Image forming device

Abstract

The present invention relates to an image forming apparatus. An image forming apparatus includes a user interface, a notification device, and a controller, the controller including: a network driver that performs communication via a network; a non-network driver that performs communication with a terminal device connected to the image forming apparatus in a wired manner without performing communication via a network; and a processor that configures a web server that generates web screen data. The processor: performs a determination as to whether a request for web screen data is transmitted via a network driver or a non-network driver; when a request is transmitted via the network driver, performs a notification process, a confirmation process, and transmits the web screen data to the terminal device with restrictions; and when a request is transmitted via a non-network driver, performs an unrestricted transmission of the web screen data to the terminal device without performing a notification process and a confirmation process.

Description

Technical Field

[0001] The present disclosure relates to an image forming apparatus configured to perform network connection and non-network connection with a terminal device. Background Art

[0002] A remote panel technology in an image forming apparatus such as an MFP (abbreviation of a multifunction peripheral), a printer, etc. has been proposed. The remote panel is a technology that displays web screen data corresponding to an operation screen transmitted in HTTP (abbreviation of a hypertext transfer protocol) format from a web server of the image forming apparatus on a display of a terminal device connected to the image forming apparatus via a network such as a LAN (abbreviation of a local area network), receives an operation on the image forming apparatus through the operation screen, transmits information about the operation from the terminal device to the image forming apparatus, performs a process based on the information about the operation in the image forming apparatus, and transmits information about an update screen associated with the process to the terminal device. By using the remote panel technology, it is possible to operate the operation panel of the image forming apparatus from the terminal device.

[0003] A prior art image forming system including an MFP and a mobile terminal (e.g., a portable mobile terminal) has been disclosed (see, for example, JP-A-2014-35723). The MFP is wirelessly connected to the mobile terminal via a wireless access point of a LAN. The mobile terminal, which receives a predetermined operation from a user, receives operation screen data from the MFP and displays the screen data on its touch panel. When a user operation on the touch panel is received, the mobile terminal transmits information about the operation (e.g., input coordinates, etc.) to the MFP. The MFP determines what the request received from the mobile terminal is based on the information about the operation received from the mobile terminal, and performs processing based on the operation. Summary of the invention

[0004] In the above-mentioned remote panel technology, when a terminal device connected to a network requests an image forming apparatus to transmit web screen data in HTTP format, an approval button is displayed on the main body screen of the image forming apparatus. When the approval button is pressed, the web screen data is transmitted to the terminal device. In this way, unauthorized access from the terminal device connected to the network is prevented, so that sufficient security can be ensured. Meanwhile, there is a terminal device that is capable of not only network connection but also non-network connection such as USB (abbreviation of Universal Serial Bus) connection with the image forming apparatus via a cable. When the "HTTP on USB" or "Ethernet on USB" technology that realizes http data transmission via USB connection is used, the web screen data in HTTP format can be transmitted to the terminal device connected to the USB. In most cases, the non-network connection is a relatively short-distance wired connection, so that unauthorized access rarely occurs. If the approval button is displayed on the main body screen of the image forming apparatus and the user is prompted to press the approval button even when the terminal device connected to the non-network requests the transmission of web screen data, this will impose too much operation burden on the user, making it not advantageous in terms of usability.

[0005] An illustrative aspect of the present disclosure provides an image forming apparatus that can reduce an operation burden on a user of a terminal device connected to a non-network while ensuring sufficient security for a terminal device connected to a network in the presence of a transmission request for web screen data from the terminal device.

[0006] According to an illustrative aspect of the present disclosure, there is provided an image forming apparatus, comprising: a recording unit configured to form an image on a recording medium; a receiving unit configured to receive a user input; a notification unit; and a controller, wherein the controller comprises: a network driver that performs communication with a terminal device via a network; a non-network driver that performs communication with a terminal device connected to the image forming apparatus in a wired manner, not via a network; and a processing unit that configures a web server that is configured to generate web screen data related to image formation in the recording unit, the processing unit being configured to receive a transmission request for the web screen data in HTTP format from the terminal device via the network driver or the non-network driver, and wherein the processing unit The processing unit is configured to: perform (a) a transmission source determination process of determining whether a transmission request is transmitted via a network driver or via a non-network driver; (b) when it is determined in the transmission source determination process that the transmission request is transmitted via a network driver, further perform: (b1) a notification process of causing a notification unit to issue a notification; (b2) after the notification process, a confirmation process of confirming whether a receiving unit has received an approval input indicating that the transmission request is approved; and (b3) after confirming in the confirmation process that the receiving unit has received the approval input, a restrictive transmission process of transmitting web screen data to a terminal device; and (c) when it is determined in the transmission source determination process that the transmission request is transmitted via a non-network driver, further perform: a non-restrictive transmission process of transmitting web screen data to a terminal device without performing the notification process and the confirmation process.

[0007] For a transmission request from a terminal device connected to a network, after the receiving unit receives an approval input via a notification process and a confirmation process, the web screen data is transmitted to the terminal device, and for a transmission request from a terminal device connected to a non-network, the web screen data is transmitted without performing a notification process and a confirmation process. Therefore, while ensuring sufficient security of the terminal device connected to the network, the operation burden on the user of the terminal device connected to the non-network can be reduced. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Illustrative embodiments of the present disclosure will be described in detail based on the following drawings, in which:

[0009] Figure 1 is a schematic side view depicting the internal structure of a multifunction peripheral as an image forming apparatus of an illustrative embodiment of the present invention;

[0010] Figure 2 It is a depiction Figure 1A block diagram of a hardware configuration of a multifunction peripheral device and a computer and a mobile terminal connected to the multifunction peripheral device as shown in;

[0011] Figure 3 It is a description of the software configuration related to the connection request from the computer and mobile terminal to the multifunction peripheral device. Figure 2 Block diagram of

[0012] Figure 4A and Figure 4B It describes when a connection request is received from a computer or mobile terminal. Figure 1 A flowchart of the operation of the multifunction peripheral shown in;

[0013] Figure 5A Describes the approval screen displayed on the LCD module of the multifunction peripheral device, Figure 5B depicts a password input screen displayed on a computer monitor, and Figure 5C is an illustration depicting a remote panel displayed on a computer's monitor. DETAILED DESCRIPTION

[0014] (Overall configuration of the device)

[0015] Hereinafter, a multifunction peripheral as an image forming apparatus according to a preferred illustrative embodiment of the present disclosure will be described with reference to the accompanying drawings.

