JP7293452B2 - PRINTING APPARATUS, PRINTING APPARATUS CONTROL METHOD AND PROGRAM - Google Patents

Description

The present invention relates to a printing apparatus that receives print data and prints an image on a sheet.

2. Description of the Related Art Conventionally, there has been known a printing apparatus that receives print data from a communication apparatus via a network and prints an image on a sheet based on the received print data. Also, in recent years, it has become known to generate print data without going through a printer driver (or print application) designed for use with an individual printing device. For example, means for generating print data by a general-purpose print client provided as a function of an operating system (OS) of a communication device or a general-purpose print client provided by a print server on a cloud and transmitting the data to the printing device is known. ing. Such a general-purpose print client implements a mechanism for performing printing based on a network protocol (IPP: Internet Printing Protocol) for causing a printing apparatus to perform printing. Printing is realized by communication between the printing device and the communication device according to this protocol.

Japanese Patent Application Laid-Open No. 2002-200002 describes transmitting print data according to a network protocol such as IPP to an image processing apparatus on a network found by searching.

JP 2010-171473 A

Incidentally, when printing is performed using a general-purpose print client conforming to IPP, the print client provides functions according to the capabilities of the printing device based on capability information received in advance from the printing device. For example, in a printing system using IPP, a function for performing secure printing (also called an authenticated printing function) is defined. When using the authenticated print function, the print client transmits a print job including a password such as a PIN code set by the user to the printing apparatus. The printing device that receives the print data including the password controls not to print until the password is input to the operation unit of the printing device.

Here, a printing device that supports the IPP authentication print function transmits, as capability information, information indicating that the authentication print function is supported and an algorithm supported by password hashing in the authentication print.

Also, when using the authenticated print function, the print client generally hashes a password such as a PIN code using a hash algorithm supported by the printing apparatus and then transmits the hashed password. However, depending on the type and version of the print client, hashing of passwords used in the authenticated printing function may not be supported. When attempting to perform authenticated printing in such a print client, there is a risk that a plaintext password that has not been hashed may flow over the communication path, which poses a security problem.

The present invention has been made in view of at least one of the above problems. SUMMARY OF THE INVENTION It is an object of the present invention to vary capability information relating to an authenticated print function that a printing device transmits to a print client depending on whether or not a communication path between devices is encrypted. Another object of the present invention is to appropriately vary capability information relating to an authentication print function that a printing apparatus transmits to a partner print client according to the encryption status of a communication path and the type of the partner print client. That is.

In order to achieve at least one of the above objects, the printing apparatus of the present invention is a printing apparatus that supports authenticated printing using a password, and includes receiving means for receiving a request for acquiring attribute information of the printing apparatus from a communication apparatus. and control means for controlling content of attribute information transmitted as a response to the acquisition request so that the communication device cannot instruct the printing device to perform authentication printing using the password. Characterized by

According to the present invention, one of the objects is to improve security by making the availability of the authenticated print function different depending on whether the communication path between devices is encrypted. In addition, the present invention provides a mechanism for appropriately differentiating the capability information related to the authentication print function sent by the printing apparatus to the destination print client according to the encryption status of the communication path and the type of the destination print client. One of the purposes is to

1 illustrates an example of a printing system; FIG. 3 is a diagram showing an example of the hardware configuration of the MFP 101; FIG. 4 is a sequence diagram illustrating an example of processing procedures in the printing system; FIG. It is a figure explaining an example of a capability response. 4 is a flowchart illustrating an example of control of the MFP 101; 4 is a flowchart illustrating an example of control of the MFP 101; 4 is a flowchart illustrating an example of control of the MFP 101;

Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings. It should be noted that the following embodiments do not limit the invention according to the claims, and not all combinations of features described in the embodiments are essential to the solution of the invention.

