JP2021083002A - Information processing device, information processing method, and program - Google Patents

Abstract

To provide a technology for preventing a communication function from being executed when the destination of the communication function and the use of a digital certificate do not match.SOLUTION: An information processing device that executes a communication function using a digital certificate is configured to acquire conditions for the use of an electronic certificate from a database of electronic certificate usage destination condition information when a change in the setting of the electronic certificate usage destination is received, determine whether the conditions match the conditions in the electronic certificate usage destination condition information from the information on the set electronic certificate usage destination and the usage held by the electronic certificate itself, and perform control not to allow the use of the electronic certificate at the destination if the conditions do not match.SELECTED DRAWING: Figure 6

Description

The present invention relates to an information processing device, an information processing method and a program.

Personal computers (PCs) connected to networks such as offices and mobile mobile terminals owned by individuals use public electronic certificates for secure communication and authentication when communicating with external servers.
Further, recent multifunction devices not only simply print and transmit images, but also have a function of storing image data in the multifunction device and providing a file service to a PC. Therefore, the multifunction device also plays a role as an information processing device similar to other server devices existing on the network. While these information processing devices are used on the network, in order to maintain a safe and secure office environment, it is required to authenticate and communicate using an electronic certificate. Generally, as in Patent Document 1, secure network identification and authentication are realized by a public key infrastructure (PKI: public key infrastructure) technology using an electronic certificate.

For this digital certificate, a separate digital certificate may be set for each information processing device depending on the usage destination of the communication function. For example, it is common to store and set an individual digital certificate for each communication function in an information processing device such as TLS, IPsec, and signed PDF transmission.
It may also have information that recommends what purpose the digital certificate will be used for. X. In the digital certificate of 509, it is possible to store information for purposes such as Digital Signature and Key Engineering as Key Use. In this specification, this is referred to as "the use of digital certificates".

Japanese Unexamined Patent Publication No. 2005-39790

However, a communication function that does not match the purpose of the digital certificate may be set for the digital certificate stored in the information processing device. For example, when using an electronic certificate that does not have the purpose of digital signature and using the functions of TLS communication and signed PDF transmission, security conditions such as algorithm strength of the digital certificate as an electronic signature are satisfied. It may not be.
An object of the present invention is to provide a technique for preventing the communication function from being executed when the usage destination of the communication function and the use of the digital certificate do not match in the information processing device that executes the communication function using the digital certificate. The purpose is to provide.

In the present invention, the first acquisition means for acquiring the digital certificate information, the second acquisition means for acquiring the usage condition of the digital certificate, the usage information of the digital certificate information, and the use of the digital certificate. When the usage does not match based on the usage information of the prior condition, it is characterized by having a control means for controlling not to permit the use of the digital certificate at the usage destination.

According to the present invention, it is possible to set a communication function that matches the information of the purpose of the digital certificate, and it is possible to improve security.

It is a figure which shows an example of the system configuration of a printing system. It is a figure which shows an example of the hardware composition of a multifunction device. It is a figure which shows an example of the software module configuration of a multifunction device. It is a figure which shows an example of the electronic certificate list screen. It is a figure which shows an example of the digital certificate use destination change setting screen. It is a flowchart explaining the display of the list of digital certificates and the acceptance of the setting change of the use destination. It is a figure which shows an example of the screen of the digital certificate use information confirmation setting. It is a conceptual diagram of the database of the digital certificate usage destination condition information. It is a figure which shows an example of the digital certificate list screen used by the TLS function. It is a flowchart which shows the control which displays the digital certificate which can be set for a communication function.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
In the following, a multifunction device (digital multifunction device / MFP / Multifunction Peripheral) will be described as an example as an information processing device for using and managing the digital certificate according to the embodiment. However, the scope of application is not limited to the multifunction device, and any information processing device that can use an electronic certificate may be used.

<Embodiment 1>
The first embodiment will be described. FIG. 1 is a diagram showing an example of a system configuration of a printing system.
The multifunction device 100 having a printing function can send and receive print data, scanned image data, device management information, and the like to and from other information processing devices via the network 110. Further, the multifunction device 100 has a function of performing encrypted communication such as TLS, IPsec, and IEEE 802.1X, and a public key pair and an electronic certificate used for the encryption processing, and an electronic certificate for verifying the destination server. Holds the book. Here, the multifunction device 100 is an example of an image forming apparatus, and the image forming apparatus is not limited to this, and may be a single function of a facsimile machine, a printer, a copier, or a device having a combined function of these. Good. A multifunction device 101 is also connected to the network 110, and the multifunction device 101 has the same functions as the multifunction device 100. Hereinafter, the multifunction device 100 will be mainly described, but the exchange of digital certificates may target a plurality of multifunction devices.

