JP6338729B2 - Image processing apparatus, control method therefor, information processing system, and storage medium - Google Patents

Description

The present invention relates to an image processing apparatus and a control method thereof, an information processing system, and relates to a storage medium, in particular, information security policy technology between devices in a network environment.

  Personal computers (PCs) and server devices (file servers, authentication servers, etc.) connected to a network such as an office are preferably operated according to an information security policy determined for each office. The information security policy is a basic policy regarding information security of the entire company, and is a summary of policies for preventing the use of information, intrusion from outside, and information leakage.

  Devices connected to the office network include peripheral devices such as multifunction peripherals and printers in addition to PCs and server devices. In recent multifunction devices, not only simply printing and transmitting images, but also storing image data, providing file service functions to PCs, and playing the same role as other server devices existing on the network Has come to fulfill.

  In order to maintain a safe and secure office environment, it is required to comply with an information security policy in a multi-function device as well as a PC and a server device. To comply with the information security policy here is to prevent unauthorized use of the multifunction device in the office and information leakage, such as requiring user authentication when operating the multifunction device and encryption of the communication path. It shows that there are restrictions on security operations.

  In order to comply with the information security policy, a method of distributing setting values depending on the OS is used in PCs and server devices. For example, setting values depending on the OS relating to encryption of the communication path include “permit non-SSL connection” and the like, and any vendor's PC is uniformly managed in accordance with the information security policy.

  On the other hand, since the items that can be set differ depending on the vendor in the multi-function peripheral, it is not possible to adopt a method of consistently complying with the information security policy by distributing setting values like PCs and server devices. For this reason, the administrator needs to be familiar with the numerous operation settings (hereinafter referred to as “user mode”) for each multifunction device and must be in compliance with the information security policy one by one. It takes a lot of effort. For example, the setting value of the user mode for encrypting the communication path is “Use SSL” in the MFP of company A, and “Encrypt HTTP communication” in the MFP of company B. For this reason, it has been impossible to comply with a uniform information security policy in the past, and the administrator must be familiar with the user mode settings of each company's multifunction peripherals and set the status according to the information security policy one by one. ing. Moreover, if the settings are not set correctly, operations that do not comply with the information security policy are practically allowed, which may threaten the security of the office.

  In view of this, a system has been proposed in which an administrator performs input according to an information security policy to generate and distribute user modes of a plurality of multifunction peripherals (see, for example, Patent Document 1). The administrator answers the question displayed on the setting screen on the PC in accordance with the information security policy. The system that receives the response generates a setting that does not depend on the MFP based on the response (hereinafter referred to as “security policy data”), and converts the generated security policy data into a user mode that depends on the MFP at the distribution destination. To do. By distributing this user mode, even a different multi-function device is a system that is in a state according to the information security policy without knowledge of the multi-function device.

JP 2008-219419 A

  A system that can change the user mode while maintaining a state in accordance with the information security policy may be desirable. For example, when there is an information security policy that requires encryption of the communication path, the multifunction device supports "Use SSL" and "Use IPSEC". Suppose that the information security policy can be followed. At this time, in the conventional system, if a setting value for enabling “use IPSEC” is distributed, the user cannot change it even if he wants to make “use SSL” valid. In order to make a change, the user needs to request the administrator to redistribute the user mode in accordance with the information security policy, which is not convenient.

The present invention has been made in view of the above problems, while maintaining a state in accordance with information security policies, the image processing apparatus and a control method thereof changes the user mode is enabled, an information processing system, and An object is to provide a storage medium .

In order to achieve the above object, an image processing apparatus of the present invention is an image processing apparatus, receiving means for receiving security policy data indicating an information security policy that is an operation policy of one or a plurality of image processing apparatuses, Deriving means for deriving a plurality of setting candidates corresponding to the information security policy indicated by the security policy data received by the receiving means, and based on the setting selected from the plurality of candidates derived by the deriving means Control means for controlling the image processing apparatus; and storage means for storing a plurality of settings related to the operation of the image processing apparatus in association with one type of information security policy, wherein the derivation means includes the receiving means Based on one type of information security policy described in the security policy data received in A plurality of settings relating to the operation of the image processing apparatus are derived .

  According to the present invention, it is possible to change the setting of the image processing apparatus so as to comply with the information security policy, and it is possible to change the user mode while maintaining the state according to the information security policy.

It is a block diagram which shows the outline of the hardware constitutions of the apparatus which comprises the information processing system which concerns on the 1st Embodiment of this invention. (A) A block diagram showing a schematic configuration of functions related to information security policy control in the multifunction peripheral of FIG. 1, and (b) a block diagram showing a schematic configuration of functions related to information security policy control in the PC of FIG. It is. It is a figure which shows an example of the policy setting screen displayed on the input part of PC. (A) A diagram illustrating an example of security policy data stored in a storage device of a PC, (b) a diagram illustrating an example of a conversion rule file stored in a conversion rule storage unit of the multifunction device, and (c) a RAM of the multifunction device. It is a figure which shows an example of the intermediate information memorize | stored in. 6 is a flowchart illustrating a flow of security policy conversion processing executed in the multifunction peripheral. 6 is a flowchart showing a flow of security policy application processing executed in the multifunction peripheral. FIG. 4A is a diagram illustrating an example of user mode names and values stored in a user mode storage unit of the multifunction device, and FIG. 5B is a diagram illustrating an example of screen control information stored in a RAM of the multifunction device. (A) The figure which shows an example of the display screen for PC125 notifying an administrator, (b) The figure which shows an example of the error screen which the screen control part 113 displays. 6 is a flowchart illustrating a flow of processing executed by the screen control unit in the multifunction peripheral. It is a flowchart which shows the flow of the information security policy violation prevention process at the time of user mode setting in 2nd Embodiment. (A) A diagram showing an example of a user mode setting screen displayed on the UI operation unit of the multifunction device, (b) an example of a user mode setting screen in which items that violate the information security policy cannot be changed. FIG. (A) A screen in which “PDF with forced hash” is set to “ON” on the screen shown in FIG. 11 (b), and (b) an example of a generated user mode setting screen. It is a figure which shows the outline of the hardware constitutions of the image processing apparatus in 3rd Embodiment. FIG. 14 is a block diagram illustrating a schematic configuration of functions related to information security policy control in the multifunction peripheral 1450 of FIG. 13. FIG. 14A is a block diagram illustrating a schematic configuration of functions related to information security policy control in the multifunction peripheral 1401 in FIG. 13, and FIG. 14B is a block diagram illustrating a schematic configuration of functions related to information security policy control in a PC. . 6 is a diagram illustrating an example of a combination of a multifunction device type and a conversion rule file stored in a conversion rule storage unit of a PC. FIG. It is a flowchart which shows the flow of the process performed by the user mode production | generation part of PC. It is a block diagram which shows schematic structure of the function relevant to control of the information security policy of the image processing apparatus in 4th Embodiment. 6 is a flowchart illustrating a flow of security policy determination processing executed by a policy application determination unit of the multifunction peripheral. It is a figure which shows the example of XML description of the security policy data of Fig.4 (a). FIG. 5 is a diagram illustrating an XML description example of the policy conversion file in FIG.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 is a block diagram showing an outline of a hardware configuration of devices constituting the information processing system according to the first embodiment of the present invention.

