JP2021196821A - Program, information processing apparatus, and information processing system - Google Patents

Abstract

To provide a program for issuing a notification in accordance with modification of an initial password or modification of security settings, an information processing apparatus, and an information processing system.SOLUTION: When it is determined that a password used in administrator authentication has been modified from an initial password (S13: NO) and it is also determined that security settings of an MFP 50 have been modified (S17: YES), the MFP 50 displays a second message (S21, S23). When it is determined that the password has been modified from the initial password (S13: NO) and it is also determined that the security settings have not been modified (S17: NO), the MFP 50 does not execute display of the message (S19, S23).SELECTED DRAWING: Figure 4

Description

The present invention relates to a program or the like that executes processing according to a password setting.

The following Patent Document 1 describes a printer that executes authentication using an initial password. When the printer of Patent Document 1 receives the request for switching to the maintenance mode, the printer displays the initial password stored in the password storage means on the operation unit. The password storage means stores a comparison password in association with the initial password. When the password received by the operation unit matches the comparison password corresponding to the initial password displayed on the operation unit, the printer executes switching to the maintenance mode.

Japanese Unexamined Patent Publication No. 2010-258770

The initial password is, for example, a password set by the vendor at the time of shipment from the factory. Therefore, from the viewpoint of security, it is preferable to change the initial password to the password set by the user. In addition, when authentication is performed using a password, changes in printer security settings may be accepted depending on the state after authentication. Therefore, in a printer that authenticates with this type of password, the content to be notified to the user changes depending on the change of the initial password or the change of the security setting. However, the printer of Patent Document 1 described above has room for improvement in that it notifies according to changes in the initial password and security settings.

Therefore, it is an object of the present specification to provide a program, an information processing device, and an information processing system capable of executing notification according to a change of an initial password or a change of a security setting.

In order to solve the above problems, the program disclosed in the embodiment is a program readable by a computer that receives an instruction targeting a device for which an initial password is set, and the computer is set to the device. The initial password determination means for determining whether or not the password has been changed from the initial password, the security setting determination means for determining whether or not the security setting of the device is in the first state, and the password determination means. When it is determined from the password that the password has been changed and the security setting determination means determines that the security setting is in the first state, the first information relating to the change of the security setting of the device is notified. 1 When it is made to function as a notification means, it is determined by the password determination means that the initial password has been changed, and the security setting determination means determines that the security setting is not the first state. The notification of the first information by the first notification means is not executed. The information processing apparatus and information processing system disclosed in the examples are also similar features.

The technique disclosed in the present specification can be realized in various forms, for example, in the form of a control method, a recording medium on which a program is recorded, or the like.

In the technique disclosed in the embodiment, it is possible to perform notification according to a change in the initial password or a change in the security setting.

It is a block diagram of the printing system which concerns on embodiment. It is a figure which shows the state which accessed the top page of the Web server started by the MFP by the Web browser of the information terminal. It is a figure which shows the state which accessed the page after the login of the Web server started by the MFP with the Web browser of the information terminal. It is a flowchart which shows the content of the display determination process of the MFP.

FIG. 1 shows a block diagram of a printing system 1 exemplified as an embodiment according to the present application. The printing system 1 includes an information terminal 10 and an MFP 50. The printing system 1 is a system that gives instructions such as printing, scanning, and fax transmission from the information terminal 10 to the MFP 50, and executes printing and the like by the MFP 50.

The information terminal 10 mainly includes a CPU 12, a memory 14, a network I / F16, an LCD18, and an input I / F19. These components are made communicable with each other via the bus 21. The information terminal 10 is, for example, a notebook computer. The information terminal 10 is not limited to a notebook computer, but may be an external terminal capable of processing other information such as a stationary desktop computer, a smartphone, or a tablet terminal. The configuration of the information terminal 10 shown in FIG. 1 is an example. For example, the information terminal 10 may include an information terminal communication I / F that performs wireless communication with a mobile base station, a camera that performs imaging, and the like.

The OS 23, the application 25, and the browser 27 are stored in the memory 14. The OS 23 is a program that comprehensively controls the information terminal 10, and provides, for example, basic functions and services to the application 25. OS23 is an operating system such as Windows (registered trademark), MacOS (registered trademark), Linux (registered trademark), Android (registered trademark), iOS (registered trademark) and the like.

Further, the application 25 is, for example, a program provided by the vendor of the MFP 50, and receives a print instruction or the like for the MFP 50. The CPU 12 executes the application 25 and provides various services and functions. The application 25 is, for example, an application program for changing the settings of the MFP 50, printing by the MFP 50, scanning, and fax transmission. The application 25, for example, creates print image data and transmits the created print image data to the MFP 50 to execute a print process by the MFP 50. Further, the application 25 executes a scan by the MFP 50, for example, and acquires the scan data read by the MFP 50. Further, the application 25 causes the MFP 50 to execute a process of transmitting the data of the designated document by FAX, for example, based on an instruction from the user.

Further, the browser 27 is a program for accessing the Web server on the Internet 73 and the Web server of the MFP 50 described later. The CPU 12 transmits / receives data to / from the Web server of the MFP 50 by executing the browser 27, for example. In the following description, the information terminal 10 that executes the OS 23, the application 25, and the browser 27 on the CPU 12 may be simply described by the device name. For example, the description "the information terminal 10 is" may mean "the information terminal 10 that executes the OS 23 or the like on the CPU 12". Further, the method of accessing the Web server is not limited to the method of executing the browser 27. For example, the information terminal 10 may access the Web server of the MFP 50 by the application 25 that performs printing or the like. In this case, the application 25 may execute the transmission / reception of data to / from the Web server by using the command of the OS 23 or the like. Further, the information terminal 10 does not have to be provided with the browser 27.

