Information processing apparatus, control method of information processing apparatus, and storage medium

Abstract

The invention provides an information processing apparatus, a control method of the information processing apparatus, and a storage medium. The information processing apparatus includes: a second receiving unit capable of receiving an instruction to set a second setting for performing authentication with a second server by a second authentication scheme having a security level at a second level higher than the first level; a second authentication unit configured to perform authentication with a second server by a second authentication scheme based on receiving an instruction to set a second setting; and a control unit configured to perform control to prevent reception of an instruction to set a first setting for performing authentication with the first server by a first authentication scheme having a security level at a first level, based on reception of the instruction to set a second setting by the second receiving unit.

Description

Technical Field

[0001] The present disclosure relates to a technology for controlling an authentication operation at an information processing device. Background Art

[0002] Image processing devices such as printers have various communication functions. Image processing devices are information processing devices. In image processing devices, server connection settings for communicating with various servers can be set. For example, assume that the communication object is a mail server. In this case, Post Office Protocol (POP) or Simple Mail Transfer Protocol Authentication (SMTP-AUTH) can be set as exemplary server connection settings. In addition, Open Authorization 2.0 (OAuth2.0) can be set. Users can select and set desired server connection settings.

[0003] POP and SMTP-AUTH are schemes for authentication by using a password, and are performed by the client and the authentication server. In these server connection schemes, when the client requests data from the authentication server, the authentication server requests a password from the client, and in the event of successful authentication, the authentication server sends the data to the client.

[0004] OAuth 2.0 is a scheme for authorization by using access tokens, and is performed by the client, authorization server, and resource server. When the client requests a token from the authorization server, the authorization server asks the user for token issuance permission. In the case where the token issuance permission is accepted by the user, the client can receive data from the resource server by using the token obtained from the authorization server. OAuth 2.0 can prevent the leakage of information such as passwords, and is therefore adopted as a high-security server connection scheme.

[0005] There is a technology for controlling the setting screen to improve security in such server connection setting. Japanese Patent Laid-Open No. 2022-131236 discloses a technology for controlling the setting screen for server connection setting according to the status of administrator authority and user authentication on the server connection setting screen of an image processing device.

[0006] Technologies that can improve safety have been desired. Summary of the invention

[0007] According to an aspect of the present disclosure, an information processing device includes: a first receiving unit capable of receiving an instruction for setting a first setting, wherein the first setting is used to perform authentication using a first server through a first authentication scheme having a security level at a first level; a first authentication unit configured to perform authentication using the first server through the first authentication scheme based on receiving the instruction for setting the first setting; a second receiving unit capable of receiving an instruction for setting a second setting, wherein the second setting is used to perform authentication using a second server through a second authentication scheme having a security level at a second level higher than the first level; a second authentication unit configured to perform authentication using the second server through the second authentication scheme based on receiving the instruction for setting the second setting; and a control unit configured to perform control to prevent the first receiving unit from receiving the instruction for setting the first setting based on the second receiving unit receiving the instruction for setting the second setting.

[0008] Further features of the present invention will become apparent from the following description of exemplary embodiments with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 is a block diagram for describing the hardware configuration of an image processing device;

[0010] Figure 2 is a diagram illustrating an example of a software configuration of an image processing apparatus;

[0011] Figure 3 is a flowchart illustrating an example of a setting finalization process of OAuth 2.0;

[0012] Figure 4A and Figure 4B is a diagram illustrating an example of a setting screen of OAuth 2.0;

[0013] Figure 5A and Figure 5B is a diagram illustrating an example of a setting screen for server connection other than OAuth 2.0;

[0014] Figure 6 is a diagram illustrating an example of a setting screen of OAuth 2.0;

[0015] Figure 7 This is a diagram illustrating an example of a flowchart when performing setting invalidation processing of OAuth 2.0;

[0016] Fig. 8A and Figure 8B This is a flowchart for the finalization process of OAuth 2.0 settings.

[0017] Fig. 9 It is a diagram illustrating an example of the inspection screen. DETAILED DESCRIPTION

[0018] The preferred embodiments of the present disclosure are described in detail below with reference to the accompanying drawings. These embodiments do not limit the features of the present disclosure, and not all combinations of the characteristics described in the embodiments are necessary for the solutions of the present disclosure. In the following description, the same components are represented by the same reference numerals.

[0019] <<First Embodiment>>

[0020] The present embodiment will be described with an example in which a server connection setting with a high security level can be preferentially set. For example, in the case of a mail server, POP and SMTP-AUTH are schemes for authentication by using a password. The security level of POP and SMTP-AUTH is called the first level. OAuth 2.0 is a scheme for authorization by using an access token. As described above, OAuth 2.0 is a server connection setting with a security level at a second level higher than the first level because leakage of information such as passwords can be prevented. The terms "first level" and "second level" are used for relative comparison, and the ordinal numbers of the levels have no particular meaning.

