server 300 transmits a message requesting to invalidate the local port to the printer (the printer 304 in this example) designated by the administrator of the security server.

  In response, the printer 304 determines NO in S1024, and in S1027, the CPU 110 determines whether the received message is a message requesting to invalidate the local port. If it is determined that the message is a request for invalidating the local port, the printer 304 invalidates the local port instructed by the security server 300 in step S1028.

  In step S <b> 1029, the printer 304 updates the status information stored in the storage device, transmits the updated result to the security server 300 as new status information, and returns this process.

  In response to this, when the security server 300 receives a status from the printer 304 in S1010, the process proceeds to S1011. In step S1011, the security server 300 stores the status information received from the printer (the printer 304 in this example) in the storage device in the security server 300, and ends the process.

  Note that the processing when each printer shown in FIG. 3 in this embodiment receives print data is the same as the processing shown in FIG.

  As a result, the security server 300 inquires about the status of the interface of the printer connected to the network 305 by acquiring the timing when the printer is connected to the network, and acquires the status of the interface of each printer. The administrator can instruct the printer having the interface to be invalidated to invalidate the locally connected interface.

[Third Embodiment]
In the above embodiment, the case of invalidating the state of the local interface provided in the printer has been described. However, control for invalidating the network function is executed in response to a print request from a locally connected data processing apparatus. May be.

  As a result, when a print request is made by a locally connected data processing apparatus, connection to the network can be restricted. At this time, after invalidating the state of the network interface, after the local print request is completed, the network function is validated, and the state of the local interface is invalidated again as in the above embodiment.

[Fourth Embodiment]
The configuration of a data processing program that can be read by the printing system according to the present invention will be described below with reference to the memory maps shown in FIGS.

  FIG. 11 is a diagram illustrating a memory map of a storage medium that stores various data processing programs that can be read by the server apparatus according to the present embodiment.

  FIG. 12 is a diagram illustrating a memory map of a storage medium that stores various data processing programs that can be read by the printing apparatus according to the present embodiment.

  Although not particularly illustrated, information for managing a program group stored in the storage medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.

  Further, data depending on various programs is also managed in the directory. In addition, a program for installing various programs in the computer, and a program for decompressing when the program to be installed is compressed may be stored.

  The functions shown in FIG. 4A, FIG. 4B, FIG. 9, FIG. 10A, and FIG. 10B in this embodiment may be performed by a host computer by a program installed from the outside. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a storage medium such as a CD-ROM, a flash memory, or an FD, or from an external storage medium via a network. Is.

  As described above, the storage medium storing the software program code for realizing the functions of the above-described embodiments is supplied to the system or apparatus. It goes without saying that the object of the present invention can also be achieved by the computer (or CPU or MPU) of the system or apparatus reading and executing the program code stored in the storage medium.

  In this case, the program code itself read from the storage medium realizes the novel function of the present invention, and the storage medium storing the program code constitutes the present invention.

  Therefore, as long as it has the function of the program, the form of the program such as an object code, a program executed by an interpreter, or script data supplied to the OS is not limited.

  As a storage medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, CD-RW, magnetic tape, nonvolatile memory card, ROM, DVD, etc. Can be used.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention.

  As another program supply method, a browser on a client computer is used to connect to an Internet home page. Then, the computer program itself of the present invention or a compressed file including an automatic installation function can be downloaded from the homepage by downloading it to a recording medium such as a hard disk. It can also be realized by dividing the program code constituting the program of the present invention into a plurality of files and downloading each file from a different homepage. That is, a WWW server, an ftp server, and the like that allow a plurality of users to download a program file for realizing the functional processing of the present invention on a computer are also included in the claims of the present invention.

  In addition, the program of the present invention is encrypted, stored in a storage medium such as a CD-ROM, distributed to users, and key information for decryption is downloaded from a homepage via the Internet to users who have cleared predetermined conditions. Let It is also possible to execute the encrypted program by using the key information and install the program on a computer.

  In addition, the functions of the above-described embodiments are not only realized by executing the program code read by the computer. For example, based on an instruction of the program code, an OS (operating system) running on the computer performs part or all of the actual processing. Needless to say, the process includes the case where the functions of the above-described embodiments are realized.

  Further, the program code read from the storage medium is written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer. After that, based on the instruction of the program code, the CPU of the function expansion board or function expansion unit performs part or all of the actual processing, and the processing of the above-described embodiment is realized by the processing. Needless to say.

  The present invention is not limited to the above embodiments, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and these are excluded from the scope of the present invention. is not.

  Although various examples and embodiments of the present invention have been shown and described, those skilled in the art will not limit the spirit and scope of the present invention to the specific description in the present specification.