[0016] Figure 1 The internal configuration of the multifunction peripheral 10 is depicted. In the following description, the multifunction peripheral 10 is described based on the state in which it can be appropriately assembled ( Figure 1 The up-down direction is defined in a state in which one side of the housing 11 on which the opening 13 is provided is set as the front side (front), and the left-right direction is defined when the multifunction peripheral 10 is seen from the front side (front).

[0017] like Figure 1 As shown in FIG. 1 , the multifunction peripheral 10 includes a paper feed tray 4, a paper discharge tray 5, a print module 6 (an example of a recording unit), a conveyor module 7, and a controller 8. The paper feed tray 4, the print module 6, the conveyor module 7, and the controller 8 are accommodated in a housing 11 of the multifunction peripheral 10. The controller 8 is configured to control the multifunction peripheral 10 as a whole. In the housing 11, the paper feed tray 4 is arranged below the print module 6. Meanwhile, although Figure 1 The multifunction peripheral device 10 further includes a reading module 18 (see FIG. Figure 2 ).

[0018] The paper feed tray 4 can accommodate a plurality of sheets of paper 9 while supporting the plurality of sheets of paper 9 in a stacked state. The paper feed tray 4 can be inserted and pulled out in the front-to-rear direction through an opening 13 formed on the front face of the housing 11. Meanwhile, the paper discharge tray 5 is arranged above the front side of the paper feed tray 4 and is configured to move together with the paper feed tray 4. The paper feed tray 4 has a supporting surface 4a on which the sheets of paper 9 are supported. The supporting surface 4a is a surface perpendicular to the up-down direction. When the paper feed tray 4 is located in the housing 11, the supporting surface 4a is exposed to the internal space of the housing 11. The rear end portion of the paper feed tray 4 is provided with an inclined plate 4b.

[0019] The printing module 6 includes an ink cartridge 61 and a recording head 63. The ink cartridge 61 is supported by two guide rails 67a and 67b. The two guide rails 67a and 67b are arranged to be spaced apart from each other in the front-rear direction and extend in the left-right direction, respectively. The ink cartridge 61 is arranged to extend on the two guide rails 67a and 67b. The ink cartridge 61 is configured to be driven by the ink cartridge driving motor 21 (refer to Figure 2 ) reciprocates in the left-right direction as the main scanning direction along the two guide rails 67a and 67b. The recording head 63 is mounted on the ink cartridge 61. The recording head 63 is configured to discharge ink supplied from an ink cartridge (not shown) from a plurality of nozzles (not shown) provided in a nozzle surface 69 on the lower surface.

[0020] The conveyor module 7 is configured to convey the paper 9 in the printing module 6, and includes a feeder roller 70, a pair of conveying rollers 71, a pair of discharge rollers 72, a platen 75, and a guide member 17. The feed roller 70 is configured to convey the paper 9 by driving the feed motor 22 (refer to FIG. Figure 2 ) is rotated by the driving force applied thereto, thereby conveying the topmost sheet 9 of the sheets supported in the sheet feeding tray 4 backward.

[0021] A pair of conveying rollers 71 and a pair of discharging rollers 72 are arranged in the front-rear direction with the printing module 6 sandwiched therebetween, the pair of conveying rollers 71 being arranged behind the printing module 6, and the pair of discharging rollers 72 being arranged in front of the printing module 6. The platen 75 is arranged below the printing module 6 so as to face the nozzle surface 69 of the printing module 6. The pair of conveying rollers 71 and the pair of discharging rollers 72 are configured to be driven by the conveyor motor 23 (reference Figure 2 ) is driven by the driving force applied.

[0022] The guide member 17 is configured to define a transport path 14 through which the paper 9 delivered from the paper feed tray 4 is sent to a region facing the nozzle surface 69 of the recording head 63. The guide member 17 extends from the vicinity of the rear end of the paper feed tray 4 to the vicinity of a pair of transport rollers 71.

[0023] The paper 9 delivered backward from the paper feed tray 4 by the feeder roller 70 is directed obliquely upward by the inclined plate 4b provided at the rear end portion of the paper feed tray 4, passes through the conveying path 14 defined by the guide member 17, and reaches a position sandwiched by a pair of conveying rollers 71. The paper 9 sandwiched by the pair of conveying rollers 71 is conveyed by the pair of conveying rollers 71 to an area facing the nozzle surface 69 of the recording head 63. Ink is discharged from the nozzles (not shown) of the recording head 63 moving in the main scanning direction to the paper 9 conveyed by the pair of conveying rollers 71 in a state where the paper is supported by the platen 75, so that an image is recorded on the paper. The recorded paper 9 is conveyed forward by the pair of discharge rollers 72, and then discharged onto the paper discharge tray 5.

[0024] (Block Configuration)

[0025] Then, refer to Figure 2 The block configuration of the multifunction peripheral 10 according to the present illustrative embodiment is described. Figure 2 As shown in FIG. 1 , the controller 8 of the multifunction peripheral 10 is electrically connected to the ink cartridge driving motor 21, the recording head 63, the feeder motor 22, and the conveyor motor 23 of the multifunction peripheral 10. In addition, the controller 8 is electrically connected to the reading module 18, the LCD (abbreviation of liquid crystal display) module 19 (one example of a notification unit), the wireless LAN module 25, the wired LAN module 26, and the USB module 27.

