JP2016212854A - Information processor, information processing method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent the execution of an unauthorized instruction which is generated by pressing a link, a button or the like on a web page down.SOLUTION: An information processor 1 capable of connecting a server through a network includes an acquisition part 112, a first display control part 111, a storage part 113, and a permission control part 114. The acquisition part 112 acquires a first screen including an execution procedure of a first instruction from the server. The first display control part 111 performs control for displaying the first screen acquired by the acquisition part 112. The storage part 113 stores one or more pieces of instruction information showing information on an instruction to be permitted to be executed. The permission control part 114 does not permit executing the first instruction in the case that instruction information corresponding to the execution procedure of the first instruction selected from the first screen does not exist among the one or more pieces of instruction information stored in the storage part.SELECTED DRAWING: Figure 4

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program.

  Conventionally, a mechanism for downloading and installing an application from a Web page provided by a Web server is known.

  For example, Patent Document 1 discloses a configuration in which an MFP downloads and installs software in conjunction with a distribution server that distributes software.

  In the prior art, when a user using an information processing apparatus such as an MFP presses a UI such as a link or button on a Web page provided from a Web server, the command pasted on the UI is displayed as information. It is unconditionally executed on the processing device. For this reason, in a situation where an application that is not permitted to be installed, such as spyware, is installed in the information processing device without permission, the user can attach a UI (for example, a startup instruction) to which the application is pasted. If the UI) on the Web page is pressed, an unauthorized command may be executed.

  The present invention has been made in view of the above, and an object thereof is to provide an information processing apparatus, an information processing method, and a program that can prevent execution of an unauthorized instruction.

  In order to solve the above-described problems and achieve the object, the present invention provides an information processing apparatus that can be connected to a server via a network, and includes a first screen including a procedure for executing a first command from the server. A first display control unit that performs control to display the first screen acquired by the acquisition unit, and one or more pieces of instruction information indicating information related to instructions that are permitted to be executed And the instruction information corresponding to the execution procedure of the first instruction selected from the first screen is not present in the storage unit and the one or more instruction information stored in the storage unit. And an availability control unit that does not permit execution of the first instruction.

  According to the present invention, it is possible to prevent execution of an unauthorized instruction.

FIG. 1 is a diagram illustrating an example of a schematic configuration of an information processing system. FIG. 2 is a diagram illustrating an example of a hardware configuration of the MFP. FIG. 3 is a diagram illustrating an example of the software configuration of the MFP. FIG. 4 is a diagram illustrating an example of functions that the MFP according to the first embodiment has. FIG. 5 is a diagram illustrating an example of the operation screen. FIG. 6 is a diagram illustrating an example of an application list screen. FIG. 7 is a diagram illustrating an example of a URL scheme. FIG. 8 is a diagram illustrating an example of a valid scheme stored in the storage unit. FIG. 9 is a diagram illustrating an example of the second screen. FIG. 10 is a diagram illustrating an example of a hardware configuration of the application market server. FIG. 11 is a diagram illustrating an example of functions of the application market server. FIG. 12 is a diagram illustrating an example of functions of the application server. FIG. 13 is a diagram illustrating an example of functions that the Web server has. FIG. 14 is a sequence diagram illustrating an example of an operation procedure of the information processing system according to the first embodiment. FIG. 15 is a sequence diagram illustrating another example of the operation procedure of the information processing system according to the first embodiment. FIG. 16 is a diagram for explaining the characteristics of the MFP according to the first embodiment. FIG. 17 is a diagram illustrating an example of functions that the MFP according to the second embodiment has. FIG. 18 is a diagram illustrating an example of the third screen. FIG. 19 is a sequence diagram illustrating an example of an operation procedure of the MFP according to the second embodiment.

  Hereinafter, embodiments of an information processing apparatus, an information processing method, and a program according to the present invention will be described in detail with reference to the accompanying drawings. Hereinafter, as an example of the information processing apparatus according to the present invention, a multifunction peripheral (MFP) that is an aspect of the image forming apparatus will be described as an example. However, the present invention is not limited to this. Note that a multifunction peripheral is a device having a plurality of different functions such as a copy function, a scanner function, a printer function, and a fax function.

(First embodiment)
FIG. 1 is a diagram illustrating an example of a configuration of an information processing system 100 according to the present embodiment. As shown in FIG. 1, the information processing system 100 includes an MFP 1, an application market server 2, an application server 3, and a Web server 4, which are connected to each other via a network 8.

  The application market server 2 is an example of a “server” that can be connected to the MFP 1 via the network 8. An application list screen in which an instruction to install the application on the MFP 1 is associated with the MFP 1 is displayed on the MFP 1. Provide for. More specific contents will be described later. In this example, an application that provides a function of acquiring an application list screen from the application market server 2 and displaying it on the MFP 1 (hereinafter sometimes referred to as “app market application”), among the applications displayed on the application list screen An application that provides a function of performing control for installing an application selected by the user into the MFP 1 (hereinafter, sometimes referred to as “installer”), an application that manages a legitimate scheme described later (hereinafter, “command management application”). Is installed in the MFP 1 in advance. Note that the function of the application market application is realized by using an application for providing the function of the Web browser, and may be collectively referred to as “browser application”. Specific contents of the MFP 1 will be described later.