  In FIG. 1, an information processing system according to the first embodiment of the present invention includes a multifunction machine 101, which is an example of an image processing apparatus, and a personal computer (PC) 102, which is an example of an information processing apparatus, connected to each other. Network 126. In addition, the apparatus which comprises the information processing system of this invention is not limited to the example of illustration, A some apparatus may be connected to the network 126 other than the apparatus of illustration. Further, the image processing apparatus may be a device other than the multifunction peripheral (for example, a printer, a scanner, a portable terminal, etc.).

  First, the multifunction peripheral 101 will be described.

  A network communication unit 102 communicates with an external device (for example, the PC 125) via the network 126. Reference numeral 103 denotes a UI operation unit that accepts settings for the multi-function peripheral 101, displays the status of the multi-function peripheral 101, and allows user operations. A CPU 105 executes print data image processing and various controls. A RAM 106 temporarily stores program code executed by the CPU 105 and information such as image data. A storage device 107 stores program codes, image data, and the like. A print engine 108 uses a known technique such as an electrophotographic technique or an inkjet technique to print image data on an actual paper medium. Reference numeral 114 denotes a scanner engine that optically reads an image printed on a paper medium.

  In the above configuration, the copy function in the multi-function peripheral 101 is realized as follows. That is, starting from the operation of the UI operation unit 103, the CPU 105 reads image data from the scanner engine 114 according to the program code stored in the RAM 106. The read image data is taken into the storage device 122, subjected to necessary image processing, and output by the print engine 108.

  The PDF transmission function is realized as follows. That is, starting from the operation of the UI operation unit 103, the CPU 105 reads image data from the scanner engine 114 according to the program code stored in the RAM 106. The read image data is taken into the storage device 122, subjected to predetermined format conversion, and then transmitted from the network communication unit 102 to the designated destination.

  Next, the PC 125 will be described.

  A network communication unit 118 communicates with an external device via the network 126. Reference numeral 119 denotes a CPU that executes various controls. A RAM 120 temporarily stores information such as program codes executed by the CPU 105. A storage device 122 stores program codes and data. An input unit 123 receives an input to the PC 125 by the administrator. The input unit 123 functions as an operation unit and a display unit.

  FIG. 2A is a block diagram showing a schematic configuration of functions related to information security policy control in the multifunction peripheral 101 of FIG. FIG. 2B is a block diagram showing a schematic configuration of functions related to information security policy control in the PC 125 of FIG. In the present embodiment, the illustrated function is described as being configured by software, but may be configured by hardware.

  In FIG. 2A, reference numeral 104 denotes a user mode storage unit that stores names and values of setting items (hereinafter referred to as “user mode”) set by the UI operation unit 103 and related to the operation of the MFP 101. is there. For example, “PDF with compulsory digital signature” and “PDF with compulsory hash” are examples of user mode setting items.

  “PDF with compulsory digital signature” is as follows. In other words, the MFP creates a hash value forcibly from the PDF file when generating the PDF file, adds the electronic signature obtained by encrypting the hash value with the file creator's private key to the file, and the file creator This is a setting item for the function to verify the identity.

  In addition, when the user mode setting item of “PDF with compulsory digital signature” is enabled, it is possible to detect falsification of the created file. “PDF with compulsory hash” is a setting item of a function that makes it possible to detect falsification of a file by forcibly calculating a hash value from the PDF file when the PDF file is generated and adding the hash value to the file.

  “Ftp”, “SFTP”, and the like are also examples of user mode setting items. “FTP” is an abbreviation for File Transfer Protocol, and is a communication protocol for performing file transfer over a network. SFTP is an abbreviation for SSH File Transfer Protocol, and is a communication protocol for performing file transfer using encryption communication in a network. When the user mode setting item “FTP” or “SFTP” is validated, a function of transmitting a file stored in the storage device 107 by FTP can be used.

  Note that the name and value of the user mode are stored in the storage device 107 or the like. A policy storage unit 110 stores security policy data transmitted from the outside via the network communication unit 102 in the storage device 107 or the like. A conversion rule storage unit 111 stores a conversion rule file in which information necessary for comparing the security policy data with the current user mode value of the multifunction peripheral 101 is stored in the storage device 107 or the like. Details of the conversion rule file will be described later.

  A policy conversion unit 112 is a policy conversion unit, and generates intermediate information for comparing the security policy data with the value of the user mode based on the conversion rule file stored in the conversion rule storage unit 111. Reference numeral 115 denotes an intermediate information storage unit that is configured by a nonvolatile storage device and stores intermediate information generated by the policy conversion unit 112.

  Reference numeral 109 denotes a policy verification unit serving as a policy determination unit, which compares the intermediate information stored in the intermediate information storage unit 115 with the user mode value stored in the user mode storage unit 104 and writes it in the conversion rule file. Judgment is made according to the specified conditions. As a result of the determination, if the condition is not satisfied, the policy verification unit 109 generates screen control information for performing screen control. Reference numeral 116 denotes a screen control information storage unit that stores the screen control information generated by the policy verification unit 109. The screen control information is stored in the storage device 107 or the like.

  Furthermore, in addition to the above verification, the policy verification unit 109 also controls the operation of each application of the multifunction peripheral 101. The multifunction machine 101 has various applications (function execution unit 150) for providing the transmission function, print function, file server function, and the like of the multifunction machine 101. The policy verification unit 109 controls such various applications (function execution unit 150) to operate in a limited manner according to the information security policy, or prohibits activation of an application that does not comply with the information security policy.

  Although not shown in FIG. 2, the multi-function peripheral 101 controls the scanner engine 114 to provide a Send module that converts image data obtained by optically reading a document into an electronic file and transmits it to a specified destination. Have. Further, the multifunction machine 101 includes a module that interprets a PDL code received from the PC 125 or another device via a network and executes printing. In addition, a BOX module that accumulates image data in the storage device 107 and a Web browser module that reads and displays information on various websites on the Internet or an intranet using the HTTP or HTTPS protocol. These applications are checked by the policy verification unit 109 for compliance with the security policy. If it is determined that the application does not comply with the security policy, screen control information is generated or activation of the application is restricted.

  Note that the applications controlled by the policy verification unit 109 include applications that are dynamically added to or deleted from the multifunction peripheral 101. For example, Canon has commercialized Multi-Functional Embedded Application Platform (MEAP) (registered trademark) that can dynamically add and delete embedded applications by incorporating a Java (registered trademark) execution environment into the multifunction peripheral 101. MEAP applications that operate in such a Java (registered trademark) execution environment are also subject to operation restriction by the function execution unit 150.

