JP2008233322A - Information processor, information processing method, program and computer-readable recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To delay a situation where remaining capacity of an operation history information storing area in a computer becomes zero by decreasing chances to record operation history information when the operation history information storing area becomes small in the computer. <P>SOLUTION: When an operation log control part of the information processor detects the occurrence of an event (S1), it records log information in a log information storing area (S2), detects the remaining capacity of the log information storing area (S3) and determines whether the remaining capacity is equal to or under a predetermined threshold (S4). When it is equal to or under the threshold, the operation log control part reads out operation limit information (S5), and shifts a mode to a function utilization limit mode (S7) if it determines that the operation limit information shows the function utilization limit mode (S6), shifts the mode to a user limit mode (S9) if it determines that the operation limit information shows the user limit mode (S8), and shifts the mode to an ID address access limit mode (S11) if it determines that the operation limit information shows the IP address access limit mode (S10), then it shifts the mode to a remaining port access limit mode (S12) if it determines that the operation limit information does not show the IP address access limit mode. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an information processing apparatus including a copier, a printer, a scanner, a fax machine, a multifunction machine having these functions, a personal computer, and peripheral devices of the personal computer, an information processing method and program, and a computer-readable recording medium. .

Conventionally, there has been a technique (for example, see Patent Document 1) for controlling whether or not to grant operation history information (log information) acquisition of a target device using a log operation setting file on a network.
Further, as a known technique, there is a method in which a warning screen is displayed to notify an administrator when a storage area for log information approaches a full state in a PC or its peripheral devices.
Japanese Patent Application No. 7-213453

However, as in the conventional technology, when the storage area for log information becomes full, log information collection is stopped or prohibited, or a warning screen is displayed in the full or near full state to notify the administrator. However, when an operation for acquiring log information thereafter occurs, there is a problem that log information about the operation is not recorded.
In the meantime, if there is a fatal device malfunction or malicious access on the network, the log information is not recorded.
The present invention has been made in view of the above points, and when the storage area of the operation history information is reduced, the opportunity for recording the operation history information is reduced to delay the remaining storage area of the operation history information from being lost. For the purpose.

In order to achieve the above object, the present invention provides the following information processing apparatus, information processing method, program, and recording medium.
(1) An information processing apparatus comprising recording means for recording the operation history information of the own apparatus and restriction means for restricting the own apparatus based on the remaining amount detected in the area for recording the operation history information.
(2) In the information processing apparatus as described above, with the above restriction, information processing is performed so that even if there is an execution request for a function that has been designated as unavailable in advance among a plurality of functions of the own apparatus, apparatus.
(3) In the information processing apparatus as described above, according to the above restriction, the information processing apparatus is configured to reject login from a user who has been designated as unavailable in advance among the users of the own apparatus.
(4) In the information processing apparatus as described above, according to the above restriction, the information processing apparatus is configured to reject access from an IP address that is previously designated as unusable.

(5) In the information processing apparatus as described above, according to the restriction, the information processing apparatus is configured to deny access to a port that has been designated as unavailable in advance.
(6) In the information processing apparatus as described above, with the above limitation, the first is configured not to execute even if there is an execution request for a function that is designated in advance as unavailable among a plurality of functions of the own apparatus. Restrictions, a second restriction that rejects logins from users who are previously designated as unavailable among the users of the device, and denies access from IP addresses designated as unavailable beforehand An information processing apparatus that executes a third restriction to be performed and a fourth restriction to be denied access to a port that has been designated as unavailable in advance in the order assigned to each of a plurality of remaining levels set in advance.

(7) An information processing method comprising a recording step for recording operation history information of the own device and a restriction step for restricting the own device based on the remaining amount detected in the area for recording the operation history information.
(8) In the information processing method as described above, with the above limitation, an information processing method that does not execute even if there is an execution request for a function that is previously designated as unusable among a plurality of functions of the own device.
(9) In the information processing method as described above, in the above restriction, an information processing method for rejecting login from a user who has been designated as unavailable in advance among users of the device.
(10) In the information processing method as described above, according to the above restriction, an information processing method that denies access from an IP address that has been designated as unavailable in advance.