<First Embodiment>
First, the configuration of a printing system according to the present invention will be described with reference to FIG. The printing system according to this embodiment includes communication devices 102a and 102b, an MFP (Multi Function Peripheral) 101, and an AP (Access Point) 103. FIG. An MFP 101 and an AP 103 are connected on the network 100 so as to be able to communicate with each other. In this embodiment, the MFP 101 will be described as an example of a printing apparatus. Also, communication devices 102a and 102b will be described as an example of communication devices. In this embodiment, as an example, the communication devices 102a and 102b are mobile terminals such as smartphones and tablet terminals. Note that the communication device 102 may be a communication device such as a PC (Personal Computer).

Communication devices 102a-b can communicate with each other via AP 103 with MFP 101 on network 100. FIG. If the communication device 102 is a PC, it may be connected to the network 100 via a LAN cable and communicate with the MFP 101 .

In this embodiment, the above configuration is described as an example of the printing system, but the configuration is not limited to this. It is sufficient that one or more communication devices and the printing device are communicably connected via a network. Communication via the AP 103 is, for example, wireless communication conforming to the IEEE802.11 series. Furthermore, the communication device 102 and the MFP 101 can also communicate with each other by direct wireless communication via an ad-hoc network such as Wi-Fi Direct (registered trademark) or Wi-Fi Aware (registered trademark).

First, the MFP 101 is described. The MFP 101 has a reading function of reading an image on a document and a printing function of printing an image on a sheet. The MFP 101 can execute print processing based on print data received via a network. Also, the MFP 101 stores print data in which a password such as a PIN code is set on the host side (communication device side) in the storage, and waits for printing until a password such as a PIN code is input via the operation unit of the MFP 101. It has a PIN print function to

FIG. 2 is a block diagram showing the hardware configuration of the MFP 101. As shown in FIG. The MFP 101 has a reading function of reading an image on a sheet and a printing function of printing an image on the sheet. In addition, the MFP 101 has a file transmission function for transmitting images to an external communication device.

Although the MFP 101 is described as an example of a printing apparatus in this embodiment, the present invention is not limited to this. For example, it may be a printing device such as an SFP (Single Function Peripheral) that does not have a reading function.

A control unit 110 including a CPU (Central Processing Unit) 111 controls the operation of the entire MFP 101 . The CPU 111 reads control programs stored in a ROM (Read Only Memory) 112 or storage 114 and performs various controls such as print control and read control. The ROM 112 stores control programs executable by the CPU 111 . A RAM (Random Access Memory) 113 is the main memory of the CPU 111 and is used as a work area or a temporary storage area for developing various control programs. The storage 114 stores print data, image data, various programs, and various setting information. In this embodiment, an auxiliary storage device such as a HDD (Hard Disk Drive) is assumed as the storage 114, but a non-volatile memory such as an SSD (Solid State Drive) may be used instead of the HDD. In this way, the hardware such as the CPU 111, ROM 112, RAM 113 constitutes a so-called computer.

Note that in the MFP 101 of the present embodiment, one CPU 111 uses one memory (RAM 113) to execute each process shown in a flow chart to be described later, but other modes are also possible. For example, multiple CPUs, RAMs, ROMs, and storages can cooperate to execute each process shown in the flowcharts described later. Also, a part of the processing may be executed using a hardware circuit such as ASIC (Application Specific Integrated Circuit) or FPGA (Field-Programmable Gate Array).

An operation unit interface (I/F) 115 connects the operation unit 116 and the control unit 110 . The operation unit 116 includes a liquid crystal display unit having a touch panel function, various hard keys, and the like, and functions as a display unit that displays information and a reception unit that receives user instructions.

A reading unit I/F 117 connects the reading unit 118 and the control unit 110 . A reading unit 118 reads a document and generates a read image. Note that the generated read image is stored in the storage 114 or RAM 113 . A read image generated by the reading unit 118 is transmitted to a communication device or used for printing an image on a sheet.

