JP6787082B2 - Communication equipment and computer programs - Google Patents

Description

The present specification relates to the control of a communication device connected to an external device via the Internet.

The technology disclosed in Patent Document 1 is a technology for confirming the operation of a WEB server when a video camera having a built-in WEB server tries to publish the WEB server on the Internet. When the user presses the "Connect" button to publish the WEB server to the Internet, the video camera sends its IP address to the application server on the Internet. Upon receiving the IP address, the application server, as a client, transmits a request for predetermined content to the IP address. When the video camera receives the content request, it returns a predetermined content to the application server as a WEB server. The video camera displays an error message if it does not receive the content request within the specified time.

Japanese Unexamined Patent Publication No. 2006-279431

However, in general, when the communication device is a third-party device that operates as a client via the Internet and communication is possible from a third-party device that the user of the communication device does not anticipate. Communication devices may have security issues. The above technology employs a configuration in which a video camera receives a request from an application server that operates as a client when an attempt is made to publish a WEB server to the Internet. However, in the above technology, a communication device has a security problem. Since it is not assumed that data will be received from an external device that operates as a client, there is a possibility that security-related processing cannot be executed properly.

This specification can appropriately execute security-related processing by receiving data from an external device acting as a client when the communication device may have a security problem. Disclose the technologies that can be used.

The technique disclosed in the present specification has been made to solve at least a part of the above-mentioned problems, and can be realized as the following application example.

[Application Example 1] A communication device, which is a detection unit that detects that the communication device transitions from a first state in which the specific information cannot be accessed to a second state in which the specific information can be accessed. In response to the detection of the transition from the first state to the second state, a communication request requesting data transmission to the communication device is sent to the communication device via the Internet. A transmission unit that transmits to the device, wherein the communication request is transmitted using the communication device as a client and the first external device as a server, after transmission of the transmission unit and the communication request. A receiving unit that receives specific data from a second external device connected to the communication device via the Internet in response to the communication request, and the specific data is the second external device. A communication device comprising the receiving unit, which receives the data, and the communication device as a server, and an executing unit that executes a specific process related to security in response to the reception of the specific data.

When receiving specific data from a second external device that operates as a client, it can be seen that the external device connected via the Internet can communicate with the communication device as a client. According to the above configuration, the communication request is transmitted to the first external device in response to the detection that the communication device has transitioned from the first state to the second state. Then, in response to receiving specific data from the second external device that operates as a client, a specific process related to security is executed. As a result, even if the communication device may have a security problem, the communication device operates as a client when the communication device transitions from the first state to the second state. By receiving specific data from the external device of 2, it is possible to appropriately execute a specific process related to security.

[Application Example 2] In a communication device, a communication request requesting data transmission to the communication device is connected to the communication device via the Internet in response to the power being turned on to the communication device. The transmission unit that transmits to the first external device, and the communication request is transmitted with the communication device as a client and the first external device as a server. The transmission unit and the communication request. Is a receiving unit that receives specific data from a second external device connected to the communication device via the Internet in response to the communication request, and the specific data is the first. It includes the receiving unit that receives the external device of 2 as a client and the communication device as a server, and an executing unit that executes a specific process related to security in response to receiving the specific data. ,Communication device.

According to the above configuration, the communication request is transmitted to the first external device in response to the power being turned on to the communication device. Then, in response to receiving specific data from the second external device that operates as a client, a specific process related to security is executed. As a result, even if the communication device may have a security problem, when the power is turned on to the communication device, a specific device is specified from the second external device that operates as a client. By receiving the data, specific security-related processing can be performed appropriately.

The techniques disclosed in the present specification can be realized in various forms, for example, an image processing device, an external device, a method for realizing the functions of these devices, a computer program, and the computer program thereof. It can be realized in the form of a recording medium or the like on which the above is recorded.

It is a block diagram which shows the structure of the system 1000. It is a 1st sequence diagram of the setting confirmation process of 1st Example. FIG. 1 is a first diagram showing an example of a request and a response used in the setting confirmation process. It is a 2nd sequence diagram of the setting confirmation process of 1st Example. FIG. 2 is a second diagram showing an example of a request and a response used in the setting confirmation process. It is a 1st sequence diagram of the setting confirmation process of 2nd Example. It is a 2nd sequence diagram of the setting confirmation process of 2nd Example. It is explanatory drawing of the modification.

A. First Example A-1: Configuration of System 1000 Next, an embodiment will be described based on the examples. FIG. 1 is a block diagram showing a configuration of the system 1000.

The system 1000 includes multifunction devices 200A and 200B as communication devices, terminal devices 10A to 10C, a server 300, and relay devices 30A and 30B. The multifunction device 200A and the terminal device 10A are connected to the local area network LN1. The multifunction device 200B and the terminal devices 10B and 10C are connected to the local area network LN2. The local area network LN1 is connected to the relay device 30A, and the local area network LN2 is connected to the relay device 30B. The relay device 30A and the relay device 30B are each connected to the Internet 80 via an Internet service provider (not shown). The server 300 is connected to the Internet 80. As a result, for example, the multifunction device 200A is connected to the terminal device 10A via the local area network LN1, and is connected to the server 300 via the local area network LN1 and the Internet 80.

The multifunction device 200A includes a CPU 210 as a controller of the multifunction device 200A, a volatile storage device 220 such as RAM, a non-volatile storage device 230 such as a hard disk drive and a flash memory, a display unit 240 such as a liquid crystal display, and a liquid crystal panel. It includes an operation unit 250 such as a touch panel and buttons superimposed on the above, a communication unit 270, a scanner unit 280, and a printer unit 290.

The scanner unit 280 optically reads an object such as a document using a photoelectric conversion element such as a CCD or CMOS to generate scan data representing the read image. The printer unit 290 is a device that prints an image on paper (an example of a printing medium) by a predetermined method (for example, a laser method or an inkjet method).

The volatile storage device 220 provides a buffer area for temporarily storing various intermediate data generated when the CPU 210 performs processing. The non-volatile storage device 230 stores the computer program PG1, the setting information database SI, and the destination information database DI. The volatile storage device 220 and the non-volatile storage device 230 are internal memories of the multifunction device 200A.