The multifunction device 100 according to the first embodiment has a Web server function, and has a Web page type RUI (Remoto UI) function capable of executing processing for operations such as display, addition, and deletion of a digital certificate. Is open to the public on the network 110.
The PC 103 is a personal computer, and the PC 103 is equipped with a Web browser function, so that it is possible to browse and use HTML documents and websites published by an information processing device connected to the network 110.
The multifunction device 100 is connected to the server service A120 and the server service B121 via the network 110. The server service A120 in this embodiment is a firmware update server service provided by the vendor of the multifunction device 100. Further, the server service B121 is a cloud storage service arbitrarily connected by the user of the multifunction device 100.

Next, the processing outline of the operation of adding and deleting the digital certificate according to the first embodiment will be described.
The administrator of the multifunction device 100 uses the Web browser installed in the PC 103 to connect to the Web page for the operation of the digital certificate published by the multifunction device 100, and adds the digital certificate. Set and instruct to execute the deletion.

Next, the hardware configuration of the multifunction device 100 according to the first embodiment will be described.
FIG. 2 is a diagram showing an example of the hardware configuration of the multifunction device 100.
The CPU 201 executes the software program of the multifunction device 100 and controls the entire device. The ROM 202 is a read-only memory and stores a boot program, fixed parameters, and the like of the multifunction device 100. The RAM 203 is a random access memory, which is used for storing programs and temporary data when the CPU 201 controls the multifunction device 100. The HDD 204 is a hard disk drive that stores system software, applications, and various data. The CPU 201 executes the boot program stored in the ROM 202, expands the program stored in the HDD 204 into the RAM 203, and executes the expanded program to control the operation of the multifunction device 100. The network I / F control unit 205 controls the transmission and reception of data to and from the network 110. The scanner I / F control unit 206 controls reading of a document by the scanner 211. The printer I / F control unit 207 controls printing processing and the like by the printer 210. The panel control unit 208 controls the touch panel type operation panel 212 to control the display of various information and the input of instructions from the user. The bus 209 connects the CPU 201, ROM 202, RAM 203, HDD 204, network I / F control unit 205, scanner I / F control unit 206, printer I / F control unit 207, and panel control unit 208 to each other. A control signal from the CPU 201 and a data signal between the devices are transmitted and received via the bus 209.

FIG. 3 is a diagram showing an example of a software module configuration of the multifunction device 100. The software module shown in FIG. 3 is realized by executing the program expanded in the RAM 203 by the CPU 201.
The network driver 301 controls the network I / F control unit 205 connected to the network 110 to send and receive data to and from the outside via the network 110. The network control unit 302 controls communication below the transport layer in a network communication protocol such as TCP / IP to transmit and receive data. The communication control unit 303 is a module for controlling a plurality of communication protocols supported by the multifunction device 100. In the first embodiment, the communication control unit 303 controls the request for HTTP protocol communication, the generation of response data, the analysis process, and the data transmission / reception. In addition, the communication control unit 303 also executes encrypted communication of TLS, IPSEC, and IEEE 802.1X supported by the multifunction device 100.

The Web page control unit 304 is a module that generates HTML data for displaying a Web page and controls communication, which can execute a request for issuing an electronic certificate and a process for obtaining the digital certificate. The Web page control unit 304 executes a process for displaying a Web page sent from the network driver 301 via the communication control unit 303, and for adding or deleting a digital certificate. The Web page control unit 304 transmits the HTML data of the default Web page stored in the RAM 203 or the HDD 204, or the HTML data generated according to the content of the display request, as a response to the request from the Web browser.

The certificate operation control unit 305 is a module for adding and deleting digital certificates and setting communication functions based on instructions from the Web page control unit 304. The encryption processing unit 306 is a module for executing various encryption processes such as data encryption / decryption processing, electronic signature generation / verification, and hash value generation. The certificate management unit 307 is a module that manages the digital certificate held by the multifunction device 100. The certificate management unit 307 stores the digital certificate data in the RAM 203 or the HDD 204 together with various setting values. Although not shown in the first embodiment, processes such as detailed display, generation, and deletion of the digital certificate can be executed by a user's instruction via the operation panel 212. The control of the operation panel 212 and the panel control unit 208 is executed by the UI control unit 308. In the encrypted communication processing of TLS, IPsec, 802.1X, etc. executed by the communication control unit 303, the encryption processing is also performed by the encryption processing unit 306, and the public key used by the certificate management unit 307 is used. It is configured to acquire pair and digital certificate data.