  The application server 3 holds the applications displayed on the application list screen and distributes the applications in response to a request from the MFP 1. The Web server 4 provides a Web page in response to a request from the MFP 1. This Web page displays a UI (link, button, etc.) on which an instruction for a specific application is pasted. Details of these will be described later.

  Next, the hardware configuration of the MFP 1 will be described with reference to FIG. As illustrated in FIG. 2, the MFP 1 includes a main body 10 capable of realizing various functions such as a copy function, a scanner function, a fax function, and a printer function, and an operation unit 20 that receives a user operation. Note that accepting a user operation is a concept including accepting information (including a signal indicating a coordinate value of a screen) input according to the user operation. The main body 10 and the operation unit 20 are connected via a dedicated communication path 30 so that they can communicate with each other. The communication path 30 may be, for example, a USB (Universal Serial Bus) standard, but may be of any standard regardless of wired or wireless.

  The main body 10 can perform an operation corresponding to the operation received by the operation unit 20. The main body 10 can also communicate with an external device such as a client PC (personal computer), and can also perform an operation according to an instruction received from the external device.

  First, the hardware configuration of the main body 10 will be described. As shown in FIG. 2, the main body 10 includes a CPU 11, a ROM 12, a RAM 13, an HDD (hard disk drive) 14, a communication I / F (interface) 15, a connection I / F 16, and an engine unit 17. These are connected to each other via a system bus 18.

  The CPU 11 comprehensively controls the operation of the main body 10. The CPU 11 controls the overall operation of the main body 10 by executing a program stored in the ROM 12 or the HDD 14 or the like using the RAM 13 as a work area (work area), and the above-described copy function, scanner function, fax function, printer function, etc. Implement various functions.

  The communication I / F 15 is an interface for connecting to the network 8. The connection I / F 16 is an interface for communicating with the operation unit 20 via the communication path 30.

  The engine unit 17 is hardware that performs processing other than general-purpose information processing and communication for realizing a copy function, a scanner function, a fax function, and a printer function. For example, a scanner (image reading unit) that scans and reads an image of a document, a plotter (image forming unit) that performs printing on a sheet material such as paper, and a fax unit that performs fax communication are provided. Further, a specific option such as a finisher for sorting printed sheet materials or an ADF (automatic document feeder) for automatically feeding a document can be provided.

  Next, the hardware configuration of the operation unit 20 will be described. As shown in FIG. 2, the operation unit 20 includes a CPU 21, a ROM 22, a RAM 23, a flash memory 24, a communication I / F 25, a connection I / F 26, and an operation panel 27, which are a system bus 28. Are connected to each other.

  The CPU 21 comprehensively controls the operation of the operation unit 20. The CPU 21 uses the RAM 23 as a work area (work area) and executes a program stored in the ROM 22 or the flash memory 24 to control the operation of the entire operation unit 20 and information (image) according to the input received from the user. Various functions described later such as display of) are realized.

  The communication I / F 25 is an interface for connecting to the network 8. The connection I / F 26 is an interface for communicating with the main body 10 via the communication path 30.

  Operation panel 27 accepts various inputs in accordance with user operations and displays various types of information (for example, information in accordance with accepted operations, information indicating the operation status of MFP 1, information indicating setting status, etc.). . In this example, the operation panel 27 is configured by a liquid crystal display device (LCD) having a touch panel function, but is not limited thereto. For example, an organic EL display device equipped with a touch panel function may be used. Further, in addition to or instead of this, an operation unit such as a hardware key and a display unit such as a lamp may be provided.

  Next, the software configuration of the MFP 1 will be described. FIG. 3 is a schematic diagram illustrating an example of the software configuration of the MFP 1. As illustrated in FIG. 3, the main body 10 includes an application layer 101, a service layer 102, and an OS layer 103. The entities of the application layer 101, the service layer 102, and the OS layer 103 are various software stored in the ROM 12, the HDD 14, and the like. Various functions are provided by the CPU 11 executing these software.

  The software of the application layer 101 is application software for operating a hardware resource to provide a predetermined function (in the following description, it may be simply referred to as “application”). For example, examples of the application include a copy application for providing a copy function, a scanner application for providing a scanner function, a fax application for providing a fax function, a printer application for providing a printer function, and the like.

  The software of the service layer 102 is software that is interposed between the application layer 101 and the OS layer 103 and provides an interface for using hardware resources included in the main body 10 for the application. More specifically, it is software for providing a function of accepting an operation request for a hardware resource and arbitrating the operation request. As an operation request received by the service layer 102, a request such as reading by a scanner or printing by a plotter can be considered.