[0026] The reading module 18 is a flat-panel image reading device that includes a linear image sensor such as a CCD (abbreviation of a charge coupled device). The image sensor is long in the main scanning direction and is configured to read a document placed on a reading surface (not shown) as it moves in the sub-scanning direction, and output image data. The LCD module 19 includes a display on which various information about the multifunction peripheral 10 is displayed by characters and / or images. The display is an example of a notification unit. The display is configured as a touch panel, and when a user touches the display, position information of the touched position is output to the controller 8. The display is an example of a receiving unit.

[0027] The wireless LAN module 25 is configured to perform network communication with another communication device (in the present illustrative embodiment, the mobile terminal 140) in accordance with a wireless LAN communication standard such as IEEE 802.11ac. The wired LAN module 26 has a LAN port as an insertion port for a LAN cable 163, and is configured to perform network communication with another communication device (in the present illustrative embodiment, the PC 120) connected via the router 170 in accordance with a wired LAN communication standard such as Ethernet (registered trademark). The USB module 27 has a USB port as an insertion port for a USB cable 161, and is configured to perform USB communication (non-network communication) with another communication device (in the present illustrative embodiment, the PC 120) to which the USB cable 161 is connected in accordance with the USB standard. Therefore, the multifunction peripheral 10 can perform data communication in accordance with the communication standard via any one of the modules 25, 26, and 27.

[0028] like Figure 2 As shown in the figure, the controller 8 includes a CPU (abbreviation of central processing unit) 81, a ROM (abbreviation of read-only memory) 82, a RAM (abbreviation of random access memory) 83, an EEPROM (abbreviation of electrically erasable programmable read-only memory) 84 and an ASIC (abbreviation of application-specific integrated circuit) 85, and is configured to control the operations of each unit of the printing module 6, each unit of the reading module 18, the LCD module 19, the wireless LAN module 25, the wired LAN module 26 and the USB module 27 in cooperation with each other.

[0029] The controller 8 is configured to perform an image recording operation of recording an image related to image data input from the PC 120 or the mobile terminal 140 on the paper 9, a copying operation of recording an image on the paper 9 based on the image data obtained in the reading module 18, a reading operation of storing the image data obtained in the reading module 18 at a desired position, etc. Meanwhile, in the image recording operation, the controller 8 is configured to control the ink cartridge driving motor 21 so that the ink cartridge 61 reciprocates in the main scanning direction. In addition, the controller 8 is configured to control the recording head 63 based on the image data stored in the RAM 83 so that ink is discharged from the nozzles (not shown) of the recording head 63. Furthermore, the controller 8 is configured to control the feeder motor 22 and the conveyor motor 23 so that the paper 9 accommodated in the paper feeding tray 4 passes through the position facing the recording head 63 and is then discharged to the paper discharge tray 5.

[0030] exist Figure 2, the CPU 81 and the ASIC 85 are shown one by one. However, the controller 8 may include only one CPU 81, and the one CPU 81 may be configured to collectively perform necessary processing, or may include a plurality of CPUs 81, and the plurality of CPUs 81 may be configured to share and perform necessary processing. In addition, the controller 8 may include only one ASIC 85, and the one ASIC 85 may be configured to collectively perform necessary processing, or may include a plurality of ASICs 85, and the plurality of ASICs 85 may be configured to share and perform necessary processing.

[0031] The PC 120 includes a CPU 121, a ROM 122, a RAM 123, and an HDD (abbreviation of a hard disk drive) 124. In the HDD 124, an OS (abbreviation of an operating system) for controlling the operation of the PC 120, a multifunction peripheral management program for controlling the operation of the multifunction peripheral 10, and the like are installed. In addition, the PC 120 includes a display 128 and an input device 129 operated by a user such as a keyboard, a mouse, and the like. The CPU 121 can control the operation of the multifunction peripheral 10 by executing the multifunction peripheral management program. As described later, in the present illustrative embodiment, a web screen received from the multifunction peripheral 10 is displayed on the display 128.

[0032] The PC 120 further includes a USB module 126 and a wired LAN module 127. In the present illustrative embodiment, the USB module 126 is connected to the USB module 27 of the multifunction peripheral 10 via a USB cable 161. The wired LAN module 127 is connected to a router 170 via a LAN cable 162. The router 170 may be connected to the Internet, or may not be connected to the Internet. In addition, when the router 170 includes a wireless LAN module, the router 170 may be wirelessly connected to the wireless LAN module 25.

[0033] The mobile terminal 140 such as a smartphone, a tablet computer, etc. includes a CPU 141, a RAM 142, and an EEPROM 143. In the EEPROM 143, an OS for controlling the operation of the mobile terminal 140, a multifunction peripheral management program for controlling the operation of the multifunction peripheral 10, and the like are installed. In addition, the mobile terminal 140 includes a touch panel display 144 as an input / output device. A web screen received from the multifunction peripheral 10 is displayed on the display 144.

[0034] The mobile terminal 140 further includes a wireless LAN module 146. In the present illustrative embodiment, the wireless LAN module 146 is directly wirelessly connected to the wireless LAN module 25 of the multi-function peripheral 10 (ad hook mode). Meanwhile, when the router 170 includes a wireless LAN module, the wireless LAN module 146 can be wirelessly connected to the multi-function peripheral 10 via the router 170 (infrastructure mode).

[0035] (Software Configuration)

[0036] Then, refer to Figure 3 The configuration of software related to the connection request from the PC 120 and the mobile terminal 140 to the multifunction peripheral 10 is described. In the present illustrative embodiment, the PC 120 includes an MFP driver 221 and an HTTP client 222. In the present illustrative embodiment, the mobile terminal 140 includes an MFP driver 241 and an HTTP client 242. The MFP driver 221 and the MFP driver 241 are configured to generate a print command (including print setting data such as the number of sheets to be printed, image quality, etc. in addition to image data), a read command, a copy command (an image recorded in the print module 6 based on the image data generated in the read module 18), a transmission command (remote panel) of web screen data embedded in the multifunction peripheral 10, and the like based on the input operation of the user. HTTP client 222 and HTTP client 242 are web clients corresponding to an encryption protocol such as SSL, and are configured to output print commands and transmission commands for web screen data generated by MFP driver 221 and MFP driver 241 as HTTP-formatted connection requests to the multi-function peripheral 10 (including print requests, read requests, copy requests, and transmission requests for web screen data).

