JP7207016B2 - Information processing device, access permission/denial setting method, and program - Google Patents

Description

The present invention relates to an information processing device, an access permission/denial setting method in an information processing device, and a program installed in a computer of the information processing device.

For example, some multi-function peripherals (MFP: Multi-Function Peripheral) having a print function, a scan function, and a facsimile function incorporate an EWS (Embedded Web Server). In this MFP, the EWS is accessed from a terminal such as a PC (Personal Computer) or a tablet using a web browser, and various setting information is changed on the EWS website.

Access to the EWS may require entry of a password. An initial password is set when the product is shipped from the factory, and the user can use the initial password to access the EWS and change the initial password to any password. If the password is not changed from the initial password, there is a problem that internal confidential information such as personal information registered in the MFP can be easily read from the outside.

JP 2008-134854 A

In order to solve this problem, for example, it is conceivable to prohibit access to the EWS via the network while the initial password is set. However, there are cases where the initial setting of the MFP from the terminal via the network is hindered and inconvenient.

An object of the present invention is to provide an information processing apparatus, an information processing method, and a program capable of suppressing unauthorized access to internal confidential information from an external device while enabling initial setting through communication from the external device.

To achieve the above object, an information processing apparatus according to one aspect of the present invention includes a communication unit, a storage unit, and a control unit, and the storage unit stores initial authentication information in an initial state. When the authentication information is accepted, the control unit determines whether or not the accepted authentication information matches the authentication information stored in the storage unit, and the two match. an authentication process in which the authentication is established if the two do not match, and the authentication is not established if the two do not match; In response to the acceptance, a change process of changing the authentication information stored in the storage unit to the different authentication information, and determining whether or not confidential information other than the authentication information is stored in the storage unit. and a second determination process of determining whether or not the initial authentication information is stored in the storage unit, and the determination result of the first determination process and the second determination If both determination results in the processing are positive determination, an access prohibition state is established in which access to the storage unit by communication from an external device via the communication unit is prohibited, and the determination result in the first determination processing is set. and when at least one of the determination results in the second determination process is a negative determination, an access permitted state is established in which access to the storage unit through communication from the external device through the communication unit is permitted.

According to this configuration, when confidential information is not stored in the storage unit, even when initial authentication information is stored in the storage unit, access by communication from the external device via the communication unit is prohibited. Allowed. Therefore, initial setting can be performed by communication from an external device. On the other hand, when confidential information is stored in the storage unit, access by communication from an external device via the communication unit is prohibited while initial authentication information is stored in the storage unit. Therefore, unauthorized access to the confidential information stored in the storage unit inside the device from the external device can be suppressed.

Therefore, it is possible to suppress unauthorized access from the external device to the confidential information inside the device while enabling the initial setting by communication from the external device.

The present invention can be implemented not only in the form of an information processing apparatus, but also in the form of an access permission/denial setting method in an information processing apparatus and a program installed in a computer of the information processing apparatus.

According to the present invention, it is possible to suppress unauthorized access to internal confidential information from an external device while enabling initial settings through communication from an external device, and to suppress reading of confidential information by an external device due to unauthorized access.

1 is a block diagram showing an electrical configuration of an MFP according to an embodiment of the invention; FIG. 10 is a flowchart showing the flow of EWS access processing; 4 is a flow chart showing the flow of processing at the time of activation; It is a flowchart which shows the flow of a process at the time of a password change. 10 is a flowchart showing the flow of used state cancellation processing; 7 is a flowchart showing the flow of prohibition state notification processing; It is a flowchart which shows the flow of a personal information registration process. It is a flow chart which shows a flow of personal information deletion processing. 10 is a flowchart (part 1) showing the flow of collective setting processing; FIG. 11 is a flowchart (part 2) showing the flow of collective setting processing; FIG. 4 is a flowchart showing the flow of job execution processing; It is a flowchart which shows the flow of another personal information registration process.

BEST MODE FOR CARRYING OUT THE INVENTION Below, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

<Electrical Configuration of MFP>
A multi-function peripheral (MFP) 1 shown in FIG. 1 is an electronic device having multiple functions such as a print function, a scan function, and a fax function. The print function is a function of printing an image related to image data on a sheet such as paper. The scan function is a function of reading a document and generating image data. The facsimile function is a function of transmitting and receiving image data via a public telephone line or the like.

An MFP 1 (an example of an information processing apparatus) includes a printing section 11 (an example of an execution section) for a print function and a reading section 12 (an example of an execution section) for a scan function.

The printing unit 11 is a mechanism that prints an image on a sheet that is conveyed along a conveying path inside a housing that forms the outer shell of the MFP 1 . The method of image formation by the printing unit 11 may be an electrophotographic method or an inkjet method.

The reading unit 12 is a mechanism that reads a document on a contact glass supported by a housing with an image sensor and generates image data of the document. The image reading method by the reading unit 12 may be a method of reading a document passing over the contact glass, or a method of reading a document stationary on the contact glass.

The MFP 1 also includes a LAN (Local Area Network) interface 13 , a FAX (fax) interface 14 and a USB (Universal Serial Bus) interface 15 .