[0021] As described above, some server connection settings have a relatively high security level. However, a user (e.g., an administrator user) who is not familiar with the server connection settings may not be able to judge which server connection setting is appropriate in some cases. Therefore, even if a server connection setting with a high security level is set, such a user may inadvertently change the server connection setting to a setting with a low security level in some cases.

[0022] Therefore, the present embodiment describes an example of preventing a user from setting other server connection settings in a case where a server connection setting having a high security level is set.

[0023] For example, in this embodiment, when OAuth 2.0 with a high security level is set, setting items related to other server connection settings are grayed out on the server connection setting screen for setting server connection. In this way, by performing control so that the user cannot set other server connection settings, it is prevented that the server connection settings with a high security level are accidentally changed to other server connection settings.

[0024] <Hardware Configuration>

[0025] Figure 11 is a block diagram for describing the hardware configuration of the image processing apparatus 1 according to the present embodiment. The image processing apparatus 1 includes a control unit 10 , a display operation unit 12 , and an image processing unit 13 .

[0026] The control unit 10 performs operation control of each unit of the image processing apparatus 1. The control unit 10 includes a CPU 100, a communication unit 101, a RAM 102, a HDD 103, a ROM 104, a timer 105, and a fax unit 106. The CPU 100 controls the entire control unit 10. The communication unit 101 sends and receives data through a LAN 11. The LAN 11 is a network for communicating data with an external device, and the image processing apparatus 1 is connected to the Internet through the LAN 11. The external device is, for example, a personal computer (PC).

[0027] The RAM 102 provides a system working memory for the operation of the CPU 100. The HDD 103 is a hard disk drive. The HDD 103 may be other storage devices such as a magnetic disk, an optical medium, or a flash memory, or may be any combination thereof. The HDD 103 may store job data and setting data, etc. The HDD 103 does not necessarily need to be present in the image processing apparatus 1. For example, an external server or a personal computer may be used as a storage device through the communication unit 101.

[0028] The ROM 104 is a boot ROM and stores a system boot program. The CPU 100 loads a computer program installed on the HDD 103 onto the RAM 102 by using the boot ROM of the ROM 104, and performs various controls based on the computer program.

[0029] The timer 105 counts time according to an instruction from the CPU 100 and notifies the CPU 100 by an interruption or the like when the instructed time has elapsed. The fax unit 106 transmits and receives fax data via the telephone line 14.

[0030] The display operation unit 12 is controlled by the control unit 10. The display operation unit 12 includes a display unit 120 and an input unit 121. The display unit 120 is a display for displaying information of the image processing device to the user. The input unit 121 receives input from the user through an interface such as a touch panel, a mouse, a camera, a voice input, or a keyboard.

[0031] The image processing unit 13 is controlled by the control unit 10. The image processing unit 13 includes an image analyzing unit 130, an image generating unit 131, and an image output unit 132. The image analyzing unit 130 analyzes the structure of the document image and extracts necessary information from the result of the analysis. The image generating unit 131 reads (scans) the document, generates image data by digitizing the image of the document, and stores the image data in the HDD 103. The image generating unit 131 can generate document image data in any other format by using the information analyzed by the image analyzing unit 130.

[0032] The image output unit 132 outputs image data stored in the HDD 103 or the like. For example, the output is performed by printing the original image data on a sheet or transmitting the original image data to an external device, a server, or a facsimile device connected to the network through the communication unit 101. The image output unit 132 can output and store the image data in a storage medium connected to the image processing apparatus 1.

[0033] <Software Configuration>

[0034] Figure 2 1 is a diagram illustrating an example of a software configuration of the image processing apparatus 1. The image processing apparatus 1 includes a server connection setting screen display unit 201, a check screen display unit 202, a button press receiving unit 203, and a security level designation unit 204. The image processing apparatus 1 also includes a server connection setting selection control unit 205, a server connection setting selection control invalidation unit 206, a server connection setting final determination unit 207, and a server connection setting storage unit 208. These functional components are realized when the CPU 100 loads a computer program installed on the HDD 103 onto the RAM 102 by using the boot ROM of the ROM 104 and executes the computer program.

[0035] The server connection setting screen display unit 201 performs processing to display a server connection setting screen. The check screen display unit 202 displays a screen for checking that the server connection setting is to be changed. Specifically, in the case where a server connection setting with a high security level has been set and the user presses a setting button for other server connection settings on the server connection setting screen, the check screen display unit 202 displays a check screen. The check screen display unit 202 will be described later in the second embodiment.

[0036] The button press receiving unit 203 receives the user's button press. The security level specifying unit 204 specifies the security level of the server connection setting that has been set or the server connection setting selected by the user. When a server connection setting with a high security level has been set, the server connection setting selection control unit 205 grays out the setting area for any other server connection setting on the server connection setting screen. When the server connection setting with a high security level is invalid, the server connection setting selection control invalidation unit 206 invalidates the graying out of the setting area for any other server connection setting on the server connection setting screen.