Further, the memory 14 includes a data storage area 32. The data storage area 32 is an area for storing data and the like necessary for executing the OS 23, the application 25, and the browser 27. The network I / F16 is a wireless interface for wireless communication with the network I / F56 of the router 72 and the MFP50. The information terminal 10 and the MFP 50 transmit and receive data to and from each other via a router 72, for example, by a Wi-Fi (registered trademark) wireless LAN. The communication for connecting the information terminal 10 and the MFP 50 is not particularly limited. For example, the information terminal 10 and the MFP 50 may be connected by short-range wireless communication of Bluetooth (registered trademark) or NFC (registered trademark). Further, the information terminal 10 and the MFP 50 may be connected by wired communication (LAN cable or the like) via the router 72.

For example, the information terminal 10 is set with the router 72 as an access point, and can access the MFP 50 and the Internet 73 via the network I / F 16 and the router 72. Further, the MFP 50 is set with the router 72 as an access point, similarly to the information terminal 10, and can access the information terminal 10 and the Internet 73 via the router 72.

For example, when setting up wireless communication conforming to the communication standard of Wi-Fi (registered trademark), the CPU 12 of the information terminal 10 executes the OS 23 and searches for a router 72 on the network. The CPU 12 receives an instruction to connect to the router 72 based on an operation input to the input I / F 19, and receives an encryption key (also referred to as a network key) of the router 72. The CPU 12 executes a setting process for wireless communication with the router 72 based on the received encryption key, and connects to the router 72 by Wi-Fi (registered trademark) wireless communication.

Further, the CPU 12 executes the application 25 based on the user's operation input for the input I / F 19, transmits the setup information to the MFP 50, and executes the setup of the MFP 50. This setup information is, for example, information for performing wireless communication with the information terminal 10 and the router 72 via a wireless LAN, and is an SSID and an encryption key of the router 72. That is, the setup information is information for connecting the MFP 50 to the wireless network to which the information terminal 10 is connected so that the information terminal 10 and the MFP 50 can communicate with each other via the router 72. The MFP 50 executes a setup for connecting to the router 72 based on the setup information acquired from the information terminal 10, and when the setup is completed, the MFP 50 communicates with the Internet 73 and the information terminal 10 via the router 72. As a result, the information terminal 10 can issue a print instruction, a scan instruction, a fax transmission instruction, and the like to the MFP 50 via the router 72. The MFP 50 may receive information such as an encryption key of the router 72 by the input I / F 60 of the MFP 50 described later, and may set the connection with the router 72 or the information terminal 10.

The LCD 18 includes a display screen that displays various information of the information terminal 10. The device for displaying various information of the information terminal 10 is not limited to the LCD, but may be another display device such as an organic EL display.

The input I / F 19 is, for example, an input device such as a keyboard or a mouse. The input I / F19 of the information terminal 10 is not limited to the keyboard and the mouse, and may be, for example, a touch panel. The input I / F 19 detects a user's operation on the keyboard or mouse, and outputs an electric signal in response to the detection.

Further, the MFP 50 mainly includes a CPU 52, a memory 54, a network I / F56, an LCD 58, an input I / F60, a printer unit 62, a scanning unit 63, and a fax unit 65. These components are made communicable with each other via the bus 64.

The CPU 52 executes the process according to the program 66 in the memory 54. The program 66 is a control program that executes a print process, a scan process, a fax transmission / reception process, an MFP 50 setting process, and the like. The printer unit 62 prints an image on a sheet (for example, paper or OHP). The printer unit 62 may be configured to print by an inkjet method or a configuration to print by an electrophotographic method. For example, when the program 66 acquires print image data from the information terminal 10, the printer unit 62 executes an image printing process based on the print image data. Further, the scanning unit 63 has a reading sensor for reading an image from the document. For example, when the program 66 acquires a scan instruction from the information terminal 10, the scan unit 63 generates scan data and transmits the generated scan data. Further, the FAX unit 65 transmits / receives FAX data to / from another facsimile apparatus via a telephone line. For example, when the program 66 acquires a fax transmission instruction from the information terminal 10, the fax unit 65 transmits the image data included in the transmission instruction.

Further, the program 66 includes, for example, an EWS (abbreviation of Embedded Web Server) program which is a program that functions as a Web server. The CPU 52 causes the MFP 50 to function as a Web server by executing the EWS program. For example, when the power of the MFP 50 is turned on and the program 66 is executed to start the system of the MFP 50, the CPU 52 executes the EWS program to start the Web server.

Further, the memory 54 includes a data storage area 68. The data storage area 68 is an area for storing data and the like necessary for executing the program 66. Password information 69 and security setting flag 70 are stored in the data storage area 68. The password information 69 is password information used for authentication of the Web server on which the MFP 50 is started. For the password information 69, for example, an initial password is set at the stage when the MFP 50 is shipped from the manufacturing factory. This initial password is, for example, a different (ie, unique) password for each MFP50 and is described in the manual attached to the MFP50 at the time of sale. The initial password may be the same for a plurality of MFPs 50. For example, the same initial password may be set for the MFP 50 of the same model.

The security setting flag 70 is information for detecting a change in the setting related to the security of the MFP 50. For example, the MFP 50 is set with a predetermined initial setting when the user who purchased the MFP 50 turns on the power of the MFP 50 for the first time. Further, at this point, the security setting flag 70 is set to, for example, a value indicating "zero". For example, when the security setting is changed from this initial setting, the MFP 50 changes the security setting flag 70 to a value indicating "1". Thereby, the MFP 50 can hold and determine the change of the security setting by the security setting flag 70. The details of the password information 69 and the security setting flag 70 will be described later.