[0037] When a connection request is output via the USB module 126, the HTTP client 222 of the PC 120 outputs the connection request without encrypting the connection request because it is a plain text. That is, in the case of a print command, the URL (abbreviation of Uniform Resource Locator) of the connection request output from the USB module 126 is, for example, "http: / / localhost / print", and in the case of a transmission command of web screen data it is, for example, "http: / / localhost / index".

[0038] When a connection request is output via the wired LAN module 127, the HTTP client 222 of the PC 120 encrypts and outputs the connection request, or outputs the connection request as it is a plain text. That is, in the case of a print command, the URL of the connection request output from the wired LAN module 127 is, for example, "https: / / example / print" (encrypted) or "http: / / example / print" (plain text), and in the case of a transmission command of Web screen data, it is, for example, "https: / / example / index" or "http: / / example / index". At the same time, this also applies to the case where the HTTP client 222 outputs a connection request via the wireless LAN module.

[0039] In addition, the HTTP client 242 of the mobile terminal 140 encrypts and outputs the connection request output via the wireless LAN module 146, or outputs the connection request as it is a plain text. That is, the URL of the connection request output from the wireless LAN module 146 is, for example, "https: / / example / print" or "http: / / example / print" in the case of a print command, and is, for example, "https: / / example / index" or "http: / / example / index" in the case of a transmission command of web screen data.

[0040] The controller 8 of the multifunction peripheral 10 includes a printer driver 201, a scan driver 205, a LAN driver 202, a USB driver 203 as a non-network driver, and a web server 204 as a processing unit corresponding to an encryption protocol such as SSL. The printer driver 201 is configured to drive the print module 6 based on a print request received from the web server 204. The scan driver 205 is configured to drive the read module 18 based on a read request received from the web server 204. The LAN driver 202 is configured to perform communication with the PC 120 and the mobile terminal 140 via a network. The USB driver 203 is configured to perform communication with the PC 120 connected to the multifunction peripheral 10 through the USB cable 161 without via a network.

[0041] The connection request transmitted from the PC 120 is received by the USB driver 203 when transmitted via the USB cable 161, and is received by the LAN driver 202 when transmitted via the LAN cables 162 and 163. Moreover, the connection request transmitted from the mobile terminal 140 is received by the LAN driver 202. In the present illustrative embodiment, when the LAN driver 202 receives the connection request from the PC 120 or the mobile terminal 140, the LAN driver 202 sets the reception flag stored in the Web server 204 and indicating that the LAN driver 202 receives the connection request to an on state. Therefore, even when the USB driver 203 receives the connection request from the PC 120, the reception flag is maintained when the reception flag is off.

[0042] The web server 204 is configured to receive a connection request in HTTP format from the PC 120 and the mobile terminal 140 via the LAN driver 202 or the USB driver 203, and perform the following processing. In the present illustrative embodiment, the web server 204 includes a first CGI (abbreviation of Common Gateway Interface) 204a and a second CGI 204b corresponding to different URLs from each other. The first CGI 204a is used to activate the printer driver 201 and / or the scan driver 205 from the web server 204. The second CGI 204b is used to make the display 128 of the PC 120 and the display 144 of the mobile terminal 140 display a web screen (for example, including the setting status of the operation parameters, the operation status of the multifunction peripheral 10, and the estimated ink remaining amount) stored in the web server 204 as a remote panel. In the present illustrative embodiment, the second CGI 204b is configured to make the display 128 of the PC 120 and the display 144 of the mobile terminal 140 display the content including at least a part to be displayed on the display of the LCD module 19.

[0043] In this illustrative embodiment, web server 204 assigns the connection request to first CGI 204a when the connection request URL ends with " / print" and assigns the connection request to second CGI 204b when the connection request URL ends with " / index".

[0044] If the assigned connection request is transmitted via LAN, the first CGI 204a rejects or accepts the assigned connection request to activate the scan driver 205 and / or the printer driver 201, depending on whether the assigned connection request is transmitted via USB or LAN and whether the assigned connection request is encrypted. When the assigned connection request is transmitted via LAN, if approval is input, the second CGI 204b causes the LCD module 19 to display a screen asking the user whether to allow remote panel display, and outputs data related to the web screen stored in the web server 204. In this illustrative embodiment, data related to the web screen is output only when the connection request is encrypted and the verification of the ID and password is successful. On the other hand, when the assigned connection request is transmitted via USB, the second CGI 204b outputs data related to the web screen stored in the web server 204 without causing the LCD module 19 to display a screen asking the user whether to allow remote panel display. In this case, the data related to the web screen is output under the condition that the ID and password verification is successful, regardless of whether the connection request is encrypted. The processing performed by the first CGI 204a and the second CGI 204b will be described in detail later.

[0045] (Multi-function peripheral device operation)

[0046] Then, refer to Figure 4A and Figure 4B The description is made of operations performed when the multifunction peripheral 10 receives connection requests from the PC 120 and the mobile terminal 140. The operations described below are performed by the web server 204. Meanwhile, hereinafter, descriptions of the read operation and the copy operation are omitted.

[0047] First, in S1, the web server 204 determines whether a connection request in HTTP format is received. When it is determined that a connection request is received (S1: Yes), the web server 204 determines in S2 whether the end of the URL of the connection request is " / index". When it is determined that the end of the URL is " / index", the web server 204 assigns the connection request to the second CGI 204b (S2: Yes), and enters S3. When it is determined that the end of the URL is not " / index", that is, it is " / print", the web server 204 assigns the connection request to the first CGI 204a (S2: No), and enters S4.