  Reference numeral 117 denotes a policy receiving unit which is a policy receiving unit, and stores security policy data received by the network communication unit 102 in the policy storage unit 110. Reference numeral 113 denotes a screen control unit serving as a screen control unit, which performs screen control using screen control information stored in the screen control information storage unit 116.

  In FIG. 2B, reference numeral 121 denotes a policy generation unit which is a policy generation unit, which generates security policy data in accordance with an administrator input. A policy transmission unit 124 serving as a policy transmission unit transmits the security policy data generated by the policy generation unit 121 from the network communication unit 118 via the network 126.

  Next, three steps in the information security policy control method of the present invention will be described.

  First, the administrator uses the PC 125 to generate security policy data for setting the multifunction machine 101 in a state in accordance with the information security policy (hereinafter also simply referred to as “security policy”).

  Next, the generated security policy data is transmitted and applied from the PC 125 to the multi-function peripheral 101 to determine whether the multi-function peripheral 101 is in compliance with the security policy and notify the administrator.

  Finally, the user uses the MFP 101 to which the security policy data is applied without violating the security policy.

  First, a description will be given of processing in a stage where the administrator uses the PC 125 to generate security policy data for setting the multifunction machine 101 in a state according to the security policy.

  FIG. 3 is a diagram illustrating an example of a policy setting screen for generating security policy data displayed on the input unit 123 of the PC 125. In this embodiment, for the sake of simplicity, only the case where three information security policies of file tampering detection, file sharing, and HDD residual data deletion are set will be described. There may be a security policy. Further, only the case where the value of each information security policy is selected by a radio button will be described, but a format in which selection from a plurality of options by a text field input or a check box is possible.

  In FIG. 3, a policy setting screen 201 is a setting screen for setting three information security policies: “file tampering detection” 202, “file transmission method” 203, and “HDD remaining data deletion” 204.

  “File tampering detection” 202 is an information security policy indicating whether or not tampering detection is necessary for the generated file. In the present embodiment, an information security policy can be selected from three: “use the means with the highest security level”, “use any one”, and “no security policy”. The illustrated example shows a state in which “one of them is valid” is selected.

  “File transmission method” 203 is an information security policy indicating whether or not it is necessary to use encrypted communication when file transmission / reception is performed. In the present embodiment, the information security policy can be selected from “OK for encrypted communication” and “no security policy”. In the illustrated example, “no security policy” is selected.

  “HDD remaining data deletion” 204 is an information security policy indicating whether or not data remaining after processing is to be deleted when a non-volatile storage device is used as a temporary data storage area in copy processing or the like in the multifunction peripheral 101. . In the illustrated example, a state where “delete” is selected is shown.

  The administrator uses the policy setting screen 201 to set each information security policy. When the input unit 123 accepts pressing of the “OK” button 205 on the policy setting screen 201, the policy generation unit 121 generates security policy data according to the contents set on the policy setting screen 201, and the storage device 122. Save to. FIG. 4A shows an example of the security policy data stored in the storage device 122 expressed in a table format. In the present embodiment, the security policy data in the table format is described for the sake of simplicity, but a data format such as XML may be used. FIG. 20 shows security policy data representing the security policy data shown in FIG. 4A in the XML format.

  In the security policy data 301, the first column is an information security policy name (rule) 302 set by the administrator on the policy setting screen 201. The second column is the value (condition) 303 of each information security policy selected by the administrator on the policy setting screen 201.

  Next, a description will be given of a process in which the generated security policy data is transmitted from the PC 125 to the multifunction peripheral 101 and applied to determine whether the multifunction peripheral 101 is in compliance with the information security policy and notify the administrator. .

  The input unit 123 that has received the security policy data transmission instruction from the administrator instructs the policy transmission unit 124 to perform transmission. Upon receiving the instruction, the policy transmission unit 124 transmits the security policy data stored in the storage device 122 from the network communication unit 118 to the network communication unit 102 of the multi-function peripheral 101 via the network 126. The security policy data may be configured to be automatically distributed from the PC 125. In addition, a method for authenticating that the message is sent from an administrator or a specific computer is desirable, but the description thereof is omitted in this embodiment.

  FIG. 5 is a flowchart showing the flow of security policy conversion processing executed when security policy data is applied to the multifunction peripheral 101. Note that this processing is executed by the CPU 105 by the program code read from the storage device 107 into the RAM 106 unless otherwise specified.

  In FIG. 5, when the network communication unit 102 receives security policy data from the PC 125 in step S401, the policy reception unit 117 stores the security policy data in the policy storage unit 110.

  Next, in step S <b> 402, the policy conversion unit 112 acquires the information security policy on the first line from the security policy data stored in the policy storage unit 110. Then, the name of the information security policy and the value of the information security policy are extracted and stored in the RAM 106.

  Next, in step S403, the policy conversion unit 112 acquires the conversion rule file (FIG. 4B) stored in the conversion rule storage unit 111. Then, the name of the information security policy written in the rule part 502 of the acquired conversion rule file is compared with the name of the information security policy stored in the RAM 106. Furthermore, it is determined from the comparison result whether there is a matching name. That is, it is determined whether or not the name of the information security policy extracted in step S402 is included in the information security policy name group of the conversion rule file in FIG. 4B. FIG. 4B shows an example in which the conversion rule file stored in the conversion rule storage unit 111 is represented in a table format. In the present embodiment, a conversion rule file in a tabular format will be described. However, like the security policy data, the tabular conversion rule file does not necessarily have to be in a tabular format.

  In FIG. 4B, the conversion rule file 501 includes a rule part 502 and a condition part 503. In the second column of the rule part 502, names of information security policies that can be described in the security policy data are described. In the third column of the rule part 502, the name of the user mode corresponding to the name of the information security policy is described. The condition part 5033 column describes conditions for determining whether the user mode setting conforms to the information security policy. In the third column of the condition part 503, information security policy values that can be set in the security policy data are described. The last column of the condition part 503 describes a condition for determining whether the user mode setting conforms to the information security policy.

  In the present embodiment, the conversion rule file 501 is described as being stored in advance in the conversion rule storage unit 111. However, like the security policy data, the network communication unit 102 receives the conversion rule file 501 from the outside (for example, the PC 125). There may be. The conversion rule file 501 is distributed to the network communication unit 102 by an administrator different from the administrator of the information system department that creates security policy data, for example, a device administrator, and is stored in the conversion rule storage unit 111. It may be a thing.

  In FIG. 4B, “file tampering detection” in the second column of the rule section 502 corresponds to “PDF with forced digital signature” and “PDF with forced hash” in the user mode of the multi-function peripheral 101. It shows that. This has a function of forcibly adding a hash value of the PDF file (in the case of “PDF with compulsory digital signature”, a digital signature obtained by encrypting the hash value) when the MFP 101 generates the PDF file. This means that these values determine whether or not the information security policy of “file tampering detection” is followed.

