Server device and control method thereof, information processing device and control method thereof, information processing system, and program

Abstract

To allow a user to suitably recognize a need for a review of security-related setting in an information processing device.SOLUTION: A server receives setting information indicating setting of an MFP (information processing device). The server acquires default setting for each of a plurality of security-related particular setting items out of a plurality of setting items in the MFP. The server executes detection as to whether or not a setting for each of the plurality of particular setting items is changed from the default setting on the basis of the received setting information and, if it is detected that the setting for any of the plurality of particular setting items is unchanged from the default setting, notifies a user of a result of the detection.SELECTED DRAWING: Figure 7

Description

Technical Field

[0004] , , , , , , , ,

[0005] , , , ,

[0001] The present invention relates to a server device and its control method, an information processing device and its control method, an information processing system, and a program.

Background Art

[0002] In an information processing device (information equipment) such as an image forming apparatus, it is necessary to appropriately set security-related functions according to the usage environment (for example, an office environment such as an in-house LAN, a home environment, or a public space). At the time of shipment of the information processing device, for example, default settings suitable for an office environment (in-house LAN) are made for the information processing device. Therefore, it is required to appropriately change the settings of the security-related setting items from the default settings according to the usage environment of the information processing device.

[0003] Regarding the change from the default settings, Patent Document 1 describes a technique for detecting a setting item changed from the default value and displaying the changed setting content in an information processing device. This enables the user to easily grasp the setting content changed from the default value when the user makes a desired setting.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, if the user (administrator) managing the information processing device does not have sufficient security knowledge, they may not be aware that security-related settings need to be changed for each operating environment. In that case, security-related settings may not be changed properly, such as the information processing device being operated with the security-related settings left at their default settings.

[0006] Therefore, the present invention aims to provide a technology that enables users to appropriately recognize the need to review security-related settings in an information processing device. [Means for solving the problem]

[0007] A server device according to one aspect of the present invention is a server device capable of communicating with an information processing device, and is characterized by comprising: receiving means for receiving setting information indicating the settings of the information processing device; acquiring means for acquiring default settings for each of a plurality of specific setting items related to security among a plurality of setting items in the information processing device; detection means for detecting whether the setting of each of the particular plurality of setting items has been changed from the default setting based on the setting information; and notification means for notifying a user of the detection result when the detection means has detected that none of the settings of the particular plurality of setting items have been changed from the default setting.

[0008] Furthermore, an information processing device according to one aspect of the present invention is characterized by comprising: holding means for holding setting information indicating the settings of the information processing device; acquiring means for acquiring default settings for each of a plurality of specific setting items related to security among a plurality of setting items in the information processing device; detection means for detecting whether the setting of each of the particular plurality of setting items has been changed from the default setting based on the setting information; and notification means for notifying the user of the detection result when the detection means has detected that none of the settings of the particular plurality of setting items have been changed from the default setting. [Effects of the Invention]

[0009] According to the present invention, it becomes possible to appropriately make users aware of the need to review security-related settings in an information processing device. [Brief explanation of the drawing]

[0010] [Figure 1] Block diagram showing an example of network and MFP configuration. [Figure 2] Block diagram showing an example configuration of the MFP controller and server. [Figure 3] Block diagram showing an example of the functional configuration of the MFP and server. [Figure 4] This diagram shows an example of the operation screen for managing and configuring security settings on an MFP. [Figure 5] This diagram shows an example of the operation screen displayed in an MFP. [Figure 6] A flowchart illustrating an example of the procedure for sending configuration information using an MFP (Multi-Function Programmer). [Figure 7] A flowchart illustrating an example of the procedure for diagnosing the security settings of an MFP using a management system. [Figure 8] A flowchart showing an example of the procedure for identifying the target of diagnosis (S702). [Figure 9] This diagram shows an example of the operation screen displayed in an MFP. [Figure 10] A flowchart illustrating an example of the procedure for diagnosing the security settings of an MFP (Multi-Function Product) in question. [Figure 11] A flowchart showing an example of the procedure for identifying the target of diagnosis (S1002). [Modes for carrying out the invention]

[0011] The embodiments will be described in detail below with reference to the attached drawings. Note that the following embodiments do not limit the invention as defined in the claims. While the embodiments describe multiple features, not all of these features are essential to the invention, and the features may be combined in any way. Furthermore, in the attached drawings, identical or similar configurations are given the same reference numerals, and redundant descriptions are omitted.

[0012] [First Embodiment] In the first embodiment of this disclosure, an example is described in which a cloud system (management system) performs diagnostic processing of security-related settings of information devices (information processing devices) in an information processing system.

[0013] <Network Configuration> Figure 1 is a block diagram showing an example of a network configuration according to the present disclosure. In the example in Figure 1, the MFP (multifunction printer) 100 and the PC 113 are connected to a LAN 110 and can communicate via the LAN 110. The LAN 110 is configured as a wired LAN, but may also be configured as a wireless LAN. The MFP 100 is an image forming device (image processing device) having multiple functions such as printing (image forming function), reading function, and copying function, and is an example of an information processing device according to this embodiment. In this embodiment, the MFP 100 and the server device (server 250 in Figure 2(B)) that constitutes the management system 121 can constitute an information processing system.

[0014] The gateway 111 is provided as a relay device (network router) connected between the LAN 110 and the Internet 120 and relaying communication between the LAN 110 and the Internet 120. The management system 121 is a cloud system for managing the MFP 100, having a function of remotely monitoring the state of the MFP 100. The management system 121 is connected to the Internet 120. The MFP 100 can communicate with the management system 121 via the LAN 110, the gateway 111, and the Internet 120. The management system has a function of performing diagnostic processing on security-related settings of the MFP 100 to be managed and providing the user with a management screen 400 showing the diagnostic results (details will be described later). Further, the management system also has a function of managing the print and copy records of the MFP 100 to be managed and providing the user with a statistical screen that summarizes the records in a graph or the like. The management system also has a function of providing the user with a consumable screen for checking the status of consumables of the MFP 100 to be managed. As described above, the management system 121 of the present embodiment is a cloud system that comprehensively manages various states of devices to be managed, represented by the MFP 100, and provides the user with screens related to monitoring and management based on the information to be managed.

[0015] <mfp> FIG. 1 further shows an example of the hardware configuration of the MFP 100. The MFP 100 includes a controller unit 101, an operation unit 102, a printer unit 103, and a scanner unit 104 connected to the controller unit. The controller unit 101 controls the operation unit 102, the printer unit 103, and the scanner unit 104 to realize the functions of a multifunction machine.

[0016] The operation unit 102 receives user operations (for example, operations for various settings of the MFP 100). The operation unit 102 further includes a display device (display unit) for displaying a screen, and for example, can display an operation screen for receiving user operations. The printer unit 103 prints (outputs) an image on a recording material such as a sheet based on print data (image data) input from the controller unit 101 unit. The scanner unit 104 reads an image of a document to generate image data, and outputs the generated image data to the controller unit 101.

[0017] FIG. 2(A) is a block diagram showing an example of the hardware configuration of the controller unit 101 of the MFP 100. The controller unit 101 includes a CPU 201, a DRAM 202, an I / O (input / output) controller 203, a network I / F (interface) 204, a SATA (Serial Advanced Technology Attachment) I / F 205, a panel I / F 206, a printer I / F 207, and a scanner I / F 208. The controller unit 101 further includes a wired LAN device 210 connected to the network I / F 204, and a flash ROM 211 connected to the SATA I / F 205.

[0018] The CPU 201 controls the overall operation of the MFP 100. The CPU 201 is connected to the DRAM 202 and the I / O controller 203 via a bus. The DRAM 202 is a volatile storage medium and is used as working memory to temporarily store programs executed by the CPU 201 and data to be processed by the CPU 201. The CPU 201 loads the programs stored in the flash ROM 211 into the DRAM 202, reads the loaded programs, and executes them.