[0048] In S4, the first CGI 204a determines whether to transmit the received connection request via USB or LAN based on whether the reception flag is on or off. That is, when the reception flag is on, it is determined that the connection request is transmitted via the LAN, via the LAN driver 202, and when the reception flag is off, it is determined that the connection request is transmitted via the USB, via the driver 203 (transmission source determination processing). When it is determined that the connection request is transmitted via the LAN driver 202 (S4: No), the first CGI 204a proceeds to S5. When it is determined that the connection request is transmitted via the USB driver 203 (S4: Yes), the first CGI 204a proceeds to S6.

[0049] In this case, in S6, the first CGI 204a operates the printer driver 201 to drive the print module 6 based on the connection request without determining whether the connection request is encrypted (non-network reception processing). Thus, ink is discharged from the recording head 63, so that an image is formed on the paper 9.

[0050] In S5, the first CGI 204a determines whether the connection request is encrypted (encryption determination processing). When it is determined that the connection request is encrypted (S5: Yes), the first CGI 204a proceeds to S6. On the other hand, when it is determined that the connection request is not encrypted (the connection request is plain text) (S5: No), the first CGI 204a proceeds to S7.

[0051] In this case, in S6, the first CGI 204a decrypts the encrypted connection request (decryption processing), and operates the printer driver 201 to drive the print module 6 based on the decrypted connection request (network reception processing). Thus, ink is discharged from the recording head 63, thereby forming an image on the paper 9.

[0052] Meanwhile, in S7, the first CGI 204a does not operate the printer driver 201 based on the connection request (print rejection processing). At this time, the first CGI 204a outputs data related to a web screen including a message indicating that printing cannot be performed. The output web screen is supplied to the PC 120 or the mobile terminal 140 through a path opposite to the path through which the connection request is received. Then, the web screen is displayed on the display 128 or 144 through the HTTP client 222 or the HTTP client 242.

[0053] In S3, the second CGI 204b determines whether to transmit the received connection request via USB or via LAN based on whether the reception flag is turned on or off. That is, when the reception flag is turned on, it is determined that the connection request is transmitted via LAN, via LAN driver 202, and when the reception flag is turned off, it is determined that the connection request is transmitted via USB, via USB driver 203 (transmission source determination processing). In this way, in this illustrative embodiment, when the LAN driver 202 receives a connection request from the PC 120 or the mobile terminal 140, the reception flag becomes turned on, so that the web server 204 can easily perform the transmission source determination processing. When it is determined that the connection request is transmitted via the LAN driver 202 (S3: No), the second CGI 204b enters S11. When it is determined that the connection request is transmitted via the USB driver 203 (S4: Yes), the second CGI 204b enters S31.

[0054] In S11, the second CGI 204b determines whether the connection request is encrypted (encryption determination processing). Specifically, the second CGI 204b determines whether the connection request is encrypted based on exchanging certificate files related to SSL, checking whether a pre-program for encryption with the PC 120 or the mobile terminal 140 is executed, etc. When it is determined that the connection request is not encrypted (the connection request is plain text) (S11: No), the second CGI 204b proceeds to S12. On the other hand, when it is determined that the connection request is encrypted (S11: Yes), the second CGI 204b decrypts the encrypted connection request (decryption processing), and proceeds to S13.

[0055] In S12, the second CGI 204b transmits a redirection request (redirection processing) for instructing to transmit the connection request to the address corresponding to the encrypted communication (e.g., "https: / / example / index") to the PC 120 or the mobile terminal 140. Although not described in detail here, the PC 120 or the mobile terminal 140 that has received the redirection request transmits the connection request to the address corresponding to the encrypted communication.

[0056] In S13, the second CGI 204b determines whether the remote panel is in execution for another device different from the device that has transmitted the connection request and is USB-connected to the multi-function peripheral 10. This determination can be performed based on the USB flag held by the second CGI 204b (indicating whether the communication partner is USB-connected or LAN-connected when the remote panel is executed). When it is determined that the remote panel is in execution for another device connected to the USB (S13: Yes), the second CGI 204b enters S14. At this time, in S14, the second CGI 204b outputs data related to a web screen including a message indicating that the remote panel cannot be displayed based on the connection request, without causing the display of the LCD module 19 to display an approval screen (described later) (first rejection processing). The output web screen is supplied to the PC 120 or the mobile terminal 140 through a path opposite to the path through which the connection request is received. Then, the HTTP client 222 or the HTTP client 242 displays the web screen on the display 128 or 144.

[0057] When it is determined that the remote panel is in execution for another device connected to the USB (S13: No), the second CGI 204b enters S15. In S15, the second CGI 204b determines whether the multifunction peripheral 10 is in approval lock (which will be described later). This determination can be performed based on the approval lock flag (indicating whether the approval lock is in progress) held by the second CGI 204b. When it is determined that the multifunction peripheral 10 is in approval lock (S15: Yes), the second CGI 204b enters S14. At this time, in S14, the second CGI 204b outputs data related to a web screen including a message indicating that the remote panel cannot be displayed based on the connection request, without causing the display of the LCD module 19 to display the approval screen (which will be described later). (Second rejection processing). The message is displayed on the display 128 or 144.

[0058] When it is determined that the multifunction peripheral 10 is not in the approval lock (S15: No), the second CGI 204b proceeds to S16. In S16, the second CGI 204b causes the display of the LCD module 19 to display the approval screen (notification processing). For example, in the approval screen, Figure 5AAs shown in , a message "Will you approve the remote access?" and "Yes" and "No" buttons are displayed. In S17, it is confirmed whether the user touches "Yes", that is, whether the LCD module 19 receives the approval input for the remote panel display (confirmation processing). When the user touches "No", that is, the LCD module 19 receives the rejection input for the remote panel display (S17: No), the second CGI 204b sets the approval lock flag to the on state, so that the multi-function peripheral 10 transitions to the approval lock state (S18) (approval lock processing). At this time, the second CGI 204b outputs data related to the web screen including a message indicating the cancellation of the display request for the remote panel. The message is displayed on the display 128 or 144.