  Further, “file transmission / reception method” in the second column of the rule section 502 indicates that it corresponds to “ftp” and “SFTP” in the user mode of the multi-function peripheral 101. ftp is an abbreviation for File Transfer Protocol, and is a communication protocol for performing file transfer over a network. SFTP is an abbreviation for SSH File Transfer Protocol, and is a communication protocol for performing file transfer using encryption communication in a network. This has a function of selecting whether or not FTP or SFTP can be used as a communication protocol that can be used by the multi-function peripheral 101. With these values, it is determined whether or not the information security policy of “file transmission / reception method” is followed. It means to be decided. FIG. 21 shows the conversion rule file 501 in FIG. 4B in the XML format.

  Returning to FIG. 5, if it is determined in step S403 that there is a matching name, the process proceeds to step S404. In step S404, the policy conversion unit 112 converts the name of the information security policy stored in the RAM 106 in step S402 into the name of the user mode described in the rule unit 502 of the conversion rule file 501. The policy conversion unit 112 stores the information in the RAM 106 as intermediate information in association with the value of the information security policy selected by the administrator.

  For example, “file tampering detection” in the security policy data 301 in FIG. 4A matches the “file tampering detection” in the rule part 502 in the conversion rule file 501 in FIG. 4B.

  Therefore, the policy conversion unit 112 converts the information security policy name “file tampering detection” into the user mode names “PDF with forced digital signature” and “PDF with forced hash”. These are associated with the information security policy value “any one valid” and stored in the RAM 106 as intermediate information.

  On the other hand, if it is determined from the determination result in step S403 that there is no matching name, the policy conversion unit 112 stores the name of the information security policy stored in the RAM 106 in step S402 as error information in the RAM 106 (step S405).

  The case where NO is determined in step S403 is, for example, as follows. That is, when the name 302 acquired from the security policy data 301 is “HDD residual data deletion” and the name group of the information security policy described in the rule part 502 of the conversion rule file is “HDD residual data”. If the “delete” item is not included, NO is determined in step S403.

  Next, in step S406, the policy conversion unit 112 determines whether there is an information security policy in the next line of the security policy data. If it is determined that there is an information security policy on the next line, the process proceeds to step S407. In step S407, the policy conversion unit 112 acquires the next line of the security policy data, extracts the name and value of the information security policy, stores them in the RAM 106, and returns to step S403. The processes in steps S403 to S407 are performed until all information security policies included in the security policy data are read. FIG. 4C shows an example in which the intermediate information stored in the RAM 106 is displayed in a tabular format after all the security policy data shown in FIG.

  The intermediate information 601 shown in FIG. 4C indicates that the user mode names “PDF with compulsory digital signature” and “PDF with compulsory hash” correspond to the value “any one valid” of the information security policy. ing. The user mode names “ftp” and “SFTP” correspond to the information security policy value “no security policy”. Note that “HDD remaining data deletion” in the security policy data 301 has no name in the conversion rule file 501, and is stored in the RAM 106 (error information storage unit) as error information in step S405.

  Returning to FIG. 5, when all the security policy data is read, the policy conversion unit 112 stores the intermediate information stored in the RAM 106 in the intermediate information storage unit 115 in step S408.

  FIG. 6 is a flowchart showing the flow of security policy application processing executed when security policy data is applied to the multifunction peripheral 101. Note that this processing is executed by the CPU 105 by the program code read from the storage device 107 into the RAM 106 unless otherwise specified.

  In step S409, the policy verification unit 109 determines whether all the intermediate information stored in the intermediate information storage unit 115 has been read. If it is determined that all are not read, in step S410, the policy verification unit 109 acquires one value of the information security policy that has not been acquired and the name of the corresponding user mode from the intermediate information, and stores them in the RAM 106. . In the case of the intermediate information 601 shown in FIG. 4C, “any one valid”, “PDF with compulsory digital signature”, and “PDF with compulsory hash” are stored in the RAM 106.

  In step S <b> 411, the policy verification unit 109 acquires the current user mode value set in the MFP 101 from the user mode storage unit 104 using the user mode name stored in the RAM 106. FIG. 7A shows the names and values of the user modes stored in the user mode storage unit 104 of the multifunction machine 101 in a table format. “ON” in the table indicates that the function indicated by the name of the user mode is valid, and “OFF” indicates that it is invalid. For example, in step S 411, “OFF” is acquired as the value of “PDF with compulsory digital signature”, and “OFF” is acquired as the value of “PDF with compulsory hash”, and is stored in the RAM 106.

  In step S412, the policy verification unit 109 acquires the corresponding condition from the condition part 503 of the conversion rule file stored in the conversion rule storage part 111 using the read value of the information security policy. Then, it is determined whether the current user mode value stored in the RAM 106 satisfies the condition.

  “Use the means with the highest security level” in the condition unit 503 shown in FIG. 4B indicates that the value of “PDF with compulsory digital signature” in the current user mode is “ON” in step S412. It is shown that it is determined that the above is satisfied. “Any one valid” is determined to satisfy the condition in step S412 when “PDF with compulsory digital signature” in the current user mode is “ON” or “PDF with compulsory hash” is “ON”. Which indicates that. “No security policy” indicates that the condition is determined to be satisfied in step S412 regardless of the current user mode value. “OK for encrypted communication” indicates that the condition is determined when “ftp” in the current user mode is “OFF” and “SFTP” is “ON”.

  If it is determined that the condition is satisfied from the determination result of step S412, the process proceeds to step S417. On the other hand, if it is determined that the condition is not satisfied, the policy verification unit 109 temporarily stores the information stored in the RAM 106 in step S410 and the condition acquired from the conversion rule in step S412 in the RAM 106 as screen control information. (Step S413). Then, the process proceeds to step S417.

  In step S417, the policy verification unit 109 not only confirms the value of the user mode, but also confirms whether each application (function execution unit 418) of the multifunction peripheral 101 complies with the security policy. If it is determined in step S417 that the security policy is observed (YES in step S417), the process returns to step S409. On the other hand, if it is determined in step S417 that the security policy is not observed (NO in step S417), the process proceeds to step S418. In step S418, the policy verification unit 109 stops the operation of the application (function execution unit 418) that does not comply with the security policy.

  A specific example of the process of step S417 and step · BR> R418 will be described.

  First, the policy verification unit 109 determines whether each application (function execution unit 418) installed in the MFP 101 is an application related to a security policy. For example, when applying the security policy of “file tampering detection”, it is determined whether the application (function execution unit 418) installed in the multifunction peripheral is an application that handles files. If the application is related to “file tampering detection”, the policy verification unit 109 determines whether the application can comply with the “file tampering detection” security policy. .