(11) In the information processing method as described above, according to the above restriction, an information processing method that denies access to a port that has been designated as unavailable in advance.
(12) In the information processing method as described above, according to the above limitation, the first restriction is to prevent execution even if there is an execution request for a function that is specified in advance as unavailable among a plurality of functions of the own device. Restrictions, a second restriction that rejects logins from users who are previously designated as unavailable among the users of the device, and denies access from IP addresses designated as unavailable beforehand An information processing method for executing a third restriction to be performed and a fourth restriction to refuse access to a port designated as unavailable in advance in an order assigned to each of a plurality of remaining levels set in advance.

(13) causing a computer to execute a recording procedure for recording the operation history information of the own device and a restriction procedure for restricting the own device based on the remaining amount detected in the area for recording the operation history information program.
(14) In the program as described above, under the above limitation, a program that is not executed even if there is an execution request for a function that is designated in advance as unavailable among a plurality of functions of the own device.
(15) In the program as described above, according to the restriction, a program for rejecting login from a user who has been designated as unavailable in advance among users of the device.
(16) In the program as described above, a program that denies access from an IP address that has been previously designated as unusable under the restriction.

(17) In the above program, a program that denies access to a port that has been previously designated as unusable under the restriction.
(18) In the program as described above, the above restriction includes a first restriction that does not execute even if there is an execution request for a function that is designated in advance as unavailable among a plurality of functions of the own device, A second restriction that denies a login from a user designated as unavailable in advance among the users of the device, a third restriction that refuses access from an IP address designated as unavailable beforehand, A program that executes a fourth restriction that denies access to a port that is designated as unusable in the order assigned for each of a plurality of remaining levels set in advance.
(19) A computer-readable recording medium on which the above program is recorded.

The information processing apparatus and the information processing method according to the present invention reduce the opportunity to record the operation history information when the operation history information storage area decreases, and delay the remaining operation history information storage area from being lost, It is possible to take measures such as saving the log information from the storage device to another location before the storage area for the operation history information runs out.
Further, the program according to the present invention reduces the opportunity to record the operation history information when the operation history information storage area is reduced in the computer, and delays the remaining of the operation history information storage area from being lost. Functions can be realized.
Furthermore, the computer-readable recording medium of the present invention can easily introduce the program into a computer.

Hereinafter, the best mode for carrying out the present invention will be specifically described with reference to the drawings.
〔Example〕
FIG. 1 is a block diagram showing a system configuration example including a multi-function peripheral according to an embodiment of the information processing apparatus of the present invention.
In this system, a multifunction device 1 and a user terminal device (PC) 2 are connected via a network 3 so that they can communicate with each other.
Although only one device is shown in the figure, a plurality of multifunction peripherals and PCs are connected on the network 3, and illustration of these is omitted.

FIG. 2 is a block diagram showing an internal configuration of the multifunction machine shown in FIG.
The multi function device 1 corresponds to the information processing apparatus according to the present invention, and is a copier, a printer, a scanner, a fax machine, a multi function device (MFP) having these functions, a personal computer, a peripheral device of the personal computer, and a CPU 10, It comprises a ROM 11, a RAM 12, a storage device 13, an image reading device 14, a printing device 15, a network controller 16, and an operation port 17.
The CPU 10 is an arithmetic unit that executes a program stored in the ROM 11. The CPU 10 controls the entire MFP 1, and various functions relating to restrictions according to the remaining amount of the area for recording the operation history information according to the present invention. Is realized.
The ROM 11 is a read-only memory device that stores a program executed by the CPU 10.

The RAM 12 is a random access memory device for the CPU 10 to operate a program and temporarily store data.
The storage device 13 stores image information (image data) read by the image reading device 14 and image data received via the network controller 16 (for example, facsimile reception, mail reception or file reception), and is initialized even when the power is turned off. A non-volatile storage device for storing various setting information such as values, and a log information storage area ("log information storage area" for storing operation history information (log information) of the operation status generated in the multifunction device 1 Is also assigned).

The image reading device 14 is a scanner device for converting an image on a recording medium including a paper document into image information (bitmap image data).
The printing device 15 is a printing device that prints image information on paper and outputs it.
The network controller 16 is connected to the network 3 and controls various communications including Ethernet (registered trademark), a wireless network, and the Internet, and performs hardware control of data exchange with each device on the network 3. It is also a controller. In addition, facsimile transmission / reception is performed with an apparatus capable of facsimile communication including an external facsimile apparatus via a communication network including a public line.
The operation port 17 is a device including a display unit and an operation unit for displaying various information to the user and allowing the user to input various operation information with reference to the information.