  Note that the interface function by the service layer 102 is provided not only to the application layer 101 of the main body 10 but also to the application layer 201 of the operation unit 20. That is, the application layer 201 (application) of the operation unit 20 can also realize a function using hardware resources (for example, the engine unit 17) of the main body 10 via the interface function of the service layer 102. For example, the interface function of the service layer 102 is provided by WebAPI.

  The software of the OS layer 103 is basic software (operating system (OS)) for providing a basic function for controlling hardware included in the main body 10. The software of the service layer 102 converts a hardware resource use request from various applications into a command interpretable by the OS layer 103 and passes the command to the OS layer 103. Then, when the command is executed by the software of the OS layer 103, the hardware resource performs an operation according to the request of the application.

  Similarly, the operation unit 20 includes an application layer 201, a service layer 202, and an OS layer 203. The application layer 201, the service layer 202, and the OS layer 203 included in the operation unit 20 have the same hierarchical structure as that of the main body 10 side. However, the functions provided by the applications in the application layer 201 and the types of operation requests that can be accepted by the service layer 202 are different from those on the main body 10 side. The application in the application layer 201 may be software for operating a hardware resource included in the operation unit 20 to provide a predetermined function, but mainly includes functions (copy function, scanner function, fax function) included in the main body 10. , A printer function) software for providing a UI (user interface) function for performing operations and display. In this example, the application layer 201 includes a browser application (application market application), and the service layer 202 includes an installer, an instruction management application, and the like.

  In this embodiment, the software of the OS layer 103 on the main body 10 side and the software of the OS layer 203 on the operation unit 20 side are different from each other in order to maintain the independence of functions. That is, the main body 10 and the operation unit 20 operate independently of each other with different operating systems. For example, Linux (registered trademark) can be used as software for the OS layer 103 on the main body 10 side, and Android (registered trademark) can be used as software on the OS layer 203 on the operation unit 20 side.

  As described above, in the MFP 1 of the present embodiment, the main body 10 and the operation unit 20 operate on different operating systems. Therefore, communication between the main body 10 and the operation unit 20 is communication between processes in a common apparatus. Rather, it is performed as communication between different devices. An operation (command communication) for transmitting information (instruction content from the user) received by the operation unit 20 to the main body 10, an operation for the main body 10 notifying the operation unit 20 of an event, and the like correspond to this. Here, the function of the main body 10 can be used when the operation unit 20 performs command communication with the main body 10. The event notified from the main body 10 to the operation unit 20 includes the execution status of the operation in the main body 10 and the contents set on the main body 10 side.

  In the present embodiment, since the power supply to the operation unit 20 is performed from the main body 10 via the communication path 30, the power control of the operation unit 20 is performed separately from the power control of the main body 10 (independently). Can do).

  Next, functions of the MFP 1 will be described. FIG. 4 is a diagram illustrating an example of functions that the MFP 1 has. As illustrated in FIG. 4, the MFP 1 includes a display control unit 111, an acquisition unit 112, a storage unit 113, an availability control unit 114, and an execution control unit 115. For convenience of explanation, FIG. 4 mainly illustrates functions according to the present invention, but the functions of the MFP 1 are not limited to these.

  The display control unit 111 performs control to display a screen on the operation panel 27. For example, the display control unit 111 performs control to display an operation screen for performing various operations on the operation panel 27. FIG. 5 is a diagram illustrating an example of the operation screen, and an icon 5 for starting the application market application is displayed on the operation screen. In addition, the display control unit 111 has a function of performing control to display a first screen acquired by the acquisition unit 112 described later (function of the first display control unit). Further, the display control unit 111 performs a control to display a second screen indicating that the first command cannot be executed when the later-described availability control unit 114 does not permit the execution of the first command. (Function of the second display control unit). Details will be described later.

  The description of FIG. 4 is continued. The acquisition unit 112 acquires a first screen including an execution procedure of the first command from the application market server 2. In this example, the execution procedure of the first command is represented by a URL (Uniform Resource Locator) scheme, and the acquisition unit 112 is associated with a URL scheme that describes the execution procedure of the installation command for each of a plurality of applications. An application list screen can be acquired from the application market server 2, or a web page (a link or a button) on which a URL scheme describing a procedure for executing a predetermined command is pasted (for convenience of explanation, for example) Hereinafter, it may be referred to as a “Web screen”) from the Web server 4. In this example, the application list screen and the Web screen correspond to the “first screen” in the claims.

  In the present embodiment, when the user touches the icon 5, the browser application (acquisition unit 112) may request the application market server 2 for an application list screen (hereinafter referred to as “application list screen request”). Send). And as a response, an application list screen is acquired from the application market server 2. In the present embodiment, when the user performs an operation of inputting the URL of the Web server 4 on the operation screen, the browser application (acquiring unit 112) requests the Web server 4 to request a Web screen ( Hereinafter, it may be referred to as a “Web request”). And as a response, a Web screen is acquired from the Web server 4.