A LAN interface 13 (an example of a communication unit) includes a circuit for network communication via the LAN 3 and the like. The LAN 3 may be composed of a wired LAN or a wireless LAN, or may be composed of both a wired LAN and a wireless LAN. The LAN 3 is connected to the Internet 4 , and the MFP 1 can communicate with an external device 5 such as a PC (Personal Computer) connected to the Internet 4 via the LAN 3 . Also, the MFP 1 can communicate with an external device 5 connected to the LAN 3 without going through the Internet 4 .

A FAX interface 14 is an interface for connection with a public telephone line that is normally used for a FAX function, and includes a modem and the like.

The USB interface 15 is an interface for data communication with a USB device, and includes a USB connector to which a USB cable is connected, a USB controller that controls USB connection with the USB device, and the like.

Furthermore, the MFP 1 has an operation panel 16 . The operation panel 16 includes an operation section 161 and a display section 162 . The operation unit 161 has operation keys. When an operation key is operated, the operation is accepted by operation unit 161 and a signal corresponding to the content of the operation is output from operation panel 16 . Display unit 162 is, for example, a liquid crystal display.

Note that the operation unit 161 and the display unit 162 may constitute a touch panel. Various information and images such as operation buttons are displayed on the display unit 162 that constitutes a touch panel. When the user presses (touches) an operation button displayed on display unit 162 , the operation is accepted by operation unit 161 , and a signal corresponding to the content of the operation is output from operation panel 16 . Below, the case where the operation unit 161 and the display unit 162 form a touch panel will be taken up.

The MFP 1 includes a control unit 21, a rewritable nonvolatile memory 22 such as a flash memory or E2PROM (an example of a storage unit), and a volatile memory 23 such as an SDRAM (an example of the storage unit). The printing unit 11, the reading unit 12, the LAN interface 13, the FAX interface 14, the USB interface 15, the operation panel 16, the control unit 21, the nonvolatile memory 22, and the volatile memory 23 are connected via a bus 24 so as to be capable of data communication. It is

The control unit 21 incorporates a CPU (Central Processing Unit). The control unit 21 executes programs for various processes based on signals input to the control unit 21, thereby controlling the printing unit 11, the reading unit 12, the LAN interface 13, the FAX interface 14, and the USB interface 15. and control each part such as the operation panel 16 .

The nonvolatile memory 22 stores programs executed by the control unit 21 and various data.

The volatile memory 23 is used as a work area when the control unit 21 executes programs.

The MFP 1 incorporates an EWS (Embedded Web Server). The EWS is a server function constructed by web server software using the LAN interface 13 or the like, and transmits website data to the external device 5 in response to access from the web browser of the external device 5, The EWS screen for various settings is displayed above. Access to the EWS requires entry of a password, which is an example of authentication information.

As shown in FIG. 2, when the EWS address is entered in the web browser of the external device 5 connected to the LAN 3 or the Internet 4 and the external device 5 attempts to access the EWS (S1: YES), Control unit 21 transmits data of a website page requesting entry of a password to external device 5 via LAN interface 13 . The process shown in FIG. 2 does not proceed until the password is entered on the website page and the control unit 21 accepts the input of the password (S2: NO).

When control unit 21 determines that the input of the password has been received (S2: YES), it collates the received password with the password stored in nonvolatile memory 22 (S3). When the control unit 21 determines that the two match in the comparison (S4: YES), the control unit 21 performs EWS screen display processing for displaying an EWS screen corresponding to the setting type on the web browser of the external device 5. Execute (S5). When the control unit 21 determines that the passwords do not match in collation of the passwords (S4: NO), the control unit 21 executes error processing for displaying an error screen on the web browser of the external device 5. FIG.

An initial password is set when MFP 1 is shipped from the factory, and this initial password is stored in nonvolatile memory 22 . The user of MFP 1 can use the initial password to access EWS from external device 5, and change the initial password to any password, for example. Moreover, as will be described later, the password can also be changed by operating the operation section 161 of the operation panel 16 . If the password is not changed from the initial password, for example, a person other than the user of the MFP 1 can access the EWS from the external device 5 (different from the external device 5 used by the user) using the initial password. , and there is a risk that the information stored in the nonvolatile memory 22 may be stolen.

Therefore, in the MFP 1, the password is not changed from the initial password, and confidential information such as personal information is stored in the nonvolatile memory 22, or data related to jobs using various functions (hereinafter referred to as This data is referred to as “job data”), for example, in a state where image data related to an image to be printed on a sheet by the print function is stored in the volatile memory 23, the data is sent from the external device 5 via the LAN interface 13. access through communications that have been performed (this access is hereinafter referred to as “network access”) is forcibly prohibited.

In order to realize such a configuration, in the MFP 1, the control unit 21 performs the processing at the time of startup, the processing at the time of password change, the used state release processing, the prohibition state notification processing, the personal information registration processing, the personal information deletion processing, and the collective Executes setting processing and job execution processing.

<Processing at startup>
When MFP 1 is powered on, startup processing is executed. The flow of processing at startup is shown in FIG.

In the start-up process, the control unit 21 turns off the state of the notification flag stored in the nonvolatile memory 22 (S11). The notification flag is a flag indicating whether or not it is necessary to notify that network access is forcibly prohibited. The on state of the notification flag indicates that it is necessary to notify that network access is forcibly prohibited. If the state of the notification flag is off, it means that there is no need to notify that network access is forcibly prohibited.