FIG. 3 is a functional block diagram showing a functional configuration of the CPU 10 shown in FIG.
The CPU 10 executes an operation log control unit 20, a copy control unit 21, a scanner control unit 22, a printer control unit 23, a fax (FAX) control unit 24, a user authentication by executing a program according to the present invention stored in the ROM 11. Each function part of the control part 25 and the network control part 26 is implement | achieved, and the information processing method which concerns on this invention is performed.
The operation log control unit 20 is a functional unit that executes various processes including log information recording and a transition process to various restriction modes described later.
The copy control unit 21 is a functional unit that controls the scanner control unit 22 and the printer control unit 23 to control the copy operation.
The scanner control unit 22 is a functional unit that controls the image reading operation of the image reading device 14.

The printer control unit 23 is a functional unit that controls the printing apparatus 15 to control the printing operation.
The FAX control unit 24 is a functional unit that controls the network controller 16 to control a facsimile transmission / reception operation with a facsimile apparatus on the network 3.
The user authentication control unit 25 is a functional unit that controls various authentication processes including user authentication of the user of the multifunction device 1.
The network control unit 26 is a functional unit that controls the network controller 16 and controls the procedure of data exchange with devices on the network 3, and includes a firewall that restricts the use of the multifunction device 1 from the network 3. It also functions.
The program according to the present invention is recorded on an optical disk including CD-R, CD-RW, DVD, and other recording media, and the CPU 10 can be executed on the ROM 11 (in this case, a rewritable memory) and the storage device 13. You may make it install in.

Next, the restriction process in the multifunction machine 1 will be described.
FIG. 4 is a flowchart showing a restriction process in the multifunction machine shown in FIG.
In step 1 (indicated by “S” in the figure), the operation log control unit 20 of the CPU 10 generates various events including authentication by log-in, copy / scan operation, printing, data transmission / reception, and setting change by itself. When detected, in step 2, log information is recorded and stored in the log information storage area of the storage device, and in step 3, the remaining amount of the log information storage area is detected.
For example, when the log information storage area is composed of a plurality of tables, the remaining amount of tables storing log information (the number of empty tables / the total number of tables × 100 (%)) is obtained.
Note that the remaining amount of the log information storage area may be obtained by capacity.

In step 4, the operation log control unit 20 determines whether or not the remaining amount of the log information storage area is equal to or less than a preset threshold value (%). If it is determined that the remaining amount of the log information storage area is not less than or equal to the threshold value, the process returns to step 1 to repeat the above-described processing. The operation restriction information registered in advance in the apparatus is read out.
This operation restriction information is information that is set before the MFP is shipped or set by the administrator before the user uses it, and automatically when the remaining amount of the log information storage area is determined to be less than or equal to the threshold value. This is information indicating the type of restriction mode to be transferred.

  In this embodiment, a function use restriction mode (first restriction) is set so that even if there is an execution request for a function that has been designated as unavailable in advance among a plurality of functions of the multifunction device 1, The user restriction mode (second restriction) for rejecting the login from the user who has been designated as unusable among the users of the MFP 1 and the access from the IP address designated as unusable in advance The IP address access restriction mode (third restriction) for rejecting the IP address and the port access restriction mode (fourth restriction) for rejecting access to the port designated as unavailable in advance will be described.

In step 6, the operation log control unit 20 determines whether or not the operation restriction information indicates the function use restriction mode. If the operation restriction information does not indicate the function use restriction mode, the operation log control unit 20 proceeds to step 8 and uses the function. If the restriction mode is indicated, the process shifts to the function use restriction mode in step 7 and the process is terminated.
In step 8, the operation log control unit 20 determines whether or not the operation restriction information indicates the user restriction mode. If the operation restriction information does not indicate the user restriction mode, the operation log control unit 20 proceeds to step 10. If the restriction mode is indicated, in step 9, the user restriction mode is entered and this process is terminated.

  In step 10, the operation log control unit 20 determines whether the operation restriction information indicates the IP address access restriction mode. If the operation restriction information indicates the IP address access restriction mode, the operation log control unit 20 determines in step 11 that the IP address access restriction mode. If the IP address access restriction mode is not indicated, the remaining port access control mode is entered, so that the port access restriction mode is entered at step 12 and the process is terminated.