Further, the memory 54 of the MFP 50 and the memory 14 of the information terminal 10 described above are configured by combining, for example, a RAM, a ROM, a flash memory, an HDD, a buffer included in the CPU, and the like. Further, the memory 54 of the MFP 50 and the memory 14 of the information terminal 10 may be storage media readable by a computer. A computer-readable storage medium is a non-transitional medium. In addition to the above examples, the non-transitory medium also includes recording media such as a CD-ROM and a DVD-ROM. The non-transitory medium is also a tangible medium. On the other hand, an electric signal that carries a program downloaded from a server on the Internet is a signal medium that can be read by a computer, which is a kind of medium that can be read by a computer, but is a storage that can be read by a non-transitory computer. Not included in the medium.

Further, the network I / F56 of the MFP 50 is a wireless interface for performing wireless communication with the network I / F16 of the information terminal 10 and the router 72. As described above, the MFP 50 can execute wireless communication with the information terminal 10 and access to the Internet 73 via the router 72, for example, by acquiring the setup information from the information terminal 10 and performing the setup. Become.

The LCD 58 includes a display screen that displays various information of the MFP 50. Further, the input I / F 60 is, for example, a touch panel integrally configured with the LCD 58, and accepts user operations on icons, buttons, and the like displayed on the display screen of the LCD 58. The input I / F included in the MFP 50 is not limited to the touch panel, but may be a hard key or the like.

Next, the Web page of the Web server on which the MFP 50 is started will be described. FIG. 2 shows a state in which the top page of the Web server on which the MFP 50 is started is accessed by the Web browser of the information terminal 10. The display contents and display items of the Web page shown in FIG. 2 and FIG. 3 described later are examples.

As shown in FIG. 2, the Web browser 81 has a URL display field 83, an operation icon 85, and a Web page display field 87. The URL display field 83 is a field displayed at the top of the Web browser 81 and displaying the URL of the Web page accessed by the Web browser 81. The operation icon 85 is an icon that accepts operation input to the Web browser 81, such as updating the display content of the Web page display field 87.

The Web page display field 87 is a field for displaying the Web page accessed by the Web browser 81. In FIG. 2, the top page of the Web page of the MFP 50 is displayed in the Web page display field 87. For example, when the information terminal 10 receives a predetermined operation input for the input I / F 19 in a state where the screen on which the application 25 is started is displayed on the LCD 18, the information terminal 10 starts the Web browser 81 and accesses the top page shown in FIG. ..

The predetermined operation input here means, for example, that when the information terminal 10 starts the application 25, it detects the MFP 50 existing on the local network via the router 72, and displays a screen on the LCD 18 for selecting the detected MFP 50. do. When the information terminal 10 accepts the operation input for selecting the MFP 50 by the input I / F 19, the information terminal 10 displays a link to access the Web page of the MFP 50 on the screen of the application 25. When the information terminal 10 accepts the operation input for selecting the displayed link by the input I / F 19, the information terminal 10 calls the browser 27 from the application 25 and starts the Web browser 81. The information terminal 10 accesses the top page of the MFP 50 by the Web browser 81, and displays the screen shown in FIG. 2 on the LCD 18.

The method of accessing the top page is not limited to the method of starting the Web browser 81 from the above-mentioned application 25. For example, the user may select the icon of the browser 27 to start the Web browser 81 and directly input the URL in the URL display field 83 (see FIG. 2) of the Web browser 81. Alternatively, the application 25 may have the function of the Web browser 81 and access the top page by the application 25.

As shown in FIG. 2, the authentication information unit 91, the message unit 93, the tab 95, the item unit 97, and the content display unit 99 are displayed on the top page displayed in the Web page display field 87. The password input field 91A and the decision icon 91B are displayed on the authentication information unit 91. For example, when the information terminal 10 accepts an operation input for clicking the decision icon 91B with the mouse of the input I / F 19, the information terminal 10 notifies the MFP 50 of the password entered in the password input field 91A. When the MFP 50 acquires a password from the information terminal 10, it executes authentication based on the acquired password. If the password entered in the password input field 91A and the password of the password information 69 match, the MFP 50 determines that the authentication is successful.

The method of authenticating the Web page is not limited to the method of using the password information 69 registered in the above-mentioned MFP 50. For example, the MFP 50 may request authentication from the authentication server according to the setting of the authentication inquiry function described later, and may determine whether or not the result of authentication is returned. Further, the user ID and password may be confirmed by card information such as an IC card.

When the MFP 50 determines that the password authentication is successful, it responds to the information terminal 10 with the data of the Web page shown in FIG. The MFP 50 accepts various settings including security settings on the Web page shown in FIG. In the following description, the state before successful authentication using the password may be referred to as before login, and the state after successful authentication may be referred to as after login. FIG. 2 shows the Web browser 81 before login, and FIG. 3 shows the Web browser 81 after login.

In the web browser 81 after login in FIG. 3, a URL indicating a web page after login is displayed in the URL display field 83. Further, in the authentication information unit 91, the password input field 91A for inputting a password is hidden, and the logout icon 91D for logging out is displayed.

Further, the tab 95 is a selection icon for displaying a plurality of Web pages in one Web page display field 87 of the Web browser 81. The item unit 97 is a unit for displaying the item corresponding to the selected tab 95. The content display unit 99 is a portion that displays information corresponding to the selected item among the items displayed in the item unit 97. The MFP 50 changes the display content of the Web page display field 87 according to the selection of the tab 95 or the item of the item unit 97.

In the state before login shown in FIG. 2, the MFP 50 displays only one tab 95 displaying the characters “General” in the Web page display field 87. In FIG. 2, the item of “Status” in the item unit 97 is selected, and the information corresponding to the selected “Status” is displayed in the content display unit 99. For example, in the state before login, the MFP 50 displays general information and setting items of the MFP 50 such as the ink remaining amount of the printer unit 62 and the maintenance information of the MFP 50 in the item unit 97 and the content display unit 99 (hereinafter, item unit 97). Etc.). The general information and setting items referred to here are, for example, setting items confirmed or set by not only the administrator of the MFP 50 but also a general user.