  On the other hand, if the application can comply with the security policy, the file falsification detection function of the application may be forcibly set to ON or the application may be notified that falsification detection of the file is required Good.

  If it is determined in step S412 that the application cannot comply with the security policy for detecting file tampering, the policy verification unit 109 stops the operation of the application that does not comply with the security policy. The stop of the operation of the application means, for example, stop of the start of the application.

  If there are a plurality of applications (function execution unit 418) installed in the multifunction peripheral 101, an application that does not comply with the security policy is identified from the plurality of applications, and the operation of the identified application is stopped.

  The processing from step S409 to step S413 is performed until all the intermediate information is read. When all the intermediate information is read, the process proceeds to step S414.

  In step S414, the policy verification unit 109 stores the screen control information stored in the RAM 106 in the screen control information storage unit 116. FIG. 7B shows the screen control information stored in the RAM 106 at the time of executing step S414 in the form of a table.

  In FIG. 7B, since both the values of the current “PDF with compulsory digital signature” and “PDF with compulsory hash” of the MFP 101 are OFF, the condition of “one of them is valid” is not satisfied. Screen control information is stored. On the other hand, since the conditions of “ftp” and “SFTP” are “no security policy”, the screen control information is not stored.

  In step S415 of FIG. 6, the policy verification unit 109 receives the name of the information security policy stored in the RAM 106 as an error in step S405 of FIG. 5 or the screen control information stored in the screen control information storage unit 116 in step S414. Determine if there is.

  If it is determined that there is an information security policy name or screen control information, the process advances to step S416. In step S416, the policy verification unit 109 transmits these pieces of information from the network communication unit 102 to the PC 125 via the network 126.

  When the network communication unit 118 receives the name of the information security policy, the PC 125 notifies the administrator that there is an information security policy that cannot be applied to the multifunction machine 101. When the PC 125 receives screen control information from the multi-function peripheral 101, the PC 125 displays a display screen as shown in FIG. 8A on the display of the PC 125, indicating that the multi-function peripheral 101 is in a state that violates the information security policy. Notify the administrator.

  In FIG. 8A, “HDD residual data deletion” stored in the RAM 106 as an error in step S405 is extracted from the item “<Error!>”, And “Caution!” Is extracted from the screen control information as the item “Caution!”. “PDF with forced digital signature” and “PDF with forced hash” are displayed. Note that although the PC 125 displays the screen as a method for notifying the administrator, a method of transmitting information by e-mail or the like may be used.

  As described above, according to the present embodiment, the information security policy data created by the PC 125 can be suitably applied to the multifunction machine 101. In particular, an administrator of the information system department that creates an information security policy on the PC 125 can create the information security policy without being conscious of the function of the multi-function peripheral 101 or the setting value of the user mode.

  Next, processing in a stage where the user uses the MFP 101 to which the security policy data is applied without violating the information security policy will be described.

  FIG. 9 is a flowchart illustrating a flow of processing executed by the screen control unit 113 of the multifunction machine 101. Note that this processing is executed by the CPU 105 by the program code read from the storage device 107 into the RAM 106 unless otherwise specified. The process of FIG. 9 is executed after the flowchart of FIG. 6 is executed.

  In step S1001, the screen control unit 113 determines whether screen control information stored in the screen control information storage unit 116 exists. If it is determined that screen control information exists, the screen control unit 113 displays an error screen in step S1002. An example of an error screen displayed by the screen control unit 113 is shown in FIG. In this embodiment, the screen control unit 113 extracts the name of the user mode from the screen control information shown in FIG. 7B, and it is necessary to change the settings of “PDF with forced digital signature” and “PDF with forced hash”. Is displayed. However, as in the screen of FIG. 8A, it may be displayed that the “HDD residual data deletion” security policy is not applied as the item “<Error!>”. Then, it may be displayed that a function necessary for complying with the “HDD remaining data deletion” security policy is added to the multifunction peripheral 101.

  Further, in the present embodiment, the function that can be used by the user in the multifunction peripheral 101 in the state where the error screen is displayed is described as only the user mode setting using the UI operation unit 103. Note that screen control may be performed so that functions not related to the user mode that violate the information security policy can be used.

  Returning to FIG. 9, in step S <b> 1003, the screen control unit 113 determines whether or not the user mode value stored in the user mode storage unit 104 has been changed by the user operating the UI operation unit 103. If it is determined that the setting is not changed, the process returns to step S1002 to display the error screen of FIG. On the other hand, when the setting is changed, security policy data is applied using the intermediate information stored in the intermediate information storage unit 115 in step S1004, and the process returns to step S1001. Note that the processing in step S1004 is the same as the processing from step S409 to step S416 in FIG.

  When it is determined in step S1001 that the screen control information does not exist, the screen control unit 113 performs the same determination as in step S1003 (step S1005). If it is determined in step S1005 that the value of the user mode has been changed, the process proceeds to step S1004. On the other hand, if it is determined in step S1005 that the value of the user mode has not been changed, the screen control unit 113 ends this process and starts the process of FIG. 9 again.

  In the present embodiment, a mode has been described in which the administrator generates security policy data using the policy generation unit 121 of the PC 125. However, it may be configured such that the policy generation unit 121 is in the multifunction peripheral 101 and the administrator accesses the multifunction peripheral 101 using the UI operation unit 103 or the PC 125 to set security policy data.

  According to the first embodiment, the security policy data is converted into a condition that the setting of the multifunction device should satisfy, and it is determined whether or not the converted condition satisfies the current setting of the multifunction device. If it is determined that the setting of the multifunction device does not satisfy the converted condition, the use of the multifunction device is restricted and a notification is given to review the setting of the multifunction device. Accordingly, it is possible to prompt the user mode setting change to comply with the information security policy, and to maintain the state according to the information security policy of the multifunction peripheral.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. In the second embodiment, a method for preventing the user from accidentally changing from a state in which the user complies with the information security policy to a state in which the user violated the information security policy will be described. Note that, except for the processing when the user opens the user mode setting screen using the UI operation unit 103, it is the same as the first embodiment, and the same parts are denoted by the same reference numerals. Description is omitted. Only differences from the first embodiment will be described below.

  In the present embodiment, a description will be given using the MFP 101 in a state where the same security policy data as in the first embodiment is applied.

  FIG. 10 is a flowchart showing the flow of information security policy violation prevention processing when the user mode is set. Note that this processing is executed by the CPU 105 by the program code read from the storage device 107 into the RAM 106 unless otherwise specified.

  In step S1211, the screen control unit 113 receives an operation from the user through the UI operation unit 103, and displays a user mode setting screen.

  In step S <b> 1212, the screen control unit 113 acquires the name of the user mode from the intermediate information storage unit 115 and determines whether the displayed screen is a user mode setting screen related to the information security policy. If it is determined from this determination result that the user mode setting screen is not related to the information security policy, this processing is terminated. On the other hand, if it is determined that the user mode setting screen is related to the information security policy, the process advances to step S1213.