The image processing unit 124 includes a RIP (Raster Image Processor) that develops print data received via a network and generates a print image. A printing unit I/F 119 connects the printing unit 120 and the control unit 110 . A print image generated by analyzing the print data by the image processing unit 124 is transferred from the control unit 110 to the printing unit 120 via the printing unit I/F 119 . The printing unit 120 receives a control command and a print image via the control unit 110, and prints an image on a sheet fed from a paper feed cassette (not shown) based on the image. The printing method of the printing unit 120 may be an electrophotographic method or an inkjet method. Other printing methods such as a thermal transfer method can also be applied. A sheet processing unit I/F 121 connects the control unit 110 and the sheet processing unit 122 . A sheet processing unit 122 receives a control command from the CPU 111 and performs post-processing on a sheet printed by the printing unit 120 according to the control command. For example, post-processing such as aligning multiple sheets, punching holes in sheets, and binding multiple sheets is executed.

Also, the control unit 110 is connected to the network 100 via the communication unit I/F 123 . A communication unit I/F 123 transmits images and information to communication devices on the network 100 and receives print data and information from communication devices on the network 100 .

Returning to the description of FIG. 1, the communication devices 102a-b will be described. The communication devices 102a-b are equipped with print clients conforming to IPP (Internet Printing Protocol). The print client has a function of searching for a printing device and receiving print settings for print data. It also has a function of transmitting print data to a desired printing device.

By the way, when printing is performed using a general-purpose print client that conforms to IPP, the print client provides functions according to the capabilities of the printing apparatus, such as the MFP 101, based on capability information received in advance from the printing apparatus. do. The MFP 101 of this embodiment has a PIN print function as a function for performing secure printing (also called an authenticated print function or a secure print function). In this embodiment, when using an authenticated print function such as a PIN print function, the print client transmits a print job including a password such as a PIN code set by the user to the printing apparatus. The MFP 101 that has received the print data including the password controls not to print until the password is input to the operation unit of the printing apparatus. Here, a printing device that supports an authenticated print function such as a PIN print function transmits, as capability information, information indicating that the authenticated print function is supported and an algorithm that is supported for password hashing in authenticated print. do.

Also, when using the PIN print function, the print client generally hashes a password such as a PIN code using a hash algorithm supported by the printing device and then transmits the hashed password. However, depending on the type and version of the print client, hashing of passwords used in the authenticated printing function may not be supported. When attempting to perform authentication printing such as PIN printing in such a print client, there is a risk that a plaintext password that has not been hashed may flow over the communication path, which poses a security problem.

In view of the above problem, the present embodiment provides a mechanism for changing the ability information related to the authentication print function transmitted from the printing device to the print client depending on whether the communication path between the devices is encrypted. A specific mechanism will be described below.

The IPP communication sequence in this embodiment will be described below. FIG. 3 is a sequence diagram showing an example of communication between the communication device 102 and the MFP 101. As shown in FIG. Here, for the sake of explanation, it is assumed that the print client installed in the communication device 102a performs IPP-compliant printing using an unencrypted communication path. On the other hand, the print client installed in the communication device 102b performs IPP-compliant printing using an encrypted communication path. Note that the encrypted communication path means that the communication path established between the communication apparatus and the image forming apparatus for performing data communication conforming to IPP is encrypted by TLS, SSL, or the like. . Hereafter, IPPS refers to printing in accordance with IPP using a communication path encrypted by SSL (Secure Sockets Layer) or TLS (Transport Layer Security).

The user of the communication device 102a performs a user operation to activate the print client via the operation unit of the communication device 102a (301). The communication device 102a that has received the user's operation to activate the print client broadcasts a search request for searching for printers such as surrounding image forming devices (302). For example, the search request can use mDNS (Multicast Domain Name Service) or the like.

The MFP 101 that has received the search request transmits a response to the search (303). The communication device 102a, which has received the response from the printer such as the MFP 101, transmits a request for acquiring printer attribute information including the capabilities possessed by the printer via an unencrypted communication path (IPP) ( 304). When a plurality of printers are found, a selection screen (not shown) may be displayed for the purpose of confirming the printers, and a request may be sent to the printer selected via the selection screen.

Here, it is assumed that the communication device 102a transmits an acquisition request to the MFP 101 using the Get-Printer-Attributes command defined by IPP.