On the other hand, in the state after login shown in FIG. 3, the MFP 50 has the characters "Address", "FAX", "Print", "Scan", "Administrator", and "Network" in addition to the tab 95 of "General". Display a plurality of tabs 95 displaying. The characters of each tab 95 indicate an outline of the item unit 97 and the like displayed when the tab 95 is selected. In other words, the MFP 50 displays the item unit 97 and the like in different categories by changing the tab 95 to be selected.

When the tab 95 of "Address" is selected, the MFP 50 displays an item unit 97 or the like for registering a telephone number or the like of a fax transmission destination. Further, when the tab 95 of "FAX", "Print", and "Scan" is selected, the MFP 50 displays the item unit 97 for changing the information and settings of each function of FAX, printing, and scanning. Further, when the tab 95 of "Network" is selected, the MFP 50 displays the item part 97 and the like related to the network such as the change of the IP address information and the setting.

FIG. 3 shows a state in which the tab 95 of the “Adaptor” is selected. A plurality of items such as "Login Password" are displayed in the item unit 97. When the "Login Password" item is selected, the MFP 50 accepts the change of the authentication password used in the authentication information unit 91 of FIG. 2, that is, the password of the password information 69 in the content display unit 99. As shown in FIG. 3, the MFP 50 of the present embodiment can change the setting of the MFP 50 by performing authentication on the Web page using the password of the password information 69. The administrator or the like of the MFP 50 makes an input or the like to the Web page of FIG. 3 and changes the setting of the MFP 50.

Further, the MFP 50 has an authority limiting function for setting which of the functions (print, scan, FAX, copy, etc.) of the MFP 50 is permitted to be executed by the user who uses the MFP 50. When this authority restriction function is enabled, the MFP 50 executes user authentication in addition to the above-mentioned authentication using the Web page. More specifically, when the permission restriction function is enabled, the MFP 50 accepts login authentication for the MFP 50 based on, for example, an operation input for the input I / F 60. The MFP 50 changes the functions that can be used by, for example, a logged-in user who has succeeded in authenticating to the MFP 50 and a user who has not succeeded in authentication, based on the setting of the permission restriction function.

Further, the MFP 50 changes, for example, the functions that can be used for each user for each of the logged-in users who have succeeded in authenticating to the MFP 50 based on the setting of the authority restriction function. As a result, the authority of the user who uses the MFP 50 can be set in detail and the security level can be improved. Therefore, in the following description, the authentication is performed by the authentication information unit 91 of the Web page shown in FIG. 2 above, and the authentication for changing various settings of the MFP 50 after the authentication is performed by the administrator authentication and the input I / F60. The authentication using the above is referred to as user authentication, and the authentication for executing the function according to the logged-in user who has succeeded in the authentication will be described.

Further, when the "User Restriction Function" of the item unit 97 of FIG. 3 is selected, the MFP 50 accepts the validity or invalidity of the above-mentioned authority restriction function and the authentication inquiry function in the content display unit 99. The authentication inquiry function is a function for inquiring the authentication server for the authentication information of the user authentication for the MFP 50. The authentication server referred to here is an AD (abbreviation of Active Directory (registered trademark)) server that provides a directory service such as information retrieval. The authentication server is not limited to the AD server, and may be a server capable of providing other directory services, for example, an LDAP server using LDAP (abbreviation of Lightweight Directory Access Protocol).

Further, when the "Secure Function Lock" of the item unit 97 is selected, the MFP 50 accepts the detailed setting of the authority restriction function. FIG. 3 shows a state in which "User List 1-25" of "Secure Function Lock" is selected. As shown in the content display unit 99 of FIG. 3, for example, in the detailed setting of the authority restriction function, the user ID, PIN code, e-mail address, card ID, and the restriction function (“Restriction Function” in FIG. 3) are set. , Can be set for each user.

The MFP 50 may execute user authentication by a method other than the method using the authentication server described above. For example, a method of comparing the user ID or PIN code input by the input I / F60 with the authentication information (information in FIG. 3) stored in the MFP 50, or a method of confirming the user ID or password with an IC card may be used.

Further, when the "Contact information" of the item unit 97 is selected, the MFP 50 receives the information related to the contact information of the administrator (hereinafter, may be referred to as the administrator information) in the content display unit 99. The information related to the contact information here is, for example, information such as an administrator's e-mail address, an administrator's telephone number, and an IP address of a PC used by the administrator. For example, when an error of the type selected by the administrator in advance occurs in the MFP 50, the MFP 50 notifies the administrator of the error based on the information of this "Contact information".

Further, the MFP 50 accepts the setting of the date and time of the MFP 50 when "Date & Time" of the item unit 97 is selected. Further, when "Reset Menu" is selected, the MFP 50 receives an instruction to initialize the settings of the MFP 50. Further, when "Firmware Update" is selected, the MFP 50 receives an instruction to update the program 66 of the MFP 50.

<Authentication processing (Case 1)>
Next, an authentication process for accessing the Web page of the MFP 50 from the information terminal 10 and performing administrator authentication will be described with reference to FIG. Here, the MFP 50 of the present embodiment executes the administrator authentication by the Web page using the password set in the password information 69. For the password information 69, for example, an initial password is set at the time of shipment from the factory of the MFP 50. Therefore, it is preferable from the viewpoint of security to change the password from the initial password to an arbitrary password after starting to use the MFP 50.

Further, as described above, the MFP 50 sets the authentication inquiry function to be valid or invalid, the permission restriction function to be valid or invalid, and each user's in the "User Restriction Function" and "Secure Function Lock" shown in FIG. Permissions can be set. Further, the MFP 50 can set the administrator information in the "Contact information". These authentication inquiry function settings, authority restriction function settings, and administrator information settings (hereinafter, may be referred to as security settings) are set by the administrator of the MFP 50 based on, for example, the security policy on the user side. Will be done. When this security setting is set, it is not preferable in terms of security if a user other than the administrator logs in to the Web page and mistakenly changes the security setting. Therefore, the MFP 50 of the present embodiment executes the above-mentioned change of the initial password and the notification according to the change of the security setting.