  Here, an application list screen will be described as an example of the first screen. FIG. 6 is a diagram illustrating an example of an application list screen. In the example of FIG. 6, the application list screen includes, for each of a plurality of applications, explanation information that explains the contents of the application and a button 6 for instructing installation of the application (hereinafter referred to as “install button 6”). Is displayed. In this example, the URL scheme describing the execution procedure of the installation instruction is pasted on the installation button 6 corresponding to the application. In this example, pressing the install button 6 means selection of a URL scheme pasted on the install button 6. Here, as an example of the execution procedure of the first instruction, an execution procedure of the installation instruction will be described as an example. Here, the execution procedure of the installation command is represented by a URL scheme. The header portion of the URL scheme represents information for identifying an application that executes an instruction or information for identifying an instruction execution procedure (identifying the type of instruction execution procedure).

  FIG. 7 is a diagram illustrating an example of the URL scheme pasted on the install button 6 corresponding to the application identified by the ID (application ID) “49354”. The “installer” part in FIG. 7 is the header part of the URL scheme. Hereinafter, the header part of the URL scheme may be referred to as a “scheme part”. In the example of FIG. 7, the scheme portion “installer” represents information for identifying an application that executes an installation instruction, and in this example represents an installer installed in the MFP 1. In FIG. 7, the “installApp” portion of “installApp? Id = 49354” is an install command, and the argument of the install command is “id = 49354”. This represents an installation instruction for the application identified by the id “49354”. That is, it is a part representing the specific contents of the instruction.

  That is, the URL scheme shown in FIG. 7 is information describing the execution procedure of the installation instruction in the URL format. When this URL scheme is selected, the installer is activated, and the activated installer has an id of “49354”. An instruction to install the identified application will be executed.

  The description of FIG. 4 is continued. The display control unit 111 performs control to display the first screen acquired by the acquisition unit 112. In the present embodiment, the display control unit 111 performs control to display the application list screen and Web screen acquired by the acquisition unit 112 on the operation panel 27.

  The storage unit 113 stores one or more pieces of instruction information indicating information related to instructions that are allowed to be executed. In this example, the instruction information is information for identifying an execution procedure of an instruction that is permitted to be executed, or information for identifying an application that executes an instruction that is permitted to be executed. A scheme part (header part) of a URL scheme representing an execution procedure of an instruction that is permitted to be executed is stored as instruction information (hereinafter referred to as “legitimate scheme”). That is, in this example, the command information (legitimate scheme) is represented by information of the header portion of the URL scheme. FIG. 8 is a diagram illustrating an example of a valid scheme stored in the storage unit 113. The legitimate scheme “http” shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of a command (Web access command) accessed via the Web. Further, the legitimate scheme “https” shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of the Web access instruction encrypted by SSL / TLS. Further, the legal scheme “file” shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of an instruction for accessing a local file. Further, the legal scheme “about” shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of an instruction for displaying details of pages and settings. Further, the legitimate scheme “ftp” shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of an instruction for transmitting and receiving a file by FTP. Furthermore, the legitimate scheme “installer” shown in FIG. 8 is a custom scheme that identifies the application that executes the instruction to install the application and is defined by the user. Note that the number and type of legitimate schemes stored in the storage unit 113 can be arbitrarily changed.

  The description of FIG. 4 is continued. The availability control unit 114 corresponds to the execution procedure of the first instruction selected from the first screen (in this example, the application list screen or the Web screen) in one or more legitimate schemes stored in the storage unit 113. If there is no valid scheme to execute, the execution of the first instruction is not permitted. In the present embodiment, the availability control unit 114 includes a scheme part (header) of the URL scheme selected from the first screen (application list screen, Web screen) among one or more legitimate schemes stored in the storage unit 113. If there is no legitimate scheme that matches (part), execution of an instruction whose execution procedure is indicated by the URL scheme selected from the first screen is not permitted.

  On the other hand, in the case where there is a valid scheme corresponding to the execution procedure of the first instruction selected from the first screen among the one or more valid schemes stored in the storage unit 113, the availability control unit 114 The execution of the first instruction is permitted. More specific contents will be described later.

  The display control unit 111 performs control to display a second screen indicating that the first command cannot be executed when the availability control unit 114 does not permit execution of the first command. FIG. 9 is a diagram illustrating an example of the second screen. When the availability control unit 114 does not permit execution of the first command, the display control unit 111 performs control to display a second screen as illustrated in FIG. 9 on the operation panel 27.

  The description of FIG. 4 is continued. The execution control unit 115 performs control to execute the first instruction when the availability control unit 114 permits execution of the first instruction. Although more specific contents will be described later, for example, when the first instruction is an installation instruction, the execution control unit 115 performs control to execute the installation instruction when the availability control unit 114 permits the execution of the installation instruction. I do.