[0037] The server connection setting final determination unit 207 finally determines the server connection setting. The server connection setting storage unit 208 stores the server connection setting set by the user.

[0038] Figure 2 Each functional component illustrated in the example is merely exemplary, and the present invention is not limited to this example. It may include any functional components other than the Figure 2 functional components in, and may not include Figure 2 some of the functional components in.

[0039] <OAuth 2.0 Setting Final Determination Process>

[0040] Figure 3 is a flowchart exemplifying an example of the OAuth 2.0 setting final determination process. Figure 4A and Figure 4B are diagrams exemplifying an example of the OAuth 2.0 setting screen displayed on a web browser of a PC. Figure 5A and Figure 5B are diagrams exemplifying an example of a setting screen for a server connection other than OAuth 2.0 displayed on the display unit 120 of the image processing device. Figure 6 is exemplified in Figure 4A and Figure 4B and is a diagram exemplifying an example of the OAuth 2.0 setting screen displayed on a web browser of a PC after. Hereinafter, reference will be made to Figure 3 , Figure 4A , Figure 4B , Figure 5A , Figure 5B and Figure 6 to describe the OAuth 2.0 setting final determination process as a server connection setting with a high security level.

[0041] Figure 3 is a flowchart when performing the OAuth 2.0 setting final determination process. When the CPU 100 is used as described above Figure 2When implementing the functional components illustrated in Figure 3 In other words, when the CPU 100 reads the computer program stored in the ROM 104 or the like onto the RAM 102 and executes the computer program, the Figure 3 Flowchart of the process. Figure 3 The functions of some or all of the steps in the flowchart may be implemented by hardware components such as ASIC or electronic circuits, etc. The symbol "S" in the description of each process represents a step in the flowchart (this is the same as any flowchart to be described later in this specification).

[0042] Figure 3 The processing illustrated in is processing performed in response to the image processing device 1 receiving an instruction from the user to display the server connection setting screen of OAuth 2.0. At S301, the button press receiving unit 203 determines whether the pressing of the button for finalizing the OAuth 2.0 setting is sensed. In the case where the button press receiving unit 203 determines at S301 that the pressing of the button for finalizing the OAuth 2.0 setting is sensed, the processing proceeds to S302. In the case where the button press receiving unit 203 determines that the pressing of the button for finalizing the OAuth 2.0 setting is not sensed, the processing proceeds to S306. As will be referred to later Figure 4A As described above, the button for finalizing the OAuth 2.0 settings is the OK button 403 that is pressed after the "Set" button 401 is pressed and various settings are completed.

[0043] In the present embodiment, the image processing device 1 receives a setting instruction of OAuth2.0 from a PC or the like which is different from the image processing device 1 via a LAN. The image processing device 1 receives any server connection setting other than OAuth 2.0 via a local UI (display operation unit 12) included in the image processing device 1. In the OAuth 2.0 setting, the number of characters to be input by the user is often large. Depending on the size of the keyboard and screen used on the local UI of the image processing device 1, the operability may be reduced. Therefore, an example of performing OAuth 2.0 setting via a PC will be described in the present embodiment, but the OAuth 2.0 setting may be performed via the local UI of the image processing device 1. In addition, any server connection setting other than OAuth 2.0 may be performed via a PC. The OAuth 2.0 setting may be performed on the same screen as the any server connection setting other than OAuth 2.0, or may be performed on any other screen.

[0044] In the case where the button press receiving unit 203 determines that the press of the button for finalizing the OAuth 2.0 setting is sensed, the security level designation unit 204 designates the selection of a server connection setting with a high security level. A high security level means a level higher than a predetermined level in the hierarchically classified security levels. As described above, the security level of POP and SMTP-AUTH is defined as the first level, and the predetermined level is defined as the first level. In this case, OAuth 2.0 is a server connection setting with a security level higher than the first level (predetermined level).

[0045] Figure 4A and Figure 4B An example of the OAuth 2.0 setting screen displayed when the OAuth 2.0 setting screen is selected on the web browser of the PC is illustrated. Figure 4A is an example of a setting screen 400 before setting OAuth 2.0, and Figure 4B is an example of a settings screen 410 after setting up OAuth 2.0. Figure 4A The setting screen 400 shown in the example is displayed and starts Figure 3 For example, assume that a setting screen not shown in the figure is displayed on a web browser of a PC as an image processing device 1 as a setting target device. In this state, in response to a user selecting an item of “OAuth 2.0 Setting” through a web browser, a setting screen is displayed. Figure 4A The setting screen 400 in FIG. Figure 4A 1 is an example of a screen for performing server connection setting in the case where the image processing apparatus 1 is connected to a mail server. The server connection setting screen is provided for each server to be connected so that server connection setting can be performed individually for each server.