In the following description, as an example, the state in which the security setting is the factory default setting of the MFP 50 is referred to as "the state in which the security setting has not been changed", and the state in which the security setting has been changed from the initial setting is referred to as "security". The description will be described as "a state in which the settings have been changed". For example, the default security setting is a state in which the authentication inquiry function is set to off, the authority restriction function is set to off, and no administrator information is set (that is, not set). This initial setting is set for the MFP 50 when the user who purchased the MFP 50 turns on the power of the MFP 50 for the first time, and a value indicating "zero" is set as the security setting flag 70 (see FIG. 1) at this time. ing. Further, the state in which the security setting is changed means, for example, a state in which at least one of the authentication inquiry function on setting, the authority restriction function on setting, and the administrator information setting is made. For example, the MFP 50 is set to at least one of the authentication inquiry function on setting, the authority restriction function on setting, and the administrator information setting based on the operation input for the Web page after authentication (see FIG. 3). If so, the security setting flag 70 is changed to a value indicating "1". As a result, the MFP 50 can determine the change of the security setting by the security setting flag 70. The state in which this security setting is changed is an example of the first state of the present application. The criteria for whether or not the security settings have been changed are not limited to the above criteria. For example, the MFP 50 sets the security setting flag 70 to "1" at the stage where the authentication inquiry function is turned on and the IP address and domain name of the authentication server are set (the stage at which the function operates). You may change it. Further, the MFP 50 may change the security setting flag 70 to "1", for example, when the authority restriction function is turned on and the user ID, authority, and the like shown in FIG. 3 are set.

The security settings of the present application may be settings other than the above-mentioned authentication inquiry function settings, authority restriction function settings, and administrator information settings. For example, as the security setting, various settings that affect the security level of the MFP 50, such as the above-mentioned card authentication setting, the IP address setting of the MFP 50, and the address book setting, can be adopted.

FIG. 4 shows the contents of the display determination process executed by the MFP 50. Case 1 is a case where the top page is accessed with the initial password set for the administrator authentication password and the security setting set to the initial setting (security setting flag 70 is "0"). The MFP 50, for example, is turned on, executes the program 66 on the CPU 52, starts up the Web server, and then starts the display determination process shown in FIG.

Further, the flowchart of the present specification basically shows the processing of the CPU 52 according to the instruction described in the program. That is, the processes such as "determination", "acquisition", "acceptance", and "setting" in the following description represent the processes of the CPU 52. The processing by the CPU 52 also includes hardware control. In addition, "acquisition" is used in the concept that the request is not essential. That is, the process of receiving data without the CPU 52 requesting is also included in the concept of "acquiring data". Further, the "data" in the present specification is represented by a computer-readable bit string. Data having the same substantial meaning and different formats are treated as the same data. The same applies to "information" in the present specification. Further, processing such as "response", "access", and "instruction" is performed by communicating information indicating "response", "access", "instruction", and the like. Further, words such as "response", "access", and "instruction" may be described in the sense of information itself indicating "response", "access", "instruction", and the like.

First, in step 11 of FIG. 4 (hereinafter, simply referred to as S) 11, the MFP 50 determines whether or not the top page of the Web page has been accessed. For example, the information terminal 10 accesses the top page of the MFP 50 when it receives an operation from the user. For example, after executing the application 25 based on the operation input to the input I / F 19, the information terminal 10 accepts the detection of the MFP 50 and the selection of the MFP 50 and accesses the Web server as described above.

The MFP 50 repeatedly executes the determination process of S11 until the top page is accessed (S11: NO). When the MFP 50 determines that the top page has been accessed (S11: YES), the MFP 50 determines whether or not the password set in the password information 69 remains the initial password (S13). For example, in the data storage area 68 of the MFP 50, apart from the password information 69, the information of the initial password is stored in the data storage area 68 as information for comparison. The MFP 50 determines in S13 that the information of the initial password for comparison and the password stored in the password information 69 (that is, the password currently set) match. The method of determining the initial password is not limited to the above method. For example, the MFP 50 may use a flag value indicating whether or not the password of the password information 69 has been changed from the initial password. The MFP 50 sets a flag value of "zero" when the password of the password information 69 is the initial password, sets the flag value to "1" when the password is changed from the initial password, and uses this flag value in S13. The judgment process of may be executed.

In case 1, the initial password is set. Therefore, the MFP 50 makes an affirmative judgment in S13 (S13: YES) and sets the first message (S15). The first message is a message urging the password to be changed from the initial password, as shown in the message unit 93 of FIG. Specifically, for example, set the first message "Please enter the initial password described in the manual to log in. It is recommended to change the password after login". The information in this first message is an example of the second information in the present application. When the MFP 50 executes S15, the MFP 50 responds to the information terminal 10 with the data of the top page in which the first message is set in the message unit 93 (S23). The MFP 50 executes S25 after executing S23.

When the information terminal 10 acquires the data of the top page of the first message from the MFP 50 (S23), the information terminal 10 displays the acquired Web page on the LCD 18. As shown in FIG. 2, the information terminal 10 activates the Web browser 81 to display the top page on which the first message is displayed. As a result, it is possible to prompt the user to change the password and improve security.

When the information terminal 10 displays the top page, the information terminal 10 accepts the password. When the top page of FIG. 2 is displayed on the information terminal 10, the user operates the input I / F19, inputs the initial password in the password input field 91A, and selects the enter icon 91B. When the information terminal 10 receives the operation input for selecting the decision icon 91B, the information terminal 10 transmits the password entered in the password input field 91A to the MFP 50.