[0019] The I / O controller 203 performs input and output to various devices according to instructions from the CPU 201. The I / O controller 203 is connected to the network interface 204, SATA interface 205, panel interface 206, printer interface 207, and scanner interface 208. The CPU 201 accesses the flash ROM 211 via the SATA interface 205. The flash ROM 211 is a non-volatile storage medium used to store various programs for realizing the functions of the MFP100, as well as various data such as document data and image data.

[0020] The CPU 201 communicates with external devices such as the PC 113 and the management system 121 via the LAN 110 by controlling the wired LAN device 210 via the network interface 204. The CPU 201 controls the operation of the control unit 102 via the panel interface 206. The CPU 201 displays an operation screen on the control unit 102 to accept user input and accepts user input through the control unit 102. In other words, the control unit 102 functions as both a display unit that shows information to the user and a reception unit that accepts user input.

[0021] The CPU 201 controls the operation of the printer unit 103 via the printer interface 207 and the operation of the scanner unit 104 via the scanner interface 208. The CPU 201 loads a control program from the flash ROM 211 into the DRAM 202 via the SATA interface 205, reads the loaded control program, and executes it to realize a copy function using the printer unit 103 and the scanner unit 104. When executing the copy function, the CPU 201 receives a copy command from the user via the operation unit 102 and causes the scanner unit 104 to perform a reading process to read the image of the original document. The CPU 201 stores the read image data output from the scanner unit 104 into the DRAM 202 and performs image processing on the stored read image data, such as color conversion processing suitable for output by the printer unit 103. After that, the CPU 201 transfers the processed image data to the printer unit 103 via the printer interface 207 and causes the printer unit 103 to perform a printing process to print the image onto recording material based on the image data.

[0022] In this embodiment, the hardware, including the CPU 201, DRAM 202, and flash ROM 211, constitutes a so-called computer. In this embodiment, an example is shown where one CPU 201 executes each process shown in the flowchart described later using a program deployed in one memory (DRAM 202). However, each process may be executed in other ways. For example, multiple processors, memories, and storage may work together to execute each process shown in the flowchart described later.

[0023] <Management System> Figure 2(B) is a block diagram showing an example of the hardware configuration of the server 250 that constitutes the management system 121. The server 250 includes a CPU 251, DRAM 252, I / O controller 253, network interface 254, and HDD (hard disk drive) 255. The server 250 is an example of a server device that can communicate with the information processing device (MFP 100).

[0024] The CPU 251 controls the operation of the entire server 250. The CPU 251 is connected to the DRAM 252 and the I / O controller 253 via a bus. The DRAM 252 is a volatile storage medium and is used as a working memory for temporarily storing programs executed by the CPU 251 and data to be processed by the CPU 251. The CPU 251 expands the program stored in the HDD 255 into the DRAM 252, reads out the expanded program, and executes it.

[0025] The I / O controller 253 performs input / output to various devices according to instructions from the CPU 251. A SATA I / F 254 is connected to the I / O controller 203, and an HDD 255 is connected to the SATA I / F 254. The HDD 255 is a non-volatile storage medium and is used to store various programs for realizing the functions of the server 250 and various data such as setting data (set values).

[0026] In the present embodiment, hardware such as the CPU 251, the DRAM 252, and the HDD 255 constitutes a so-called computer. In the present embodiment, a case where one CPU 251 executes each process shown in the flowchart described later using a program expanded in one memory (DRAM 252) is illustrated, but each process may be executed in other modes. For example, for example, a plurality of processors, memories, and storages may cooperate to execute each process shown in the flowchart described later. Alternatively, each process may be executed using a plurality of server computers. The server 250 may be configured to provide the management system 121 to a plurality of different tenants by using containerization or virtualization technology.

[0027] <Functional Configuration of MFP> FIG. 3(A) is a block diagram showing a software configuration example (functional configuration example) of the MFP 100. The functions of each block shown in FIG. 3(A) can be realized by the CPU 201 reading out the program stored in the flash ROM 211 into the DRAM 202 and executing it.

[0028] The operation control unit 301 displays a user-facing screen (operation screen) on the operation unit 102 and accepts user operations via the operation unit 102. The operation control unit 301 executes processes associated with display objects such as buttons on the display screen according to the accepted user operations.

[0029] The data storage unit 302 accesses the flash ROM 211 (saves data and reads saved data) based on requests from each functional unit (control unit). For example, if a user wants to change some device settings, the operation control unit 301 receives user input via the operation unit 102 and requests the data storage unit 302 to save the setting value (setting data) corresponding to the input. The data storage unit 302 saves the setting value to the flash ROM 211 according to the request from the operation control unit 301.

[0030] The job control unit 303 controls the execution of jobs according to instructions from each functional unit (control unit). The image processing unit 304 performs image processing to convert the image data to be processed into a data format suitable for its intended use, according to instructions from the job control unit 303. The print control unit 305 controls the printing process by the printer unit 103 via the printer interface 207, according to instructions from the job control unit 303. The reading control unit 306 controls the reading process by the scanner unit 104 via the scanner interface 208, according to instructions from the job control unit 303.

[0031] The network control unit 307, according to the setting values ​​(setting data) stored by the data storage unit 302, performs network settings such as IP address settings on the TCP / IP control unit 308 when the system starts up or when a setting change is detected. The TCP / IP control unit 308 sends and receives network packets via the network interface 204 according to instructions from each functional unit (control unit).

[0032] The configuration control unit 309 controls security-related settings in the MFP 100 and saves, references, and modifies the MFP 100's settings (setting data) via the data storage unit 302. Specifically, the configuration control unit 309 manages the correspondence between the MFP 100's usage environment and security-related setting items, and can perform security-related settings based on this correspondence. For example, when a user specifies a usage environment, the configuration control unit 309 performs the settings for the setting items corresponding to the specified usage environment all at once. For example, usage environments such as a company LAN, a home environment, or a public space may be specified.

[0033] Furthermore, the configuration control unit 309 manages the correspondence between security policies and security-related configuration items, and can perform security-related settings based on this correspondence. For example, when a security policy is specified by a user, the configuration control unit 309 performs the settings for the configuration items corresponding to the specified security policy all at once. Possible security policies include, for example, not using weak encryption, not using plaintext communication, or prohibiting guest use.

[0034] Furthermore, the configuration control unit 309 manages the security-related configuration items that should be changed for each usage environment, as well as their default values ​​(default settings). The configuration control unit 309 notifies the management system 121 of the setting values ​​and default values ​​of such configuration items via the management system communication unit 310.

[0035] The management system communication unit 310 communicates with the management system 121 (server 250) and the MFP 100 via the network control unit 307 to send and receive information. Specifically, when a setting change is made in the MFP 100, the management system communication unit 310 notifies the management system 121 of the changed setting value (setting data). This makes it possible for the management system 121 to identify what settings the MFP 100 is operating under.

[0036] Furthermore, the management system communication unit 310 receives notifications from the management system 121 (server 250). For example, if the management system communication unit 310 receives a notification from the management system 121 that includes an instruction to change the settings of the MFP 100, it performs processing to change the setting value (setting data) held by the data storage unit 302 in accordance with the instruction.

[0037] In this way, the current configuration information of the MFP100 and the configuration information of the MFP100 held by the management system 121 (server 250) are synchronized. This allows the management system 121 (server 250) to check the current configuration information of the MFP100 and change the settings of the MFP100.

[0038] <Functional Configuration of the Management System (Server)> Figure 3(B) is a block diagram showing an example of the software configuration (example of functional configuration) of the management system 121 (server 250). The functions of each block shown in Figure 3(B) can be realized by the CPU 251 reading the program stored in the HDD 255 into the DRAM 252 and executing it.

