JP6750290B2 - Image forming apparatus, information processing method and program - Google Patents

Description

The present invention relates to an information processing device, an information processing method, and a program.

Conventionally, there is known a mechanism for downloading and installing an application from a web page provided by a web server.

For example, Patent Document 1 discloses a configuration in which an MFP downloads and installs software in cooperation with a distribution server that distributes software.

In the related art, when a user who uses an information processing apparatus such as an MFP presses a UI such as a link or a button on a Web page provided by a Web server, the instruction pasted to the UI is information. Unconditionally executed on the processor. Therefore, in a situation where an application, such as spyware, which is not permitted to be installed is installed in the information processing apparatus without permission, the UI (in which the user has pasted an instruction (for example, a start instruction) for the application) If the user presses the UI on the web page, there is a risk that an unauthorized command will be executed.

The present invention has been made in view of the above, and an object of the present invention is to provide an information processing device, an information processing method, and a program that can prevent execution of an unauthorized instruction.

In order to solve the above problems and achieve the object, the present invention is an image forming apparatus that has a scanner function and can be connected to a server via a network, and an icon for utilizing the scanner function, or An operation panel for displaying a selection screen for selecting an icon for displaying an application list screen showing a list of applications downloadable to the image forming apparatus; and an icon for displaying the application list screen on the selection screen. And a first display control unit that controls to obtain a first screen including a procedure for executing a first instruction from the server and display the first screen on the operation panel, and an instruction that is permitted to be executed. A storage unit that stores one or more pieces of instruction information indicating information, and an execution procedure of the first instruction selected from the first screen in the one or more pieces of instruction information stored in the storage unit. And a permission control unit that does not permit execution of the first instruction if the corresponding instruction information does not exist , and the execution procedure of the first instruction is a program installed in the image forming apparatus. Information that identifies a program that executes the execution procedure of the first instruction, and the availability control unit includes information that identifies the program in one or more of the instruction information stored in the storage unit. Does not exist, execution of the first instruction is not permitted, and if information for identifying the program exists, the program is caused to execute a process corresponding to the execution procedure of the first instruction .

According to the present invention, execution of an unauthorized instruction can be prevented.

FIG. 1 is a diagram showing an example of a schematic configuration of an information processing system. FIG. 2 is a diagram illustrating an example of the hardware configuration of the MFP. FIG. 3 is a diagram illustrating an example of the software configuration of the MFP. FIG. 4 is a diagram illustrating an example of functions of the MFP according to the first embodiment. FIG. 5 is a diagram showing an example of the operation screen. FIG. 6 is a diagram showing an example of the application list screen. FIG. 7 is a diagram showing an example of the URL scheme. FIG. 8 is a diagram showing an example of the legal scheme stored in the storage unit. FIG. 9 is a diagram showing an example of the second screen. FIG. 10 is a diagram illustrating an example of the hardware configuration of the application market server. FIG. 11 is a diagram illustrating an example of functions of the application market server. FIG. 12 is a diagram illustrating an example of functions of the application server. FIG. 13 is a diagram illustrating an example of functions of the web server. FIG. 14 is a sequence diagram showing an example of an operation procedure of the information processing system of the first embodiment. FIG. 15 is a sequence diagram showing another example of the operation procedure of the information processing system of the first embodiment. FIG. 16 is a diagram for explaining the characteristics of the MFP according to the first embodiment. FIG. 17 is a diagram illustrating an example of functions of the MFP according to the second embodiment. FIG. 18 is a diagram showing an example of the third screen. FIG. 19 is a sequence diagram showing an example of the operation procedure of the MFP of the second embodiment.

Hereinafter, embodiments of an information processing apparatus, an information processing method, and a program according to the present invention will be described in detail with reference to the accompanying drawings. Hereinafter, as an example of the information processing apparatus according to the present invention, a multifunction peripheral (MFP), which is one aspect of the image forming apparatus, will be described as an example, but the present invention is not limited to this. The multifunction peripheral is a device having a plurality of different functions such as a copy function, a scanner function, a printer function, and a fax function.

(First embodiment)
FIG. 1 is a diagram showing an example of the configuration of the information processing system 100 of this embodiment. As shown in FIG. 1, the information processing system 100 includes an MFP 1, an app market server 2, an application server 3, and a web server 4, which are interconnected via a network 8.

The app market server 2 is an example of a “server” that can be connected to the MFP 1 via the network 8. For each of a plurality of applications, an application list screen in which an instruction to install the application in the MFP 1 is associated is displayed in the MFP 1. To provide. More specific contents will be described later. In this example, among applications displayed on the application list screen (hereinafter, sometimes referred to as “app market application”) that provides a function of acquiring the application list screen from the application market server 2 and displaying it on the MFP 1. An application that provides a function of controlling the installation of an application selected by a user in the MFP 1 (hereinafter, also referred to as an “installer”), an application that manages a legitimate scheme described later (hereinafter, an “command management application”). May be referred to as “”) is installed in the MFP 1 in advance. The function of the application market application is realized by using an application for providing the function of the web browser, and thus may be collectively referred to as a “browser application”. The specific contents of the MFP 1 will be described later.