The MFP 50 determines in S25 whether or not the administrator authentication by the top page is successful. The MFP 50 determines whether or not the password acquired from the information terminal 10 matches the password set in the password information 69 (in this case, the initial password) (S25). The MFP 50 executes the determination process of S25 until the authentication is successful (S25: NO). If the authentication fails (S25: NO), the MFP 50 may display an error screen on the information terminal 10.

When the passwords match (S25: YES), the MFP 50 responds to the information terminal 10 with the data of the Web page (see FIG. 3) after login (S27). The MFP 50 accepts changes in various settings such as password settings and security settings on the Web page after login (S29). After executing S29, the MFP 50 determines whether or not the logout instruction has been received from the information terminal 10 (S31). The MFP 50 executes S29 until it is logged out (S31: NO), and accepts changes in various settings. When the MFP 50 receives the log-out instruction (S31: YES), the MFP 50 ends the process shown in FIG. The MFP 50 re-executes the process from S11 shown in FIG. When displaying the top page on the information terminal 10 after receiving the logout instruction (S31: YES), the MFP 50 may execute the process from S13 and display the first message or the like.

On the other hand, the information terminal 10 displays the Web page after login acquired from the MFP 50 in S27 on the LCD 18. The information terminal 10 accepts, for example, a password change on a Web page after login. For example, when the "Login Password" of the item unit 97 shown in FIG. 3 is selected, the information terminal 10 displays the changed password input field and the determination icon on the content display unit 99. When the information terminal 10 receives the operation input for selecting the decision icon of the content display unit 99, the information terminal 10 transmits the password of the input field, that is, the changed password desired by the user to the MFP 50.

When the MFP 50 acquires the changed password from the information terminal 10, the MFP 50 updates the password set in the password information 69 to the acquired password (S29). As a result, the password of the password information 69 is changed from the initial password.

For example, when the update of the password information 69 is completed, the MFP 50 responds to the information terminal 10 with the data of the Web page indicating that the update is completed (S29). After confirming that the password change has been completed, for example, the user selects the logout icon 91D shown in FIG. 3 and performs a logout operation. When the log-out icon 91D is selected, the information terminal 10 transmits a log-out instruction to the MFP 50. The MFP 50 performs a logout process (S31: YES).

<Authentication processing (Case 2)>
Next, a case where the password for administrator authentication is changed from the initial password and the security setting is in the initial setting (security setting flag 70 is “0”) (hereinafter referred to as case 2) will be described. ..

Similar to Case 1 described above, the MFP50 determines whether or not the security setting has been changed because the password is not the initial password (S13: NO) when the top page is accessed (S11: YES) (S17). .. The MFP 50 is, for example, when the value of "1" is set in the security setting flag 70, that is, when at least one setting of the authentication inquiry function, the authority restriction function, and the management information is changed from the initial setting. Make an affirmative decision (S17: YES). On the other hand, the MFP 50 makes a negative judgment when the value of "0" is set in the security setting flag 70, that is, when all the settings of the authentication inquiry function, the authority restriction function, and the management information are the initial settings ( S17: NO).

In case 2, the security setting has not been changed, and the MFP 50 makes a negative determination (S17: NO) and sets the message to be displayed in the message unit 93 to be hidden (S19). The MFP 50 responds to the information terminal 10 with the data on the top page that does not display a message in the message unit 93 (S23). The information terminal 10 displays a Web page without a message in the message unit 93 of FIG. As a result, the process of prompting the password change can be stopped on condition that the password has been changed from the initial password, and excessive notification can be suppressed.

When the MFP50 succeeds in administrator authentication with the changed password (S25; YES), the MFP50 accepts the change of the security setting and the like on the page after login (S29). When the MFP 50 accepts the change of the security setting, the MFP 50 changes the value of the security setting flag 70 from "0" to "1".

In the above case 1, the initial password is set and the security setting is not changed. However, as shown in FIG. 4, since the MFP 50 executes S13 before the determination process of S17, the security setting is tentatively changed (the security setting flag 70 is "1"). However, if the initial password remains, the first message (see FIG. 2) is displayed on the top page. Therefore, regardless of the value of the security setting flag 70, the user can be prompted to change the password.

The contents, order, and the like of the flowchart shown in FIG. 4 are examples. The MFP 50 may execute S17 before S13. In this case, the MFP 50 hides the message on the top page if the security setting is changed (S17: YES) even if the initial password remains. As a result, the display process prompting the password change can be terminated according to the change in the security setting.

<Authentication processing (Case 3)>
Next, a case where the password for administrator authentication is changed from the initial password and the security setting is changed from the initial setting (hereinafter referred to as case 3) will be described.

The MFP50 is set to display the second message when the top page is accessed (S11: YES) because the password is not the initial password (S13: NO) and the security setting has been changed (S17: YES). (S21). The MFP 50 responds to the information terminal 10 with the data on the top page displaying the second message in the message unit 93 (S23).

Here, if the number of users who use the MFP 50 increases, there is a possibility that the printed matter may be confused among the users, or users in other departments may operate the MFP 50 without permission, which may increase the security risk. Therefore, the administrator takes measures to raise the security level by changing the security settings such as authentication using the authentication server, limitation of the authority of each user, and notification to the administrator when an error occurs. On the other hand, when the security settings are changed, if a user other than the administrator succeeds in the administrator authentication, the set security settings may be changed by mistake.

Therefore, the MFP 50 uses a message as the second message of Case 3 to call attention to the change of the security setting. Specifically, for example, a second message "Please contact the administrator to change the setting" is set. The information in this second message is an example of the first information in the present application. As a result, the information terminal 10 displays a top page in which the message unit 93 indicates that caution is required when changing the security setting. It is possible to make various users, such as users other than the administrator, a predecessor administrator, and a successor administrator, aware that caution is required when changing security settings. As a result, it is possible to suppress the occurrence of erroneous changes in security settings. For example, a user other than the administrator consults with the administrator without logging in. Further, after confirming the second message, the administrator can log in and change the security settings in the same manner as in the case 2 described above. In this way, the MFP 50 of the present embodiment can execute the notification process according to the setting of the password for the administrator authentication and the security setting.