  In step S1213, the screen control unit 113 determines whether there is an item that violates the information security policy when a change is made from the current setting on the setting screen of the user mode. For example, FIG. 11A shows an example of a user mode setting screen displayed on the UI operation unit 103. In the illustrated example, “PDF with compulsory digital signature” 1101 is set to “ON”, and “PDF with compulsory hash” 1102 is set to “OFF”. The “reflect setting” button 1103 is a button for reflecting the selection on the screen to the value of the user mode stored in the user mode storage unit 104 of the multifunction machine 101.

  In the case of FIG. 11A, in order to determine whether or not there is an item that violates the information security policy, first, assuming that “PDF with compulsory digital signature” 1101 is turned OFF, steps S409 to S413 in FIG. Perform the process. The MFP 101 violates the information security policy unless either “PDF with compulsory digital signature” or “PDF with compulsory hash” is ON. Therefore, “OFF” of “PDF with compulsory digital signature” 1101 is determined to be an item that violates the information security policy when it is changed. By the same processing, “ON” of “PDF with compulsory hash” 1102 is determined as an item that does not violate.

  In step S <b> 1214, the screen control unit 113 controls the screen so that the violating items cannot be changed by user operation. For example, the screen shown in FIG. 11A is changed to the screen shown in FIG. In the illustrated example, the “OFF” button 1104 of “PDF with compulsory digital signature” 1101 has been changed (shaded) so that the setting cannot be changed. That is, “PDF with compulsory hash” 1102 can be set to “ON”, but “PDF with compulsory digital signature” 1101 cannot be set to “OFF”.

  In step S1215, screen control unit 113 determines whether the changeable item has been changed. If the changeable item is changed, the process proceeds to step S1216. For example, the screen shown in FIG. 12A is a screen in which “PDF with compulsory hash” 1102 is turned “ON” on the screen shown in FIG.

  In step S <b> 1216, the screen control unit 113 determines whether the user has input setting completion to the UI operation unit 103. If not, the process returns to step S1215. If input, the process proceeds to step S1217. In step S1217, the screen control unit 113 updates the value in the user mode storage unit 104 based on the value input by the UI operation unit 103, and ends this process.

  According to the present embodiment, the user cannot input a setting that violates the information security policy. Therefore, it is possible to prevent the MFP from violating the information security policy due to an incorrect user mode setting.

[Third Embodiment]
In an office in which a multifunction device having the function described in the first embodiment and a multifunction device without the function are mixed, it is necessary to manually set the latter multifunction device in accordance with the information security policy. Therefore, in the present embodiment, a method for performing setting according to the same information security policy for a multi-function device that does not have the function described in the first embodiment will be described. In addition, about the part similar to the said 1st Embodiment, the description is abbreviate | omitted using the same code | symbol. Only differences from the first embodiment will be described below.

  FIG. 13 is a diagram showing an outline of a hardware configuration of an image processing apparatus according to the third embodiment of the present invention.

  In FIG. 13, reference numeral 1401 denotes a multi-function machine that does not have the function described in the first embodiment. Reference numeral 1450 denotes a multifunction machine having the functions described in the first embodiment. Reference numeral 1414 denotes a PC on which an administrator generates and distributes security policy data and generates and distributes user mode settings in accordance with the information security policy.

  Similar to the multifunction machine 101, the multifunction machine 1450 includes a network communication unit 102, UI operation unit 103, CPU 105, RAM 106, storage device 107, print engine 108, and scanner engine 114. The multifunction device 1401 includes a network communication unit 1402, a UI operation unit 1403, a CPU 1405, a RAM 1406, a storage device 1407, a print engine 1409, and a scanner engine 1408. For the sake of convenience, reference numerals different from those of the multifunction machine 101 are attached to portions constituting the multifunction machine 1401, but the hardware configuration is substantially the same.

  The PC 1414 includes a network communication unit 1415, a CPU 1416, a RAM 1417, a storage device 1422, and an input unit 1430. For the sake of convenience, reference numerals different from those of the PC 125 are given to portions constituting the PC 1414, but the hardware configuration is substantially the same.

  FIG. 14 is a block diagram illustrating a schematic configuration of functions related to information security policy control in the multifunction peripheral 1450.

  A multifunction device 1450 is obtained by adding a performance response unit 1433 to the multifunction device 101 illustrated in FIG. When the performance response unit 1433 receives a confirmation request having a function of receiving security policy data from the external device via the network 126 to the network communication unit 1440, the performance response unit 1433 responds.

  FIG. 15A is a block diagram showing a schematic configuration of functions related to information security policy control in the multifunction peripheral 1401, and FIG. 15B is a schematic diagram of functions related to information security policy control in the PC 1414. It is a block diagram which shows a structure.

  In FIG. 15A, reference numeral 1410 denotes a user mode reflection unit that reads a user mode file distributed via the network 126 and updates the value of the user mode stored in the user mode storage unit 1404. When the user mode 1411 receives a request for acquiring the user mode setting in the network communication unit 1402 via the network 126, the user mode 1411 acquires the name and value of the user mode stored in the user mode storage unit 1404, and returns the request to the request source. It is a response part. A multifunction machine type storage unit 1412 stores a multifunction machine type file in which information indicating the type of the multifunction machine is written. Reference numeral 1413 denotes a multifunction device type response unit that returns a multifunction device type file stored in the multifunction device type storage unit 1412 to the request source when a request for acquiring the multifunction device type is received by the network communication unit 1402 via the network 126. is there.

  15B in FIG. 15B is not a conversion rule for a specific multifunction device, but conversion rules for all the multifunction devices connected to the network 126 are stored in pairs with the type of the multifunction device. It is a conversion rule storage unit equivalent to the conversion rule storage unit 111 of the first embodiment.

  Reference numeral 1427 denotes a user mode generation unit that generates a user mode value according to the information security policy. Reference numeral 1428 denotes a multifunction device performance confirmation unit that communicates with another device from the network communication unit 1415 via the network 126 and confirms whether the other device has a function of receiving security policy data.

  Reference numeral 1429 denotes a user mode storage unit that stores values generated by the user mode generation unit and names of user modes corresponding to the values. Reference numeral 1431 denotes a user mode transmission unit that transmits the user mode name and value stored in the user mode storage unit 1429.

  The policy generation unit 1418, policy storage unit 1419, policy conversion unit 1420, policy generation unit 1421, screen control unit 1424, screen control information storage unit 1425, intermediate information storage unit 1426, and policy transmission unit 1432 are shown in FIG. And the description is omitted. In addition, since the generation of security policy data by the administrator in the present embodiment is the same as that in the first embodiment, description thereof is omitted.

  Next, the operation of each device at the time of information security policy distribution in this embodiment will be described.