The application server 3 holds the applications displayed on the application list screen and delivers the applications in response to a request from the MFP 1. The web server 4 provides a web page in response to a request from the MFP 1. This Web page displays a UI (link, button, etc.) to which a command for a specific application is pasted. The specific contents of these will be described later.

Next, the hardware configuration of the MFP 1 will be described with reference to FIG. As shown in FIG. 2, the MFP 1 includes a main body 10 that can realize various functions such as a copy function, a scanner function, a fax function, and a printer function, and an operation unit 20 that receives user operations. It should be noted that accepting a user operation is a concept including accepting information (including a signal indicating a coordinate value on a screen) input according to a user operation. The main body 10 and the operation unit 20 are communicably connected to each other via a dedicated communication path 30. The communication path 30 may be of the USB (Universal Serial Bus) standard, for example, but may be of any standard regardless of whether it is wired or wireless.

The main body 10 can perform an operation according to the operation received by the operation unit 20. The main body 10 can also communicate with an external device such as a client PC (personal computer), and can also perform an operation according to an instruction received from the external device.

First, the hardware configuration of the main body 10 will be described. As shown in FIG. 2, the main body 10 includes a CPU 11, a ROM 12, a RAM 13, an HDD (hard disk drive) 14, a communication I/F (interface) 15, a connection I/F 16, and an engine unit 17. , These are interconnected via the system bus 18.

The CPU 11 centrally controls the operation of the main body 10. The CPU 11 controls the overall operation of the main body 10 by executing a program stored in the ROM 12, the HDD 14, or the like, using the RAM 13 as a work area (work area), and the above-described copy function, scanner function, fax function, printer function, etc. To realize various functions of.

The communication I/F 15 is an interface for connecting to the network 8. The connection I/F 16 is an interface for communicating with the operation unit 20 via the communication path 30.

The engine unit 17 is hardware that performs processing other than general-purpose information processing and communication for realizing a copy function, a scanner function, a fax function, and a printer function. For example, a scanner (image reading unit) that scans and reads an image of a document, a plotter (image forming unit) that prints on a sheet material such as paper, and a fax unit that performs fax communication are provided. Further, a specific option such as a finisher for sorting printed sheet materials or an ADF (automatic document feeder) for automatically feeding a document can be provided.

Next, the hardware configuration of the operation unit 20 will be described. As shown in FIG. 2, the operation unit 20 includes a CPU 21, a ROM 22, a RAM 23, a flash memory 24, a communication I/F 25, a connection I/F 26, and an operation panel 27, which are system buses 28. Are connected to each other via.

The CPU 21 centrally controls the operation of the operation unit 20. The CPU 21 controls the overall operation of the operation unit 20 by executing a program stored in the ROM 22, the flash memory 24, or the like, using the RAM 23 as a work area (work area), and outputs information (images corresponding to the input received from the user. ) And other various functions described later are realized.

The communication I/F 25 is an interface for connecting to the network 8. The connection I/F 26 is an interface for communicating with the main body 10 via the communication path 30.

The operation panel 27 receives various inputs according to the user's operation and displays various information (for example, information according to the received operation, information indicating the operation status of the MFP 1, information indicating the setting state, etc.). .. In this example, the operation panel 27 is composed of a liquid crystal display device (LCD) having a touch panel function, but the operation panel 27 is not limited to this. For example, it may be composed of an organic EL display device having a touch panel function. Further, in addition to or instead of this, an operation unit such as a hardware key or a display unit such as a lamp may be provided.

Next, the software configuration of the MFP 1 will be described. FIG. 3 is a schematic diagram illustrating an example of the software configuration of the MFP 1. As shown in FIG. 3, the main body 10 has an application layer 101, a service layer 102, and an OS layer 103. The substance of the application layer 101, the service layer 102, and the OS layer 103 is various software stored in the ROM 12, the HDD 14, and the like. Various functions are provided by the CPU 11 executing these software.

The software of the application layer 101 is application software for operating a hardware resource and providing a predetermined function (in the following description, it may be simply referred to as “application”). Examples of the application include a copy application for providing a copy function, a scanner application for providing a scanner function, a fax application for providing a fax function, and a printer application for providing a printer function.

The software of the service layer 102 is software that is interposed between the application layer 101 and the OS layer 103, and provides the application with an interface for utilizing the hardware resources included in the main body 10. More specifically, it is software for providing a function of receiving an operation request for a hardware resource and arbitrating the operation request. The operation request received by the service layer 102 may be a request for reading by a scanner or printing by a plotter.

The interface function of the service layer 102 is provided not only to the application layer 101 of the main body 10 but also to the application layer 201 of the operation unit 20. That is, the application layer 201 (application) of the operation unit 20 can also realize a function using the hardware resource of the main body 10 (for example, the engine unit 17) via the interface function of the service layer 102. For example, the interface function of the service layer 102 is provided by WebAPI.

The software of the OS layer 103 is basic software (operating system (OS)) for providing a basic function of controlling the hardware included in the main body 10. The software of the service layer 102 converts requests for using hardware resources from various applications into commands interpretable by the OS layer 103 and passes the commands to the OS layer 103. Then, when the command of the software of the OS layer 103 is executed, the hardware resource operates according to the request of the application.