  In this example, the functions of the display control unit 111, the acquisition unit 112, the storage unit 113, the availability control unit 114, and the execution control unit 115 described above are provided by the operation unit 20. The functions of the display control unit 111, the acquisition unit 112, the availability control unit 114, and the execution control unit 115 are realized by the CPU 21 executing a program stored in the ROM 22 or the like. At least some of the functions of the control unit 111, the acquisition unit 112, the availability control unit 114, and the execution control unit 115 may be realized by a dedicated hardware circuit. The storage unit 113 can be realized by the flash memory 24 or the like. Among the functions of the acquisition unit 112 described above, the function of transmitting an application list screen request to the app market server 2 and the function of acquiring (receiving) the application list screen from the app market server 2 include the CPU 21 that executes the program. It may be considered that it is realized by a combination with the communication I / F 25. For example, when transmitting an application list screen request to the app market server 2, the CPU 21 controls the communication I / F 25 to transmit the application list screen request to the app market server 2. For example, when the application list screen is received from the application market server 2, the communication I / F 25 receives the application list screen from the application market server 2. Then, the communication I / F 25 notifies the CPU 21 of the application list screen received from the application market server 2. Thereby, CPU21 can detect reception of an application list screen.

  Next, the configuration of the application market server 2, the application server 3, and the Web server 4 will be described. FIG. 10 is a diagram illustrating an example of a hardware configuration of the application market server 2. The hardware configurations of the application server 3 and the Web server 4 are the same as those in FIG.

  As shown in FIG. 10, the application market server 2 includes a CPU 301, a ROM 302, a RAM 303, a communication I / F 304, an input device 305, and a display device 306. The CPU 301 comprehensively controls the operation of the application market server 2. The ROM 302 is a non-volatile memory that stores various data such as programs. A RAM 303 is a volatile memory that functions as a work area (work area) for various processes executed by the CPU 301. The communication I / F 304 is an interface for connecting to the network 8. The input device 305 is a device that is used for input of an operation by a user, and includes, for example, a mouse or a keyboard. The display device 306 is a device that displays various types of information, and includes, for example, a liquid crystal display device.

  FIG. 11 is a diagram illustrating an example of functions that the application market server 2 has. As illustrated in FIG. 11, the application market server 2 includes an application list screen holding unit 211 and an application list screen transmission unit 212. For convenience of explanation, FIG. 11 mainly illustrates the functions according to the present invention, but the functions of the app market server 2 are not limited to these.

  The application list screen holding unit 211 holds the above-described application list screen. When receiving the above-described application list screen request from MFP 1, application list screen transmitting unit 212 transmits the application list screen held in application list screen holding unit 211 to MFP 1 as a response.

  In the present embodiment, the function of the application list screen transmission unit 212 described above is realized by the CPU 301 executing a program stored in the ROM 302 or the like. However, the present invention is not limited to this. For example, a dedicated hardware circuit (semiconductor integrated circuit) Circuit) or the like. Further, the above-described application list screen holding unit 211 may be realized by an auxiliary storage device such as an HDD, for example. Here, the function of the application list screen transmission unit 212 may be realized by a combination of the CPU 301 that executes the program and the communication I / F 304.

  FIG. 12 is a diagram illustrating an example of functions that the application server 3 has. As illustrated in FIG. 12, the application server 3 includes an application holding unit 311 and an application transmission unit 312. For convenience of explanation, FIG. 12 mainly illustrates functions according to the present invention, but the functions of the application server 3 are not limited to these.

  The application holding unit 311 holds a plurality of applications. The application transmission unit 312 transmits the application held in the application holding unit 311 to the MFP 1 in response to a request (download request) from the MFP 1.

  In the present embodiment, the function of the application transmission unit 312 described above is realized by the CPU 301 executing a program stored in the ROM 302 or the like, but is not limited thereto, and for example, a dedicated hardware circuit (semiconductor integrated circuit or the like) ). Further, the above-described application holding unit 311 may be realized by an auxiliary storage device such as an HDD, for example. Here, the function of the application transmission unit 312 may be considered to be realized by a combination of the CPU 301 that executes the program and the communication I / F 304.

  FIG. 13 is a diagram illustrating an example of functions that the Web server 4 has. As illustrated in FIG. 13, the web server 4 includes a web screen holding unit 411 and a web screen transmission unit 412. For convenience of explanation, FIG. 13 mainly illustrates functions according to the present invention, but the functions of the Web server 4 are not limited to these.

  The web screen holding unit 411 holds the above-described web screen. When the Web screen transmission unit 412 receives the above-described Web request from the MFP 1, the Web screen transmission unit 412 transmits the Web screen held in the Web screen holding unit 411 to the MFP 1 as a response.

  In the present embodiment, the function of the above-described Web screen transmission unit 412 is realized by the CPU 301 executing a program stored in the ROM 302 or the like. However, the present invention is not limited to this. For example, a dedicated hardware circuit (semiconductor integrated circuit) Etc.). Further, the above-described Web screen holding unit 411 may be realized by an auxiliary storage device such as an HDD, for example. Here, it may be considered that the function of the Web screen transmission unit 412 is realized by a combination of the CPU 301 that executes the program and the communication I / F 304.