The MFP 101 receives Get-Printer-Attributes, which is a request for acquiring printer attribute information via an unencrypted communication path, and transmits attribute information of the MFP 101 as a response to the request (305). Attribute information transmitted by the MFP 101 will be described with reference to FIG. FIG. 4(a) shows an example of attribute information that is responded to when a request for attribute information is received via an unencrypted communication path. The printer attribute information transmitted as a response of 304 shown in FIG. It includes information such as processing capability. In this way, when an attribute information acquisition request is received through an unencrypted communication path, the attribute information including capability information indicating that the PIN print function is not supported is intentionally returned. Note that the attribute information shown in FIG. 4 is an example shown for explanation, and the attribute names and attribute values are not limited to this.

Returning to the description of FIG. 3, the communication device 102a that has received the attribute information updates the attribute information of the printer (306). With this processing, the print client of the communication device 102a is brought into a state in which it is possible to display a print setting screen suitable for the capabilities of the printer.

Subsequently, the communication device 102a displays a print setting screen based on the attribute information updated in 306 (307). Specifically, based on the updated attribute information, the print client of the communication device 102a displays a print setting screen in which settings related to the PIN print function are grayed out or hidden. Therefore, it is possible to prevent the PIN print function from being set when IPP printing is performed through an unencrypted communication path.

On the other hand, communication with the communication device 102b will be described as an example of a case in which IPP printing is performed through an encrypted communication path. In 311-313, the communication device 102b and the MFP 101 execute search processing for the MFP 101 in the same manner as in 300-303. Subsequently, the communication device 102b that has received the response from the printer such as the MFP 101 transmits a request for acquiring printer attribute information including the capabilities possessed by the printer via an encrypted communication path (IPPS). (314).

The MFP 101 receives Get-Printer-Attributes, which is a request for acquiring printer attribute information via the encrypted communication path, and transmits attribute information of the MFP 101 as a response to the request (315). FIG. 4(b) shows an example of attribute information that responds when a request for attribute information is received via an encrypted communication path. The printer attribute information transmitted as a response of 314 shown in FIG. 4B includes information indicating supported file types, information indicating that the PIN print function is supported, and information indicating supported hashing methods. include. In addition, information indicating other printing capabilities and information indicating post-processing capabilities are also included. Thus, when an attribute information acquisition request is received through an encrypted communication path, attribute information including capability information indicating that the PIN print function is supported is responded.

In 316 and 317, the communication device 102b performs attribute information update processing and print setting screen display processing in the same manner as in 306 and 307. FIG. The print client of the communication device 102b displays a print setting screen on which settings regarding the PIN print function can be made based on the updated attribute information. The user can enable the PIN print function via a print setting screen (not shown). The print client of the communication terminal 102b generates print data through the operation unit and in accordance with the reception of the print start operation with the PIN code set. At this time, the print client generates hash data of the PIN code using a hashing method supported by the MFP 101 and transmits it together with the print data.

<Control of MFP 101>
Control in the MFP 101 will be described. 5 and 6 are flow charts showing control of the MFP 101. FIG. Each operation (step) shown in the flowcharts of FIGS. 5 and 6 is realized by the CPU 111 reading a program for realizing each control module stored in the ROM 112 or the storage 114 into the RAM 113 and executing the program. In this embodiment, print processing, data transmission/reception processing, and the like are realized in cooperation with hardware for realizing each I/F and each function.

A flowchart of FIG. 5 is a flowchart for explaining processing related to transmission and reception of attribute information in the MFP 101 . In S501, the CPU 111 determines whether or not an attribute information acquisition request has been received from an external terminal such as the communication device 102a or 102b. If the attribute information acquisition request is received from the external terminal, the process advances to S502, and if the attribute information acquisition request is not received from the external terminal, the request is waited for.

In S502, the CPU 111 determines whether or not the attribute information acquisition request in S501 has been received via the encrypted communication path. If the CPU 111 receives an attribute information acquisition request via a communication path encrypted by TLS/SSL or the like, the CPU 111 advances the process to S503, and sends the attribute information acquisition request via an unencrypted communication path. is received, the process proceeds to S504.