[0059] When the user touches "Yes", that is, when the LCD module 19 receives the approval input for the remote panel display (S17: Yes), the second CGI 204b enters S19. In S19, the second CGI 204b determines whether the multifunction peripheral 10 is in a password (also referred to as PW) lock (to be described later). This determination can be performed based on a PW lock flag (indicating whether the PW lock is in progress) held by the second CGI 204b. When it is determined that the multifunction peripheral 10 is in a PW lock (S19: Yes), the second CGI 204b enters S14. At this time, in S14, the second CGI 204b outputs data related to a web screen including a message indicating that the remote panel cannot be displayed without performing a password verification process (third rejection process) (to be described later). The message is displayed on the display 128 or 144.

[0060] When it is determined that the multifunction peripheral 10 is not in PW lock (S19: No), the second CGI 204b proceeds to S20. In S20, the second CGI 204b causes the display 128 of the PC 120 or the display 144 of the mobile terminal 140 to display an input screen for ID (identification information) and PW, thereby prompting the user to input ID and PW. As an example, in the input screen, Figure 5B As shown in , a text box for inputting a user name, a text box for inputting a password, and "Login" and "Cancel" buttons are displayed. When the "Login" button is clicked, in S21, the ID and PW input by the user are verified using the database stored in the EEPROM 84. When the verification fails (S21: No), in S22, the second CGI 204b determines whether the number of verification failures (initial value = 0) is less than a predetermined threshold.

[0061] When it is determined that the number of failed authentications is equal to or greater than a predetermined threshold value (S22: No), the second CGI 204b sets the PW lock flag to the on state, so that the multifunction peripheral 10 transitions to the PW lock state (S23) (password lock processing). At this time, the second CGI 204b outputs data related to a web screen including a message indicating that the ID and password do not match. The message is displayed on the display 128 or 144.

[0062] When it is determined that the number of verification failures is less than the predetermined threshold value (S22: Yes), in S24, the second CGI 204b causes the display 128 of the PC 120 or the display 144 of the mobile terminal 140 to display the input screen of the ID and PW again, thereby prompting the user to input the ID and PW (password verification processing). In addition, in S25, the second CGI 204b increases the number of verification failures by one (+1), and then returns to S21.

[0063] When the authentication is successful (S21: Yes), in S26, the second CGI 204b restores the count value of the counter of the number of authentication failures to the initial value (=0). Then, the second CGI 204b proceeds to S27, and transmits the web screen data generated by the second CGI 204b to the display 128 of the PC 120 or the display 144 of the mobile terminal 140 (restrictive transmission processing). In the present illustrative embodiment, the web screen displayed as the remote panel includes the same display area 19a and the ten-key display area 19b as the display contents on the display of the LCD module 19 at that time, as shown in FIG. Figure 5C In the web screen, for example, the remaining amount of ink, input columns of various setting parameters (paper size, image quality, etc.), etc. can be displayed. Meanwhile, when the second CGI 204b enters S27 from S26 in this manner, in S27, the USB flag is turned off, that is, indicating that the communication partner of the remote panel is connected to the LAN.

[0064] In S31, the second CGI 204b determines whether the remote panel is in execution for another device different from the device that has transmitted the connection request and is connected to the multifunction peripheral 10 via the LAN. This determination can be performed based on the USB flag. When it is determined that the remote panel is in execution for another device connected to the LAN (S31: Yes), the second CGI 204b proceeds to S32. In S32, the remote panel display for the other device connected to the LAN is stopped. At this time, the second CGI 204b outputs data related to the web screen including a message indicating that the remote panel display is stopped to the other device connected to the LAN. Then, the second CGI 204b enters S33. On the other hand, when it is determined that the remote panel is not in execution (S31: No), the second CGI 204b enters S33 without passing through S32.

[0065] In S33, the second CGI 204b determines whether the multifunction peripheral 10 is in approval lock. This determination can be performed based on the approval lock flag. When it is determined that the multifunction peripheral 10 is in approval lock (S33: Yes), the second CGI 204b enters S34. In S34, the second CGI 204b releases the approval lock, that is, sets the approval lock flag to the off state (approval lock release processing). Then, the second CGI 204b enters S35. On the other hand, when it is determined that the multifunction peripheral 10 is not in approval lock (S33: No), the second CGI 204b enters S35 without going through S34.

[0066] In S35, the second CGI 204b determines whether the multifunction peripheral 10 is in PW lock. This determination can be performed based on the PW lock flag. When it is determined that the multifunction peripheral 10 is in PW lock (S35: Yes), the second CGI 204b proceeds to S36. In S36, the second CGI 204b releases the PW lock, that is, sets the PW lock flag to the off state (password lock release processing). Then, the second CGI 204b enters S37. On the other hand, when it is determined that the multifunction peripheral 10 is not in PW lock (S35: No), the second CGI 204b enters S37 without going through S36.

[0067] In S37, the second CGI 204b causes the display 128 of the PC 120 to display an input screen for ID and PW, thereby prompting the user to input ID and PW. As an example, the input screen is Figure 5B. When the "Login" button is clicked, in S38, the ID and PW input by the user are verified using the database stored in the EEPROM 84. When the verification fails (S38: No), in S39, the second CGI 204b causes the display 128 of the PC 120 to display the input screen of the ID and PW again, thereby prompting the user to input the ID and PW (password verification processing). Then, the second CGI 204b returns to S37.

[0068] When the authentication succeeds (S38: Yes), the second CGI 204b proceeds to S27, and transmits the web screen data generated by the second CGI 204b to the display 128 of the PC 120 (non-limiting transmission process). Also in this case, the web screen displayed as the remote panel includes the display area 19a and the ten-key display area 19b which are the same as the display contents on the display of the LCD module 19 at that time, as shown in FIG. Figure 5C When the second CGI 204b enters S27 from S38 in this manner, in S27, the USB flag is turned on, ie, indicating that the communication partner of the remote panel is connected to the USB.