The print / read processing unit 309 is a module for executing functions such as printing by the printer 210 and reading a document by the scanner 211. The device control unit 310 is a module for generating control commands and control data of the multifunction device 100 to control the multifunction device 100 in an integrated manner. The device control unit 310 according to the first embodiment controls the power supply of the multifunction device 100, and executes the restart process of the multifunction device 100 according to the instruction from the Web page control unit 304.

FIG. 4 is a diagram showing an example of the digital certificate list screen 400 that displays the digital certificate held by the multifunction device 100.
In the present embodiment, the administrator of the multifunction device 100 uses a Web browser mounted on the PC 103 to display a list of electronic certificates published by the multifunction device 100, and a Web page format RUI for setting. Connect to the format and perform operations such as instructions. This RUI is an abbreviation for a remote user interface, and is a technology that can remotely request operation screen data of the multifunction device 100 and the multifunction device 101 and display them on the PC 103 using the web browser of the PC 103. At this time, the screen can be implemented by HTML, Servlet, or the like. FIG. 4 is an example in which KeyA411, KeyB412, and KeyC413 are displayed in a list.

FIG. 5A is an electronic certificate usage destination change setting screen 500 for setting the usage destination of the communication function for the digital certificate of FIG. In the present embodiment, the screen of FIG. 5 is displayed when the use destination setting buttons 421 to 423 of the screen of FIG. 4 are selected by using the web browser of the PC 103.

FIG. 6 is a flowchart illustrating the display of the list of digital certificates of FIG. 4 and the acceptance of setting changes of the usage destination. This process is achieved by executing the program expanded in the RAM 203 by the CPU 201.
The processing of the flowchart of FIG. 6 is started by receiving the change of the usage destination of the digital certificate.
First, in S601, the CPU 201 receives a request for changing the usage destination setting of the digital certificate. This process is executed when any of 501 to 504 of the usage destination is selected from the digital certificate usage destination change setting screen 500 of FIG. 5 and the OK button 505 is selected. In the present embodiment, there are TLS, IPsec, signed PDF, and data encryption as the usage destination of the digital certificate, but other communication functions such as IEEE 802.1X may be selectable, and the function using the digital certificate may be used. There is no particular limitation. FIG. 5 is an example of a state in which TLS is selected as the usage destination of the communication function.

Next, the process proceeds to S602, and the CPU 201 acquires the digital certificate usage information confirmation setting shown in FIG. 7 from the HDD 204.
FIG. 7 is a diagram showing an example of a screen for confirming the digital certificate usage information. The screen of the digital certificate usage information confirmation setting is displayed and set using the web browser of the PC 103. When this digital certificate usage information confirmation setting is valid, the usage information (KeyUsage) information held by the digital certificate itself in FIG. 4 and the digital certificate shown in FIG. 8 are used for the destination selected in FIG. The document usage condition information 800 is compared. This control will be described later in S607. In the present embodiment, the setting shown in FIG. 7 can be set only by the administrator of the multifunction device 100, but it may be set only by a user who has the authority of security setting different from the administrator, and is not particularly limited. When valid 701 is selected, confirmation of usage information in the digital certificate becomes valid when setting the usage destination of the digital certificate. If invalid 702 is selected, the confirmation of the usage information in the digital certificate becomes invalid when setting the usage destination of the digital certificate.

After S602, the process proceeds to S603, and the CPU 201 determines whether or not the digital certificate usage information confirmation setting acquired from the HDD 204 is valid.
When it is determined in S603 that the digital certificate usage information confirmation setting is not valid, the CPU 201 sets the digital certificate to the designated usage destination in S604 and saves the setting in the HDD 204.
When it is determined in S603 that the digital certificate usage information confirmation setting is valid, the CPU 201 acquires the digital certificate information specified in FIG. 4 from the HDD 204 in S605.

Next, in S606, the CPU 201 acquires the digital certificate usage destination condition information 800 of FIG. 8 from the HDD 204.
FIG. 8 is a conceptual diagram of a database of digital certificate usage destination condition information 800. This database is stored in HDD 204 of the multifunction device 100. In this database, the usage destination of the digital certificate and the usage information stored in the digital certificate are stored in association with each other. In the present embodiment, there are TLS801, IPSEC802, signed PDF803, and data encryption 804 as the usage destinations of the certificate, and the conditions for using the digital certificate are stored in each of them. For example, for TLS801, X. Digital signature, Key Enciperment, Non Reproduction, keyAgreement, and keyCertSign. The KeyUsage information of the 509 certificate is linked as a use. In the present embodiment, it is assumed that the database of the digital certificate usage destination condition information 800 is stored in advance at the time of factory shipment of the multifunction device 100.