The computer program PG1 may be provided in advance in the non-volatile storage device 230 at the time of manufacturing the multifunction device 200A. Instead, the computer program PG1 may be provided, for example, in the form of being downloaded from a server connected via the Internet, or in the form of being recorded on a CD-ROM or the like.

The CPU 210 controls the multifunction device 200A by executing the computer program PG1. For example, the CPU 210 executes a print process, a read process, and a facsimile process according to a user's instruction. The printing process is a process of causing the printer unit 290 to print an image. The reading process is a process of causing the scanner unit 280 to optically read the object and generate scan data. In the facsimile process, the scan data generated by the reading process is transmitted as FAX data via the telephone line, or the fax data received via the telephone line is used to cause the printer unit 290 to print an image. Including processing. Further, the computer program PG1 includes the server program SPG. The CPU 210 can execute the WEB server function by executing the server program SPG.

This WEB server function is a function as a server compliant with HTTP (abbreviation of Hypertext Transfer Protocol). For example, this WEB server function provides a setting management service for the terminal device 10A used by the user of the multifunction device 200A to change or acquire the setting information stored in the setting information database SI related to the multifunction device 200A.

The WEB server function of the multifunction device 200A is assumed to provide a service using a device on the local area network LN1, specifically, a terminal device 10A as a client. The WEB server function of the multifunction device 200A does not assume that the service is provided to an external device via the Internet 80. Therefore, from the viewpoint of security, it is preferable that the external device cannot transmit the HTTP request to the multifunction device 200A via the Internet.

In the setting information database SI, the setting information related to the multifunction device 200A includes, for example, various setting information including image processing setting information, network setting information, and setting information related to the display unit 240 and the operation unit 250. Is stored.

The setting information related to image processing includes setting information related to printing processing and setting information related to reading processing. The setting information related to image processing may include personal information. For example, the setting information related to the reading process includes a scan profile which is information in which setting values related to a plurality of reading processes are grouped. The scan profile includes the resolution and number of colors (monochrome, full color, etc.) of the generated scan data, as well as personal information such as an email address indicating the destination of the generated scan data.

The network setting information includes general setting information for TCP / IP compliant communication such as an IP address assigned to the multifunction device 200A and information indicating a subnet mask and a default gateway. Further, the multifunction device 200A can store the scan data in the storage server by designating an external storage server (not shown) connected via the Internet 80 as the destination of the scan data. The setting information related to the network includes information for communicating with the external storage server (for example, URL of the external server) and information indicating whether or not communication with the external server is permitted.

The destination information database DI includes, for example, destination information such as a fax number as a destination of fax data and an e-mail address as a destination of scan data in facsimile processing.

The communication unit 270 includes an interface for performing data communication with an external device. In this embodiment, an interface for connecting to the local area network LN1, specifically, a wired or wireless interface compliant with Ethernet (registered trademark) or Wi-Fi standard is included. Further, the communication unit 270 includes a USB interface for performing data communication in accordance with the USB (Universal Serial Bus) standard. Therefore, an external storage device such as a USB memory can be connected to the communication unit 270.

The configuration of the other multifunction device 200B is the same as the configuration of the multifunction device 200A described above.

The server 300 is a server provided by the vendor of the multifunction devices 200A and 200B. The server 300 includes a CPU 310 as a controller of the server 300, a volatile storage device 320 such as RAM, a non-volatile storage device 330 such as a hard disk drive, and a communication unit 370 for connecting to the Internet IT. ..

The volatile storage device 320 provides a buffer area for temporarily storing various intermediate data generated when the CPU 310 performs processing. The non-volatile storage device 330 stores the server program PG2. By executing the server program PG2, the CPU 310 cooperates with the multifunction devices 200A and 200B to realize the setting confirmation process described later.

In the setting confirmation process described later, it is assumed that the multifunction devices 200A and 200B transmit the HTTP request to the server 300 via the Internet 80. Therefore, the server 300 is assigned the global IP address "GIP_S".

The terminal devices 10A to 10C are known computers such as personal computers and smartphones. The terminal device 10A can use the multifunction device 200A by communicating with the multifunction device 200A via the local area network LN1. For example, the terminal device 10A can transmit a print job to the multifunction device 200A to cause the multifunction device 200A to perform printing. The terminal device 10A can communicate with the WEB server function of the multifunction device 200A to change or acquire the setting information of the multifunction device 200A. Similarly, the terminal devices 10B and 10C can use the multifunction device 200B via the local area network LN2.

The relay device 30A has a function as a hub, a function as a router, and a function as a line termination device. The hub relays communication between devices on the local area network LN1, for example, between the terminal device 10A and the multifunction device 200A. The router relays communication between a device on the local area network LN1 and a device on another network (eg, the Internet 80). The line termination device is a signal used in the local area network LN1 (for example, an Ethernet line signal) and a signal used for communication between the relay device 30A and the Internet service provider (for example, an optical line or ADSL line signal). And, convert. The line termination device is, for example, an ONU (abbreviation of Optical Network Unit) in the case of an optical line and a modem in the case of an ADSL line. The functions as a hub, a router, and a line termination device may be realized by one device (for example, a relay device 30A) as in this embodiment, or may be realized by two or more devices, respectively.

In the recommended network settings (also called recommended settings), a global IP address is assigned to the relay device 30A (router), and a local IP is assigned to devices on the local area network LN1, such as the terminal device 10A and the multifunction device 200A. An address (also called a private IP address) is assigned. The global IP address is a unique IP address that does not overlap between devices on the Internet, and is used for communication via the Internet 80. The local IP address does not have to be duplicated between devices on the local area network, and is used for communication within the local area network. Here, in the recommended setting, the local IP address assigned to the multifunction device 200A is set to "LIP_M", and the global IP address assigned to the relay device 30A is set to "GIP_R".