[0046] A "Set" button 401, a cancel button 402, and a confirmation button 403 for setting OAuth 2.0 are provided in Figure 4A In this embodiment, when the "Settings" button 401 for setting OAuth 2.0 is pressed, as will be referred to later, Figure 6The various processes for setting OAuth 2.0 are described. Then, in a case where the user selects the confirmation button 403 through the web browser after completing various settings, information indicating that the user has selected the button for finalizing the OAuth 2.0 settings is transmitted to the image processing device 1. Based on the information, the button press receiving unit 203 of the image processing device 1 determines at S301 that the pressing of the button for finalizing the OAuth 2.0 settings is sensed. In other words, when the confirmation button 403 is pressed after various settings are performed in response to the pressing of the "Settings" button 401, the processing proceeds to S302. In the case where the OAuth 2.0 settings are performed through the local UI of the image processing device 1 as described above, the button press receiving unit 203 can determine whether the pressing of the equivalent button on the local UI is sensed.

[0047] At S302, the server connection setting storage unit 208 determines whether the server connection setting other than OAuth2.0 has been set. In the case where the server connection setting storage unit 208 determines that the server connection setting other than OAuth 2.0 has been set, the process proceeds to S303, and in the case where the server connection setting storage unit 208 determines that the server connection setting other than OAuth 2.0 has not been set, the process proceeds to S304.

[0048] At S303, the server connection setting finalization unit 207 invalidates the already set server connection settings other than OAuth 2.0. The already set server connection settings other than OAuth 2.0 are invalidated to prioritize the OAuth2.0 settings. Invalidation of the server connection settings means a control to disable the enabled server connection settings. For example, a user name and a password are registered and stored according to the server connection settings described later. At S303, the registered and stored user name and password are not deleted, but remain stored. In the case of re-enabling the invalidated server connection settings later, the state of setting the registered and stored user name and password is restored. After S303, the process proceeds to S304. At S304, the server connection setting finalization unit 207 finalizes the OAuth 2.0 settings.

[0049] Subsequently, at S305, the server connection setting selection control unit 205 performs setting for graying out the setting area for any server connection setting other than OAuth 2.0 on the server connection setting screen. In the present embodiment, the server connection setting screen for server connection other than OAuth 2.0 is displayed on the local UI of the image processing apparatus 1. Therefore, the server connection setting selection control unit 205 performs setting for graying out the setting area for any server connection setting other than OAuth 2.0 on the server connection setting screen displayed on the display unit 120. According to the setting, the server connection setting screen display unit 201 grays out the setting area for any server connection setting other than OAuth 2.0.

[0050] Figure 5A and Figure 5B : is an example of a setting screen for server connection other than OAuth 2.0 that is displayed when server connection setting is selected on the local UI of the image processing apparatus 1. In the example, server connection setting for a mail server is illustrated. Figure 5A 500 before graying out. POP authentication setting buttons 501 to 505 and SMTP-AUTH authentication setting buttons 506 to 507 are displayed on the setting screen 500. In addition, text boxes 508 and 509 for inputting a user name and a password for SMTP-AUTH authentication are displayed on the setting screen 500. Furthermore, a cancel button 510 for canceling the change of the server connection setting and a confirmation button 511 for finalizing the change of the server connection setting are displayed. Figure 5A The setting screen 500 in the display form illustrated in FIG. 1 is, for example, a setting screen before performing OAuth 2.0 setting. The user of the image processing apparatus 1 can perform various server connection settings through the setting screen 500 .

[0051] Figure 5B 5 is a setting screen 520 after being grayed out at S305. The setting screen 520 is the same setting screen as the setting screen 500 except that the setting items are grayed out. POP authentication setting buttons 521 to 525 and SMTP-AUTH authentication setting buttons 526 to 527 are displayed on the setting screen 520. In addition, text boxes 528 and 529 for inputting a user name and a password for SMTP-AUTH authentication are displayed on the setting screen 520. In addition, a cancel button 530 for canceling the change of the server connection setting and a confirmation button 531 for finalizing the change of the server connection setting are displayed. In the present embodiment, when OAuth 2.0 is set, the server connection setting screen display unit 201 uses Figure 5BAll buttons in it except the cancel button 530 and the confirmation button 531 are grayed out. In this embodiment, the grayed-out items are configured to be unselectable by the user. In other words, the setting is configured not to be updated even when the user presses (touches) the grayed-out item. With this control, the OAuth 2.0 settings can be maintained according to the OAuth 2.0 settings. Therefore, it is possible to prevent the server connection settings with a high security level, once set, from being inadvertently changed to settings with a low security level.

[0052] As described above, for example, when values have been registered in the text boxes 528 and 529 for entering the user name and password, the values are maintained even in the grayed-out state. In this case, these values may or may not be displayed in the text boxes 528 and 529 for entering the user name and password in the grayed-out state. After S305, Figure 3 The processing of the flowchart illustrated in ends.