[0069] In the state where the remote panel is displayed in S27, the user can input instructions to the multifunction peripheral 10 by mouse clicking or touching operations on the display 128 or 144. The display contents of the remote panel on the display 128 or 144 are updated (refreshed) to the latest information at intervals specified by the user.

[0070] In this way, in the present illustrative embodiment, for a remote panel transmission request from the PC 120 or the mobile terminal 140 connected to the LAN, after the LCD module 19 as the receiving unit receives the approval input via the notification process and the confirmation process, the web server 204 transmits the web screen data related to the remote panel to the PC 120 or the mobile terminal 140. On the other hand, for a remote panel transmission request from the PC 120 connected to the USB, the web server 204 transmits the web screen data related to the remote panel without performing the notification process and the confirmation process. Therefore, while ensuring sufficient security for the PC 120 or the mobile terminal 140 connected to the LAN, the operation burden for the user of the PC 120 connected to the USB can be reduced, which is advantageous in terms of usability.

[0071] Since the web server 204 performs encryption determination processing for a remote panel transmission request from the PC 120 or the mobile terminal 140 connected to the LAN, confidentiality of communication can be ensured. Therefore, even when a terminal device is connected to the LAN, information displayed on the web screen can be prevented from leaking.

[0072] Furthermore, in the present illustrative embodiment, when the remote panel transmission request from the PC 120 or the mobile terminal 140 connected to the LAN is not encrypted, the web server 204 requests redirection to an address corresponding to encryption. Therefore, even when the original transmission request is not encrypted, the web screen can be displayed while preventing information leakage without imposing troublesome operations on the user.

[0073] In addition, for a remote panel transmission request from the PC 120 connected to the USB, the web server 204 transmits web screen data related to the remote panel without performing encryption determination processing, notification processing, and confirmation processing. Therefore, it is possible to prevent more unnecessary processing performed in the USB connection with a low risk of information leakage.

[0074] Furthermore, in the present illustrative embodiment, as described in the processes of S13 and S14 and S31 and S32, the web server 204 transmits the web screen data by giving priority to the USB connection having higher security than the LAN connection. Thus, even if the multifunction peripheral 10 is taken over by an attacker operating a terminal device connected to the LAN, control of the multifunction peripheral 10 can be regained by operating the PC 120 connected to the USB. In addition, after the multifunction peripheral 10 transmits the web screen data to the PC 120 connected to the USB through the non-restrictive transfer process, the multifunction peripheral 10 is not taken over by an attacker operating a terminal device connected to the LAN.

[0075] In addition, in the present illustrative embodiment, when a rejection input is made on the approval screen, the multifunction peripheral 10 enters the approval lock state, and thereafter, until the approval lock is released, the multifunction peripheral 10 does not display the approval screen even when it receives a transmission request of the remote panel from a terminal device connected to the LAN. Therefore, it is possible to prevent a situation in which the multifunction peripheral 10 cannot be fully used when a transmission request from a terminal device connected to the LAN that should not be approved is repeated multiple times in a short period of time.

[0076] In addition, in the present illustrative embodiment, when the number of consecutive failures of PW authentication reaches a predetermined threshold value, the multifunction peripheral 10 enters a PW lock state, and thereafter, until the PW lock is released, even when the multifunction peripheral 10 receives a transmission request from a remote panel from a terminal device connected to the LAN, the multifunction peripheral 10 does not display a PW input request screen. Therefore, it is possible to prevent a situation in which the multifunction peripheral 10 cannot be fully used when a transmission request from a terminal device connected to the LAN and operated by a user who does not know the password is repeated a plurality of times in a short period of time.

[0077] In addition, the web server includes the first CGI 204 a and the second CGI 204 b corresponding to URLs different from each other, so that a process corresponding to a request from the PC 120 or the mobile terminal 140 can be performed.

[0078] (Modifications to the Illustrative Embodiments)

[0079] Subsequently, illustrative embodiments of various modifications of the above-described illustrative embodiments are described.

[0080] In the above-described illustrative embodiment, the web server 204 includes the first CGI 204a and the second CGI 204b. However, the present disclosure includes a configuration in which a processing unit without a CGI can perform each of the above-described processes.

[0081] The image forming apparatus may not be provided with a device for displaying images and characters as still images or moving images, such as an LCD. For example, one or more lights such as LEDs may be provided, and a notification for prompting approval input by a flashing pattern thereof may be issued. In addition, in addition to or instead of a display device, a notification may be issued by voice from an acoustic device such as a speaker.

[0082] The processing of S16 and S17 may be performed only for a terminal device that has never made an approval input, and may be omitted for a terminal device that has transmitted a transmission request for a remote panel for which an approval input has been previously made. Specifically, identification information of the terminal device is included in the transmission request of the remote panel, and when the approval input is made, the multifunction peripheral stores the identification information. Before executing the processing of S16, the identification information of the terminal device included in the transmission request of the remote panel is verified together with the stored identification information. When the verification is successful, the processing of S16 and S17 is omitted, and when the verification fails, the processing of S16 and S17 is performed.

[0083] The approval lock may be released when a predetermined time period elapses after the transition to the approval lock state. Alternatively, the approval lock may be released when a predetermined time period elapses after the transition to the approval lock state and the processing unit receives a new transmission request in the approval lock state and determines that any one of the conditions for the transmission request to be transmitted via a non-network driver is satisfied.

[0084] When a predetermined time elapses after transitioning to the PW lock state, the PW lock may be released. Alternatively, when a predetermined time period elapses after transitioning to the PW lock state and the processing unit receives a new transmission request in the PW lock state and determines the transmission request as being transmitted via a non-network driver, any one of the conditions being satisfied earlier, the PW lock may be released.

[0085] The determination in S11 may be omitted.

[0086] When the determination result in S11 is No, redirection may not be requested.

[0087] The USB logo may not be provided, and the processing of S13 and S31 may be omitted.

[0088] In the case of USB connection, encryption determination processing can be performed.

[0089] The processes related to approval locking (S15, S18, S33, and S34) and / or the processes related to PW locking (S19, S22, S23, S25, S26, S35, and S36) may be omitted.