In the case of the recommended setting, the relay device 30A operates an address translation function called NAT (Network Address Translation) or NAPT (Network Address Port Translation). As an address translation function, the relay device 30A performs a source IP address translation process executed when relaying a request transmitted from the local area network LN1 to the Internet 80, and is transmitted from the Internet 80 to the local area network LN1. The destination IP address translation process, which is executed when relaying the response, is executed. In the recommended settings, for example, the multifunction device 200A on the local area network LN1 sends a request (for example, an HTTP request) to an external device on the Internet 80 via the relay device 30A, and responds to the request (for example, HTTP). Response) is assumed to be received from an external device. When the relay device 30A relays the transmission of the request from the multifunction device 200A to the external device, the relay device 30A sets the source IP address of the request from the local IP address "LIP_M" of the multifunction device 200A to the global IP of the relay device 30A. Convert to the address "GIP_R" (source IP address conversion process). At this time, the relay device 30A records the change history of the IP address. When the relay device 30A relays the transmission of the response from the external device to the multifunction device 200A, the relay device 30A refers to the recorded change history and sets the destination IP address of the response to the global IP address "GIP_R" of the relay device 30A. Is converted to the local IP address "LIP_M" of the multifunction device 200A (destination IP address conversion process). The relay device 30A deletes the change history referred to at this time after relaying the response.

In the recommended setting, basically, data is basically transmitted from the external device to the multifunction device 200A unless the request is first transmitted from the multifunction device 200A to the external device and the conversion history of the IP address is recorded in the relay device 30A. Cannot be sent. Therefore, it is possible for the multifunction device 200A to be a client and the external device as a server so that the multifunction device 200A can send a request to the external device first, but the multifunction device 200A is a server and the external device is a client and the external device. Cannot send the request first. Therefore, in the recommended setting, it is difficult for an external device of a third party (for example, a malicious attacker) to communicate with the multifunction device 200A even if it recognizes the global IP address of the relay device 30A. ..

Here, network settings (also called deprecated settings) different from the above recommended settings may be performed. In the non-recommended setting, a global IP address is assigned to the multifunction device 200A. In this case, for example, the relay device 30A operates as a hub and a line termination device, and does not operate as a router, and the relay device 30A is not assigned an IP address. Alternatively, the relay device 30A operates as a hub, a router, and a line termination device, but does not execute the above address translation function, and the relay device 30A is assigned a global IP address different from that of the multifunction device 200A. ing. Here, in the deprecated setting, the global IP address assigned to the multifunction device 200A is set to "GIP_M".

In the non-recommended setting, if the external device recognizes the global IP address "GIP_M" of the multifunction device 200A, the multifunction device 200A can be used as a server, the external device can be used as a client, and the external device can send the request first. it can. Therefore, in the non-recommended setting, a third-party external device can easily communicate with the multifunction device 200A as compared with the recommended setting. As a result, the above-mentioned setting management service provided by the multifunction device 200A is used by a third party to falsify the setting information in the setting information database SI and steal the destination information in the destination information database DI. The possibility is also high. Therefore, it can be said that the deprecated setting has a lower security level than the recommended setting and has a security problem. Such deprecated settings can be made, for example, when the knowledge of the administrator of the multifunction device 200A is insufficient.

Similarly, recommended settings and non-recommended settings can be made for the local area network LN2 to which the terminal devices 10B and 10C and the multifunction device 200B are connected, and the relay device 30B.

A-2: Operation of system 1000 In the first embodiment, a setting confirmation process for determining whether the above recommended settings are made or non-recommended settings are made is performed. The setting confirmation process is executed by the CPU 210 of the multifunction devices 200A and 200B and the CPU 310 of the server 300. In the following, the setting confirmation process will be described by taking the case of execution by the multifunction device 200A and the server 300 as an example, but the same execution is performed by the multifunction device 200B and the server 300. In the first embodiment, this setting confirmation process is executed in response to the power of the multifunction device 200A being turned on. Execution in response to the power-on of the multifunction device 200A includes boot processing of the OS and file system, which is automatically executed by the CPU 210 when the power of the multifunction device 200A is turned on. It means that it is started as part of a series of processes.

A-2-1: Operation at the time of recommended setting FIG. 2 is a first sequence diagram of the setting confirmation process of the first embodiment. The first sequence diagram is a sequence diagram when the above recommended settings are made.

In S12 of FIG. 2, the CPU 210 generates a unique ID for the setting confirmation process. The unique ID is different information each time the setting confirmation process is performed, and is different for each device (for example, the multifunction device 200A) that executes the setting confirmation process. For example, the CPU 210 calculates the unique ID by using a predetermined calculation formula in which the MAC address (Media Access Control address) of the multifunction device 200A and the current time are input values and the unique ID is the output value.

In S14, the CPU 210 transmits the HTTP request A on the local area network LN1. Since the HTTP request A is transmitted with the destination MAC address as the MAC address of the relay device 30A designated as the default gateway, it is received by the relay device 30A.

FIG. 3 is a first diagram showing an example of a request and a response used in the setting confirmation process. As shown in FIG. 3A, the source IP address included in the IP header of the HTTP request A transmitted in S14 is the IP address of the multifunction machine 200A, that is, the local IP address “LIP_M”. The destination IP address included in the IP header of the HTTP request A is the global IP address "GIP_S" of the server 300.

The body of the HTTP request A includes the unique ID generated in S12 and the designated URL. The designated URL is used as the destination URL of the HTTP request C transmitted by the server 300 in S30 described later. The global IP address "GIP_S" and the designated URL to be used are stored in advance in the non-volatile storage device 230 by the vendor of the multifunction device 200A.

The HTTP request A further includes a request transmission instruction. The request transmission instruction is an instruction (command) for instructing the server 300 to transmit an HTTP request. The request transmission command may be included in the body of the HTTP request, or may be included in the destination URL of the HTTP header as a specific URL meaning the request transmission command.

When the HTTP request A is transmitted, in S16, the CPU 210 activates a timer for counting the WT for a predetermined waiting period. The waiting period WT is, for example, a period of about several seconds.

In the recommended setting, the relay device 30A is operating the address translation function. Therefore, when the relay device 30A receives the HTTP request A, the relay device 30A executes the source IP address translation process in S18 as described above. That is, the source IP address included in the IP header of the HTTP request A is changed to the global IP address "GIP_R" of the relay device 30A. Further, the change record of the IP address is recorded in the relay device 30A.

In S20, the relay device 30A transmits the HTTP request B (FIG. 3B) obtained by changing the source IP address of the HTTP request A on the Internet 80. The HTTP request B is received by the server 300 via the Internet 80.

In S22, the CPU 310 of the server 300 acquires the source IP address included in the IP header of the received HTTP request B, and the designated URL and unique ID included in the HTTP body. In the case of the recommended setting, as can be seen from FIG. 3B, the global IP address “GIP_R” of the relay device 30A is acquired.