After S606, the process shifts to S607, and the CPU 201 sets the conditions of the digital certificate usage destination condition information 800 from the information on the usage destination of the digital certificate set in S601 and the usage held by the digital certificate itself. Determine if they match.
When it is determined in S607 that the conditions of the digital certificate usage destination condition information 800 are matched, in S604, the CPU 201 sets the usage selected in FIG. 5 for the digital certificate selected in FIG. The setting information is saved in the HDD 204. For example, when TLS501 is specified in FIG. 5 for KeyA411 in FIG. 4 and matches the condition 801 of TLS in FIG. 8, signed PDF503 is specified for KeyB412 and matches the condition 803 of the signed PDF. For example.

When it is determined in S607 that the conditions of the digital certificate usage destination condition information 800 do not match, the CPU 201 displays the error screen 507 shown in FIG. 5B on the web browser of the PC 103 in S608.
This is, for example, a case where TLS501 is specified in FIG. 5 for KeyB412 and KeyC413 in FIG. 4, and does not match the condition 801 of TLS in FIG.
The process of S608 is an example of a process of controlling not to allow the use of the digital certificate at the destination.

By the control of S603 to S608 described above, it is possible to prevent the execution of the corresponding communication function when the usage destination of the communication function and the use of the digital certificate do not match. This makes it possible for the information processing device to set a communication function that matches the information used for the digital certificate, and it is possible to improve security.
In the present embodiment, the control is performed when the digital certificate is set before the communication function is used, but in the state where the communication function can be used in advance, the digital certificate usage information confirmation setting 700 is set later. It may be set to valid 701. In this case, if the usage information does not match the usage destination, communication is disabled without using the communication function, or a warning is issued when the digital certificate usage information confirmation setting 700 is enabled or when the communication function is used. ..

<Embodiment 2>
Next, Embodiment 2 of the present invention will be described.
In the first embodiment, the control was performed when the multifunction device 100 was operating on the digital certificate designated from the digital certificate list screen 400 of FIG.
However, depending on the multifunction device 100, it is possible to set an electronic certificate from the screen of each communication function. In this case, when selecting an available digital certificate for each communication function, it is troublesome to confirm which digital certificate does not match the usage destination and the purpose.
In the second embodiment, in the information processing apparatus having the digital certificate use information confirmation setting as in the first embodiment, when the digital certificate is set for the communication function, the electronic certificate that can be set in advance is presented. Is possible.
In the present embodiment, the parts not explained such as the network configuration, the hardware configuration of the multifunction device 100 which is the information processing device, the software module configuration, and the digital certificate usage information confirmation setting are the same as those in the first embodiment. Is.

FIG. 9 is a diagram showing an example of the digital certificate list screen 900 used in the TLS function as a screen example of the communication setting of the TLS function in the multifunction device 100. This is displayed and operated via the web browser of the PC 103.

FIG. 10 is a flowchart showing a control for displaying a digital certificate that can be set for a communication function. This process is achieved by executing the program expanded in the RAM 203 by the CPU 201.
In S1001, the CPU 201 displays an electronic certificate list screen for the communication function. In the present embodiment, the screen of the TLS function shown in FIG. 9 will be used as a representative communication function, but screens that perform equivalent control for other communication functions shown in FIG. 5 (a) such as IPsec will be individually described. Suppose there is.
In S1002, the CPU 201 acquires the digital certificate usage information confirmation setting from the HDD 204.

When it is determined in S1003 that the digital certificate usage information confirmation setting is not valid, the CPU 201 displays the digital certificate list of FIG. 9B in S1010. In FIG. 9B, all the setting buttons can be selected, and the TLS function can be set as the user destination for any digital certificate.
When it is determined in S1003 that the digital certificate usage information confirmation setting 700 is valid, the CPU 201 acquires the digital certificate information stored in the HDD 204 in S1004.
Next, in S1005, the CPU 201 acquires the digital certificate usage destination condition information 800 stored in the HDD 204.