Next, processing in the function use restriction mode will be described.
FIG. 5 is a flowchart showing processing in the function use restriction mode shown in FIG.
When the operation log control unit 20 detects the occurrence of the operation of the function execution request by the user in step 21, in step 22, the operation log control unit 20 reads information indicating the type of function designated as unavailable in the function use restriction mode.
The information indicating the type of function designated as unusable is, for example, a copy function or a facsimile function, and the administrator disables the function restriction function in the function restriction function and the function on the multifunction device 1 in the operation restriction information. The function selected as the function is also set and stored, for example, in the storage device 13.

  In step 23, the action log control unit 20 collates the function requested to be executed by the user with the function described in the action restriction information, and designates the function requested to be executed by the user as unusable set in the action restriction information. It is determined whether or not the function corresponds to the requested function, and if so, execution of the application software program of the function requested to be executed in step 24 is prohibited. For example, when the copy function is prohibited, the copy control unit 21, the scanner control unit 22, and the printer control unit 23 are notified so as not to operate, and the copy control unit 21, the scanner control unit 22, and the printer control unit 23 respectively 14 and the printing apparatus 15 are controlled not to operate. Then, a message indicating that the requested function cannot be used because the log information storage area is near full is displayed on the operation port 17 to notify the user. If it is not desired to inform a general user that the log information storage area is in a near-full state, only a message notifying that the requested function cannot be used may be notified.

  On the other hand, when the operation log control unit 20 determines that the function requested to be executed by the user in step 23 does not correspond to the function designated as unusable set in the operation restriction information, the operation log control unit 20 restricts to another control unit. First, in step 25, the application software program having the requested function is executed. For example, in the case of a print request, the printer control unit 23 controls the printing device 15 to execute printing.

  In this way, when it is detected that the log information storage area is in the near full state, the function is limited so as not to provide a part of the functions of the own device, for example, a large amount of logs in the near full state By stopping the applications that collect and functions that may accept many accesses from the network, the amount of log information acquired by reducing the opportunity to use the multifunction device is reduced, and the log information storage area is consumed. Thus, it is possible to take measures such as saving log information from the storage device to another location while delaying falling into a full state.

Next, processing in the user restriction mode will be described.
FIG. 6 is a flowchart showing processing in the user restriction mode shown in FIG.
In step 31, when the user authentication control unit 25 detects the occurrence of a login operation to the multifunction device by the user, the user authentication control unit 25 performs authentication processing of the login information input by the user, and the user ID of the user registered in advance as a user. If the password does not correspond to the password, the login is not permitted due to the authentication failure, but if the authentication is successful, the login information is notified to the operation log control unit.
In step 32, when the operation log control unit 20 receives the login information notification from the user authentication control unit, the operation log control unit 20 reads out the login information of the user designated to be unavailable in the user restriction mode. This login information is, for example, a user ID and password uniquely assigned to each user, and the administrator logs in the user who disables the MFP 1 together with the user restriction mode in the operation restriction information. Are also set, for example, stored in the storage device 13.

  In step 33, the operation log control unit 20 checks the login information input by the user against the login information described in the operation restriction information, and whether the user who requested the login corresponds to the user designated as unavailable. If yes, reject the login of the user requested to log in at step 34, and in the operation port, “The log information storage area is near full and the user is restricted and cannot log in and use it. Is displayed to notify the user. In addition, when a login request is made from the outside via the network, the above message is notified to the login requesting PC. If it is not desired to inform a general user that the log information storage area is in a near-full state, only a message notifying that the requested function cannot be used may be notified.

On the other hand, if the operation log control unit 20 determines that the user who requested the login in step 33 does not correspond to the user designated as unusable, the operation log control unit 20 notifies the user authentication control unit of authentication permission. The user authentication control unit 25 permits login to the user who has made a login request, and enables the use of the multifunction device 1.
In this way, when it is detected that the log information storage area is in a near-full state, the remaining amount of the log information storage area is less than a predetermined amount among the users registered in the multifunction device 1 in advance. The amount of log information acquired by restricting users who are registered as users who will not be used when the number of users is reduced from login and not using the multifunction device, and reducing the opportunity to use the multifunction device Can be reduced, the consumption of the log information storage area can be suppressed and the full state can be delayed, and during that time, the log information can be saved from the storage device to another location.