In S24, the CPU 310 transmits the HTTP response A (FIG. 3C) on the Internet 80 as a response to the received HTTP request B. The source IP address included in the IP header of the HTTP response A is the global IP address "GIP_S" of the server 300. The destination IP address included in the IP header of the HTTP response A is the global IP address acquired in S22, that is, the global IP address “GIP_R” of the relay device 30A. The HTTP response A is received by the relay device 30A via the Internet 80.

When the relay device 30A receives the HTTP response A, the relay device 30A executes the destination IP address translation process in S26 as described above. That is, with reference to the change record recorded in the source IP address translation process of S18, the destination IP address included in the IP header of the HTTP response A is changed to the local IP address "LIP_M" of the multifunction machine 200A. .. The referenced change record is deleted.

In S28, the relay device 30A transmits the HTTP response B (FIG. 3D) obtained by changing the destination IP address of the HTTP response A on the local area network LN1. The HTTP response B is received by the multifunction device 200A via the local area network LN1.

The transmission / reception of the HTTP requests A and B of S14 and S20 and the transmission / reception of the HTTP responses A and B of S24 and S28 are communications performed using the multifunction device 200A as a client and the server 300 as a server.

In S30, the CPU 310 of the server 300 transmits the HTTP request C (FIG. 3 (E)) on the Internet 80 in response to the request transmission command included in the HTTP request B (FIG. 3 (B)). The source IP address of the HTTP request C is the global IP address "GIP_S" of the server 300. The destination IP address included in the IP header of the HTTP request C is the global IP address acquired in S22, that is, the global IP address “GIP_R” of the relay device 30A.

The HTTP header of the HTTP request C includes the designated URL (FIG. 3 (B)) acquired in S22 as the destination URL. The HTTP body of the HTTP request C includes the unique ID (FIG. 3 (B)) acquired in S22. The HTTP request C is received by the relay device 30A via the Internet 80.

The transmission of the HTTP request C in S30 is a communication performed using the multifunction device 200A as a server and the server 300 as a client. As described above, the multifunction device 200A and the server 300 can operate as both a client and a server conforming to HTTP.

When the relay device 30A receives the HTTP request C, it recognizes that the destination IP address is addressed to the relay device 30A, but there is no change record in which the corresponding source IP address translation process is performed. For this reason, the relay device 30A discards the HTTP request C without performing the destination IP address translation process and relaying the HTTP request C. In S32, the relay device 30A transmits an error response (FIG. 3 (F)) indicating that the destination of the HTTP request C is wrong on the Internet 80. The source IP address of the error response is the global IP address "GIP_R" of the relay device 30A, and the destination IP address is the global IP address "GIP_S" of the server 300. Therefore, the error response is received by the server 300.

As described above, when the recommended settings are made, the HTTP request C transmitted from the server 300 in response to the request transmission command included in the HTTP request A transmitted from the multifunction device 200A is the multifunction device 200A. Does not reach. That is, when the recommended setting is made, the HTTP request does not reach the multifunction device 200A in the communication performed using the multifunction device 200A as the server and the server 300 as the client. Therefore, the waiting period WT elapses without the HTTP request C being received by the multifunction device 200A.

When the standby period WT has elapsed, in S34, the CPU 210 of the multifunction device 200A determines that the standby period WT has elapsed based on the count of the timer started in S16. In this case, the current network setting is the recommended setting, and it can be determined that the IP address assigned to the multifunction device 200A is the local IP address. Therefore, since it can be determined that there is no security problem, the CPU 210 ends the setting confirmation process as it is.

A-2-2: Operation at the time of non-recommended setting FIG. 4 is a second sequence diagram of the setting confirmation process of the first embodiment. The second sequence diagram is a sequence diagram when the above deprecated settings are made. FIG. 5 is a second diagram showing an example of a request and a response used in the setting confirmation process.

S42, S44, and S46 in FIG. 4 are the same processes as S12, S14, and S46 in FIG. However, the HTTP request D (FIG. 5 (A)) transmitted in S44 has a source IP address included in the IP header of the HTTP request A (FIG. 3 (A)) transmitted in S14 of FIG. It's different. When the non-recommended setting is made, the IP address assigned to the multifunction device 200A is the global IP address "GIP_M", so that the source IP address of the HTTP request D transmitted in S44 is global. The IP address is "GIP_M". The HTTP request D is received by the relay device 30A as in the case of FIG.

When the deprecated setting is made, the address translation function is not operating in the relay device 30A as described above. Therefore, in S48, the relay device 30A transmits the received HTTP request D as it is on the Internet 80. The HTTP request D is received by the server 300 via the Internet 80.

In S50, the CPU 310 of the server 300 acquires the source IP address included in the IP header of the received HTTP request D and the designated URL and unique ID included in the HTTP body, as in S22 of FIG. In the case of the non-recommended setting, as can be seen from FIG. 5A, unlike the case of the recommended setting, the global IP address “GIP_M” of the multifunction device 200A is acquired.

In S52, the CPU 310 transmits the HTTP response C (FIG. 5 (B)) on the Internet 80 as a response to the received HTTP request D, similarly to S24 in FIG. The source IP address included in the IP header of the HTTP response C is the global IP address "GIP_S" of the server 300. The destination IP address included in the IP header of the HTTP response C is the global IP address acquired in S50, that is, the global IP address "GIP_M" of the multifunction machine 200A. The HTTP response C is received by the relay device 30A via the Internet 80.

When the relay device 30A receives the HTTP response C, it transmits the HTTP response C as it is on the local area network LN1 in S56. That is, the destination IP address translation process (S26 in FIG. 2) that is executed in the case of the recommended setting is not executed. The HTTP response C is received by the multifunction device 200A via the local area network LN1.

In S58, the CPU 310 of the server 300 transmits the HTTP request E (FIG. 5 (C)) on the Internet 80 in response to the request transmission command included in the HTTP request D (FIG. 5 (A)). The source IP address of the HTTP request E is the global IP address "GIP_S" of the server 300. The destination IP address included in the IP header of the HTTP request E is the global IP address acquired in S50, that is, the global IP address "GIP_M" of the multifunction machine 200A.

The HTTP request E includes the designated URL and the unique ID (FIG. 5 (A)) acquired in S50, similarly to the HTTP request C in FIG. 3 (E). The HTTP request E is received by the relay device 30A via the Internet 80.