[0053] At S306, the server connection setting screen display unit 201 determines Figure 4A whether the display of the setting screen 400 illustrated in has ended. For example, when the cancel button 402 is pressed on the setting screen 400 in, it is determined that the display of the setting screen 400 has ended, and Figure 4A the processing of the flowchart illustrated in ends. When it is not determined that the display of the setting screen 400 has ended, the process returns to S301 and repeats. When the user selects the cancel button 402 through the web browser, the same as when the confirmation button 403 is pressed, the information indicating the selection of the cancel button 402 is transmitted to the image processing device 1. The button press receiving unit 203 of the image processing device 1 determines at S306 that the cancel button 402 is pressed based on this information, and notifies the server connection setting screen display unit 201 of the setting screen end instruction. Figure 3 In the processing of the flowchart in, the example of performing the processing after S302 based on the pressing of the confirmation button 403 after performing various settings in response to the pressing of the "Settings" button 401 has been described above. However, the present invention is not limited to this example. For example, the processing after S302 can be performed in response to the pressing of the "Settings" button 401. In other words, the processing after S302 can be performed in response to determining that the button for OAuth2.0 setting is pressed, regardless of whether the actual OAuth 2.0 setting is completed.

[0054] In Figure 3 the flowchart processing of, the example of performing the processing after S302 based on the pressing of the confirmation button 403 after performing various settings in response to the pressing of the "Settings" button 401 has been described above. However, the present invention is not limited to this example. For example, the processing after S302 can be performed in response to the pressing of the "Settings" button 401. In other words, the processing after S302 can be performed in response to determining that the button for OAuth2.0 setting is pressed, regardless of whether the actual OAuth 2.0 setting is completed.

[0055] <OAuth 2.0 Setting Processing>

[0056] Figure 6 is an illustration in Figure 4A 4 is a diagram showing examples of various screens displayed on a web browser of a PC after a "settings" button 401 is pressed on a setting screen 400 in FIG. Once the "settings" button 401 is pressed, various processes for the image processing apparatus 1 to obtain an access token from the authorization server are performed.

[0057] Screen 610 is a setting screen for image processing device 1 displayed on the web browser of the PC. When the user presses the edit button 611 on screen 610, screen 620 is displayed on the web browser. The user enters the endpoint URL corresponding to the authorization server in area 621 (S1). Thereafter, when the user presses the confirm button 622, the device approval request processing of image processing device 1 is started for the authorization server indicated by the endpoint URL (S2). Specifically, image processing device 1 requests the authorization server indicated by the endpoint URL to publish information including a verification URL, a user code, a message, and an expiration date (S3). In response to the request, the information including the verification URL, the user code, the message, and the expiration date is sent from the authorization server to image processing device 1 and received by image processing device 1 (S4).

[0058] The image processing device 1 presents the information received from the authorization server to the user (S5). The information issued by the authorization server and received by the image processing device 1 is displayed on the screen 610 by the web browser of the PC. When the user selects the URL 612 which is the verification URL notified by the authorization server on the web browser, a screen 630 is displayed in a separate window on the web browser (S6). The user enters the user code notified to the image processing device 1 by the authorization server according to the message on the screen 630, and presses the login button 632 (S7). The authorization server that manages the verification URL verifies the input user code, and displays a screen 640 on the web browser if there is no problem (S8).

[0059] The image processing device 1 sends the device code received from the authorization server to the authorization server and requests the authorization server to issue an access token (S9). The access token issuance request (S9) of the image processing device 1 is performed by the image processing device 1 in parallel between the above-mentioned S4 and S8.

[0060] On the approval screen of screen 640, the user is queried whether to approve the authorization request. When the user presses the "Yes" button 641 on the web browser, the user's authorization is completed. In response to the completion of the user's authorization, the authorization server sends the access token, the expiration date of the access token, and the refresh token to the image processing device 1 at the source of the device code associated with the user code (S10). The image processing device receives and stores the access token, the expiration date of the access token, and the refresh token from the authorization server (S11). In response to the pressing of the "Yes" button 641, screen 650 is displayed on the web browser. When the user presses the confirmation button 651 on screen 650, the web browser returns to Figure 4A the setting screen 400 in

[0061] In this way, the image processing device 1 that has completed the OAuth 2.0 setting performs processing by using the stored access token when communicating with the mail server. The access token is set with an expiration date and is updated by using the refresh token before the expiration date.

[0062] The above access token acquisition process of the image processing device 1 is merely exemplary, and the present invention is not limited to this example. As described above, the OAuth 2.0 setting process can be performed by using the local UI of the image processing device 1.

[0063] <OAuth 2.0 Setting Invalidation Process>

[0064] Figure 7 FIG. is an example of a flowchart illustrating the OAuth 2.0 setting invalidation process. The following will refer to Figure 4A , Figure 4B , Figure 5A , Figure 5B and Figure 7 to describe the OAuth 2.0 setting invalidation process. When the CPU 100 functions as each functional component exemplified in Figure 2 above, the process exemplified in Figure 7 is implemented. In other words, when the CPU 100 reads the computer program stored in the ROM 104 etc. onto the RAM 102 and executes the computer program, the flowchart in Figure 7 is implemented. Figure 7 The functions of some or all of the steps in

[0065] Figure 7The processing illustrated in is processing performed in response to receiving an instruction to display a server connection setting screen of OAuth 2.0 from a user in a state where the OAuth 2.0 setting is set. Figure 4B 4 is a setting screen 410 after OAuth 2.0 is set. On this setting screen 410, an "invalidate" button 411 for invalidating the OAuth 2.0 setting is displayed. Figure 4B When the setting screen 410 is displayed, Figure 7 The processing illustrated in .