Further, the control unit 21 confirms the job registration status (S12). That is, the control unit 21 confirms whether job data is stored in the volatile memory 23 . Then, the control unit 21 determines whether or not there is a registered job, that is, whether job data is stored in the volatile memory 23 (S13).

If the control unit 21 determines that the job data is stored in the volatile memory 23 (S13: YES), it determines whether the initial password is stored in the nonvolatile memory 22. It is determined whether or not the stored password is the same as the initial password (S14). If the control unit 21 determines that the initial password is stored in the nonvolatile memory 22 (S14: YES), the control unit 21 performs network forced disable setting to forcibly disable network access (S15). Then, the control unit 21 turns on the state of the notification flag (S16), and terminates the start-up process. If a password different from the initial password is stored in the nonvolatile memory 22 and the control unit 21 determines that the initial password is not stored in the nonvolatile memory 22 (S14: NO), the startup process ends. .

On the other hand, when the control unit 21 determines that the job data is not stored in the volatile memory 23 (S13: NO), it turns off the job flag stored in the nonvolatile memory 22 (S17). The job flag is a flag indicating whether or not job data is stored in the volatile memory 23 . The ON state of the job flag indicates that the job data is stored in the volatile memory 23 . The fact that the job flag is off indicates that the job data is not stored in the volatile memory 23 .

After that, the control unit 21 determines whether the state of the personal information flag stored in the nonvolatile memory 22 is ON (S18). The personal information flag is a flag indicating whether or not personal information, which is an example of confidential information, is stored in the volatile memory 23 . The ON state of the personal information flag indicates that personal information such as a telephone directory is stored in the volatile memory 23 . The off state of the personal information flag indicates that no personal information is stored in the volatile memory 23 .

If the control unit 21 determines that the state of the personal information flag is off (S18: NO), it ends the start-up process.

When determining that the state of the personal information flag is ON (S18: YES), the control unit 21 determines whether or not the initial password is stored in the nonvolatile memory 22 (S14). If the control unit 21 determines that the initial password is stored in the nonvolatile memory 22 (S14: YES), it forcibly disables network access (S15: network forced disable setting). Then, the control unit 21 turns on the state of the notification flag (S16), and terminates the start-up process. When the control unit 21 determines that the initial password is not stored in the nonvolatile memory 22 (S14: NO), it ends the startup process.

After the start-up processing is completed, the control unit 21 executes password change processing, used state cancellation processing, prohibited state notification processing, personal information registration processing, personal information deletion processing, batch setting processing, and job execution processing in parallel. is executed.

<Processing when password is changed>
FIG. 4 shows the flow of processing when changing a password.

In the password change processing, the control unit 21 determines whether or not an instruction to change the password has been received (S21). For example, when a new password and a password change instruction are input on the EWS screen on the web browser of external device 5 , the change instruction and the new password are accepted by control unit 21 . When a new password and a password change instruction are input after the current password is entered by operating operation portion 161 of operation panel 16 , control portion 21 accepts the change instruction and the new password.

The control unit 21 does not perform subsequent processing until the password change instruction is received.

When the controller 21 determines that the password change instruction has been received (S21: YES), the new password received together with the change instruction is stored in the non-volatile memory 22 (S22). Then, the control unit 21 determines whether or not the new password is the same as the initial password (S23). If the control unit 21 determines that the new password is the same as the initial password (S23: YES), the control unit 21 determines whether or not an instruction to change the password has been received without performing the processing described below. Return to step S21.

When the control unit 21 determines that the new password is not the same as the initial password (S23: NO), it determines whether or not the timer that measures the elapsed time is in operation (S24). The timer is a timer counter provided in the volatile memory 23, and "during operation of the timer" means that the timer counter is counting up. If the controller 21 determines that the timer is in operation (S24: YES), it stops the timer (S25).

After that, the control unit 21 determines whether or not the network access is forcibly disabled (hereinafter referred to as "network forced disabled state") (S26). If the control unit 21 determines that the forced network disable state exists (S26: YES), the control unit 21 cancels the forced network disable state (S27), enables network access, and turns off the notification flag (S28). ). On the other hand, if the control unit 21 determines that the network is not in the forcibly disabled state (S26: NO), the process returns to step S21 for determining whether or not an instruction to change the password has been received.

<Used state release processing>
FIG. 5 shows the flow of used state release processing.

In the used state release process, the control unit 21 determines whether or not the initial password is stored in the nonvolatile memory 22 (S31). When the control unit 21 determines that the initial password is not stored in the nonvolatile memory 22 (S31: NO), it determines whether the initial password is stored in the nonvolatile memory 22 without performing subsequent processing. repeat.

When the controller 21 determines that the initial password is stored in the nonvolatile memory 22 (S31: YES), it determines whether the personal information flag is on (S32). If the control unit 21 determines that the state of the personal information flag is ON (S32: YES), the control unit 21 does not perform subsequent processing, and determines whether or not the initial password is stored in the nonvolatile memory 22. Return to step S31.