When the relay device 30A receives the HTTP request E, the relay device 30A transmits the HTTP request E as it is on the local area network LN1 in S60. The HTTP request E is received by the multifunction device 200A via the local area network LN1.

In S61, the CPU 210 verifies whether or not the unique ID included in the HTTP request E and the unique ID generated in S42 match. As a result of the verification, if these unique IDs match, it is highly possible that the HTTP request E was transmitted to the multifunction device 200A via the Internet 80 in response to the request transmission command included in the HTTP request D. High. Therefore, as a result of the verification, if these unique IDs match, it can be determined that the received HTTP request is the HTTP request E transmitted from the server 300.

As a result of the verification, if these unique IDs do not match, the CPU 210 can determine that the received HTTP request is not the HTTP request E transmitted from the server 300. In this case, the CPU 210 waits for the HTTP request E to be received until the waiting period WT elapses.

In S62, the CPU 210 of the multifunction device 200A transmits an HTTP response D (FIG. 5 (D)) on the local area network LN1 as a response to the HTTP request E. The source IP address of the HTTP response D is the global IP address "GIP_M" of the multifunction device 200A, and the destination IP address is the global IP address "GIP_S" of the server 300. The HTTP response D is received by the relay device 30A via the local area network LN1. In S64, the relay device 30A transmits the received HTTP response D on the Internet 80. The HTTP response D is received by the server 300 via the Internet 80. In the modified example, the processes of S62 and S64 may be omitted.

As described above, in the case of the non-recommended setting, the HTTP request E transmitted from the server 300 is received by the multifunction device 200A in response to the request transmission command included in the HTTP request D transmitted from the multifunction device 200A. Will be done. The transmission of the HTTP request E from the server 300 (S58) is performed within a period sufficiently shorter than the waiting period WT after the server 300 receives the HTTP request D in S48. Therefore, in the case of the non-recommended setting, the HTTP request E from the server 300 is received by the multifunction device 200A before the waiting period WT elapses. As a result, when the HTTP request E is received, it can be determined that the IP address assigned to the multifunction device 200A is a global IP address and the non-recommended setting is made.

In S66, the CPU 210 stops the timer started in S46. In S68, the CPU 210 enables the password request function. That is, when the password request function is disabled, the password request function is switched from disabled to enabled. The password request function is a function that requires input of a password as authentication information as a condition for providing a setting management service by the WEB server function. That is, when the password request function is enabled and the multifunction device 200A receives the HTTP request requesting the provision of the setting management service, the CPU 210 displays the password input screen to the sender of the HTTP request. Send page data. When the correct password is input via the input screen, the CPU 210 manages the settings by transmitting the WEB page data indicating the setting management screen of the multifunction device 200A to the transmission source of the HTTP request. Provide services. If the correct password is not entered via the input screen, the CPU 210 prohibits the provision of the setting management service by not transmitting the WEB page data indicating the setting management screen to the source of the HTTP request. By doing so, the provision of setting management service is not allowed. As a modification, the authentication information may be, for example, signature information or private key information. Further, as a modification, if the correct password is not entered, it may not be allowed to provide a service different from the setting management service, for example, a service for transmitting scan data to an external storage server.

In S70, the CPU 210 displays a warning screen for the user on the display unit 240 and ends the setting confirmation process. The warning screen includes, for example, a message indicating that a deprecated setting has a security problem and a message prompting the user to correct the setting.

According to the first embodiment described above, the multifunction device 200A is a communication request for requesting data transmission to the multifunction device 200A in response to the power being turned on to the multifunction device 200A, specifically, request transmission. The HTTP request D including the instruction is transmitted to the server 300 (S44 in FIG. 4). After transmitting the HTTP request D, the multifunction device 200A receives the specific data transmitted in response to the request transmission command, specifically, the HTTP request E, from the server 300 (S60 in FIG. 4). In response to the reception of the HTTP request E, the multifunction device 200A executes a process of enabling the password request function (S68 in FIG. 4) and a process of displaying a warning screen (S70 in FIG. 4). As a result, when there is a possibility that the multifunction device 200A has a security problem, for example, even when the above-mentioned non-recommended settings are made, the power is turned on to the multifunction device 200A. By receiving the HTTP request E from the server 300 that operates as a client, it is possible to recognize the possibility of having a security problem. Therefore, the process of enabling the password request function and the process of displaying a warning screen can be appropriately executed.

Further, according to the first embodiment, the multifunction device 200A enables the password request function when the HTTP request E is received within the waiting period WT counted after the transmission of the HTTP request D. Execute the process or the process to display the warning screen. If the HTTP request E is received within the waiting period WT, it is very likely that the HTTP request E was transmitted via the Internet 80. Therefore, there is a high possibility that the external device connected via the Internet 80 is in a state of being able to communicate with the multifunction device 200A as a client, and there is a high possibility that there is a security problem. Therefore, according to the first embodiment, when there is a high possibility that there is a security problem, a process of enabling the password request function and a process of displaying a warning screen can be appropriately executed.

Further, according to the above embodiment, as shown in FIG. 2, the HTTP request is transmitted in response to the request transmission command within the waiting period WT to be counted after the transmission of the HTTP request A (S14 in FIG. 2). If the message is not received, the CPU 210 does not execute the process of enabling the password request function or the process of displaying the warning screen. As a result, it is possible to prevent unnecessary security-related processing from being performed when there is a high possibility that the setting is recommended, that is, when there is a low possibility that there is a security problem.

Further, according to the first embodiment, the multifunction device 200A transmits the HTTP request D including the unique ID to the server 300 (S44 in FIG. 4), and sends the HTTP request E including the unique ID from the server 300. Receive (60 in FIG. 4). When the HTTP request E including the unique ID is received, it is very likely that the HTTP request E was transmitted via the Internet 80. Therefore, there is a high possibility that the external device connected via the Internet 80 is in a state of being able to communicate with the multifunction device 200A as a client, and there is a high possibility that there is a security problem. Therefore, according to the first embodiment, when there is a high possibility that there is a security problem, a process of enabling the password request function and a process of displaying a warning screen can be appropriately executed.