Similarly, the operation unit 20 includes an application layer 201, a service layer 202, and an OS layer 203. The application layer 201, the service layer 202, and the OS layer 203 included in the operation unit 20 have the same hierarchical structure as the main body 10 side. However, the functions provided by the applications of the application layer 201 and the types of operation requests that the service layer 202 can accept are different from those on the main body 10 side. The application of the application layer 201 may be software for operating a hardware resource included in the operation unit 20 to provide a predetermined function, but mainly functions included in the main body 10 (copy function, scanner function, fax function). , Software for providing a function of a UI (user interface) for performing an operation and a display regarding a printer function). In this example, the application layer 201 includes a browser application (application market application) and the like, and the service layer 202 includes an installer, a command management application, and the like.

In this embodiment, the software of the OS layer 103 on the main body 10 side and the software of the OS layer 203 on the operation unit 20 side are different from each other in order to maintain the independence of the functions. That is, the main body 10 and the operation unit 20 operate independently of each other by different operating systems. For example, Linux (registered trademark) can be used as the software of the OS layer 103 on the main body 10 side, and Android (registered trademark) can be used as the software of the OS layer 203 on the operation unit 20 side.

As described above, in the MFP 1 of the present embodiment, since the main body 10 and the operation unit 20 operate in different operating systems, the communication between the main body 10 and the operation unit 20 is not the inter-process communication in the common device. Instead, it is performed as communication between different devices. This includes an operation (command communication) of transmitting information (contents of an instruction from the user) received by the operation unit 20 to the main body 10, an operation of notifying the operation unit 20 of an event by the main body 10, and the like. Here, the functions of the main body 10 can be used by the operation unit 20 performing command communication with the main body 10. In addition, examples of the event notified from the main body 10 to the operation unit 20 include an execution status of an operation in the main body 10 and contents set on the main body 10 side.

Further, in the present embodiment, the power supply to the operation unit 20 is performed from the main body 10 via the communication path 30, so that the power supply control of the operation unit 20 is independent of the power supply control of the main body 10 (independently). You can do it.

Next, the functions of the MFP 1 will be described. FIG. 4 is a diagram illustrating an example of functions of the MFP 1. As shown in FIG. 4, the MFP 1 includes a display control unit 111, an acquisition unit 112, a storage unit 113, an availability control unit 114, and an execution control unit 115. For convenience of explanation, FIG. 4 mainly illustrates the functions according to the present invention, but the functions of the MFP 1 are not limited to these.

The display control unit 111 controls to display a screen on the operation panel 27. For example, the display control unit 111 controls the operation panel 27 to display operation screens for performing various operations. FIG. 5 is a diagram showing an example of the operation screen, and an icon 5 for activating the application market application is displayed on the operation screen. In addition, the display control unit 111 has a function of performing control for displaying the first screen acquired by the acquisition unit 112 (described later) (function of the first display control unit). Further, the display control unit 111 has a function of performing control to display a second screen indicating that the first command cannot be executed when the permission control unit 114 described later does not permit execution of the first command. (Function of second display control unit). Details will be described later.

The description of FIG. 4 will be continued. The acquisition unit 112 acquires the first screen including the execution procedure of the first instruction from the application market server 2. In this example, the execution procedure of the first instruction is represented by a URL (Uniform Resource Locator) scheme, and the acquisition unit 112 associates the URL scheme describing the installation instruction execution procedure with each of a plurality of applications. The application list screen can be obtained from the application market server 2 or a Web page (for convenience of explanation, a UI page (link, button, etc.) to which a URL scheme describing the execution procedure of a predetermined command is pasted is displayed. In the following, it may be referred to as a “Web screen”) from the Web server 4. In this example, the application list screen and the Web screen correspond to the “first screen” in the claims.

In this embodiment, when the user touches the icon 5, the browser application (acquiring unit 112) causes the application market server 2 to request a signal for requesting an application list screen (hereinafter, referred to as “application list screen request”). Yes) is sent. Then, as a response, the application list screen is acquired from the application market server 2. Further, in the present embodiment, when the user performs an operation of inputting the URL of the web server 4 on the operation screen, the browser application (acquisition unit 112) causes the web server 4 to request a web screen signal ( Hereinafter, it may be referred to as a “Web request”). Then, as the response, the web screen is acquired from the web server 4.

Here, the application list screen will be described as an example of the first screen. FIG. 6 is a diagram showing an example of the application list screen. In the example of FIG. 6, on the application list screen, for each of a plurality of applications, descriptive information explaining the contents of the application and a button 6 for instructing the installation of the application (hereinafter, referred to as “install button 6”). And are displayed. In this example, the URL scheme describing the execution procedure of the install instruction is pasted on the install button 6 corresponding to the application. In this example, pressing the install button 6 means selecting the URL scheme pasted on the install button 6. Here, as an example of the execution procedure of the first instruction, the execution procedure of the installation instruction will be described as an example. Further, here, the procedure of executing the installation instruction is represented by a URL scheme. The header part of the URL scheme represents information for identifying an application that executes an instruction, or information for identifying an instruction execution procedure (identifying the type of instruction execution procedure).