When the controller 21 determines that the personal information flag is off and the personal information flag is not on (S32: NO), it determines whether the job flag is on (S33). . If the control unit 21 determines that the job flag is on (S33: YES), it does not perform the subsequent processing, and instead proceeds to the step of determining whether or not the initial password is stored in the nonvolatile memory 22. Return to S31.

When the control unit 21 determines that the job flag is off and not on (S33: NO), it determines whether or not the network is forcibly disabled (S34). If the control unit 21 determines that the network is not forcibly disabled (S34: NO), it does not perform subsequent processing, and returns the processing to step S31 for determining whether or not the initial password is stored in the nonvolatile memory 22. .

If the control unit 21 determines that the forced network disable state exists (S34: YES), the control unit 21 cancels the forced network disable state (S35), enables network access, and turns off the notification flag (S36). ).

<Prohibition state notification processing>
The flow of prohibition state notification processing is shown in FIG.

In the prohibition state notification process, the control unit 21 determines whether or not the state of the notification flag is ON (S41). When determining that the state of the notification flag is not ON (S41: NO), the control unit 21 does not perform subsequent processing, and repeats determination of whether the state of the notification flag is ON.

When the control unit 21 determines that the state of the notification flag is ON (S41: YES), the control unit 21 performs a process of outputting a display to notify the user of the forced network disable state (S42). The display that notifies the user of the forced network disabled state is, for example, a message indicating that network access is prohibited, and is output to the EWS screen on the web browser of the external device 5 . The display is also output to the display section 162 of the operation panel 16 .

After that, the control unit 21 turns off the state of the notification flag (S43).

<Personal information registration process>
A flow of an example of personal information registration processing is shown in FIG. Personal information such as a telephone directory can be registered in the MFP1. Personal information registered in MFP 1 is stored in nonvolatile memory 22 . Therefore, registering personal information in MFP 1 is synonymous with storing the personal information in nonvolatile memory 22 .

The registration of personal information can be instructed on the EWS screen on the web browser of the external device 5 as well as by operating the operation section 161 of the operation panel 16, similarly to the password change. That is, when the personal information and an instruction to register the personal information are input on the EWS screen on the web browser of the external device 5 , the registration instruction and the personal information are accepted by the control unit 21 . Further, by operating the operation unit 161 of the operation panel 16, after a valid password is input, when personal information and an instruction to register the personal information are input, the registration instruction and the personal information are accepted by the control unit 21. .

In the personal information registration process, the control unit 21 determines whether or not an instruction to register personal information has been received (S71). When control unit 21 determines that it has received an instruction to register personal information (S71: YES), it determines whether an initial password is stored in nonvolatile memory 22, in other words, whether the password stored in nonvolatile memory 22 is stored. It is determined whether or not it is the same as the initial password (S72).

If the controller 21 determines that the initial password is stored in the nonvolatile memory 22 (S72: YES), it turns on the personal information flag (S73). Then, the control unit 21 performs personal information registration processing for storing the personal information received together with the registration instruction in the nonvolatile memory 22 (S74). Further, the control unit 21 performs a registration completion/warning display process of outputting a display notifying that registration of personal information is completed and a display warning that network access will be prohibited after a predetermined time (S75). These displays are output to the EWS screen on the web browser of the external device 5 when the registration of personal information is instructed on the EWS screen, and the registration of personal information is instructed by operating the operation unit 161 of the operation panel 16. In this case, it is output to the display section 162 of the operation panel 16 . After that, the control unit 21 activates the timer (S76), and returns the process to step S71 for determining whether or not an instruction to register personal information has been received.

On the other hand, when the control unit 21 determines that the initial password is not stored in the nonvolatile memory 22 (S72: NO), it turns on the personal information flag (S77), and the personal information received together with the registration instruction is Personal information registration processing to be stored in the nonvolatile memory 22 is performed (S78). Then, the control unit 21 performs a registration completion display process for outputting a display notifying that the registration of the personal information has been completed (S79), and determines whether or not an instruction to register the personal information has been received (step S71). back to A display notifying that the registration of personal information has been completed is output to the EWS screen on the web browser of the external device 5 when the registration of the personal information is instructed on the EWS screen, and the operation of the operation unit 161 of the operation panel 16 is performed. When the registration of personal information is instructed by , it is output to the display section 162 of the operation panel 16 .

When the controller 21 determines that the personal information registration instruction has not been received (S71: NO), the controller 21 determines whether the timer is in operation (S80). When determining that the timer is not in operation (S80: NO), the control unit 21 determines again whether or not an instruction to register personal information has been received (S71).

When determining that the timer is in operation (S80: YES), the control unit 21 determines whether a predetermined time has elapsed since the timer was started, that is, whether the time measured by the timer has reached a predetermined time. (S81). If the control unit 21 determines that the predetermined time has not elapsed since the timer was started (S81: NO), it determines again whether or not an instruction to register personal information has been received (S71).

When a predetermined time has passed since the timer was started, and the controller 21 determines that the predetermined time has passed since the timer was started (S81: YES), the network forced disable setting for forcibly disabling network access is performed (S82). ). Then, the control unit 21 turns on the notification flag (S83), stops the timer (S84), and returns the process to step S71 for determining whether or not an instruction to register personal information has been received.