Next, processing in the IP address access restriction mode will be described.
FIG. 7 is a flowchart showing processing in the IP address access restriction mode shown in FIG.
In step 41, the operation log control unit 20 reads out an IP address that is designated as being inaccessible in the IP address access restriction mode.
The IP address designated as unusable for access is given to a device that makes it impossible for the administrator to access and use the multifunction device 1 via the network together with the IP address access restriction mode in the operation restriction information. The IP address is also set and stored in the storage device 13, for example.
In step 42, the network control unit is notified of the IP address designated to be unavailable for access.

  In step 43, the network control unit 26 rejects the access even if there is an access request from the counterpart of the IP address notified from the operation log control unit. It is recommended to notify the message “Not available”. If it is not desired to inform a general user that the log information storage area is in a near-full state, only a message notifying that the requested function cannot be used may be notified.

  In this way, when it is detected that the log information storage area is in a near-full state, a user whose IP address that denies access to the multifunction device 1 is registered is denied access from the outside. Limiting not to use the multifunction device, reducing the amount of log information acquired by reducing the opportunity to use the multifunction device, reducing the consumption of the log information storage area, delaying falling into the full state, In the meantime, it is possible to take measures such as saving log information from the storage device to another location.

Next, processing in the port access restriction mode will be described.
FIG. 8 is a flowchart showing processing in the port access restriction mode shown in FIG.
In step 51, the operation log control unit 20 reads out the port number designated as unavailable access in the port access restriction mode, and in step 52, notifies the network control unit of the port number designated as unavailable access, In step 53, the network control unit 26 denies access to the port of the port number notified from the operation log control unit and, for example, gives a message to the operation port that “the log information storage area cannot be used because it is near full”. It is good to notify. If it is not desired to inform a general user that the log information storage area is in a near-full state, only a message notifying that the requested function cannot be used may be notified.

Further, in the above-described processing, the port number information permitted from the operation restriction information in the near-full state may be read so that only the relevant port is permitted to access.
In this way, when it is detected that the log information storage area is in a near-full state, it is acquired by denying and limiting access to the port with the port number registered in advance and reducing the opportunity to use the multifunction device. It is possible to take measures such as reducing the amount of log information to be stored, delaying consumption of the log information storage area and falling into a full state, and evacuating the log information from the storage device to another location during that time.

  When the MFP 1 of this embodiment detects that the log information storage destination area is near full, the MFP 1 reads the operation restriction information set in advance by the administrator and executes the restriction method indicated by the operation restriction information. Log information is acquired during operation by reducing the consumption of the log information storage area, delaying the full state, and gaining time for countermeasures such as saving log information during that time. It is possible to prevent the MFP from being stopped because the log information cannot be acquired.

Next, in the above-described embodiment, the case where the threshold value to be compared with the remaining amount of the log information storage area is set to one has been described. However, if a plurality of threshold values are set, the remaining log information storage area remains. The amount can be detected in stages, and the number of restriction targets may be increased at each stage.
First, the threshold is set as 0 <d <c <b <a <100, and the operation log control unit 20 starts from the time when the remaining amount of the log information storage area is less than a to the state of b or more until the multifunction machine Transition to the first restriction mode that prevents execution even if there is an execution request for a function that is designated as unavailable in advance among a plurality of functions of 1 and executes the processing in the function use restriction mode. Let
In addition to the first restriction, the log information storage area remaining from the remaining amount is less than b, and in addition to the first restriction, from the users who have been designated as unavailable in advance among the users of the MFP 1 The mode is shifted to a mode in which the second restriction for rejecting login is also executed, and the process in the user restriction mode is also executed.

Furthermore, until the remaining amount of the log information storage area is less than c and is greater than or equal to d, in addition to the first and second restrictions, access from an IP address previously designated as unusable is rejected. The mode is shifted to the mode for executing the third restriction, and the processing in the IP address access restriction mode is also executed.
Then, when the remaining amount of the log information storage area is less than d, in addition to the first to third restrictions, a fourth restriction that denies access to a port designated as unavailable in advance is also executed. The mode is shifted to and the processing in the port access control mode is also executed.
In this way, the remaining amount of the log information storage area is detected in stages, and the limit items are gradually increased at each stage.
In this way, the remaining amount of the log information storage area is detected step by step, and the type of operation restriction content is increased for each detection, so that the log information storage region is gradually increased according to the remaining amount of the log information storage area. The limit can be strengthened.