In S503, CPU 111 generates attribute information including information indicating support for the PIN print function. The attribute information generated here is, for example, the attribute information described with reference to FIG. On the other hand, in S504, CPU 111 generates attribute information including information indicating that the PIN print function is not supported. The attribute information generated here is, for example, the attribute information described with reference to FIG.

In S505, the CPU 111 transmits the attribute information generated in S503 or S504 as a response to the attribute information acquisition request received from the external terminal. When the transmission is completed, the series of processing ends.

Receiving print data and print processing in the MFP 101 will be described below with reference to the flowchart of FIG.

In S<b>601 , the CPU 111 determines whether print data has been received via the network 100 . If the print data has been received, the process advances to S602, and if the print data has not been received, the process advances to S606.

In S<b>602 , the CPU 111 determines whether the print attribute of the received print data includes a setting indicating PIN printing. If the print attribute of the received print data includes a setting indicating PIN printing, the process advances to step S603, and the print attribute of the received print data includes a setting indicating PIN printing. If not, the process proceeds to S609.

In S603, the CPU 111 determines whether security regarding PIN printing is maintained. When the PIN code attached to the print data is hashed by a method supported by the MFP 101, or when the print data is received via an encrypted communication path, the CPU 111 implements security related to PIN printing. determined to be preserved. On the other hand, when the print data is received via an unencrypted communication path and the PIN code attached to the print data is in plain text, the CPU 111 determines that the PIN print security is not maintained. do. If it is determined that the PIN print security is maintained, the process advances to S604, and if it is determined that the PIN print security is not maintained, the process advances to S605.

In S604, the CPU 111 stores the received print data in the PIN print storage area. When the storage is completed, the process returns to S601. On the other hand, in S605, the CPU 111 discards the received print data and returns to the process of S601. In the case where the whole data is not encrypted by this processing and the PIN code is transmitted in plain text, it is possible to control not to perform printing based on the PIN print.

Next, execution of PIN printing will be described. In S606, CPU 111 determines whether or not a user instruction to execute PIN printing has been accepted. For example, when a user operation of selecting a display item for PIN printing from a menu screen (not shown) displayed on the operation unit 116 is detected, it is determined that a user instruction to execute PIN printing has been accepted, and the process proceeds to S607. proceed. On the other hand, if no user operation to select a display item for PIN printing has been detected, it is determined that a user instruction to execute PIN printing has not been received, and the process proceeds to S610.

In S607, CPU 111 accepts input of a PIN code. Specifically, CPU 111 displays on operation unit 116 a selection screen for allowing the user to select data to be printed from the print data stored in the PIN print storage area of storage 114 . Further, upon receiving a user operation for selecting print data, CPU 111 displays an input screen for inputting a PIN code. When the PIN code is entered via the input screen and the OK key is pressed, the process proceeds to S608.

In S608, the CPU 111 determines whether the PIN code given as the "job-password" attribute of the print data matches the PIN code input in S607. When the PIN code given to the print data is not hashed (that is, plain text), it is determined whether the PIN code given to the print data matches the input PIN code. On the other hand, if the PIN code assigned to the print data is hashed, the hash value of the assigned PIN code and the hash value obtained by hashing the PIN code input in S607 using an algorithm such as SHA-2 Determines whether the values match. The type of hash algorithm is determined based on the print attribute of "job-password-encryption" attached to the print data. If the PIN code (or hash value of the PIN code) given to the print data matches the PIN code (or hash value of the PIN code) input in S607, the hash algorithm proceeds to S609. On the other hand, if the PIN code (or hash value of the PIN code) assigned to the print data does not match the PIN code (or hash value of the PIN code) input in S607, the process returns to S607 to re-enter the PIN code. wait for input.

In S609, the CPU 111 cooperates with the image processing unit 124 and the printing unit 120 to execute print processing. The CPU 111 cooperates with the image processing unit 124 to generate a print image based on print data. The generated print image is transferred to the printing unit 120, the printing unit 120 executes printing on a sheet, and the printed material is output to a discharge tray (not shown).