<Personal information deletion processing>
The flow of personal information deletion processing is shown in FIG. The user can delete personal information registered in MFP1. Deletion of the personal information can be instructed on the EWS screen on the web browser of the external device 5 or by operating the operation unit 161 of the operation panel 16, similarly to the registration of the personal information. That is, when an instruction to delete personal information and an object to be deleted are input on the EWS screen on the web browser of the external device 5 , the object to be deleted and the deletion instruction are accepted by the control unit 21 . Further, when a deletion target is input together with an instruction to delete the personal information after a valid password is input by operating the operation unit 161 of the operation panel 16, the deletion target and the deletion instruction are accepted by the control unit 21. .

In the personal information deletion process, the control unit 21 determines whether or not a personal information deletion instruction has been received (S91). When the controller 21 determines that it has received an instruction to delete the personal information (S91: YES), it deletes the personal information to be deleted from the personal information stored in the nonvolatile memory 22 (S92).

After that, the control unit 21 determines whether or not all personal information has been deleted from the nonvolatile memory 22 (S93). When the control unit 21 determines that all the personal information has been deleted from the nonvolatile memory 22 (S93: YES), it turns off the state of the personal information flag (S94) to indicate that the deletion of the personal information has been completed. After performing the deletion completion display processing for outputting the notification display (S95), the processing returns to step S91 for determining whether or not the personal information deletion instruction has been received. On the other hand, when the control unit 21 determines that all the personal information has not been deleted from the nonvolatile memory 22 (S93: NO), the personal information flag is left on (S94: skip), and the personal information After performing a deletion completion display process for outputting a display notifying that the deletion of the information has been completed (S95), the process returns to step S91 for determining whether or not an instruction to delete the personal information has been received.

A display notifying that the deletion of personal information has been completed is output to the EWS screen on the web browser of the external device 5 when the deletion of the personal information is instructed on the EWS screen, and the operation of the operation unit 161 of the operation panel 16 is performed. When the deletion of personal information is instructed by , it is output to the display section 162 of the operation panel 16 .

<Batch setting process>
The batch setting process flow is shown in FIGS. 9A and 9B. In MFP 1 , various information such as password change and registration and deletion of personal information can be collectively set from the EWS screen on the web browser of external device 5 . In addition, it is also possible to simultaneously perform the collective setting for a plurality of MFPs 1 connected to the LAN 3 .

In the batch setting process, the control unit 21 determines whether or not a batch setting command has been received (S101). The control unit 21 does not perform subsequent processing until the collective setting command is received.

When the controller 21 determines that the collective setting command has been received (S101: YES), it analyzes the received collective setting command (S102). Then, the control unit 21 determines whether or not there is a personal information registration command in the batch setting command based on the analysis result of the batch setting command (S103). The personal information registration command is a command including personal information and an instruction to register the personal information.

If the control unit 21 determines that there is a personal information registration command (S103: YES), it determines whether or not the initial password is stored in the nonvolatile memory 22 (S104 in FIG. 9B). When the control unit 21 determines that the initial password is stored in the nonvolatile memory 22 (S104: YES), it determines whether or not there is a password change command in the batch setting command (S105). The password change command is a command including a new password and a password change instruction.

If the controller 21 determines that the collective setting command includes the password change command (S105: YES), it executes the collective setting command (S106). That is, the control unit 21 causes the nonvolatile memory 22 to store the personal information according to the content of the personal information registration command, and causes the nonvolatile memory 22 to store the new password according to the content of the password change command. Further, when the control unit 21 determines that the initial password is not stored in the nonvolatile memory 22 (S104: NO), it also executes the collective setting command (S106).

After that, the control unit 21 performs setting success notification processing for outputting a display notifying that the batch setting has been successful (S107). A display notifying that the batch setting was successful is output to the EWS screen on the web browser of the external device 5 . Also, the control unit 21 turns off the state of the personal information flag (S108). Then, the control unit 21 determines whether or not the timer is operating (S109), and if it determines that the timer is operating (S109: YES), stops the timer (S110), The process returns to step S101 for determining whether or not the batch setting command has been received.

If the controller 21 determines that there is no password change command among the collective setting commands (S105: NO), it permits or disallows the collective setting command (S111). Depending on whether the collective setting command is permitted or not, the control unit 21 does not register personal information according to the personal information registration command included in the collective setting command. Then, the control unit 21 performs a setting failure notification process of outputting a display notifying that the collective setting has failed (S112), and then returns the process to step S101 for determining whether or not a collective setting command has been accepted. A display notifying that the collective setting has failed is output to the EWS screen on the web browser of the external device 5 .

On the other hand, when the control unit 21 determines that there is no personal information registration command among the collective setting commands (S103: NO in FIG. 9A), it determines whether or not there is a personal information deletion command among the collective setting commands (S113). The personal information deletion command is a command including a deletion target and an instruction to delete the personal information to be deleted.