Further, according to the first embodiment, when the HTTP request E is received from the server 300, the security-related process executed by the multifunction device 200A includes a process of switching the password request function from invalid to valid (). S68 in FIG. 4). As a result, the security of the multifunction device 200A can be improved when the external device connected via the Internet 80 can communicate with the multifunction device 200A as a client.

Further, according to the first embodiment, the transmission of the HTTP request D and the reception of the HTTP request E of the multifunction device 200A are performed in accordance with the HTTP. Then, the WEB server function of the multifunction device 200A provides a setting management service in accordance with HTTP. As a result, it is possible to appropriately confirm whether or not the external device connected via the Internet 80 can communicate with the WEB server function of the multifunction device 200A as a client.

Further, according to the first embodiment, the HTTP request D includes the designated URL (FIG. 5 (A)), and the HTTP request E is transmitted with the designated URL as the destination URL (FIG. 5 (C)). As a result, the multifunction device 200A can recognize that the HTTP request E transmitted from the server 300 is an HTTP request for the setting confirmation process.

B. Second Example The setting confirmation process of the first embodiment is executed when the power is turned on to the multifunction device 200A. On the other hand, the setting confirmation process of the second embodiment is executed at a different opportunity from that of the first embodiment. FIG. 6 is a first sequence diagram of the setting confirmation process of the second embodiment. The first sequence diagram is a sequence diagram when the above-mentioned recommended settings are made. FIG. 7 is a second sequence diagram of the setting confirmation process of the second embodiment. The second sequence diagram is a sequence diagram when the above-mentioned deprecated settings are made.

As shown in FIGS. 6 and 7, in the second embodiment, the CPU 210 is set with a specific IP address in the setting information database SI stored in the non-volatile storage device 230 while the power is turned on. It is constantly monitored whether or not it has transitioned from the non-volatile state to the state in which a specific IP address is set (S10 in FIG. 6 and S40 in FIG. 7). Specifically, if an IP address is not set in the setting information database SI and a new IP address is set in the setting information database SI, it is determined that the transition has occurred. Further, when the first IP address is set in the setting information database SI and the second IP address is set instead of the first IP address, it is said that the transition has occurred. Judged.

If it is not detected that a specific IP address has been set (S10: NO in FIG. 6 or S40: NO in FIG. 7), the CPU 210 does not start the setting confirmation process. When it is detected that a specific IP address has been set (S10: YES in FIG. 6 or S40: YES in FIG. 7), the CPU 210 starts the setting confirmation process and generates a unique ID (S10: YES in FIG. 7). S12 of FIG. 6 or S42 of FIG. 7). The processing after S12 in FIG. 6 and the processing after S42 in FIG. 7 are the same as the processing after S12 in FIG. 2 and the processing after S42 in FIG. 4 of the first embodiment. Therefore, in FIGS. 6 and 7, the same processing as in FIGS. 2 and 4 is designated by the same reference numerals as those in FIGS. 2 and 4, and the description thereof will be omitted.

According to the second embodiment described above, even when the multifunction device 200A may have a security problem, the multifunction device 200A is in a state where a specific IP address is not set. By receiving the HTTP request E from the server 300 operating as a client when the transition to the state in which a specific IP address is set is triggered, it is possible to recognize the possibility of having a security problem. Therefore, the process of enabling the password request function and the process of displaying a warning screen can be appropriately executed.

Deprecated settings may be made when a specific IP address is set. That is, at the timing when a specific IP address is set, there is a possibility that an external device connected via the Internet 80 can communicate with the multifunction device 200A as a client. In the second embodiment, a process of enabling the password request function and a process of displaying a warning screen can be executed at an appropriate timing when such a state having a security problem may occur.

C. Modification Example (1) In the second embodiment, the setting confirmation process is started when it is detected that a transition from a state in which a specific IP address is not set to a state in which a specific IP address is set is detected. To. Instead of this, the setting confirmation process may be started when various other transitions are detected. An example of the transition that triggers the start of the setting confirmation process will be described as a modified example with reference to FIG.

FIG. 8 is an explanatory diagram of a modified example. Instead of S10 in FIG. 6 and S40 in FIG. 7 of the second embodiment, S10a to S10e and S40a to S40e shown in FIGS. 8A to 8D may be executed.

(1-1) In S10a and S40a of FIG. 8A, the CPU 210 detects whether or not the USB memory is connected to the USB interface of the communication unit 270. When the connection of the USB memory is detected (S10a: YES or S40a: YES), the CPU 210 starts the setting confirmation process. If the USB memory connection is not detected (S10a: NO or S40a: NO), the CPU 210 does not start the setting confirmation process.

In this way, from a state in which an external storage device such as a USB memory connected without going through the Internet 80 is not connected to the interface of the communication unit 270 to a state in which the external storage device is connected to the interface of the communication unit 270. The setting confirmation process may be started when the transition of is detected. In a state of being connected to an external storage device such as a USB memory, if the external device connected via the Internet 80 can communicate with the multifunction device 200A as a client, a third-party external device can be used in the external storage device. It is more likely that the stored information will be accessible. Therefore, it is considered that it is highly necessary to ensure security when the multifunction device 200A is connected to an external storage device such as a USB memory, as compared with a state where the multifunction device 200A is not connected to the external storage device.

The setting confirmation process is started when a connection with other removable memory such as SD card or SmartMedia, or other external storage device such as an external hard disk drive is detected, not limited to USB memory. Is also good.

(1-2) In S10b and S40b of FIG. 8B, the CPU 210 can perform the communication from a state in which the setting of whether or not to allow the communication with the external storage server is the setting in which the communication is not permitted. Detects whether or not the state has transitioned to an acceptable setting. The external storage server is, for example, a destination for scan data, as described above. The external storage server is, for example, a storage service that stores data transmitted from a client (multifunction device 200A or personal computer (not shown)), or a social network service that stores and publishes data transmitted from a client. It is a server to provide. Specifically, the services provided by the external storage server are "Evernote (registered trademark)", "Google (registered trademark) Drive", "SkyDrive (registered trademark)", "Dropbox (registered trademark)", and " Includes well-known services such as "Flickr (registered trademark)" and "Facebook (registered trademark)". In addition, the services provided by the external storage server include the services provided by the vendor of the multifunction device 200A.