On the other hand, in S610, the CPU 111 determines whether or not an instruction to turn off the power has been received. If an instruction to turn off the power is received, the series of processing ends. On the other hand, if an instruction to turn off the power has not been received, the process returns to step S601 and waits for reception of print data or user operation.

In this embodiment, the PIN print function is exemplified as an example of the authentication print function, but the present invention is not limited to this. For example, passwords can be used instead of PIN codes. Note that rules such as whether to use a password or a PIN code for authentication can be set using, for example, the operation "job-password-repertoire-supported" defined by PWG. If the MFP 101 wants to use a PIN code for authentication, it suffices to specify "iana_us-ascii_digits" indicating that the password is composed only of ASCII character numbers (0x30-0x39). If a password is used for authentication, "iana_us-ascii_complex" or the like may be specified.

As described above, according to the present embodiment, whether or not the authentication print function can be used can be notified to the print client differently depending on whether or not the communication path between devices is encrypted. Therefore, it is possible to prevent a plaintext password from flowing on an unencrypted communication path, thereby enhancing security.

Further, in this embodiment, when print data is received via an unencrypted communication path and the password for the authenticated print function given to the print data is not hashed, , the print data is discarded. Therefore, printing based on print data whose password may be leaked to a third party can be prevented. Therefore, security can be enhanced.

<Second embodiment>
In the first embodiment, a mechanism has been described in which availability of the authenticated print function notified to the print client is changed according to whether the communication path between devices is encrypted.

In the MFP 101 of the second embodiment, in addition to the first embodiment, it will be described that availability of the authentication print function is changed according to the type of the print client of the communication partner. The second embodiment focuses on the fact that there are print clients that do not support hashing of passwords used in the authenticated print function and print clients that support hashing of passwords used in the authenticated print function. If the print client supports hashing of the password used in the authenticated print function, the password for authenticated print is hashed and sent even when the print data is sent through an unencrypted communication path. That is, a print client that supports password hashing will not send the password in plaintext over an unencrypted communication path. In view of this, in the second embodiment, in addition to the control of the first embodiment, control is performed to vary whether or not the authentication print function can be used, which is notified to the print client based on the type and version of the print client.

In addition, in the second embodiment, the hardware configuration of a device that is a prerequisite is the same as that in the first embodiment. Detailed descriptions of the same configurations as in the first embodiment are omitted.

FIG. 7 is a flowchart for explaining processing related to transmission and reception of attribute information in the MFP 101, which is executed instead of the flowchart of FIG. 5 described in the first embodiment. In addition to each process of the flowchart of FIG. 5, a process of determining the type of print client shown in S610 is added.

In S701, similarly to S501, the CPU 111 determines whether or not an attribute information acquisition request has been received. If the attribute information acquisition request has been received, the process proceeds to S710, and if the attribute information acquisition request has not been received, the process proceeds to S702.

In S710, the CPU 111 determines whether the print client that has transmitted the attribute information acquisition request is a specific type of client. If the CPU 111 determines that the print client that has transmitted the attribute information acquisition request is a specific type of client, the process advances to step S703. On the other hand, if the CPU 111 determines that the print client that has transmitted the attribute information acquisition request is not the specific type of client, the process advances to step S704.

Here, the printer attribute information acquisition request (Get-Printer-Attributes command) in IPP is transmitted according to the mechanism of HTTP (HyperText Transfer Protocol). The CPU 111 analyzes HTTP header information forming an HTTP request for acquiring printer attribute information, and acquires User-Agent information of the print client that has transmitted the HTTP request. Note that the User-Agent information included in the HTTP request describes different information based on the type and version of the print client. Subsequently, the CPU 111 determines whether the print client that sent the request is a specific type of client, based on the acquired User-Agent information. Note that the specific type of print client is a client that satisfies the condition that it has been confirmed in advance that it supports hashing of passwords for authenticated printing. Specifically, the storage 114 of the MFP 101 stores a list of User-Agent information corresponding to print clients that have been confirmed in advance to support password hashing. If the acquired User-Agent information is included in the list, the CPU 111 determines that the client is a specific type of print client. On the other hand, if the acquired User-Agent information is not included in the list, the CPU 111 determines that the print client is not of a specific type. In this embodiment, the case of using the whitelist is exemplified, but the present invention is not limited to this. It is also possible to determine whether the client is a specific type based on a blacklist listing User-Agent information corresponding to print clients that have been previously confirmed not to support password hashing. .

