JP2010253724A - Image forming apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that communication is disabled if a port number used by a specific application is rejected by filtering setting when the port number has been changed to be used in an image forming apparatus capable of filtering by IP addresses and port numbers. <P>SOLUTION: The filtering setting is checked when the port number used by the specific application is changed. An image forming apparatus displays to confirm that, if the number is set to be rejected, the port number is rejected, a port number desired to be changed is added to the filtering setting, and the port number before changed which is used at present and is not to be used is deleted from the filtering setting, and setting is reflected when the number is set to be permitted. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to filter setting of an image forming apparatus.

  An image forming apparatus, which is equipped with a printer that prints image data input from a scanner, further includes a communication interface, and can receive a print job by communicating with an external device such as a host computer has been put into practical use. ing. In addition, a function of directly saving data scanned by a scanner to a hard disk of a computer on a network has been put into practical use. Furthermore, a function of causing a scanner of a multifunction machine to execute a scan from a host computer and directly saving it to a hard disk of the host computer has been put into practical use.

  In addition, it has a function of acquiring the state of the multifunction peripheral (such as an idle state or an error state) from a client on the network on a host computer on the network, or setting a device.

  As described above, since the multifunction device has put various network functions into practical use, the multifunction device is always connected to the network, and performs various operations according to data transmitted from the network.

  On the other hand, not all users who use host computers on the network are users who use the normal method, and there may be users who attack the multifunction device in an unauthorized manner. Therefore, there is a need for a technique for protecting the multifunction peripheral from such users. In some cases, there are restrictions on the network so that only certain people can use it. For example, this is a case where the MFP is dedicated to the department and is not desired to be used by a user outside the department.

  A network filter function has been realized from such user needs. If a packet is sent using the address assigned to the client PC that is the host and the restricted address exists in the received packet, the MFP immediately terminates communication. Discard all communications from restricted users. In this way, a filter function mechanism that protects the multifunction device from unauthorized use by the user is realized. Currently, a multi-function machine that realizes a filter function of MAC address, IP, and IPPort has been developed.

  However, the settings for these filter functions may be complicated, so that the filter settings are duplicated and the rules become complicated, or the filter settings function unintentionally and communication is cut off. Sometimes. In order to solve these problems, a mechanism for performing a confirmation display or temporarily disabling the filter is considered.

  The following patent document 1 can be mention | raise | lifted as a prior art example.

JP 2006-192645 A

  However, there is a case where the filtering setting is set so that only communication for a specific IP address and a specific port number is permitted on the image forming apparatus side. In this case, there is a problem that communication is interrupted by changing the port number used by the application to a port number that matches the filtering setting.

  Filtering setting means (202) capable of filtering settings for enabling / disabling communication with a specific device, and the filtering settings set in the filtering settings are stored in a setting storage area (203). The storage unit (202), the port number setting unit (204) that can change the port number used by the application of the image forming apparatus, and the setting when the port number is changed by the port number setting unit Confirming the filtering settings stored in the storage area (203), and detecting that the port number to be changed is rejected by the filtering settings, and the communication is rejected by the detecting means And allow the port number you are trying to configure The display means (201) for confirming and displaying on the display section that the rule that permits the port number currently used and the deletion of the rule that permits the port number being used are deleted, and the result of confirmation display on the display means (201) is allowed to be changed. In this case, the image forming apparatus further comprises setting means (205) for adding a rule permitting the port number to be set and deleting the rule permitting the currently used port number.

  In an image forming apparatus that can perform filtering settings and can change the port number used by the application, it is possible to solve the problem that communication cannot be performed by changing the port number used by the application. Further, by automatically changing the filtering setting, unnecessary ports cannot be opened, so that security can be ensured and user convenience can be improved.