In the above embodiment, the remaining amount of the log information storage area is viewed, but the usage rate and usage amount may be viewed.
FIG. 9 is a diagram of an operation restriction setting work screen for each usage rate of the log information storage area.
For example, if the administrator sets so as not to restrict when the log information storage area usage rate is 80%, the administrator uses the log information storage area usage rate of 80% on the operation restriction setting work screen displayed in the operation port. Touch the button to set no restriction in the time column (shown with diagonal lines in the figure).
If the log information storage area usage rate is set to 90%, if it is set to be restricted, the log information storage area usage rate displayed on the operation port displayed in the operation port in the column when the usage rate is 90%. Touch the button to set the restriction (shown with diagonal lines).

FIG. 10 is a diagram of a restriction item selection setting screen when the usage rate of the log information storage area is 90%.
When the log information storage destination area usage rate is set to 90% when the log information storage destination area usage rate is 90%, the log information storage area usage rate shown in FIG. 10 is 90%. When the usage rate of the log information storage area reaches 90%, the mode type to be executed by the multifunction device is selected.

Here, the following modes can be selected: non-administrator unavailable, scanner unavailable, fax unavailable, copy unavailable, printer unavailable, IP address restriction, and port access restriction. The above-mentioned function use restriction mode is that the scanner cannot be used, the fax cannot be used, the copy cannot be used, and the printer cannot be used. The non-administrator cannot use the user restriction mode, and the IP address restriction is the IP address access restriction. Mode, and the port restriction is the port access restriction mode.
Here, for example, in order to select the IP address restriction mode, the IP address restriction button is touched (shown by hatching in the figure).

FIG. 11 is a diagram of a screen for setting an IP address range for restricting access in the IP address restriction mode.
When IP address restriction is set on the restriction item selection setting screen when the usage rate of the log information storage area is 90%, a screen for setting an IP address range for restricting access in the IP address restriction mode shown in FIG. Switch to.
On the screen for setting the IP address range for restricting access in the IP address restriction mode, the IP address range for which access is permitted is set even when the log information storage area usage rate is 90%. Therefore, access to IP addresses outside this range is denied.

In this manner, the operation restriction setting for each usage rate of the log information storage area of the storage device 13 can be performed on the device setting screen for the administrator.
In the above screen example, the setting is made such that the restriction is not performed at 80% and the restriction is performed at 90%, but it is more desirable that the administrator can arbitrarily set the usage rate.
For example, when 80% is exceeded, the use of faxes is suspended, when 90% is exceeded, other than copying is suspended. When 99% is exceeded, only access from the administrator's PC is allowed, and only the administrator can log in to the device. You can make settings that change the contents of restrictions in stages, such as setting status.
If the setting is such that only the administrator can log in when the remaining amount becomes 1%, the log information can be saved during that time.

  When the log information storage area detects the near full state, the MFP 1 of this embodiment reads the operation restriction information set in advance by the administrator, and according to the restriction method indicated by the operation restriction information. The behavior of subsequent operations can be changed.

  The information processing apparatus according to the present invention can be applied to all information processing apparatuses including printers, scanners, fax machines, copiers, multifunction machines having these functions, personal computers, and peripheral devices of personal computers.

1 is a block diagram illustrating an example of a system configuration including a multifunction peripheral according to an embodiment of an information processing apparatus of the present invention. FIG. 2 is a block diagram illustrating an internal configuration of the multifunction machine illustrated in FIG. 1. It is a functional block diagram which shows the function structure of CPU10 shown in FIG. FIG. 2 is a flowchart showing a restriction process in the multifunction machine shown in FIG. 1. It is a flowchart figure which shows the process at the time of the function use restriction | limiting mode shown in FIG.