[0066] At S701, the button press receiving unit 203 determines whether the press of the button for invalidating the OAuth2.0 setting is sensed on the setting screen 410. In other words, it is determined whether the "invalidate" button 411 on the setting screen 410 is pressed. In the case where it is determined that the press of the button for invalidating the OAuth 2.0 setting is sensed, the process proceeds to S702. In the case where it is determined that the press of the button for invalidating the OAuth 2.0 setting is not sensed, the process proceeds to S704.

[0067] At S702, the server connection setting finalization unit 207 invalidates the OAuth 2.0 setting. Subsequently, at S703, the server connection setting selection control invalidation unit 206 invalidates the graying out of the setting area for any server connection setting other than OAuth 2.0 on the server connection setting screen. Specifically, the display setting is changed from Figure 5B The grayed-out state of the setting area for any server connection setting other than OAuth 2.0 shown in the example changes to the following: Figure 5A As described above, in the case where an item has been entered or selected in the setting area for any server connection setting other than OAuth 2.0, Figure 5A The screen in the display is restored while maintaining its settings. Then, Figure 7 The processing in is completed.

[0068] At S704, the server connection setting screen display unit 201 determines Figure 4B Whether the display of the setting screen 410 illustrated in FIG. 4 has ended. Figure 4B When the cancel button 412 is pressed on the setting screen 410 in the display, it is determined that the display of the setting screen 410 has ended, and Figure 7 The process of the flowchart illustrated in FIG. 4 ends. If it is not determined that the display of the setting screen 410 has ended, the process returns to S701 and is repeated.

[0069] As described above, according to the present embodiment, security can be improved. Specifically, a server connection setting with a high security level can be set preferentially. More specifically, in the present embodiment, in the case where the server connection setting is set to OAuth 2.0 with a high security level, processing is performed to prevent other server connection settings from being set. Therefore, it is possible to prevent a user from inadvertently changing a server connection setting with a high security level that has been set once to any other server connection setting, thereby improving security.

[0070] In the present embodiment, an example of graying out as a means for preventing setting of server connection settings other than OAuth 2.0 is described above, but the present invention is not limited to this example. For example, the setting area for any server connection setting other than OAuth2.0 may not be displayed. Alternatively, when transitioning to a screen for server connection settings other than OAuth 2.0, a pop-up window for notifying that the setting change cannot be made may be displayed.

[0071] <<Second Embodiment>>

[0072] In the example described above in the first embodiment, when OAuth 2.0 is set as a server connection setting with a high security level, the setting area for any other server connection setting is grayed out to prevent setting other server connection settings. However, in some cases, although it is understood that the security level will be reduced, it is necessary to change the server connection setting as a trial.

[0073] In the present embodiment, the following processing is not performed: in the case where OAuth2.0 is set, the setting area for any server connection setting other than OAuth 2.0 is grayed out as described above in the first embodiment. Instead, in the present embodiment, in the case where the user presses the setting button for the server connection setting other than OAuth 2.0 after OAuth 2.0 is set, a screen for checking to change from the setting with a high security level is displayed. Therefore, the change of the server connection setting is prevented in the example described below.

[0074] The basic configuration is the same as that in the example described above in the first embodiment, so its description is omitted. The difference from the first embodiment is that the server connection setting finalization unit 207 performs the finalization processing of the server connection setting from Figure 3 Change to Fig. 8A and Figure 8B The differences from the first embodiment will be mainly described below.

[0075] Fig. 8A and Figure 8B1 is a flowchart for performing the finalization process of the OAuth 2.0 settings. Figure 2 When implementing the functional components illustrated in Fig. 8A and Figure 8B In other words, when the CPU 100 reads the computer program stored in the ROM 104 or the like onto the RAM 102 and executes the computer program, the respective Fig. 8A and Figure 8B Flowchart in .

[0076] Fig. 8A and Figure 8B The functions of some or all of the steps in the process may be implemented by hardware components such as ASIC or electronic circuit.

[0077] Fig. 8A The processing illustrated in is processing performed in response to receiving an instruction from the user to display the server connection setting screen of OAuth 2.0. Fig. 8A The processing at S801 to S804 and S806 in Figure 3 The processing at S301 to S304 and S306 in is the same. Fig. 8A In the process of Figure 3 The process of graying out any server connection setting button except OAuth2.0 at S305 in .