FIG. 7 is a diagram showing an example of the URL scheme pasted on the install button 6 corresponding to the application identified by the ID (application ID) “49354”. The "installer" part in FIG. 7 is the header part of the URL scheme. Below, the header part of a URL scheme may be called a "scheme part." In the example of FIG. 7, the scheme portion “installer” represents information for identifying an application that executes an installation instruction, and in this example, represents an installer installed in the MFP 1. In addition, a portion of "installApp" in "installApp?id=49354" in FIG. 7 is an installation command, and an argument of the installation command is "id=49354". This represents an installation instruction of the application identified by the id “49354”. That is, it is a part that represents the specific content of the instruction.

That is, the URL scheme shown in FIG. 7 is the information describing the execution procedure of the installation instruction in the URL format. When this URL scheme is selected, the installer is activated, and the activated installer has an id of “49354”. It will execute the instructions to install the identified application.

The description of FIG. 4 will be continued. The display control unit 111 controls the display of the first screen acquired by the acquisition unit 112. In the present embodiment, the display control unit 111 controls to display the application list screen and the Web screen acquired by the acquisition unit 112 on the operation panel 27.

The storage unit 113 stores one or more pieces of instruction information indicating information regarding instructions that are permitted to be executed. In this example, the instruction information is information for identifying the execution procedure of the instruction that is permitted to be executed, or information for identifying the application that executes the instruction that is permitted to be executed. The scheme part (header part) of the URL scheme that represents the execution procedure of the command that is permitted to be executed is stored as command information (hereinafter referred to as “legal scheme”). That is, in this example, the command information (legitimate scheme) is represented by the information of the header part of the URL scheme. FIG. 8 is a diagram showing an example of the legitimate scheme stored in the storage unit 113. The legitimate scheme “http” shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of an instruction to access via the Web (Web access instruction). The legitimate scheme "https" shown in FIG. 8 is a general scheme for identifying the execution procedure of the Web access command encrypted by SSL/TLS. The legitimate scheme "file" shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of an instruction to access a local file. The legitimate scheme "about" shown in FIG. 8 is a general-purpose scheme for identifying the execution procedure of an instruction for displaying the details of a page and settings. Further, the legitimate scheme “ftp” shown in FIG. 8 is a general-purpose scheme for identifying an execution procedure of an instruction for transmitting and receiving a file by FTP. Further, the legitimate scheme "installer" shown in FIG. 8 is a custom scheme that identifies the application that executes the instructions to install the application and is user defined. The number and types of legal schemes stored in the storage unit 113 can be changed arbitrarily.

The description of FIG. 4 will be continued. The permission/prohibition control unit 114 corresponds to the execution procedure of the first command selected from the first screen (in this example, the application list screen or the Web screen) among the one or more legal schemes stored in the storage unit 113. The execution of the first instruction is not permitted if there is no valid scheme to execute. In the present embodiment, the permission/prohibition control unit 114 selects the scheme part (header) of the URL scheme selected from the first screen (application list screen, Web screen) among the one or more legal schemes stored in the storage unit 113. (No part) does not exist, the execution of the command whose execution procedure is shown in the URL scheme selected from the first screen is not permitted.

On the other hand, if the legal scheme corresponding to the execution procedure of the first instruction selected from the first screen is present among the one or more legal schemes stored in the storage unit 113, the permission/prohibition control unit 114 Allow execution of the first instruction. More specific contents will be described later.

When the permission control unit 114 does not permit the execution of the first instruction, the display control unit 111 controls to display the second screen indicating that the first instruction cannot be executed. FIG. 9 is a diagram showing an example of the second screen. When the permission control unit 114 does not permit the execution of the first command, the display control unit 111 controls the operation panel 27 to display a second screen as shown in FIG. 9.

The description of FIG. 4 will be continued. The execution control unit 115 controls the execution of the first instruction when the permission control unit 114 permits the execution of the first instruction. Although more specific contents will be described later, for example, when the first command is an installation command, the execution control unit 115 controls the execution command to execute the installation command when the permission control unit 114 permits the execution of the installation command. I do.

In this example, the functions of the display control unit 111, the acquisition unit 112, the storage unit 113, the availability control unit 114, and the execution control unit 115 described above are provided by the operation unit 20. The functions of the display control unit 111, the acquisition unit 112, the availability control unit 114, and the execution control unit 115 are realized by the CPU 21 executing a program stored in the ROM 22 or the like; At least a part of the functions of the control unit 111, the acquisition unit 112, the availability control unit 114, and the execution control unit 115 may be realized by a dedicated hardware circuit. The storage unit 113 can be realized by the flash memory 24 or the like. Further, among the functions of the acquisition unit 112 described above, the function of transmitting an application list screen request to the application market server 2 and the function of acquiring (receiving) the application list screen from the application market server 2 are the CPU 21 that executes the program. It may be considered that it is realized by a combination with the communication I/F 25. For example, when transmitting the application list screen request to the application market server 2, the CPU 21 controls the communication I/F 25 so as to transmit the application list screen request to the application market server 2. Further, for example, when receiving the application list screen from the application market server 2, the communication I/F 25 receives the application list screen from the application market server 2. Then, the communication I/F 25 notifies the CPU 21 of the application list screen received from the application market server 2. Thereby, the CPU 21 can detect the reception of the application list screen.