When a transition to a setting that allows communication with an external storage server is detected (S10b: YES or S40b: YES), the CPU 210 starts the setting confirmation process. If the transition of the setting is not detected (S10b: NO or S40b: NO), the CPU 210 does not start the setting confirmation process.

In this way, in a state where communication with an external storage server connected via the Internet 80 is permitted, the external device connected via the Internet 80 can communicate with the multifunction device 200A as a client. By hijacking the multifunction device 200A, the external devices of the three parties are more likely to be able to access the information stored in the external storage server. For this reason, it is considered necessary to ensure security when the multifunction device 200A is allowed to communicate with the external storage server, as compared with the state where communication with the external storage server is not allowed. Be done.

(1-3) In S10c and S40c of FIG. 8C, whether or not the CPU 210 has registered specific destination information (for example, a new fax number or e-mail address) in the destination information database DI (FIG. 1). Is judged. When the registration of specific destination information is detected (S10c: YES or S40c: YES), the CPU 210 starts the setting confirmation process. If the registration of specific destination information is not detected (S10c: NO or S40c: NO), the CPU 210 does not start the setting confirmation process.

In this way, when a transition from a state in which specific destination information is not stored in the multifunction device 200A to a state in which specific destination information is stored is detected, the destination information is personal information and is leaked. Since it is highly necessary to prevent the above, the setting confirmation process may be started when the transition is detected.

(1-4) In S10d and S40d of FIG. 8D, the CPU 210 determines whether or not a new scan profile is registered in the setting information database SI. When the registration of a new scan profile is detected (S10d: YES or S40d: YES), the CPU 210 starts the setting confirmation process. If the registration of a new scan profile is not detected (S10d: NO or S40d: NO), the CPU 210 does not start the setting confirmation process.

In this way, when a transition from a state in which specific setting information such as a new scan profile is not stored in the multifunction device 200A to a state in which the specific setting information is stored is detected, the specification is made. Since the setting information of is personal information and there is a high need to prevent leakage, the setting confirmation process may be started when the transition is detected.

According to these modified examples (1-1) to (1-4), the process of enabling the password request function and the process of displaying a warning screen at an appropriate timing when it becomes necessary to ensure security are performed. Can be executed.

As can be seen from the above description, generally speaking, the multifunction device 200A has specific information (for example, a specific IP address, information stored in a USB memory, information stored in an external storage server, a specific destination). The setting confirmation process may be started when it is detected that the transition from the first state in which information (information, specific setting information) is inaccessible to the second state in which the specific information can be accessed is detected. preferable.

(2) In each of the above embodiments, the first external device that receives the HTTP requests A and D transmitted from the multifunction device 200A and the second external device that transmits the HTTP requests C and E are both the same. The device (server 300). Instead of this, the first external device and the second external device may be different devices. For example, when the first external device receives the HTTP requests A and D, it transmits the source IP address, the designated URL, and the unique ID included in the HTTP requests A and D to the second external device. To do. When the second external device receives the source IP address, the designated URL, and the unique ID, the second external device may transmit the HTTP requests C and E on the Internet 80 by using the information.

(3) In S68 and S70 (FIGS. 4 and 7) of each of the above embodiments, the CPU 210 effectively switches the password request function that requests a password as specific authentication information as a specific process related to security. And the process of displaying the warning screen, and the process of displaying the warning screen, but other processes may be executed in place of or in combination with these. For example, the CPU 210 may send an e-mail in which a message similar to the message displayed on the warning screen is described to the e-mail address of the user registered in advance. The CPU 210 may have the printer unit 290 print the message. The CPU 210 may stop using a specific protocol in the multifunction device 200A. Specific protocols are, for example, HTTP, IPP (Internet Printing Protocol), and FTP (File Transfer Protocol). For example, the suspension of the use of a specific protocol is realized by discarding the request when a request with the port number corresponding to the service provided by the specific protocol as the destination port number is received. Will be done. The service provided by using the specific protocol includes, for example, the WEB service that provides the setting management service in the above embodiment.

(4) The HTTP requests A and D transmitted from the multifunction device 200A and the HTTP requests C and E transmitted from the server 300 may be requests conforming to another protocol, for example, FTP. The protocol used may be any protocol that can transmit a request, with one device of the multifunction device 200A and the server 300 as a client and the other device as a server.

(5) In each of the above embodiments, the multifunction devices 200A and 200B are adopted as the communication device, but a single scanner, a printer, or another image processing device such as a digital camera is adopted as the communication device. You may. Further, not limited to the image processing device, other types of communication devices, for example, a storage device such as a storage device, a personal computer, or the like may be adopted.

(6) The detailed processing of the setting confirmation processing of each of the above embodiments is an example, and various changes can be made. For example, the HTTP requests A and D transmitted from the multifunction device 200A may not include the unique ID. In this case, the CPU 210 executes a specific security-related process when the HTTP request is received within the waiting period WT even if the HTTP request does not include the unique ID.

Further, even if the CPU 210 receives the HTTP request after the standby period WT has elapsed after transmitting the HTTP requests A and D transmitted from the multifunction device 200A, the unique ID is included in the HTTP request. If so, you may perform certain security-related actions. In this case, the count of the waiting period WT may be omitted.

Further, the HTTP requests A and D transmitted from the multifunction device 200A do not have to include the designated URL. In this case, the server 300 transmits the HTTP requests C and E with the predetermined URL as the destination URL.

(7) The server 300 may be a so-called cloud server including a plurality of devices (for example, computers) capable of communicating with each other via a network.

(8) In each of the above embodiments, a part of the configuration realized by the hardware may be replaced with software, and conversely, a part or all of the configuration realized by the software may be replaced with the hardware. You may do so.

(9) When a part or all of the functions of the present invention are realized by a computer program, the program is provided in a form stored in a computer-readable recording medium (for example, a non-temporary recording medium). can do. The program may be used while being stored on the same or different recording medium (computer-readable recording medium) as it was provided. The "computer-readable recording medium" is not limited to a portable recording medium such as a memory card or a CD-ROM, but is connected to an internal storage device in the computer such as various ROMs or a computer such as a hard disk drive. It may also include an external storage device.

Although the present invention has been described above based on Examples and Modifications, the above-described embodiments of the invention are for facilitating the understanding of the present invention and do not limit the present invention. The present invention can be modified and improved without departing from the spirit and claims, and the present invention includes equivalents thereof.