[0039] The browser communication unit 351 communicates with a web browser running on an external device such as the PC 113. For example, in response to a request received from a web browser running on an external device, the browser communication unit 351 sends image data (screen data) for displaying the web browser screen to the web browser. Also, when the browser communication unit 351 receives data indicating the user's actions on the web browser screen, it performs processing corresponding to those actions (for example, processing associated with display objects such as buttons that were operated on the web browser screen).

[0040] The data storage unit 352 accesses the HDD 255 (saves data and reads saved data) based on requests from each functional unit (control unit). For example, if a user wants to change some device settings, the browser communication unit 351 receives the changes from an external device and requests the data storage unit 352 to save the setting values ​​(setting data) corresponding to the received changes. The data storage unit 352 saves the setting values ​​to the HDD 255 according to the request from the browser communication unit 351. The data storage unit 352 may also store various data in distributed resources on the cloud.

[0041] The data storage unit 352 stores attribute information for each security-related setting item on the HDD 255 (or a distributed resource in the cloud). The attribute information includes, for example, the following: - Information indicating whether or not a setting item is subject to control based on security policies. - Information indicating whether or not a setting item is subject to control according to the security settings manual. - Information indicating whether or not the setting item is included in the setting category selectable via the operation unit 102. - Information indicating whether or not it is a required setting item for network connectivity. - Information indicating whether or not it is a required setting item for cloud connectivity. - Information indicating whether or not it is a required setting item for detecting setting changes.

[0042] The authentication control unit 353 authenticates users of the management system 121 (server 250) using authentication information obtained by the browser communication unit 351 and account information stored by the data storage unit 352. The MFP communication unit 354 controls communication with the MFP 100.

[0043] The management information control unit 355 performs processing to generate content for management information to be displayed to users such as administrators who have been authenticated by the aforementioned authentication on an external device such as a PC 113 via the browser communication unit 351. For example, when the management information control unit 355 displays information indicating that security-related settings have not been changed from the default settings, it processes the data held by the data storage unit 352 to generate appropriate screen data that displays that information.

[0044] <Example of a management system operation screen> Figure 4(A) shows an example of an operation screen for managing the MFP100, the management screen 400, which is displayed by a web browser running on PC113. The management screen 400 is an operation screen provided by the management system 121 (server 250), and is displayed on PC113 by a web browser based on screen data transmitted from server 250 by browser communication unit 351. In this embodiment, server 250 provides an operation screen (management screen 400) to an external device (PC113) so that it can be displayed on the external device, which has detected that none of the settings of any of several specific setting items have been changed from their default settings. As a result, server 250 notifies the user of the detection result.

[0045] The administration screen 400 displays information about the MFP100 (managed MFP) associated with the account information of a user (administrator) logged into the management system 121, and provides a function for managing the MFP100. In this example, the administration screen 400 includes a label 401, a status display 402, a link 403, and a checkbox 404.

[0046] Label 401 is a label indicating a security configuration diagnosis according to this embodiment, which notifies the user (administrator) that there is a possibility that the security settings of the managed MFP100 need to be reviewed. In the security configuration diagnosis, the security-related settings of the MFP100 are diagnosed based on the detection of whether or not security-related settings that should be changed according to the usage environment of the MFP100 have been changed from the default settings.

[0047] Status display 402 notifies the user (administrator) of the diagnostic results regarding the security-related settings of the managed MFP100, based on the detection of whether or not the security-related settings of the MFP have been changed from the default settings. In other words, display 402 shows the diagnostic results corresponding to label 401. For example, status display 402 will show "OK" if there are no problems with the security-related settings of the MFP100 as a result of the above diagnostic, and "NG" if there are problems.

[0048] Link 403 is a link to a web manual (security settings manual) that describes the settings required for security measures for the managed MFP100. The security settings manual describes the settings that should be made if it is detected that the security-related settings on the managed MFP100 have not been changed from the default settings (i.e., if a diagnosis result indicating a problem with the security-related settings is obtained). Thus, Link 403 is an example of a link to a settings manual for configuring security-related settings according to the usage environment of the MFP100.

[0049] When link 403 is selected by the user (administrator), the web screen (operation screen 410) exemplified in Figure 4(B) is displayed on PC 113 via a web browser. Link 403 is a link to the security settings manual corresponding to the MFP100 model being managed. By displaying status display 402 and link 403 together on the management screen 400 in this way, users can be smoothly prompted to check the detailed settings necessary for security measures of the MFP100.

[0050] The check box 404 is used to set a setting (warning suppression setting) to make it unnecessary to execute a process that detects whether security-related settings have been changed from the default settings and performs a warning display as necessary when such execution of the process is unnecessary. When the MFP 100 is installed in a usage environment where such execution of the process is unnecessary, the user (administrator) can use the setting using the check box 404. In the present embodiment, the check box 404 is an example of a display object for setting to stop notification of the detection result that none of the settings of a specific plurality of setting items have been changed from the default settings.

[0051] FIG. 4(B) shows an operation screen 410 for displaying a security setting manual as an example of an operation screen for security settings of the MFP 100 displayed by a web browser operating on the PC 113. The security setting manual may be provided by the management system 121 (server 250) or may be provided by a content management server (not shown) on the Internet 120.

[0052] The operation screen 410 includes links 411 to 413 to a web page showing a list of recommended setting values for each usage environment of the MFP 100. The link 411 is a link for displaying a list of recommended setting values for security-related setting items when the usage environment of the MFP 100 is a corporate LAN. The link 412 is a link for displaying a list of recommended setting values for security-related setting items when the usage environment of the MFP 100 is a home environment. The link 413 is a link for displaying a list of recommended setting values for security-related setting items when the usage environment of the MFP 100 is a public space.

[0053] <Example of MFP operation screen> Figure 5(A) shows a setting screen 500 for security settings as an example of an operation screen displayed on the control panel 102 of the MFP100. The setting screen 500 includes buttons 501 to 503 as a menu for checking and changing various security-related settings of the MFP100. Buttons 501 to 503 correspond to security-related setting categories (in this example, authentication settings, encryption settings, and firewall settings) that can be selected by the user (administrator) via the control panel 102. Each setting category contains setting items related to that setting category.

[0054] Button 501 is for displaying a settings screen (not shown) to check and change authentication settings. Authentication settings include, for example, the settings for functions to which authentication processing, such as user authentication, should be applied, and the settings for the authentication method to be applied. Button 502 is for displaying a settings screen (not shown) to check and change encryption settings. Encryption settings include, for example, the settings for functions to which encryption processing should be applied, and the settings for the encryption method to be applied. Button 503 is for displaying a settings screen (not shown) to check and change firewall settings. Firewall settings include, for example, settings to allow or deny communication for each IP address or network port.

[0055] Figure 5(B) shows an example of an operation screen displayed on the control panel 102 of the MFP100, specifically the settings screen 510 for setting security policies. The settings screen 510 includes buttons 511 to 513 as a menu for instructing the setting of security policies for controlling various security-related settings of the MFP100.

[0056] Button 511 is used to set a security policy that prohibits the selection of an encryption method with weak encryption strength for all functions using encryption processing among the functions of MFP100. MFP100 has a number of functions using encryption processing, and is configured to be able to individually select an encryption method for each of those functions. In such a configuration, by uniformly setting, as a security policy for all functions using encryption processing, a prohibition on the selection of an encryption method with weak encryption strength, it is possible to improve the convenience of MFP100 and prevent setting omissions.

[0057] Button 512 is used to set a security policy that prohibits communication in plain text (i.e., prohibits communication with encryption processing disabled) for all functions using communication processing among the functions of MFP100. Also, button 513 is used to set a security policy that prohibits guest login (i.e., prohibits guest use) for all functions to which authentication processing can be applied among the functions of MFP100.

[0058] MFP100 (setting control unit 309) performs settings for each setting item related to security according to the security policy set on the setting screen 510.