Next, the configurations of the app market server 2, the application server 3, and the web server 4 will be described. FIG. 10 is a diagram showing an example of the hardware configuration of the application market server 2. The hardware configurations of the application server 3 and the Web server 4 are the same as those shown in FIG.

As shown in FIG. 10, the application market server 2 includes a CPU 301, a ROM 302, a RAM 303, a communication I/F 304, an input device 305, and a display device 306. The CPU 301 centrally controls the operation of the application market server 2. The ROM 302 is a non-volatile memory that stores various data such as programs. The RAM 303 is a volatile memory that functions as a work area (work area) for various processes executed by the CPU 301. The communication I/F 304 is an interface for connecting to the network 8. The input device 305 is a device used for inputting an operation by a user, and is composed of, for example, a mouse or a keyboard. The display device 306 is a device that displays various types of information, and is composed of, for example, a liquid crystal display device.

FIG. 11 is a diagram showing an example of functions of the application market server 2. As shown in FIG. 11, the application market server 2 includes an application list screen holding unit 211 and an application list screen transmission unit 212. For convenience of description, FIG. 11 mainly illustrates the functions according to the present invention, but the functions of the application market server 2 are not limited to these.

The application list screen holding unit 211 holds the above-mentioned application list screen. Upon receiving the above-mentioned application list screen request from the MFP 1, the application list screen transmission unit 212 transmits the application list screen held in the application list screen holding unit 211 to the MFP 1 as a response.

In the present embodiment, the function of the application list screen transmission unit 212 described above is realized by the CPU 301 executing a program stored in the ROM 302 or the like, but is not limited to this, and for example, a dedicated hardware circuit (semiconductor integrated circuit). Circuit). The application list screen holding unit 211 described above may be realized by an auxiliary storage device such as an HDD. Here, it may be considered that the function of the application list screen transmission unit 212 is realized by a combination of the CPU 301 that executes a program and the communication I/F 304.

FIG. 12 is a diagram showing an example of functions of the application server 3. As shown in FIG. 12, the application server 3 includes an application holding unit 311 and an application transmitting unit 312. For convenience of explanation, FIG. 12 mainly illustrates the functions according to the present invention, but the functions of the application server 3 are not limited to these.

The application holding unit 311 holds a plurality of applications. The application transmitting unit 312 transmits the application held in the application holding unit 311 to the MFP 1 in response to the request (download request) from the MFP 1.

In the present embodiment, the function of the application transmission unit 312 described above is realized by the CPU 301 executing a program stored in the ROM 302 or the like, but is not limited to this. For example, a dedicated hardware circuit (semiconductor integrated circuit or the like) is used. ) May be realized. Further, the application holding unit 311 described above may be realized by an auxiliary storage device such as an HDD or the like. Here, it may be considered that the function of the application transmission unit 312 is realized by a combination of the CPU 301 that executes a program and the communication I/F 304.

FIG. 13 is a diagram illustrating an example of functions of the web server 4. As shown in FIG. 13, the web server 4 includes a web screen holding unit 411 and a web screen transmission unit 412. For convenience of description, FIG. 13 mainly illustrates the functions according to the present invention, but the functions of the Web server 4 are not limited to these.

The web screen holding unit 411 holds the above-mentioned web screen. Upon receiving the above-mentioned Web request from the MFP 1, the Web screen transmission unit 412 transmits the Web screen held in the Web screen holding unit 411 to the MFP 1 as a response.

In the present embodiment, the function of the Web screen transmission unit 412 described above is realized by the CPU 301 executing a program stored in the ROM 302 or the like, but is not limited to this, and for example, a dedicated hardware circuit (semiconductor integrated circuit). Etc.). Further, the Web screen holding unit 411 described above may be realized by an auxiliary storage device such as an HDD. Here, it may be considered that the function of the Web screen transmission unit 412 is realized by a combination of the CPU 301 that executes a program and the communication I/F 304.

Next, an example of an operation procedure of the information processing system 100 of this embodiment will be described. FIG. 14 is a sequence diagram showing an example of an operation procedure of the information processing system 100 of this embodiment. Here, an operation example in the case where the user presses any of the install buttons 6 displayed on the application list screen will be described.

First, when the user touches the icon 5 (see FIG. 5) on the operation screen (step S1), the browser application transmits the above-mentioned application list screen request to the application market server 2 (step S2). Then, as a response, the application list screen is received from the application market server 2 (step S3), and the received application list screen is displayed on the operation panel 27 (step S4).

Next, when the user presses the install button 6 of any application on the application list screen (step S5), the browser application (permission/non-permission control section 114) causes the above-mentioned command management application to have at least one legitimacy. Request a scheme (step S6). The command management application that has received this request transmits one or more legal schemes stored in the storage unit 113 to the browser application (step S7). In this example, the instruction management application exists as a single application, but the present invention is not limited to this, and the function of the instruction management application may be realized by a browser application. For example, the browser application has a menu defining a legal scheme, and the above step S6 and step S7 can be realized by an internal function of the browser application.

After step S7 described above, the browser application (possibility control unit 114) extracts the scheme part of the URL scheme pasted to the install button 6 pressed in step S5, and receives one or more legitimate ones received from the command management application. It is determined whether or not there is a legitimate scheme that matches the extracted scheme part in the scheme (step S8).