10A-10C ... Terminal device, 30A, 30B ... Relay device, 80 ... Internet, 200A, 200B ... Multifunction device, 210 ... CPU, 220 ... Volatile storage device, 230. .. Volatile storage device, 240 ... display unit, 250 ... operation unit, 270 ... communication unit, 280 ... scanner unit, 290 ... printer unit, 300 ... server, 310. .. CPU, 320 ... volatile storage device, 330 ... non-volatile storage device, 370 ... communication unit, 1000 ... system, SI ... setting information database, DI ... destination information database , IT ... Internet, WT ... Standby period, PG1 ... Computer program, PG2 ... Server program, LN1 ... Local area network, LN2 ... Local area network, SPG ... Server program

Claims (15)

It ’s a communication device,
A detection unit that detects that the communication device transitions from a first state in which the specific information is inaccessible to a second state in which the specific information can be accessed.
In response to the detection of the transition from the first state to the second state, a communication request requesting data transmission to the communication device is sent to the communication device via the Internet. A transmission unit that transmits to the transmission unit, wherein the communication request is transmitted using the communication device as a client and the first external device as a server.
A receiving unit that receives specific data from a second external device connected to the communication device via the Internet in response to the communication request after the transmission of the communication request, wherein the specific data is , The receiving unit and the receiving unit, which receives the second external device as a client and the communication device as a server.
An execution unit that executes a specific security-related process in response to the reception of the specific data.
A communication device. The communication device according to claim 1, further
Equipped with an interface
The specific information includes information stored in an external storage device connected to the interface without going through the Internet.
The transition from the first state to the second state includes a transition from a state in which the external storage device is not connected to the interface to a state in which the external storage device is connected to the interface. Communication device. The communication device according to claim 1 or 2, further
The specific information includes a specific IP address used for communication with an external device connected via the Internet.
The transition from the first state to the second state is from a state in which the specific IP address is not set in the communication device to a state in which the specific IP address is set in the communication device. Communication equipment, including transitions. The communication device according to any one of claims 1 to 3, further
The communication device can communicate with an external server connected via the Internet.
The specific information includes information stored in the external server.
In the transition from the first state to the second state, the setting of the communication device is changed from the state in which the setting of the communication device is the first setting in which communication with the external server is not allowed. A communication device that includes a transition to a state that is a second setting that allows communication with the server. The communication device according to any one of claims 1 to 4, and further
A first storage unit for storing destination information indicating the destination of data transmitted by the communication device is provided.
The specific information includes the specific destination information.
In the transition from the first state to the second state, the specific destination information is stored in the first storage unit from the state in which the specific destination information is not stored in the first storage unit. A communication device that includes a transition to a state that has been. The communication device according to any one of claims 1 to 5, further
An image processing unit that executes specific image processing,
A second storage unit that stores setting information indicating settings related to the specific image processing, and
With
The specific information includes the specific setting information.
In the transition from the first state to the second state, the specific setting information is stored in the second storage unit from the state in which the specific setting information is not stored in the second storage unit. A communication device that includes a transition to a state that has been. It ’s a communication device,
In response to the power being turned on to the communication device, a communication request for data transmission to the communication device is transmitted to a first external device connected to the communication device via the Internet. A transmission unit, wherein the communication request is transmitted using the communication device as a client and the first external device as a server.
A receiving unit that receives specific data from a second external device connected to the communication device via the Internet in response to the communication request after the transmission of the communication request, wherein the specific data is , The receiving unit and the receiving unit, which receives the second external device as a client and the communication device as a server.
An execution unit that executes a specific security-related process in response to the reception of the specific data.
A communication device. The communication device according to any one of claims 1 to 7.
The execution unit is a communication device that executes the specific process when the specific data is received by the reception unit within a specific period based on the transmission of the communication request by the transmission unit. The communication device according to any one of claims 1 to 8.
The transmission unit transmits the communication request including the specific identification information to the first external device.
The receiving unit is a communication device that receives the specific data including the specific identification information from the second external device. The communication device according to any one of claims 1 to 9, further comprising:
The specific process includes a process of switching the authentication function from disabled to enabled.
The authentication function allows the provision of a specific service to the other device when the specific authentication information is input from the other device, and the specific authentication information is not input from the other device. A communication device, which is a function that does not allow the provision of the specific service to the other device. The communication device according to any one of claims 1 to 10.
The communication device can communicate using HTTP (Hypertext Transfer Protocol), and can operate on both a client and a server conforming to the HTTP.
The transmission of the communication request includes the communication device operating as the HTTP compliant client transmitting the HTTP request to the first external device operating as the HTTP compliant server.
The reception of the specific data includes a communication device in which a communication device operating as a server conforming to the HTTP receives an HTTP request from the second external device operating as a client compliant with the HTTP. The communication device according to any one of claims 1 to 11.
The communication request includes a specific URL (Uniform Resource Locator).
The receiving unit is a communication device that receives the specific data destined for the specific URL. The communication device according to any one of claims 1 to 12.
A communication device in which the first external device and the second external device are the same device. A computer program for communication equipment
A detection function that detects that the communication device transitions from a first state in which the specific information is inaccessible to a second state in which the specific information can be accessed.
In response to the detection of the transition from the first state to the second state, a communication request requesting data transmission to the communication device is sent to the communication device via the Internet. The transmission function is a transmission function for transmitting to, and the communication request is transmitted using the communication device as a client and the first external device as a server.
A receiving function for receiving specific data from a second external device connected to the communication device via the Internet in response to the communication request after the transmission of the communication request, wherein the specific data is , The receiving function and the receiving function, which is received by using the second device as a client and the communication device as a server.
An execution function that executes specific security-related processing in response to the receipt of the specific data, and
A computer program that makes a computer realize. A computer program for communication equipment
In response to the power being turned on to the communication device, a communication request for data transmission to the communication device is transmitted to a first external device connected to the communication device via the Internet. The transmission function, which is a function, is transmitted by using the communication device as a client and the first external device as a server.
A receiving function for receiving specific data from a second external device connected to the communication device via the Internet in response to the communication request after the transmission of the communication request, wherein the specific data is , The receiving function and the receiving function, which is received by using the second device as a client and the communication device as a server.
An execution function that executes specific security-related processing in response to the receipt of the specific data, and
A computer program that makes a computer realize.

Images