Since the processing of S702 to S705 is the same as the processing of S502 to S505 described in the first embodiment, description thereof will be omitted.

According to the second embodiment described above, in addition to the control of the first embodiment, it is possible to change whether or not the authentication print function can be used according to the type of the print client of the communication partner. . Therefore, if the print client supports hashing of passwords used in the authenticated print function, it is possible to use the authenticated print function even if the communication path is not encrypted.

<Other embodiments>
The present invention supplies a program that implements one or more functions of each of the above-described embodiments to a system or apparatus via a network or a storage medium, and one or more processors in the computer of the system or apparatus reads the program. It can also be realized by executing processing. It can also be realized by a circuit (for example, ASIC or FPGA) that realizes one or more functions.

101 MFPs
102 communication device 111 CPU

Claims (13)

A printing device that supports authenticated printing using a password,
receiving means for receiving a request for acquiring attribute information of the printing device from a communication device;
and control means for controlling content of attribute information transmitted as a response to the acquisition request so that the communication device cannot instruct the printing device to perform authentication printing using the password. printing device. 2. The printing apparatus according to claim 1, wherein said control means changes the content of the attribute information transmitted as a response to said acquisition request according to the type of said communication apparatus. 3. The method according to claim 1, wherein said control means changes the content of the attribute information to be transmitted as a response to said acquisition request according to whether or not the communication path through which said acquisition request is received is encrypted. The described printing device. According to the type of the communication device, the control means controls whether or not to include information indicating support for authentication printing using the password in attribute information transmitted as a response to the acquisition request. 4. The printing apparatus according to any one of claims 1 to 3. The control means adds information indicating support for authenticated printing using the password to attribute information transmitted as a response to the acquisition request, depending on whether or not the communication path through which the acquisition request is received is encrypted. 5. The printing apparatus according to claim 1, wherein whether to include or not is controlled. When the communication path through which the acquisition request is received is encrypted, the control means includes information indicating that authentication printing using the password is supported in attribute information transmitted as a response to the acquisition request. 3. The attribute information transmitted as a response to the acquisition request does not include information indicating support for authentication printing using the password if the communication path through which the acquisition request is accepted is not encrypted. 6. The printing device according to any one of 1 to 5. If the communication device supports predetermined hashing, the control means includes information indicating that authentication printing using the password is supported in attribute information transmitted as a response to the acquisition request. 2. If the communication device does not support predetermined hashing, the attribute information transmitted as a response to the acquisition request does not include information indicating support for authentication printing using the password. 7. The printing apparatus according to any one of 6. 8. The printing apparatus according to claim 1, wherein the acquisition request is transmitted by IPP (Internet Printing Protocol) or IPPS communication. When the printing device receives an instruction for authenticated printing using the password, the printing device executes printing if the entered password satisfies a predetermined condition, and prints if the entered password does not meet the prescribed condition. 9. A printing device according to any one of claims 1 to 8, characterized in that it does not. 10. The printing apparatus according to claim 1, wherein a print setting screen is displayed on said communication apparatus based on said attribute information. According to the communication apparatus, a print setting screen that allows instruction of authentication printing using the password or a print setting screen that does not allow instruction of authentication printing using the password is displayed based on the attribute information. A printing device according to any one of claims 1 to 10. A control method executed by a printing device supporting authenticated printing using a password,
The control method is
a receiving step of receiving a request for acquiring attribute information of the printing device from a communication device;
and a control step of controlling content of attribute information transmitted as a response to the acquisition request so that the communication device cannot instruct the printing device to perform authentication printing using the password. control method. A program for causing a computer to execute each means according to any one of claims 1 to 11.

Images