For example, the URL scheme pasted on the install button 6 pressed in step S5 is shown in the mode of FIG. 7, and the browser application (possibility control unit 114) receives the plurality of valid schemes shown in FIG. 8 from the command management application. Imagine the case. In this case, the browser application (possibility control unit 114) extracts "installer" as the scheme part of the URL scheme pasted to the install button 6 pressed in step S5. In this example, one or more legitimate schemes received from the instruction management application include the legitimate scheme “installer” that matches the extracted scheme portion (see FIG. 8), and therefore the result of step S8 Is affirmative. In this case, the browser application (permission control unit 114) permits the execution of the install command whose execution procedure is indicated by the URL scheme pasted on the install button 6 pressed in step S5.

Hereinafter, an operation example in the case where the browser application (permission control unit 114) permits execution of an instruction whose execution procedure is indicated by the URL scheme pasted on the install button 6 pressed in step S5 will be described. In this case, the browser application (availability control unit 114) notifies the OS of the operation unit 20 of the URL scheme attached to the install button 6 pressed in step S5 (step S9).

The OS of the operation unit 20 confirms the notified URL scheme (step S10), and confirms that the application that executes the command (install command in this example) whose execution procedure is indicated by the URL scheme is the installer. Then, the OS of the operation unit 20 transmits the URL scheme to the installer (step S11). Not limited to this, for example, the OS of the operation unit 20 is a mode in which the URL scheme is broadcast to each application of the operation unit 20 and the corresponding application (installer in this example) receives the URL scheme. May be.

The installer, which has received the URL scheme from the OS of the operation unit 20, executes an instruction whose execution procedure is indicated by the URL scheme (URL scheme shown in FIG. 7 in this example). More specifically, the installer selects a required parameter (a portion corresponding to the specific content of the instruction) from the URL scheme received from the OS of the operation unit 20 and executes the process based on the selected parameter. In this example, the installer requests the application server 3 to download the application identified by the application ID “49354” (step S12), and downloads the application from the application server 3 (step S13). Then, control is performed to install the application downloaded in step S13 into the MFP 1 (step S14). In this example, the functions of the execution control unit 115 described above can be considered to be provided by the installer.

On the other hand, when the result of the above step S8 is negative, the browser application (possibility control unit 114) executes the instruction whose execution procedure is shown by the URL scheme pasted to the install button 6 pressed in step S5. not allowed. In this case, the browser application (capability control unit 114) does not notify the OS of the operation unit 20 of the URL scheme attached to the install button 6 pressed in step S5. Further, in this case, the browser application (display control unit 111) performs control to display the second screen as shown in FIG. 9 on the operation panel 27 (step S15).

Next, an example of another operation procedure will be described with reference to FIG. Here, a URL scheme (predetermined command) indicating that the user causes a given command (referred to as “target application” in this example) installed on the MFP 1 displayed on the Web screen to be executed by the user An operation example in the case of pressing a UI to which a URL scheme indicating the instruction execution procedure is attached will be described.

First, when the user performs an operation of inputting the URL of the web server 4 on the operation screen (step S20), the browser application (acquisition unit 112) transmits the above web request to the web server 4 (step). S21). Then, as a response, the web screen is received from the web server 4 (step S22), and the received web screen is displayed on the operation panel 27 (step S23).

Next, when the user presses the UI on the Web screen to which the URL scheme indicating the execution procedure of the predetermined instruction is pasted (step S24), the browser application (permission control unit 114) causes the above-mentioned instruction management application to be executed. Requesting one or more legitimate schemes (step S25). The command management application that has received this request transmits one or more legal schemes stored in the storage unit 113 to the browser application (step S26). The browser application (property control unit 114) extracts the scheme part of the URL scheme (the URL scheme selected from the Web screen) pasted on the UI pressed in step S24, and receives one or more received from the command management application. It is determined whether or not there is a legal scheme that matches the extracted scheme part in the legal scheme (step S27).

When the result of the above step S27 is affirmative, the browser application (the permission control unit 114) permits the execution of the command whose execution procedure is indicated by the URL scheme attached to the UI pressed in step S24. Hereinafter, an operation example when the browser application (permission/non-permission control unit 114) permits the execution of an instruction whose execution procedure is indicated by the URL scheme attached to the UI pressed in step S24 will be described. In this case, the browser application (possibility control unit 114) notifies the OS of the operation unit 20 of the URL scheme attached to the UI pressed in step S24 (step S28).

The OS of the operation unit 20 confirms the notified URL scheme (step S29), and confirms that the application executing the instruction (predetermined instruction in this example) whose execution procedure is indicated by the URL scheme is the target application. To do. Then, the OS of the operation unit 20 transmits the URL scheme to the target application (step S30). Not limited to this, for example, the OS of the operation unit 20 broadcasts the URL scheme to each application of the operation unit 20, and the corresponding application (target application in this example) receives the URL scheme. It may be. The target application that has received the URL scheme from the OS of the operation unit 20 executes the command whose execution procedure is indicated by the URL scheme (step S31). In this example, the function of the execution control unit 115 described above can be considered to be provided by the target application.