[0078] Figure 8B The processing illustrated in is a processing performed in response to receiving an instruction to display a server connection setting screen in a state where OAuth 2.0 is set. Specifically, Figure 8B The process illustrated in FIG. 1 is to display the image processing apparatus 1 on the display unit 120 in a state where OAuth 2.0 is set. Figure 5A The processing performed when the setting screen 500 in is displayed.

[0079] At S811, the button press receiving unit 203 determines whether a press of a setting button for server connection setting other than OAuth 2.0 is sensed on the server connection setting screen on the setting screen 500 in a state where OAuth 2.0 is set. Figure 5A After input is made on the setting screen 500 in , it is determined whether pressing of the confirmation button 531 is sensed. If it is determined that pressing of the setting button for server connection setting other than OAuth 2.0 is sensed, the process proceeds to S812, otherwise the process proceeds to S815.

[0080] At S812 , the check screen display unit 202 displays a screen for checking that the server connection setting will be changed from OAuth 2.0.

[0081] Fig. 9 is a diagram illustrating an example of the inspection screen 900 . Fig. 9 The check screen 900 illustrated in FIG. 1 is a screen displayed on a UI (in this example, a local UI of the display unit 120 of the image processing apparatus 1) for performing server connection settings other than OAuth 2.0. Fig. 9 In the example illustrated in , the check screen 900 displays a “confirm” button 801 for finally determining that the server connection setting is to be changed and a “cancel” button 802 for canceling the change of the server connection setting.

[0082] At S813, the button press receiving unit 203 determines whether the button pressed on the check screen 900 is the "Confirm" button 801. In the case where it is determined that the button pressed on the check screen 900 is the "Confirm" button 801, the process proceeds to S814. In the case where it is determined that the button pressed on the check screen 900 is not the "Confirm" button 801, in other words, in the case where the "Cancel" button 802 is pressed on the check screen, Figure 8B The processing of the flowchart illustrated in ends without setting change.

[0083] At S814, the server connection setting finalization unit 207 finalizes the server connection setting selected by the user. In the case where the user intends to continue the server connection setting despite the warning, the user's intention is prioritized and processing for finalizing the server connection setting selected by the user is performed.

[0084] At S815, the server connection setting screen display unit 201 determines Figure 5A Whether the display of the setting screen 500 illustrated in FIG. has ended. Figure 5A When the cancel button 510 is pressed on the setting screen 500 in the display, it is determined that the display of the setting screen 500 has ended, and Fig. 8A and Figure 8B The process of the flowchart illustrated in FIG. 5 ends. If it is not determined that the display of the setting screen 500 has ended, the process returns to S811 and is repeated.

[0085] As described above, also in this embodiment, a server connection setting with a high security level can be set preferentially. More specifically, in this embodiment, in a case where OAuth 2.0 with a high security level is set as a server connection setting, processing is performed to prevent any other server connection setting from being set. Specifically, in a state where OAuth 2.0 is set and the user performs a server connection setting other than OAuth 2.0, a check screen is displayed to prevent any other server connection setting from being set. When such a check screen is displayed, Fig. 9 When checking the screen 900 illustrated in FIG. 1 , the user finalizes the setting after checking that the setting will change the server connection setting with a high security level, and thus the user can be prevented from unintentionally making the setting at a low security level.

[0086] <<Other embodiments>>

[0087] In the above-described embodiments, an image processing apparatus such as a multifunction peripheral is described as an exemplary information processing apparatus. However, the information processing apparatus is not limited to the image processing apparatus, but may be any apparatus capable of communicating with other apparatuses.

[0088] In the above description, as an example, the first server connection setting with a low security level is POP or SMTP-AUTH, and as an example, the second server connection setting with a high security level is OAuth 2.0, but the server connection setting is not limited to these examples. The present invention is applicable to any scheme with a relative difference in security level. The security level may be managed in advance in the image processing apparatus as a table or the like, or may be set by the user for each server connection setting.

[0089] In the above embodiment, the OAuth 2.0 setting is described, but in the case of a server connection setting with a low security level, a different process from that in the above embodiment can be performed. For example, in the case of indicating the setting of SMTP-AUTH in the state where POP is set, the image processing device 1 can perform a process for setting SMTP-AUTH.

[0090] In the above embodiment, the service server with which the information processing device communicates using the access token obtained by using OAuth 2.0 is, as an example, a mail server, but the service server is not limited to this example. The information processing device can use an optional type of service server to perform processing using the access token obtained by OAuth 2.0.

[0091] When there are a plurality of service servers using OAuth 2.0, the processing described in the above embodiment may be performed for each connected service server.

[0092] Other embodiments

[0093] The embodiments of the present invention may also be implemented by providing software (program) for performing the functions of the above-described embodiments to a system or device via a network or various storage media, and a computer or a central processing unit (CPU) or a microprocessing unit (MPU) of the system or device reads and executes the program.