1 is a block diagram illustrating a configuration of a printing apparatus according to a first embodiment. FIG. 2 is a block diagram for explaining a hardware configuration of a host computer shown in FIG. 1. It is a figure explaining the structure of the printing system which shows this embodiment. It is a flowchart which shows an example of the 1st data processing procedure in the server apparatus which shows this embodiment. 6 is a flowchart illustrating an example of a first data processing procedure in the printing apparatus according to the present exemplary embodiment. FIG. 4 is a diagram illustrating an example of status information of the printer illustrated in FIG. 3. It is a figure which shows the example of the status information of each printer which the security server shown in FIG. 3 memorize | stored in the memory | storage device in a server. It is a figure which shows an example of the dialog displayed on the display of the security server shown in FIG. FIG. 4 is a diagram illustrating an example of status information of the printer illustrated in FIG. 3. It is a flowchart which shows an example of the 2nd data processing procedure in the printing apparatus which shows this embodiment. It is a flowchart which shows an example of the 2nd data processing procedure in the server apparatus which shows this embodiment. 10 is a flowchart illustrating an example of a third data processing procedure in the printing apparatus according to the present exemplary embodiment. It is a figure explaining the memory map of the storage medium which stores the various data processing program which can be read by the server apparatus which shows this embodiment. It is a figure explaining the memory map of the storage medium which stores the various data processing program which can be read by the printing apparatus which shows this embodiment. It is a figure explaining the network printing process of the conventional printing system.

Explanation of symbols

300 Security server 310a-310c Host PC
301-304 Printer

Claims (16)

An image forming apparatus capable of communicating with a server device,
Notification means for notifying the server device of the status of the interface;
Based on an instruction from the server device, control means for switching the state of the interface other than that used for communication with the server device from the valid state to the invalid state;
An image forming apparatus comprising:   The image forming apparatus according to claim 1, wherein an interface used for communication with the server apparatus is a network interface.   The image forming apparatus according to claim 1, wherein an interface other than that used for communication with the server apparatus is an interface locally connected to a data processing apparatus. A server device capable of communicating with a plurality of image forming apparatuses,
An acquisition means for acquiring an interface state from an image forming apparatus having a plurality of interfaces;
Instruction means for instructing an image forming apparatus having the plurality of interfaces to invalidate a state of a specific interface;
The server apparatus characterized by having. Display control means for displaying on the display unit a screen for instructing whether or not to invalidate the specific interface based on the state of the interface acquired by the acquisition means;
The instruction unit is configured to issue an instruction to invalidate a state of the specific interface to an image forming apparatus including the plurality of interfaces based on an input to a screen instructing whether or not the invalidation is possible. 4. The server device according to 4.   6. The server apparatus according to claim 5, wherein an interface used for communication with the image forming apparatus is a network interface.   6. The server apparatus according to claim 5, wherein the interface other than that used for communication with the image forming apparatus is an interface through which the image forming apparatus is locally connected to a data processing apparatus. An interface setting method in an image forming apparatus capable of communicating with a server device,
A notification step of notifying the server device of an interface status;
Based on an instruction from the server device, a control step of switching the state of the interface other than that used for communication with the server device from the valid state to the invalid state;
An interface setting method characterized by comprising:   9. The interface setting method according to claim 8, wherein the interface used for communication with the server device is a network interface.   9. The interface setting method according to claim 8, wherein the interface other than that used for communication with the server device is an interface locally connected to the data processing device. An interface setting method in a server apparatus capable of communicating with a plurality of image forming apparatuses,
An acquisition step of acquiring an interface state from an image forming apparatus having a plurality of interfaces;
An instruction step of instructing an image forming apparatus including the plurality of interfaces to invalidate a state of the specific interface acquired by the acquisition step;
An interface setting method characterized by comprising: A display control step for displaying on the display unit a screen for instructing whether or not to invalidate the specific interface based on the state of the interface acquired by the acquisition step;
The instructing step is configured to instruct an image forming apparatus including the plurality of interfaces to invalidate a state of the specific interface based on an input to a screen instructing whether or not the invalidation is possible. 11. The interface setting method according to 11.   12. The interface setting method according to claim 11, wherein the interface used for communication with the image forming apparatus is a network interface.   12. The interface setting method according to claim 11, wherein the interface other than that used for communication with the image forming apparatus is an interface through which the image forming apparatus is locally connected to a data processing apparatus.   15. A computer-readable storage medium storing a program for causing a computer to execute the interface setting method according to claim 8.   A program for causing a computer to execute the interface setting method according to claim 8.

Images