On the other hand, when the result of the above step S27 is negative, the browser application (possibility control unit 114) does not permit execution of the command whose execution procedure is indicated by the URL scheme pasted on the UI pressed in step S24. .. In this case, the browser application (capability control unit 114) does not notify the OS of the operation unit 20 of the URL scheme attached to the UI pressed in step S24. Further, in this case, the browser application (display control unit 111) controls to display the second screen as shown in FIG. 9 on the operation panel 27 (step S32).

As described above, in the present embodiment, among the one or more legal schemes stored in the storage unit 113, there is a legal scheme that matches the scheme part of the URL scheme selected from the application list screen or the Web screen. If not, execution of the instruction whose execution procedure is indicated by the selected URL scheme is not permitted. That is, as shown in FIG. 16, the MFP 1 according to the present exemplary embodiment can execute the installation instruction only when the scheme part of the URL scheme pasted to the install button 6 pressed by the user from the application list screen matches the legitimate scheme. Allow execution.

For example, an application such as spyware that is not allowed to be installed (hereinafter referred to as “illegal application”) is installed in the MFP 1 without permission, and the MFP 1 executes an execution procedure of a predetermined command executed by the malicious application. It is assumed that a Web screen including a UI to which the URL scheme shown (a URL scheme showing the execution procedure of an unauthorized command) is pasted is displayed from the Web server 4. In such a situation, even if the user presses the UI on the Web screen, unless the scheme part of the URL scheme pasted on the UI corresponds to the legitimate scheme, the URL pasted on the UI Execution of instructions whose execution procedure is shown in the scheme is not allowed. This prevents the execution of unauthorized instructions.

(Second embodiment)
Next, a second embodiment will be described. Descriptions of portions common to the first embodiment described above will be appropriately omitted. FIG. 17 is a diagram showing an example of functions of the MFP 1 of this embodiment. As shown in FIG. 17, the MFP 1 further includes a changing unit 121. In this example, the function of the changing unit 121 is provided by the operation unit 20, and is realized by the CPU 21 executing a program stored in the ROM 22 or the like. However, not limited to this, the function of the changing unit 121 may be realized by a dedicated hardware circuit, for example.

The display control unit 111 according to the present embodiment has a function (a function of the third display control unit) of performing control to display a third screen for receiving an instruction to add or delete command information (valid scheme). In the present embodiment, when the display control unit 111 receives an operation (user's operation) requesting the third screen, the display control unit 111 controls to display the third screen as shown in FIG. 18 on the operation panel 27. A list of legal schemes is displayed on the third screen. In this example, the user performs an operation of selecting one of the legal schemes displayed on the third screen, and presses the "Add" button or the "Delete" button to add or delete the selected legal scheme. The deletion can be instructed.

Returning to FIG. 17, the description will be continued. When the changing unit 121 receives an instruction to add or delete a legal scheme via the third screen, the changing unit 121 adds or deletes the legal scheme stored in the storage unit 113 according to the received instruction.

FIG. 19 is a sequence diagram showing an example of an operation procedure of the MFP 1 when adding or deleting a legitimate scheme stored in the storage unit 113. As illustrated in FIG. 19, when the command management application (display control unit 111) receives an operation requesting the third screen (step S41), the third screen illustrated in FIG. 18 is displayed on the operation panel 27. Control is performed (step S42).

Then, when the instruction management application (change unit 121) receives an instruction to add or delete any legitimate scheme via the third screen (step S43), the instruction management application stores it in the storage unit 113 according to the received instruction. The authorized scheme is added or deleted (step S44). The other contents are similar to those of the first embodiment described above, and thus detailed description thereof will be omitted.

Although the embodiments according to the present invention have been described above, the present invention is not limited to the above-described embodiments as they are, and constituent elements can be modified and embodied without departing from the scope of the invention in an implementation stage. .. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in each of the above-described embodiments. For example, some constituent elements may be deleted from all the constituent elements shown in each embodiment. Furthermore, the constituent elements of different embodiments may be combined appropriately.

Further, in the above-described embodiment, the main body 10 and the operation unit 20 operate independently of each other in different operation systems, but the present invention is not limited to this. For example, the main body 10 and the operation unit 20 operate in the same operation system. It may be in the form. In addition, for example, a single server in which the above-mentioned application market server 2 and the application server 3 are integrated may be provided.

The program executed by the information processing system 100 (MFP 1, application market server 2, application server 3, web server 4, etc.) of the above-described embodiment is a CD-ROM in a file in an installable format or an executable format. , A flexible disk (FD), a CD-R, a DVD (Digital Versatile Disk), a USB (Universal Serial Bus), or the like, and may be configured to be recorded and provided on a computer-readable recording medium, such as the Internet. It may be configured to be provided or distributed via the network. Further, various programs may be configured to be provided by being incorporated in a ROM or the like in advance.