[0059] <MFP: Transmission Process of Setting Information> FIG. 6 is a flowchart showing an example of the procedure of a process for transmitting the setting information of MFP100, which is executed in MFP100, to the management system 121. The processing of each step in FIG. 6 is processing by the setting control unit 309, and is realized by the CPU 201 expanding the program stored in the flash ROM 211 into the DRAM 202 and reading out and executing the expanded program.

[0060] The MFP100 (setting control unit 309) starts processing according to the procedure in Figure 6 when predetermined transmission conditions for sending the MFP100's setting information to the management system 121 are met. In this embodiment, it is determined that the transmission conditions have been met when a predetermined transmission timing is reached, or when a change in the setting value held by the data storage unit 302 is detected. When a setting value held by the data storage unit 302 is changed, the detection of the change is notified from the data storage unit 302 to the setting control unit 309. The predetermined transmission timing may be, for example, a predetermined time elapsed since the previous transmission of setting information, or it may be a periodic timing for transmission once a day.

[0061] In S601, the MFP100 determines whether the predetermined transmission timing has been reached. If the predetermined transmission timing has been reached, it proceeds to S602; otherwise (i.e., if any change in a setting value is detected), it proceeds to S603.

[0062] In S602, the MFP100 transmits the setting information, including the setting values ​​for all security-related setting items in the MFP100, which are held by the data storage unit 302, to the management system 121 (server 250), and terminates the processing according to the procedure in Figure 6. In the transmission process in S602 and S604 described later, the setting control unit 309 passes the setting values ​​to be transmitted to the management system communication unit 310, and the management system communication unit 310 transmits the setting information, including these setting values, to the management system 121.

[0063] In this embodiment, in order to reduce the load on the transmission process in the MFP100, in S602, the setting values ​​of setting items that may be related to the security of the MFP100 are transmitted from among the setting values ​​of the multiple functions that the MFP100 has. In addition, the setting values ​​of setting items other than security-related setting items may also be transmitted, for example, the setting values ​​of all setting items of the MFP100, including security-related setting items, may be transmitted.

[0064] In this way, S602 periodically sends all security-related settings of the MFP100 to the MFP100. This ensures that even if the transmission of changed settings (S603 and S604) fails due to some factor (e.g., a communication failure or a power outage of the MFP100), the latest settings of the MFP100 are periodically reflected in the management system 121.

[0065] On the other hand, if the process proceeds from S602 to S603, the MFP100 determines whether or not a change has been detected in the setting value of a security-related setting item (i.e., it determines whether or not the setting item in which a setting change was detected is a security-related setting item). If the setting item in which a setting change was detected is not a security-related setting item, the MFP100 terminates the process according to the procedure in Figure 6. If the setting item in which a setting change was detected is a security-related setting item, the process proceeds to S604. In S604, the MFP100 sends the setting information, including the setting value of the setting item in which a setting change was detected, to the management system 121 (server 250), and terminates the process according to the procedure in Figure 6.

[0066] The determination process in S603 is performed, for example, by comparing the setting item in which a setting change has been detected with a pre-created list of setting items. This list can be created by broadly extracting from among the multiple setting items in the MFP100 that may have even a slight relevance to security, and then listing the extracted setting items.

[0067] In this embodiment, the identification of the configuration items subject to security configuration diagnosis of the MFP100 (security-related configuration items that need to be changed depending on the usage environment) (S702 in Figure 7) is performed in the management system 121 (server 250). Therefore, in S603, all configuration items that may be used as targets for security configuration diagnosis in the management system 121 may be included in the above list. Considering the possibility that the process of identifying targets for security configuration diagnosis in the management system 121 may change during its operation, security-related configuration items that are not subject to diagnosis may also be included as targets for sending configuration values ​​in S604. This makes it possible to ensure the flexibility of the management system 121.

[0068] Furthermore, in this embodiment, in order to reduce the load on the transmission process in the MFP100, in S603, the setting value of the setting item for which a setting change has been detected is transmitted only if the setting item may be related to the security of the MFP100. However, the MFP100 may be configured to transmit the setting value regardless of whether the setting item for which a setting change has been detected is a security-related setting item of the MFP100 or not. In that case, the MFP100 is configured to perform the processing in S604 without performing the determination process in S603.

[0069] As described above, according to the processing procedure in Figure 6, the MFP100 sends configuration information indicating the settings of the MFP100 to the server 250 at a predetermined transmission timing. Furthermore, in response to the detection of a change in the settings of the MFP100, the MFP100 sends configuration information indicating the settings of the setting items in which the change was detected to the server 250. This makes it possible to periodically reflect the current settings of the MFP100 in the server 250 (management system 121), and the transmission load can be reduced by sending configuration information (difference information) indicating the settings of the setting items in which the change was detected. The management system 121 (server 250) stores the configuration information received from the MFP100 on the HDD 255 (or a distributed resource on the cloud) using the data storage unit 352.

[0070] <Management System: Diagnostic Process for Security-Related Settings> Figure 7 is a flowchart illustrating an example of the procedure for diagnosing the security-related settings of the MFP100, which is performed in the management system 121 (server 250). This procedure diagnoses the security-related settings of the MFP100 by determining whether there are any changes from the default settings for setting items that need to be changed depending on the usage environment of the MFP100. Each step in Figure 7 is implemented in the server 250 by the CPU 251 expanding the program stored in the HDD 255 into the DRAM 252, and then reading and executing the expanded program.

[0071] When the server 250, which constitutes the management system 121, receives configuration information indicating the settings of the MFP 100 from the MFP 100, it starts processing according to the procedure in Figure 7. The received configuration information is stored on the HDD 255 (or a distributed resource on the cloud) by the data storage unit 352. If configuration information (difference information) including changed settings is received, the received difference information is reflected in the configuration information corresponding to the MFP 100 that is stored by the data storage unit 352.

[0072] In S701, Server 250 determines whether it has received configuration information (difficulty information) that includes the changed settings. If Server 250 has received difficulty information, it proceeds to S702. On the other hand, if Server 250 has received configuration information that includes the settings for all security-related settings of MFP100, rather than difficulty information, it proceeds to S708. As described above, MFP100 periodically sends configuration information that includes the settings for all security-related settings to the management system 121 (Server 250). Thus, when Server 250 receives the periodically sent configuration information, it proceeds from S701 to S708.

[0073] In S708, the server 250 compares the configuration information received from the MFP 100 with the corresponding configuration information for the MFP 100 held by the data storage unit 352 to determine whether or not there has been a change in any of the MFP 100's settings. If there is no change in settings, the server 250 terminates the process; if there is a change in settings, it proceeds to S702.

[0074] In S702, the server 250 performs an identification process to identify the configuration items to be diagnosed in the security-related configuration diagnosis, following the procedure shown in Figure 8, which will be described later. In S703, the server 250 obtains the current setting value for each configuration item identified as a target for diagnosis in S702, based on the configuration information received from the MFP 100 (configuration information held by the data storage unit 352). Furthermore, in S704, the server 250 obtains the default value for each configuration item identified as a target for diagnosis in S702. In other words, the server 250 obtains the default settings for each of several specific security-related configuration items among the multiple configuration items in the MFP 100.

[0075] Next, in S705, the server 250 compares the current setting value with the default value for each setting item identified as a target for diagnosis in S702 to determine whether there are any setting items where the current setting value differs from the default value. That is, based on the received configuration information, the server 250 detects whether the setting of each of several specific security-related setting items (setting items identified as targets for diagnosis) has been changed from the default setting. If the server 250 finds any setting items where the current setting value differs from the default value, it proceeds to S706. In S706, the server 250 generates a diagnostic result (detection result) indicating that there are no problems with the security-related settings. The server 250 saves the generated diagnostic result using the data storage unit 352 and terminates the process according to the procedure in Figure 7.

[0076] On the other hand, if the comparison in S705 shows that the current settings match the default values ​​for all setting items, the server 250 proceeds from S705 to S707. In S707, the server 250 generates a diagnostic result (detection result) indicating that there is a problem with the security-related settings. The server 250 saves the generated diagnostic result using the data storage unit 352 and terminates the process according to the procedure in Figure 7.