If the control unit 21 determines that there is a personal information deletion command (S113: YES), it executes the collective setting command (S114) and performs setting success notification processing (S115). After that, the control unit 21 determines whether or not all personal information has been deleted from the nonvolatile memory 22 (S116). If control unit 21 determines that all personal information has been deleted from nonvolatile memory 22 (S116: YES), control unit 21 turns off the state of the personal information flag (S117), and determines whether a batch setting command has been received. It returns to step S101 which determines whether. When the control unit 21 determines that all the personal information has not been deleted from the nonvolatile memory 22 (S116: NO), the processing is batched while keeping the state of the personal information flag ON (S117: skip). The process returns to step S101 for determining whether or not a setting command has been received.

When the control unit 21 determines that there is no personal information deletion command in the collective setting command (S113: NO), it executes the collective setting command (S118), performs setting success notification processing (S119), and then executes the processing. The process returns to step S101 for determining whether or not the collective setting command has been received.

<Job execution processing>
The flow of job execution processing is shown in FIG.

In the job execution process, the control unit 21 determines whether or not the job has been accepted (S131: YES). For example, when the job is a print job, job data necessary for printing an image related to the image data on a sheet is transmitted from the external device 5 to the MFP 1 via the LAN 3, and the control unit 21 transmits the job data. It is determined that the job has been accepted by receiving it via the LAN interface 13 .

If the control unit 21 determines that the job has been accepted (S131: YES), the job data is stored in the volatile memory 23 (S132). Also, the control unit 21 turns on the job flag (S133). After that, the control unit 21 determines whether or not the initial password is stored in the nonvolatile memory 22, in other words, whether or not the password stored in the nonvolatile memory 22 is the same as the initial password (S134). ). If the control unit 21 determines that the initial password is stored in the nonvolatile memory 22 (S134: YES), the control unit 21 performs network forced disable setting to forcibly disable network access (S135). After turning on the notification flag (S136), the control unit 21 determines whether or not to execute the accepted job (S137). If a password different from the initial password is stored in the nonvolatile memory 22 and the controller 21 determines that the initial password is not stored in the nonvolatile memory 22 (S134: NO), following the determination, It is determined whether or not to execute the accepted job (S137). If the control unit 21 determines that the job will not be executed immediately (S137: NO), it determines whether or not a new job has been received (S131).

If the controller 21 determines to immediately execute the received job (S137: YES), it executes the job using the job data stored in the volatile memory 23 (S138). After executing the job, the control unit 21 deletes the job data used for executing the job from the volatile memory 23 .

After that, the control unit 21 determines whether or not all jobs have been deleted from the volatile memory 23 (S139). When determining that all jobs have been deleted from the volatile memory 23 (S139: YES), the control unit 21 turns off the job flag (S140), and determines whether or not a new job has been accepted. (S131). Jobs remain in the volatile memory 23, and when the control unit 21 determines that all jobs have not been deleted from the volatile memory 23 (S139: NO), the job flag remains on (S140 : skip), and it is determined whether or not a new job has been received (S131).

On the other hand, when determining that the job has not been accepted (S131: NO), the control unit 21 determines whether or not a job execution instruction has been accepted (S141). For example, if the job is a secure job that requires user authentication for execution, the control unit 21 accepts the job but does not immediately execute the job, but accepts the job execution instruction and succeeds in user authentication. If so, the job is executed (S138).

When the control unit 21 determines that the job execution instruction has not been received (S141: NO), it determines whether or not the job deletion instruction has been received (S142). For example, an instruction to delete a job and a target to be deleted are transmitted from the external device 5 to the MFP 1 via the LAN 3, and the control unit 21 receives the deletion instruction and the target to be deleted via the LAN interface 13, thereby deleting the job. Assume that the instruction has been received. Further, when a job deletion instruction and a deletion target are input by operating the operation unit 161 of the operation panel 16, the control unit 21 determines that the job deletion instruction has been received from the input.

If the control unit 21 determines that the job deletion instruction has been received (S142: YES), the control unit 21 deletes the job to be deleted from the volatile memory 23 (S143). Then, the control unit 21 determines whether or not all jobs have been deleted from the volatile memory 23 (S139), and if it determines that all jobs have been deleted from the volatile memory 23 (S139 : YES), the state of the job flag is turned off (S140), and it is determined whether or not a new job has been received (S131).

<Effect>
As described above, when personal information is not stored in the non-volatile memory 22, even if the initial password is stored in the non-volatile memory 22, the network access, that is, the LAN interface 13 from the external device 5 cannot be accessed. access is permitted by communication via Therefore, initial settings such as password change can be performed through communication from the external device 5 . On the other hand, when personal information is stored in the nonvolatile memory 22, network access is prohibited while the initial password is stored in the nonvolatile memory 22. FIG. Therefore, unauthorized access to the personal information stored in the nonvolatile memory 22 of the MFP 1 from the external device 5 can be suppressed.

Therefore, it is possible to suppress unauthorized access from the external device 5 to the personal information inside the device while enabling the initial setting by communication from the external device 5 .

Even if the initial password is stored in the non-volatile memory 22, when there is an instruction to register the personal information, the personal information is stored in the non-volatile memory 22, but the password is lost within a predetermined time after the registration. If the initial password is not changed, network access is forcibly disabled. Therefore, even if the personal information is registered, unauthorized access to the personal information from the external device 5 can be suppressed, so that the registered personal information can be suppressed from being stolen to the outside.