It is a flowchart figure which shows the process at the time of the user restriction | limiting mode shown in FIG. FIG. 5 is a flowchart showing processing in the IP address access restriction mode shown in FIG. 4. FIG. 5 is a flowchart showing processing in the port access restriction mode shown in FIG. 4. It is a figure of the operation | movement restriction | limiting setting work screen for every usage rate of a log information storage area. It is a figure of the selection setting screen of a restriction item when the usage rate of a log information storage area is 90%. It is a figure of the screen which sets the range of the IP address which restrict | limits access in the mode of IP address restriction | limiting.

Explanation of symbols

1: MFP 2: User terminal device (PC) 3: Network 10: CPU 11: ROM 12: RAM 13: Storage device 14: Image reading device 15: Printing device 16: Network controller 17: Operation port 20: Operation log Control unit 21: Copy control unit 22: Scanner control unit 23: Printer control unit 24: Fax (FAX) control unit 25: User authentication control unit 26: Network control unit

Claims (19)

  An information processing apparatus comprising: recording means for recording operation history information of the own apparatus; and restriction means for restricting the own apparatus based on a remaining amount detected in an area for recording the operation history information .   The information processing apparatus according to claim 1, wherein, in the restriction, the information processing apparatus is configured not to execute even if there is an execution request for a function that has been designated as unavailable in advance among a plurality of functions of the own apparatus.   The information processing apparatus according to claim 1, wherein the restriction rejects a login from a user who has been designated as unavailable in advance among users of the apparatus.   2. The information processing apparatus according to claim 1, wherein the restriction denies access from an IP address that is previously designated as unusable.   The information processing apparatus according to claim 1, wherein the restriction denies access to a port designated as unavailable in advance.   In the above-mentioned restriction, among the first restriction that prevents execution even if there is an execution request for a function that is designated as unavailable in advance among a plurality of functions of the own apparatus, A second restriction for rejecting login from a user designated in advance as unavailable, a third restriction for rejecting access from an IP address designated as unavailable in advance, and use in advance The information processing apparatus according to claim 1, wherein the fourth restriction that denies access to the port designated to be disabled is executed in the order assigned to each of a plurality of remaining levels set in advance.   An information processing method comprising: a recording step of recording operation history information of the own device; and a restriction step of restricting the own device based on a remaining amount detected in an area for recording the operation history information.   8. The information processing method according to claim 7, wherein the restriction does not execute even if there is an execution request for a function that is designated as unavailable in advance among a plurality of functions of the own device.   8. The information processing method according to claim 7, wherein the restriction rejects a login from a user who has been designated as unusable in advance among users of the device.   8. The information processing method according to claim 7, wherein, in the restriction, access from an IP address designated as unavailable in advance is rejected.   8. The information processing method according to claim 7, wherein the restriction denies access to a port designated in advance as unavailable.   In the above-mentioned restriction, among the first restriction that prevents execution even if there is an execution request for a function that is designated as unavailable in advance among a plurality of functions of the own apparatus, A second restriction for rejecting login from a user designated in advance as unavailable, a third restriction for rejecting access from an IP address designated as unavailable in advance, and use in advance 8. The information processing method according to claim 7, wherein the fourth restriction for denying access to the port designated as impossible is executed in the order assigned for each of a plurality of remaining levels set in advance.   A program for causing a computer to execute a recording procedure for recording operation history information of the own device and a restriction procedure for restricting the own device based on a remaining amount detected in an area for recording the operation history information.   14. The program according to claim 13, wherein the restriction does not cause execution even if there is an execution request for a function that has been designated as unavailable in advance among a plurality of functions of the device itself.   14. The program according to claim 13, wherein, in the restriction, a login from a user who has been designated as unusable in advance among users of the device is rejected.   14. The program according to claim 13, wherein the restriction denies access from an IP address designated as unavailable in advance.   14. The program according to claim 13, wherein the restriction denies access to a port designated as unavailable in advance.   In the restriction, the first restriction that is not executed even if there is an execution request for a function that is designated as unavailable in advance among a plurality of functions of the own apparatus, and is unavailable in advance among users of the own apparatus. A second restriction that denies login from a user designated in the above, a third restriction that denies access from an IP address designated in advance as unavailable, and an access to a port designated in advance as unavailable. 14. The program according to claim 13, wherein the fourth restriction to be rejected is executed in the order assigned to each of a plurality of remaining levels set in advance.   The computer-readable recording medium which recorded the program as described in any one of Claims 13 thru | or 18.

Images