[0077] The diagnostic results stored by the data storage unit 352 may be used to notify the user. If the detection in S705 detects that none of the settings of any of the specific security-related configuration items (configuration items identified as targets for diagnosis) have been changed from their default settings, the server 250 may notify the user of the detection results.

[0078] For example, in response to a display request from a web browser running on PC113, server 250 sends screen data of the management screen 400, including the diagnostic results of the MFP100's security-related settings, to PC113. As a result, the management screen 400 is displayed on PC113 via the web browser. The diagnostic results of the MFP100's security-related settings are displayed as status display 402 on the management screen 400. In this way, the diagnostic results of the MFP100's security-related settings are notified to the user operating PC113.

[0079] As described above, the process shown in Figure 7 generates diagnostic results for display as status display 402 on the management screen 400. In other words, such diagnostic results can be generated based on the detection of whether or not security-related settings that need to be changed according to the usage environment of the MFP100 have been changed from the default settings.

[0080] <Management System: Identification Process for the Diagnostic Target (S702)> Figure 8 is a flowchart showing an example of the procedure for identifying the target of diagnosis (S702). The management system 121 (server 250) executes the procedure shown in Figure 8 for each setting item included in the configuration information received from the MFP. This identifies the setting items to be diagnosed in the security-related settings diagnosis (a specific set of settings related to security). The server 250 also performs the determination processing S801 to S806 described below based on the attribute information for each security-related setting item held by the data storage unit 352.

[0081] The specific multiple configuration items identified as targets for diagnosis (target configuration items) are defined as configuration items whose settings should be changed from their default settings to match the operating environment of the information processing device in order to make the determinations in S801 to S803. Specifically, the specific multiple configuration items include one or more of the following: configuration items whose settings are controlled based on the security policy set in the MFP100; configuration items whose settings are controlled based on the configuration manual for security-related settings in the MFP100; and configuration items included in the security setting categories that can be selected by user operation in the MFP100.

[0082] In S801, the server 250 determines whether the target setting item is a setting item that is controlled based on the security policy (i.e., a setting item whose settings are controlled collectively according to the security policy). The security policy can be set on the MFP 100 via the setting screen 510 displayed on the operation unit 102. If the target setting item is a setting item that is controlled based on the security policy, the server 250 proceeds to S804; otherwise, it proceeds to S802.

[0083] In S802, Server 250 determines whether the target setting item is a setting item subject to control based on the security setting manual. The security setting manual is provided via the operation screen 410. A setting item subject to control based on the security setting manual corresponds to a setting item included in the list displayed when a link corresponding to the MFP100 usage environment (any of links 411 to 413) is selected on the operation screen 410. For setting items included in the list corresponding to the usage environment, the settings are controlled according to that list. If the target setting item is a setting item subject to control based on the security setting manual, Server 250 proceeds to S804; otherwise, it proceeds to S803.

[0084] In S803, the server 250 determines whether the target setting item is a setting item included in the setting categories selectable on the MFP100's operation panel 102 (the setting categories presented on the setting screen 500). If the target setting item is a setting item included in the setting categories selectable on the MFP100's operation panel 102, the server 250 proceeds to S804; otherwise, it proceeds to S808.

[0085] S804-S806 are processes to exclude specific configuration items from the diagnostic target. Configuration items that require changes from the default settings for detection in S705 are excluded from a selection of specific configuration items. Specifically, one or more of the following are excluded from a selection of specific configuration items: configuration items for network connection, configuration items for connection to the cloud system (management system 121) including server 250, and configuration items for detection by server 250 in S7005.

[0086] This procedure excludes configuration items that are essential for the MFP100 to perform network connectivity, cloud connectivity, or diagnostics (detection of configuration changes) in the management system 121 (server 250) from the diagnostic process. This is to prevent situations where, if such configuration items were included in the diagnostic process, there would always be configuration items that are determined to have changed from their default settings, thus preventing the acquisition of accurate diagnostic results.

[0087] In S804, Server 250 determines whether the target configuration item is a required configuration item for network connectivity. A required configuration item for network connectivity is, for example, the IP address setting. If Server 250 determines that the target configuration item is a required configuration item for network connectivity, it proceeds to S808; otherwise, it proceeds to S805.

[0088] In this embodiment, the security-related settings of the MFP100 are diagnosed by the cloud system (management system 121) based on the configuration information transmitted from the MFP100. In order to enable the diagnosis of security-related settings in the cloud system, network connection settings (setting changes from the default settings) are required in the MFP100. If network connection settings are included in the diagnosis, there will always be settings that are determined to have been changed from the default settings, and an appropriate diagnosis result cannot be obtained. For this reason, the S804 process excludes the required network connection settings from the diagnosis.

[0089] In S805, server 250 determines whether the target configuration item is a required configuration item for cloud connectivity. Required configuration items for cloud connectivity may include, for example, address information that identifies the endpoint of the management system 121, or account information that associates the MFP 100 with a user. If the target configuration item is a required configuration item for cloud connectivity, server 250 proceeds to S808; otherwise, it proceeds to S806.

[0090] In this embodiment, in order to enable the diagnosis of security-related settings in the cloud system (management system 121), it is essential that the management system communication unit 310 in the MFP 100 be configured to notify the management system 121 of information. For this reason, similar to S804, the processing in S805 excludes the essential settings for cloud connection from the diagnostic target.

[0091] In S806, Server 250 determines whether the target configuration item is a required configuration item for detecting (diagnosing) configuration changes related to the network settings of MFP100. Required configuration items for detecting configuration changes include, for example, enabling / disabling the security log function. If Server 250 determines that the target configuration item is a required configuration item for detecting configuration changes, it proceeds to S808; otherwise, it proceeds to S807.

[0092] In this embodiment, the security log function must be enabled on the MFP100 in order for the management system communication unit 310 to notify the management system 121 (server 250) of configuration information. The security log function is a function that records the configuration item to be changed and the date and time of the change as a log by the data storage unit 302 when a change occurs in the configuration value held by the data storage unit 302. The created log can be checked by a user (administrator) at any time and used for management tasks such as security audits. Notifying the management system 121 of configuration information is equivalent to a cloud-extended version of the security log function. For this reason, similar to S804 and S805, the processing in S806 excludes the essential configuration items for detecting configuration changes regarding the network-related settings of the MFP100 from the diagnostic target.

[0093] In S807, Server 250 determines that the target configuration item is subject to diagnosis and terminates the process in S702. On the other hand, in S808, Server 250 determines that the target configuration item is not subject to diagnosis and terminates the process in S702. By performing the determination in S807 or S808 for each configuration item included in the configuration information received from the MFP, the configuration items that are subject to security-related configuration diagnosis are identified.

[0094] As described above, the process shown in Figure 8 allows for the identification of security-related settings that need to be modified depending on the operating environment of the MFP100, and these settings can be identified as targets for diagnosis. Note that some of the processes S801 to S806 may be omitted depending on the operating configuration of the MFP100 and the management system 121.

[0095] <Example of security settings diagnostic> Thus, in this embodiment, if even one of the specific security-related settings of the MFP100 has been changed from its default value, a diagnostic result indicating that there are no problems with the security-related settings of the MFP100 is generated. Below, an example of the security setting diagnostic and its diagnostic results in this embodiment will be described.

[0096] In this embodiment, security measures for information devices (information processing devices) such as MFPs are difficult to implement completely with the information device alone and may need to be combined with security measures in the environment in which the information device is used. As an example of such security measures (security-related settings), the version of the encryption algorithm used for encrypting communications will be explained.