  Next, an example of an operation procedure of the information processing system 100 according to the present embodiment will be described. FIG. 14 is a sequence diagram illustrating an example of an operation procedure of the information processing system 100 according to the present embodiment. Here, an operation example when the user presses any one of the install buttons 6 displayed on the application list screen will be described.

  First, when the user touches the icon 5 (see FIG. 5) on the operation screen (step S1), the browser application transmits the above-described application list screen request to the app market server 2 (step S2). And as a response, an application list screen is received from the application market server 2 (step S3), and the received application list screen is displayed on the operation panel 27 (step S4).

  Next, when the user presses the install button 6 of any application on the application list screen (step S5), the browser application (availability control unit 114) determines one or more valid commands for the command management application. A scheme is requested (step S6). Upon receiving this request, the command management application transmits one or more legitimate schemes stored in the storage unit 113 to the browser application (step S7). In this example, the command management application exists as a single application. However, the present invention is not limited to this. For example, the command management application function may be realized by a browser application. For example, the browser application has a menu that defines a legitimate scheme, and the above-described step S6 and the above-described step S7 can be realized by an internal function of the browser application.

  After the above step S7, the browser application (availability control unit 114) extracts the scheme part of the URL scheme pasted on the install button 6 pressed in step S5, and receives one or more legitimate items received from the command management application. It is determined whether or not there is a valid scheme that matches the extracted scheme portion in the scheme (step S8).

  For example, the URL scheme pasted on the install button 6 pressed in step S5 is represented in the form of FIG. 7, and the browser application (allowability control unit 114) receives a plurality of valid schemes shown in FIG. 8 from the instruction management application. Assuming that In this case, the browser application (availability control unit 114) extracts “installer” as the scheme part of the URL scheme pasted on the install button 6 pressed in step S5. In this example, the one or more legitimate schemes received from the instruction management application include the legitimate scheme “installer” that matches the extracted scheme portion (see FIG. 8), and therefore the result of step S8. Is affirmative. In this case, the browser application (availability control unit 114) permits the execution of the install command whose execution procedure is indicated by the URL scheme pasted on the install button 6 pressed in step S5.

  Hereinafter, an operation example in the case where the browser application (availability control unit 114) permits execution of an instruction whose execution procedure is indicated by the URL scheme pasted on the install button 6 pressed in step S5 will be described. In this case, the browser application (availability control unit 114) notifies the OS of the operation unit 20 of the URL scheme pasted on the install button 6 pressed in step S5 (step S9).

  The OS of the operation unit 20 confirms the notified URL scheme (step S10), and confirms that the application that executes the instruction (in this example, the installation instruction) indicated by the URL scheme is an installer. Then, the OS of the operation unit 20 transmits the URL scheme to the installer (step S11). For example, the OS of the operation unit 20 broadcasts the URL scheme to each application of the operation unit 20, and the corresponding application (installer in this example) receives the URL scheme. May be.

  The installer that has received the URL scheme from the OS of the operation unit 20 executes a command whose execution procedure is indicated by the URL scheme (in this example, the URL scheme shown in FIG. 7). More specifically, the installer selects a necessary parameter (a part corresponding to the specific content of the command) from the URL scheme received from the OS of the operation unit 20, and executes processing based on the selected parameter. In this example, the installer requests the application server 3 to download the application identified by the application ID “49354” (step S12), and downloads the application from the application server 3 (step S13). Then, control is performed to install the application downloaded in step S13 in the MFP 1 (step S14). In this example, it can be considered that the function of the execution control unit 115 described above is provided by the installer.

  On the other hand, when the result of the above step S8 is negative, the browser application (availability control unit 114) executes the instruction whose execution procedure is indicated by the URL scheme pasted on the install button 6 pressed in step S5. not allowed. In this case, the browser application (availability control unit 114) does not notify the OS of the operation unit 20 of the URL scheme pasted on the install button 6 pressed in step S5. In this case, the browser application (display control unit 111) performs control to display the second screen as shown in FIG. 9 on the operation panel 27 (step S15).

  Next, an example of another operation procedure will be described with reference to FIG. Here, a URL scheme (predetermined to indicate that the user executes a predetermined command for an arbitrary application (referred to as “target application” in this example) installed on the MFP 1 displayed on the Web screen. A description will be given of an operation example when the UI to which the URL scheme indicating the instruction execution procedure is attached is pressed.

  First, when the user performs an operation of inputting the URL of the Web server 4 on the operation screen (Step S20), the browser application (acquisition unit 112) transmits the above-described Web request to the Web server 4 (Step S20). S21). Then, as a response, a web screen is received from the web server 4 (step S22), and the received web screen is displayed on the operation panel 27 (step S23).

  Next, when the user presses a UI on the Web screen to which a URL scheme indicating a predetermined instruction execution procedure is pasted (step S24), the browser application (availability control unit 114) executes the above-described instruction management application. In response to this, one or more legitimate schemes are requested (step S25). Upon receiving this request, the command management application transmits one or more legitimate schemes stored in the storage unit 113 to the browser application (step S26). The browser application (availability control unit 114) extracts the scheme part of the URL scheme (URL scheme selected from the Web screen) pasted on the UI pressed in step S24, and receives one or more received from the instruction management application It is determined whether or not there is a legitimate scheme that matches the extracted scheme portion in the legitimate scheme (step S27).