1 MFP
2 application market server 3 application server 4 web server 8 network 10 main body 20 operation unit 100 information processing system 111 display control unit 112 acquisition unit 113 storage unit 114 availability control unit 115 execution control unit 121 change unit 211 application list screen holding unit 212 application List screen transmission unit 311 Application holding unit 312 Application transmission unit 411 Web screen holding unit 412 Web screen transmission unit

JP, 2011-237881, A

Claims (15)

An image forming apparatus having a scanner function and connectable to a server via a network,
An icon for using the scanner function, or an operation panel for displaying a selection screen for selecting an icon for displaying an application list screen showing a list of applications downloadable to the image forming apparatus;
When an icon for displaying the application list screen is selected on the selection screen, control is performed to obtain the first screen including the execution procedure of the first instruction from the server and display the first screen on the operation panel. A first display controller,
A storage unit that stores one or more pieces of instruction information indicating information about instructions that are permitted to be executed;
If the command information corresponding to the execution procedure of the first command selected from the first screen does not exist in the one or more command information stored in the storage unit, the first command information is stored. and whether or not the control unit that does not allow the execution of the instruction, the Bei example,
The execution procedure of the first instruction includes information identifying a program installed in the image forming apparatus, the program executing the execution procedure of the first instruction,
The permission control unit does not permit execution of the first instruction when information identifying the program does not exist in the one or more instruction information stored in the storage unit,
When the information for identifying the program exists, the program is caused to execute a process corresponding to the execution procedure of the first instruction,
Image forming apparatus. The instruction information is information for identifying an execution procedure of an instruction permitted to be executed, or information for identifying an application executing the instruction permitted to be executed,
The image forming apparatus according to claim 1. The permission control unit may include, in the one or more command information stored in the storage unit, the command information corresponding to the execution procedure of the first command selected from the first screen. Permits execution of the first instruction,
The image forming apparatus according to claim 1. A second display control unit that controls to display a second screen indicating that the first command cannot be executed when the permission control unit does not permit execution of the first command;
The image forming apparatus according to claim 1. The execution procedure of the first instruction is represented by a URL scheme,
The image forming apparatus according to claim 1. The header portion of the URL scheme represents information for identifying an application that executes an instruction, or information for identifying a procedure for executing the instruction,
The image forming apparatus according to claim 5. The command information is represented by information in the header portion,
The image forming apparatus according to claim 6. The availability control unit,
Among the one or more command information stored in the storage unit, the command information matching the header part of the URL scheme representing the execution procedure of the first command selected from the first screen is If not present, do not allow execution of the first instruction,
The image forming apparatus according to claim 7. A third display control unit that controls to display a third screen for receiving an instruction to add or delete the command information;
A change unit for adding or deleting the command information stored in the storage unit according to the received instruction when the command for adding or deleting the command information is received via the third screen. ,
The image forming apparatus according to claim 1. The permission control unit further includes an execution control unit that controls execution of the first instruction when the execution of the first instruction is permitted.
The image forming apparatus according to claim 1. The first instruction is an installation instruction,
The image forming apparatus according to claim 10. The execution control unit performs control to execute the installation command when the permission control unit permits execution of the installation command,
The image forming apparatus according to claim 11. The first display control unit and the availability control unit are browsers,
The execution control unit is an installer that downloads and installs the application displayed on the browser into the image forming apparatus,
When the browser receives a selection of an application to be installed via the application list screen, the browser notifies the installer of the instruction information corresponding to the selected application,
The installer requests a corresponding application from the server based on the instruction information,
The image forming apparatus according to claim 12. An information processing method by an image forming apparatus having a scanner function and connectable to a server via a network,
An icon for displaying the application list screen in a selection screen for selecting an icon for using the scanner function or an icon for displaying an application list screen showing a list of applications downloadable to the image forming apparatus. A first display control step of performing control to acquire a first screen including the execution procedure of the first instruction from the server and display the first screen on the operation panel when selecting.
Execution of the first instruction selected from the first screen in the one or more instruction information stored in the storage unit that stores one or more instruction information indicating information regarding the instruction to be executed. If the instruction information corresponding to the instructions are not present, seen including and a propriety control step that does not allow execution of the first instruction,
The execution procedure of the first instruction includes information identifying a program installed in the image forming apparatus, the program executing the execution procedure of the first instruction,
The permission control step does not permit execution of the first instruction when information identifying the program does not exist in the one or more instruction information stored in the storage unit,
When the information for identifying the program exists, the program is caused to execute a process corresponding to the execution procedure of the first instruction,
Information processing method. A computer equipped with an image forming apparatus that has a scanner function and can be connected to a server via a network,
An icon for displaying the application list screen in a selection screen for selecting an icon for using the scanner function or an icon for displaying an application list screen showing a list of applications downloadable to the image forming apparatus. A first display control step of performing control to acquire a first screen including the execution procedure of the first instruction from the server and display the first screen on the operation panel when selecting.
Execution of the first instruction selected from the first screen in the one or more instruction information stored in the storage unit that stores one or more instruction information indicating information regarding the instruction to be executed. A program for executing the permission control step of not permitting execution of the first instruction when the instruction information corresponding to the procedure does not exist ,
The execution procedure of the first instruction includes information identifying a program installed in the image forming apparatus, the program executing the execution procedure of the first instruction,
The permission control step does not permit execution of the first instruction when information identifying the program does not exist in the one or more instruction information stored in the storage unit,
When the information for identifying the program exists, the program is caused to execute a process corresponding to the execution procedure of the first instruction,
Program .

Images