[0097] While the latest version of an encryption algorithm offers robust attack resistance, it cannot be used if the communication partner's information equipment cannot interpret that version of the algorithm. Generally, information equipment with long replacement intervals, such as industrial equipment, may not be equipped with the latest version of the encryption algorithm. For example, when information equipment equipped with the latest version of the encryption algorithm communicates with industrial equipment that does not have that version, it is necessary to restrict the version of the encryption algorithm used to an older version. In such cases, additional security measures in the information equipment's environment, such as installing a firewall or implementing strict access restrictions, are necessary to mitigate (eliminate) the security risks associated with using an older version of the encryption algorithm.

[0098] As in the example above, if an information device is configured to deliberately restrict the use of an older version of its encryption algorithm, it can be assumed that the user (administrator) has taken other security measures in place after considering the security risks. On the other hand, a high-risk scenario is when a user, regardless of the usage environment, assumes that the default settings at the time of installation are sufficient for the security of the information device and continues to use the device without thoroughly checking the security-related settings.

[0099] In this embodiment, upon detecting that the information device (MFP100) is being used with the security-related settings at their default settings, the user is notified to prompt a change in the security-related settings. If, as a result of checking the security risks of the information device, it is confirmed that security can be ensured without changing the security-related settings from the default settings, the warning may be disabled (for example, using checkbox 404 on the management screen 400).

[0100] Table 1 below shows examples of configuration patterns and corresponding diagnostic results for specific security-related settings. Table 1 exemplifies specific security-related settings such as the minimum version of SMB (Server Message Block), enabling / disabling RUI (Remote User Interface), and enabling / disabling tamper detection.

[0101] [Table 1]

[0102] Setting a minimum SMB version restricts the version of SMB that information devices can use. In this example, the default setting is version 2.0 as the minimum version. For example, version 1.0 may be set as the minimum version to ensure compatibility with older information devices, while version 3.0 may be set as the minimum version to enhance security.

[0103] A RUI (Remote User Interface) is a function that allows information devices to be controlled remotely from an external device via a web browser. In this example, the RUI is enabled by default to ensure the usability of the information device. For example, in a usage environment connected to a network used by a large number of people, the RUI may be disabled to reduce the risk of information devices being attacked using the RUI.

[0104] The tampering detection function verifies whether the control program (control software) of an information device has been tampered with while the device is in operation. In this example, to prevent a decrease in the performance of the information device due to the activation of the tampering detection function, the tampering detection function is disabled by default. For example, in an environment where there is a possibility of attacks aimed at tampering with the control program, the tampering detection function may be enabled while tolerating a decrease in the performance of the information device.

[0105] Table 1 shows examples of setting patterns (Patterns A to C) for the above-mentioned settings (SMB minimum version, RUI, and tamper detection function), and the diagnostic results (judgment results) when the above-mentioned diagnosis is performed for each pattern. Similar to the status display 402 of the management screen 400 shown in Figure 4, "OK" is displayed as the diagnostic result if there are no problems with the security-related settings of the information device (MFP100), and "NG" is displayed if there are problems. Specifically, if the setting values ​​of any of the above-mentioned settings have not been changed from the default values, the diagnostic result will be "NG," and if the setting value of any one of the settings has been changed from the default value, the diagnostic result will be "OK."

[0106] Pattern A shows an example where all of the above settings remain at their default values. In this case, it is impossible to determine whether the administrator considered appropriate settings based on the usage environment of the information device (MFP100). Specifically, if the settings in Pattern A were made as a result of the administrator's decision on whether or not to disable the RUI and whether or not to enable the tamper detection function, there is no problem. However, in many cases, information devices are operated in a state of security risk without the need to change security-related settings being noticed. Therefore, in cases like Pattern A, where the security-related settings of the information device have not been changed from the default settings, it is important to warn the user (administrator) about such settings in order to eliminate security risks. Accordingly, in cases like Pattern A, where specific security-related settings have not been changed from the default settings, "NG" is generated as the diagnostic result (judgment result) in order to enable a warning to the user.

[0107] Pattern B shows an example where the minimum SMB version has been raised to version 3.0 and the tamper detection function has been enabled. When settings like Pattern B are made, it is assumed that the information equipment is being used in an environment with security risks, and that the administrator has considered such security risks before making the settings. In other words, it is assumed that the security risks of the information equipment have been thoroughly considered and security measures have been taken, so the diagnostic result (judgment result) is "OK". Although the RUI has not been disabled, it is assumed that the administrator has considered the security risks and taken additional security measures such as installing a firewall before enabling the RUI. Thus, it is not possible to determine whether it is appropriate for the setting value of a single setting item (RUI in this example) not to be changed from the default value, but if the settings of other setting items have been changed, it can be determined that there is a high possibility that the administrator has made appropriate settings.

[0108] Pattern C shows an example where the minimum SMB version has been lowered to version 1.0. When a setting like Pattern C is implemented, it is assumed that the information equipment is being used in an environment where an older file server with version 1.0 SMB is installed. In such an environment, it is assumed that the administrator has intentionally lowered the minimum SMB version that the information equipment can use, while also taking additional security measures such as isolating the information equipment's environment from the external network. In other words, it is assumed that the security risks of the information equipment have been thoroughly considered and security measures have been taken, so the diagnostic result (judgment result) is "OK".

[0109] As described above, the server 250 in this embodiment receives configuration information indicating the settings of the MFP 100 (information processing device). The server 250 obtains the default settings for each of several specific security-related configuration items among the multiple configuration items of the MFP 100. Based on the received configuration information, the server 250 detects whether the settings of each of the specific configuration items have been changed from their default settings. Furthermore, if the server 250 detects that none of the settings of the specific configuration items have been changed from their default settings, it notifies the user of the detection result.

[0110] This makes it possible to make users who manage the MFP100 (information processing device) aware that the security-related settings on the MFP100 have not been changed from their default settings. In other words, it makes it possible to appropriately make users aware of the need to review the security-related settings on the MFP100. Therefore, even if users who manage the MFP100 do not have sufficient knowledge of security, they will be able to appropriately configure security-related settings according to the usage environment of the MFP100.

[0111] [Second Embodiment] In the second embodiment, an example of performing diagnostic processing on security-related settings of an information device (information processing apparatus), which is an edge device, in an information processing system will be described. Note that descriptions of parts common to the first embodiment will be omitted, and mainly descriptions of parts different from the first embodiment will be given.

[0112] In the MFP100 of this embodiment, the management system communication unit 310 (FIG. 3) does not have to perform synchronization processing of the setting information of the MFP100 with the management system 121. This is because diagnostic processing of security-related settings based on the setting information is performed on the MFP100 side instead of the management system 121 side. Also, in this embodiment, the attribute information regarding each setting item related to security, which was held by the data storage unit 352 of the server 250 (management system 121) in the first embodiment, is held by the data storage unit 302 of the MFP100. This is to enable execution of specific processing of diagnostic targets based on the attribute information on the MFP100 side. Note that the data storage unit 352 of the management system 121 does not have to hold the attribute information.

[0113] <Example of the operation screen of the MFP> FIG. 9(A) shows a menu screen 900 as an example of an operation screen displayed on the operation unit 102 in the MFP100. The menu screen 900 includes buttons 901 to 903 corresponding to the copy function, scan function, and setting function of the MFP100, respectively, and an information notification unit 904 used to notify a user of information.

[0114] If the configuration control unit 309 detects, as a result of diagnosing the security-related settings of the MFP100, that the security-related settings have not been changed from their default settings, it may display a message (warning display) to the information notification unit 904 to indicate this. This message notifies the user (administrator) that the security-related settings have not been changed from their default settings and assists the user in changing those security-related settings. In this way, the configuration control unit 309 displays an operation screen (menu screen 900) on the operation unit 102 that includes a message indicating the detection result that none of the settings of any of the specific security-related setting items have been changed from their default settings.

[0115] When the information notification unit 904 is touched by the user while the above message is displayed, the setting control unit 309 can switch the display screen of the operation unit 102 to a setting screen as shown in Figure 9(B). In this way, the setting control unit 309 can switch the display screen of the operation unit 102 to a setting screen (setting screen 910) for making security-related settings according to the usage environment of the MFP 100, in accordance with the user operation on the menu screen 900.