  If the result of step S27 described above is affirmative, the browser application (availability control unit 114) permits execution of an instruction whose execution procedure is indicated by the URL scheme pasted on the UI pressed in step S24. Hereinafter, an operation example in the case where the browser application (availability control unit 114) permits execution of an instruction whose execution procedure is indicated by the URL scheme pasted on the UI pressed in step S24 will be described. In this case, the browser application (availability control unit 114) notifies the OS of the operation unit 20 of the URL scheme pasted on the UI pressed in step S24 (step S28).

  The OS of the operation unit 20 confirms the notified URL scheme (step S29), and confirms that the application that executes the instruction (the predetermined instruction in this example) indicated by the URL scheme is the target application. To do. Then, the OS of the operation unit 20 transmits the URL scheme to the target application (Step S30). For example, the OS of the operation unit 20 broadcasts the URL scheme to each application of the operation unit 20, and the corresponding application (the target application in this example) receives the URL scheme. There may be. The target application that has received the URL scheme from the OS of the operation unit 20 executes a command whose execution procedure is indicated by the URL scheme (step S31). In this example, it can be considered that the function of the execution control unit 115 described above is provided by the target application.

  On the other hand, if the result of step S27 described above is negative, the browser application (availability control unit 114) does not permit execution of an instruction whose execution procedure is indicated by the URL scheme pasted to the UI pressed in step S24. . In this case, the browser application (availability control unit 114) does not notify the OS of the operation unit 20 of the URL scheme pasted on the UI pressed in step S24. In this case, the browser application (display control unit 111) performs control to display the second screen as shown in FIG. 9 on the operation panel 27 (step S32).

  As described above, in the present embodiment, among the one or more valid schemes stored in the storage unit 113, there is a valid scheme that matches the scheme portion of the URL scheme selected from the application list screen or the Web screen. If not, execution of an instruction whose execution procedure is indicated in the selected URL scheme is not permitted. That is, as shown in FIG. 16, the MFP 1 of the present embodiment only installs the install command when the scheme part of the URL scheme pasted on the install button 6 pressed by the user from the application list screen matches the valid scheme. Allow execution.

  For example, an application such as spyware that is not permitted to be installed (hereinafter referred to as “illegal application”) is installed in the MFP 1 without permission, and the MFP 1 executes a predetermined instruction execution procedure executed by the unauthorized application. Assume a situation in which a Web screen including a UI to which a displayed URL scheme (URL scheme indicating an execution procedure of an unauthorized instruction) is pasted is acquired from the Web server 4 and displayed. In such a situation, even if the user presses the UI on the Web screen, the URL pasted on the UI is not displayed unless the scheme part of the URL scheme pasted on the UI corresponds to a valid scheme. Execution of instructions whose execution procedure is indicated in the scheme is not permitted. This can prevent execution of instructions that are not permitted.

(Second Embodiment)
Next, a second embodiment will be described. Description of parts common to the above-described first embodiment will be omitted as appropriate. FIG. 17 is a diagram illustrating an example of functions that the MFP 1 of the present embodiment has. As illustrated in FIG. 17, the MFP 1 further includes a changing unit 121. In this example, the function of the changing unit 121 is provided by the operation unit 20 and is realized by the CPU 21 executing a program stored in the ROM 22 or the like. However, not limited to this, for example, the function of the changing unit 121 may be realized by a dedicated hardware circuit.

  The display control unit 111 according to the present embodiment has a function (a function of the third display control unit) that performs control to display a third screen for receiving an instruction to add or delete command information (legitimate scheme). In the present embodiment, the display control unit 111 performs control to display the third screen as illustrated in FIG. 18 on the operation panel 27 when an operation requesting the third screen (user operation) is received. A list of valid schemes is displayed on the third screen. In this example, the user performs an operation of selecting one of the valid schemes displayed on the third screen, and presses an “add” button or a “delete” button to add the selected valid scheme or Deletion can be instructed.

  Returning to FIG. 17, the description will be continued. When the changing unit 121 receives an instruction to add or delete a valid scheme via the third screen, the changing unit 121 adds or deletes a valid scheme stored in the storage unit 113 according to the received instruction.

  FIG. 19 is a sequence diagram illustrating an example of an operation procedure of the MFP 1 when adding or deleting a legitimate scheme stored in the storage unit 113. As illustrated in FIG. 19, when the instruction management application (display control unit 111) receives an operation for requesting the third screen (step S <b> 41), the third screen as illustrated in FIG. 18 is displayed on the operation panel 27. Control is performed (step S42).

  When the instruction management application (changing unit 121) receives an instruction to add or delete any legitimate scheme via the third screen (step S43), the instruction management application (the changing unit 121) stores the instruction management application (changing unit 121) in the storage unit 113 according to the received instruction. The added or deleted legitimate scheme is added (step S44). Since other contents are the same as those in the first embodiment, detailed description thereof is omitted.