  First, in the PC 1414, the MFP performance confirmation unit 1428 inquires of the MFP on the network that distributes the security policy data whether the security policy data can be received. For example, when making an inquiry to the multifunction device 1450, the performance response unit 1433 responds from the network communication unit 102 to the network communication unit 1415 via the network 126 that it is possible. When the multifunction device performance confirmation unit 1428 receives a response from the network communication unit 1415, the multifunction device 1450 determines that the multifunction device 1450 can receive the security policy data.

  On the other hand, when the MFP 1401 is inquired, the network communication unit 1415 does not receive a response because there is no performance response unit. Accordingly, the multifunction device performance confirmation unit 1428 determines that the multifunction device 1401 cannot receive the security policy data.

  When the multifunction device 1450 determines that the security policy data can be received, the PC 1414 distributes the security policy data. The multifunction device 1450 applies the received security policy data. Since this application process is the same as the process shown in FIGS. 5 and 6 described in the first embodiment, a description thereof will be omitted.

  When the multifunction device 1401 determines that the security policy data cannot be received, the user mode generation unit 1427 of the PC 1414 sends the value of the current user mode to the multifunction device 1401 from the network communication unit 1415 via the network 126. Request.

  When the network communication unit 1402 receives a request for the current user mode value, the user mode response unit 1411 acquires the name and value of the user mode stored in the user mode storage unit 1404. The user mode response unit 1411 transmits the acquired user mode name and value from the network communication unit 1402 to the network communication unit 1415 of the PC 1414 via the network 126.

  When the network communication unit 1415 receives the user mode name and value, the user mode generation unit 1427 stores the received user mode name and value in the RAM 1417. As shown in FIG. 7A, the user mode name and value stored in the user mode storage unit 1404 of the multifunction device 1401 are “OFF” for “PDF with forced digital signature” and “PDF with forced hash”. In the following description, it is assumed that “ftp” and “SFTP” are “ON”.

  The user mode generation unit 1427 of the PC 1414 requests the type of the MFP from the network communication unit 1415 via the network 126 to the network communication unit 1402 of the MFP 1401.

  When the network communication unit 1402 receives the request for the type of the multifunction device, the multifunction device type response unit 1413 sends the multifunction device type file stored in the multifunction device type storage unit 1412 from the network communication unit 1402 via the network 126. The data is transmitted to the network communication unit 1415.

  When the network communication unit 1415 receives the multifunction device type file, the user mode generation unit 1427 of the PC 1414 acquires the multifunction device type from the multifunction device type file and stores it in the RAM 1417. In the present embodiment, description will be made assuming that the information indicating the MFP stored in the MFP type storage unit 1412 is “aaa”. Therefore, “aaa” is stored in the RAM 1417.

  FIG. 16 is a diagram showing an example of a combination of a multifunction device type and a conversion rule file stored in the conversion rule storage unit 1423 of the PC 1414 in a table format. Note that, as in the illustrated example, it is not necessarily in the form of a table, and may be in an XML format. In the illustrated example, a conversion rule file of a multifunction device of model aaa and a conversion rule file of a multifunction device of model bbb are stored in the conversion rule storage unit 1423.

  The user mode generation unit 1427 of the PC 1414 acquires the conversion rule file corresponding to each composite model stored in the RAM 1417 from the conversion rule storage unit 1423 and stores it in the RAM 1417. Next, the multifunction device 1401 applies security policy data. The processing is the same as the processing in steps S402 to S416 in FIG. 5 except that the conversion rule and the current user mode setting storage location are stored in the RAM 1417. Description is omitted.

  In the present embodiment, after the security policy data is applied, the screen control information shown in FIG. 7B is stored in the screen control information storage unit 1425.

  Next, the processing of the user mode generation unit 1427 executed after application of security policy data will be described with reference to FIG.

  FIG. 17 is a flowchart showing the flow of processing executed by the user mode generation unit 1427. Note that this processing is executed by the CPU 1416 by the program code read from the storage device 1422 into the RAM 1417 unless otherwise specified.

  In step S1501, the user mode generation unit 1427 determines whether the MFP 1401 complies with the information security policy based on whether screen control information is stored in the screen control information storage unit 1425. When it is determined that the screen control information is not stored, the user mode generation unit 1427 determines that the multifunction device 1401 is in compliance with the information security policy, and ends this processing. On the other hand, when it is determined that the screen control information is stored, the multifunction device 1401 does not comply with the information security policy, and thus the user mode setting needs to be changed. Therefore, in step S1502, the user mode generation unit 1427 acquires screen control information from the screen control information storage unit 1425. Then, the name of the user mode is extracted from the screen control information, the value of the user mode is acquired using the name acquired from the RAM 1417, and stored in the user mode storage unit 1429. Further, the user mode generation unit 1427 generates a user mode setting screen based on the user mode name and value stored in the user mode storage unit 1429 (step S1502). An example of the generated user mode setting screen is shown in FIG.

  In step S1503, user mode generation unit 1427 displays the user mode setting screen generated in step S1502 on input unit 1430.

  Next, the administrator is caused to change the user mode setting so as to satisfy the information security policy, and the user mode value according to the information security policy is stored in the user mode storage unit 1429. Since this process is substantially the same as the process of steps S1001 to S1005 of FIG. 9 except that it is performed by the input unit 1430 instead of the UI operation unit, description thereof will be omitted. When the administrator makes the input shown in FIG. 11A, “PDF with compulsory digital signature” is set to “ON”, and “PDF with compulsory hash” is set to “OFF” and stored in the user mode storage unit 1429. .

  Next, the user mode transmission unit 1431 transmits the value of the user mode stored in the user mode storage unit 1429 and the name corresponding thereto to the network communication unit 1402 from the network communication unit 1415 via the network 126.

  When the network communication unit 1402 receives the user mode value and name, the user mode reflection unit 1410 updates the user mode value stored in the user mode storage unit 1404 to the received user mode name and value. As a result, “PDF with compulsory digital signature” is updated from “OFF” to “ON”, and “PDF with compulsory hash” remains “OFF”.

  According to the present embodiment, even in a multi-function peripheral that cannot receive security policy data, the administrator can select a setting that observes the information security policy, and can be in a state that complies with the information security policy.

[Fourth Embodiment]
In a multi-function peripheral, the user mode related to the information security policy may increase or decrease depending on license installation or connection of options. It is necessary to confirm whether the increased or decreased names and values comply with the information security policy. In view of this, in the present embodiment, a method for maintaining the multifunction peripheral in accordance with the information security policy even when the user mode name or the range of values that can be set is increased or decreased will be described. In addition, about the part similar to the said 1st Embodiment, the description is abbreviate | omitted using the same code | symbol. Only differences from the first embodiment will be described below.

  FIG. 18 is a block diagram showing a schematic configuration of functions related to information security policy control of the image processing apparatus according to the fourth embodiment of the present invention.