[0116] Furthermore, the notification of the above message in the information notification unit 904 of the menu screen 900 may be limited to when a user with administrator privileges is logged in. This prevents inadvertently notifying a user without administrator privileges that security-related settings are still at their default settings when they are operating the operation unit 102.

[0117] FIG. 9(B) shows a setting screen 910 for security settings as an example of an operation screen displayed on the operation unit 102 in the MFP 100. The setting screen 910 includes buttons 911 to 913, a check box 914, and an information notification section 915. Button 911 is used to collectively perform settings suitable for the case where the usage environment of the MFP 100 is a corporate LAN for security-related setting items. Button 912 is used to collectively perform settings suitable for the case where the usage environment of the MFP 100 is a home environment for security-related setting items. Button 913 is used to collectively perform settings suitable for the case where the usage environment of the MFP 100 is a public space for security-related setting items. When any one of the buttons 911 to 913 is touched (selected) by the user, the setting control unit 309 collectively performs the settings corresponding to the selected button. Buttons 911 to 913 are an example of display objects for instructing to collectively perform settings suitable for each usage environment of the MFP 100.

[0118] The check box 914 is used to perform a setting (warning suppression setting) to make it unnecessary to execute a process of detecting whether a security-related setting has been changed from the default setting and performing a warning display if necessary. By performing the warning suppression setting, the user can avoid the annoyance of unnecessary notifications when such warning displays are unnecessary.

[0119] Similar to the information notification section 904, the information notification section 915 is used to notify the user of information. Note that, similar to the notification in the information notification section 904, the message notification (warning display) in the information notification section 915 may be performed only when a user with administrator authority is logged in.

[0120] <MFP: Diagnostic Process for Security-Related Settings> Figure 10 is a flowchart showing an example of the procedure for diagnosing the security-related settings of the MFP100, which is performed in the MFP100. In this procedure, the security-related settings of the MFP100 are diagnosed by determining whether or not there have been any changes from the default settings for setting items that need to be changed depending on the usage environment of the MFP100. Each step in Figure 10 is processed by the setting control unit 309, and is realized by the CPU 201 expanding the program stored in the flash ROM 211 into the DRAM 202, and then reading and executing the expanded program.

[0121] When the MFP100 (settings control unit 309) detects a change in the setting value held by the data storage unit 302, it starts processing according to the procedure in Figure 7. First, in S1001, the MFP100 performs a specific process to identify the setting items to be diagnosed in the security-related settings diagnosis, according to the procedure in Figure 11, which will be described later.

[0122] Subsequently, in S1002, the MFP100 obtains the current setting value for each setting item identified as a target for diagnosis in S1001, based on the setting information held by the data storage unit 302. Furthermore, in S1003, the MFP100 obtains the default value for each setting item identified as a target for diagnosis in S1001.

[0123] Next, in S1004, the MFP100, similar to S705, compares the current setting value with the default value for each setting item identified as a target for diagnosis in S1001 to determine whether there are any setting items where the current setting value differs from the default value. If there are any setting items where the current setting value differs from the default value, the MFP100 proceeds to S1005. In S1005, the MFP100 generates a diagnostic result indicating that there are no problems with the security-related settings. The MFP100 saves the generated diagnostic result using the data storage unit 302 and terminates the process according to the procedure in Figure 10.

[0124] On the one hand, if, as a result of the comparison in S1004, the current setting values match the default values for all setting items, the MFP100 proceeds with the processing from S1004 to S1006. In S1006, the MFP100 generates a diagnostic result indicating that there is a problem with the security-related settings as the diagnostic result of the security-related settings. The MFP100 stores the generated diagnostic result by the data storage unit 302 and ends the processing according to the procedure in FIG. 10.

[0125] The diagnostic result stored by the data storage unit 302 can be used for notification to the user. For example, the MFP100 can use the diagnostic result for notification in the information notification unit 904 or 915.

[0126] Thus, through the processing according to the procedure in FIG. 10, a diagnostic result for notification in the information notification unit 904 or 915 can be generated. That is, such a diagnostic result can be generated based on detection of whether the security-related settings that need to be changed according to the usage environment of the MFP100 have been changed from the default settings.

[0127] <MFP: Specific Processing for Diagnostic Target (S1001)> FIG. 11 is a flowchart showing an example of the procedure of the specific processing for diagnostic target (S1001). The MFP100 specifies the setting items to be the diagnostic targets in the diagnosis of the security-related settings by executing the processing according to the procedure in FIG. 11 for each setting item included in the setting information held by the data storage unit 302. Further, the MFP100 performs the determination processing of S1101 to S1103 described below based on the attribute information regarding each security-related setting item held by the data storage unit 302.

[0128] In S1101, MFP100, similar to S801, determines whether the target setting item is a setting item controlled based on the security policy (i.e., a setting item whose settings are controlled collectively according to the security policy). If the target setting item is a setting item controlled based on the security policy, MFP100 proceeds to S1104; otherwise, it proceeds to S1102.

[0129] In S1102, MFP100, as in S802, determines whether the target setting item is a controllable setting item according to the security setting manual. If the target setting item is a controllable setting item according to the security setting manual, MFP100 proceeds to S1104; otherwise, it proceeds to S1103.

[0130] In S1103, the MFP100, similar to S803, determines whether the target setting item is included in the setting categories selectable on the MFP100's operation unit 102 (the setting categories presented on the setting screen 500). If the target setting item is included in the setting categories selectable on the MFP100's operation unit 102, the MFP100 proceeds to S1104; otherwise, it proceeds to S1105.

[0131] In S1104, the server 250 determines that the target setting item is a target for diagnosis and terminates the process in S1001. On the other hand, in S1105, the server 250 determines that the target setting item is not a target for diagnosis and terminates the process in S1001. In this way, the setting items that are subject to diagnosis of security-related settings are identified by performing the determination in S1104 or S1105 for each setting item included in the setting information held by the data storage unit 302.

[0132] As described above, the procedure shown in Figure 11 allows for the identification of security-related settings that need to be changed depending on the operating environment of the MFP100, and these settings can be identified as targets for diagnosis. Depending on the operating configuration of the MFP100 and the management system 121, some of the processes from S1101 to S1103 may be omitted.

[0133] As described above, the MFP100 of this embodiment holds configuration information indicating the settings of the MFP100, and obtains default settings for each of several specific security-related configuration items among the multiple configuration items of the MFP100. Based on the received configuration information, the MFP100 detects whether the settings of each of the specific configuration items have been changed from their default settings. Furthermore, if the MFP100 detects that none of the settings of the specific configuration items have been changed from their default settings, it notifies the user of the detection result.

[0134] This makes it possible to make users who manage the MFP100 (information processing device) aware that the security-related settings on the MFP100 have not been changed from their default settings. In other words, it makes it possible to appropriately make users aware of the need to review the security-related settings on the MFP100. Therefore, even if users who manage the MFP100 do not have sufficient knowledge of security, they will be able to appropriately configure security-related settings according to the usage environment of the MFP100.

[0135] Furthermore, the MFP100 may also notify the cloud system (management system 121) of the above detection results via the network.

[0136] [Differentiation] The management screen 400, as illustrated in Figure 4(A), may also be configured to display a link that transitions to a settings screen using the WebUI provided by the managed MFP (e.g., MFP100). This will be explained in detail. Server 250 stores the IP addresses and hostnames of the managed MFPs in storage such as HDD255 for the purpose of managing the managed MFPs. The browser communication unit 351 generates screen data that includes data for displaying a Web link based on the IP address and hostname, in addition to the data for displaying the aforementioned screen 400. At this time, Server 250 specifies the destination of the Web link as "http: / / IP address of the managed MFP" or "http: / / hostname of the managed MFP," etc. Subsequently, it sends the generated screen to the web browser of PC113. Note that this link can also be configured to be included only if the diagnostic result is NG. Furthermore, this Web link can be configured to open in a different tab than the currently open screen 400, as illustrated in Figure 4(A). Users viewing a screen containing a web link on PC113 can select that web link to navigate to a web page provided by the managed MFP, where they can view device information or change device settings.