When the personal information is stored in the non-volatile memory 22 according to the registration instruction of the personal information, the completion of the registration of the personal information is notified and the network access is forcibly disabled after a predetermined time from the registration ( network access prohibited) is issued. As a result, it is possible to prevent the user from suddenly finding out that the network is forcibly disabled, and the model can be user-friendly.

Furthermore, even when the network access is forcibly disabled, a display is output to notify the user of the forced network disabled state, so that the user can recognize the forced network disabled state.

In MFP 1, it is possible to collectively set a plurality of pieces of information. If the batch setting does not include a new password and an instruction to change to the new password, batch setting of multiple pieces of information is not performed. As a result, unauthorized access to personal information from the external device 5 can be suppressed.

When a job is input to MFP 1 and job data is stored in volatile memory 23, it is determined whether or not an initial password is stored in nonvolatile memory 22, and the initial password is stored in nonvolatile memory 22. is stored, network access is forcibly disabled. Therefore, unauthorized access from the external device 5 to the job data stored in the volatile memory 23, such as confidential document data, can be suppressed, and the theft of the job data can be suppressed.

<Another example of personal information registration processing>
Instead of the personal information registration process shown in FIG. 7, the personal information registration process shown in FIG. 11 may be executed.

In the personal information registration process shown in FIG. 11, the control unit 21 determines whether or not an instruction to register personal information has been received (S151). When control unit 21 determines that it has received an instruction to register personal information (S151: YES), it determines whether an initial password is stored in nonvolatile memory 22, in other words, whether the password stored in nonvolatile memory 22 is stored. It is determined whether or not it is the same as the initial password (S152).

If the control unit 21 determines that the initial password is stored in the nonvolatile memory 22 (S152: YES), it warns that network access will be prohibited if the registration of personal information is continued, and confirms whether or not to continue. Warning display processing for outputting a display inquiring whether or not is performed (S153). The display is output to the EWS screen on the web browser of the external device 5 when the registration of personal information is instructed on the EWS screen, and when the registration of personal information is instructed by operating the operation unit 161 of the operation panel 16. , is output to the display unit 162 of the operation panel 16 .

After that, the control unit 21 determines whether or not to continue the registration of the personal information based on the received response to the inquiry as to whether or not to continue the registration of the personal information (S154). If the control unit 21 determines to continue the registration of the personal information (S154: YES), it turns on the state of the personal information flag (S155). Then, the control unit 21 performs personal information registration processing for storing the personal information received together with the registration instruction in the nonvolatile memory 22 (S156). Further, the control unit 21 performs registration completion display processing for outputting a display notifying that the registration of the personal information has been completed (S157). This display is output to the EWS screen on the web browser of the external device 5 when the registration of personal information is instructed on the EWS screen, and when the registration of personal information is instructed by operating the operation unit 161 of the operation panel 16. , is output to the display unit 162 of the operation panel 16 . After that, the control unit 21 performs network forced disable setting for forcibly disabling network access (S158). Then, the control unit 21 turns on the state of the notification flag (S158), and returns the process to step S151 for determining whether or not an instruction to register personal information has been received.

If the control unit 21 determines not to continue the registration of the personal information (S154: NO), the control unit 21 performs a registration cancellation display process of outputting a display notifying that the registration of the personal information has been canceled (S160). This display is output to the EWS screen on the web browser of the external device 5 when the registration of personal information is instructed on the EWS screen, and when the registration of personal information is instructed by operating the operation unit 161 of the operation panel 16. , is output to the display unit 162 of the operation panel 16 . After that, control unit 21 returns the process to step S151 for determining whether or not an instruction to register personal information has been received.

On the other hand, when the control unit 21 determines that the initial password is not stored in the nonvolatile memory 22 (S152: NO), it turns on the personal information flag (S161), and the personal information received together with the registration instruction is entered. Personal information registration processing to be stored in the nonvolatile memory 22 is performed (S162). Then, the control unit 21 performs a registration completion display process for outputting a display notifying that the registration of the personal information has been completed (S163), and determines whether or not an instruction to register the personal information has been received (Step S151). back to

In the process shown in FIG. 11, the user can select whether or not to continue the registration of the personal information before the network access is forcibly invalidated by the registration of the personal information. can do.

<Modification>
Although the embodiments of the present invention have been described above, the present invention can also be implemented in other forms.

For example, in the above-described embodiments, personal information is taken as an example of confidential information, but confidential information naturally includes information other than personal information.

Also, although the password is taken up as an example of the authentication information, the authentication information is not limited to the password, and may be a user ID, which is user identification information, or a combination of the user ID and password.

In addition, various design changes can be made to the above configuration within the scope of the matters described in the claims.