[0094] Although the present disclosure has been described with reference to exemplary embodiments, it is to be understood that the present disclosure is not limited to the disclosed exemplary embodiments.The scope of the following claims is to be accorded the broadest interpretation so as to encompass all such modifications and equivalent structures and functions.

Claims

1. An information processing device, comprising: a first receiving unit capable of receiving an instruction to set a first setting for performing authentication with a first server through a first authentication scheme having a security level at a first level; a first authentication unit configured to perform authentication with the first server through the first authentication scheme based on receiving an instruction to set the first setting; a second receiving unit capable of receiving an instruction to set a second setting for performing authentication with a second server by a second authentication scheme having a security level at a second level higher than the first level; a second authentication unit configured to perform authentication using the second server through the second authentication scheme based on receiving an instruction to set the second setting; as well as A control unit is configured to perform control to prevent the first receiving unit from receiving an instruction to set the first setting based on the second receiving unit receiving an instruction to set the second setting.

2. The information processing device according to claim 1, wherein: The control unit performs control for the prevention by performing at least one of the following controls: a first control in which an area for receiving an operation for an instruction from a user to set the first setting cannot be operated by the user, a second control in which an area for receiving an operation for an instruction from a user to set the first setting is grayed out, and a third control in which an area for receiving an operation for an instruction from a user to set the first setting is not displayed.

3. The information processing device according to claim 1, wherein: The control unit performs control for the prevention by outputting a predetermined notification, in a case where the first receiving unit receives an instruction to set the first setting.

4. The information processing device according to claim 1, wherein: The control unit performs control for the prevention by outputting a predetermined notification that another instruction from a user can be received, in a case where the first receiving unit receives an instruction to set the first setting.

5. The information processing device according to claim 4, wherein: The control unit performs control to set the first setting in a case where the instruction from the user based on the predetermined notification is an instruction to set the first setting.

6. The information processing device according to any one of claims 1 to 5, wherein: When the second receiving unit receives an instruction to set the second setting in a state where the first setting is set, the control unit disables the first setting.

7. The information processing device according to claim 5, wherein: In a case where the second receiving unit receives an instruction to disable the second setting that has been set, the control unit re-enables the disabled first server connection setting.

8. The information processing device according to claim 7, wherein: storing information of a specific setting item in the information processing device in a case where the first setting is set, and The control unit stores the information of the specific setting item even if the first setting is disabled, and re-enables the information of the specific setting item if the first setting is re-enabled.

9. The information processing device according to any one of claims 1 to 5, further comprising: a third receiving unit capable of receiving an instruction to set a third setting for performing authentication with the first server by a third authentication scheme having a security level at the first level but different from the first authentication scheme; as well as a third authentication unit configured to perform authentication with the first server through the third authentication scheme based on receiving an instruction to set the third setting, The third authentication unit is prevented from receiving an instruction to set the third setting when the second setting is set, but is able to receive an instruction to set the third setting when the first setting is set.

10. The information processing device according to any one of claims 1 to 5, wherein: The first authentication scheme is Post Office Protocol (POP) or Simple Mail Transfer Protocol Authentication (SMTP-Auth), and the second authentication scheme is Open Authorization 2.0 (OAuth 2.0).

11. The information processing device according to any one of claims 1 to 5, wherein: The first receiving unit receives an instruction for setting the first setting from an external device through a network.

12. The information processing device according to any one of claims 1 to 5, wherein: The second receiving unit receives an instruction to set the second setting based on receiving a predetermined operation for setting the second setting performed by a user on a predetermined area displayed on the information processing device.

13. The information processing device according to any one of claims 1 to 5, wherein: The first server is an authentication server, The second server is an authorization server, and After authentication with the authorization server through the second authentication scheme, communication with a resource server is enabled.

14. A method for controlling an information processing device, comprising: receiving an instruction to set first settings for performing authentication with a first server through a first authentication scheme having a security level at a first level; performing a first authentication with the first server through the first authentication scheme based on receiving an instruction to set the first setting; receiving an instruction to set second settings for performing authentication with a second server by a second authentication scheme having a security level at a second level higher than the first level; performing a second authentication with the second server through the second authentication scheme based on receiving an instruction to set the second setting; as well as Control is performed to prevent receipt of an instruction to set the first setting based on receipt of an instruction to set the second setting.

15. A non-transitory computer-readable storage medium storing a program for causing an information processing device to function as: a first receiving unit capable of receiving an instruction to set a first setting for performing authentication with a first server through a first authentication scheme having a security level at a first level; a first authentication unit configured to perform authentication with the first server through the first authentication scheme based on receiving an instruction to set the first setting; a second receiving unit capable of receiving an instruction to set a second setting for performing authentication with a second server by a second authentication scheme having a security level at a second level higher than the first level; a second authentication unit configured to perform authentication using the second server through the second authentication scheme based on receiving an instruction to set the second setting; as well as A control unit is configured to perform control to prevent the first receiving unit from receiving an instruction to set the first setting based on the second receiving unit receiving an instruction to set the second setting.

Images