[0137] Furthermore, if the diagnostic result is negative, the system can be configured to display additional notification messages recommending corrective actions to the user. For example, it can be configured to display a message indicating that security-related device settings have not been configured, or a message recommending that security settings be configured. In this case, the server 250 can generate screen data containing labels corresponding to the messages and provide it to the web browser.

[0138] The embodiments and modifications described above illustrate the display of warnings and recommendations for corrective actions when security-related settings remain unchanged from their default settings, but the system is not limited to these examples. In addition to warnings related to default settings, the system can also be configured to display other types of warnings on screen 400. This will be explained in detail. For example, suppose server 250 manages the firmware update status of the managed MFP. In this case, server 250 also manages the latest firmware version available on the market. Server 250 compares the firmware version applied to the managed MFP with the latest firmware version to determine whether the latest firmware is applied to the managed MFP. Subsequently, if server 250 determines that the latest firmware is not applied to the managed MFP, it generates screen data that further includes data for displaying a second warning regarding the firmware. The label for the second warning can be a label such as "Firmware Version Diagnosis," and the screen data can be configured to display "NG" for the corresponding diagnosis result. If server 250 determines that the latest firmware is applied to the managed MFP, the screen data can be configured to display "OK." Furthermore, when displaying a warning about the firmware, it is possible to configure the system to display additional information. For example, it can be configured to display information indicating that a newer version of the firmware is available.

[0139] [Other embodiments] The present invention can also be realized by supplying a program that implements one or more of the functions of the above-described embodiments to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be realized by a circuit (e.g., an ASIC) that implements one or more functions.

[0140] The invention is not limited to the embodiments described above, and various modifications and variations are possible without departing from the spirit and scope of the invention. Accordingly, claims are attached to disclose the scope of the invention. [Explanation of Symbols]

[0141] 100: MFP (Information Processing Unit), 113: PC, 121: Management System, 250: Server (Server Device), 101: Controller Unit, 201: CPU, 251: CPU< / mfp>

Claims

1. A server device capable of communicating with an information processing device, a receiving means for receiving setting information indicating a setting of the information processing device; an acquisition means for acquiring default settings for each of a plurality of specific setting items related to security among a plurality of setting items in the information processing device; a detection means for detecting whether or not each setting of the specific plurality of setting items has been changed from the default setting based on the setting information; a notification means for notifying a user of a detection result when the detection means detects that none of the settings of the specific plurality of setting items have been changed from the default settings; A server device comprising:

2. The specific plurality of setting items are defined as setting items whose settings should be changed from the default settings in accordance with the usage environment of the information processing device.

2. The server device according to claim 1.

3. The specific plurality of setting items include one or more of setting items whose settings are controlled based on a security policy set in the information processing device, setting items whose settings are controlled based on a setting manual for security-related settings in the information processing device, and setting items included in a security setting category that can be selected by a user operation in the information processing device.

3. The server device according to claim 1 or 2.

4. A setting item that requires a setting change from the default setting due to the detection by the detection means is excluded from the specific plurality of setting items.

4. The server device according to claim 1, wherein the server device is a server that performs the operations of the server device.

5. One or more of a setting item for connecting to a network, a setting item for connecting to a cloud system including the server device, and a setting item for the detection by the server device are excluded from the specific plurality of setting items.

5. The server device according to claim 4.

6. The notification means notifies the user of the detection result by providing an operation screen showing the detection result to an external device that can communicate with the server device so that the operation screen is displayed on the external device.

6. The server device according to claim 1, wherein the server device is a server that performs a plurality of operations.

7. The operation screen provided by the notification means includes a link to a setting manual for making security-related settings in accordance with the usage environment of the information processing device.

7. The server device according to claim 6.

8. The operation screen provided by the notification means includes a display object for setting to stop notification of the detection result.

8. The server device according to claim 6 or 7.

9. A server device according to any one of claims 1 to 8; an information processing device capable of communicating with the server device; An information processing system comprising: The information processing device includes a transmission means for transmitting setting information indicating a setting of the information processing device to the server device at a predetermined transmission timing, and for transmitting setting information indicating a setting of a setting item for which a change has been detected to the server device in response to detection of a change in the setting of the information processing device. An information processing system comprising:

10. An information processing device, a storage means for storing setting information indicating settings of the information processing device; an acquisition means for acquiring default settings for each of a plurality of specific setting items related to security among a plurality of setting items in the information processing device; a detection means for detecting whether or not each setting of the specific plurality of setting items has been changed from the default setting based on the setting information; a notification means for notifying a user of a detection result when the detection means detects that none of the settings of the specific plurality of setting items have been changed from the default settings; An information processing device comprising:

11. The specific plurality of setting items are defined as setting items whose settings should be changed from the default settings in accordance with the usage environment of the information processing device.

11. The information processing apparatus according to claim 10,

12. The specific plurality of setting items include one or more of setting items whose settings are controlled based on a security policy set in the information processing device, setting items whose settings are controlled based on a setting manual for security-related settings in the information processing device, and setting items included in a security setting category that can be selected by a user operation in the information processing device.

12. The information processing device according to claim 10 or 11.

13. A setting item that requires a setting change from the default setting due to the detection by the detection means is excluded from the specific plurality of setting items.

13. The information processing device according to claim 10, wherein the information processing device is a computer.

14. One or more of a setting item for connecting to a network, a setting item for connecting to a cloud system including a server device, and a setting item for the detection by the server device are excluded from the specific plurality of setting items.

14. The information processing apparatus according to claim 13,

15. The notification means notifies the user of the detection result by displaying an operation screen including a message indicating the detection result on a display unit of the information processing device.

15. The information processing device according to claim 10,

16. The notification means displays the message on the operation screen only when a user having administrator authority is logged in to the information processing device.

16. The information processing apparatus according to claim 15,

17. The notification means switches the display screen of the display unit to a setting screen for making security-related settings in accordance with a usage environment of the information processing device in accordance with a user operation on the operation screen.

17. The information processing device according to claim 15 or 16.

18. The setting screen includes a display object for instructing to perform settings suitable for each usage environment of the information processing device all at once.

18. The information processing apparatus according to claim 17,

19. A method for controlling a server device capable of communicating with an information processing device, comprising: a receiving step of receiving setting information indicating settings of the information processing device; an acquisition step of acquiring default settings for each of a plurality of specific setting items related to security among a plurality of setting items in the information processing device; a detection step of detecting whether or not each setting of the specific plurality of setting items has been changed from the default setting based on the setting information; a notification step of notifying a user of the detection result when it is detected in the detection step that none of the settings of the specific plurality of setting items have been changed from the default settings; 2. A method for controlling a server device, comprising:

20. A control method for an information processing device, comprising: a storage step of storing setting information indicating settings of the information processing device; an acquisition step of acquiring default settings for each of a plurality of specific setting items related to security among a plurality of setting items in the information processing device; a detection step of detecting whether or not each setting of the specific plurality of setting items has been changed from the default setting based on the setting information; a notification step of notifying a user of the detection result when it is detected in the detection step that none of the settings of the specific plurality of setting items have been changed from the default settings; 10. A method for controlling an information processing device, comprising:

21. A program for causing a computer to function as each of the means of the server device according to any one of claims 1 to 8.

22. A program for causing a computer to function as each of the means of the information processing device according to any one of claims 10 to 18.

23. the information processing device with which the server device communicates is a printing device, A server device as described in any one of claims 6 to 8, characterized in that the server device is capable of providing the external device with a screen showing information about consumables of the printing device, which is different from the operation screen showing the detection results, so that it can be displayed on the external device.

Images