  As mentioned above, although embodiment which concerns on this invention was described, this invention is not limited to each above-mentioned embodiment as it is, A component can be deform | transformed and embodied in the range which does not deviate from the summary in an implementation stage. . Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the above-described embodiments. For example, some components may be deleted from all the components shown in each embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

  In the above-described embodiment, the main body 10 and the operation unit 20 operate independently of each other in separate operation systems. However, the present invention is not limited thereto, and for example, the main body 10 and the operation unit 20 operate in the same operation system. Form may be sufficient. Further, for example, a form in which one server in which the above-described application market server 2 and application server 3 are integrated may be provided.

  The program executed by the information processing system 100 (MFP 1, application market server 2, application server 3, Web server 4, etc.) of the above-described embodiment is an installable format or executable format file and is a CD-ROM. , A flexible disk (FD), a CD-R, a DVD (Digital Versatile Disk), a USB (Universal Serial Bus), etc. may be recorded on a computer-readable recording medium and provided. It may be configured to be provided or distributed via the network. Various programs may be provided by being incorporated in advance in a ROM or the like.

1 MFP
2 application market server 3 application server 4 web server 8 network 10 main body 20 operation unit 100 information processing system 111 display control unit 112 acquisition unit 113 storage unit 114 availability control unit 115 execution control unit 121 change unit 211 application list screen holding unit 212 application List screen transmission unit 311 Application holding unit 312 Application transmission unit 411 Web screen holding unit 412 Web screen transmission unit

JP 2011-237881 A

Claims (14)

An information processing apparatus that can be connected to a server via a network,
An obtaining unit for obtaining a first screen including an execution procedure of a first instruction from the server;
A first display control unit that performs control to display the first screen acquired by the acquisition unit;
A storage unit that stores one or more pieces of instruction information indicating information related to instructions that are permitted to be executed;
When the instruction information corresponding to the execution procedure of the first instruction selected from the first screen does not exist in the one or more instruction information stored in the storage unit, the first information An availability control unit that does not allow execution of instructions,
Information processing device. The instruction information is information for identifying an execution procedure of an instruction that is permitted to be executed, or information for identifying an application that executes an instruction that is permitted to be executed.
The information processing apparatus according to claim 1. The availability control unit includes the command information corresponding to the execution procedure of the first command selected from the first screen in the one or more command information stored in the storage unit. Permits execution of the first instruction;
The information processing apparatus according to claim 1 or 2. A second display control unit that performs control to display a second screen indicating that the first command cannot be executed when the availability control unit does not permit execution of the first command;
The information processing apparatus according to any one of claims 1 to 3. The execution procedure of the first instruction is represented by a URL scheme.
The information processing apparatus according to any one of claims 1 to 4. The header portion of the URL scheme represents information for identifying an application executing an instruction or information for identifying an instruction execution procedure.
The information processing apparatus according to claim 5. The instruction information is represented by information in the header part.
The information processing apparatus according to claim 6. The availability control unit includes:
Among the one or more pieces of instruction information stored in the storage unit, the instruction information that matches the header portion of the URL scheme representing the execution procedure of the first instruction selected from the first screen is If not, does not allow execution of the first instruction;
The information processing apparatus according to claim 7. A third display control unit that performs control to display a third screen for receiving an instruction to add or delete the command information;
A change unit that adds or deletes the command information stored in the storage unit according to the received instruction when an instruction to add or delete the command information is received via the third screen. ,
The information processing apparatus according to any one of claims 1 to 8. When the availability control unit permits execution of the first instruction, the availability control unit further includes an execution control unit that performs control to execute the first instruction.
The information processing apparatus according to any one of claims 1 to 9. The first instruction is an installation instruction;
The information processing apparatus according to claim 10. The execution control unit performs control to execute the installation command when the availability control unit permits execution of the installation command.
The information processing apparatus according to claim 11. An information processing method by an information processing apparatus connectable to a server via a network,
An acquisition step of acquiring a first screen including an execution procedure of a first instruction from the server;
A first display control step for performing control to display the first screen acquired in the acquisition step;
Execution of the first instruction selected from the first screen in the one or more instruction information stored in a storage unit that stores one or more instruction information indicating information related to an instruction that is permitted to be executed If the instruction information corresponding to the procedure does not exist, including a permission control step that does not allow execution of the first instruction,
Information processing method. A computer installed in an information processing device that can be connected to a server via a network.
An acquisition step of acquiring a first screen including an execution procedure of a first instruction from the server;
A first display control step for performing control to display the first screen acquired in the acquisition step;
Execution of the first instruction selected from the first screen in the one or more instruction information stored in a storage unit that stores one or more instruction information indicating information related to an instruction that is permitted to be executed When the instruction information corresponding to the procedure does not exist, a program for executing a permission control step that does not permit execution of the first instruction.

Images