[0090] In USB connection, PW lock processing can be performed.

[0091] The processes of S20 to S26 may be performed earlier than the process of S16, and the success of the PW authentication may be set as a condition for displaying the approval screen (S16).

[0092] A non-network drive may be a drive other than a USB drive.

[0093] The determination as to whether the connection request is transmitted via a network driver or a non-network driver may not be performed based on a flag as in the above illustrative embodiment, but may be performed based on other means.

[0094] The encryption protocol may be, for example, TLS (abbreviation for Transport Layer Security) in addition to SSL.

[0095] The connection method of the wireless LAN may be a point-to-point method such as Wi-Fi Direct, in addition to Wi-Fi.

[0096] Furthermore, in the above-described illustrative embodiments, an inkjet image forming apparatus configured to record an image by ink discharged from a nozzle has been exemplified. However, the present disclosure can also be applied to an image forming apparatus having a recording unit of a recording type other than the inkjet type, such as a laser type.

Claims

1. An image forming device, comprising: a recording unit configured to form an image on a recording medium; a receiving unit configured to receive a user input; Notification unit; as well as Controller, Wherein, the controller comprises: a network driver that performs communication with a terminal device via a network; a non-network driver that performs communication with a terminal device connected to the image forming apparatus in a wired manner without via the network; and a processing unit constituting a web server configured to generate web screen data related to formation of an image in the recording unit, the processing unit configured to receive a transmission request of the web screen data in HTTP format from the terminal device via the network driver or the non-network driver; and Wherein, the processing unit is configured to: performing (a) a transmission source determination process of determining whether the transmission request is transmitted via the network driver or the non-network driver; (b) when it is determined in the transmission source determination process that the transmission request is transmitted via the network driver, further: (b1) executing a notification process for causing the notification unit to issue a notification; (b2) after the notification process, performing a confirmation process of confirming whether the receiving unit has received an approval input indicating approval of the transmission request; and (b3) after confirming in the confirmation process that the receiving unit has received the approval input, executing a restrictive transmission process of transmitting the web screen data to the terminal device; and (c) when it is determined in the transmission source determination process that the transmission request is transmitted via the non-network driver, further: Without performing the notification process and confirming whether the receiving unit receives the approval input indicating approval of the transmission request, a non-restrictive transmission process of transmitting the web screen data to the terminal device is performed.

2. The image forming apparatus according to claim 1, wherein: The processing unit is configured to: (b) when it is determined in the transmission source determination process that the transmission request is transmitted via the network driver, further: (b0) before executing the notification processing, executing encryption determination processing of determining whether the transmission request is encrypted; when it is determined in the encryption determination process that the transmission request is encrypted, executing the notification process, the confirmation process, and the restrictive transmission process; as well as When it is determined in the encryption determination process that the transmission request is not encrypted, the notification process is not performed.

3. The image forming apparatus according to claim 2, wherein: When it is determined in the encryption determination process that the transmission request is not encrypted, the processing unit is configured to further execute: A redirection process of instructing the terminal device to transmit the transmission request to an address corresponding to encrypted communication.

4. The image forming apparatus according to claim 2 or 3, wherein: The processing unit is configured to: (c) when it is determined in the transmission source determination process that the transmission request is transmitted via the non-network driver, The non-restrictive transmission process is performed without performing the encryption determination process, the notification process, and the confirmation process.

5. The image forming apparatus according to claim 1, wherein: The processing unit is configured to: In a case where a transmission request is received from another terminal device after the web screen data is transmitted to the terminal device by the restrictive transmission processing, when it is determined in the transmission source determination processing that the transmission request is transmitted via the non-network driver, thereafter the non-restrictive transmission processing of transmitting the web screen data to another terminal device is performed without performing the restrictive transmission processing; and In the case where a transmission request is received from another terminal device after the web screen data is transmitted to the terminal device through the non-restrictive transmission processing, when it is determined in the transmission source determination processing that the transmission request is transmitted via the network driver, the non-restrictive transmission processing is performed even thereafter, and further a first rejection processing is performed based on the transmission request, the first rejection processing is not to perform the notification processing.

6. The image forming apparatus according to claim 1, wherein: The processing unit is configured to: In the confirmation process, after the notification process, it is confirmed whether the receiving unit receives any one of the approval input and the rejection input for rejecting the transmission request; and When it is confirmed in the confirmation process that the receiving unit has received the rejection input, further: Execute approval lock processing to transition to approval lock state; executing a second rejection process of not executing the notification process in a case where the processing unit receives a new transmission request in the approval lock state and determines in the transmission source determination process that the transmission request is transmitted via the network driver; and In at least one of the following situations, an approval lock release process for releasing the approval lock state is performed: a first predetermined period of time elapses after transitioning to the approval lock state; and The processing unit receives a new transmission request in the approval lock state, and determines in the transmission source determination process to transmit the transmission request via the non-network driver.

7. The image forming apparatus according to claim 1, in, The processing unit is further configured to: performing a password verification process of requesting the terminal device that has transmitted the transmission request to input a password, verifying the password transmitted from the terminal device, and requesting the terminal device to input a password again if the verification fails; When the number of consecutive failures of the verification in the password verification process reaches a predetermined threshold value with respect to the transmission request determined in the transmission source determination process as a transmission request transmitted via the network driver, executing a password lock process of transitioning to a password locked state; executing a third rejection process of not executing the password verification process when the processing unit receives a new transmission request in the password locked state and determines in the transmission source determination process that the transmission request is transmitted via the network driver; and In at least one of the following situations, a password lock release process is performed to release the password lock state, wherein: a second predetermined period of time elapses after transitioning to the password locked state; and the processing unit receives a new transmission request in the password locked state, and determines in the transmission source determination process to transmit the transmission request via the non-network driver, and Wherein, under the condition that the password authentication in the password authentication process for the terminal device is successful, the web screen data is transmitted to the terminal device in the restrictive transmission process or in the non-restrictive transmission process.

Images