Incidentally, the information terminal 10 is an example of an external terminal. The MFP 50 is an example of a device. The CPU 52 is an example of a computer, a display means, and a security setting receiving means. The LCD 58 is an example of a display unit. The CPU 52 that executes S13 is an example of password determination means. The CPU 52 that executes S17 is an example of security setting determination means. The first message is an example of the second information. The second message is an example of the first information. The CPU 52 that executes S21 is an example of the first notification means. The CPU 52 that executes S15 is an example of the second notification means. The Web page shown in FIG. 2 is an example of the first display content. The Web page shown in FIG. 3 is an example of the second display content.

As described above, according to the above-described embodiment, the following effects are obtained.
(1) The MFP 50 displays a second message when the password for administrator authentication is changed from the initial password and the security setting is changed. Further, the MFP 50 does not display a message if it has been changed from the initial password and the security setting has not been changed. As a result, when the administrator or the like changes the security setting from the initial setting, that is, when the security level of the MFP 50 is raised, a second message can be displayed to alert the user. Further, the MFP 50 does not display a message when the security setting is not changed and the default setting is maintained. As a result, it is possible to execute the notification process according to not only the state of the initial password but also the state of the security setting of the MFP 50. It is possible to prevent users other than the administrator from accidentally changing the security settings.

(2) The MFP 50 can notify the information terminal 10 that has accessed the Web page using the second message through the Web page. It is possible to call attention to the user who operates the information terminal 10.

(3) Further, the first notification means of the present application is not limited to the method using a Web page. For example, the notification may be executed by using the application 25 of the information terminal 10. In this case, the computer of the present application may be the CPU 12 included in the information terminal 10 capable of communicating with the MFP 50. For example, the MFP 50 notifies the application 25 of the information terminal 10 of information on whether or not the password has been changed from the initial password, information on the security setting flag 70, data on the first and second messages, and the like. For example, the MFP 50 may notify using commands and parameters available in the application 25. The information terminal 10 may determine the change of the initial password based on the information acquired from the MFP 50. Further, the information terminal 10 may determine whether the security setting has been changed based on the value of the security setting flag 70 acquired from the MFP 50. In this case, the CPU 12 is an example of the password determination means and the security setting determination means of the present application. Then, the information terminal 10 may display the second message acquired from the MFP 50 on, for example, the screen on which the application 25 is executed. In this case, the information terminal 10 is an example of the device of the present application.

According to this, the information terminal 10 can determine the change of the initial password and the like, and can notify the user who operates the information terminal 10 using the second message. It is possible to call attention to the user who operates the information terminal 10.

(4) Further, the first notification means of the present application may be the LCD 58 of the MFP 50. For example, the MFP 50 displays the contents corresponding to the Web page (such as the authentication page in FIG. 2 and the page for accepting the change of the security setting in FIG. 3) on the LCD 58, and inputs the changed password and the setting value of the security setting. You may accept at / F60. Then, the MFP 50 may display the first message or the second message on the LCD 58.

According to this, the MFP 50 can notify the user who operates the input I / F 60 by using the second message through the LCD 58. It is possible to call attention to the user who operates the MFP 50.

(5) When the password is used as the initial password, the MFP 50 can prompt the password change by the first message. The password can be changed to improve the security level of the MFP 50.

(6) The MFP 50 accepts the change of the security setting after the password authentication is successful. The MFP 50 executes the first notification according to the predetermined first state (such as the state in which the authentication inquiry function is enabled) in this security setting. Therefore, the execution of the first notification can be switched depending on whether or not the security level of the MFP 50 has reached a certain security level.

(7) The MFP 50 accepts changes in security settings on a Web page that is not displayed unless authentication is successful using a password. Therefore, in order to change the security setting of the MFP 50 to the first state, it is possible to request authentication using a password and secure a certain security level.

(8) When the authority restriction function is enabled and the authority is set, it becomes a state in which which function of the MFP 50 is to be used by the user is set. When the authority of each user is set, it is highly possible that the MFP 50 is used by a plurality of users, and the security setting of the MFP 50 is likely to be changed by a user other than the administrator. Therefore, by notifying the first information in a state where such authority is set, it is possible to call attention to each user.

(9) In the state where the authentication inquiry function is enabled, when the user authenticates with a password, the authentication with the authentication server is executed. Therefore, there is a high possibility that the MFP 50 is used by a plurality of users, and there is a high possibility that the security settings of the MFP 50 will be changed by a user other than the administrator. Therefore, by notifying the first information while the authentication inquiry function is set, it is possible to call attention to each user.

(10) When the administrator information is set, it is highly possible that the MFP 50 is used by a plurality of users and the administrator who manages the MFP 50 is set. Therefore, there is a high possibility that the security settings of the MFP 50 will be changed by a user other than the administrator. Therefore, by notifying the first information while the administrator information is set, it is possible to call attention to each user.

Further, the present disclosure is not limited to the above embodiment, and can be carried out in various embodiments with various changes and improvements based on the knowledge of those skilled in the art.
Specifically, for example, the MFP 50 may execute the notification by a method other than characters. For example, the MFP 50 may emit a first message or a second message by voice.
Further, the MFP 50 displays the first message and the second message when the top page is accessed, but the display timing is not limited to this. For example, the MFP 50 may display the first message or the second message at the timing when a specific tab 95 such as "Administrator" is selected after login.