Hardware configuration diagram of an image forming apparatus according to the present invention Software block diagram of image forming apparatus according to the present invention Flow chart of IP filter processing according to the present invention Schematic diagram of IP filter processing according to the present invention Flowchart of port filter processing according to the present invention Schematic diagram of port filter processing according to the present invention Flowchart of port number setting processing according to the present invention Schematic diagram of port number setting processing according to the present invention

  The best mode for carrying out the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram illustrating a hardware configuration of an image forming apparatus 100 according to an embodiment of the present invention.

  The CPU 101 executes a software program of the image forming apparatus and controls the entire apparatus. A ROM 102 is a read-only memory, and stores a boot program of the apparatus, fixed parameters, and the like. A RAM 103 is a random access memory, and is used for temporary data storage when the CPU 101 controls the apparatus. The HDD 104 is a hard disk drive and is used to store various data such as print data. The printer I / F control unit 105 is a device that controls the printer 111. The NVRAM 106 is a nonvolatile memory for storing various setting values of the image forming apparatus. Panel control unit 107 controls operation panel 110 to display various information and input instructions from the user. The network I / F control unit 108 controls transmission / reception of data with the network 112. A CPU 101, ROM 102, RAM 103, HDD 104, printer I / F control unit 105, NVRAM 106, panel control unit 107, and network I / F control unit 108 are connected to the bus 109. A bus 109 is a system bus through which control signals from the CPU 101 and data signals between devices are transmitted and received.

  FIG. 2 is a block diagram illustrating a software configuration of the image forming apparatus 100.

  The panel control unit 201 is a module that controls a panel including processing corresponding to button pressing of the operation panel 110. The filter setting unit 202 is a module that provides a filtering function when there is a setting request related to filtering settings, and stores the set filtering settings in the setting storage area 203.

  The port setting unit 204 is a module for changing the port number used by the application. The filter detection unit 205 confirms the filtering setting stored in the setting storage area 203 for the port number for which the change request has been made. This is a module for confirming whether or not the port number to be changed is a port number that is blocked by the saved filtering setting.