1: MFPs
5: external device 11: printing unit 12: reading unit 13: LAN interface 16: operation panel 21: control unit 22: nonvolatile memory 23: volatile memory 162: display unit

Claims (11)

a communications department;
a storage unit;
a control unit;
Initial authentication information is stored in the storage unit in an initial state,
The control unit
When the authentication information is received, it is determined whether or not the received authentication information matches the authentication information stored in the storage unit, and if both match, the authentication is established, and the two do not match. an authentication process in which authentication is not established in the case of
After the authentication is established in the authentication process, the authentication information stored in the storage unit is changed to the different authentication information in response to receiving an instruction to change the authentication information stored in the storage unit to another authentication information. a change process to change to the authentication information of
a first determination process for determining whether confidential information other than authentication information is stored in the storage unit;
a second determination process for determining whether or not the initial authentication information is stored in the storage unit;
When both the determination result in the first determination process and the determination result in the second determination process are positive determinations, access to the storage unit by communication via the communication unit from an external device is prohibited. access is prohibited,
When at least one of the determination result in the first determination process and the determination result in the second determination process is a negative determination, access to the storage unit by communication from the external device via the communication unit is permitted. the access permission state to be
An information processing device characterized by: The information processing device according to claim 1,
the confidential information includes personal information;
An information processing device characterized by: The information processing device according to claim 1 or 2,
The control unit
executing the second determination process in response to receiving an instruction to store the confidential information in the storage unit;
information warning that the access is prohibited by storing the confidential information in the storage unit when the determination result in the second determination process is affirmative; output information inquiring whether or not to store in
An information processing device characterized by: The information processing device according to claim 1 or 2,
The control unit
executing the second determination process in response to receiving an instruction to store the confidential information in the storage unit;
storing the confidential information in the storage unit when the determination result in the second determination process is a positive determination;
If the change processing is executed before a predetermined time elapses after the confidential information is stored in the storage unit, the access permission state is established;
If the change process is not executed during a period from when the confidential information is stored in the storage unit until a predetermined time elapses, the access is prohibited.
An information processing device characterized by: The information processing device according to any one of claims 1 to 4,
In response to receiving a collective instruction to store a plurality of pieces of information in the storage unit, the control unit is configured to include the confidential information in the plurality of pieces of information and store the plurality of pieces of information in the change processing. not storing the plurality of pieces of information in the storage unit if the other authentication information stored in the unit is not included;
An information processing device characterized by: The information processing device according to any one of claims 1 to 5,
an execution unit that executes the job,
The control unit
storing information related to the job in the storage unit in response to receiving an instruction to cause the execution unit to execute the job;
After storing the information related to the job in the storage unit, executing the second determination process;
If the determination result of the second determination process is affirmative, the access is prohibited;
An information processing device characterized by: The information processing device according to claim 6,
the storage unit includes a volatile memory and a non-volatile memory;
The control unit
storing information related to the job in the volatile memory and turning on a flag provided in the nonvolatile memory in response to receiving an instruction to cause the execution unit to execute the job;
deleting information related to the job from the volatile memory and turning off the flag in response to the execution of the job by the execution unit;
When the information related to the job is stored in the volatile memory and the power supply for supplying power to the volatile memory is turned off and then the power is turned on, the flag is turned off. ,
An information processing device characterized by: The information processing device according to any one of claims 1 to 7,
The control unit outputs display information notifying that the access is prohibited in response to the access prohibited state.
An information processing device characterized by: The information processing device according to claim 8,
a display unit for displaying information,
The control unit outputs information notifying that the access is prohibited to the display unit.
An information processing device characterized by: a communications department;
a storage unit,
An access permission/denial setting method in an information processing device in which initial authentication information is stored in the storage unit in an initial state,
When the authentication information is received, it is determined whether or not the received authentication information matches the authentication information stored in the storage unit, and if both match, the authentication is established, and the two do not match. an authentication process in which authentication is not established in the case of
After the authentication is established in the authentication process, the authentication information stored in the storage unit is changed to the different authentication information in response to receiving an instruction to change the authentication information stored in the storage unit to another authentication information. a change process to change to the authentication information of
a first determination process for determining whether confidential information other than the authentication information is stored in the storage unit;
a second determination process for determining whether or not the initial authentication information is stored in the storage unit;
When both the determination result in the first determination process and the determination result in the second determination process are positive determinations, access to the storage unit by communication via the communication unit from an external device is prohibited. access is prohibited,
When at least one of the determination result in the first determination process and the determination result in the second determination process is a negative determination, access to the storage unit by communication from the external device via the communication unit is permitted. the access permission state to be
An access denial setting method characterized by: a communications department;
a storage unit,
A program installed in a computer of an information processing device in which initial authentication information is stored in the storage unit in an initial state,
to the computer;
When the authentication information is received, it is determined whether or not the received authentication information matches the authentication information stored in the storage unit, and if both match, the authentication is established, and the two do not match. an authentication process in which authentication is not established in the case of
After the authentication is established in the authentication process, the authentication information stored in the storage unit is changed to the different authentication information in response to receiving an instruction to change the authentication information stored in the storage unit to another authentication information. a change process to change to the authentication information of
a first determination process for determining whether confidential information other than the authentication information is stored in the storage unit;
a second determination process for determining whether or not the initial authentication information is stored in the storage unit;
When both the determination result in the first determination process and the determination result in the second determination process are positive determinations, access to the storage unit by communication via the communication unit from an external device is prohibited. to prohibit access,
When at least one of the determination result in the first determination process and the determination result in the second determination process is a negative determination, access to the storage unit by communication from the external device via the communication unit is permitted. to be in a permission state to be
A program characterized by:

Images