  A multifunction device 1701 is obtained by adding a policy application determination unit 1717 and a user mode backup storage unit 1718 to the multifunction device 101 illustrated in FIG. The policy application determination unit 1717 detects increase / decrease in the user mode and determines whether application of the information security policy is necessary. The user mode backup storage unit 1718 stores the name and value of the user mode at the timing when the information security policy is applied. Since the flow of processing is the same as in the first embodiment until the information security policy is applied, description thereof is omitted.

  When the information security policy is applied, the policy application determination unit 1717 stores the user mode name and value in the user mode backup storage unit 1718.

  FIG. 19 is a flowchart showing the flow of security policy determination processing executed by the policy application determination unit 1717. Note that this processing is executed by the CPU according to the program code read from the storage device into the RAM unless otherwise specified.

  In step S1801, the policy application determination unit 1717 uses the user mode name and value stored in the user mode storage unit 104 when the MFP 1701 is activated, and the user mode name stored in the user mode backup storage unit 1718. Determine whether the values match. If it is determined that they match, the user mode does not increase or decrease and the information security policy is being followed, so this processing ends.

  On the other hand, if it is determined in step S1801 that they do not match, application of the information security policy is performed in step S1802. The information security policy application process is the same as that described in the first embodiment, and a description thereof will be omitted. Note that the processing in step S1801 is performed when the MFP is activated, but may be performed at regular intervals.

  According to the present embodiment, even if the user mode increases or decreases, the information security policy is immediately applied, so that it is possible to prevent the multifunction device from being used in a state that violates the information security policy.

  The present invention can also be realized by executing the following processing. That is, software (program) that realizes the functions of the above-described embodiments is supplied to a system or apparatus via a network or various storage media, and a computer (or CPU, MPU, or the like) of the system or apparatus reads the program. It is a process to be executed.

101 MFP 109 Policy Verification Unit 112 Policy Conversion Unit 113 Screen Control Unit 117 Policy Reception Unit 121 Policy Generation Unit 124 Policy Transmission Unit 125 PC

Claims (15)

An image processing apparatus,
Receiving means for receiving security policy data indicating an information security policy which is an operation policy of one or a plurality of image processing apparatuses;
Deriving means for deriving a plurality of setting candidates corresponding to the information security policy indicated by the security policy data received by the receiving means;
Control means for controlling the image processing device based on a setting selected from the plurality of candidates derived by the derivation means;
Storage means for storing a plurality of settings relating to the operation of the image processing apparatus in association with one type of information security policy,
The derivation means derives a plurality of settings relating to the operation of the image processing apparatus based on one type of information security policy described in the security policy data received by the receiving means. .   The image processing apparatus according to claim 1, further comprising setting means for setting the setting derived by the deriving means for the image processing apparatus. Accepting means for accepting a change in settings relating to the operation of the image processing apparatus;
Restricting means for restricting the setting corresponding to the information security policy from being changed to a state not satisfying the information security policy by the accepting means;
The image processing apparatus according to claim 1 or 2, further comprising a. An image processing apparatus,
Receiving means for receiving security policy data indicating an information security policy which is an operation policy of one or a plurality of image processing apparatuses;
Deriving means for deriving a plurality of setting candidates corresponding to the information security policy indicated by the security policy data received by the receiving means;
Control means for controlling the image processing device based on a setting selected from the plurality of candidates derived by the derivation means;
If the type of the information security policy described in the security policy data received by the receiving unit is an information security policy related to communication path security, the derivation unit relates to encryption of the communication path of the image processing apparatus. images processor characterized by deriving a candidate set. The image processing apparatus according to claim 4, further comprising setting means for setting the setting derived by the deriving means for the image processing apparatus. Accepting means for accepting a change in settings relating to the operation of the image processing apparatus;
Restricting means for restricting the setting corresponding to the information security policy from being changed to a state not satisfying the information security policy by the accepting means;
The image processing apparatus according to claim 4, further comprising: An image processing apparatus,
Receiving means for receiving security policy data indicating an information security policy which is an operation policy of one or a plurality of image processing apparatuses;
Deriving means for deriving a plurality of setting candidates corresponding to the information security policy indicated by the security policy data received by the receiving means;
Control means for controlling the image processing device based on a setting selected from the plurality of candidates derived by the derivation means;
At least one information security policy included in the security policy data is related to detection of falsification of a file, and a plurality of setting candidates related to the operation of the image processing apparatus corresponding to the information security policy are PDFs with a compulsory digital signature. setting, and, images processor you comprising the set of with compulsory hash PDF. The image processing apparatus according to claim 7, further comprising setting means for setting the setting derived by the deriving means for the image processing apparatus. Accepting means for accepting a change in settings relating to the operation of the image processing apparatus;
Restricting means for restricting the setting corresponding to the information security policy from being changed to a state not satisfying the information security policy by the accepting means;
The image processing apparatus according to claim 7, further comprising: An image processing apparatus,
Receiving means for receiving security policy data indicating an information security policy which is an operation policy of one or a plurality of image processing apparatuses;
Deriving means for deriving a plurality of setting candidates corresponding to the information security policy indicated by the security policy data received by the receiving means;
Control means for controlling the image processing device based on a setting selected from the plurality of candidates derived by the derivation means;
The at least one information security policy included in the security policy data includes a file transmission / reception method, and a plurality of setting candidates related to the operation of the image processing apparatus corresponding to the file transmission / reception method include an FTP setting, and, images processor it is a set of SFTP. The image processing apparatus according to claim 10, further comprising setting means for setting the setting derived by the deriving means for the image processing apparatus. Accepting means for accepting a change in settings relating to the operation of the image processing apparatus;
Restricting means for restricting the setting corresponding to the information security policy from being changed to a state not satisfying the information security policy by the accepting means;
The image processing apparatus according to claim 10, further comprising: An information processing system in which the image processing apparatus according to any one of claims 1 to 12 and the information processing apparatus are connected via a network.
The information processing apparatus includes:
Policy generation means for generating security policy data in which an information security policy is described;
Transmitting means for transmitting the generated security policy data;
An information processing system comprising: A control method for an image processing apparatus, comprising:
A receiving step of receiving security policy data indicating an information security policy that is an operation policy of one or a plurality of image processing apparatuses;
A derivation step of deriving a plurality of setting candidates corresponding to the information security policy indicated by the security policy data received in the reception step;
A control step of controlling the image processing device based on a setting selected from the plurality of candidates derived in the derivation step;
A storage step of storing a plurality of settings related to the operation of the image processing apparatus in association with one type of information security policy,
In the deriving step, a plurality of settings relating to the operation of the image processing device are derived based on one type of information security policy described in the security policy data received in the receiving step. Control method. A computer-readable storage medium for causing a computer to execute the control method of the image processing apparatus according to claim 14 .

Images