FIG. 3 is a flowchart when the image forming apparatus 100 performs IP filtering, and FIG. 4 is a schematic diagram when the image forming apparatus 100 performs IP filtering. When the filtering setting function is selected from the operation panel 110, the panel control unit 201 receives the processing and calls the filter setting unit 202. (S301) A schematic diagram of the IP filter setting 401 is displayed on the operation panel 110 at that time. In filter use 402, ON / OFF of whether to enable or disable the filter can be selected. When the filter is enabled, the filter setting is applied. When the filter is disabled, the filter setting is not applied. (S302) In the default policy 403, it is basically possible to select whether to permit or reject all of the filter setting policies. In the filter registration 404, a registered filter can be confirmed and a new filter can be registered. In the confirmation of the registered filter, the filter settings registered so far can be confirmed. In order to add a new filter setting to the filter setting (not shown), an input of an IP address is prompted as in 405. When the input of the IP address is detected (S303), the filter setting unit 202 registers the IP address in the setting storage area 203. (S304) The filter setting unit 202 confirms whether the default policy is all permitted or denied (S305). If all are denied, transmission / reception of IP addresses stored in the setting storage area is permitted and transmission / reception of other IP addresses is performed. To refuse. (S306) When all are permitted, transmission / reception of the IP address stored in the setting storage area is rejected, and transmission / reception of other IP addresses is permitted. (S307)
FIG. 5 is a flowchart when the image forming apparatus 100 performs the port filter process, and FIG. 6 is a schematic diagram when the image forming apparatus 100 performs the port filter process. When the filtering setting function is selected from the operation panel 110, the panel control unit 201 receives the processing and calls the filter setting unit 202. (S501) A schematic diagram of the port filter setting 601 is displayed on the operation panel 110 at that time. In the use filter 602, it is possible to select ON / OFF whether the filter is valid or invalid. When the filter is valid, the filter setting is applied. When the filter is invalid, the filter setting is not applied. (S502) In the default policy 603, it is basically possible to select whether to permit or reject all of the filter setting policies. In the filter registration 604, a registered filter can be confirmed and a new filter can be registered. In the confirmation of the registered filter, the filter settings registered so far can be confirmed. (Not shown) In the new filter addition 605, it is possible to select whether to set a filter for a registered IP filter or to set a filter for a single port number. (S503) When setting for the IP filter, selection is made from the registered IP address as in 606. (S504) When an IP address is selected, input of a port number is prompted in order to set a port filter for the IP address as in 607. When the port number is input (S505), the filter setting unit 202 registers the combination of the IP address and the port number in the setting storage area 203. (S506) The filter setting unit 202 confirms whether the default policy is all permitted or denied (S507). If all are rejected, the transmission / reception for the port number of the IP address stored in the setting storage area is permitted. Reject port number transmission / reception. (S508) When all are permitted, transmission / reception with respect to the port number of the IP address stored in the setting storage area is rejected, and transmission / reception of other port numbers is permitted. (S509) When setting a filter for a single port number, the user is prompted to input a port number as in 608. When the port number is input (S510), the filter setting unit 202 registers the port number in the setting storage area 203. (S511) The filter setting unit 202 confirms whether the default policy is all permitted or denied (S512). If all are denied, the transmission / reception for the port number stored in the setting storage area is permitted, and other port numbers are set. Reject transmission / reception. (S513) When all are permitted, transmission / reception with respect to the port number stored in the setting storage area is rejected, and transmission / reception of other port numbers is permitted. (S514)
FIG. 7 is a flowchart when the image forming apparatus 100 performs the port number setting process, and FIG. 8 is a schematic diagram when the image forming apparatus 100 performs the port number setting process. When the port number setting function is selected from the operation panel 110, the panel control unit 201 receives the processing and calls the port setting unit 204. At this time, a schematic diagram for setting the port number 801 is displayed on the operation panel 110. 801 displays a list of applications whose port numbers can be changed. When one of the applications is selected (S701), a port number change screen as shown in 802 is displayed. Here, as an example, the port number used by the RAW is changed from the default 9100 to 8100. (S702) When the port setting unit 204 sets the change of the port number, the filter detection unit 205 is called, and the filter detection unit 205 confirms the IP filter setting and the port filter setting stored in the setting storage area 203. (S703) The filter detection unit checks whether there is a setting in which the changed port number is rejected by the filter setting. (S704) If there is a port number to be set, such as 803 is a number rejected by the filter setting, and a rule permitting the port number to be set is added and the port number currently used Confirm that you want to delete the rule that allows.

  (S705) Check whether the user has input OK or cancel. (S706) If OK is input, add a rule permitting the port number to be set as shown in 804 and use it now. Displays that the rule that allows the port number is deleted. If the user inputs cancel, the process is canceled. (S708) The filter detection unit confirms again whether there is a setting in which the port number after the change is rejected by the filter setting (S704). If there is, the steps S705 to S708 are repeated. If it does not exist, a setting completion display is displayed as in 805 to complete the setting. (S709)

Claims (2)

  Filtering setting means (202) capable of filtering settings for enabling / disabling communication with a specific device, and the filtering settings set in the filtering settings are stored in a setting storage area (203). The storage unit (202), the port number setting unit (204) that can change the port number used by the application of the image forming apparatus, and the setting when the port number is changed by the port number setting unit Confirming the filtering settings stored in the storage area (203), and detecting that the port number to be changed is rejected by the filtering settings, and the communication is rejected by the detecting means And allow the port number you are trying to configure. The display means (201) for confirming and displaying on the display section that the rule that permits the port number currently used and the deletion of the rule that permits the port number being used are deleted, and the result of confirmation display on the display means (201) is allowed to be changed. In this case, the image forming apparatus further comprises setting means (205) for adding a rule permitting the port number to be set and deleting the rule permitting the currently used port number.   The image forming apparatus according to claim 1, wherein at least an IP address and a port number are included that can be subjected to filtering setting by the filtering setting unit.