Next, in S1006, the CPU 201 matches the conditions of the digital certificate usage destination condition information 800 from the information on the usage held by the TLS function that is the usage destination of the digital certificate and the digital certificate itself acquired in S1004. Judge whether or not.
When it is determined in S1006 that the conditions of the digital certificate use destination condition information 800 are matched, the CPU 201 in S1007 sets the acquired digital certificate as the target for which the TLS function can be set.
When it is determined in S1006 that the conditions of the digital certificate use destination condition information 800 are matched, the CPU 201 sets the acquired digital certificate as the target for which the TLS function cannot be set in S1008.

Next, the process proceeds to S1009, and the CPU 201 determines whether or not there is another digital certificate to be displayed based on the digital certificate obtained from the HDD 204.
When it is determined in S1009 that there is another digital certificate to be displayed, the CPU 201 returns to the process of S1005.
When it is determined in S1009 that there is no other digital certificate to be displayed, in S1010, the CPU 201 displays the screen of the digital certificate of FIG. 9 on the web browser of the PC 103.
FIG. 9A is an example of a screen when the digital certificate that can be set by the TLS function is displayed when the digital certificate usage information confirmation setting 700 is valid.
The usage selected in FIG. 5 is set for the TLS function, and the setting information is saved in the HDD 204. For example, when TLS501 is specified in FIG. 5 for KeyA411 in FIG. 4 and matches the condition 801 of TLS in FIG. 8, signed PDF503 is specified for KeyB412 and matches the condition 803 of the signed PDF. For example.

In the present embodiment, the KeyA911 is already set to the TLS function when this screen is displayed, and the other KeyB912, KeyC913, and KeyD914 are displayed on the digital certificate list screen 900. Since the usage information held in the digital certificate of KeyB912 and KeyC913 does not match the conditions of the TLS function, the setting buttons 922 and 923 cannot be set, respectively. Since the usage information held in the digital certificate of the KeyD914 matches the conditions of the TLS function, the setting button 924 is displayed as configurable.

By the above-mentioned processes of S1003 to S1010, when setting the digital certificate for the communication function, it is possible to present the digital certificate that can be set in advance, and it is possible to reduce the time and effort of the user.

<Other Embodiments>
The present invention supplies a system or device with a program that realizes one or more of the functions of the above-described embodiment via a network or a storage medium. It can also be realized by a process in which one or more processors in the computer of the system or apparatus reads and executes a program. It can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

Although an example of the embodiment of the present invention has been described in detail above, the present invention is not limited to the specific embodiment.

As described above, according to each of the above-described embodiments, it is possible to set a communication function that matches the information of the purpose of the digital certificate, and it is possible to improve security.

100 MFP 201 CPU

Claims (10)

The first acquisition method for acquiring digital certificate information,
A second acquisition method for acquiring the conditions for using the digital certificate,
When the usage does not match based on the usage information of the digital certificate information and the usage information of the usage condition of the digital certificate, a control means for controlling not to allow the usage of the digital certificate at the usage destination, and a control means.
An information processing device characterized by having. When the confirmation setting of the usage information of the digital certificate is valid and the usage does not match based on the usage information of the digital certificate information and the usage information of the usage condition of the digital certificate, the control means is used. The information processing apparatus according to claim 1, wherein the digital certificate is controlled so as not to be permitted to be used by the user. If the usage does not match based on the usage information of the digital certificate information and the usage information of the usage condition of the digital certificate, the control means displays an error screen and uses the digital certificate at the usage destination. The information processing apparatus according to claim 1 or 2, wherein the information processing apparatus is controlled so as not to allow the information processing. When the usage matches based on the usage information of the digital certificate information and the usage information of the usage condition of the digital certificate, the control means sets the digital certificate to the designated usage destination. The information processing apparatus according to any one of claims 1 to 3. The information processing apparatus according to any one of claims 1 to 4, further comprising a setting means for setting whether to enable or invalidate the confirmation setting of the usage information of the digital certificate. The information processing apparatus according to any one of claims 1 to 5, further comprising a display means for displaying a preset electronic certificate when setting an electronic certificate for a communication function. .. The digital certificate is based on X.I. The information processing device according to any one of claims 1 to 6, wherein the information processing device is a 509 certificate. The information processing device according to any one of claims 1 to 7, wherein the information processing device is a multifunction device. It is an information processing method executed by an information processing device.
The first acquisition process for acquiring digital certificate information and
The second acquisition process to acquire the conditions for using the digital certificate, and
When the usage does not match based on the usage information of the digital certificate information and the usage information of the usage condition of the digital certificate, a control process for controlling not to permit the use of the digital certificate at the usage destination, and a control process.
An information processing method characterized by including. A program for causing a computer to function as each means of the information processing apparatus according to any one of claims 1 to 8.

Images