The contents of the first message and the second message described above are examples.
Further, in the above embodiment, as the second information of the present application, the first message prompting the change of the password for the administrator authentication is adopted, but the present invention is not limited to this. For example, the second information may be a message indicating the setting status such as "the initial password is still set".
Further, in the above embodiment, as the first information of the present application, the second message for calling attention to the change of the security setting is adopted, but the present invention is not limited to this. For example, the first information may be a message indicating the state of settings such as "security settings have been changed from the initial settings".

Further, in the above embodiment, the MFP 50 accepts the change of the security setting such as the on setting of the authentication inquiry function, the on setting of the authority restriction function, and the setting of the administrator information on the Web page after the authentication is successful. However, the MFP 50 may accept the security setting, for example, on the pre-authentication Web page shown in FIG.
Further, the first state of the present application is not limited to the state in which the set value of the security setting is changed from the initial value. For example, in the first state, the permission restriction function may be turned on, and the user ID, PIN code, e-mail address, and the function for permitting use may be completed for at least one user. That is, the MFP 50 may determine the first state only after reaching the state in which the registration of the user whose authority is to be restricted is completed as well as the state in which the function is enabled.
Further, in the above embodiment, the MFP 50 determines whether or not the security setting has been changed from the initial setting by using the security setting flag 70, but the present invention is not limited to this. For example, the MFP 50 may compare the setting value of the authentication inquiry function at the time of initial setting with the changed setting value and determine whether the security setting has been changed based on the changed setting value.

Further, the MFP 50 may be configured to have at least one of the authentication inquiry function, the authority restriction function, and the administrator information setting function.
Further, the device of the present disclosure is not limited to a multifunction device such as an MFP. For example, the device may be a printer, a fax machine, or a scanner machine. Further, the device may be a device that does not perform image formation, for example, a machine tool, a sewing machine, or the like.
Further, the computer of the present disclosure is not limited to the CPUs 12 and 52. The computer may be an ASIC or another logic integrated circuit, or may be a configuration in which a CPU, an ASIC, or another logic integrated circuit cooperate with each other.

10 Information terminal (external terminal), 50 MFP (device), 58 LCD (display unit), 52 CPU (computer, password determination means, security setting determination means, first notification means, second notification means, display means, security setting Reception means).

Claims (12)

A computer-readable program that accepts instructions for devices for which an initial password is set.
The computer
A password determining means for determining whether or not the password set on the device has been changed from the initial password, and
A security setting determination means for determining whether or not the security setting of the device is in the first state,
When it is determined by the password determining means that the initial password has been changed and the security setting determining means determines that the security setting is in the first state, it is related to the change of the security setting of the device. The first notification means for notifying the first information and
And make it work
When it is determined by the password determining means that the initial password has been changed and the security setting determining means determines that the security setting is not the first state, the first information by the first notifying means is used. A program that does not perform notifications. The computer
The computer included in the device that starts the Web server.
The first notification means is
The program according to claim 1, wherein the data of the Web page displaying the first information is transmitted to an external terminal of an access source that has accessed the Web page of the Web server started by the device. The computer
The computer provided in the external terminal capable of communicating with the device.
The password determination means is
Based on the information obtained from the device, it is determined that the initial password has been changed.
The security setting determination means is
Based on the information acquired from the device, it is determined whether it is the first state, and it is determined.
The first notification means is
The program according to claim 1, wherein the first information acquired from the device is displayed on the external terminal. The computer
The computer included in the device having a display unit.
The first notification means is
The program according to claim 1, wherein the first information is displayed on the display unit included in the device. The computer
Any one of claims 1 to 4 that functions as a second notifying means for notifying the second information prompting the change of the initial password when it is determined by the password determining means that the initial password has not been changed. The program described in. The device is
After successful authentication to the device using the password set for the device, the change of the setting value of the security setting of the device is accepted in the state after the authentication is successful.
The first state is
The program according to any one of claims 1 to 5, wherein the set value is changed from the initial value. The computer
A display means for displaying different contents from the first display content to be displayed before the device is authenticated and the second display content to be displayed after the device is successfully authenticated.
A security setting receiving means that hides the first display content by the display means, accepts an instruction for the content to be displayed in the second display content, and accepts a change in the set value of the security setting based on the received instruction. ,
The program according to claim 6 for functioning. The device is
For the user who uses the device, it has an authority restriction function for setting which of the functions of the device is permitted to be executed.
The first state is
The program according to any one of claims 1 to 7, wherein the security setting for enabling the authority restriction function is set. The device is
It has an authentication inquiry function that queries the authentication server to execute user authentication for the device.
The first state is
The program according to any one of claims 1 to 8, wherein the security setting for enabling the authentication inquiry function is set. The first state is
The program according to any one of claims 1 to 9, wherein the information related to the contact information of the administrator of the device is set as the security setting. Equipped with a control device
The control device is
Password determination process to determine whether the password set on the device has been changed from the initial password,
The security setting determination process for determining whether or not the security setting of the device is in the first state, and
When it is determined by the password determination process that the initial password has been changed and the security setting determination process determines that the security setting is in the first state, it is related to the change of the security setting of the device. The first notification process for notifying the first information and
And run
When it is determined by the password determination process that the password has been changed from the initial password, and when it is determined by the security setting determination process that the security setting is not the first state, the first information by the first notification process is used. An information processing device that does not execute notification. An information processing system including a device for which an initial password is set and an external terminal capable of communicating with the device.
A password determination means for determining whether or not the password set on the device has been changed from the initial password, and
A security setting determination means for determining whether or not the security setting of the device is in the first state,
When it is determined by the password determining means that the initial password has been changed and the security setting determining means determines that the security setting is in the first state, it is related to the change of the security setting of the device. The first notification means for notifying the first information and
Equipped with
When it is determined by the password determining means that the initial password has been changed and the security setting determining means determines that the security setting is not the first state, the first information by the first notifying means is used. An information processing system that does not perform notifications.

Images